last executing test programs: 9.448317226s ago: executing program 3 (id=2833): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f00002ff000/0x1000)=nil) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0xe, 0x88d9, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0xff1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000140)}, 0x8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000100)=0x9) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, 0x0) iopl(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000140)) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) 8.483329414s ago: executing program 3 (id=2836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet_sctp(0x2, 0x3, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(0x3) 7.099717043s ago: executing program 2 (id=2839): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="66ee837b6ac1477b0d5a566416626eb08b2d8371625d0f695145c8e69baec57349c1a5ac4a7df2ace236b072fdd124cdb5622b559ec773b14b9388345c22235d6e3f212e3485f61bc94b2d3f01065e662f31dc04ba26792da41dddb443613f52b3c8e160f5e724bf64168cb8b36536aa15ee6c52c0c52623b975770e"], 0x7) r1 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="00110200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9aaa}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0x3, 0x8200) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) syz_open_dev$loop(&(0x7f0000000500), 0x4, 0x129000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40008) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r5, &(0x7f0000000040), 0x2) close(r5) write$cgroup_int(r4, &(0x7f0000000000)=0x1, 0x12) syz_fuse_handle_req(r4, &(0x7f0000000c40)="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", 0x2000, &(0x7f0000005f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timerfd_create(0x8, 0x0) 6.378950936s ago: executing program 2 (id=2843): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", '\x00', "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xde9}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 5.852358125s ago: executing program 2 (id=2844): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffffda}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) r0 = getpid() pipe2$watch_queue(&(0x7f0000000280), 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000068000903000000000154944733b70333d16f0000001a0a000000000000000400040d1400060064010102000009000000000000000000ad44a0f5f36777207c4c7fd93ddcb45b0e6148999baf064757ae8c2a3378bdf302565acbd1c1745a2df1f2dafe2cae98"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000300), 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000400)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x20000, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000340)={0xfffff801, @remote}) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000003c0)='erofs\x00', 0x1000d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newnexthop={0x24, 0x5e, 0x103, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x1, 0x0, 0x36}, [@NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x200444c1}, 0x200000c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.845754901s ago: executing program 1 (id=2852): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x6cad, &(0x7f00000000c0)={0x0, 0x7b42, 0x1, 0x3, 0x3ce}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000280)={0x3}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x18, r4}, 0x50) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000680012800b00010069703667726500005800028014000700ff02000000000000000000000000000106000f000a00000006000f004a00000014000600fe8000000000000000000000000000230800140006000000050016000200000004001200060002000000000008000a00", @ANYRES32], 0x90}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 5.069624637s ago: executing program 0 (id=2845): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) syz_usb_connect(0x4, 0x2d, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRES64=r0, @ANYRESOCT=r0, @ANYBLOB="4acd4c9fc8707ff964cd67f61fc98b641634fae3ac1f0249f03e2c17c03efffb099313234b8dea37fe65437e", @ANYRESHEX, @ANYRES16=r0, @ANYBLOB="67c06a17944a4c1029742569b3a87a5c7238d889b6474ced253b49eb42c8d32fe65d4b5f4dd494970fb8d823efe58810265414d7f7b75cfa560c234ee4f60aab3e1f9c0690663fb07a6d9e131904cef621400464453f02f9d8506351565873e3747f4deafd7575e5b360f2"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000100)='V', 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') fsopen(&(0x7f0000000040)='jfs\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lsetxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x1, 0x2}, [], {0x4, 0x2}, [{0x8, 0x1}], {0x10, 0x4}}, 0x2c, 0x2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeeb5000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) r6 = openat2$dir(0xffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)={0x2b00, 0x100, 0x32}, 0x18) faccessat2(r6, &(0x7f00000002c0)='./file0/../file0/../file0\x00', 0x1, 0x100) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) 3.904271646s ago: executing program 0 (id=2846): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x5, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create1(0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) mount(0x0, 0x0, 0x0, 0x8000, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x60}}, 0x0) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0x8, 0x1ff, 0x154, 0x81}) 3.584135269s ago: executing program 1 (id=2847): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f00002ff000/0x1000)=nil) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0xe, 0x88d9, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0xff1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000140)}, 0x8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000100)=0x9) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, 0x0) iopl(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000140)) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) 3.559317193s ago: executing program 3 (id=2848): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) 3.479614715s ago: executing program 3 (id=2849): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) syz_usb_connect(0x4, 0x2d, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRES64=r0, @ANYBLOB="7e825f16559d49d66e9ecd936ee697b97a11d7619bb5dbd8662e9fe86beaab2342f5eb98e704120259f31c7a53f21024f8e0f11fe13bd4a04042b6c89cca30299e33ff3c79ec306f09b44d62c4edc052ac27b3f1ccd8b93e40c33341992b3c9846ef148c3768cf9e63f0b3af8d7137eeae92e9ffe471e742e3be8c4f1cbd0397f21b84a57dc0b95c8aea2fec6ecac743f7a097608e6cff56ccdf080e21fc5b7a7bebd5c5ceaf7b055f19e0e562a6737d433bf540200252cc6b5e4e62fa662964c062f55c0e9a3ed0823a12c5de", @ANYBLOB="4acd4c9fc8707ff964cd67f61fc98b641634fae3ac1f0249f03e2c17c03efffb099313234b8dea37fe65437e", @ANYRESHEX, @ANYRES16=r0, @ANYBLOB="67c06a17944a4c1029742569b3a87a5c7238d889b6474ced253b49eb42c8d32fe65d4b5f4dd494970fb8d823efe58810265414d7f7b75cfa560c234ee4f60aab3e1f9c0690663fb07a6d9e131904cef621400464453f02f9d8506351565873e3747f4deafd7575e5b360f2"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000100)='V', 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') fsopen(&(0x7f0000000040)='jfs\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lsetxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x1, 0x2}, [], {0x4, 0x2}, [{0x8, 0x1}], {0x10, 0x4}}, 0x2c, 0x2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeeb5000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) r6 = openat2$dir(0xffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)={0x2b00, 0x100, 0x32}, 0x18) faccessat2(r6, &(0x7f00000002c0)='./file0/../file0/../file0\x00', 0x1, 0x100) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) 3.314732345s ago: executing program 2 (id=2850): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f00002ff000/0x1000)=nil) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x22f, 0x10, 0x0, 0xff6a}, 0x48) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0xe, 0x88d9, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0xff1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000140)}, 0x8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000100)=0x9) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, 0x0) iopl(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000140)) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) 3.150771645s ago: executing program 1 (id=2851): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f00002ff000/0x1000)=nil) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd32abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40453f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259f717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195833106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21da55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5fc1db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc9feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb89ee1c95361debf58f671170cfa57fb0c9cbad5c70244a2b6de2062cbd1ba2c85f73689d3ffcd37022ab9fcabd17fd40bfd316088dffe92728016ec5c72e21da52d09f849ab4a4b2d9b4799bab3a6d7f2ba57e100e7ffec0bd4c0659ebaf7b225edaa0af3f5aa99d1551d34b2d2faf0971dbe852142088b1c9b052e1177c47365d950e22c2b04283f62fec31837b5068dab60c5c2c1547acd52ab5e5cde41d24563b05e223e2aafe2c55ba3001d12e4de86597487e99c3b2bf193d7d6d0821481c16fd7cece5df2567182ca1ad6028028bf9f72d503b3d70e1c3c4b5e73ac286abb2b3b069f2ccda4c6a7a3759302b02034e8217b4ecdb9f1118a4117fd49d5467a84b70fae675af118bd885ee7798782765438caaf69856e236bf4b37bff5f971df3fd5e03a9ea"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0xe, 0x88d9, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0xff1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000140)}, 0x8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000100)=0x9) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, 0x0) iopl(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) 2.941459946s ago: executing program 0 (id=2853): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="66ee837b6ac1477b0d5a566416626eb08b2d8371625d0f695145c8e69baec57349c1a5ac4a7df2ace236b072fdd124cdb5622b559ec773b14b9388345c22235d6e3f212e3485f61bc94b2d3f01065e662f31dc04ba26792da41dddb443613f52b3c8e160f5e724bf64168cb8b36536aa15ee6c52c0c52623b975770e"], 0x7) r1 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="00110200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9aaa}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0x3, 0x8200) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) syz_open_dev$loop(&(0x7f0000000500), 0x4, 0x129000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40008) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r5, &(0x7f0000000040), 0x2) close(r5) write$cgroup_int(r4, &(0x7f0000000000)=0x1, 0x12) syz_fuse_handle_req(r4, &(0x7f0000000c40)="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", 0x2000, &(0x7f0000005f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timerfd_create(0x8, 0x0) 2.839512137s ago: executing program 2 (id=2854): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x24000880) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="020b0700fc670000e4a1bb5a820768e802c88323674021ca3fc5f9c2fc5e463b6d7726bda3b043c36af7030000000000000046cd440f9af99a1556b0b6df2f7de107b22e06fdff266816b99cf35f613925887e604f2ee13126d549ad1ad8fd9917aa67e9f9582de44b365925a2b02cb0f1258ae310a34f62480399e58f4f067251352e3b801ed00d8566c24ed266b3fd050a910905fb49d225969d288abb6a00ab071dac1893d04862c70e9d5e5d3840a574615a6c79b8041fefefe09dd595db93dd236b8982539c9b2893ca5f743ca20fe412", 0xd3}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) tkill(r4, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x8) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000000)={0x3ff, 0x100, 0xe, 0x7, 0xb, "629b0000000000000000000000000400", 0xcf7b}) ioctl$TCXONC(r7, 0x540a, 0x3) 2.838640569s ago: executing program 1 (id=2855): mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000003c0)='erofs\x00', 0x1000d, 0x0) 2.788694386s ago: executing program 1 (id=2856): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x6cad, &(0x7f00000000c0)={0x0, 0x7b42, 0x1, 0x3, 0x3ce}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000280)={0x3}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x18, r4}, 0x50) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000680012800b00010069703667726500005800028014000700ff02000000000000000000000000000106000f000a00000006000f004a00000014000600fe8000000000000000000000000000230800140006000000050016000200000004001200060002000000000008000a00", @ANYRES32], 0x90}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 2.299808024s ago: executing program 0 (id=2857): socket(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000140)={0x4, 0x3, 0xd4}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) 2.299399164s ago: executing program 3 (id=2858): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffffda}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) r1 = getpid() pipe2$watch_queue(&(0x7f0000000280), 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000068000903000000000154944733b70333d16f0000001a0a000000000000000400040d1400060064010102000009000000000000000000ad44a0f5f36777207c4c7fd93ddcb45b0e6148999baf064757ae8c2a3378bdf302565acbd1c1745a2df1f2dafe2cae98"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000300), 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000400)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x20000, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000340)={0xfffff801, @remote}) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000003c0)='erofs\x00', 0x1000d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newnexthop={0x24, 0x5e, 0x103, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x1, 0x0, 0x36}, [@NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x200444c1}, 0x200000c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.84881136s ago: executing program 1 (id=2859): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c00000018110000", @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0) r13 = inotify_init1(0x0) inotify_add_watch(r13, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) read(r13, &(0x7f0000001000)=""/4096, 0x1000) openat(r12, &(0x7f0000001010), 0x0, 0x0) 1.671088233s ago: executing program 0 (id=2860): syz_io_uring_setup(0x6db7, &(0x7f0000000300)={0x0, 0xb789, 0x1, 0x3, 0x1080004f}, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') socket(0x2, 0x80805, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x589b83, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49d, &(0x7f0000000100)={0x0, 0x79af, 0x2, 0x8000, 0x400246}, 0x0, &(0x7f00000006c0), &(0x7f0000000000)) io_setup(0x3, &(0x7f0000002140)=0x0) io_getevents(r2, 0xffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) 1.409596822s ago: executing program 2 (id=2861): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r2, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r3, &(0x7f0000000180)='1\x00', 0x1) 285.835617ms ago: executing program 0 (id=2862): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x5, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create1(0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) mount(0x0, 0x0, &(0x7f0000000340)='f2fs\x00', 0x8000, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x60}}, 0x0) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0x8, 0x1ff, 0x154, 0x81}) 0s ago: executing program 3 (id=2863): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000016c0)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)={0xe4, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}, @nested={0x4, 0x74}]}]}, @generic="5cdfc36be90df936aed2baeaffe0db268b58541a8113df0b2b7c713800d356c50ef47b85694fe92cd60ad7b368e7b8259dd0627f2c06cd5ccba7681aa288811fa17690a37ed8371eed98b1898e95e0923ad7ade60ddd5b22fd58be8aed317013d15756478501911f083e476d8931023b75f09649800a8e33e74d10cd1e9a98ca05f721d2b44a99ea4d584ca22cc5550de68aec806881035f32174acb105393562fd8d753632ee21e2d6deac71ae21988ce8fbf440485247fece3af9f"]}, 0xe4}, 0x1, 0x0, 0x0, 0x400c801}, 0x24048084) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000100)={@local}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r10, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x5725, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) kernel console output (not intermixed with test programs): 294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.0.1522" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 463.609347][ T42] audit: type=1326 audit(1785613025.174:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.0.1522" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f03017 code=0x7ffc0000 [ 463.615986][ T42] audit: type=1326 audit(1785613025.174:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.0.1522" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 463.624074][ T42] audit: type=1326 audit(1785613025.174:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.0.1522" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f03017 code=0x7ffc0000 [ 463.633065][ T42] audit: type=1326 audit(1785613025.174:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.0.1522" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f02fec code=0x7ffc0000 [ 463.642238][ T42] audit: type=1326 audit(1785613025.174:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.0.1522" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f03017 code=0x7ffc0000 [ 463.708239][T12794] FAULT_INJECTION: forcing a failure. [ 463.708239][T12794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.727199][T12794] CPU: 3 UID: 0 PID: 12794 Comm: syz.3.1527 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.727220][T12794] Tainted: [L]=SOFTLOCKUP [ 463.727224][T12794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 463.727231][T12794] Call Trace: [ 463.727235][T12794] [ 463.727240][T12794] dump_stack_lvl+0x100/0x190 [ 463.727259][T12794] should_fail_ex.cold+0x5/0xa [ 463.727274][T12794] _copy_to_user+0x32/0xd0 [ 463.727294][T12794] simple_read_from_buffer+0xcb/0x170 [ 463.727315][T12794] proc_fail_nth_read+0x1af/0x230 [ 463.727333][T12794] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.727349][T12794] ? rw_verify_area+0xce/0x6d0 [ 463.727366][T12794] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.727381][T12794] vfs_read+0x1e4/0xb40 [ 463.727393][T12794] ? __pfx_vfs_read+0x10/0x10 [ 463.727402][T12794] ? find_held_lock+0x2b/0x80 [ 463.727417][T12794] ? __fget_files+0x215/0x3d0 [ 463.727431][T12794] ? __fget_files+0x21f/0x3d0 [ 463.727445][T12794] ksys_read+0x12a/0x250 [ 463.727455][T12794] ? __pfx_ksys_read+0x10/0x10 [ 463.727469][T12794] do_int80_emulation+0x14b/0x720 [ 463.727487][T12794] asm_int80_emulation+0x1a/0x20 [ 463.727498][T12794] RIP: 0023:0xf71873eb [ 463.727508][T12794] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 463.727519][T12794] RSP: 002b:00000000f543d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 463.727530][T12794] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f543d5d0 [ 463.727537][T12794] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 463.727543][T12794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 463.727550][T12794] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 463.727556][T12794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 463.727570][T12794] [ 464.079451][T12799] FAULT_INJECTION: forcing a failure. [ 464.079451][T12799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.084725][T12799] CPU: 3 UID: 0 PID: 12799 Comm: syz.3.1529 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.084752][T12799] Tainted: [L]=SOFTLOCKUP [ 464.084757][T12799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 464.084768][T12799] Call Trace: [ 464.084775][T12799] [ 464.084781][T12799] dump_stack_lvl+0x100/0x190 [ 464.084809][T12799] should_fail_ex.cold+0x5/0xa [ 464.084829][T12799] _copy_from_user+0x2e/0xd0 [ 464.084860][T12799] get_compat_msghdr+0xb3/0x480 [ 464.084886][T12799] ? __pfx_get_compat_msghdr+0x10/0x10 [ 464.084921][T12799] ___sys_sendmsg+0x1b6/0x1e0 [ 464.084943][T12799] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.084972][T12799] ? find_held_lock+0x2b/0x80 [ 464.085009][T12799] __sys_sendmsg+0x160/0x210 [ 464.085034][T12799] ? __pfx___sys_sendmsg+0x10/0x10 [ 464.085064][T12799] ? __pfx_ksys_write+0x10/0x10 [ 464.085087][T12799] __do_fast_syscall_32+0xe7/0x970 [ 464.085110][T12799] ? lockdep_hardirqs_on+0x78/0x100 [ 464.085133][T12799] do_fast_syscall_32+0x32/0x70 [ 464.085157][T12799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 464.085179][T12799] RIP: 0023:0xf704efec [ 464.085198][T12799] Code: Unable to access opcode bytes at 0xf704efc2. [ 464.085207][T12799] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 464.085223][T12799] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800002c0 [ 464.085233][T12799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 464.085245][T12799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 464.085253][T12799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.085262][T12799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 464.085285][T12799] [ 464.294169][T12804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1530'. [ 464.393156][T12805] bond15 (unregistering): Released all slaves [ 464.427127][T12813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1532'. [ 465.021798][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 465.025000][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 465.257434][ T5751] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 466.131648][ T5750] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 466.148579][ T61] Bluetooth: hci4: Frame reassembly failed (-84) [ 466.190869][T12850] FAULT_INJECTION: forcing a failure. [ 466.190869][T12850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.197833][T12850] CPU: 3 UID: 0 PID: 12850 Comm: syz.0.1541 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.197852][T12850] Tainted: [L]=SOFTLOCKUP [ 466.197856][T12850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 466.197863][T12850] Call Trace: [ 466.197867][T12850] [ 466.197872][T12850] dump_stack_lvl+0x100/0x190 [ 466.197890][T12850] should_fail_ex.cold+0x5/0xa [ 466.197904][T12850] _copy_from_user+0x2e/0xd0 [ 466.197923][T12850] io_submit_one+0xbd/0x1fb0 [ 466.197939][T12850] ? __lock_acquire+0x49f/0x1a40 [ 466.197959][T12850] ? __pfx_io_submit_one+0x10/0x10 [ 466.197976][T12850] ? __might_fault+0xc5/0x140 [ 466.197991][T12850] ? __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 466.198004][T12850] __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 466.198018][T12850] ? __fget_files+0x21f/0x3d0 [ 466.198029][T12850] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 466.198046][T12850] ? ksys_write+0x1ac/0x250 [ 466.198057][T12850] ? __pfx_ksys_write+0x10/0x10 [ 466.198070][T12850] __do_fast_syscall_32+0xe7/0x970 [ 466.198085][T12850] ? lockdep_hardirqs_on+0x78/0x100 [ 466.198103][T12850] do_fast_syscall_32+0x32/0x70 [ 466.198124][T12850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 466.198142][T12850] RIP: 0023:0xf7f02fec [ 466.198161][T12850] Code: Unable to access opcode bytes at 0xf7f02fc2. [ 466.198168][T12850] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8 [ 466.198188][T12850] RAX: ffffffffffffffda RBX: 00000000f739f000 RCX: 0000000000000002 [ 466.198196][T12850] RDX: 0000000080002400 RSI: 0000000000000000 RDI: 0000000000000000 [ 466.198202][T12850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 466.198208][T12850] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 466.198215][T12850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 466.198248][T12850] [ 467.701441][T12871] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 467.736783][T12871] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 467.764870][T12871] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 467.771563][T12871] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 468.168376][ T5759] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 468.248972][T12877] fuse: Bad value for 'fd' [ 468.571973][ T5750] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 468.574606][ T5750] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 468.654087][ T42] kauditd_printk_skb: 2294 callbacks suppressed [ 468.654100][ T42] audit: type=1326 audit(1785613030.254:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12880 comm="syz.3.1550" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x0 [ 469.489137][T12903] FAULT_INJECTION: forcing a failure. [ 469.489137][T12903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.494627][T12903] CPU: 2 UID: 0 PID: 12903 Comm: syz.3.1556 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.494658][T12903] Tainted: [L]=SOFTLOCKUP [ 469.494664][T12903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 469.494674][T12903] Call Trace: [ 469.494684][T12903] [ 469.494692][T12903] dump_stack_lvl+0x100/0x190 [ 469.494720][T12903] should_fail_ex.cold+0x5/0xa [ 469.494741][T12903] _copy_from_user+0x2e/0xd0 [ 469.494772][T12903] sg_write+0x2af/0xdb0 [ 469.494839][T12903] ? __pfx_sg_write+0x10/0x10 [ 469.494887][T12903] ? apparmor_file_permission+0x13f/0x1c0 [ 469.494912][T12903] ? bpf_lsm_file_permission+0x9/0x10 [ 469.494930][T12903] ? security_file_permission+0x76/0x210 [ 469.494957][T12903] ? rw_verify_area+0xce/0x6d0 [ 469.494985][T12903] vfs_write+0x2aa/0x1050 [ 469.495003][T12903] ? __pfx_sg_write+0x10/0x10 [ 469.495029][T12903] ? __pfx_vfs_write+0x10/0x10 [ 469.495045][T12903] ? find_held_lock+0x2b/0x80 [ 469.495069][T12903] ? __fget_files+0x215/0x3d0 [ 469.495085][T12903] ? __fget_files+0x215/0x3d0 [ 469.495106][T12903] ? __fget_files+0x21f/0x3d0 [ 469.495129][T12903] ksys_write+0x12a/0x250 [ 469.495146][T12903] ? __pfx_ksys_write+0x10/0x10 [ 469.495163][T12903] ? rcu_is_watching+0x12/0xc0 [ 469.495189][T12903] __do_fast_syscall_32+0xe7/0x970 [ 469.495212][T12903] ? lockdep_hardirqs_on+0x78/0x100 [ 469.495236][T12903] do_fast_syscall_32+0x32/0x70 [ 469.495261][T12903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.495283][T12903] RIP: 0023:0xf704efec [ 469.495309][T12903] Code: Unable to access opcode bytes at 0xf704efc2. [ 469.495317][T12903] RSP: 002b:00000000f52fb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 469.495334][T12903] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000080000100 [ 469.495345][T12903] RDX: 000000000000fe5d RSI: 0000000000000000 RDI: 0000000000000000 [ 469.495355][T12903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.495365][T12903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.495376][T12903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.495399][T12903] [ 469.606579][ T5750] Bluetooth: hci0: command 0x0c1a tx timeout [ 469.776637][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout [ 469.778722][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 469.850772][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 471.319252][T12922] FAULT_INJECTION: forcing a failure. [ 471.319252][T12922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.323495][T12922] CPU: 3 UID: 0 PID: 12922 Comm: syz.2.1561 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.323513][T12922] Tainted: [L]=SOFTLOCKUP [ 471.323517][T12922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 471.323524][T12922] Call Trace: [ 471.323530][T12922] [ 471.323535][T12922] dump_stack_lvl+0x100/0x190 [ 471.323554][T12922] should_fail_ex.cold+0x5/0xa [ 471.323568][T12922] _copy_from_user+0x2e/0xd0 [ 471.323586][T12922] get_compat_msghdr+0xb3/0x480 [ 471.323606][T12922] ? __pfx_get_compat_msghdr+0x10/0x10 [ 471.323625][T12922] ? _kstrtoull+0x13c/0x1f0 [ 471.323637][T12922] ? __pfx__kstrtoull+0x10/0x10 [ 471.323651][T12922] ___sys_sendmsg+0x1b6/0x1e0 [ 471.323665][T12922] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.323676][T12922] ? __lock_acquire+0x49f/0x1a40 [ 471.323711][T12922] __sys_sendmmsg+0x309/0x440 [ 471.323729][T12922] ? __pfx___sys_sendmmsg+0x10/0x10 [ 471.323744][T12922] ? find_held_lock+0x2b/0x80 [ 471.323761][T12922] ? __mutex_unlock_slowpath+0x35d/0x930 [ 471.323784][T12922] ? fput+0x79/0x100 [ 471.323797][T12922] ? ksys_write+0x1ac/0x250 [ 471.323814][T12922] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 471.323832][T12922] ? lockdep_hardirqs_on+0x78/0x100 [ 471.323846][T12922] __do_fast_syscall_32+0xe7/0x970 [ 471.323862][T12922] ? lockdep_hardirqs_on+0x78/0x100 [ 471.323877][T12922] do_fast_syscall_32+0x32/0x70 [ 471.323893][T12922] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 471.323908][T12922] RIP: 0023:0xf709efec [ 471.323923][T12922] Code: Unable to access opcode bytes at 0xf709efc2. [ 471.323928][T12922] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 471.323940][T12922] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0 [ 471.323950][T12922] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000000 [ 471.323959][T12922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 471.323967][T12922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.323977][T12922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 471.323999][T12922] [ 471.936613][ T5759] Bluetooth: hci3: command 0x0c1a tx timeout [ 472.810965][T12958] evm: overlay not supported [ 472.826039][ T5759] Bluetooth: hci1: unexpected event for opcode 0x080e [ 473.951293][T12985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1579'. [ 474.994120][T12985] erofs (device sr0): cannot find valid erofs superblock [ 475.018783][T12996] 9pnet: p9_errstr2errno: server reported unknown error ¶+ [ 475.316316][T13008] dvmrp1: entered allmulticast mode [ 478.416141][ T5759] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 478.419465][ T5759] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 478.471787][ T42] audit: type=1326 audit(1785613040.074:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13051 comm="syz.2.1599" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 478.524901][T13053] FAULT_INJECTION: forcing a failure. [ 478.524901][T13053] name failslab, interval 1, probability 0, space 0, times 0 [ 478.550313][T13053] CPU: 0 UID: 0 PID: 13053 Comm: syz.1.1596 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.550334][T13053] Tainted: [L]=SOFTLOCKUP [ 478.550338][T13053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 478.550345][T13053] Call Trace: [ 478.550350][T13053] [ 478.550354][T13053] dump_stack_lvl+0x100/0x190 [ 478.550373][T13053] should_fail_ex.cold+0x5/0xa [ 478.550387][T13053] ? __pfx_n_tty_poll+0x10/0x10 [ 478.550420][T13053] should_failslab+0xc2/0x120 [ 478.550437][T13053] __kmalloc_cache_noprof+0x91/0x6c0 [ 478.550450][T13053] ? __pollwait+0x2c3/0x490 [ 478.550469][T13053] ? __pfx___pollwait+0x10/0x10 [ 478.550485][T13053] ? __pfx_n_tty_poll+0x10/0x10 [ 478.550495][T13053] __pollwait+0x2c3/0x490 [ 478.550512][T13053] ? __pfx___pollwait+0x10/0x10 [ 478.550528][T13053] ? __pfx_n_tty_poll+0x10/0x10 [ 478.550538][T13053] n_tty_poll+0xaf/0x860 [ 478.550550][T13053] ? __pfx_n_tty_poll+0x10/0x10 [ 478.550560][T13053] tty_poll+0xdc/0x140 [ 478.550574][T13053] ? __pfx_tty_poll+0x10/0x10 [ 478.550587][T13053] do_select+0xd54/0x1850 [ 478.550615][T13053] ? __pfx_do_select+0x10/0x10 [ 478.550633][T13053] ? __lock_acquire+0x49f/0x1a40 [ 478.550650][T13053] ? __pfx___pollwait+0x10/0x10 [ 478.550669][T13053] ? __pfx_pollwake+0x10/0x10 [ 478.550686][T13053] ? __pfx_pollwake+0x10/0x10 [ 478.550704][T13053] ? __pfx_pollwake+0x10/0x10 [ 478.550721][T13053] ? __pfx_pollwake+0x10/0x10 [ 478.550739][T13053] ? __pfx_pollwake+0x10/0x10 [ 478.550756][T13053] ? __pfx_pollwake+0x10/0x10 [ 478.550774][T13053] ? __pfx_pollwake+0x10/0x10 [ 478.550791][T13053] ? __pfx_pollwake+0x10/0x10 [ 478.550809][T13053] ? __pfx_pollwake+0x10/0x10 [ 478.550826][T13053] ? _kstrtoull+0x13c/0x1f0 [ 478.550843][T13053] ? find_held_lock+0x2b/0x80 [ 478.550856][T13053] ? compat_core_sys_select+0x1e6/0x8b0 [ 478.550874][T13053] ? compat_core_sys_select+0x1e6/0x8b0 [ 478.550897][T13053] ? compat_core_sys_select+0x68a/0x8b0 [ 478.550914][T13053] compat_core_sys_select+0x68a/0x8b0 [ 478.550935][T13053] ? __pfx_compat_core_sys_select+0x10/0x10 [ 478.550955][T13053] ? get_pid_task+0xfc/0x250 [ 478.550981][T13053] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 478.550997][T13053] do_compat_pselect+0x27a/0x2b0 [ 478.551016][T13053] ? __pfx_do_compat_pselect+0x10/0x10 [ 478.551036][T13053] ? fput+0x79/0x100 [ 478.551051][T13053] __ia32_compat_sys_pselect6_time32+0x152/0x1c0 [ 478.551067][T13053] __do_fast_syscall_32+0xe7/0x970 [ 478.551082][T13053] ? lockdep_hardirqs_on+0x78/0x100 [ 478.551098][T13053] do_fast_syscall_32+0x32/0x70 [ 478.551113][T13053] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.551128][T13053] RIP: 0023:0xf702efec [ 478.551143][T13053] Code: Unable to access opcode bytes at 0xf702efc2. [ 478.551149][T13053] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000134 [ 478.551160][T13053] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 0000000080000180 [ 478.551167][T13053] RDX: 0000000000000000 RSI: 00000000800002c0 RDI: 0000000000000000 [ 478.551173][T13053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.551179][T13053] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 478.551186][T13053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.551200][T13053] [ 478.757157][T13067] overlayfs: missing 'lowerdir' [ 478.980955][T13074] FAULT_INJECTION: forcing a failure. [ 478.980955][T13074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.986545][T13074] CPU: 2 UID: 0 PID: 13074 Comm: syz.3.1604 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.986573][T13074] Tainted: [L]=SOFTLOCKUP [ 478.986578][T13074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 478.986589][T13074] Call Trace: [ 478.986596][T13074] [ 478.986602][T13074] dump_stack_lvl+0x100/0x190 [ 478.986644][T13074] should_fail_ex.cold+0x5/0xa [ 478.986666][T13074] _copy_from_user+0x2e/0xd0 [ 478.986694][T13074] get_compat_msghdr+0xb3/0x480 [ 478.986726][T13074] ? __pfx_get_compat_msghdr+0x10/0x10 [ 478.986754][T13074] ? _kstrtoull+0x13c/0x1f0 [ 478.986771][T13074] ? __pfx__kstrtoull+0x10/0x10 [ 478.986792][T13074] ___sys_sendmsg+0x1b6/0x1e0 [ 478.986812][T13074] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.986828][T13074] ? __lock_acquire+0x49f/0x1a40 [ 478.986883][T13074] __sys_sendmmsg+0x309/0x440 [ 478.986909][T13074] ? __pfx___sys_sendmmsg+0x10/0x10 [ 478.986931][T13074] ? find_held_lock+0x2b/0x80 [ 478.986957][T13074] ? __mutex_unlock_slowpath+0x35d/0x930 [ 478.986992][T13074] ? fput+0x79/0x100 [ 478.987011][T13074] ? ksys_write+0x1ac/0x250 [ 478.987030][T13074] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 478.987056][T13074] ? lockdep_hardirqs_on+0x78/0x100 [ 478.987076][T13074] __do_fast_syscall_32+0xe7/0x970 [ 478.987098][T13074] ? lockdep_hardirqs_on+0x78/0x100 [ 478.987120][T13074] do_fast_syscall_32+0x32/0x70 [ 478.987143][T13074] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.987164][T13074] RIP: 0023:0xf704efec [ 478.987185][T13074] Code: Unable to access opcode bytes at 0xf704efc2. [ 478.987193][T13074] RSP: 002b:00000000f541c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 478.987210][T13074] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080004100 [ 478.987221][T13074] RDX: 00000000ffffff80 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.987230][T13074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.987239][T13074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.987249][T13074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.987272][T13074] [ 480.739751][T13102] netlink: 'syz.3.1612': attribute type 1 has an invalid length. [ 480.783634][T13105] netlink: 'syz.2.1613': attribute type 1 has an invalid length. [ 481.065483][T13102] bond14: entered promiscuous mode [ 481.068272][T13102] 8021q: adding VLAN 0 to HW filter on device bond14 [ 481.555482][T13126] FAULT_INJECTION: forcing a failure. [ 481.555482][T13126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.563999][T13126] CPU: 0 UID: 0 PID: 13126 Comm: syz.2.1617 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.564031][T13126] Tainted: [L]=SOFTLOCKUP [ 481.564036][T13126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 481.564044][T13126] Call Trace: [ 481.564049][T13126] [ 481.564053][T13126] dump_stack_lvl+0x100/0x190 [ 481.564073][T13126] should_fail_ex.cold+0x5/0xa [ 481.564087][T13126] _copy_to_user+0x32/0xd0 [ 481.564108][T13126] simple_read_from_buffer+0xcb/0x170 [ 481.564129][T13126] proc_fail_nth_read+0x1af/0x230 [ 481.564146][T13126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.564162][T13126] ? rw_verify_area+0xce/0x6d0 [ 481.564179][T13126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.564194][T13126] vfs_read+0x1e4/0xb40 [ 481.564207][T13126] ? __pfx_vfs_read+0x10/0x10 [ 481.564216][T13126] ? find_held_lock+0x2b/0x80 [ 481.564231][T13126] ? __fget_files+0x215/0x3d0 [ 481.564244][T13126] ? __fget_files+0x21f/0x3d0 [ 481.564258][T13126] ksys_read+0x12a/0x250 [ 481.564269][T13126] ? __pfx_ksys_read+0x10/0x10 [ 481.564283][T13126] do_int80_emulation+0x14b/0x720 [ 481.564301][T13126] asm_int80_emulation+0x1a/0x20 [ 481.564313][T13126] RIP: 0023:0xf71d73eb [ 481.564322][T13126] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 481.564334][T13126] RSP: 002b:00000000f546c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 481.564346][T13126] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f546c5d0 [ 481.564353][T13126] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 481.564360][T13126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 481.564366][T13126] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 481.564373][T13126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 481.564387][T13126] [ 481.927125][ T5899] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 483.286335][T13151] netlink: 'syz.2.1625': attribute type 1 has an invalid length. [ 483.303115][T13151] bond15: entered promiscuous mode [ 483.304977][T13151] 8021q: adding VLAN 0 to HW filter on device bond15 [ 483.371099][T13154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1626'. [ 483.374909][T13154] nbd: must specify a size in bytes for the device [ 483.725522][T13169] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 483.729568][T13169] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 485.338365][T13141] Set syz1 is full, maxelem 65536 reached [ 486.776215][T13232] netlink: 'syz.0.1652': attribute type 1 has an invalid length. [ 488.208634][T13268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1659'. [ 488.239910][T13268] erofs (device sr0): cannot find valid erofs superblock [ 488.476611][T13274] netlink: 'syz.2.1662': attribute type 1 has an invalid length. [ 489.057462][T13292] syzkaller0: entered promiscuous mode [ 489.059276][T13292] syzkaller0: entered allmulticast mode [ 489.068798][T13292] FAULT_INJECTION: forcing a failure. [ 489.068798][T13292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.083147][T13292] CPU: 2 UID: 0 PID: 13292 Comm: syz.0.1669 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.083167][T13292] Tainted: [L]=SOFTLOCKUP [ 489.083171][T13292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 489.083178][T13292] Call Trace: [ 489.083183][T13292] [ 489.083188][T13292] dump_stack_lvl+0x100/0x190 [ 489.083211][T13292] should_fail_ex.cold+0x5/0xa [ 489.083225][T13292] _copy_from_user+0x2e/0xd0 [ 489.083244][T13292] get_compat_msghdr+0xb3/0x480 [ 489.083263][T13292] ? __pfx_get_compat_msghdr+0x10/0x10 [ 489.083286][T13292] ___sys_sendmsg+0x1b6/0x1e0 [ 489.083300][T13292] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.083319][T13292] ? find_held_lock+0x2b/0x80 [ 489.083342][T13292] __sys_sendmsg+0x160/0x210 [ 489.083358][T13292] ? __pfx___sys_sendmsg+0x10/0x10 [ 489.083378][T13292] ? __pfx_ksys_write+0x10/0x10 [ 489.083391][T13292] __do_fast_syscall_32+0xe7/0x970 [ 489.083407][T13292] ? lockdep_hardirqs_on+0x78/0x100 [ 489.083422][T13292] do_fast_syscall_32+0x32/0x70 [ 489.083438][T13292] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 489.083453][T13292] RIP: 0023:0xf7f02fec [ 489.083467][T13292] Code: Unable to access opcode bytes at 0xf7f02fc2. [ 489.083473][T13292] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 489.083484][T13292] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 489.083491][T13292] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 489.083498][T13292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 489.083504][T13292] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 489.083511][T13292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 489.083525][T13292] [ 489.230698][T13300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1673'. [ 489.243040][T13300] erofs (device sr0): cannot find valid erofs superblock [ 490.074772][T13329] FAULT_INJECTION: forcing a failure. [ 490.074772][T13329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.082499][T13329] CPU: 0 UID: 0 PID: 13329 Comm: syz.1.1677 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.082519][T13329] Tainted: [L]=SOFTLOCKUP [ 490.082523][T13329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 490.082531][T13329] Call Trace: [ 490.082535][T13329] [ 490.082539][T13329] dump_stack_lvl+0x100/0x190 [ 490.082559][T13329] should_fail_ex.cold+0x5/0xa [ 490.082573][T13329] _copy_from_user+0x2e/0xd0 [ 490.082593][T13329] get_compat_msghdr+0xb3/0x480 [ 490.082612][T13329] ? __pfx_get_compat_msghdr+0x10/0x10 [ 490.082639][T13329] ___sys_sendmsg+0x1b6/0x1e0 [ 490.082659][T13329] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.082684][T13329] ? find_held_lock+0x2b/0x80 [ 490.082717][T13329] __sys_sendmsg+0x160/0x210 [ 490.082741][T13329] ? __pfx___sys_sendmsg+0x10/0x10 [ 490.082782][T13329] ? __pfx_ksys_write+0x10/0x10 [ 490.082798][T13329] __do_fast_syscall_32+0xe7/0x970 [ 490.082813][T13329] ? lockdep_hardirqs_on+0x78/0x100 [ 490.082829][T13329] do_fast_syscall_32+0x32/0x70 [ 490.082845][T13329] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 490.082860][T13329] RIP: 0023:0xf702efec [ 490.082873][T13329] Code: Unable to access opcode bytes at 0xf702efc2. [ 490.082879][T13329] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 490.082891][T13329] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 490.082898][T13329] RDX: 0000000004000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 490.082905][T13329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 490.082911][T13329] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 490.082918][T13329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 490.082932][T13329] [ 491.294805][T13364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1684'. [ 491.316498][T13364] erofs (device sr0): cannot find valid erofs superblock [ 491.756529][T13372] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 491.764268][T13372] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 491.781101][T13372] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 491.785943][T13372] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 493.694136][ T5759] Bluetooth: hci0: command 0x0c1a tx timeout [ 493.768878][ T5759] Bluetooth: hci1: command 0x0c1a tx timeout [ 493.865006][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 493.867818][ T5759] Bluetooth: hci3: command 0x0c1a tx timeout [ 495.536811][ T64] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 495.542140][ T64] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 495.616596][ T42] audit: type=1326 audit(1785613057.214:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.0.1703" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x0 [ 495.979704][T13438] erofs (device sr0): cannot find valid erofs superblock [ 496.360781][T13444] netlink: 'syz.2.1705': attribute type 1 has an invalid length. [ 496.618497][T13456] blktrace: Concurrent blktraces are not allowed on sg0 [ 497.220318][T13468] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 497.283904][T13468] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 497.292677][T13468] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 497.295761][T13468] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 497.665607][ T5751] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 498.158333][T13487] netlink: 'syz.1.1716': attribute type 1 has an invalid length. [ 499.216646][ T5759] Bluetooth: hci0: command 0x0c1a tx timeout [ 499.366823][ T5759] Bluetooth: hci2: command 0x0c1a tx timeout [ 499.366951][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 499.366996][ T5750] Bluetooth: hci3: command 0x0c1a tx timeout [ 501.130408][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.132481][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.948483][ T5759] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 507.952353][ T5759] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 508.015293][ T42] audit: type=1326 audit(1785613069.614:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.1.1722" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 508.097576][T13544] blktrace: Concurrent blktraces are not allowed on sg0 [ 508.098852][T13529] can0: slcan on ttyS3. [ 508.837402][T13567] netlink: 'syz.1.1728': attribute type 1 has an invalid length. [ 509.846723][ T5759] Bluetooth: hci3: command 0x0c1a tx timeout [ 511.367577][ T42] audit: type=1326 audit(1785613072.974:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13601 comm="syz.1.1737" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 511.594409][T13545] syz.2.1723 (13545) used greatest stack depth: 19168 bytes left [ 511.617322][T13611] netlink: 'syz.2.1739': attribute type 1 has an invalid length. [ 511.953615][T13619] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 511.962031][T13619] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 511.965461][T13619] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 511.972218][T13619] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 512.538831][T13633] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 512.650925][T13537] can0 (unregistered): slcan off ttyS3. [ 513.932057][ T5759] Bluetooth: hci0: command 0x0c1a tx timeout [ 514.007698][ T5759] Bluetooth: hci3: command 0x0c1a tx timeout [ 514.018326][ T5759] Bluetooth: hci2: command 0x0c1a tx timeout [ 514.018346][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 515.568015][T13596] syz.2.1734 (13596) used greatest stack depth: 18280 bytes left [ 516.086481][ T5759] Bluetooth: hci3: command 0x0c1a tx timeout [ 516.206463][ T5940] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 516.355270][T13687] erofs (device sr0): cannot find valid erofs superblock [ 516.368959][ T5940] usb 6-1: Using ep0 maxpacket: 16 [ 516.373728][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 516.382663][ T5940] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 516.385635][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.391089][ T5940] usb 6-1: Product: syz [ 516.392421][ T5940] usb 6-1: Manufacturer: syz [ 516.398053][ T5940] usb 6-1: SerialNumber: syz [ 516.405877][ T5940] usb 6-1: config 0 descriptor?? [ 516.418686][ T5940] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 516.427510][ T5940] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 517.319644][ T5940] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 517.838442][ T5940] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 517.849561][ T5940] em28xx 6-1:0.0: board has no eeprom [ 517.957612][ T5940] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 517.973574][ T5940] em28xx 6-1:0.0: dvb set to bulk mode. [ 517.985635][T10890] em28xx 6-1:0.0: Binding DVB extension [ 518.006204][ T5940] usb 6-1: USB disconnect, device number 14 [ 518.013159][ T5940] em28xx 6-1:0.0: Disconnecting em28xx [ 518.234964][T10890] em28xx 6-1:0.0: Registering input extension [ 518.250846][ T5940] em28xx 6-1:0.0: Closing input extension [ 518.306641][ T5940] em28xx 6-1:0.0: Freeing device [ 520.961040][T13776] FAULT_INJECTION: forcing a failure. [ 520.961040][T13776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.970426][T13776] CPU: 0 UID: 0 PID: 13776 Comm: syz.1.1780 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.970454][T13776] Tainted: [L]=SOFTLOCKUP [ 520.970460][T13776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 520.970470][T13776] Call Trace: [ 520.970476][T13776] [ 520.970483][T13776] dump_stack_lvl+0x100/0x190 [ 520.970509][T13776] should_fail_ex.cold+0x5/0xa [ 520.970530][T13776] _copy_from_user+0x2e/0xd0 [ 520.970557][T13776] get_compat_msghdr+0xb3/0x480 [ 520.970608][T13776] ? __pfx_get_compat_msghdr+0x10/0x10 [ 520.970637][T13776] ___sys_sendmsg+0x1b6/0x1e0 [ 520.970651][T13776] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.970670][T13776] ? find_held_lock+0x2b/0x80 [ 520.970694][T13776] __sys_sendmsg+0x160/0x210 [ 520.970710][T13776] ? __pfx___sys_sendmsg+0x10/0x10 [ 520.970730][T13776] ? __pfx_ksys_write+0x10/0x10 [ 520.970744][T13776] __do_fast_syscall_32+0xe7/0x970 [ 520.970760][T13776] ? lockdep_hardirqs_on+0x78/0x100 [ 520.970775][T13776] do_fast_syscall_32+0x32/0x70 [ 520.970790][T13776] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 520.970806][T13776] RIP: 0023:0xf702efec [ 520.970818][T13776] Code: Unable to access opcode bytes at 0xf702efc2. [ 520.970824][T13776] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 520.970836][T13776] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 520.970843][T13776] RDX: 0000000024000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 520.970850][T13776] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 520.970856][T13776] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 520.970862][T13776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 520.970876][T13776] [ 521.237861][T13786] IPv6: addrconf: prefix option has invalid lifetime [ 522.106542][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 522.111425][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 522.185165][ T42] audit: type=1326 audit(1785613084.785:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.1.1788" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 522.298317][T13809] NILFS (loop0): device size too small [ 523.526049][T13829] FAULT_INJECTION: forcing a failure. [ 523.526049][T13829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.531598][T13829] CPU: 2 UID: 0 PID: 13829 Comm: syz.3.1800 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.531625][T13829] Tainted: [L]=SOFTLOCKUP [ 523.531630][T13829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 523.531640][T13829] Call Trace: [ 523.531646][T13829] [ 523.531654][T13829] dump_stack_lvl+0x100/0x190 [ 523.531679][T13829] should_fail_ex.cold+0x5/0xa [ 523.531698][T13829] _copy_from_user+0x2e/0xd0 [ 523.531725][T13829] get_compat_msghdr+0xb3/0x480 [ 523.531751][T13829] ? __pfx_get_compat_msghdr+0x10/0x10 [ 523.531785][T13829] ___sys_sendmsg+0x1b6/0x1e0 [ 523.531805][T13829] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.531834][T13829] ? find_held_lock+0x2b/0x80 [ 523.531870][T13829] __sys_sendmsg+0x160/0x210 [ 523.531892][T13829] ? __pfx___sys_sendmsg+0x10/0x10 [ 523.531920][T13829] ? __pfx_ksys_write+0x10/0x10 [ 523.531941][T13829] __do_fast_syscall_32+0xe7/0x970 [ 523.531963][T13829] ? lockdep_hardirqs_on+0x78/0x100 [ 523.531984][T13829] do_fast_syscall_32+0x32/0x70 [ 523.532006][T13829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 523.532026][T13829] RIP: 0023:0xf704efec [ 523.532051][T13829] Code: Unable to access opcode bytes at 0xf704efc2. [ 523.532058][T13829] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 523.532075][T13829] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 523.532086][T13829] RDX: 000000000000c010 RSI: 0000000000000000 RDI: 0000000000000000 [ 523.532096][T13829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 523.532104][T13829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.532114][T13829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 523.532136][T13829] [ 524.096571][ T5750] Bluetooth: hci3: command 0x0c1a tx timeout [ 524.781597][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1803'. [ 525.588951][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 525.601503][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 525.678457][ T42] audit: type=1326 audit(1785613088.275:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13883 comm="syz.0.1810" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x0 [ 526.055831][T13923] FAULT_INJECTION: forcing a failure. [ 526.055831][T13923] name failslab, interval 1, probability 0, space 0, times 0 [ 526.059684][T13923] CPU: 1 UID: 0 PID: 13923 Comm: syz.3.1812 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.059703][T13923] Tainted: [L]=SOFTLOCKUP [ 526.059708][T13923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 526.059715][T13923] Call Trace: [ 526.059720][T13923] [ 526.059725][T13923] dump_stack_lvl+0x100/0x190 [ 526.059743][T13923] should_fail_ex.cold+0x5/0xa [ 526.059757][T13923] should_failslab+0xc2/0x120 [ 526.059773][T13923] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 526.059788][T13923] ? __alloc_skb+0x5b7/0x710 [ 526.059804][T13923] ? __alloc_skb+0x140/0x710 [ 526.059820][T13923] __alloc_skb+0x140/0x710 [ 526.059834][T13923] ? __alloc_skb+0x5b7/0x710 [ 526.059848][T13923] ? __pfx___alloc_skb+0x10/0x10 [ 526.059864][T13923] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 526.059880][T13923] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 526.059898][T13923] alloc_skb_with_frags+0xdd/0x760 [ 526.059915][T13923] ? __kernel_text_address+0xd/0x30 [ 526.059933][T13923] ? unwind_get_return_address+0x59/0xa0 [ 526.059954][T13923] sock_alloc_send_pskb+0x801/0x980 [ 526.059973][T13923] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 526.059989][T13923] ? aa_sk_perm+0x309/0xaa0 [ 526.060006][T13923] hci_sock_sendmsg+0x1c7/0x2620 [ 526.060025][T13923] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 526.060040][T13923] ? apparmor_socket_sendmsg+0x15b/0x270 [ 526.060055][T13923] sock_write_iter+0x53a/0x5b0 [ 526.060066][T13923] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 526.060081][T13923] ? __pfx_sock_write_iter+0x10/0x10 [ 526.060096][T13923] ? bpf_lsm_file_permission+0x9/0x10 [ 526.060107][T13923] ? security_file_permission+0x76/0x210 [ 526.060124][T13923] ? rw_verify_area+0xce/0x6d0 [ 526.060143][T13923] vfs_write+0x6ac/0x1050 [ 526.060154][T13923] ? __pfx_sock_write_iter+0x10/0x10 [ 526.060167][T13923] ? __pfx_vfs_write+0x10/0x10 [ 526.060176][T13923] ? find_held_lock+0x2b/0x80 [ 526.060199][T13923] ksys_write+0x1f8/0x250 [ 526.060209][T13923] ? __pfx_ksys_write+0x10/0x10 [ 526.060218][T13923] ? ksys_write+0x1ac/0x250 [ 526.060248][T13923] ? __pfx_ksys_write+0x10/0x10 [ 526.060262][T13923] __do_fast_syscall_32+0xe7/0x970 [ 526.060278][T13923] ? lockdep_hardirqs_on+0x78/0x100 [ 526.060293][T13923] do_fast_syscall_32+0x32/0x70 [ 526.060308][T13923] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 526.060324][T13923] RIP: 0023:0xf704efec [ 526.060337][T13923] Code: Unable to access opcode bytes at 0xf704efc2. [ 526.060343][T13923] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 526.060355][T13923] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000000 [ 526.060362][T13923] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 526.060368][T13923] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 526.060374][T13923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.060381][T13923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 526.060394][T13923] [ 526.160709][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1812'. [ 526.202616][T13927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1814'. [ 526.448202][T13937] erofs (device sr0): cannot find valid erofs superblock [ 527.382498][ T42] audit: type=1326 audit(1785613089.975:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.1.1823" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 527.745889][ T5750] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 527.748619][ T5750] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 527.799278][ T42] audit: type=1326 audit(1785613090.405:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13971 comm="syz.2.1826" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 529.161836][ T42] audit: type=1326 audit(1785613091.725:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13987 comm="syz.1.1828" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 529.366622][ T5750] Bluetooth: hci3: command 0x0c1a tx timeout [ 530.098295][ T5750] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 530.101181][ T5750] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 530.148752][ T5750] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 530.151200][ T5750] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 530.158423][ T42] audit: type=1326 audit(1785613092.765:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14009 comm="syz.2.1837" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 530.205488][ T42] audit: type=1326 audit(1785613092.805:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14007 comm="syz.0.1836" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x0 [ 531.446546][ T5750] Bluetooth: hci3: command 0x0c1a tx timeout [ 532.141879][T14061] blktrace: Concurrent blktraces are not allowed on sg0 [ 532.259247][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 532.262591][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 532.321526][ T42] audit: type=1326 audit(1785613094.925:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14062 comm="syz.0.1853" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x0 [ 533.537206][ T5759] Bluetooth: hci3: command 0x0c1a tx timeout [ 534.216871][ T5759] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 534.220649][ T5759] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 534.260779][T14110] blktrace: Concurrent blktraces are not allowed on sg0 [ 534.327449][ T42] audit: type=1326 audit(1785613096.885:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14103 comm="syz.2.1869" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 535.871101][T14141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1879'. [ 537.223316][ T5759] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 537.233047][ T5759] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 537.283016][ T42] audit: type=1326 audit(1785613099.885:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14181 comm="syz.1.1886" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 538.969075][T14204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1891'. [ 540.311942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 541.673781][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1899'. [ 542.653159][T14254] blktrace: Concurrent blktraces are not allowed on sg0 [ 544.085901][T14291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1909'. [ 545.003940][T14310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1914'. [ 545.294302][T14314] erofs (device sr0): cannot find valid erofs superblock [ 545.611130][T14322] blktrace: Concurrent blktraces are not allowed on sg0 [ 546.561138][T14336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1918'. [ 554.725620][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 554.728903][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 554.779811][ T42] audit: type=1326 audit(1785613117.385:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14447 comm="syz.0.1945" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x0 [ 557.111077][T14479] NILFS (loop2): device size too small [ 558.791247][T14500] blktrace: Concurrent blktraces are not allowed on sg0 [ 561.064258][T14543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1973'. [ 561.403105][T14548] erofs (device sr0): cannot find valid erofs superblock [ 561.450720][T14551] NILFS (loop0): device size too small [ 561.943224][T14555] NILFS (loop1): device size too small [ 562.591648][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.643210][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.336506][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 563.339782][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 563.396798][ T42] audit: type=1326 audit(1785613126.005:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14566 comm="syz.0.1981" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x0 [ 563.560299][T14578] FAULT_INJECTION: forcing a failure. [ 563.560299][T14578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.567226][T14578] CPU: 1 UID: 0 PID: 14578 Comm: syz.2.1984 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.567245][T14578] Tainted: [L]=SOFTLOCKUP [ 563.567249][T14578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 563.567256][T14578] Call Trace: [ 563.567261][T14578] [ 563.567266][T14578] dump_stack_lvl+0x100/0x190 [ 563.567290][T14578] should_fail_ex.cold+0x5/0xa [ 563.567306][T14578] _copy_from_user+0x2e/0xd0 [ 563.567328][T14578] kstrtouint_from_user+0xd6/0x1d0 [ 563.567341][T14578] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 563.567354][T14578] ? __lock_acquire+0x49f/0x1a40 [ 563.567380][T14578] proc_fail_nth_write+0x83/0x220 [ 563.567404][T14578] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 563.567424][T14578] vfs_write+0x2aa/0x1050 [ 563.567436][T14578] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 563.567453][T14578] ? __pfx_vfs_write+0x10/0x10 [ 563.567462][T14578] ? find_held_lock+0x2b/0x80 [ 563.567476][T14578] ? __fget_files+0x215/0x3d0 [ 563.567490][T14578] ? __fget_files+0x21f/0x3d0 [ 563.567504][T14578] ksys_write+0x12a/0x250 [ 563.567515][T14578] ? __pfx_ksys_write+0x10/0x10 [ 563.567529][T14578] do_int80_emulation+0x14b/0x720 [ 563.567547][T14578] asm_int80_emulation+0x1a/0x20 [ 563.567559][T14578] RIP: 0023:0xf71d73eb [ 563.567569][T14578] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 563.567580][T14578] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 563.567591][T14578] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548d5d0 [ 563.567598][T14578] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 563.567604][T14578] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 563.567610][T14578] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 563.567617][T14578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 563.567631][T14578] [ 565.128450][T14616] 9pnet_virtio: no channels available for device syz [ 565.433335][T14625] netlink: 'syz.0.2000': attribute type 2 has an invalid length. [ 565.437987][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 567.046504][ T5759] Bluetooth: hci1: command 0x0c1a tx timeout [ 567.343125][T14660] NILFS (loop0): device size too small [ 568.888399][T14684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2020'. [ 569.217048][T14687] erofs (device sr0): cannot find valid erofs superblock [ 569.519396][T14694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2023'. [ 569.960354][T14700] erofs (device sr0): cannot find valid erofs superblock [ 570.302868][ T42] audit: type=1800 audit(1785613132.905:3094): pid=14702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2024" name="trace_pipe" dev="tracefs" ino=2109 res=0 errno=0 [ 572.324599][T14730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2034'. [ 572.572986][T14740] FAULT_INJECTION: forcing a failure. [ 572.572986][T14740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.585268][T14740] CPU: 0 UID: 0 PID: 14740 Comm: syz.2.2037 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.585289][T14740] Tainted: [L]=SOFTLOCKUP [ 572.585293][T14740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 572.585300][T14740] Call Trace: [ 572.585304][T14740] [ 572.585310][T14740] dump_stack_lvl+0x100/0x190 [ 572.585336][T14740] should_fail_ex.cold+0x5/0xa [ 572.585355][T14740] _copy_from_iter+0x1f4/0x1690 [ 572.585384][T14740] ? __asan_memset+0x23/0x50 [ 572.585399][T14740] ? __pfx__copy_from_iter+0x10/0x10 [ 572.585416][T14740] ? __pfx___alloc_skb+0x10/0x10 [ 572.585437][T14740] netlink_sendmsg+0x808/0xda0 [ 572.585453][T14740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.585467][T14740] ? apparmor_socket_sendmsg+0x15b/0x270 [ 572.585485][T14740] ____sys_sendmsg+0xa4d/0xbe0 [ 572.585496][T14740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.585510][T14740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.585528][T14740] ___sys_sendmsg+0x190/0x1e0 [ 572.585541][T14740] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.585560][T14740] ? find_held_lock+0x2b/0x80 [ 572.585583][T14740] __sys_sendmsg+0x160/0x210 [ 572.585600][T14740] ? __pfx___sys_sendmsg+0x10/0x10 [ 572.585619][T14740] ? __pfx_ksys_write+0x10/0x10 [ 572.585633][T14740] __do_fast_syscall_32+0xe7/0x970 [ 572.585649][T14740] ? lockdep_hardirqs_on+0x78/0x100 [ 572.585664][T14740] do_fast_syscall_32+0x32/0x70 [ 572.585680][T14740] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 572.585694][T14740] RIP: 0023:0xf709efec [ 572.585709][T14740] Code: Unable to access opcode bytes at 0xf709efc2. [ 572.585714][T14740] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 572.585726][T14740] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 572.585733][T14740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 572.585740][T14740] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 572.585746][T14740] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 572.585752][T14740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 572.585766][T14740] [ 572.595930][T14741] erofs (device sr0): cannot find valid erofs superblock [ 578.998334][T14855] NILFS (loop0): device size too small [ 579.460278][T14865] Invalid option length (1003645) for dns_resolver key [ 579.570814][T14865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2062'. [ 581.785011][T14897] NILFS (loop0): device size too small [ 581.874492][ T42] audit: type=1326 audit(1785613144.475:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.2.2071" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709efec code=0x0 [ 584.162656][T14942] NILFS (loop2): device size too small [ 584.265181][T14944] binder: BINDER_SET_CONTEXT_MGR already set [ 584.267576][T14944] binder: 14931:14944 ioctl 4018620d 80004a80 returned -16 [ 586.915642][T14987] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2096'. [ 586.918931][T14987] openvswitch: netlink: Flow actions attr not present in new flow. [ 588.069558][ T6317] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 588.241860][ T6317] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.255745][ T6317] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 588.342999][ T6317] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 588.377925][ T6317] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 588.421605][ T6317] usb 8-1: Product: syz [ 588.444374][ T6317] usb 8-1: Manufacturer: syz [ 588.459839][ T6317] usb 8-1: SerialNumber: syz [ 588.533529][ T6317] usb 8-1: config 0 descriptor?? [ 589.366701][ T5118] usb 8-1: USB disconnect, device number 11 [ 590.680762][T15054] NILFS (loop2): device size too small [ 593.430596][T15095] devpts: Bad value for 'max' [ 593.433293][T15095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2126'. [ 595.537738][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 595.540483][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 595.676582][ T42] audit: type=1326 audit(1785613158.275:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15130 comm="syz.0.2136" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x0 [ 595.683090][T15136] blktrace: Concurrent blktraces are not allowed on sg0 [ 597.312623][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 597.316573][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 597.376076][ T42] audit: type=1326 audit(1785613159.975:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15150 comm="syz.1.2141" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 597.567518][T15167] bond0: (slave team0): Releasing backup interface [ 597.575833][T15167] bond2: (slave dummy0): Releasing active interface [ 597.584973][T15167] bridge_slave_0: left allmulticast mode [ 597.587140][T15167] bridge_slave_0: left promiscuous mode [ 597.592230][T15167] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.606511][T15167] bridge_slave_1: left allmulticast mode [ 597.611370][T15167] bridge_slave_1: left promiscuous mode [ 597.615081][T15167] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.680790][T15167] bond0: (slave bond_slave_0): Releasing backup interface [ 597.732075][T15167] bond0: (slave bond_slave_1): Releasing backup interface [ 597.791585][T15167] team0: Port device team_slave_0 removed [ 597.837888][T15167] team0: Port device team_slave_1 removed [ 597.845803][T15167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.849284][T15167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.863266][T15167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.866022][T15167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.880690][T15167] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 597.904930][T15168] tipc: Enabling of bearer rejected, media not registered [ 599.109143][T15187] blktrace: Concurrent blktraces are not allowed on sg0 [ 599.296490][ T5750] Bluetooth: hci3: command 0x0c1a tx timeout [ 600.137463][T15214] typec_fusb302 0-0022: supply vbus not found, using dummy regulator [ 600.141990][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 600.145122][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 600.160258][T15214] typec_fusb302 0-0022: failed to request gpio_int_n [ 600.210696][ T42] audit: type=1326 audit(1785613162.815:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15206 comm="syz.0.2156" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x0 [ 600.234289][T15218] typec_fusb302 1-0022: I2C/SMBus block functionality not supported! [ 600.270107][T15214] typec_fusb302 0-0022: probe with driver typec_fusb302 failed with error -2 [ 600.275176][T15218] i2c i2c-1: new_device: Instantiated device typec_fusb302 at 0x22 [ 600.278148][T15214] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 600.290360][T15214] Invalid option length (1047276) for dns_resolver key [ 600.704453][T15226] blktrace: Concurrent blktraces are not allowed on sg0 [ 600.979141][ T5759] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 603.947311][T15295] FAULT_INJECTION: forcing a failure. [ 603.947311][T15295] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 603.962042][T15295] CPU: 1 UID: 0 PID: 15295 Comm: syz.1.2182 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.962073][T15295] Tainted: [L]=SOFTLOCKUP [ 603.962079][T15295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 603.962090][T15295] Call Trace: [ 603.962097][T15295] [ 603.962104][T15295] dump_stack_lvl+0x100/0x190 [ 603.962133][T15295] should_fail_ex.cold+0x5/0xa [ 603.962158][T15295] ? prepare_alloc_pages+0x16d/0x5f0 [ 603.962187][T15295] should_fail_alloc_page+0xeb/0x140 [ 603.962213][T15295] prepare_alloc_pages+0x1f0/0x5f0 [ 603.962243][T15295] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 603.962274][T15295] ? __lock_acquire+0x49f/0x1a40 [ 603.962308][T15295] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 603.962340][T15295] ? __lock_acquire+0x49f/0x1a40 [ 603.962382][T15295] ? __lock_acquire+0x49f/0x1a40 [ 603.962418][T15295] ? lock_acquire+0x1b9/0x370 [ 603.962443][T15295] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 603.962474][T15295] ? policy_nodemask+0xed/0x4f0 [ 603.962503][T15295] alloc_pages_mpol+0x1fb/0x540 [ 603.962530][T15295] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 603.962563][T15295] folio_alloc_mpol_noprof+0x36/0x260 [ 603.962594][T15295] vma_alloc_folio_noprof+0xed/0x1d0 [ 603.962622][T15295] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 603.962660][T15295] do_anonymous_page+0xb2b/0x2080 [ 603.962681][T15295] ? rcu_read_unlock+0x2d/0xb0 [ 603.962707][T15295] __handle_mm_fault+0x1d2c/0x2a00 [ 603.962730][T15295] ? mt_find+0x45e/0x8e0 [ 603.962757][T15295] ? __pfx___handle_mm_fault+0x10/0x10 [ 603.962774][T15295] ? __pfx_mt_find+0x10/0x10 [ 603.962814][T15295] ? find_vma+0xbf/0x140 [ 603.962836][T15295] ? __pfx_find_vma+0x10/0x10 [ 603.962861][T15295] handle_mm_fault+0x37b/0xa30 [ 603.962885][T15295] do_user_addr_fault+0x74c/0x12f0 [ 603.962920][T15295] exc_page_fault+0x6f/0xd0 [ 603.962944][T15295] asm_exc_page_fault+0x26/0x30 [ 603.962962][T15295] RIP: 0010:_copy_to_iter+0x4c0/0x1720 [ 603.962991][T15295] Code: 00 e8 a4 40 f0 fc 48 8b 74 24 18 48 8b 44 24 08 4c 8d 24 06 89 de 4c 89 e7 e8 fc d5 5f fd 0f 01 cb 48 89 d9 4c 89 f7 4c 89 e6 a4 0f 1f 00 49 89 cc 0f 01 ca 48 89 d8 48 29 c8 48 01 44 24 08 [ 603.963009][T15295] RSP: 0018:ffffc900074779a8 EFLAGS: 00050246 [ 603.963025][T15295] RAX: 0000000000000001 RBX: 0000000000000fdc RCX: 000000000000019c [ 603.963036][T15295] RDX: 0000000000000001 RSI: ffff88806f66ce40 RDI: 0000000080003000 [ 603.963047][T15295] RBP: ffffc90007477bb0 R08: 0000000000000000 R09: ffffed100decd9fb [ 603.963058][T15295] R10: ffff88806f66cfdb R11: 0000000000000000 R12: ffff88806f66c000 [ 603.963069][T15295] R13: 0000000000000000 R14: 00000000800021c0 R15: 0000000000000fdc [ 603.963093][T15295] ? _copy_to_iter+0x4b4/0x1720 [ 603.963124][T15295] ? __pfx__copy_to_iter+0x10/0x10 [ 603.963157][T15295] ? netstat_seq_show+0x621/0x9b0 [ 603.963191][T15295] seq_read_iter+0xdab/0x1270 [ 603.963232][T15295] seq_read+0x344/0x4d0 [ 603.963260][T15295] ? __pfx_seq_read+0x10/0x10 [ 603.963292][T15295] ? lock_acquire+0x1b9/0x370 [ 603.963328][T15295] ? __pfx_seq_read+0x10/0x10 [ 603.963354][T15295] proc_reg_read+0x240/0x330 [ 603.963373][T15295] ? __pfx_proc_reg_read+0x10/0x10 [ 603.963391][T15295] vfs_read+0x1e4/0xb40 [ 603.963413][T15295] ? __pfx_vfs_read+0x10/0x10 [ 603.963428][T15295] ? find_held_lock+0x2b/0x80 [ 603.963449][T15295] ? __fget_files+0x215/0x3d0 [ 603.963471][T15295] ? __fget_files+0x21f/0x3d0 [ 603.963496][T15295] ksys_read+0x12a/0x250 [ 603.963512][T15295] ? __pfx_ksys_read+0x10/0x10 [ 603.963527][T15295] ? ksys_write+0x1ac/0x250 [ 603.963543][T15295] ? __pfx_ksys_write+0x10/0x10 [ 603.963566][T15295] __do_fast_syscall_32+0xe7/0x970 [ 603.963589][T15295] ? lockdep_hardirqs_on+0x78/0x100 [ 603.963614][T15295] do_fast_syscall_32+0x32/0x70 [ 603.963638][T15295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 603.963676][T15295] RIP: 0023:0xf702efec [ 603.963698][T15295] Code: Unable to access opcode bytes at 0xf702efc2. [ 603.963705][T15295] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 603.963721][T15295] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800021c0 [ 603.963731][T15295] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 603.963741][T15295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 603.963751][T15295] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 603.963761][T15295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 603.963785][T15295] [ 609.407435][T15384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2199'. [ 609.443900][T15387] gretap0: entered promiscuous mode [ 609.688471][T15388] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 609.838333][T15391] erofs (device sr0): cannot find valid erofs superblock [ 612.280260][T15433] NILFS (loop2): device size too small [ 613.621398][T15450] FAULT_INJECTION: forcing a failure. [ 613.621398][T15450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.633466][T15450] CPU: 2 UID: 0 PID: 15450 Comm: syz.1.2220 Tainted: G L syzkaller #0 PREEMPT(full) [ 613.633495][T15450] Tainted: [L]=SOFTLOCKUP [ 613.633501][T15450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 613.633510][T15450] Call Trace: [ 613.633516][T15450] [ 613.633523][T15450] dump_stack_lvl+0x100/0x190 [ 613.633548][T15450] should_fail_ex.cold+0x5/0xa [ 613.633568][T15450] _copy_to_user+0x32/0xd0 [ 613.633596][T15450] simple_read_from_buffer+0xcb/0x170 [ 613.633625][T15450] proc_fail_nth_read+0x1af/0x230 [ 613.633649][T15450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 613.633672][T15450] ? rw_verify_area+0xce/0x6d0 [ 613.633695][T15450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 613.633716][T15450] vfs_read+0x1e4/0xb40 [ 613.633746][T15450] ? __pfx_vfs_read+0x10/0x10 [ 613.633759][T15450] ? find_held_lock+0x2b/0x80 [ 613.633779][T15450] ? __fget_files+0x215/0x3d0 [ 613.633799][T15450] ? __fget_files+0x21f/0x3d0 [ 613.633819][T15450] ksys_read+0x12a/0x250 [ 613.633834][T15450] ? __pfx_ksys_read+0x10/0x10 [ 613.633855][T15450] do_int80_emulation+0x14b/0x720 [ 613.633881][T15450] asm_int80_emulation+0x1a/0x20 [ 613.633898][T15450] RIP: 0023:0xf71673eb [ 613.633911][T15450] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 613.633927][T15450] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 613.633944][T15450] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f541d5d0 [ 613.633954][T15450] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 613.633963][T15450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 613.633972][T15450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.633981][T15450] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 613.634002][T15450] [ 616.774984][T15487] erofs (device sr0): cannot find valid erofs superblock [ 617.395978][ T5759] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 617.399170][ T5759] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 617.507229][ T42] audit: type=1326 audit(1785613180.115:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15497 comm="syz.3.2236" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x0 [ 618.078798][T15507] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 618.084901][T15507] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 620.996717][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 620.999676][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 621.057826][ T42] audit: type=1326 audit(1785613183.665:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.0.2254" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f02fec code=0x0 [ 622.758407][T15582] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2260'. [ 622.761275][T15582] openvswitch: netlink: Flow actions attr not present in new flow. [ 624.010680][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.012931][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.121221][T15612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2268'. [ 625.190021][T15612] bridge20: port 1(gretap1) entered blocking state [ 625.192184][T15612] bridge20: port 1(gretap1) entered disabled state [ 625.197342][T15612] gretap1: entered allmulticast mode [ 625.204585][T15612] gretap1: entered promiscuous mode [ 625.383022][T15631] capability: warning: `syz.0.2277' uses deprecated v2 capabilities in a way that may be insecure [ 625.471368][T15638] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(18) [ 625.686899][T15648] overlayfs: missing 'lowerdir' [ 625.814801][T15646] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.940774][T15646] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.085187][T15646] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.211461][T15646] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.348560][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.366685][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.382116][T15678] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 626.387208][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.389774][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.440046][T15682] hugetlbfs: Bad value 'ð' for mount option 'nr_inodes' [ 626.440046][T15682] [ 626.844065][T15706] netlink: 'syz.3.2308': attribute type 13 has an invalid length. [ 626.847758][T15706] netlink: 'syz.3.2308': attribute type 17 has an invalid length. [ 626.965816][T15706] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.985015][T15706] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 627.318281][T15725] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.320717][T15725] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.371057][T15725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.376807][T15725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.542444][T15731] lo: Caught tx_queue_len zero misconfig [ 627.587963][ T5856] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.598200][ T5856] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.638762][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.642989][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.798364][T15751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2330'. [ 628.029340][ T42] audit: type=1326 audit(1785613190.635:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 628.038002][ T42] audit: type=1326 audit(1785613190.635:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 628.046357][ T42] audit: type=1326 audit(1785613190.635:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2336" exe="/syz-executor" sig=0 arch=40000003 syscall=448 compat=1 ip=0xf709efec code=0x7ffc0000 [ 628.067618][ T42] audit: type=1326 audit(1785613190.635:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 628.079055][ T42] audit: type=1326 audit(1785613190.635:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 628.081099][T15764] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 628.088412][ T42] audit: type=1326 audit(1785613190.635:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2336" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf709efec code=0x7ffc0000 [ 628.099847][T15764] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 628.110970][T15764] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 628.146652][T15764] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 628.158547][ T42] audit: type=1326 audit(1785613190.765:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 628.162739][T15764] pci 0000:00:01.0: Adding to iommu group 1 [ 628.165285][ T42] audit: type=1326 audit(1785613190.765:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15770 comm="syz.2.2336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 628.171804][T15764] pci 0000:00:01.0: vgaarb: bridge control possible [ 628.176416][T15764] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none [ 628.186070][T15764] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 628.189118][T15764] pci 0000:00:01.0: ROM [mem 0x81000000-0x8100ffff pref]: assigned [ 628.191891][T15764] pci 0000:00:01.0: BAR 2 [mem 0x81010000-0x81010fff]: assigned [ 628.196048][T15764] bochs-drm 0000:00:01.0: enabling device (0100 -> 0102) [ 628.206607][T15764] [drm] Found bochs VGA, ID 0xb0c5. [ 628.208291][T15764] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81010000. [ 628.221857][T15764] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 628.264585][T15781] overlayfs: upper fs does not support tmpfile. [ 628.276715][T15764] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 628.410572][T15791] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2345'. [ 628.436011][ T42] audit: type=1326 audit(1785613191.035:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15793 comm="syz.2.2347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 628.456587][ T42] audit: type=1326 audit(1785613191.035:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15793 comm="syz.2.2347" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 628.511891][T15798] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2916680627 (46666890032 ns) > initial count (16865692240 ns). Using initial count to start timer. [ 628.743922][T15815] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 628.781699][T15817] syzkaller0: entered promiscuous mode [ 628.784166][T15817] syzkaller0: entered allmulticast mode [ 628.856599][T15819] bridge25: entered promiscuous mode [ 629.011022][T15825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2360'. [ 629.068431][T15823] bond2: left promiscuous mode [ 629.070151][T15823] bridge1: left promiscuous mode [ 629.084391][T15823] bond3: left promiscuous mode [ 629.086273][T15823] bridge2: left promiscuous mode [ 629.093315][T15823] bond4: left promiscuous mode [ 629.094967][T15823] bridge3: left promiscuous mode [ 629.099829][T15823] bond5: left promiscuous mode [ 629.101601][T15823] bridge4: left promiscuous mode [ 629.105946][T15823] bond6: left promiscuous mode [ 629.110871][T15823] bond7: left promiscuous mode [ 629.113715][T15823] bond8: left promiscuous mode [ 629.124693][T15823] bond9: left promiscuous mode [ 629.130698][T15823] bond10: left promiscuous mode [ 629.134196][T15823] bond11: left promiscuous mode [ 629.138105][T15823] bond12: left promiscuous mode [ 629.141501][T15823] bond13: left promiscuous mode [ 629.144845][T15823] bond14: left promiscuous mode [ 629.149731][T15823] bond15: left promiscuous mode [ 629.187006][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.193696][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.197443][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.588063][ T5750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 629.600844][ T5750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 629.605178][ T5750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 629.614427][ T5750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 629.617910][ T5750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 629.975551][T15875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2378'. [ 630.103674][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.149095][T15882] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 630.204892][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.257364][T15887] syzkaller0: entered promiscuous mode [ 630.259396][T15887] syzkaller0: entered allmulticast mode [ 630.302186][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.701633][ T5759] Bluetooth: hci4: command tx timeout [ 632.286220][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.310325][T15855] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.313348][T15855] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.316327][T15855] bridge_slave_0: entered allmulticast mode [ 632.321742][T15855] bridge_slave_0: entered promiscuous mode [ 632.326876][T15855] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.329071][T15855] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.331258][T15855] bridge_slave_1: entered allmulticast mode [ 632.334245][T15855] bridge_slave_1: entered promiscuous mode [ 632.358452][T15855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.365140][T15855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.385656][T15855] team0: Port device team_slave_0 added [ 632.402694][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 632.405277][ T5759] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 632.418724][T15855] team0: Port device team_slave_1 added [ 632.440402][T15855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.444230][T15855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.453626][T15855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.468435][T15855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.470668][T15855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.478910][T15855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.567651][T15855] hsr_slave_0: entered promiscuous mode [ 632.570107][T15855] hsr_slave_1: entered promiscuous mode [ 632.572416][T15855] debugfs: 'hsr0' already exists in 'hsr' [ 632.574361][T15855] Cannot create hsr debugfs directory [ 632.905431][ T13] dvmrp0: left allmulticast mode [ 633.259542][ T13] bond10 (unregistering): (slave gretap1): Releasing active interface [ 633.332914][ T13] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 633.343276][ T13] bridge1 (unregistering): left promiscuous mode [ 633.380777][ T13] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 633.384952][ T13] bridge2 (unregistering): left promiscuous mode [ 633.402882][ T13] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 633.407860][ T13] bridge3 (unregistering): left promiscuous mode [ 633.435356][ T13] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 633.441336][ T13] bridge4 (unregistering): left promiscuous mode [ 633.458654][ T13] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 633.462129][ T13] bridge5 (unregistering): left promiscuous mode [ 633.474817][ T13] bond8 (unregistering): (slave bridge6): Releasing backup interface [ 633.478212][ T13] bridge6 (unregistering): left promiscuous mode [ 633.631519][T15941] cgroup: fork rejected by pids controller in /syz1 [ 633.761264][ T13] bond0 (unregistering): Released all slaves [ 633.767645][ T5759] Bluetooth: hci4: command tx timeout [ 633.843237][ T13] bond1 (unregistering): Released all slaves [ 633.856818][ T13] bond2 (unregistering): Released all slaves [ 633.873421][ T13] bond3 (unregistering): Released all slaves [ 633.893236][ T13] bond4 (unregistering): Released all slaves [ 633.923286][ T13] bond5 (unregistering): Released all slaves [ 633.932471][ T13] bond6 (unregistering): Released all slaves [ 633.944718][ T13] bond7 (unregistering): Released all slaves [ 633.955300][ T13] bond8 (unregistering): Released all slaves [ 633.963472][ T13] bond9 (unregistering): Released all slaves [ 633.973222][ T13] bond10 (unregistering): Released all slaves [ 633.984003][ T13] bond11 (unregistering): Released all slaves [ 633.996256][ T13] bond12 (unregistering): Released all slaves [ 634.006454][ T13] bond13 (unregistering): Released all slaves [ 634.026837][ T13] bond14 (unregistering): Released all slaves [ 634.480670][ T5459] 8021q: adding VLAN 0 to HW filter on device eth2 [ 634.564892][T15990] blktrace: Concurrent blktraces are not allowed on sg0 [ 634.762086][ T5459] 8021q: adding VLAN 0 to HW filter on device eth3 [ 635.846560][ T5759] Bluetooth: hci4: command tx timeout [ 636.880422][T15855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 636.890099][T15855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 636.893168][T15855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 636.901731][T15855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 636.906984][T15855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 636.912337][T15855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 636.915619][T15855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 636.923251][T15855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 637.099101][T15855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.125881][T15855] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.167248][ T6207] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.169482][ T6207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.187990][ T6207] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.190890][ T6207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.457010][T16059] blktrace: Concurrent blktraces are not allowed on sg0 [ 637.744113][T15855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.785421][T15855] veth0_vlan: entered promiscuous mode [ 637.796829][T16083] smpboot: CPU 1 is now offline [ 637.819504][T15855] veth1_vlan: entered promiscuous mode [ 637.878154][T16084] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 637.908117][T15855] veth0_macvtap: entered promiscuous mode [ 637.925885][T15855] veth1_macvtap: entered promiscuous mode [ 637.934836][ T5759] Bluetooth: hci4: command tx timeout [ 637.940065][T15855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.947079][T15855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.038737][T14602] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.042058][T14602] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.549203][ T5856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.552392][ T5856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.687278][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.694899][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.431626][ T6207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.436107][ T6207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.865958][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 639.882566][ T5750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 639.909441][ T5750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 639.913333][ T5750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 639.919118][ T5750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 640.463166][T16124] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.483482][T16124] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.493587][T16124] bridge_slave_0: entered allmulticast mode [ 640.524384][T16124] bridge_slave_0: entered promiscuous mode [ 640.608548][T16124] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.625015][T16124] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.630144][T16124] bridge_slave_1: entered allmulticast mode [ 640.636205][T16124] bridge_slave_1: entered promiscuous mode [ 640.701230][T16124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.707699][T16124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.765368][T16124] team0: Port device team_slave_0 added [ 640.771555][T16124] team0: Port device team_slave_1 added [ 640.789129][T16124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.791327][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.800080][T16124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.805366][T16124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.807646][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.816042][T16124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.866083][T16124] hsr_slave_0: entered promiscuous mode [ 640.869707][T16124] hsr_slave_1: entered promiscuous mode [ 640.872861][T16124] debugfs: 'hsr0' already exists in 'hsr' [ 640.875096][T16124] Cannot create hsr debugfs directory [ 642.022782][ T5759] Bluetooth: hci1: command tx timeout [ 642.249508][ T13] hsr_slave_0: left promiscuous mode [ 642.275081][ T13] hsr_slave_1: left promiscuous mode [ 642.332984][ T13] veth1_macvtap: left promiscuous mode [ 642.354056][ T13] veth0_macvtap: left promiscuous mode [ 642.358445][ T13] veth1_vlan: left promiscuous mode [ 642.364459][ T13] veth0_vlan: left promiscuous mode [ 644.086543][ T5759] Bluetooth: hci1: command tx timeout [ 644.311094][T16124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 644.336117][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 644.343839][T16124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 644.373220][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 644.381266][T16124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 644.402899][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 644.412482][T16124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 644.475062][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 644.968703][ T13] bridge_slave_1: left allmulticast mode [ 644.971173][ T13] bridge_slave_1: left promiscuous mode [ 644.977627][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.024566][ T13] bridge_slave_0: left allmulticast mode [ 645.027483][ T13] bridge_slave_0: left promiscuous mode [ 645.033713][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.132530][ T13] gretap1: left allmulticast mode [ 645.134275][ T13] gretap1: left promiscuous mode [ 645.142317][ T13] bridge20: port 1(gretap1) entered disabled state [ 645.197916][ T13] dvmrp0: left allmulticast mode [ 645.212921][ T13] dvmrp1: left allmulticast mode [ 645.514123][ T13] bond12 (unregistering): (slave geneve2): Releasing active interface [ 645.567902][ T13] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 645.570436][ T13] bridge1 (unregistering): left promiscuous mode [ 645.585927][ T13] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 645.590642][ T13] bridge2 (unregistering): left promiscuous mode [ 645.625752][ T13] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 645.631747][ T13] bridge3 (unregistering): left promiscuous mode [ 645.659393][ T13] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 645.663994][ T13] bridge4 (unregistering): left promiscuous mode [ 645.699191][ T13] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 645.702345][ T13] bridge5 (unregistering): left promiscuous mode [ 645.727637][ T13] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 645.731125][ T13] bridge6 (unregistering): left promiscuous mode [ 645.843345][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.855503][ T6206] smbdirect: ib_dev[syz1] removed [ 645.859919][ T13] bond_slave_0: left promiscuous mode [ 645.870613][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.877546][ T13] bond_slave_1: left promiscuous mode [ 645.884214][ T13] bond0 (unregistering): (slave team0): Releasing backup interface [ 645.907234][ T13] team0: left promiscuous mode [ 645.909261][ T13] team_slave_0: left promiscuous mode [ 645.911417][ T13] team_slave_1: left promiscuous mode [ 645.914502][ T13] bond0 (unregistering): Released all slaves [ 645.923275][ T13] bond1 (unregistering): Released all slaves [ 645.934688][ T13] bond2 (unregistering): Released all slaves [ 645.946263][ T13] bond3 (unregistering): Released all slaves [ 645.961200][ T13] bond4 (unregistering): Released all slaves [ 645.972790][ T13] bond5 (unregistering): Released all slaves [ 645.987835][ T13] bond6 (unregistering): Released all slaves [ 646.003266][ T13] bond7 (unregistering): Released all slaves [ 646.014337][ T13] bond8 (unregistering): Released all slaves [ 646.032904][ T13] bond9 (unregistering): Released all slaves [ 646.042503][ T13] bond10 (unregistering): Released all slaves [ 646.054780][ T13] bond11 (unregistering): Released all slaves [ 646.076069][ T13] bond12 (unregistering): Released all slaves [ 646.109639][T16124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.125315][T16124] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.134620][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.137590][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.153205][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.155508][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.167487][ T5759] Bluetooth: hci1: command tx timeout [ 646.357046][ T13] : left promiscuous mode [ 646.919366][T16124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.018688][T16124] veth0_vlan: entered promiscuous mode [ 647.029997][T16124] veth1_vlan: entered promiscuous mode [ 647.562985][T16124] veth0_macvtap: entered promiscuous mode [ 647.576772][T16124] veth1_macvtap: entered promiscuous mode [ 647.618919][T16124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.639795][T16124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.713291][T14602] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.866915][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.876632][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.906550][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.049879][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.057498][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.177775][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.181374][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.248931][ T5759] Bluetooth: hci1: command tx timeout [ 648.328710][T16324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2424'. [ 649.005847][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 649.021972][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 649.033176][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 649.037978][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 649.044081][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 649.202603][T16339] erofs (device sr0): cannot find valid erofs superblock [ 650.225005][T16335] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.228322][T16335] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.231696][T16335] bridge_slave_0: entered allmulticast mode [ 650.235904][T16335] bridge_slave_0: entered promiscuous mode [ 650.244734][T16335] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.254714][T16335] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.259577][T16335] bridge_slave_1: entered allmulticast mode [ 650.265435][T16335] bridge_slave_1: entered promiscuous mode [ 650.289480][T16335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.294192][T16335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.357696][T16335] team0: Port device team_slave_0 added [ 650.366329][T16335] team0: Port device team_slave_1 added [ 650.393527][T16335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.395928][T16335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.412651][T16335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.423483][T16335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.428051][T16335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.446989][T16335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.520741][T16335] hsr_slave_0: entered promiscuous mode [ 650.523585][T16335] hsr_slave_1: entered promiscuous mode [ 650.974878][T16386] blktrace: Concurrent blktraces are not allowed on sg0 [ 651.036777][T16335] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.175128][T16335] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.206600][ T5759] Bluetooth: hci2: command tx timeout [ 651.302524][T16335] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.466051][T16335] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.117614][T16335] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 652.134104][T16335] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 652.140332][T16335] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 652.189976][T16335] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 652.201450][T16335] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 652.283386][T16335] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 652.327265][T16335] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 652.335723][T16335] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 652.458433][T16335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.472120][T16335] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.478367][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.480621][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.493687][ T240] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.495988][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.889465][T16437] blktrace: Concurrent blktraces are not allowed on sg0 [ 653.286668][ T5759] Bluetooth: hci2: command tx timeout [ 653.555017][ T13] hsr_slave_0: left promiscuous mode [ 653.560206][ T13] hsr_slave_1: left promiscuous mode [ 653.563139][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.569878][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.733846][ T13] team0 (unregistering): Port device team_slave_1 removed [ 653.746661][ T13] team0 (unregistering): Port device team_slave_0 removed [ 653.957612][T16335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.030614][T16335] veth0_vlan: entered promiscuous mode [ 654.039019][T16335] veth1_vlan: entered promiscuous mode [ 654.065464][T16335] veth0_macvtap: entered promiscuous mode [ 654.071485][T16335] veth1_macvtap: entered promiscuous mode [ 654.123293][T16335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.153444][T16335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.287882][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.290781][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.317159][T14602] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.410227][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.469807][ T6198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.475743][ T6198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.499670][ T6198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.502604][ T6198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.688941][ T13] dvmrp0: left allmulticast mode [ 654.690640][ T13] dvmrp1: left allmulticast mode [ 654.782204][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 654.793071][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 654.796764][ T5750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 654.800164][ T5750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 654.803301][ T5750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 655.067530][ T13] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 655.070406][ T13] bridge1 (unregistering): left promiscuous mode [ 655.076993][ T13] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 655.079586][ T13] bridge2 (unregistering): left promiscuous mode [ 655.085813][ T13] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 655.088424][ T13] bridge3 (unregistering): left promiscuous mode [ 655.094502][ T13] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 655.098417][ T13] bridge4 (unregistering): left promiscuous mode [ 655.104243][ T13] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 655.107421][ T13] bridge5 (unregistering): left promiscuous mode [ 655.113937][ T13] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 655.116438][ T13] bridge6 (unregistering): left promiscuous mode [ 655.128611][ T13] bond8 (unregistering): (slave bridge7): Releasing backup interface [ 655.131361][ T13] bridge7 (unregistering): left promiscuous mode [ 655.138094][ T13] bond9 (unregistering): (slave bridge8): Releasing backup interface [ 655.140582][ T13] bridge8 (unregistering): left promiscuous mode [ 655.146729][ T13] bond10 (unregistering): (slave bridge9): Releasing backup interface [ 655.149309][ T13] bridge9 (unregistering): left promiscuous mode [ 655.293440][T16485] blktrace: Concurrent blktraces are not allowed on sg0 [ 655.366632][ T5750] Bluetooth: hci2: command tx timeout [ 655.528305][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.679918][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.685260][ T13] bond0 (unregistering): Released all slaves [ 655.692362][ T13] bond1 (unregistering): Released all slaves [ 655.700438][ T13] bond2 (unregistering): Released all slaves [ 655.709737][ T13] bond3 (unregistering): Released all slaves [ 655.717429][ T13] bond4 (unregistering): Released all slaves [ 655.725388][ T13] bond5 (unregistering): Released all slaves [ 655.735109][ T13] bond6 (unregistering): Released all slaves [ 655.751732][ T13] bond7 (unregistering): Released all slaves [ 655.759759][ T13] bond8 (unregistering): Released all slaves [ 655.771618][ T13] bond9 (unregistering): Released all slaves [ 655.779738][ T13] bond10 (unregistering): Released all slaves [ 655.790176][ T13] bond11 (unregistering): Released all slaves [ 655.797963][ T13] bond12 (unregistering): Released all slaves [ 655.805603][ T13] bond13 (unregistering): Released all slaves [ 656.112544][T16488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2497'. [ 656.246820][ T13] tipc: Left network mode [ 656.576878][T16472] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.586224][T16472] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.596675][T16472] bridge_slave_0: entered allmulticast mode [ 656.602879][T16472] bridge_slave_0: entered promiscuous mode [ 656.658848][T16510] erofs (device sr0): cannot find valid erofs superblock [ 656.675206][T16472] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.681483][T16472] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.686283][T16472] bridge_slave_1: entered allmulticast mode [ 656.692832][T16472] bridge_slave_1: entered promiscuous mode [ 656.746086][T16472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.757175][T16472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.822576][T16472] team0: Port device team_slave_0 added [ 656.826652][T16472] team0: Port device team_slave_1 added [ 656.867442][T16472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.871882][T16472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.886632][ T5750] Bluetooth: hci3: command tx timeout [ 656.893800][T16472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.905071][T16472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.907785][T16472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.918510][T16472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.942538][T16472] hsr_slave_0: entered promiscuous mode [ 656.944917][T16472] hsr_slave_1: entered promiscuous mode [ 656.953056][T16472] debugfs: 'hsr0' already exists in 'hsr' [ 656.954945][T16472] Cannot create hsr debugfs directory [ 657.446597][ T5750] Bluetooth: hci2: command tx timeout [ 657.553882][T16537] blktrace: Concurrent blktraces are not allowed on sg0 [ 658.691186][T16472] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 658.768878][T16472] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 658.780720][T16472] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 658.788506][T16472] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 658.792107][T16472] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 658.808363][T16472] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 658.822369][T16472] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 658.862875][T16472] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 658.966473][ T5750] Bluetooth: hci3: command tx timeout [ 659.039014][T16472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.091130][T16472] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.108721][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.111030][ T6198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.123236][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.125530][ T6198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.155533][T16472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 659.384326][T16472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.424825][T16472] veth0_vlan: entered promiscuous mode [ 659.431448][T16472] veth1_vlan: entered promiscuous mode [ 659.490984][T16472] veth0_macvtap: entered promiscuous mode [ 659.500410][T16472] veth1_macvtap: entered promiscuous mode [ 659.509734][T16472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.518448][T16472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.533918][T16582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2513'. [ 659.701037][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.703742][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.768653][ T240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.771974][ T240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.806588][ T5856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.812009][ T5856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.819546][ T5856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.824447][ T5856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.826491][T16584] erofs (device sr0): cannot find valid erofs superblock [ 661.046616][ T5750] Bluetooth: hci3: command tx timeout [ 663.053059][ T13] hsr_slave_0: left promiscuous mode [ 663.057527][ T13] hsr_slave_1: left promiscuous mode [ 663.062077][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.067888][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.072075][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.075628][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.099871][ T13] veth1_macvtap: left promiscuous mode [ 663.101719][ T13] veth0_macvtap: left promiscuous mode [ 663.103648][ T13] veth1_vlan: left promiscuous mode [ 663.105472][ T13] veth0_vlan: left promiscuous mode [ 663.126515][ T5750] Bluetooth: hci3: command tx timeout [ 663.303375][T16657] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2526'. [ 663.306622][T16657] openvswitch: netlink: Flow actions attr not present in new flow. [ 663.690950][T16662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2529'. [ 664.175484][T16666] erofs (device sr0): cannot find valid erofs superblock [ 664.264468][ T13] team0 (unregistering): Port device team_slave_1 removed [ 664.275997][ T13] team0 (unregistering): Port device team_slave_0 removed [ 665.185478][ T13] dvmrp0: left allmulticast mode [ 665.459141][ T13] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 665.485268][ T13] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 665.510839][ T13] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 665.751480][ T13] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 666.041496][ T13] bond0 (unregistering): Released all slaves [ 666.054126][ T13] bond1 (unregistering): Released all slaves [ 666.080784][ T13] bond2 (unregistering): Released all slaves [ 666.120961][ T13] bond3 (unregistering): Released all slaves [ 666.134135][ T13] bond4 (unregistering): Released all slaves [ 666.195304][ T13] bond5 (unregistering): Released all slaves [ 666.255857][ T13] bond6 (unregistering): Released all slaves [ 666.271705][ T13] bond7 (unregistering): Released all slaves [ 666.289334][ T13] bond8 (unregistering): Released all slaves [ 666.307110][ T13] bond9 (unregistering): Released all slaves [ 666.336744][ T13] bond10 (unregistering): Released all slaves [ 666.353198][ T13] bond11 (unregistering): Released all slaves [ 666.366309][ T13] bond12 (unregistering): Released all slaves [ 666.380686][ T13] bond13 (unregistering): Released all slaves [ 666.390547][ T13] bond14 (unregistering): Released all slaves [ 666.409452][ T13] bond15 (unregistering): Released all slaves [ 668.623707][T16738] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2545'. [ 668.626580][T16738] openvswitch: netlink: Flow actions attr not present in new flow. [ 668.811877][T16758] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2549'. [ 668.814941][T16758] openvswitch: netlink: Flow actions attr not present in new flow. [ 669.817099][T16051] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 670.000026][T16051] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.073984][T16051] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 670.127074][T16051] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 670.153514][T16051] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 670.240199][T16051] usb 8-1: Product: syz [ 670.272501][T16051] usb 8-1: Manufacturer: syz [ 670.336006][T16051] usb 8-1: SerialNumber: syz [ 670.603448][T16051] usb 8-1: config 0 descriptor?? [ 671.499533][ T6317] usb 8-1: USB disconnect, device number 12 [ 676.534666][ T5750] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 676.718469][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 676.718483][ T42] audit: type=1326 audit(1785613239.325:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16817 comm="syz.3.2565" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x0 [ 677.107163][T16827] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2566'. [ 677.110312][T16827] openvswitch: netlink: Flow actions attr not present in new flow. [ 677.337542][T16774] syz.0.2552 (16774) used greatest stack depth: 18024 bytes left [ 677.777936][ T5751] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 677.941561][ T5751] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.953394][ T5751] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 677.989464][ T5751] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 678.017862][ T5751] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 678.048215][ T5751] usb 7-1: Product: syz [ 678.069303][ T5751] usb 7-1: Manufacturer: syz [ 678.086852][ T5751] usb 7-1: SerialNumber: syz [ 678.201500][ T5751] usb 7-1: config 0 descriptor?? [ 678.725895][ T5750] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 678.843907][ T42] audit: type=1326 audit(1785613241.445:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16846 comm="syz.0.2572" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 679.020227][T16399] usb 7-1: USB disconnect, device number 25 [ 680.709038][ T13] hsr_slave_0: left promiscuous mode [ 680.735453][ T13] hsr_slave_1: left promiscuous mode [ 681.066476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 682.767695][ T5750] Bluetooth: hci4: command 0x0406 tx timeout [ 683.351989][ T5759] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 683.466822][ T42] audit: type=1326 audit(1785613246.075:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16911 comm="syz.0.2587" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 684.502710][T16947] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2594'. [ 684.505620][T16947] openvswitch: netlink: Flow actions attr not present in new flow. [ 684.890543][ T5759] Bluetooth: hci1: command 0x0406 tx timeout [ 685.186635][ T5751] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 685.368974][ T5751] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.375311][ T5751] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 685.389319][ T5751] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 685.392376][ T5751] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 685.400030][ T5751] usb 6-1: Product: syz [ 685.403914][ T5751] usb 6-1: Manufacturer: syz [ 685.407476][ T5751] usb 6-1: SerialNumber: syz [ 685.466955][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.468626][ T5751] usb 6-1: config 0 descriptor?? [ 685.469018][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.912907][ T5899] usb 6-1: USB disconnect, device number 15 [ 686.907537][ T64] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 686.996673][ T42] audit: type=1326 audit(1785613249.595:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16973 comm="syz.1.2603" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb3fec code=0x0 [ 687.417487][T16979] blktrace: Concurrent blktraces are not allowed on sg0 [ 687.761968][T16993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2608'. [ 689.109924][T17004] erofs (device sr0): cannot find valid erofs superblock [ 692.882327][T17101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2624'. [ 692.995707][ T64] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 693.000145][ T64] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 693.053515][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 693.059137][ T42] audit: type=1326 audit(1785613255.665:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17102 comm="syz.0.2626" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 693.233790][T17116] erofs (device sr0): cannot find valid erofs superblock [ 698.185503][T17184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2642'. [ 698.307789][T17187] blktrace: Concurrent blktraces are not allowed on sg0 [ 698.581809][T17188] erofs (device sr0): cannot find valid erofs superblock [ 701.741459][T17249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2654'. [ 702.024232][T17259] erofs (device sr0): cannot find valid erofs superblock [ 705.064824][T17290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2661'. [ 706.094856][T17305] erofs (device sr0): cannot find valid erofs superblock [ 707.739901][T17329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2669'. [ 712.735904][T17400] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2681'. [ 712.738798][T17400] openvswitch: netlink: Flow actions attr not present in new flow. [ 713.794674][T17440] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2695'. [ 713.798747][T17440] openvswitch: netlink: Flow actions attr not present in new flow. [ 715.743860][T17462] blktrace: Concurrent blktraces are not allowed on sg0 [ 719.099558][T17532] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2700'. [ 719.105833][T17532] openvswitch: netlink: Flow actions attr not present in new flow. [ 719.498252][ T6317] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 719.684112][ T6317] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.710308][ T6317] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 719.746720][ T6317] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 719.763275][ T6317] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 719.774571][ T6317] usb 7-1: Product: syz [ 719.781829][ T6317] usb 7-1: Manufacturer: syz [ 719.785459][ T6317] usb 7-1: SerialNumber: syz [ 719.811723][ T6317] usb 7-1: config 0 descriptor?? [ 721.250213][ T5898] usb 7-1: USB disconnect, device number 26 [ 722.738037][ T5759] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 722.763578][ T5759] Bluetooth: hci3: link tx timeout [ 722.766151][ T5759] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 722.796894][ T5759] Bluetooth: hci3: link tx timeout [ 722.800574][ T5759] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 722.914504][ T42] audit: type=1326 audit(1785613285.515:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17601 comm="syz.2.2713" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x0 [ 724.806963][ T5759] Bluetooth: hci3: command 0x0406 tx timeout [ 730.100380][T17767] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2754'. [ 730.103471][T17767] openvswitch: netlink: Flow actions attr not present in new flow. [ 730.529837][T11440] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 730.683552][T11440] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.695804][T11440] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 730.722796][T11440] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 730.736069][T11440] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 730.748121][T11440] usb 7-1: Product: syz [ 730.752983][T11440] usb 7-1: Manufacturer: syz [ 730.761510][T11440] usb 7-1: SerialNumber: syz [ 730.804029][T11440] usb 7-1: config 0 descriptor?? [ 731.290674][T17789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2758'. [ 732.865031][T17813] erofs (device sr0): cannot find valid erofs superblock [ 732.918695][T11440] usb 7-1: USB disconnect, device number 27 [ 733.665678][ T64] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 733.830065][ T42] audit: type=1326 audit(1785613296.435:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17820 comm="syz.2.2767" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x0 [ 733.841248][T17832] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2768'. [ 733.844909][T17832] openvswitch: netlink: Flow actions attr not present in new flow. [ 734.659843][ T5855] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 734.809621][ T5855] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.814444][ T5855] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 734.832899][ T5855] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 734.836800][ T5855] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 734.840933][ T5855] usb 8-1: Product: syz [ 734.843061][ T5855] usb 8-1: Manufacturer: syz [ 734.844914][ T5855] usb 8-1: SerialNumber: syz [ 734.905605][ T5855] usb 8-1: config 0 descriptor?? [ 736.277157][ T5855] usb 8-1: USB disconnect, device number 13 [ 738.062708][T17895] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2776'. [ 738.066844][T17895] openvswitch: netlink: Flow actions attr not present in new flow. [ 738.476496][ T5751] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 738.631282][ T5751] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.634649][ T5751] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 738.643798][ T5751] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 738.647640][ T5751] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 738.650178][ T5751] usb 6-1: Product: syz [ 738.651668][ T5751] usb 6-1: Manufacturer: syz [ 738.653185][ T5751] usb 6-1: SerialNumber: syz [ 738.668942][ T5751] usb 6-1: config 0 descriptor?? [ 740.056240][ T5751] usb 6-1: USB disconnect, device number 16 [ 745.683988][T17992] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2793'. [ 745.695384][T17992] openvswitch: netlink: Flow actions attr not present in new flow. [ 746.196672][T16399] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 746.402769][T16399] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.406334][T16399] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 746.443489][T16399] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 746.448030][T16399] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 746.458177][T16399] usb 8-1: Product: syz [ 746.470835][T16399] usb 8-1: Manufacturer: syz [ 746.481802][T16399] usb 8-1: SerialNumber: syz [ 746.534719][T16399] usb 8-1: config 0 descriptor?? [ 746.911683][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.914602][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.259805][T16399] usb 8-1: USB disconnect, device number 14 [ 748.522660][T18020] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2795'. [ 748.527249][T18020] openvswitch: netlink: Flow actions attr not present in new flow. [ 750.224662][ T5751] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 750.680341][ T5751] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.103083][ T5751] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 751.485085][ T5751] usb 7-1: string descriptor 0 read error: -71 [ 751.498085][ T5751] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 751.515810][ T5751] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 751.529584][ T5751] usb 7-1: config 0 descriptor?? [ 751.544064][ T5751] usb 7-1: can't set config #0, error -71 [ 751.563187][ T5751] usb 7-1: USB disconnect, device number 28 [ 753.013704][T18061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2803'. [ 753.396094][T18066] erofs (device sr0): cannot find valid erofs superblock [ 753.571698][T18070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2805'. [ 754.104407][T18073] erofs (device sr0): cannot find valid erofs superblock [ 754.184081][T18079] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2806'. [ 754.187078][T18079] openvswitch: netlink: Flow actions attr not present in new flow. [ 754.626497][ T5751] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 754.814609][ T5751] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.818230][ T5751] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 754.832252][ T5751] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 754.839306][ T5751] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 754.844915][ T5751] usb 6-1: Product: syz [ 754.849211][ T5751] usb 6-1: Manufacturer: syz [ 754.852005][ T5751] usb 6-1: SerialNumber: syz [ 754.874445][ T5751] usb 6-1: config 0 descriptor?? [ 756.417274][ T64] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 756.420469][ T64] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 756.475490][ T42] audit: type=1326 audit(1785613319.075:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18084 comm="syz.0.2808" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 757.018636][ T5751] usb 6-1: USB disconnect, device number 17 [ 758.936092][T18137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2819'. [ 758.964876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 759.953891][T18141] erofs (device sr0): cannot find valid erofs superblock [ 760.602475][T18146] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2820'. [ 760.611046][T18146] openvswitch: netlink: Flow actions attr not present in new flow. [ 761.038220][ T5842] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 761.199938][ T5842] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.204158][ T5842] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 761.222862][ T5842] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 761.230038][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 761.233275][ T5842] usb 6-1: Product: syz [ 761.236071][ T5842] usb 6-1: Manufacturer: syz [ 761.239712][ T5842] usb 6-1: SerialNumber: syz [ 761.253372][ T5842] usb 6-1: config 0 descriptor?? [ 763.166645][ T5855] usb 6-1: USB disconnect, device number 18 [ 763.432991][T18189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2830'. [ 764.205599][T18194] erofs (device sr0): cannot find valid erofs superblock [ 765.147893][T18225] syzkaller0: entered promiscuous mode [ 765.150279][T18225] syzkaller0: entered allmulticast mode [ 767.686328][T18258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2844'. [ 768.896572][T18265] erofs (device sr0): cannot find valid erofs superblock [ 769.892189][T18272] blktrace: Concurrent blktraces are not allowed on sg0 [ 770.643621][T18298] erofs (device sr0): cannot find valid erofs superblock [ 771.242233][T18306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2858'. [ 771.853798][T18312] erofs (device sr0): cannot find valid erofs superblock [ 773.354292][ T27] process 18305 (syz.3.2858) no longer affine to cpu1 [ 773.357969][T18305] process 18306 (syz.3.2858) no longer affine to cpu1 [ 773.358025][T18305] process 18312 (syz.3.2858) no longer affine to cpu1 [ 773.366132][T18337] process 18338 (syz.0.2862) no longer affine to cpu1 [ 773.412329][T18326] smpboot: CPU 1 is now offline [ 773.425383][T18339] blktrace: Concurrent blktraces are not allowed on sg0 [ 773.501210][T18335] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 773.508842][ T0] Disabled fast string operations [ 773.510609][ T0] ------------[ cut here ]------------ [ 773.512425][ T0] alternatives_patched [ 773.512435][ T0] WARNING: arch/x86/kernel/cpu/cpuid-deps.c:127 at do_clear_cpu_cap+0x356/0x440, CPU#1: swapper/1/0 [ 773.517470][ T0] Modules linked in: [ 773.518852][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 773.522259][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 773.524299][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 773.527623][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 773.529453][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d 31 5e 72 0f 31 ff 89 ee e8 08 6b 59 00 85 ed 0f 84 7d fd ff ff e8 8b 70 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 75 70 59 00 8b [ 773.535646][ T0] RSP: 0000:ffffc9000046fc98 EFLAGS: 00010093 [ 773.537691][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b03d68 [ 773.540324][ T0] RDX: ffff88801c73a540 RSI: ffffffff81b03d75 RDI: ffff88801c73a540 [ 773.542878][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 773.545458][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 773.548059][ T0] R13: 0000000000000601 R14: ffffc9000046fce0 R15: ffffc9000046fd80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 773.550624][ T0] FS: 0000000000000000(0000) GS:ffff888096cdf000(0000) knlGS:0000000000000000 [ 773.553665][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 773.555916][ T0] CR2: 0000000000000000 CR3: 000000000e994000 CR4: 0000000000350eb0 [ 773.558448][ T0] Call Trace: [ 773.559566][ T0] [ 773.560527][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 773.562276][ T0] ? _printk+0xcf/0x110 [ 773.563688][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 773.565481][ T0] ? early_init_intel.cold+0x129/0x1eb [ 773.567384][ T0] early_init_intel.cold+0x13f/0x1eb [ 773.569259][ T0] init_intel+0x1c/0x7b0 [ 773.570885][ T0] identify_cpu+0x8b0/0x1c30 [ 773.572414][ T0] ? __pfx_cpu_init+0x10/0x10 [ 773.574065][ T0] identify_secondary_cpu+0x178/0x270 [ 773.576198][ T0] start_secondary+0xcf/0x2d0 [ 773.577864][ T0] ? __pfx_start_secondary+0x10/0x10 [ 773.579573][ T0] common_startup_64+0x13e/0x158 [ 773.581303][ T0] [ 773.582322][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 773.584916][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 773.588250][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 773.590196][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 773.593484][ T0] Call Trace: [ 773.594665][ T0] [ 773.595686][ T0] dump_stack_lvl+0x100/0x190 [ 773.597421][ T0] vpanic+0x552/0x970 [ 773.598722][ T0] ? __pfx_vpanic+0x10/0x10 [ 773.600202][ T0] panic+0xd1/0xe0 [ 773.601510][ T0] ? __pfx_panic+0x10/0x10 [ 773.603003][ T0] ? check_panic_on_warn+0x1f/0x90 [ 773.604729][ T0] check_panic_on_warn.cold+0x19/0x34 [ 773.606667][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 773.608563][ T0] __warn.cold+0x191/0x318 [ 773.610027][ T0] __report_bug+0x30f/0x440 [ 773.611578][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 773.613271][ T0] ? __pfx___report_bug+0x10/0x10 [ 773.614939][ T0] ? prb_read_valid+0x78/0xa0 [ 773.616565][ T0] ? __pfx_prb_read_valid+0x10/0x10 [ 773.618295][ T0] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 773.620051][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 773.621709][ T0] report_bug+0xb2/0x220 [ 773.623144][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 773.624816][ T0] handle_bug+0x16a/0x2a0 [ 773.626262][ T0] exc_invalid_op+0x17/0x50 [ 773.627806][ T0] asm_exc_invalid_op+0x1a/0x20 [ 773.629417][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 773.631277][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d 31 5e 72 0f 31 ff 89 ee e8 08 6b 59 00 85 ed 0f 84 7d fd ff ff e8 8b 70 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 75 70 59 00 8b [ 773.637703][ T0] RSP: 0000:ffffc9000046fc98 EFLAGS: 00010093 [ 773.639758][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b03d68 [ 773.642351][ T0] RDX: ffff88801c73a540 RSI: ffffffff81b03d75 RDI: ffff88801c73a540 [ 773.644944][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 773.647507][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 773.650079][ T0] R13: 0000000000000601 R14: ffffc9000046fce0 R15: ffffc9000046fd80 [ 773.652757][ T0] ? do_clear_cpu_cap+0x348/0x440 [ 773.654590][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 773.656273][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 773.657976][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 773.659768][ T0] ? _printk+0xcf/0x110 [ 773.661159][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 773.662988][ T0] ? early_init_intel.cold+0x129/0x1eb [ 773.664752][ T0] early_init_intel.cold+0x13f/0x1eb [ 773.666460][ T0] init_intel+0x1c/0x7b0 [ 773.667895][ T0] identify_cpu+0x8b0/0x1c30 [ 773.669433][ T0] ? __pfx_cpu_init+0x10/0x10 [ 773.671002][ T0] identify_secondary_cpu+0x178/0x270 [ 773.672752][ T0] start_secondary+0xcf/0x2d0 [ 773.674385][ T0] ? __pfx_start_secondary+0x10/0x10 [ 773.676146][ T0] common_startup_64+0x13e/0x158 [ 773.677743][ T0] [ 773.679367][ T0] Kernel Offset: disabled [ 773.680873][ T0] Rebooting in 86400 seconds..