last executing test programs: 21m16.079340679s ago: executing program 32 (id=548): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000180)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 6m47.477255786s ago: executing program 1 (id=2954): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) 6m47.428183564s ago: executing program 1 (id=2956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x1b) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0xca58c30f81b6079f}) 6m47.318328135s ago: executing program 1 (id=2958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000240)={@void, @void, @ipv6=@gre_packet={0x9, 0x6, "a80631", 0x321, 0x2f, 0x1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@dstopts={0x0, 0x9, '\x00', [@hao={0xc9, 0x10, @private0}, @pad1, @calipso={0x7, 0x20, {0x3, 0x6, 0xe, 0x2, [0x0, 0x532, 0x98ce]}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0x84af, [0x8000000000000001]}}]}, @hopopts={0x56, 0x10, '\x00', [@ra={0x5, 0x2, 0x2c}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x2, 0x65, [0x10000]}}, @calipso={0x7, 0x58, {0x1, 0x14, 0x5, 0xfc00, [0x2, 0x80000000, 0x3, 0x6, 0x100000001, 0x5, 0x1cd, 0xe41a, 0x0, 0x90ca]}}]}, @routing={0x21, 0x4, 0x1, 0x7, 0x0, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}]}, @fragment={0x62, 0x0, 0x3, 0x0, 0x0, 0x18, 0x67}, @fragment={0xc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x66}, @srh={0x5c, 0x4, 0x4, 0x2, 0xe2, 0x48, 0x3}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x57, 0x0, [], "f9443556dd17366382f06d64249e8026983a076e2f9afefc5ca3c400675a137ea283f970f2d177586e5d8f1889f8b93666dee6193007a754e5b5e2baade26cf94c3cdb927a12ca393f0cbd8a685d34013e58a32a841f1d"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x2, 0x0], "0f2c9046e736a4a976bf536c66b16d0e3b0f50f00f8253f1658cc56451f67cc63aaed5f9288b50d137847829b22ae77d29d26a993b05de9ef0432e272cd3097f6221"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x1973, 0x9, 0x0], "f841220864a67cd16d1edb68da8b7661d956e2cf450439539cc6d5d9ebee31a94dc2ed325697ece65c1adbb3cee3d3cd67e4e106f8b38ada1a8d38053486c15af8e2632d5889e1af0db6c1e2e38de97c9d881cb6afd8f3447d96596a252f96b04730d39c6f31847d26e8647392133c2867f3ffac86eec0ec09c4272f6660959fd324091e8d0a7c77709cc84102"}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0x6, 0x2, 0x0, 0x2, 0x4, 0x4}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0xa, 0x3, 0x0, 0x3, 0x6, 0x1}, 0x2, {0x100, 0x9, 0x2, 0x15, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "d3733b865d9cb7c38815056cc4864fa25da14b851041cca58106377d0933ecbc8e21d47a9d5a24b4850ee68e52a7b2ceb6ead5b9f7abc8a303675f8c519da806496a1df7781235432366c81b774ceaacdbf649fcbad6f6de85e1a9a9e8f0535ecb75ef19ea"}}}}}, 0x349) 6m47.23835338s ago: executing program 1 (id=2961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="21012cbd7000000000002b0000000800", @ANYRES32=r2, @ANYBLOB="0a0034000202020202020000080026006c0900001e001f"], 0x50}, 0x1, 0x0, 0x0, 0xf040}, 0x404ec94) 6m47.237957882s ago: executing program 1 (id=2962): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000480), 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0xd3a, &(0x7f0000000380)={0x0, 0x8010001, 0x1000, 0x200004, 0x8a}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 6m46.32791264s ago: executing program 1 (id=2986): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x20000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) close(0x4) 6m31.162369536s ago: executing program 33 (id=2986): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x20000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) close(0x4) 1m28.027124497s ago: executing program 2 (id=4895): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000002c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000003c0)={r3, 0xfffffffd, 0x81, 0x0, 0x3, [], [0x0, 0x0, 0x400, 0x9], [0x0, 0x8, 0xfffffffc], [0x7ffc, 0x0, 0xa]}) 1m27.684541333s ago: executing program 2 (id=4904): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x80, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @empty, 0x7}, 0x1c) listen(r3, 0xf58e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TCGETA(r5, 0x89f2, &(0x7f0000000400)) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0700ffffffff00001fff0201000000000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff"], 0x0) write(0xffffffffffffffff, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x8000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000020000000000000003000000850000001800180000002020207b1af8ff00247e0007010000f8ffffffb702000008000000b70300000000000085001000b0000000950000000000cdbfed0000000000000000"], &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000740)="e066fa07a10b5f8f601c7e9596d3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_generic(r11, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r13, 0x4140aecd, &(0x7f0000000280)={{0x2, 0x200000, 0x8, 0xfe, 0xa, 0x6, 0x8, 0xd, 0x9, 0x0, 0x6, 0x8}, {0xe000, 0x7000, 0xa, 0x2, 0x5, 0x7, 0x0, 0xf1, 0x2, 0x4, 0x2, 0x5}, {0x8080000, 0x41000, 0xa, 0x40, 0x4, 0xb4, 0x50, 0x0, 0x2, 0xb2, 0x5, 0x5}, {0x26000, 0xc000, 0xc, 0x4, 0xae, 0x67, 0xb, 0x4, 0x86, 0x2, 0x7f, 0x1}, {0x30000, 0xc000, 0x4, 0xf6, 0x6, 0xfd, 0xda, 0x5, 0x2, 0x2, 0xeb, 0xe8}, {0xdddd0000, 0x6000, 0x3, 0x10, 0x0, 0x1, 0x6, 0x40, 0xa, 0x0, 0x1, 0x52}, {0xa000, 0xf000, 0x8, 0x2, 0x5, 0x2, 0x0, 0xe, 0x80, 0x3f, 0x6, 0x8}, {0xdddd1000, 0x8000000, 0x3, 0x2, 0x2, 0x2, 0x8, 0x1, 0x3, 0x81, 0x2, 0x3}, {0x3331bff8, 0x4}, {0x8080000, 0x3}, 0x40002, 0x0, 0x200000, 0x552440, 0xa, 0x9400, 0x200000, 0x1, [0x80, 0x3, 0x7, 0x3]}) 1m25.037727528s ago: executing program 3 (id=4918): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x4, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000100), 0x0, 0x0, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ftruncate(0xffffffffffffffff, 0x8008976) set_mempolicy(0x4005, &(0x7f00000001c0)=0x7e, 0x6) fanotify_init(0x4, 0x800) add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x6, @multicast1, 0x15, 0x0, 'nq\x00', 0x0, 0x0, 0x50}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000340)={{0x2, @broadcast, 0x15, 0x0, 'rr\x00', 0x0, 0x10, 0xfffffffd}, {@loopback, 0x4e21, 0x0, 0x1, 0x0, 0xfffffffd}}, 0x44) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000480)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x21000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) r2 = socket(0x2b, 0x80801, 0x1) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001400010600000000000000002bfa8800010056ce280b93d41f2d601be545fd73b719382b3577393c4c59f8e4ba47fb91c98d6c0702808fdadbe26fe7e9c4fa63f38a271d5ab4394bfda34eed4332c988b5e2970e4a4709ce027b47fb6e9a7d185d7ae470c3eb7cdf43fcfdcd2a74f2428b288db4516c9b8409a02e6cd307872c08696d416b752758c2fda09ae6818d74986160df407b0000b322cf6ab1a5ebbadcc93f684f941ceb6850a36c4eaab8ce2eec63025e7a86b1d0db2c7f78f838e86d7df4b51ca56df34e36e53edb647ed17d4689bf9c1a"], 0x9c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000640)=0x0) bind$nfc_llcp(r2, &(0x7f0000000680)={0x27, r4, 0xffffffffffffffff, 0x3, 0x8, 0xc0, "99799755266425184c4f36b955d3db248efe38ab1cce85860db66f275148e2eb2731469b9f337f639524eab66d9060f12252119fe856ae668170f494c1a2ae", 0x2a}, 0x58) 1m24.760629182s ago: executing program 3 (id=4921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000009e40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r4, @ANYBLOB="2e003300d0000000080211000001080211000000505050505050000425", @ANYRES64=r1], 0x4c}}, 0x0) 1m24.586634713s ago: executing program 3 (id=4924): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6d, @f={0x7f, 0x3, 0x6, 0x2, 0x5d, 0x3, 0x3, {0x9, 0x80, "a87f9bfa6afad0fa55feda9f8f52d6642333adb496d70b07b828a9b949d8e7327279c5db353ec7dc7398a4cca889c4c71eb8b33890bfbb7adce5c08a8107510710ff3f21050fe2deccd81f44638a40edb60ad7a79dd45da46043e518dd7eb193c5dc533386efbf89a4df41efe8456e91ac46af94cb9064536c75e41230269ebf"}, 0x8, 0x3, 0x0, 0x8}}, 0x91) 1m24.50532894s ago: executing program 3 (id=4925): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x18d883, 0x0) mount$tmpfs(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x20000, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x3, 0x0, @dev, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000780)=0x9, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x68, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x2e, 0x7, 0x1, 0x0, "300f08422177a6561076311f8f14b707673deff15296f3a3c4187837a2d3052e579163b0aca2285ad396"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}, 0x1, 0x0, 0x0, 0x80040}, 0x24044010) capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000580)={0x0, 0xd, 0x0, 0x5, 0xffffffff, 0xfffffffd}) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000600)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149014006040800", 0x58}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1c104502}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x200000e8) 1m24.265778605s ago: executing program 2 (id=4928): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x40010, r0, 0x40000000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xb, 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x109c02, 0x0) poll(&(0x7f0000001640)=[{r2, 0x4022}], 0x1, 0xe13) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x5100, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000180)=""/137) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) mmap$IORING_OFF_PBUF_RING(0x0, 0x8, 0x1000008, 0x30, 0xffffffffffffffff, 0x82c10f7a) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0xfd) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x4000, 0x0) setns(0xc9, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000580)=[{&(0x7f0000001680)="5054759175d09048958f66f1e09aca42ad51c1c0ba1b47e76aac296b36bc9b66dcf802267fa7c26d4bc5d8ad2bda966024e588d4d563e019220711", 0x3b}], 0x1, 0xffffffff, 0x401) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001880)=ANY=[@ANYBLOB="3c00000010000d04d2fea4590000000000000000", @ANYRES32=r0, @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x44800) syz_open_dev$hidraw(&(0x7f00000003c0), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) r7 = io_uring_setup(0xf6d, &(0x7f0000000300)={0x0, 0xf446, 0x40000, 0x3, 0x100003e1}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/4095, 0x1ef6e3}], 0x100000000000011a) fcntl$getown(r2, 0x9) sendmmsg(r6, &(0x7f0000001640), 0x307017fdb7a66cb, 0x0) socket$unix(0x1, 0x5, 0x0) 1m23.682950059s ago: executing program 3 (id=4931): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000280), 0x0) 1m22.856047119s ago: executing program 3 (id=4938): connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x101180, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x32, 0x0, &(0x7f00000000c0)="c0fbedd8cbc20fb9b8209a08efe418dcbd8680924054903d770425382a1f1f7e6849bb01d62d0a01152cfdf1a05cbb40e804", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000005c0)={0x0, 0x4731, 0x400, 0x3, 0x279, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x100, 0x0, 0x8000, 0x1, 0xffffffffffffffff, 0xffff}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r11, r11, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r12, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r12, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @irqchip={0x2, 0x9}}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000940)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3, 0xc9, @none, 0x2, 0xf, 0x5, 0x142, 0xff01}}}, 0x14) syz_ublk_add_dev(r3, r4, r5, r6, 0x0, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x5c59, &(0x7f0000000440)={0x0, 0xcf5e, 0x1000, 0x2, 0x2e6, 0x0, r2}, &(0x7f00000004c0), &(0x7f00000008c0), &(0x7f0000000900)) syz_ublk_setup_queues(r2, r13, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x2, 0x20003, 0x0, r3}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b15, 0x1, 0x0, 0x8000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x0, 0xfffffffd, 0x68, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2fdf, 0x20, 0x1, 0x81, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4000624f, 0x4000, 0x0, 0x61, 0x0, r3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xe53, 0x0, 0x0}}, 0x0) 1m22.792926831s ago: executing program 34 (id=4938): connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x101180, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x32, 0x0, &(0x7f00000000c0)="c0fbedd8cbc20fb9b8209a08efe418dcbd8680924054903d770425382a1f1f7e6849bb01d62d0a01152cfdf1a05cbb40e804", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000005c0)={0x0, 0x4731, 0x400, 0x3, 0x279, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x100, 0x0, 0x8000, 0x1, 0xffffffffffffffff, 0xffff}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r11, r11, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r12, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r12, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @irqchip={0x2, 0x9}}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)) syz_emit_vhci(&(0x7f0000000940)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3, 0xc9, @none, 0x2, 0xf, 0x5, 0x142, 0xff01}}}, 0x14) syz_ublk_add_dev(r3, r4, r5, r6, 0x0, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x5c59, &(0x7f0000000440)={0x0, 0xcf5e, 0x1000, 0x2, 0x2e6, 0x0, r2}, &(0x7f00000004c0), &(0x7f00000008c0), &(0x7f0000000900)) syz_ublk_setup_queues(r2, r13, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x2, 0x20003, 0x0, r3}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b15, 0x1, 0x0, 0x8000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x0, 0xfffffffd, 0x68, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2fdf, 0x20, 0x1, 0x81, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4000624f, 0x4000, 0x0, 0x61, 0x0, r3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xe53, 0x0, 0x0}}, 0x0) 1m22.772173152s ago: executing program 2 (id=4940): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x18d883, 0x0) 1m22.676884527s ago: executing program 2 (id=4941): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x18d883, 0x0) mount$tmpfs(0x0, &(0x7f0000000740)='./file0\x00', 0x0, 0x20000, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x3, 0x0, @dev, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000780)=0x9, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x68, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x2e, 0x7, 0x1, 0x0, "300f08422177a6561076311f8f14b707673deff15296f3a3c4187837a2d3052e579163b0aca2285ad396"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}, 0x1, 0x0, 0x0, 0x80040}, 0x24044010) capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000580)={0x0, 0xd, 0x0, 0x5, 0xffffffff, 0xfffffffd}) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000600)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149014006040800", 0x58}], 0x1) 1m22.317062059s ago: executing program 2 (id=4942): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x8002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x403c5404, &(0x7f00000003c0)={{0x1, 0x0, 0x400006, 0x3}, 0x1, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x7}) 1m22.25320524s ago: executing program 35 (id=4942): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x8002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x403c5404, &(0x7f00000003c0)={{0x1, 0x0, 0x400006, 0x3}, 0x1, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x7}) 1m16.428769964s ago: executing program 7 (id=4983): r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f00000035c0)="64000000100001060000000000000000000000007fff00000000000000000000100005007665746830000000000000002400120008000100766574681800020014000100000000000900000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000000c0), 0x318, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000003880)=@mangle={'mangle\x00', 0x2, 0x6, 0x694, 0x13c, 0x13c, 0x13c, 0x504, 0x0, 0x5cc, 0x5cc, 0x5cc, 0x5cc, 0x5cc, 0x6, 0x0, {[{{@uncond, 0x0, 0x118, 0x13c, 0x0, {0x7a00000010000000}, [@common=@unspec=@cluster={{0x30}, {0x4, 0xb, 0x5}}, @common=@unspec=@helper={{0x44}, {0x1, 'syz0\x00'}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {}, {0x2, 0x0, 0x7}, 0x800003, 0xfffffffe}}}, {{@uncond, 0x0, 0x200, 0x228, 0x48000000, {}, [@inet=@rpfilter={{0x24}, {0xb}}, @common=@rt={{0x138}, {0x7, [0x7, 0x2], 0x1, 0x2, 0x1, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @empty, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x38}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @empty, @dev={0xfe, 0x80, '\x00', 0x29}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], 0xd}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8fd, 0x5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @local, [0xff, 0xffffffff, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff000000], '\x00', 'sit0\x00', {0xff}, {0xff}, 0x88, 0x4, 0x2, 0x2}, 0x0, 0xa4, 0xc8}, @HL={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6f0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/33, 0x21, 0x73) lseek(0xffffffffffffffff, 0x4, 0x0) recvmmsg(r1, &(0x7f0000004a00)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000024c0), 0x0, &(0x7f0000002500)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000003500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000004980), 0x0, &(0x7f0000003f80)=""/49, 0x31}, 0xa1e7}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003640)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000003680)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "fbeba0", 0x60, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0x3, 0x6, "210e00", 0xf648, 0x0, 0x1, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@srh={0x29, 0x0, 0x4, 0x0, 0xfc, 0x48, 0x205}, @hopopts={0x5c, 0x3, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0xa1, 0x1000, [0x10, 0x5]}}]}]}}}}}}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00009eb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='environ\x00') read$FUSE(r5, &(0x7f0000000380)={0x2020}, 0xffffffb2) r6 = add_key$user(&(0x7f0000000140), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000002400)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003740)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003800)="dd9e", 0x2}], 0x1, &(0x7f0000003840)=ANY=[@ANYBLOB="100000d0f457d539c90cae00"], 0x10, 0x20000041}}], 0x1, 0xc004) stat(&(0x7f0000002440)='./file0\x00', &(0x7f0000002480)) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setns(0xc9, 0x0) socket(0x2a, 0x2, 0x5) close_range(r8, 0xffffffffffffffff, 0x0) 1m15.316724463s ago: executing program 7 (id=4997): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149014006040800", 0x58}], 0x1) 1m15.230176431s ago: executing program 7 (id=4998): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000040), 0x46, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') read$FUSE(r2, &(0x7f0000000900)={0x2020}, 0x206f) ioctl$MEMGETBADBLOCK(r1, 0x40084d0b, &(0x7f0000000080)=0x20000) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) socket(0x23, 0x6, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@snapshot={0x0, 0xc88, 0x0, 0x60, 'snapshot-merge\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, 'p', 0x20, '128'}}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x5800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x168, 0x138, 0x0, 0x0, 0x4600, 0x0, 0x0, @by_dev={r3}, {0x3000, @thin_create={'create_thin ', 0x2}}}) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x2, 0x0) write$P9_RAUTH(r4, &(0x7f0000000600)={0x14, 0x67, 0x2, {0x82, 0x4, 0x3}}, 0x14) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$XFS_IOC_INUMBERS(r5, 0x80405880, &(0x7f0000002940)={{0x2, 0x4, 0x3, 0x9, 0x2}, [{0x1, 0xfffffffffffffff7, 0x5, 0x5}, {0x4f, 0x49dc9d39, 0x2, 0x1}, {0x2, 0xfffffffffffffff8, 0xeb, 0x5}, {0x3, 0x5, 0x1, 0x3}, {0xf, 0x7, 0x0, 0x30}, {0x81, 0x10, 0x5}]}) 1m14.966250042s ago: executing program 7 (id=5000): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x18d883, 0x0) 1m14.965747299s ago: executing program 7 (id=5001): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f00000000c0)={0x1fe, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000180)={0x7000, 0x100000}) close(r2) 1m14.654397378s ago: executing program 7 (id=5003): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6d, @f={0x7f, 0x3, 0x6, 0x2, 0x5d, 0x3, 0x3, {0x9, 0x80, "a87f9bfa6afad0fa55feda9f8f52d6642333adb496d70b07b828a9b949d8e7327279c5db353ec7dc7398a4cca889c4c71eb8b33890bfbb7adce5c08a8107510710ff3f21050fe2deccd81f44638a40edb60ad7a79dd45da46043e518dd7eb193c5dc533386efbf89a4df41efe8456e91ac46af94cb9064536c75e41230269ebf"}, 0x8, 0x3, 0x0, 0x8}}, 0x91) 1m14.54303853s ago: executing program 36 (id=5003): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6d, @f={0x7f, 0x3, 0x6, 0x2, 0x5d, 0x3, 0x3, {0x9, 0x80, "a87f9bfa6afad0fa55feda9f8f52d6642333adb496d70b07b828a9b949d8e7327279c5db353ec7dc7398a4cca889c4c71eb8b33890bfbb7adce5c08a8107510710ff3f21050fe2deccd81f44638a40edb60ad7a79dd45da46043e518dd7eb193c5dc533386efbf89a4df41efe8456e91ac46af94cb9064536c75e41230269ebf"}, 0x8, 0x3, 0x0, 0x8}}, 0x91) 45.05648997s ago: executing program 4 (id=5238): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0x0, 0x7fc00100}]}) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1, 0x80001, 0x80000004}) 44.156472529s ago: executing program 4 (id=5250): r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/pci/rescan\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) write(r0, &(0x7f0000000c40)='1', 0x1) 44.156252094s ago: executing program 4 (id=5251): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000003c0)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) dup2(r1, r0) (fail_nth: 1) 44.075498058s ago: executing program 4 (id=5252): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x18d883, 0x0) 44.074884221s ago: executing program 4 (id=5253): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat$md_node(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x1263, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='270', 0x3) getsockopt$inet6_buf(r1, 0x29, 0xca, 0x0, 0x0) r2 = socket$inet6(0xa, 0x805, 0x0) r3 = fsopen(&(0x7f0000000000)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000180)='.\x00', r4, &(0x7f0000000200)='./file0\x00') readlinkat(r4, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)=""/204, 0xcc) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f00000004c0)=""/4060, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xc) unshare(0x40000000) 43.816884012s ago: executing program 4 (id=5254): r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000001800)={0x2, 0x0, @empty, 0xbffffffe}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001840)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420004073483c00000000ffffffff00000000c0"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001880)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420014073483b00000000ffffffff"], 0x0) syz_emit_ethernet(0x2a, &(0x7f00000018c0)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123400024073683a00000000ffffffff"], 0x0) 43.728634329s ago: executing program 37 (id=5254): r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000001800)={0x2, 0x0, @empty, 0xbffffffe}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001840)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420004073483c00000000ffffffff00000000c0"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001880)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420014073483b00000000ffffffff"], 0x0) syz_emit_ethernet(0x2a, &(0x7f00000018c0)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123400024073683a00000000ffffffff"], 0x0) 28.633294005s ago: executing program 6 (id=5344): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xca, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x2, 0x82e, 0x0, 0x0, 0x1000, 0xf, 0xffffffffffffffff, 0x0, 0x60}}}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x280000a, 0x200000005c832, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000640)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000680)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 28.544796615s ago: executing program 6 (id=5346): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f000002f3c0), 0x700, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000001c0)='binfmt_misc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dm_control(0xffffff9c, &(0x7f000002f400), 0x202, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f000002f440)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x800, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f000002f800)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x4600, 0x0, 0x0, @by_dev={r2}, [@integrity={0x0, 0x400, 0x0, 0x88, 'integrity\x00', {{@ram_num={'1:', 0x1}, 0x20, '4096'}, 0x20, '8', 0x20, 'J', ' 1 journal_crypt:ctr(aes):0123456789abcdef0123456789abcdef'}}]}) 28.476024151s ago: executing program 6 (id=5350): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=@newqdisc={0x180, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x3, 0xf0, 0x4, 0x1, 0x6, 0x9, 0x2}}, {0x8, 0x2, [0x22f9, 0x6]}}, {{0x1c, 0x1, {0x9, 0x7, 0x800, 0x1, 0x0, 0x9, 0xfffffffa, 0xa}}, {0x18, 0x2, [0x4, 0xc3d7, 0x0, 0x8, 0x6, 0x3ff, 0x5, 0xff, 0x1, 0x5]}}, {{0x1c, 0x1, {0x6, 0x5, 0x5, 0x6, 0x0, 0x5, 0xd, 0x9}}, {0x16, 0x2, [0xdd2a, 0x0, 0x7, 0x8, 0xe, 0x4, 0x0, 0x5, 0x24]}}]}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xc, 0x101, 0x400, 0xffffffff}, 0x1000, 0x1, 0x6, 0x10001, 0x9, 0x1c, 0x1f, 0x7, 0x3, 0x4, {0x2, 0x3, 0x8, 0x80000000, 0xf8, 0xe0000}}}}]}, 0x180}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="403ad16ff5004b01e90000c9610000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000c9910200200012800b0001006272696467650000100002800c00210080000000000020"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x50}}, 0x4008840) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./pipe\x00', &(0x7f0000000680)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./pipe/gssd/clntXX/gssd\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="6a0afaff270f0000bfa200000000000007020000f0ffffffb70300000a000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000005600000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r5, 0x0, 0xe, 0x0, &(0x7f0000000b00)="58f47a07c4ab0000000000000000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x4c) 27.497805993s ago: executing program 6 (id=5375): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000005000000018010000776c6c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000700)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$cec(&(0x7f0000000700), 0x0, 0x400000) ioctl$CEC_G_MODE(r3, 0x80046108, &(0x7f00000007c0)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000780)={r2}, 0xc) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffa}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2400c091}, 0x4000) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4001, 0x24b00000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) shutdown(r0, 0x1) 27.437405494s ago: executing program 6 (id=5377): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/machinecheck/machinecheck0/dont_log_ce\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) syz_clone(0x100, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 26.833445287s ago: executing program 6 (id=5393): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000000700)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000040)="608035e4342e21069975d91618c356fe2c99dbe004a355e111da5c400005963c0441b062d3e06ab2a3cd7e15ac60fa097d2f27ecb51dbe02c4107913ee1b0347010c23bd9e2b5b7c1d4cf8caab483fe328a651c97f1cb399f2712bc758bc38c0a0bf311d5d4bc6fe20fa211fb3fb4a7bd03a6e263bc1bca387437ea411f2d8ff0fa70a619f1502cb5f2eec9851498a8f7a192121abf6a4cbcf42ae6b", 0x9c}, {&(0x7f0000000740)="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", 0x1000}], 0x2) 11.651963253s ago: executing program 38 (id=5393): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000000700)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000040)="608035e4342e21069975d91618c356fe2c99dbe004a355e111da5c400005963c0441b062d3e06ab2a3cd7e15ac60fa097d2f27ecb51dbe02c4107913ee1b0347010c23bd9e2b5b7c1d4cf8caab483fe328a651c97f1cb399f2712bc758bc38c0a0bf311d5d4bc6fe20fa211fb3fb4a7bd03a6e263bc1bca387437ea411f2d8ff0fa70a619f1502cb5f2eec9851498a8f7a192121abf6a4cbcf42ae6b", 0x9c}, {&(0x7f0000000740)="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", 0x1000}], 0x2) 7.724578637s ago: executing program 8 (id=5498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = signalfd(r0, &(0x7f0000000180)={[0x5a84, 0x3]}, 0x8) openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a6c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b2800128014000180090001006c617374000000000400fa7f4e0001800c000100636f756e746572000800034000000130140000001100010000000000000000000100000a"], 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r2 = syz_clone(0x8819080, &(0x7f0000000200)="3d3e489f992200ce3e000000006d14862e8a7b5f4726bd20f7278f2a30", 0x1d, 0x0, &(0x7f00000008c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r2, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000940)={0x2020, 0x0, 0x0, 0x0}, 0xfffffec1) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) read$FUSE(r4, &(0x7f0000002980)={0x2020}, 0xffffffffffffffe7) timer_create(0x0, 0x0, &(0x7f00000049c0)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x12, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x100010, 0xffffffffffffffff, 0x1c5f1000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004a00)=ANY=[@ANYRES32, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r3, @ANYRESHEX=r3, @ANYRES32=r5], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000004a40)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000004a80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000004ac0)={0x0, 0x0, 0x10001, 0x5}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000004b00), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000004b40)={0x0, 0xffffffff, 0x400001, 0x0, 0x90, "ff00050000000000000000e100e300"}) r8 = syz_open_pts(r7, 0x141601) write(r8, &(0x7f0000004b80)="d5", 0xfffffedf) ioctl$TCSETSW2(r7, 0x402c542c, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000004bc0)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000004c00)={r4}, 0x4) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000004c40)={0xb, 0x75, 0x1}, 0xb) 6.820061769s ago: executing program 8 (id=5503): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=@newqdisc={0x17c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x3, 0xf0, 0x4, 0x1, 0x6, 0x9, 0x2}}, {0x8, 0x2, [0x22f9, 0x6]}}, {{0x1c, 0x1, {0x9, 0x7, 0x800, 0x1, 0x0, 0x9, 0xfffffffa, 0xa}}, {0x18, 0x2, [0x4, 0xc3d7, 0x0, 0x8, 0x6, 0x3ff, 0x5, 0xff, 0x1, 0x5]}}, {{0x1c, 0x1, {0x6, 0x5, 0x5, 0x6, 0x0, 0x5, 0xd, 0x8}}, {0x14, 0x2, [0xdd2a, 0x0, 0x7, 0x8, 0x4, 0x0, 0x5, 0x24]}}]}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xc, 0x101, 0x400, 0xffffffff}, 0x1000, 0x1, 0x6, 0x10001, 0x9, 0x1c, 0x1f, 0x7, 0x3, 0x4, {0x2, 0x3, 0x8, 0x80000000, 0xf8, 0xe0000}}}}]}, 0x17c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4008840) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./pipe\x00', &(0x7f0000000680)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./pipe/gssd/clntXX/gssd\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="6a0afaff270f0000bfa200000000000007020000f0ffffffb70300000a000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000005600000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r6, 0x0, 0xe, 0x0, &(0x7f0000000b00)="58f47a07c4ab0000000000000000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x4c) 6.096557912s ago: executing program 0 (id=5504): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000037000701fefffffffedbdf25037c000006000780fd2e0000abc9000627af9b988fb4823f447a6c1aa77251f1a869504586978e629b92e62b1e0fb2fe555dc5780051e273af9bdf888b15ab9dfa0bd18d2033204351be6c29d26cb5a08006d03e95927795b9a90fa63496cb5d3a2b7b785f23b04057ed2224112c676dcbb300000080000000000de4bd028d258c9120cb24d6d98be36a962e3b6c6c136c81dabc"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0), &(0x7f0000000280), &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000540)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000580)={0x43, 0x100000, 0x2, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000600), 0x10, 0x0, 0x0, 0x0, 0x0, 0x240080c8}, 0x24040095) 5.761716978s ago: executing program 8 (id=5505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2600, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 5.662102063s ago: executing program 8 (id=5506): r0 = mq_open(&(0x7f0000000140)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./debug\x00', 0x1ff) syz_usb_connect(0x5, 0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x2, 0xba, &(0x7f0000000680)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000007c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000800)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000900), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000940)=0x2) recvmmsg(r2, &(0x7f0000000980), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x4e22, 0x2001, 'sh\x00', 0x1, 0x5, 0x4000006d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r5, 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000a00)='./debug\x00', 0x165) mount(0x0, &(0x7f0000000a40)='./trace\x00', &(0x7f0000000a80)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) read$FUSE(r6, &(0x7f0000000b00)={0x2020}, 0x2020) mount(0x0, &(0x7f00000002c0)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) acct(&(0x7f0000000340)='./debug/tracing/trace_pipe\x00') mq_getsetattr(r0, &(0x7f0000000240)={0x800, 0x10, 0x9}, 0x0) 4.71526102s ago: executing program 0 (id=5510): mkdir(&(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./sys\x00', &(0x7f0000000980)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='1', 0x1) r1 = openat$tun(0xffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$TUNATTACHFILTER(r1, 0x400854d5, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x5, 0x0, 0x10, 0x2}, {0x0, 0x7, 0x3, 0x6}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2}, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/pci/rescan\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) write(r3, &(0x7f0000000c40)='1', 0x1) 4.672714894s ago: executing program 9 (id=5511): mkdir(&(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./sys\x00', &(0x7f0000000980)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='1', 0x1) r1 = openat$tun(0xffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$TUNATTACHFILTER(r1, 0x400854d5, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x5, 0x0, 0x10, 0x2}, {0x0, 0x7, 0x3, 0x6}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2}, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/pci/rescan\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) write(r3, &(0x7f0000000c40)='1', 0x1) 4.322083336s ago: executing program 0 (id=5513): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0) r2 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff02, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x60242, 0x0) io_setup(0x1, &(0x7f00000008c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000900)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x8, r4, 0x0, 0x0, 0x4, 0x0, 0x6}]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x164, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x130, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x120, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x7c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd, 0xb}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa425, 0xe}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x41c}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffff81, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x802, 0x72e}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x95a}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x70, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xfffffff7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0x2, 0x1, {0x3bb, 0x9de7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x64556608}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x164}, 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000000600bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048014000000110001"], 0xd4}}, 0x0) close(r7) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, 0x1, 0x2, 0x301, 0x0, 0x0, {0x3}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x80b7}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write(r3, &(0x7f0000000000)="7a55599b0c625bc99633e2363d56cb8a8d4d6f078a8a7501002c9c048eb99983014c796daa3e2155ae51541b0b6ca9bb2e256f9cff633ee54f82ba2899b9ccc1880a31fd788d4995e5245717017acb8f446332b2fd798dd44bff342d7966", 0x5e) 4.256094369s ago: executing program 9 (id=5514): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000540)={r1, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000580)={r1, 0x1, 0x6, @remote}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, 0x0, 0x0) 4.173052582s ago: executing program 9 (id=5515): mkdir(&(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./sys\x00', &(0x7f0000000980)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000009c0)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = openat$tun(0xffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$TUNATTACHFILTER(r1, 0x400854d5, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x5, 0x0, 0x10, 0x2}, {0x0, 0x7, 0x3, 0x6}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2}, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/pci/rescan\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) write(r3, &(0x7f0000000c40)='1', 0x1) 4.020343778s ago: executing program 9 (id=5517): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000037000701fefffffffedbdf25037c000006000780fd2e0000abc9000627af9b988fb4823f447a6c1aa77251f1a869504586978e629b92e62b1e0fb2fe555dc5780051e273af9bdf888b15ab9dfa0bd18d2033204351be6c29d26cb5a08006d03e95927795b9a90fa63496cb5d3a2b7b785f23b04057ed2224112c676dcbb300000080000000000de4bd028d258c9120cb24d6d98be36a962e3b6c6c136c81dabc"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000540)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000580)={0x43, 0x100000, 0x2, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000600), 0x10, 0x0, 0x0, 0x0, 0x0, 0x240080c8}, 0x24040095) pselect6(0x40, &(0x7f0000000240)={0x3, 0x4, 0x202, 0x7d, 0xffffffffffffffff, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x800, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r8, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 3.74055274s ago: executing program 0 (id=5518): syz_emit_ethernet(0x3e, &(0x7f0000001bc0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff080045000030000000000067907800000000ffffffff21009078120002c00dba1a808546bbcd5d8d2825000024000000000000005de9174f9996a6145ab00ba1f2e2d400e00000027f000001e7846d3656de54d7845739da752c3842da95f36052e3d28d79ca33b27bf0221a3254f3d0f71710b5a4f4e0d59dd3bf0b37e50ef191fca6547ab0ac39d082832296f28081a297d3fc4919ef2a718aa87462153bea2df68a35cb000000"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x2e}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x24004045) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000a40), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000ac0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000b00)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000b40)='./file2\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f0000000b80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000001b80)='./file0\x00') r2 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000040) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000580)='asymmetric\x00', &(0x7f00000005c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00534400000000000000f4000000ab3f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x6, 0xc, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$update(0x2, r2, &(0x7f0000001e00)="704c38bfa6eacdbca8a97a1f6d93758780200c09f74ceb5043d6198bc21fef187b3025704436233252c290", 0x2b) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x54) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x6, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/686, @ANYRES32=r1], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000002200), 0x8, 0x10, &(0x7f0000002240), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000002300)="63d1ed8e64dc3f6d000000003386", 0x0, 0x1, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket(0x2d, 0x2, 0x0) bind$xdp(r6, &(0x7f0000002340)={0x2d, 0x0, 0x0, 0x800000c}, 0x10) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r7, 0x0) connect$bt_rfcomm(r7, &(0x7f0000002380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x18}, 0xa) openat$kvm(0xffffffffffffff9c, &(0x7f00000023c0), 0x80102, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.535458518s ago: executing program 5 (id=5520): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000088200000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f44001280200001800a00010071756f7461000000100002800c0001400000000000000009200001800e000100636f6e6e6c696d69740004000c00028008000140000007ff08000340000001067c0000000c0a010400000000000000000700000154000380500000804c00018045000100119b435d82ec9dc3847470fe14fb9ae89519b3987f9eb3305a758f7be41d94214b65280409dbe8e6ae54e502ca0de76c4de3613b4b5b12e228283cb20f0750e25c0000000900010073797a30000000000800044000000000140000001000010000000000000000000084000a"], 0x14c}}, 0x20050800) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x8002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x403c5404, &(0x7f00000003c0)={{0x1, 0x0, 0x400006, 0x3}, 0x1, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x7}) 3.21040416s ago: executing program 5 (id=5521): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=@newqdisc={0x17c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x3, 0xf0, 0x4, 0x1, 0x6, 0x9, 0x2}}, {0x8, 0x2, [0x22f9, 0x6]}}, {{0x1c, 0x1, {0x9, 0x7, 0x800, 0x1, 0x0, 0x9, 0xfffffffa, 0xa}}, {0x18, 0x2, [0x4, 0xc3d7, 0x0, 0x8, 0x6, 0x3ff, 0x5, 0xff, 0x1, 0x5]}}, {{0x1c, 0x1, {0x6, 0x5, 0x5, 0x6, 0x0, 0x5, 0xd, 0x8}}, {0x14, 0x2, [0xdd2a, 0x0, 0x7, 0x8, 0x4, 0x0, 0x5, 0x24]}}]}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xc, 0x101, 0x400, 0xffffffff}, 0x1000, 0x1, 0x6, 0x10001, 0x9, 0x1c, 0x1f, 0x7, 0x3, 0x4, {0x2, 0x3, 0x8, 0x80000000, 0xf8, 0xe0000}}}}]}, 0x17c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0xf, 0x0, &(0x7f0000000340)) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4008840) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./pipe\x00', &(0x7f0000000680)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./pipe/gssd/clntXX/gssd\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="6a0afaff270f0000bfa200000000000007020000f0ffffffb70300000a000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000005600000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r6, 0x0, 0xe, 0x0, &(0x7f0000000b00)="58f47a07c4ab0000000000000000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x4c) 2.645602286s ago: executing program 0 (id=5522): socket$nl_generic(0x10, 0x3, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0x0, 0x7fc00100}]}) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) inotify_init1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1, 0x80001, 0x80000004}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000240)={r2, 0x5, 0x4000003}) 2.366029331s ago: executing program 5 (id=5523): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000540)={r1, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000580)={r1, 0x1, 0x6, @remote}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, 0x0, 0x0) 2.364831605s ago: executing program 8 (id=5524): socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000a80)={0x2020}, 0xa5a) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x9, 0x7fffffff}]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002ac0)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r1, &(0x7f0000002b00)=""/4096, 0x1000, 0x200000000339a) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000400)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000640)=@IORING_OP_SETXATTR={0x2a, 0x0, 0x0, 0x0, &(0x7f00000006c0)="ec", &(0x7f0000000700)='./file0/file0\x00', 0x1, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r2, 0x101, 0x11, 0x3, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) close(0x3) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aa053c600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e220000050000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x2fa8, 0x1, 0x2, 0x158, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000740)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2.364383861s ago: executing program 5 (id=5525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r3, &(0x7f0000000140)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r3, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e73657273696f6e3d3970323030302e752c63616368653d6d6d61702c009d1d8ba378da0fa0a0ebb2c09f490d6cd39e9496772888a04d46a729224a5e107e250fefa7d709ed1104769424ba98337c3e43c3c871e0c35f971b941d6501dd2b6f3026bd3b89f3cfba57e3a7c66bec711600e809455b75a63736bed59eb30cbd48a650e3b3f6ffbdef053644260451012dbb2772caf3e08980f1b9b625888d6100d5b88e199aac3d804f23c74f83a5d35cdf8431e3f40173dfc043d4f360a5029ae01f4b994699ce4276731bec82a68f5c2e231ea462d1c59a"]) r4 = fsopen(0x0, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000580)=0x5, 0x4) bind$inet6(r6, 0x0, 0x0) listen(r6, 0x4d) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000005c0)=0x3fa, 0x4) bind$inet6(r7, 0x0, 0x0) listen(r7, 0x50) syz_emit_ethernet(0x4f, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d000000198401fa2441ce000000000000000000000002fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000680)='source', &(0x7f00000006c0)='c:::\x00', 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES64=r5, @ANYRES64=r5, @ANYRES64=r6, @ANYRES16=r8, @ANYRESHEX=r8], 0x94}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000840)={0x2b, 0xe}, 0x30, 0x0) landlock_restrict_self(r9, 0xa) 2.208867368s ago: executing program 0 (id=5526): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=@newqdisc={0x180, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x3, 0xf0, 0x4, 0x1, 0x6, 0x9, 0x2}}, {0x8, 0x2, [0x22f9, 0x6]}}, {{0x1c, 0x1, {0x9, 0x7, 0x800, 0x1, 0x0, 0x9, 0xfffffffa, 0xa}}, {0x18, 0x2, [0x4, 0xc3d7, 0x0, 0x8, 0x6, 0x3ff, 0x5, 0xff, 0x1, 0x5]}}, {{0x1c, 0x1, {0x6, 0x5, 0x5, 0x6, 0x0, 0x5, 0xd, 0x9}}, {0x16, 0x2, [0xdd2a, 0x0, 0x7, 0x8, 0xe, 0x4, 0x0, 0x5, 0x24]}}]}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xc, 0x101, 0x400, 0xffffffff}, 0x1000, 0x1, 0x6, 0x10001, 0x9, 0x1c, 0x1f, 0x7, 0x3, 0x4, {0x2, 0x3, 0x8, 0x80000000, 0xf8, 0xe0000}}}}]}, 0x180}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="403ad16ff5004b01e90000c9610000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000c9910200200012800b0001006272696467650000100002800c00210080000000000020"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076"], 0x50}}, 0x4008840) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./pipe\x00', &(0x7f0000000680)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./pipe/gssd/clntXX/gssd\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="6a0afaff270f0000bfa200000000000007020000f0ffffffb70300000a000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000005600000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r5, 0x0, 0xe, 0x0, &(0x7f0000000b00)="58f47a07c4ab0000000000000000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x4c) 2.116228585s ago: executing program 9 (id=5527): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000037000701fefffffffedbdf25037c000006000780fd2e0000abc9000627af9b988fb4823f447a6c1aa77251f1a869504586978e629b92e62b1e0fb2fe555dc5780051e273af9bdf888b15ab9dfa0bd18d2033204351be6c29d26cb5a08006d03e95927795b9a90fa63496cb5d3a2b7b785f23b04057ed2224112c676dcbb300000080000000000de4bd028d258c9120cb24d6d98be36a962e3b6c6c136c81dabc"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0), &(0x7f0000000280), &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000540)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000580)={0x43, 0x100000, 0x2, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000600), 0x10, 0x0, 0x0, 0x0, 0x0, 0x240080c8}, 0x24040095) 132.612102ms ago: executing program 5 (id=5528): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000b80)={&(0x7f0000000740)={{@any, 0x2}, {@host, 0x7}, 0x400, "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"}, 0x418, 0xef0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x12, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000ffe800006608000000000000180000000000000000000000000000019500000000000000180100002020682500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff3702010008000000b50afdff00000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xd4}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 99.839864ms ago: executing program 9 (id=5529): r0 = openat$md_new_array(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) r1 = openat$md_sysfs(0xffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5) r2 = openat$md_sysfs(0xffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000180)=@str='2', 0x1) r3 = openat$md_sysfs(0xffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0) write$md_sysfs(r3, &(0x7f0000000200)=@str='512', 0x3) r4 = openat$md_sysfs(0xffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r4, &(0x7f0000000280)=@range={0x13bb, 0x20, 0x191}, 0x29) write$md_sysfs(r4, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x5c, 0x41, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566748899aabb86dd2c00001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2b0d"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) r6 = openat$md_sysfs(0xffffff9c, &(0x7f0000000300)={'/sys/block/md', @named={'_syz', 0x0, '2'}, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r6, &(0x7f0000000340)=@str='0', 0x1) r7 = openat$md_sysfs(0xffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r7, &(0x7f00000003c0)=@str='1', 0x1) r8 = openat$md_sysfs(0xffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x3, 0x0) write$md_sysfs(r8, &(0x7f0000000440)=@str='active', 0x6) r9 = openat$md(0xffffff9c, &(0x7f0000000480)={'/dev/md', @num=0x0}, 0x2, 0x0) pwrite64(r9, &(0x7f00000004c0)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) close(r9) write$md_sysfs(r8, &(0x7f0000000500)=@str='3', 0x4d) r10 = signalfd(0xffffffffffffffff, &(0x7f0000000600)={[0x7ff, 0xfff]}, 0x8) ioctl$KVM_CAP_MAX_VCPU_ID(r10, 0x4068aea3, &(0x7f0000000640)={0x80, 0x0, 0x3}) 35.463156ms ago: executing program 8 (id=5530): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000000040)="110000000000060000071a80010061cc", 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0xffffffe1, 0x8000) 0s ago: executing program 5 (id=5531): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000037000701fefffffffedbdf25037c000006000780fd2e0000abc9000627af9b988fb4823f447a6c1aa77251f1a869504586978e629b92e62b1e0fb2fe555dc5780051e273af9bdf888b15ab9dfa0bd18d2033204351be6c29d26cb5a08006d03e95927795b9a90fa63496cb5d3a2b7b785f23b04057ed2224112c676dcbb300000080000000000de4bd028d258c9120cb24d6d98be36a962e3b6c6c136c81dabc"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000540)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000580)={0x43, 0x100000, 0x2, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000600), 0x10, 0x0, 0x0, 0x0, 0x0, 0x240080c8}, 0x24040095) pselect6(0x40, &(0x7f0000000240)={0x3, 0x4, 0x202, 0x7d, 0xffffffffffffffff, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x800, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r8, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) kernel console output (not intermixed with test programs): ][T23646] Call Trace: [ 1481.381739][T23646] [ 1481.381744][T23646] dump_stack_lvl+0x100/0x190 [ 1481.381767][T23646] should_fail_ex.cold+0x5/0xa [ 1481.381785][T23646] should_failslab+0xc2/0x120 [ 1481.381801][T23646] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1481.381814][T23646] ? do_getname+0x35/0x390 [ 1481.381835][T23646] do_getname+0x35/0x390 [ 1481.381853][T23646] do_sys_openat2+0xc3/0x1d0 [ 1481.381871][T23646] ? __pfx_do_sys_openat2+0x10/0x10 [ 1481.381889][T23646] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1481.381909][T23646] ? __fget_files+0x21f/0x3d0 [ 1481.381926][T23646] __ia32_compat_sys_openat+0x12d/0x210 [ 1481.381945][T23646] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1481.381963][T23646] ? ksys_write+0x1ac/0x250 [ 1481.381981][T23646] do_int80_emulation+0x16a/0x670 [ 1481.382001][T23646] asm_int80_emulation+0x1a/0x20 [ 1481.382014][T23646] RIP: 0023:0xf7117f6b [ 1481.382024][T23646] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1481.382036][T23646] RSP: 002b:00000000f53d642c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1481.382048][T23646] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f71e2405 [ 1481.382056][T23646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1481.382063][T23646] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1481.382070][T23646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1481.382077][T23646] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1481.382091][T23646] [ 1481.382862][T23644] overlayfs: failed to resolve './file2': -2 [ 1481.417212][T23640] pci_bus 0000:01: busn_res: [bus 01] is released [ 1481.454253][T23644] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1481.459368][T23644] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1481.459591][T23644] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1481.459708][T23644] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 1481.461238][T23644] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 1481.461790][T23644] pci 0000:00:04.0: enabling Extended Tags [ 1481.481806][T23644] pci 0000:00:04.0: Adding to iommu group 4 [ 1481.534316][T23644] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1481.539783][T23644] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1481.539818][T23644] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1481.539893][T23644] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1481.539911][T23644] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1481.539928][T23644] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1481.539994][T23644] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1481.540076][T23644] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1481.546606][T23644] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1481.550876][T23644] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1481.640816][T23644] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1481.671154][T23644] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1482.494361][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 1482.494377][ T43] audit: type=1326 audit(1794273231.586:81667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23682 comm="syz.4.5238" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7fc00000 [ 1483.223524][ T43] audit: type=1326 audit(1794273232.316:81668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23682 comm="syz.4.5238" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71c7f6b code=0x7fc00000 [ 1483.302064][T23724] FAULT_INJECTION: forcing a failure. [ 1483.302064][T23724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1483.302087][T23724] CPU: 2 UID: 0 PID: 23724 Comm: syz.4.5251 Tainted: G L syzkaller #0 PREEMPT(full) [ 1483.302103][T23724] Tainted: [L]=SOFTLOCKUP [ 1483.302108][T23724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1483.302115][T23724] Call Trace: [ 1483.302120][T23724] [ 1483.302125][T23724] dump_stack_lvl+0x100/0x190 [ 1483.302148][T23724] should_fail_ex.cold+0x5/0xa [ 1483.302167][T23724] _copy_to_user+0x32/0xd0 [ 1483.302188][T23724] simple_read_from_buffer+0xcb/0x170 [ 1483.302205][T23724] proc_fail_nth_read+0x1af/0x230 [ 1483.302222][T23724] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1483.302239][T23724] ? rw_verify_area+0xce/0x6d0 [ 1483.302251][T23724] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1483.302267][T23724] vfs_read+0x1e4/0xb30 [ 1483.302283][T23724] ? lock_acquire+0x1d1/0x380 [ 1483.302301][T23724] ? __fget_files+0x34/0x3d0 [ 1483.302321][T23724] ? __pfx_vfs_read+0x10/0x10 [ 1483.302337][T23724] ? find_held_lock+0x2b/0x80 [ 1483.302365][T23724] ? __fget_files+0x215/0x3d0 [ 1483.302389][T23724] ? __fget_files+0x21f/0x3d0 [ 1483.302419][T23724] ksys_read+0x12a/0x250 [ 1483.302436][T23724] ? __pfx_ksys_read+0x10/0x10 [ 1483.302464][T23724] do_int80_emulation+0x16a/0x670 [ 1483.302496][T23724] asm_int80_emulation+0x1a/0x20 [ 1483.302516][T23724] RIP: 0023:0xf71c7f6b [ 1483.302531][T23724] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1483.302549][T23724] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1483.302568][T23724] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54865d0 [ 1483.302579][T23724] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1483.302590][T23724] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1483.302601][T23724] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1483.302612][T23724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1483.302637][T23724] [ 1483.803192][ T67] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1483.812131][ T67] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1483.814613][ T67] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1483.815750][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1483.816286][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1484.014821][T23729] rxe_eth0 speed is unknown, defaulting to 1000 [ 1484.239860][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.281007][T23729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.281094][T23729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.281158][T23729] bridge_slave_0: entered allmulticast mode [ 1484.281914][T23729] bridge_slave_0: entered promiscuous mode [ 1484.289945][T23729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.290090][T23729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.290197][T23729] bridge_slave_1: entered allmulticast mode [ 1484.291789][T23729] bridge_slave_1: entered promiscuous mode [ 1484.311872][T23729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.314453][T23729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.337075][T23729] team0: Port device team_slave_0 added [ 1484.340578][T23729] team0: Port device team_slave_1 added [ 1484.361686][T23729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1484.361703][T23729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1484.361725][T23729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1484.363232][T23729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1484.363245][T23729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1484.363267][T23729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1484.396757][T23729] hsr_slave_0: entered promiscuous mode [ 1484.397474][T23729] hsr_slave_1: entered promiscuous mode [ 1484.397834][T23729] debugfs: 'hsr0' already exists in 'hsr' [ 1484.397844][T23729] Cannot create hsr debugfs directory [ 1485.630659][T23709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1485.630720][T23709] nci: nci_start_poll: failed to set local general bytes [ 1485.633792][T23701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1485.677326][T23729] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1485.684185][T23729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1485.684981][T23729] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1485.706589][T23729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1485.708880][T23729] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1485.717462][T23729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1485.719872][T23729] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1485.725719][T23729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1485.811691][T23729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1485.823441][T23729] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.830296][T20696] Bluetooth: hci2: command tx timeout [ 1485.833541][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.833598][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.835847][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.835891][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.836967][T23760] veth0: entered promiscuous mode [ 1485.853997][T23759] veth0: left promiscuous mode [ 1486.305810][T23773] pim6reg: entered allmulticast mode [ 1486.417737][T23729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1486.458441][T23769] pim6reg: left allmulticast mode [ 1486.528274][T23773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5259'. [ 1486.554285][T23773] hsr_slave_1 (unregistering): left promiscuous mode [ 1486.666015][T23729] veth0_vlan: entered promiscuous mode [ 1486.676496][T23729] veth1_vlan: entered promiscuous mode [ 1486.702867][T23729] veth0_macvtap: entered promiscuous mode [ 1486.707011][T23729] veth1_macvtap: entered promiscuous mode [ 1486.723462][T23729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1486.730624][T23729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1486.790283][T19191] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.811008][T14518] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.811110][T14518] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.811152][T14518] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.554990][T23798] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5264'. [ 1487.555056][T23798] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5264'. [ 1487.909073][T20696] Bluetooth: hci2: command tx timeout [ 1488.775943][T23808] overlayfs: failed to clone lowerpath [ 1488.776655][T23808] overlayfs: failed to clone lowerpath [ 1488.779039][T23808] overlayfs: failed to clone lowerpath [ 1488.784885][T23808] overlayfs: failed to clone lowerpath [ 1488.785594][T23808] overlayfs: failed to clone lowerpath [ 1488.789298][T23808] overlayfs: failed to clone lowerpath [ 1488.789903][T23808] overlayfs: failed to clone lowerpath [ 1488.791865][T23808] overlayfs: failed to clone lowerpath [ 1488.793777][T23808] overlayfs: failed to clone lowerpath [ 1488.795579][T23808] overlayfs: failed to clone lowerpath [ 1488.797393][T23808] overlayfs: failed to clone lowerpath [ 1488.799809][T23808] overlayfs: failed to clone lowerpath [ 1488.800808][T23808] overlayfs: failed to clone lowerpath [ 1488.802621][T23808] overlayfs: failed to clone lowerpath [ 1488.804556][T23808] overlayfs: failed to clone lowerpath [ 1488.806233][T23808] overlayfs: failed to clone lowerpath [ 1488.807870][T23808] overlayfs: failed to clone lowerpath [ 1488.809916][T23808] overlayfs: failed to clone lowerpath [ 1488.811399][T23808] overlayfs: failed to clone lowerpath [ 1488.813189][T23808] overlayfs: failed to clone lowerpath [ 1488.814884][T23808] overlayfs: failed to clone lowerpath [ 1488.816794][T23808] overlayfs: failed to clone lowerpath [ 1488.820789][T23808] overlayfs: failed to clone lowerpath [ 1488.822102][T23808] overlayfs: failed to clone lowerpath [ 1488.824498][T23808] overlayfs: failed to clone lowerpath [ 1488.826274][T23808] overlayfs: failed to clone lowerpath [ 1488.828005][T23808] overlayfs: failed to clone lowerpath [ 1488.829908][T23808] overlayfs: failed to clone lowerpath [ 1488.831424][T23808] overlayfs: failed to clone lowerpath [ 1488.833073][T23808] overlayfs: failed to clone lowerpath [ 1488.834992][T23808] overlayfs: failed to clone lowerpath [ 1488.836779][T23808] overlayfs: failed to clone lowerpath [ 1488.838109][T23808] overlayfs: failed to clone lowerpath [ 1488.842020][T23808] overlayfs: failed to clone lowerpath [ 1488.843693][T23808] overlayfs: failed to clone lowerpath [ 1488.845342][T23808] overlayfs: failed to clone lowerpath [ 1488.847244][T23808] overlayfs: failed to clone lowerpath [ 1488.850221][T23808] overlayfs: failed to clone lowerpath [ 1488.851392][T23808] overlayfs: failed to clone lowerpath [ 1488.853443][T23808] overlayfs: failed to clone lowerpath [ 1488.855150][T23808] overlayfs: failed to clone lowerpath [ 1488.856746][T23808] overlayfs: failed to clone lowerpath [ 1488.860043][T23808] overlayfs: failed to clone lowerpath [ 1488.861064][T23808] overlayfs: failed to clone lowerpath [ 1488.863142][T23808] overlayfs: failed to clone lowerpath [ 1488.864914][T23808] overlayfs: failed to clone lowerpath [ 1488.866738][T23808] overlayfs: failed to clone lowerpath [ 1488.868194][T23808] overlayfs: failed to clone lowerpath [ 1488.870267][T23808] overlayfs: failed to clone lowerpath [ 1488.872068][T23808] overlayfs: failed to clone lowerpath [ 1488.873829][T23808] overlayfs: failed to clone lowerpath [ 1488.875435][T23808] overlayfs: failed to clone lowerpath [ 1488.877407][T23808] overlayfs: failed to clone lowerpath [ 1488.880465][T23808] overlayfs: failed to clone lowerpath [ 1488.884251][T23808] overlayfs: failed to clone lowerpath [ 1488.885892][T23808] overlayfs: failed to clone lowerpath [ 1488.887669][T23808] overlayfs: failed to clone lowerpath [ 1488.889682][T23808] overlayfs: failed to clone lowerpath [ 1488.891314][T23808] overlayfs: failed to clone lowerpath [ 1488.893017][T23808] overlayfs: failed to clone lowerpath [ 1488.894753][T23808] overlayfs: failed to clone lowerpath [ 1488.896422][T23808] overlayfs: failed to clone lowerpath [ 1488.898981][T23808] overlayfs: failed to clone lowerpath [ 1488.900390][T23808] overlayfs: failed to clone lowerpath [ 1488.902010][T23808] overlayfs: failed to clone lowerpath [ 1489.500606][T23788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1489.500626][T23788] nci: nci_start_poll: failed to set local general bytes [ 1489.505869][T23782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1489.525524][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1489.525539][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1489.553682][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1489.553697][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1489.611715][T23817] Console: switching to colour dummy device 80x25 [ 1489.692304][T23823] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1489.742453][T23823] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1489.742564][T23823] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1489.742740][T23823] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1489.743148][T23823] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1489.754862][T23823] pci 0000:00:01.0: Adding to iommu group 1 [ 1489.757330][T23823] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1489.757344][T23823] pci 0000:00:01.0: vgaarb: bridge control possible [ 1489.757353][T23823] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1489.762418][T23823] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1489.762532][T23823] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1489.763768][T23823] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1489.769643][T23823] [drm] Found bochs VGA, ID 0xb0c5. [ 1489.769653][T23823] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1489.793472][T23823] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1489.882611][T23823] Console: switching to colour frame buffer device 160x50 [ 1489.898232][T23831] overlayfs: failed to resolve './file2': -2 [ 1489.915839][T23823] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1489.931285][ T43] audit: type=1326 audit(1794273239.016:81669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23827 comm="syz.9.5255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7fc00000 [ 1489.931319][ T43] audit: type=1326 audit(1794273239.026:81670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23827 comm="syz.9.5255" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7197f6b code=0x7fc00000 [ 1489.932266][ T43] audit: type=1326 audit(1794273239.026:81671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23827 comm="syz.9.5255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7fc00000 [ 1489.960480][T23836] overlayfs: failed to resolve './file2': -2 [ 1490.043326][T20696] Bluetooth: hci2: command tx timeout [ 1490.050165][T23832] pci_bus 0000:01: busn_res: [bus 01] is released [ 1490.089363][T23836] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1490.092849][T23836] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1490.092990][T23836] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1490.093085][T23836] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1490.094520][T23836] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1490.094950][T23836] pci 0000:00:04.0: enabling Extended Tags [ 1490.104434][T23836] pci 0000:00:04.0: Adding to iommu group 4 [ 1490.122521][T23836] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1490.225597][T23836] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1490.225633][T23836] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1490.225717][T23836] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1490.225737][T23836] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1490.225762][T23836] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1490.225830][T23836] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1490.225889][T23836] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1490.228220][T23836] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1490.254023][T23836] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1490.300970][T23836] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1490.315909][T23836] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1490.729635][T23858] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5277'. [ 1490.739385][T23858] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1490.748661][T23858] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 1490.963199][T23862] overlayfs: failed to clone upperpath [ 1490.975209][T23862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5278'. [ 1491.242585][T20696] Bluetooth: hci2: Unable to find connection for big 0x00 [ 1491.590212][T23869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5280'. [ 1491.727868][T23891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5286'. [ 1491.733075][T23891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5286'. [ 1492.020169][T23896] pci_bus 0000:01: busn_res: [bus 01] is released [ 1492.034156][T23897] overlayfs: failed to resolve './file2': -2 [ 1492.049631][T23897] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1492.053215][T23897] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1492.053363][T23897] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1492.053460][T23897] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1492.055007][T23897] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1492.055557][T23897] pci 0000:00:04.0: enabling Extended Tags [ 1492.065967][T23897] pci 0000:00:04.0: Adding to iommu group 4 [ 1492.070675][T20696] Bluetooth: hci2: command tx timeout [ 1492.074459][T23897] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1492.076792][T23897] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1492.076822][T23897] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1492.076897][T23897] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1492.076914][T23897] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1492.076932][T23897] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1492.077001][T23897] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1492.077077][T23897] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1492.080616][T23897] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1492.082135][T23897] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1492.137657][T23897] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1492.144116][T23897] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1492.322222][T23902] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5289'. [ 1492.491227][T23909] FAULT_INJECTION: forcing a failure. [ 1492.491227][T23909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1492.491250][T23909] CPU: 1 UID: 0 PID: 23909 Comm: syz.9.5292 Tainted: G L syzkaller #0 PREEMPT(full) [ 1492.491266][T23909] Tainted: [L]=SOFTLOCKUP [ 1492.491271][T23909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1492.491279][T23909] Call Trace: [ 1492.491283][T23909] [ 1492.491289][T23909] dump_stack_lvl+0x100/0x190 [ 1492.491369][T23909] should_fail_ex.cold+0x5/0xa [ 1492.491396][T23909] _copy_from_user+0x2e/0xd0 [ 1492.491442][T23909] get_compat_msghdr+0xb3/0x480 [ 1492.491480][T23909] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1492.491503][T23909] ___sys_sendmsg+0x1b6/0x1e0 [ 1492.491520][T23909] ? __pfx____sys_sendmsg+0x10/0x10 [ 1492.491542][T23909] ? find_held_lock+0x2b/0x80 [ 1492.491583][T23909] __sys_sendmsg+0x160/0x210 [ 1492.491602][T23909] ? __pfx___sys_sendmsg+0x10/0x10 [ 1492.491628][T23909] __do_fast_syscall_32+0x14d/0x8e0 [ 1492.491678][T23909] ? lockdep_hardirqs_on+0x7d/0x110 [ 1492.491696][T23909] do_fast_syscall_32+0x32/0x70 [ 1492.491716][T23909] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1492.491731][T23909] RIP: 0023:0xf743efbc [ 1492.491742][T23909] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1492.491753][T23909] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1492.491766][T23909] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 1492.491773][T23909] RDX: 0000000000048810 RSI: 0000000000000000 RDI: 0000000000000000 [ 1492.491781][T23909] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1492.491788][T23909] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1492.491795][T23909] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1492.491810][T23909] [ 1492.544577][T23912] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5293'. [ 1492.728458][T23921] FAULT_INJECTION: forcing a failure. [ 1492.728458][T23921] name failslab, interval 1, probability 5, space 0, times 9639 [ 1492.728481][T23921] CPU: 3 UID: 0 PID: 23921 Comm: syz.6.5296 Tainted: G L syzkaller #0 PREEMPT(full) [ 1492.728498][T23921] Tainted: [L]=SOFTLOCKUP [ 1492.728502][T23921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1492.728510][T23921] Call Trace: [ 1492.728514][T23921] [ 1492.728520][T23921] dump_stack_lvl+0x100/0x190 [ 1492.728543][T23921] should_fail_ex.cold+0x5/0xa [ 1492.728560][T23921] should_failslab+0xc2/0x120 [ 1492.728588][T23921] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1492.728610][T23921] ? __alloc_skb+0x5b7/0x710 [ 1492.728627][T23921] ? __alloc_skb+0x140/0x710 [ 1492.728647][T23921] __alloc_skb+0x140/0x710 [ 1492.728670][T23921] ? __alloc_skb+0x5b7/0x710 [ 1492.728688][T23921] ? __pfx___alloc_skb+0x10/0x10 [ 1492.728704][T23921] ? unwind_get_return_address+0x59/0xa0 [ 1492.728733][T23921] ? __lock_acquire+0x5c0/0x1f40 [ 1492.728748][T23921] alloc_skb_with_frags+0xdb/0x750 [ 1492.728762][T23921] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 1492.728790][T23921] sock_alloc_send_pskb+0x86a/0x9e0 [ 1492.728808][T23921] ? ima_match_policy+0x8ca/0x2400 [ 1492.728833][T23921] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1492.728853][T23921] ? __lock_acquire+0x5c0/0x1f40 [ 1492.728868][T23921] __ip_append_data+0x233d/0x4430 [ 1492.728890][T23921] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1492.728906][T23921] ? find_held_lock+0x2b/0x80 [ 1492.728926][T23921] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 1492.728947][T23921] ? __pfx___ip_append_data+0x10/0x10 [ 1492.728967][T23921] ip_make_skb+0x28b/0x310 [ 1492.728986][T23921] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1492.729003][T23921] ? __pfx_ip_make_skb+0x10/0x10 [ 1492.729028][T23921] ? udp_sendmsg+0x171c/0x2710 [ 1492.729044][T23921] udp_sendmsg+0x171c/0x2710 [ 1492.729065][T23921] ? __lock_acquire+0x5c0/0x1f40 [ 1492.729077][T23921] ? __pfx_udp_sendmsg+0x10/0x10 [ 1492.729092][T23921] ? __lock_acquire+0x5c0/0x1f40 [ 1492.729109][T23921] ? lock_acquire+0x1d1/0x380 [ 1492.729124][T23921] ? __pfx_current_check_autobind_udp_socket+0x10/0x10 [ 1492.729146][T23921] ? aa_sock_msg_perm+0x11e/0x200 [ 1492.729163][T23921] ? __pfx_udp_sendmsg+0x10/0x10 [ 1492.729182][T23921] inet_sendmsg+0x105/0x140 [ 1492.729199][T23921] sock_write_iter+0x4fd/0x5d0 [ 1492.729219][T23921] ? __pfx_inet_sendmsg+0x10/0x10 [ 1492.729234][T23921] ? __pfx_sock_write_iter+0x10/0x10 [ 1492.729260][T23921] ? bpf_lsm_file_permission+0x9/0x10 [ 1492.729287][T23921] ? security_file_permission+0x76/0x210 [ 1492.729307][T23921] ? rw_verify_area+0xce/0x6d0 [ 1492.729327][T23921] vfs_write+0x6af/0x1040 [ 1492.729341][T23921] ? __pfx_sock_write_iter+0x10/0x10 [ 1492.729356][T23921] ? __pfx_vfs_write+0x10/0x10 [ 1492.729368][T23921] ? find_held_lock+0x2b/0x80 [ 1492.729394][T23921] ksys_write+0x1f8/0x250 [ 1492.729407][T23921] ? __pfx_ksys_write+0x10/0x10 [ 1492.729424][T23921] __do_fast_syscall_32+0x14d/0x8e0 [ 1492.729442][T23921] ? lockdep_hardirqs_on+0x7d/0x110 [ 1492.729461][T23921] do_fast_syscall_32+0x32/0x70 [ 1492.729479][T23921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1492.729495][T23921] RIP: 0023:0xf73befbc [ 1492.729505][T23921] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1492.729517][T23921] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1492.729530][T23921] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000580 [ 1492.729538][T23921] RDX: 000000000000ffe3 RSI: 0000000000000000 RDI: 0000000000000000 [ 1492.729545][T23921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1492.729552][T23921] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1492.729559][T23921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1492.729574][T23921] [ 1492.732023][ T43] audit: type=1326 audit(1794273241.826:81672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23916 comm="syz.9.5294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7fc00000 [ 1492.734672][ T43] audit: type=1326 audit(1794273241.826:81673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23916 comm="syz.9.5294" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7197f6b code=0x7fc00000 [ 1492.736181][ T43] audit: type=1326 audit(1794273241.826:81674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23916 comm="syz.9.5294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7fc00000 [ 1492.820497][T23924] pci_bus 0000:01: busn_res: [bus 01] is released [ 1492.871037][T23924] overlayfs: failed to resolve './file2': -2 [ 1493.289760][ T10] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 1493.439371][ T10] usb 11-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1493.440414][ T10] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.440457][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.448070][ T10] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 1493.448268][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 81 [ 1493.448439][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1 [ 1493.452713][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 1493.452790][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 1493.454170][ T10] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1493.456696][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88 [ 1493.456760][ T10] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 1493.459375][ T10] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1493.867331][T23941] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1494.627335][T23888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1494.627360][T23888] nci: nci_start_poll: failed to set local general bytes [ 1494.630008][T23879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1494.694942][T23943] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1494.700791][T23943] bridge1: entered allmulticast mode [ 1494.803046][T23951] veth0: entered promiscuous mode [ 1494.805005][T23950] veth0: left promiscuous mode [ 1494.823182][T23953] FAULT_INJECTION: forcing a failure. [ 1494.823182][T23953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1494.823217][T23953] CPU: 2 UID: 0 PID: 23953 Comm: syz.9.5306 Tainted: G L syzkaller #0 PREEMPT(full) [ 1494.823242][T23953] Tainted: [L]=SOFTLOCKUP [ 1494.823248][T23953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1494.823258][T23953] Call Trace: [ 1494.823265][T23953] [ 1494.823272][T23953] dump_stack_lvl+0x100/0x190 [ 1494.823305][T23953] should_fail_ex.cold+0x5/0xa [ 1494.823331][T23953] _copy_from_user+0x2e/0xd0 [ 1494.823360][T23953] get_compat_msghdr+0xb3/0x480 [ 1494.823385][T23953] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1494.823429][T23953] ___sys_sendmsg+0x1b6/0x1e0 [ 1494.823471][T23953] ? __pfx____sys_sendmsg+0x10/0x10 [ 1494.823506][T23953] ? find_held_lock+0x2b/0x80 [ 1494.823545][T23953] __sys_sendmsg+0x160/0x210 [ 1494.823574][T23953] ? __pfx___sys_sendmsg+0x10/0x10 [ 1494.823613][T23953] __do_fast_syscall_32+0x14d/0x8e0 [ 1494.823640][T23953] ? lockdep_hardirqs_on+0x7d/0x110 [ 1494.823666][T23953] do_fast_syscall_32+0x32/0x70 [ 1494.823693][T23953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1494.823716][T23953] RIP: 0023:0xf743efbc [ 1494.823731][T23953] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1494.823748][T23953] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1494.823766][T23953] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 1494.823778][T23953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1494.823789][T23953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1494.823799][T23953] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1494.823810][T23953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1494.823833][T23953] [ 1494.861665][T23959] FAULT_INJECTION: forcing a failure. [ 1494.861665][T23959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1494.861686][T23959] CPU: 2 UID: 0 PID: 23959 Comm: syz.9.5308 Tainted: G L syzkaller #0 PREEMPT(full) [ 1494.861702][T23959] Tainted: [L]=SOFTLOCKUP [ 1494.861707][T23959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1494.861714][T23959] Call Trace: [ 1494.861718][T23959] [ 1494.861723][T23959] dump_stack_lvl+0x100/0x190 [ 1494.861745][T23959] should_fail_ex.cold+0x5/0xa [ 1494.861763][T23959] _copy_from_user+0x2e/0xd0 [ 1494.861783][T23959] get_compat_msghdr+0xb3/0x480 [ 1494.861800][T23959] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1494.861821][T23959] ___sys_sendmsg+0x1b6/0x1e0 [ 1494.861838][T23959] ? __pfx____sys_sendmsg+0x10/0x10 [ 1494.861859][T23959] ? find_held_lock+0x2b/0x80 [ 1494.861889][T23959] __sys_sendmsg+0x160/0x210 [ 1494.861908][T23959] ? __pfx___sys_sendmsg+0x10/0x10 [ 1494.861934][T23959] __do_fast_syscall_32+0x14d/0x8e0 [ 1494.861953][T23959] ? lockdep_hardirqs_on+0x7d/0x110 [ 1494.861971][T23959] do_fast_syscall_32+0x32/0x70 [ 1494.861989][T23959] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1494.862005][T23959] RIP: 0023:0xf743efbc [ 1494.862015][T23959] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1494.862030][T23959] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1494.862042][T23959] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800018c0 [ 1494.862050][T23959] RDX: 00000000040c0080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1494.862057][T23959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1494.862064][T23959] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1494.862071][T23959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1494.862086][T23959] [ 1494.981381][T23965] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1494.984686][T23965] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1494.984842][T23965] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1494.984936][T23965] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1494.986302][T23965] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1494.986747][T23965] pci 0000:00:04.0: enabling Extended Tags [ 1494.994271][T23965] pci 0000:00:04.0: Adding to iommu group 4 [ 1495.000894][T23965] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1495.003107][T23965] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1495.003136][T23965] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1495.003209][T23965] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1495.003227][T23965] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1495.003247][T23965] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1495.003311][T23965] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1495.003368][T23965] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1495.004712][T23965] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1495.005741][T23965] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1495.049366][T23965] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1495.053296][T23965] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1495.113968][T23972] FAULT_INJECTION: forcing a failure. [ 1495.113968][T23972] name failslab, interval 1, probability 5, space 0, times 9638 [ 1495.113991][T23972] CPU: 1 UID: 0 PID: 23972 Comm: syz.8.5313 Tainted: G L syzkaller #0 PREEMPT(full) [ 1495.114008][T23972] Tainted: [L]=SOFTLOCKUP [ 1495.114013][T23972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1495.114020][T23972] Call Trace: [ 1495.114025][T23972] [ 1495.114030][T23972] dump_stack_lvl+0x100/0x190 [ 1495.114058][T23972] should_fail_ex.cold+0x5/0xa [ 1495.114077][T23972] should_failslab+0xc2/0x120 [ 1495.114093][T23972] __kmalloc_cache_noprof+0x91/0x6d0 [ 1495.114111][T23972] ? configfs_read_iter+0x53c/0x6f0 [ 1495.114139][T23972] configfs_read_iter+0x53c/0x6f0 [ 1495.114152][T23972] ? __pfx_configfs_read_iter+0x10/0x10 [ 1495.114165][T23972] vfs_read+0x825/0xb30 [ 1495.114181][T23972] ? __pfx_vfs_read+0x10/0x10 [ 1495.114193][T23972] ? find_held_lock+0x2b/0x80 [ 1495.114220][T23972] ksys_read+0x12a/0x250 [ 1495.114233][T23972] ? __pfx_ksys_read+0x10/0x10 [ 1495.114250][T23972] __do_fast_syscall_32+0x14d/0x8e0 [ 1495.114285][T23972] ? lockdep_hardirqs_on+0x7d/0x110 [ 1495.114305][T23972] do_fast_syscall_32+0x32/0x70 [ 1495.114323][T23972] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1495.114339][T23972] RIP: 0023:0xf7f45fbc [ 1495.114349][T23972] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1495.114361][T23972] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 1495.114373][T23972] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1495.114380][T23972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1495.114387][T23972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1495.114394][T23972] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1495.114401][T23972] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1495.114417][T23972] [ 1495.256709][T23977] afs: Unknown parameter 'gid' [ 1495.374986][T23980] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5314'. [ 1495.375044][T23980] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5314'. [ 1496.064250][T10531] usb 11-1: USB disconnect, device number 6 [ 1496.069048][T10531] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1496.086532][T10531] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1496.086838][T10531] keyspan 11-1:1.0: device disconnected [ 1496.182332][T23992] FAULT_INJECTION: forcing a failure. [ 1496.182332][T23992] name failslab, interval 1, probability 5, space 0, times 9637 [ 1496.182356][T23992] CPU: 2 UID: 0 PID: 23992 Comm: syz.6.5320 Tainted: G L syzkaller #0 PREEMPT(full) [ 1496.182372][T23992] Tainted: [L]=SOFTLOCKUP [ 1496.182377][T23992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1496.182384][T23992] Call Trace: [ 1496.182389][T23992] [ 1496.182394][T23992] dump_stack_lvl+0x100/0x190 [ 1496.182418][T23992] should_fail_ex.cold+0x5/0xa [ 1496.182435][T23992] should_failslab+0xc2/0x120 [ 1496.182451][T23992] __kmalloc_noprof+0xfc/0x840 [ 1496.182463][T23992] ? rcu_is_watching+0x13/0xc0 [ 1496.182481][T23992] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1496.182497][T23992] tomoyo_realpath_from_path+0xb6/0x690 [ 1496.182513][T23992] tomoyo_path_number_perm+0x23c/0x580 [ 1496.182530][T23992] ? tomoyo_path_number_perm+0x22e/0x580 [ 1496.182548][T23992] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1496.182567][T23992] ? get_pid_task+0x106/0x250 [ 1496.182597][T23992] ? __lock_acquire+0x5c0/0x1f40 [ 1496.182629][T23992] ? __fget_files+0x34/0x3d0 [ 1496.182654][T23992] ? find_held_lock+0x2b/0x80 [ 1496.182671][T23992] ? __fget_files+0x215/0x3d0 [ 1496.182683][T23992] ? hook_file_ioctl_common+0x140/0x440 [ 1496.182702][T23992] ? __fget_files+0x215/0x3d0 [ 1496.182718][T23992] ? __fget_files+0x21f/0x3d0 [ 1496.182734][T23992] security_file_ioctl_compat+0xd3/0x230 [ 1496.182754][T23992] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1496.182769][T23992] __do_fast_syscall_32+0x14d/0x8e0 [ 1496.182787][T23992] ? lockdep_hardirqs_on+0x7d/0x110 [ 1496.182806][T23992] do_fast_syscall_32+0x32/0x70 [ 1496.182824][T23992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1496.182840][T23992] RIP: 0023:0xf73befbc [ 1496.182850][T23992] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1496.182861][T23992] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1496.182873][T23992] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005393 [ 1496.182881][T23992] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1496.182888][T23992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1496.182895][T23992] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1496.182902][T23992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1496.182917][T23992] [ 1496.183007][T23992] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1496.226859][T23993] overlayfs: failed to resolve './file2': -2 [ 1496.319109][T23996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5321'. [ 1496.330368][T23990] pci_bus 0000:01: busn_res: [bus 01] is released [ 1496.423670][T24001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5317'. [ 1496.423722][T24001] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5317'. [ 1496.885741][T23993] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1496.897859][T23993] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1496.898180][T23993] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1496.898441][T23993] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1496.902158][T23993] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1496.902635][T23993] pci 0000:00:04.0: enabling Extended Tags [ 1496.956432][T23993] pci 0000:00:04.0: Adding to iommu group 4 [ 1496.978471][T23993] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1496.986033][T23993] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1496.986066][T23993] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1496.986140][T23993] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1496.986158][T23993] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1496.986176][T23993] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1496.986241][T23993] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1496.986299][T23993] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1496.987510][T23993] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1496.993030][T23993] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1497.085785][T23993] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1497.093281][T23993] aer 0000:00:04.0:pcie002: error -EINTR: request_irq(26) aer_irq aer_isr aerdrv [ 1497.099544][T23993] pcieport 0000:00:04.0: AER: request AER IRQ 26 failed [ 1497.099560][T23993] aer 0000:00:04.0:pcie002: probe with driver aer failed with error -4 [ 1497.356019][T24020] pci_bus 0000:01: busn_res: [bus 01] is released [ 1497.376533][T24022] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1497.380648][T24022] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1497.380787][T24022] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1497.380924][T24022] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1497.382915][T24022] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1497.383872][T24022] pci 0000:00:04.0: enabling Extended Tags [ 1497.401302][T24022] pci 0000:00:04.0: Adding to iommu group 4 [ 1497.433046][T24022] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1497.435779][T24022] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1497.435831][T24022] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1497.435905][T24022] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1497.435923][T24022] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1497.435941][T24022] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1497.436030][T24022] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1497.436086][T24022] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1497.437801][T24022] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1497.439359][T24022] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1497.471296][T24023] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5328'. [ 1497.471350][T24023] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5328'. [ 1497.476667][T24022] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1497.510710][T24022] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1497.726658][T24035] bridge_slave_0: left allmulticast mode [ 1497.726686][T24035] bridge_slave_0: left promiscuous mode [ 1497.726929][T24035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.743015][T24035] bridge_slave_1: left allmulticast mode [ 1497.743043][T24035] bridge_slave_1: left promiscuous mode [ 1497.743305][T24035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.754352][T24035] bond0: (slave bond_slave_0): Releasing backup interface [ 1497.763385][T24035] bond0: (slave bond_slave_1): Releasing backup interface [ 1497.770902][T24035] team0: Port device team_slave_0 removed [ 1497.775393][T24035] team0: Port device team_slave_1 removed [ 1497.776173][T24035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1497.776194][T24035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1497.777804][T24035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1497.777824][T24035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1497.785208][T24035] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1497.839122][ T7280] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 1497.909771][T24035] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5333'. [ 1497.918248][T24035] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5333'. [ 1498.000103][ T7280] usb 11-1: Using ep0 maxpacket: 8 [ 1498.000625][ T7280] usb 11-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1498.001472][ T7280] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 1498.001501][ T7280] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1498.001514][ T7280] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1498.001527][ T7280] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1498.001542][ T7280] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1498.001563][ T7280] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.135174][T24042] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5334'. [ 1498.135190][T24042] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5334'. [ 1498.213781][T24031] FAULT_INJECTION: forcing a failure. [ 1498.213781][T24031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1498.213802][T24031] CPU: 3 UID: 0 PID: 24031 Comm: syz.6.5331 Tainted: G L syzkaller #0 PREEMPT(full) [ 1498.213818][T24031] Tainted: [L]=SOFTLOCKUP [ 1498.213823][T24031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1498.213830][T24031] Call Trace: [ 1498.213835][T24031] [ 1498.213840][T24031] dump_stack_lvl+0x100/0x190 [ 1498.213863][T24031] should_fail_ex.cold+0x5/0xa [ 1498.213881][T24031] _copy_to_user+0x32/0xd0 [ 1498.213902][T24031] simple_read_from_buffer+0xcb/0x170 [ 1498.213919][T24031] proc_fail_nth_read+0x1af/0x230 [ 1498.213937][T24031] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1498.213954][T24031] ? rw_verify_area+0xce/0x6d0 [ 1498.213966][T24031] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1498.213982][T24031] vfs_read+0x1e4/0xb30 [ 1498.213995][T24031] ? lock_acquire+0x1d1/0x380 [ 1498.214008][T24031] ? __fget_files+0x34/0x3d0 [ 1498.214022][T24031] ? __pfx_vfs_read+0x10/0x10 [ 1498.214033][T24031] ? find_held_lock+0x2b/0x80 [ 1498.214051][T24031] ? __fget_files+0x215/0x3d0 [ 1498.214068][T24031] ? __fget_files+0x21f/0x3d0 [ 1498.214085][T24031] ksys_read+0x12a/0x250 [ 1498.214098][T24031] ? __pfx_ksys_read+0x10/0x10 [ 1498.214115][T24031] do_int80_emulation+0x16a/0x670 [ 1498.214136][T24031] asm_int80_emulation+0x1a/0x20 [ 1498.214148][T24031] RIP: 0023:0xf7117f6b [ 1498.214158][T24031] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1498.214169][T24031] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1498.214181][T24031] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53d65d0 [ 1498.214189][T24031] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1498.214195][T24031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1498.214202][T24031] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1498.214209][T24031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1498.214224][T24031] [ 1498.308000][T24046] veth0: entered promiscuous mode [ 1498.314143][T24045] veth0: left promiscuous mode [ 1498.524965][ T43] audit: type=1326 audit(1794273247.616:81675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24050 comm="syz.8.5338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fbc code=0x7fc00000 [ 1498.526247][ T43] audit: type=1326 audit(1794273247.616:81676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24050 comm="syz.8.5338" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7137f6b code=0x7fc00000 [ 1498.526729][ T43] audit: type=1326 audit(1794273247.616:81677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24050 comm="syz.8.5338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fbc code=0x7fc00000 [ 1498.526825][ T43] audit: type=1326 audit(1794273247.616:81678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24050 comm="syz.8.5338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fbc code=0x7fc00000 [ 1498.526920][ T43] audit: type=1326 audit(1794273247.616:81679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24050 comm="syz.8.5338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fbc code=0x7fc00000 [ 1498.527115][ T43] audit: type=1326 audit(1794273247.616:81680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24050 comm="syz.8.5338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fbc code=0x7fc00000 [ 1498.527239][ T43] audit: type=1326 audit(1794273247.616:81681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24050 comm="syz.8.5338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fbc code=0x7fc00000 [ 1498.527380][ T43] audit: type=1326 audit(1794273247.616:81682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24050 comm="syz.8.5338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fbc code=0x7fc00000 [ 1498.527580][ T43] audit: type=1326 audit(1794273247.616:81683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24050 comm="syz.8.5338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fbc code=0x7fc00000 [ 1498.527827][ T43] audit: type=1326 audit(1794273247.616:81684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24050 comm="syz.8.5338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45fbc code=0x7fc00000 [ 1498.531086][ T7280] usb 11-1: usb_control_msg returned -32 [ 1498.531111][ T7280] usbtmc 11-1:16.0: can't read capabilities [ 1498.534897][ T7280] usb 11-1: USB disconnect, device number 7 [ 1498.994386][T24094] veth0: entered promiscuous mode [ 1498.995066][T24093] veth0: left promiscuous mode [ 1499.133343][T24104] FAULT_INJECTION: forcing a failure. [ 1499.133343][T24104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1499.133365][T24104] CPU: 3 UID: 0 PID: 24104 Comm: syz.8.5353 Tainted: G L syzkaller #0 PREEMPT(full) [ 1499.133382][T24104] Tainted: [L]=SOFTLOCKUP [ 1499.133387][T24104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1499.133394][T24104] Call Trace: [ 1499.133399][T24104] [ 1499.133404][T24104] dump_stack_lvl+0x100/0x190 [ 1499.133427][T24104] should_fail_ex.cold+0x5/0xa [ 1499.133445][T24104] _copy_from_user+0x2e/0xd0 [ 1499.133466][T24104] get_compat_msghdr+0xb3/0x480 [ 1499.133484][T24104] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1499.133505][T24104] ___sys_sendmsg+0x1b6/0x1e0 [ 1499.133522][T24104] ? __pfx____sys_sendmsg+0x10/0x10 [ 1499.133543][T24104] ? find_held_lock+0x2b/0x80 [ 1499.133570][T24104] __sys_sendmsg+0x160/0x210 [ 1499.133589][T24104] ? __pfx___sys_sendmsg+0x10/0x10 [ 1499.133616][T24104] __do_fast_syscall_32+0x14d/0x8e0 [ 1499.133635][T24104] ? lockdep_hardirqs_on+0x7d/0x110 [ 1499.133657][T24104] do_fast_syscall_32+0x32/0x70 [ 1499.133676][T24104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1499.133692][T24104] RIP: 0023:0xf7f45fbc [ 1499.133702][T24104] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1499.133714][T24104] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1499.133726][T24104] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 1499.133734][T24104] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1499.133741][T24104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1499.133748][T24104] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1499.133754][T24104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1499.133769][T24104] [ 1499.391175][T24119] veth0: entered promiscuous mode [ 1499.391627][T24118] veth0: left promiscuous mode [ 1499.530850][T24127] netlink: 312 bytes leftover after parsing attributes in process `syz.5.5363'. [ 1499.530873][T24127] netlink: 'syz.5.5363': attribute type 1 has an invalid length. [ 1499.533001][T24129] netlink: 312 bytes leftover after parsing attributes in process `syz.5.5363'. [ 1499.533016][T24129] netlink: 'syz.5.5363': attribute type 1 has an invalid length. [ 1499.685292][T24146] veth0: entered promiscuous mode [ 1499.685893][T24145] veth0: left promiscuous mode [ 1499.853727][T24158] batman_adv: batadv0: Adding interface: dummy0 [ 1499.853739][T24158] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.854004][T24158] batman_adv: batadv0: Interface activated: dummy0 [ 1499.912420][T24160] overlayfs: failed to resolve './file2': -2 [ 1499.953990][T24163] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5370'. [ 1499.954041][T24163] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5370'. [ 1500.052407][T24174] veth0: entered promiscuous mode [ 1500.052963][T24173] veth0: left promiscuous mode [ 1500.202377][T24185] tipc: Started in network mode [ 1500.202396][T24185] tipc: Node identity 7f000001, cluster identity 4711 [ 1500.206929][T24185] tipc: Enabling of bearer rejected, failed to enable media [ 1500.297541][T24187] IPVS: Unknown mcast interface: bridge_slave_0 [ 1500.307900][T24189] FAULT_INJECTION: forcing a failure. [ 1500.307900][T24189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1500.307931][T24189] CPU: 3 UID: 0 PID: 24189 Comm: syz.8.5386 Tainted: G L syzkaller #0 PREEMPT(full) [ 1500.307956][T24189] Tainted: [L]=SOFTLOCKUP [ 1500.307963][T24189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1500.307997][T24189] Call Trace: [ 1500.308004][T24189] [ 1500.308012][T24189] dump_stack_lvl+0x100/0x190 [ 1500.308047][T24189] should_fail_ex.cold+0x5/0xa [ 1500.308076][T24189] _copy_from_user+0x2e/0xd0 [ 1500.308108][T24189] get_compat_msghdr+0xb3/0x480 [ 1500.308136][T24189] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1500.308178][T24189] ___sys_sendmsg+0x1b6/0x1e0 [ 1500.308205][T24189] ? __pfx____sys_sendmsg+0x10/0x10 [ 1500.308242][T24189] ? find_held_lock+0x2b/0x80 [ 1500.308289][T24189] __sys_sendmsg+0x160/0x210 [ 1500.308334][T24189] ? __pfx___sys_sendmsg+0x10/0x10 [ 1500.308378][T24189] __do_fast_syscall_32+0x14d/0x8e0 [ 1500.308424][T24189] ? lockdep_hardirqs_on+0x7d/0x110 [ 1500.308454][T24189] do_fast_syscall_32+0x32/0x70 [ 1500.308485][T24189] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1500.308510][T24189] RIP: 0023:0xf7f45fbc [ 1500.308526][T24189] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1500.308545][T24189] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1500.308565][T24189] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 1500.308577][T24189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1500.308589][T24189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1500.308601][T24189] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1500.308613][T24189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1500.308638][T24189] [ 1500.387040][T24191] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1500.527579][T24197] FAULT_INJECTION: forcing a failure. [ 1500.527579][T24197] name failslab, interval 1, probability 5, space 0, times 9636 [ 1500.527614][T24197] CPU: 0 UID: 0 PID: 24197 Comm: syz.8.5390 Tainted: G L syzkaller #0 PREEMPT(full) [ 1500.527638][T24197] Tainted: [L]=SOFTLOCKUP [ 1500.527645][T24197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1500.527657][T24197] Call Trace: [ 1500.527664][T24197] [ 1500.527672][T24197] dump_stack_lvl+0x100/0x190 [ 1500.527708][T24197] should_fail_ex.cold+0x5/0xa [ 1500.527738][T24197] should_failslab+0xc2/0x120 [ 1500.527764][T24197] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1500.527786][T24197] ? audit_log_start+0x29d/0x930 [ 1500.527831][T24197] audit_log_start+0x29d/0x930 [ 1500.527855][T24197] ? __pfx_audit_log_start+0x10/0x10 [ 1500.527883][T24197] ? rcu_read_lock_any_held+0x6a/0x90 [ 1500.527914][T24197] ? find_held_lock+0x2b/0x80 [ 1500.527945][T24197] audit_seccomp+0x60/0x190 [ 1500.528013][T24197] __seccomp_filter+0x88c/0x1130 [ 1500.528049][T24197] ? __pfx___seccomp_filter+0x10/0x10 [ 1500.528083][T24197] ? find_held_lock+0x2b/0x80 [ 1500.528110][T24197] ? __might_fault+0xc5/0x140 [ 1500.528147][T24197] ? __might_fault+0xc5/0x140 [ 1500.528175][T24197] __seccomp_permit_syscall+0x207/0x2d0 [ 1500.528208][T24197] __do_fast_syscall_32+0x433/0x8e0 [ 1500.528238][T24197] ? lockdep_hardirqs_on+0x7d/0x110 [ 1500.528269][T24197] do_fast_syscall_32+0x32/0x70 [ 1500.528300][T24197] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1500.528339][T24197] RIP: 0023:0xf7f45fbc [ 1500.528358][T24197] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1500.528376][T24197] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 00000000000000b1 [ 1500.528396][T24197] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 1500.528409][T24197] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 1500.528421][T24197] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1500.528432][T24197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1500.528445][T24197] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1500.528470][T24197] [ 1500.800950][T24205] FAULT_INJECTION: forcing a failure. [ 1500.800950][T24205] name failslab, interval 1, probability 5, space 0, times 9635 [ 1500.800985][T24205] CPU: 0 UID: 0 PID: 24205 Comm: syz.8.5394 Tainted: G L syzkaller #0 PREEMPT(full) [ 1500.801013][T24205] Tainted: [L]=SOFTLOCKUP [ 1500.801020][T24205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1500.801032][T24205] Call Trace: [ 1500.801039][T24205] [ 1500.801047][T24205] dump_stack_lvl+0x100/0x190 [ 1500.801084][T24205] should_fail_ex.cold+0x5/0xa [ 1500.801111][T24205] should_failslab+0xc2/0x120 [ 1500.801134][T24205] __kmalloc_cache_noprof+0x91/0x6d0 [ 1500.801164][T24205] ? __do_sys_io_uring_register+0x18b0/0x1ce0 [ 1500.801209][T24205] __do_sys_io_uring_register+0x18b0/0x1ce0 [ 1500.801236][T24205] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1500.801264][T24205] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 1500.801293][T24205] ? lock_acquire+0x1d1/0x380 [ 1500.801314][T24205] ? __might_fault+0xc5/0x140 [ 1500.801337][T24205] ? find_held_lock+0x2b/0x80 [ 1500.801363][T24205] ? __might_fault+0xc5/0x140 [ 1500.801384][T24205] ? __might_fault+0xc5/0x140 [ 1500.801414][T24205] __do_fast_syscall_32+0x14d/0x8e0 [ 1500.801446][T24205] do_fast_syscall_32+0x32/0x70 [ 1500.801473][T24205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1500.801503][T24205] RIP: 0023:0xf7f45fbc [ 1500.801519][T24205] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1500.801537][T24205] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ab [ 1500.801557][T24205] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000000025 [ 1500.801569][T24205] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1500.801579][T24205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1500.801591][T24205] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1500.801602][T24205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1500.801626][T24205] [ 1501.079480][ T1045] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 1501.251752][ T1045] usb 14-1: Using ep0 maxpacket: 8 [ 1501.252465][ T1045] usb 14-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1501.334509][ T1045] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 1501.334540][ T1045] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1501.334553][ T1045] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1501.334566][ T1045] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1501.334579][ T1045] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1501.334605][ T1045] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.522875][ T5166] block nbd0: Possible stuck request ffff88802965e000: control (read@0,1024B). Runtime 390 seconds [ 1501.522901][ T5166] block nbd0: Possible stuck request ffff88802965e1c0: control (read@1024,3072B). Runtime 390 seconds [ 1501.551078][ T1045] usb 14-1: usb_control_msg returned -32 [ 1501.551104][ T1045] usbtmc 14-1:16.0: can't read capabilities [ 1501.744213][T24248] FAULT_INJECTION: forcing a failure. [ 1501.744213][T24248] name failslab, interval 1, probability 5, space 0, times 9634 [ 1501.744236][T24248] CPU: 2 UID: 0 PID: 24248 Comm: syz.8.5410 Tainted: G L syzkaller #0 PREEMPT(full) [ 1501.744253][T24248] Tainted: [L]=SOFTLOCKUP [ 1501.744258][T24248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1501.744265][T24248] Call Trace: [ 1501.744270][T24248] [ 1501.744275][T24248] dump_stack_lvl+0x100/0x190 [ 1501.744298][T24248] should_fail_ex.cold+0x5/0xa [ 1501.744317][T24248] should_failslab+0xc2/0x120 [ 1501.744333][T24248] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1501.744346][T24248] ? find_held_lock+0x2b/0x80 [ 1501.744364][T24248] ? sock_alloc_inode+0x26/0x2c0 [ 1501.744379][T24248] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1501.744393][T24248] sock_alloc_inode+0x26/0x2c0 [ 1501.744406][T24248] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1501.744419][T24248] alloc_inode+0x68/0x250 [ 1501.744438][T24248] sock_alloc+0x42/0x240 [ 1501.744450][T24248] __sock_create+0xc2/0x860 [ 1501.744469][T24248] __sys_socket+0x14d/0x260 [ 1501.744485][T24248] ? __pfx___sys_socket+0x10/0x10 [ 1501.744501][T24248] ? __might_fault+0xc5/0x140 [ 1501.744520][T24248] __ia32_sys_socket+0x72/0xb0 [ 1501.744537][T24248] __do_fast_syscall_32+0x14d/0x8e0 [ 1501.744558][T24248] do_fast_syscall_32+0x32/0x70 [ 1501.744577][T24248] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1501.744592][T24248] RIP: 0023:0xf7f45fbc [ 1501.744602][T24248] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1501.744614][T24248] RSP: 002b:00000000f53b450c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 1501.744626][T24248] RAX: ffffffffffffffda RBX: 000000000000002b RCX: 0000000000000805 [ 1501.744647][T24248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1501.744659][T24248] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1501.744667][T24248] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1501.744675][T24248] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1501.744691][T24248] [ 1501.744698][T24248] socket: no more sockets [ 1501.906374][T24250] usbtmc 14-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 1501.958589][T24246] tipc: Enabling of bearer rejected, failed to enable media [ 1502.108211][ T5893] usb 14-1: USB disconnect, device number 2 [ 1502.202760][T24263] pci_bus 0000:01: busn_res: [bus 01] is released [ 1502.236126][T24264] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1502.242772][T24264] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1502.242912][T24264] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1502.243007][T24264] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1502.244585][T24264] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1502.245183][T24264] pci 0000:00:04.0: enabling Extended Tags [ 1502.267173][T24264] pci 0000:00:04.0: Adding to iommu group 4 [ 1502.276353][T24264] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1502.281246][T24264] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1502.281277][T24264] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1502.281351][T24264] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1502.281368][T24264] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1502.281385][T24264] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1502.281450][T24264] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1502.281505][T24264] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1502.283603][T24264] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1502.285100][T24264] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1502.385301][T24264] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1502.393548][T24264] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1502.633424][T24269] pci_bus 0000:01: busn_res: [bus 01] is released [ 1502.669697][T24270] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1502.674239][T24270] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1502.674429][T24270] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1502.674561][T24270] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1502.676617][T24270] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1502.677204][T24270] pci 0000:00:04.0: enabling Extended Tags [ 1502.678674][T24272] FAULT_INJECTION: forcing a failure. [ 1502.678674][T24272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1502.678694][T24272] CPU: 0 UID: 0 PID: 24272 Comm: syz.9.5419 Tainted: G L syzkaller #0 PREEMPT(full) [ 1502.678714][T24272] Tainted: [L]=SOFTLOCKUP [ 1502.678727][T24272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1502.678739][T24272] Call Trace: [ 1502.678746][T24272] [ 1502.678753][T24272] dump_stack_lvl+0x100/0x190 [ 1502.678784][T24272] should_fail_ex.cold+0x5/0xa [ 1502.678802][T24272] _copy_from_user+0x2e/0xd0 [ 1502.678822][T24272] uhid_char_write+0x16d/0xfe0 [ 1502.678842][T24272] vfs_write+0x2aa/0x1040 [ 1502.678856][T24272] ? __pfx_uhid_char_write+0x10/0x10 [ 1502.678872][T24272] ? lock_acquire+0x1d1/0x380 [ 1502.678885][T24272] ? __fget_files+0x34/0x3d0 [ 1502.678900][T24272] ? __pfx_vfs_write+0x10/0x10 [ 1502.678911][T24272] ? find_held_lock+0x2b/0x80 [ 1502.678929][T24272] ? __fget_files+0x215/0x3d0 [ 1502.678942][T24272] ? __fget_files+0x215/0x3d0 [ 1502.678958][T24272] ? __fget_files+0x21f/0x3d0 [ 1502.678976][T24272] ksys_write+0x1f8/0x250 [ 1502.678989][T24272] ? __pfx_ksys_write+0x10/0x10 [ 1502.679007][T24272] __do_fast_syscall_32+0x14d/0x8e0 [ 1502.679026][T24272] ? lockdep_hardirqs_on+0x7d/0x110 [ 1502.679044][T24272] do_fast_syscall_32+0x32/0x70 [ 1502.679063][T24272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1502.679078][T24272] RIP: 0023:0xf743efbc [ 1502.679089][T24272] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1502.679100][T24272] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1502.679112][T24272] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000640 [ 1502.679120][T24272] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1502.679127][T24272] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1502.679134][T24272] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1502.679141][T24272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1502.679156][T24272] [ 1502.714526][T22689] lg-g15 0003:046D:0A07.000F: hidraw1: USB HID v0.06 Device [syz0] on syz0 [ 1502.725243][T22689] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000F/input/input28 [ 1502.804673][T24270] pci 0000:00:04.0: Adding to iommu group 4 [ 1502.851765][T24270] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1502.860008][T24270] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1502.860044][T24270] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1502.860121][T24270] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1502.860142][T24270] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1502.860163][T24270] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1502.862629][T24270] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1502.862701][T24270] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1502.871915][T24270] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1502.874727][T24270] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1502.976557][T24270] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1502.993067][T24270] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1503.308206][T24295] netlink: 'syz.9.5428': attribute type 7 has an invalid length. [ 1503.927700][T24308] FAULT_INJECTION: forcing a failure. [ 1503.927700][T24308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1503.927757][T24308] CPU: 1 UID: 0 PID: 24308 Comm: syz.8.5431 Tainted: G L syzkaller #0 PREEMPT(full) [ 1503.927775][T24308] Tainted: [L]=SOFTLOCKUP [ 1503.927779][T24308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1503.927787][T24308] Call Trace: [ 1503.927792][T24308] [ 1503.927797][T24308] dump_stack_lvl+0x100/0x190 [ 1503.927820][T24308] should_fail_ex.cold+0x5/0xa [ 1503.927839][T24308] _copy_from_user+0x2e/0xd0 [ 1503.927859][T24308] keyctl_pkey_params_get_2+0x105/0x3f0 [ 1503.927873][T24308] ? __pfx_keyctl_pkey_params_get_2+0x10/0x10 [ 1503.927886][T24308] ? find_held_lock+0x2b/0x80 [ 1503.927907][T24308] ? __lock_acquire+0x5c0/0x1f40 [ 1503.927922][T24308] keyctl_pkey_verify+0xac/0x2c0 [ 1503.927935][T24308] ? __pfx_keyctl_pkey_verify+0x10/0x10 [ 1503.927969][T24308] ? find_held_lock+0x2b/0x80 [ 1503.927988][T24308] ? __might_fault+0xc5/0x140 [ 1503.928003][T24308] ? __might_fault+0xc5/0x140 [ 1503.928020][T24308] __ia32_compat_sys_keyctl+0x44f/0x550 [ 1503.928046][T24308] __do_fast_syscall_32+0x14d/0x8e0 [ 1503.928064][T24308] ? lockdep_hardirqs_on+0x7d/0x110 [ 1503.928084][T24308] do_fast_syscall_32+0x32/0x70 [ 1503.928102][T24308] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1503.928118][T24308] RIP: 0023:0xf7f45fbc [ 1503.928129][T24308] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1503.928141][T24308] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 1503.928153][T24308] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 0000000080000880 [ 1503.928160][T24308] RDX: 00000000800008c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1503.928168][T24308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1503.928174][T24308] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1503.928182][T24308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1503.928196][T24308] [ 1504.087817][T24312] fuse: fd is not a fuse device [ 1504.186598][T24314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5435'. [ 1504.503226][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1504.519886][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1504.528807][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1504.534053][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1504.536532][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1504.901343][T14518] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.944967][T24330] veth0: entered promiscuous mode [ 1504.949907][T24329] veth0: left promiscuous mode [ 1505.108045][T14518] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.154734][T24321] rxe_eth0 speed is unknown, defaulting to 1000 [ 1505.251006][T14518] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.374405][T24339] CacheFiles: No cache directory specified [ 1505.380000][T14518] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.097169][T14518] bond0 (unregistering): Released all slaves [ 1506.108965][T14518] bond1 (unregistering): Released all slaves [ 1506.123682][T14518] bond2 (unregistering): Released all slaves [ 1506.149918][T14518] bond3 (unregistering): Released all slaves [ 1506.166688][T14518] bond4 (unregistering): Released all slaves [ 1506.184374][T14518] bond5 (unregistering): Released all slaves [ 1506.209762][T24350] veth0: entered promiscuous mode [ 1506.229186][T24349] veth0: left promiscuous mode [ 1506.512211][T24321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.512329][T24321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.512436][T24321] bridge_slave_0: entered allmulticast mode [ 1506.517444][T24321] bridge_slave_0: entered promiscuous mode [ 1506.523373][T24362] overlayfs: failed to resolve './file2': -2 [ 1506.526003][T24321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.526052][T24321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.526119][T24321] bridge_slave_1: entered allmulticast mode [ 1506.526775][T24321] bridge_slave_1: entered promiscuous mode [ 1506.546751][T24360] pci_bus 0000:01: busn_res: [bus 01] is released [ 1506.551749][ T67] Bluetooth: hci0: command tx timeout [ 1506.569086][T24321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1506.621710][T24321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1506.638094][T24362] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1506.647357][T24362] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1506.647546][T24362] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1506.647679][T24362] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1506.651665][T24362] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1506.652311][T24362] pci 0000:00:04.0: enabling Extended Tags [ 1506.775444][T24362] pci 0000:00:04.0: Adding to iommu group 4 [ 1506.790215][ T5505] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1506.794998][T24321] team0: Port device team_slave_0 added [ 1506.795922][T24362] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1506.797100][T24321] team0: Port device team_slave_1 added [ 1506.803669][T24362] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1506.803728][T24362] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1506.803844][T24362] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1506.803874][T24362] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1506.803903][T24362] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1506.804091][T24362] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1506.804192][T24362] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1506.806010][T24362] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1506.807132][T24362] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1506.904909][T24362] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1506.962523][T24362] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1506.974048][T24321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1506.974059][T24321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1506.974074][T24321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1506.974941][T24321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1506.974950][T24321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1506.974965][T24321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1507.118885][T24321] hsr_slave_0: entered promiscuous mode [ 1507.131521][T24321] hsr_slave_1: entered promiscuous mode [ 1507.132100][T24321] debugfs: 'hsr0' already exists in 'hsr' [ 1507.132114][T24321] Cannot create hsr debugfs directory [ 1507.204146][T14518] hsr_slave_0: left promiscuous mode [ 1507.204822][T14518] hsr_slave_1: left promiscuous mode [ 1507.205518][T14518] batman_adv: batadv0: Interface deactivated: dummy0 [ 1507.205534][T14518] batman_adv: batadv0: Removing interface: dummy0 [ 1507.212765][T24373] pci_bus 0000:01: busn_res: [bus 01] is released [ 1507.233473][T14518] veth1_macvtap: left promiscuous mode [ 1507.233541][T14518] veth0_macvtap: left promiscuous mode [ 1507.233688][T14518] veth1_vlan: left promiscuous mode [ 1507.233794][T14518] veth0_vlan: left promiscuous mode [ 1507.291638][T24374] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1507.304412][T24374] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1507.304615][T24374] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1507.304747][T24374] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1507.309934][T24374] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1507.310791][T24374] pci 0000:00:04.0: enabling Extended Tags [ 1507.325051][T24374] pci 0000:00:04.0: Adding to iommu group 4 [ 1507.341506][T24384] overlayfs: failed to resolve './file2': -2 [ 1507.358641][T24374] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1507.361521][T24374] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1507.361555][T24374] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1507.361629][T24374] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1507.361647][T24374] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1507.361665][T24374] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1507.361733][T24374] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1507.361793][T24374] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1507.369585][T24374] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1507.370418][T24374] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1507.437270][T24374] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1507.452199][T24374] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1507.701725][ T5505] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1508.065414][T24394] /dev/sr0: Can't open blockdev [ 1508.176482][T14518] IPVS: stop unused estimator thread 0... [ 1508.398971][T24404] overlayfs: failed to resolve './file1': -2 [ 1508.628471][ T67] Bluetooth: hci0: command tx timeout [ 1508.947195][T24321] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1508.954937][T24321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1508.956065][T24321] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1508.961752][T24321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1508.964463][T24321] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1508.970638][T24321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1508.971475][T24321] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1508.975302][T24321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1509.158141][T24321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.166896][T24321] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.173860][ T251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.173909][ T251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.181253][ T251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.181304][ T251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.498131][T24321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.676394][T24321] veth0_vlan: entered promiscuous mode [ 1509.680378][T24321] veth1_vlan: entered promiscuous mode [ 1509.695984][T24321] veth0_macvtap: entered promiscuous mode [ 1509.707709][T24321] veth1_macvtap: entered promiscuous mode [ 1509.721820][T24321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1509.722380][T24454] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5455'. [ 1509.739456][T24321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1509.779533][T20747] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.779574][T20747] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.779603][T20747] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.779632][T20747] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.810644][ T448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.810665][ T448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.858048][ T448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.858069][ T448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.051441][T24460] pci_bus 0000:01: busn_res: [bus 01] is released [ 1510.101496][T24460] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1510.105989][T24460] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1510.106177][T24460] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1510.106306][T24460] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1510.109377][T24460] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1510.110034][T24460] pci 0000:00:04.0: enabling Extended Tags [ 1510.120009][T24460] pci 0000:00:04.0: Adding to iommu group 4 [ 1510.126838][T24460] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1510.129856][T24460] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1510.129891][T24460] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1510.129965][T24460] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1510.129982][T24460] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1510.130000][T24460] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1510.130066][T24460] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1510.130126][T24460] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1510.131817][T24460] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1510.133248][T24460] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1510.179805][T24460] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1510.183036][T24460] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1510.251797][T24464] FAULT_INJECTION: forcing a failure. [ 1510.251797][T24464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1510.251819][T24464] CPU: 1 UID: 0 PID: 24464 Comm: syz.8.5457 Tainted: G L syzkaller #0 PREEMPT(full) [ 1510.251836][T24464] Tainted: [L]=SOFTLOCKUP [ 1510.251840][T24464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1510.251847][T24464] Call Trace: [ 1510.251852][T24464] [ 1510.251857][T24464] dump_stack_lvl+0x100/0x190 [ 1510.251880][T24464] should_fail_ex.cold+0x5/0xa [ 1510.251898][T24464] _copy_from_user+0x2e/0xd0 [ 1510.251918][T24464] sk_setsockopt+0x2f2/0x5fc0 [ 1510.251954][T24464] ? __pfx_sk_setsockopt+0x10/0x10 [ 1510.251974][T24464] ? aa_sock_opt_perm+0x114/0x1e0 [ 1510.251992][T24464] do_sock_setsockopt+0x193/0x1d0 [ 1510.252007][T24464] __sys_setsockopt+0x119/0x190 [ 1510.252028][T24464] __ia32_sys_setsockopt+0xbc/0x160 [ 1510.252045][T24464] ? __might_fault+0x111/0x140 [ 1510.252062][T24464] __do_fast_syscall_32+0x14d/0x8e0 [ 1510.252081][T24464] ? lockdep_hardirqs_on+0x7d/0x110 [ 1510.252099][T24464] do_fast_syscall_32+0x32/0x70 [ 1510.252123][T24464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1510.252139][T24464] RIP: 0023:0xf7f45fbc [ 1510.252149][T24464] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1510.252161][T24464] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1510.252173][T24464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 1510.252181][T24464] RDX: 000000000000004a RSI: 0000000080000240 RDI: 0000000000000004 [ 1510.252189][T24464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1510.252196][T24464] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1510.252203][T24464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1510.252218][T24464] [ 1510.584321][T24466] Bluetooth: MGMT ver 1.23 [ 1510.718600][T20696] Bluetooth: hci0: command tx timeout [ 1510.766882][T24476] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5459'. [ 1510.766926][T24476] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5459'. [ 1511.357442][T24478] pci_bus 0000:01: busn_res: [bus 01] is released [ 1511.359962][T24479] overlayfs: failed to resolve './file2': -2 [ 1511.405410][T24479] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1511.420271][T24479] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1511.420421][T24479] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1511.420518][T24479] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1511.426244][T24479] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1511.427004][T24479] pci 0000:00:04.0: enabling Extended Tags [ 1511.460149][T24483] FAULT_INJECTION: forcing a failure. [ 1511.460149][T24483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1511.460176][T24483] CPU: 3 UID: 0 PID: 24483 Comm: syz.8.5462 Tainted: G L syzkaller #0 PREEMPT(full) [ 1511.460202][T24483] Tainted: [L]=SOFTLOCKUP [ 1511.460208][T24483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1511.460219][T24483] Call Trace: [ 1511.460226][T24483] [ 1511.460233][T24483] dump_stack_lvl+0x100/0x190 [ 1511.460265][T24483] should_fail_ex.cold+0x5/0xa [ 1511.460287][T24483] _copy_from_user+0x2e/0xd0 [ 1511.460318][T24483] get_compat_msghdr+0xb3/0x480 [ 1511.460344][T24483] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1511.460371][T24483] ? __lock_acquire+0x5c0/0x1f40 [ 1511.460392][T24483] ___sys_recvmsg+0x193/0x1a0 [ 1511.460414][T24483] ? __pfx____sys_recvmsg+0x10/0x10 [ 1511.460437][T24483] ? lock_acquire+0x1d1/0x380 [ 1511.460476][T24483] do_recvmmsg+0x548/0x750 [ 1511.460501][T24483] ? __pfx_do_recvmmsg+0x10/0x10 [ 1511.460527][T24483] ? find_held_lock+0x2b/0x80 [ 1511.460552][T24483] ? ksys_write+0x190/0x250 [ 1511.460571][T24483] ? ksys_write+0x190/0x250 [ 1511.460601][T24483] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1511.460645][T24483] __sys_recvmmsg+0x21f/0x270 [ 1511.460665][T24483] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1511.460684][T24483] ? __might_fault+0xc5/0x140 [ 1511.460706][T24483] ? __might_fault+0xc5/0x140 [ 1511.460732][T24483] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 1511.460754][T24483] ? __might_fault+0x111/0x140 [ 1511.460776][T24483] __do_fast_syscall_32+0x14d/0x8e0 [ 1511.460802][T24483] ? lockdep_hardirqs_on+0x7d/0x110 [ 1511.460830][T24483] do_fast_syscall_32+0x32/0x70 [ 1511.460858][T24483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1511.460876][T24483] RIP: 0023:0xf7f45fbc [ 1511.460891][T24483] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1511.460908][T24483] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 1511.460925][T24483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 1511.460937][T24483] RDX: 0000000000000001 RSI: 0000000000000022 RDI: 0000000000000000 [ 1511.460947][T24483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1511.460957][T24483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1511.460965][T24483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1511.460986][T24483] [ 1511.464679][T24479] pci 0000:00:04.0: Adding to iommu group 4 [ 1511.484076][T24479] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1511.486731][T24479] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1511.486762][T24479] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1511.486834][T24479] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1511.486852][T24479] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1511.486869][T24479] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1511.486933][T24479] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1511.487263][T24479] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1511.489641][T24479] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1511.491244][T24479] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1511.553193][T24479] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1511.579642][T24479] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1511.838671][T17159] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 1511.917251][T24496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5467'. [ 1511.917318][T24496] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5467'. [ 1512.001615][T17159] usb 14-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1512.002407][T17159] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.002432][T17159] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.010094][T17159] keyspan 14-1:1.0: Keyspan 2 port adapter converter detected [ 1512.010186][T17159] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 81 [ 1512.010214][T17159] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 1 [ 1512.010796][T17159] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 84 [ 1512.010829][T17159] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 2 [ 1512.013798][T17159] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1512.014542][T17159] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 88 [ 1512.014576][T17159] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 6 [ 1512.015191][T17159] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1512.317071][T24498] pci_bus 0000:01: busn_res: [bus 01] is released [ 1512.337822][T24499] overlayfs: failed to resolve './file2': -2 [ 1512.364408][T24499] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1512.370815][T24499] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1512.370971][T24499] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1512.371083][T24499] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1512.377092][T24499] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1512.377533][T24499] pci 0000:00:04.0: enabling Extended Tags [ 1512.392300][T24499] pci 0000:00:04.0: Adding to iommu group 4 [ 1512.403807][T24499] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1512.407397][T24499] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1512.407445][T24499] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1512.407575][T24499] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1512.407604][T24499] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1512.407632][T24499] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1512.407746][T24499] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1512.407929][T24499] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1512.411525][T24499] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1512.413248][T24499] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1512.484327][T24499] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1512.491703][ T8855] IPVS: starting estimator thread 0... [ 1512.494443][T24499] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1512.598456][T24502] IPVS: using max 42 ests per chain, 100800 per kthread [ 1512.631449][ T67] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1512.788420][ T67] Bluetooth: hci0: command 0x0419 tx timeout [ 1514.557330][T24528] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5478'. [ 1514.557376][T24528] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5478'. [ 1514.619215][ T43] kauditd_printk_skb: 32 callbacks suppressed [ 1514.619229][ T43] audit: type=1326 audit(1794273263.716:81715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.5.5479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1514.619346][ T43] audit: type=1326 audit(1794273263.716:81716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.5.5479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1514.619471][ T43] audit: type=1326 audit(1794273263.716:81717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.5.5479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1514.622705][ T43] audit: type=1326 audit(1794273263.716:81718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.5.5479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1514.622736][ T43] audit: type=1326 audit(1794273263.716:81719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.5.5479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1514.622978][ T43] audit: type=1326 audit(1794273263.716:81720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.5.5479" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1514.623002][ T43] audit: type=1326 audit(1794273263.716:81721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.5.5479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1514.623023][ T43] audit: type=1326 audit(1794273263.716:81722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.5.5479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1514.623387][ T43] audit: type=1326 audit(1794273263.716:81723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.5.5479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1514.623652][ T43] audit: type=1326 audit(1794273263.716:81724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24527 comm="syz.5.5479" exe="/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1514.880569][T20696] Bluetooth: hci0: command 0x0419 tx timeout [ 1514.882127][ T67] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1514.973134][ T5893] usb 14-1: USB disconnect, device number 3 [ 1515.082973][ T5893] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1515.135383][ T5893] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1515.302089][ T5893] keyspan 14-1:1.0: device disconnected [ 1515.442420][T24534] FAULT_INJECTION: forcing a failure. [ 1515.442420][T24534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1515.442441][T24534] CPU: 2 UID: 0 PID: 24534 Comm: syz.8.5481 Tainted: G L syzkaller #0 PREEMPT(full) [ 1515.442458][T24534] Tainted: [L]=SOFTLOCKUP [ 1515.442463][T24534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1515.442470][T24534] Call Trace: [ 1515.442479][T24534] [ 1515.442484][T24534] dump_stack_lvl+0x100/0x190 [ 1515.442507][T24534] should_fail_ex.cold+0x5/0xa [ 1515.442525][T24534] _copy_from_user+0x2e/0xd0 [ 1515.442546][T24534] move_addr_to_kernel+0x65/0x170 [ 1515.442563][T24534] __sys_sendto+0x1b8/0x4e0 [ 1515.442581][T24534] ? __pfx___sys_sendto+0x10/0x10 [ 1515.442608][T24534] ? find_held_lock+0x2b/0x80 [ 1515.442625][T24534] ? __might_fault+0xc5/0x140 [ 1515.442641][T24534] ? __might_fault+0xc5/0x140 [ 1515.442657][T24534] __ia32_sys_sendto+0xdd/0x1b0 [ 1515.442674][T24534] ? __might_fault+0x111/0x140 [ 1515.442690][T24534] __do_fast_syscall_32+0x14d/0x8e0 [ 1515.442708][T24534] ? lockdep_hardirqs_on+0x7d/0x110 [ 1515.442727][T24534] do_fast_syscall_32+0x32/0x70 [ 1515.442745][T24534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1515.442760][T24534] RIP: 0023:0xf7f45fbc [ 1515.442770][T24534] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1515.442782][T24534] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 1515.442794][T24534] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1515.442801][T24534] RDX: 0000000000000000 RSI: 000000000004c001 RDI: 00000000800000c0 [ 1515.442808][T24534] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1515.442815][T24534] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1515.442823][T24534] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1515.442837][T24534] [ 1515.483367][T24530] rxe_eth0 speed is unknown, defaulting to 1000 [ 1515.551259][T24537] overlayfs: failed to resolve './file2': -2 [ 1515.553499][T24538] overlayfs: failed to resolve './file2': -2 [ 1515.587425][T24532] pci_bus 0000:01: busn_res: [bus 01] is released [ 1515.639693][T24537] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1515.650865][T24537] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1515.651135][T24537] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1515.651252][T24537] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1515.654875][T24537] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1515.656429][T24537] pci 0000:00:04.0: enabling Extended Tags [ 1515.686922][T24537] pci 0000:00:04.0: Adding to iommu group 4 [ 1515.716137][T24537] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1515.721982][T24537] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1515.722016][T24537] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1515.724670][T24537] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1515.724693][T24537] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1515.724712][T24537] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1515.724781][T24537] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1515.724847][T24537] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1515.728452][T24537] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1515.730643][T24537] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1515.920680][T20696] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1515.922509][T20696] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1515.928769][T20696] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1515.940140][T20696] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1515.941583][T20696] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1515.942375][T24537] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1516.026656][T24537] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1516.135958][T24527] ima: policy update completed [ 1516.165046][T24551] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5485'. [ 1516.175225][T24551] xt_l2tp: wrong L2TP version: 7 [ 1516.246570][T24560] veth0: entered promiscuous mode [ 1516.247524][T24557] veth0: left promiscuous mode [ 1516.292648][T24540] rxe_eth0 speed is unknown, defaulting to 1000 [ 1516.522405][T24573] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5487'. [ 1516.522420][T24573] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5487'. [ 1516.588618][T24540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.588906][T24540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.589161][T24540] bridge_slave_0: entered allmulticast mode [ 1516.591015][T24540] bridge_slave_0: entered promiscuous mode [ 1516.593371][T24540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.593641][T24540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.594130][T24540] bridge_slave_1: entered allmulticast mode [ 1516.595511][T24540] bridge_slave_1: entered promiscuous mode [ 1516.622041][T24540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.625622][T24540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.649526][T24540] team0: Port device team_slave_0 added [ 1516.651441][T24540] team0: Port device team_slave_1 added [ 1516.763862][T24540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.763875][T24540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.763907][T24540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.767217][T24540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.767228][T24540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.767243][T24540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.815844][T24540] hsr_slave_0: entered promiscuous mode [ 1516.816435][T24540] hsr_slave_1: entered promiscuous mode [ 1516.925954][T24578] nvme_rdma: malformed address passed: 172.20.20.:4420 [ 1516.958778][ T67] Bluetooth: hci0: command 0x0419 tx timeout [ 1517.064812][T24585] overlayfs: failed to resolve './file2': -2 [ 1517.096491][T24582] pci_bus 0000:01: busn_res: [bus 01] is released [ 1517.131992][T24585] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1517.154262][T24585] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1517.154442][T24585] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1517.154558][T24585] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1517.155766][T24585] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1517.156212][T24585] pci 0000:00:04.0: enabling Extended Tags [ 1517.194982][T24585] pci 0000:00:04.0: Adding to iommu group 4 [ 1517.223732][T24585] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1517.226953][T24585] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1517.226988][T24585] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1517.227062][T24585] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1517.227079][T24585] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1517.227099][T24585] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1517.227167][T24585] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1517.227227][T24585] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1517.251859][T24585] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1517.252890][T24585] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1517.284626][T24595] loop7: detected capacity change from 0 to 16384 [ 1517.309801][T24585] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1517.313880][T24585] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1517.430618][T24603] use of bytesused == 0 is deprecated and will be removed in the future, [ 1517.430634][T24603] use the actual size instead. [ 1517.679208][ T25] usb 10-1: new low-speed USB device number 26 using dummy_hcd [ 1517.711257][T24600] loop7: detected capacity change from 16384 to 16376 [ 1517.808431][ T25] usb 10-1: device descriptor read/64, error -71 [ 1517.998537][ T67] Bluetooth: hci4: command tx timeout [ 1518.058620][ T25] usb 10-1: new low-speed USB device number 27 using dummy_hcd [ 1518.188463][ T25] usb 10-1: device descriptor read/64, error -71 [ 1518.308837][ T25] usb usb10-port1: attempt power cycle [ 1518.658438][ T25] usb 10-1: new low-speed USB device number 28 using dummy_hcd [ 1518.689236][ T25] usb 10-1: device descriptor read/8, error -71 [ 1518.938555][ T25] usb 10-1: new low-speed USB device number 29 using dummy_hcd [ 1518.969748][ T25] usb 10-1: device descriptor read/8, error -71 [ 1519.089753][ T25] usb usb10-port1: unable to enumerate USB device [ 1519.336348][T24569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1519.336365][T24569] nci: nci_start_poll: failed to set local general bytes [ 1519.337974][T24562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1519.338576][T24540] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1519.354542][T24540] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1519.355083][T24540] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1519.368733][T24540] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1519.369658][T24540] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1519.386151][T24540] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1519.386622][T24540] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1519.388261][T24540] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1519.472591][T24540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.487939][T24540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.491982][ T448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.492127][ T448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.496655][ T448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.496700][ T448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.648481][ T7280] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 1519.793903][T24540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1519.818941][ T7280] usb 14-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1519.822118][ T7280] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.822172][ T7280] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.827008][ T43] kauditd_printk_skb: 374 callbacks suppressed [ 1519.827019][ T43] audit: type=1800 audit(1794273268.916:82099): pid=16094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=411316 res=0 errno=-22 [ 1519.829110][ T7280] keyspan 14-1:1.0: Keyspan 2 port adapter converter detected [ 1519.829210][ T7280] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 81 [ 1519.829238][ T7280] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 1 [ 1519.833027][ T7280] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 84 [ 1519.833061][ T7280] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 2 [ 1519.834673][ T43] audit: type=1800 audit(1794273268.926:82100): pid=16094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=411345 res=0 errno=-22 [ 1519.834717][ T43] audit: type=1800 audit(1794273268.926:82101): pid=16094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=411323 res=0 errno=-22 [ 1519.836964][ T7280] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1519.837681][ T7280] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 88 [ 1519.837716][ T7280] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 6 [ 1519.840298][ T43] audit: type=1800 audit(1794273268.936:82102): pid=16094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=411324 res=0 errno=-22 [ 1519.840631][ T7280] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1519.843341][ T43] audit: type=1800 audit(1794273268.936:82103): pid=16094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=411325 res=0 errno=-22 [ 1519.854748][ T43] audit: type=1800 audit(1794273268.946:82104): pid=16094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=411365 res=0 errno=-22 [ 1519.857447][T24540] veth0_vlan: entered promiscuous mode [ 1519.858262][ T43] audit: type=1800 audit(1794273268.946:82105): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=411381 res=0 errno=-22 [ 1519.862140][ T43] audit: type=1800 audit(1794273268.956:82106): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=411408 res=0 errno=-22 [ 1519.865657][ T43] audit: type=1800 audit(1794273268.956:82107): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=411395 res=0 errno=-22 [ 1519.870323][ T43] audit: type=1800 audit(1794273268.966:82108): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=411422 res=0 errno=-22 [ 1519.874856][T24540] veth1_vlan: entered promiscuous mode [ 1519.919250][T24540] veth0_macvtap: entered promiscuous mode [ 1519.922838][T24540] veth1_macvtap: entered promiscuous mode [ 1519.940069][T24540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1519.947515][T24540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1519.983654][T14518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.024515][T10827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.024953][T10827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.025064][T10827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.068430][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.068446][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.069801][ T67] Bluetooth: hci4: command tx timeout [ 1520.109132][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.109157][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.282398][T24695] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1520.361538][T24698] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1520.424890][T24700] random: crng reseeded on system resumption [ 1520.838510][ T25] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1520.873923][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5503'. [ 1520.873973][T24707] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5503'. [ 1521.019774][ T25] usb 10-1: Using ep0 maxpacket: 32 [ 1521.020257][ T25] usb 10-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1521.021084][ T25] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.021108][ T25] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1521.021123][ T25] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1521.021139][ T25] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1521.022715][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.022729][ T25] usb 10-1: Product: syz [ 1521.022738][ T25] usb 10-1: Manufacturer: syz [ 1521.022747][ T25] usb 10-1: SerialNumber: syz [ 1521.035729][ C2] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1521.045483][ T25] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input29 [ 1521.249627][ T25] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1521.249659][ T25] (id 0x00) [ 1521.318709][ T25] rc_core: IR keymap rc-imon-pad not found [ 1521.318722][ T25] Registered IR keymap rc-empty [ 1521.318774][ T25] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1521.318801][ T25] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1521.338186][T24712] netlink: 'syz.0.5504': attribute type 7 has an invalid length. [ 1521.753052][ T25] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 1522.028413][T22689] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 1522.148443][ T67] Bluetooth: hci4: command tx timeout [ 1522.179981][T22689] usb 13-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1522.180795][T22689] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.180820][T22689] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.417575][T12498] usb 14-1: USB disconnect, device number 4 [ 1522.523432][ T25] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input30 [ 1522.527256][T12498] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1522.548845][T22689] keyspan 13-1:1.0: Keyspan 2 port adapter converter detected [ 1522.548942][T22689] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 81 [ 1522.548972][T22689] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 1 [ 1522.549488][T22689] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 84 [ 1522.549526][T22689] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 2 [ 1522.552820][T12498] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1522.553319][T12498] keyspan 14-1:1.0: device disconnected [ 1522.554616][T22689] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 1522.557880][T22689] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 88 [ 1522.557917][T22689] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 6 [ 1522.561172][T22689] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 1522.702712][ T25] imon 10-1:155.0: iMON device (15c2:ffdc) on usb<10:30> initialized [ 1522.707746][ T25] usb 10-1: USB disconnect, device number 30 [ 1522.847997][T24727] pci_bus 0000:01: busn_res: [bus 01] is released [ 1522.870078][T24729] overlayfs: failed to resolve './file2': -2 [ 1522.881362][T24728] overlayfs: failed to resolve './file2': -2 [ 1522.922418][T24732] ubi: mtd0 is already attached to ubi0 [ 1522.923377][T24728] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1522.929556][T24728] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1522.934555][T24728] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1522.934654][T24728] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1522.935852][T24728] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1522.936289][T24728] pci 0000:00:04.0: enabling Extended Tags [ 1522.958268][T24728] pci 0000:00:04.0: Adding to iommu group 4 [ 1522.974392][T24728] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1522.981162][T24728] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1522.981194][T24728] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1522.981278][T24728] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1522.981296][T24728] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1522.981316][T24728] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1522.982651][T24728] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1522.982715][T24728] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1522.984879][T24728] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1522.985477][T24734] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1522.991582][T24728] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1523.001735][T24732] syz.5.5512 (24732): drop_caches: 2 [ 1523.002815][T24732] syz.5.5512 (24732): drop_caches: 2 [ 1523.004046][T24733] syz.5.5512 (24733): drop_caches: 2 [ 1523.058501][T24728] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1523.063144][T24728] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1523.203626][T24742] veth0: entered promiscuous mode [ 1523.205697][T24740] veth0: left promiscuous mode [ 1523.223540][T24737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5513'. [ 1523.223573][T24737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5513'. [ 1523.226526][T24737] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5513'. [ 1523.349422][T24744] overlayfs: failed to resolve './file2': -2 [ 1523.446850][T24748] netlink: 'syz.9.5517': attribute type 7 has an invalid length. [ 1524.230696][ T67] Bluetooth: hci4: command tx timeout [ 1524.336165][T24770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5521'. [ 1524.336181][T24770] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5521'. [ 1524.835748][ T5890] usb 13-1: USB disconnect, device number 10 [ 1524.847516][ T5890] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 1524.855971][ T43] kauditd_printk_skb: 46 callbacks suppressed [ 1524.856034][ T43] audit: type=1800 audit(1794273273.946:82155): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34998 res=0 errno=-22 [ 1524.868236][ T5890] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 1524.876222][ T5890] keyspan 13-1:1.0: device disconnected [ 1524.898604][ T43] audit: type=1800 audit(1794273273.986:82156): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35021 res=0 errno=-22 [ 1525.047561][T24774] veth0: entered promiscuous mode [ 1525.048195][T24773] veth0: left promiscuous mode [ 1525.088393][ T43] audit: type=1326 audit(1794273274.176:82157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24771 comm="syz.0.5522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fbc code=0x7fc00000 [ 1525.091768][ T43] audit: type=1326 audit(1794273274.186:82158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24771 comm="syz.0.5522" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71d7f6b code=0x7fc00000 [ 1525.093330][ T43] audit: type=1326 audit(1794273274.186:82159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24771 comm="syz.0.5522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4fbc code=0x7fc00000 [ 1525.257711][ T43] audit: type=1800 audit(1794273274.346:82160): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=412627 res=0 errno=-22 [ 1525.398431][ T43] audit: type=1800 audit(1794273274.486:82161): pid=24785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5527" name="memory_backed" dev="configfs" ino=114046 res=0 errno=-22 [ 1525.399953][T24785] netlink: 'syz.9.5527': attribute type 7 has an invalid length. [ 1526.727080][T24790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5526'. [ 1526.727235][T24790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5526'. [ 1527.376255][ T43] audit: type=1800 audit(1794273276.466:82162): pid=24794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5529" name="new_array" dev="sysfs" ino=65602 res=0 errno=-13 [ 1527.414917][ T43] audit: type=1800 audit(1794273276.506:82163): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=412737 res=0 errno=-22 [ 1527.416937][T24794] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1527.417819][ T43] audit: type=1800 audit(1794273276.506:82164): pid=16094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=412646 res=0 errno=-22 [ 1527.471950][T24800] netlink: 'syz.5.5531': attribute type 7 has an invalid length. [ 1527.645816][T24801] [ 1527.646652][T24801] ====================================================== [ 1527.648814][T24801] WARNING: possible circular locking dependency detected [ 1527.650981][T24801] syzkaller #0 Tainted: G L [ 1527.653064][T24801] ------------------------------------------------------ [ 1527.655212][T24801] syz.9.5529/24801 is trying to acquire lock: [ 1527.657221][T24801] ffffffff90be7e40 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 1527.660047][T24801] [ 1527.660047][T24801] but task is already holding lock: [ 1527.662349][T24801] ffff888026802358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: new_dev_store+0x2cf/0x8e0 [ 1527.665319][T24801] [ 1527.665319][T24801] which lock already depends on the new lock. [ 1527.665319][T24801] [ 1527.668526][T24801] [ 1527.668526][T24801] the existing dependency chain (in reverse order) is: [ 1527.671279][T24801] [ 1527.671279][T24801] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 1527.673811][T24801] lock_acquire+0x1d1/0x380 [ 1527.675380][T24801] __mutex_lock+0x19f/0x1c10 [ 1527.676990][T24801] md_alloc+0x3d0/0x10c0 [ 1527.678386][ T5782] usb 13-1: new full-speed USB device number 11 using dummy_hcd [ 1527.680833][T24801] md_probe+0x73/0xf0 [ 1527.682252][T24801] blk_probe_dev+0x149/0x1e0 [ 1527.683908][T24801] blk_request_module+0x16/0xc0 [ 1527.685819][T24801] blkdev_get_no_open+0x9b/0xf0 [ 1527.687592][T24801] blkdev_open+0x141/0x4f0 [ 1527.689175][T24801] do_dentry_open+0x674/0x1470 [ 1527.690817][T24801] vfs_open_consume+0xcc/0x460 [ 1527.692517][T24801] path_openat+0x1547/0x23f0 [ 1527.694114][T24801] do_file_open+0x20e/0x430 [ 1527.695696][T24801] do_sys_openat2+0x163/0x1d0 [ 1527.697341][T24801] __ia32_compat_sys_openat+0x12d/0x210 [ 1527.699307][T24801] __do_fast_syscall_32+0x14d/0x8e0 [ 1527.701086][T24801] do_fast_syscall_32+0x32/0x70 [ 1527.702758][T24801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1527.704865][T24801] [ 1527.704865][T24801] -> #1 (disks_mutex){+.+.}-{4:4}: [ 1527.707113][T24801] lock_acquire+0x1d1/0x380 [ 1527.708632][T24801] __mutex_lock+0x19f/0x1c10 [ 1527.710213][T24801] md_alloc+0x3e/0x10c0 [ 1527.711684][T24801] md_probe+0x73/0xf0 [ 1527.713112][T24801] blk_probe_dev+0x149/0x1e0 [ 1527.714709][T24801] blk_request_module+0x16/0xc0 [ 1527.716398][T24801] blkdev_get_no_open+0x9b/0xf0 [ 1527.718073][T24801] blkdev_open+0x141/0x4f0 [ 1527.719640][T24801] do_dentry_open+0x674/0x1470 [ 1527.721287][T24801] vfs_open_consume+0xcc/0x460 [ 1527.722940][T24801] path_openat+0x1547/0x23f0 [ 1527.724548][T24801] do_file_open+0x20e/0x430 [ 1527.726116][T24801] do_sys_openat2+0x163/0x1d0 [ 1527.727740][T24801] __ia32_compat_sys_openat+0x12d/0x210 [ 1527.729634][T24801] __do_fast_syscall_32+0x14d/0x8e0 [ 1527.731400][T24801] do_fast_syscall_32+0x32/0x70 [ 1527.733092][T24801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1527.735187][T24801] [ 1527.735187][T24801] -> #0 (major_names_lock){+.+.}-{4:4}: [ 1527.737567][T24801] check_prev_add+0xeb/0xe60 [ 1527.739149][T24801] __lock_acquire+0x1528/0x1f40 [ 1527.740812][T24801] lock_acquire+0x1d1/0x380 [ 1527.742370][T24801] __mutex_lock+0x19f/0x1c10 [ 1527.743965][T24801] blk_probe_dev+0x28/0x1e0 [ 1527.745547][T24801] blk_request_module+0x16/0xc0 [ 1527.747178][T24801] blkdev_get_no_open+0x9b/0xf0 [ 1527.748745][T24801] bdev_file_open_by_dev+0x70/0x210 [ 1527.750513][T24801] md_import_device+0x120/0x360 [ 1527.752194][T24801] new_dev_store+0x42a/0x8e0 [ 1527.753790][T24801] md_attr_store+0x1c5/0x330 [ 1527.755399][T24801] sysfs_kf_write+0xf2/0x150 [ 1527.757006][T24801] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1527.758797][T24801] vfs_write+0x6af/0x1040 [ 1527.760326][T24801] ksys_write+0x12a/0x250 [ 1527.761847][T24801] __do_fast_syscall_32+0x14d/0x8e0 [ 1527.763745][T24801] do_fast_syscall_32+0x32/0x70 [ 1527.765406][T24801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1527.767506][T24801] [ 1527.767506][T24801] other info that might help us debug this: [ 1527.767506][T24801] [ 1527.770621][T24801] Chain exists of: [ 1527.770621][T24801] major_names_lock --> disks_mutex --> &mddev->reconfig_mutex [ 1527.770621][T24801] [ 1527.774698][T24801] Possible unsafe locking scenario: [ 1527.774698][T24801] [ 1527.777162][T24801] CPU0 CPU1 [ 1527.778743][T24801] ---- ---- [ 1527.780352][T24801] lock(&mddev->reconfig_mutex); [ 1527.781901][T24801] lock(disks_mutex); [ 1527.783877][T24801] lock(&mddev->reconfig_mutex); [ 1527.786069][T24801] lock(major_names_lock); [ 1527.787675][T24801] [ 1527.787675][T24801] *** DEADLOCK *** [ 1527.787675][T24801] [ 1527.790120][T24801] locks held by syz.9.5529/24801: 5, on CPU#0: [ 1527.792092][T24801] #0: ffff8880150fe630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1527.794913][T24801] #1: ffff88801e7ec478 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1527.797681][T24801] #2: ffff888064f53080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1527.800670][T24801] #3: ffff888072ad0968 (kn->active#95){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1527.803964][T24801] #4: ffff888026802358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: new_dev_store+0x2cf/0x8e0 [ 1527.807049][T24801] [ 1527.807049][T24801] stack backtrace: [ 1527.808886][T24801] CPU: 0 UID: 0 PID: 24801 Comm: syz.9.5529 Tainted: G L syzkaller #0 PREEMPT(full) [ 1527.812224][T24801] Tainted: [L]=SOFTLOCKUP [ 1527.813506][T24801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1527.816477][T24801] Call Trace: [ 1527.817530][T24801] [ 1527.818446][T24801] dump_stack_lvl+0x100/0x190 [ 1527.819863][T24801] print_circular_bug.cold+0x178/0x1be [ 1527.821482][T24801] check_noncircular+0x146/0x160 [ 1527.823141][T24801] check_prev_add+0xeb/0xe60 [ 1527.824568][T24801] ? trace_mm_page_alloc+0x164/0x1c0 [ 1527.826196][T24801] __lock_acquire+0x1528/0x1f40 [ 1527.827708][T24801] lock_acquire+0x1d1/0x380 [ 1527.829132][T24801] ? blk_probe_dev+0x28/0x1e0 [ 1527.830599][T24801] ? __pfx___might_resched+0x10/0x10 [ 1527.832244][T24801] ? ksys_write+0x12a/0x250 [ 1527.833611][T24801] __mutex_lock+0x19f/0x1c10 [ 1527.835019][T24801] ? blk_probe_dev+0x28/0x1e0 [ 1527.836515][T24801] ? blk_probe_dev+0x28/0x1e0 [ 1527.837986][T24801] ? lock_acquire+0x1d1/0x380 [ 1527.839467][T24801] ? find_inode_fast+0xa5/0xa30 [ 1527.840983][T24801] ? find_held_lock+0x2b/0x80 [ 1527.842390][T24801] ? __pfx___mutex_lock+0x10/0x10 [ 1527.843904][T24801] ? find_inode_fast+0x1fa/0xa30 [ 1527.845452][T24801] ? blk_probe_dev+0x28/0x1e0 [ 1527.846925][T24801] blk_probe_dev+0x28/0x1e0 [ 1527.848356][T24801] blk_request_module+0x16/0xc0 [ 1527.849881][T24801] blkdev_get_no_open+0x9b/0xf0 [ 1527.851349][T24801] bdev_file_open_by_dev+0x70/0x210 [ 1527.852910][T24801] md_import_device+0x120/0x360 [ 1527.854410][T24801] new_dev_store+0x42a/0x8e0 [ 1527.855866][T24801] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 1527.857733][T24801] ? __pfx_new_dev_store+0x10/0x10 [ 1527.859335][T24801] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 1527.861581][T24801] md_attr_store+0x1c5/0x330 [ 1527.863032][T24801] ? __pfx_md_attr_store+0x10/0x10 [ 1527.864636][T24801] sysfs_kf_write+0xf2/0x150 [ 1527.866028][T24801] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1527.867574][T24801] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1527.869202][T24801] vfs_write+0x6af/0x1040 [ 1527.870561][T24801] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1527.872365][T24801] ? __pfx_vfs_write+0x10/0x10 [ 1527.873852][T24801] ? find_held_lock+0x2b/0x80 [ 1527.875287][T24801] ksys_write+0x12a/0x250 [ 1527.876584][T24801] ? __pfx_ksys_write+0x10/0x10 [ 1527.878032][T24801] __do_fast_syscall_32+0x14d/0x8e0 [ 1527.879582][T24801] do_fast_syscall_32+0x32/0x70 [ 1527.881056][T24801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1527.882895][T24801] RIP: 0023:0xf743efbc [ 1527.884159][T24801] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1527.890011][T24801] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1527.892583][T24801] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800002c0 [ 1527.894899][T24801] RDX: 0000000000000016 RSI: 0000000000000000 RDI: 0000000000000000 [ 1527.897265][T24801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1527.899624][T24801] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1527.901946][T24801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1527.904316][T24801] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1528.012002][T24801] block device autoloading is deprecated and will be removed. [ 1528.039173][ T5782] usb 13-1: device descriptor read/64, error -71 [ 1528.288464][ T5782] usb 13-1: new full-speed USB device number 12 using dummy_hcd [ 1528.346167][ T8120] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.402968][ T8120] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.452175][ T8120] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.492407][ T8120] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.570450][ T8120] bridge_slave_1: left allmulticast mode [ 1528.570467][ T8120] bridge_slave_1: left promiscuous mode [ 1528.570568][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.571337][ T8120] bridge_slave_0: left allmulticast mode [ 1528.571348][ T8120] bridge_slave_0: left promiscuous mode [ 1528.571406][ T8120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.604771][ T8120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1528.605865][ T8120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1528.606472][ T8120] bond0 (unregistering): Released all slaves [ 1528.717737][ T5505] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1528.805658][ T8120] hsr_slave_0: left promiscuous mode [ 1528.805903][ T8120] hsr_slave_1: left promiscuous mode [ 1528.806147][ T8120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1528.806157][ T8120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.806428][ T8120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1528.806437][ T8120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.808071][ T8120] veth1_macvtap: left promiscuous mode [ 1528.808095][ T8120] veth0_macvtap: left promiscuous mode [ 1528.808137][ T8120] veth1_vlan: left promiscuous mode [ 1528.808154][ T8120] veth0_vlan: left promiscuous mode [ 1528.904116][ T8120] team0 (unregistering): Port device team_slave_1 removed [ 1528.906054][ T8120] team0 (unregistering): Port device team_slave_0 removed [ 1528.929344][ T5505] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1529.072163][ T5505] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1529.220917][ T5505] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1529.224706][ T8120] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.277947][ T8120] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.302380][ T8120] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.361586][ T8120] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.444784][ T8120] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.531178][ T8120] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.541896][ T5505] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1529.572138][ T8120] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.611513][ T8120] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.653229][ T5505] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1529.672149][ T8120] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.722247][ T8120] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.771348][ T8120] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.779294][ T5505] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1529.811904][ T8120] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.863804][ T43] kauditd_printk_skb: 74 callbacks suppressed [ 1529.863817][ T43] audit: type=1800 audit(1794273278.956:82239): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=414035 res=0 errno=-22 [ 1529.864136][ T43] audit: type=1800 audit(1794273278.956:82240): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=414121 res=0 errno=-22 [ 1529.864838][ T43] audit: type=1800 audit(1794273278.956:82241): pid=14922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=414126 res=0 errno=-22 [ 1529.865038][ T43] audit: type=1800 audit(1794273278.956:82242): pid=14922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=414130 res=0 errno=-22 [ 1529.865094][ T43] audit: type=1800 audit(1794273278.956:82243): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=414207 res=0 errno=-22 [ 1529.865270][ T43] audit: type=1800 audit(1794273278.956:82244): pid=14922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=414129 res=0 errno=-22 [ 1529.865643][ T43] audit: type=1800 audit(1794273278.956:82245): pid=14922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=414132 res=0 errno=-22 [ 1529.867883][ T43] audit: type=1800 audit(1794273278.956:82246): pid=16093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=414212 res=0 errno=-22 [ 1529.867906][ T43] audit: type=1800 audit(1794273278.956:82247): pid=16094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=414040 res=0 errno=-22 [ 1529.867923][ T43] audit: type=1800 audit(1794273278.956:82248): pid=16093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=414216 res=0 errno=-22 [ 1529.877711][ T8120] bridge_slave_1: left allmulticast mode [ 1529.877725][ T8120] bridge_slave_1: left promiscuous mode [ 1529.877805][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.890471][ T8120] bridge_slave_0: left allmulticast mode [ 1529.890486][ T8120] bridge_slave_0: left promiscuous mode [ 1529.890556][ T8120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.921211][ T8120] bridge_slave_1: left allmulticast mode [ 1529.921233][ T8120] bridge_slave_1: left promiscuous mode [ 1529.921356][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.933650][ T8120] bridge_slave_0: left allmulticast mode [ 1529.933665][ T8120] bridge_slave_0: left promiscuous mode [ 1529.933736][ T8120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.945258][ T8120] bridge_slave_1: left allmulticast mode [ 1529.945274][ T8120] bridge_slave_1: left promiscuous mode [ 1529.945341][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.949586][ T8120] bridge_slave_0: left allmulticast mode [ 1529.949598][ T8120] bridge_slave_0: left promiscuous mode [ 1529.949657][ T8120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.016645][ T8120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1530.017576][ T8120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1530.018115][ T8120] bond0 (unregistering): Released all slaves [ 1530.042613][ T8120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1530.043785][ T8120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1530.044378][ T8120] bond0 (unregistering): Released all slaves [ 1530.067681][ T8120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1530.072854][ T8120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1530.073443][ T8120] bond0 (unregistering): Released all slaves [ 1530.074810][ T5505] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1530.111458][ T8120] tipc: Left network mode [ 1530.188257][ T5505] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1530.285402][ T5505] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1530.406768][ T5505] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1530.509313][ T5505] 8021q: adding VLAN 0 to HW filter on device eth29 [ 1530.591851][ T8120] hsr_slave_0: left promiscuous mode [ 1530.592253][ T8120] hsr_slave_1: left promiscuous mode [ 1530.592483][ T8120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1530.592499][ T8120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1530.592829][ T8120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1530.592838][ T8120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1530.595103][ T8120] hsr_slave_0: left promiscuous mode [ 1530.595559][ T8120] hsr_slave_1: left promiscuous mode [ 1530.595849][ T8120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1530.595859][ T8120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1530.596187][ T8120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1530.596196][ T8120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1530.631311][ T8120] hsr_slave_0: left promiscuous mode [ 1530.631584][ T8120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1530.631595][ T8120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1530.631912][ T8120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1530.631921][ T8120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1530.637845][ T8120] veth1_macvtap: left promiscuous mode [ 1530.637871][ T8120] veth0_macvtap: left promiscuous mode [ 1530.637912][ T8120] veth1_vlan: left promiscuous mode [ 1530.637935][ T8120] veth0_vlan: left promiscuous mode [ 1530.647676][ T8120] veth1_macvtap: left promiscuous mode [ 1530.647701][ T8120] veth0_macvtap: left promiscuous mode [ 1530.647744][ T8120] veth1_vlan: left promiscuous mode [ 1530.647776][ T8120] veth0_vlan: left promiscuous mode [ 1530.655641][ T8120] veth1_macvtap: left promiscuous mode [ 1530.655666][ T8120] veth0_macvtap: left promiscuous mode [ 1530.655710][ T8120] veth1_vlan: left promiscuous mode [ 1530.655742][ T8120] veth0_vlan: left promiscuous mode [ 1530.757633][ T8120] team0 (unregistering): Port device team_slave_1 removed [ 1530.762552][ T8120] team0 (unregistering): Port device team_slave_0 removed [ 1530.812310][ T8120] team0 (unregistering): Port device team_slave_1 removed [ 1530.814233][ T8120] team0 (unregistering): Port device team_slave_0 removed [ 1530.862174][ T8120] team0 (unregistering): Port device team_slave_1 removed [ 1530.866346][ T8120] team0 (unregistering): Port device team_slave_0 removed [ 1530.891311][ T5505] 8021q: adding VLAN 0 to HW filter on device eth30 [ 1530.995337][ T5505] 8021q: adding VLAN 0 to HW filter on device eth32 [ 1531.101721][ T5505] 8021q: adding VLAN 0 to HW filter on device eth33 [ 1531.229128][ T5505] 8021q: adding VLAN 0 to HW filter on device eth31 [ 1531.407575][ T8120] IPVS: stop unused estimator thread 0... [ 1531.411912][ T8120] IPVS: stop unused estimator thread 0... [ 1531.588809][ T5166] block nbd0: Possible stuck request ffff88802965e000: control (read@0,1024B). Runtime 420 seconds [ 1531.588845][ T5166] block nbd0: Possible stuck request ffff88802965e1c0: control (read@1024,3072B). Runtime 420 seconds [ 1534.425086][ T5202] udevd[5202]: worker [14834] /devices/virtual/block/nbd0 timeout; kill it [ 1534.425154][ T5202] udevd[5202]: seq 14296 '/devices/virtual/block/nbd0' killed