last executing test programs: 42.524839589s ago: executing program 3 (id=748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x220000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6341, 0x5, 0xf1, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x404c800) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000340), 0x56) sendmsg$kcm(r6, &(0x7f0000000380)={&(0x7f00000003c0)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000480)="27030200590214000600002fb96dbcf706e10500000088a8ffff0806ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) 42.362080916s ago: executing program 3 (id=750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a00)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x13, 0x7, 0x8, 0xfbee}, 0x8000002, 0x0, 0x3, 0x5, 0xe, 0x6, 0xd, 0x18, 0x5, 0x2, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44894) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000cc0)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000d00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000d40), 0x56) sendmsg$kcm(r4, &(0x7f0000000d80)={&(0x7f0000000dc0)=@xdp={0x2c, 0x500, r6, 0x3e}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e80)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 41.906648766s ago: executing program 3 (id=753): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 41.580703881s ago: executing program 3 (id=757): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000700)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r6 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x8922, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x4000090) 40.735811897s ago: executing program 3 (id=771): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) r1 = open(&(0x7f0000000300)='./tracing/events/enable\x00', 0x2c00, 0x0) preadv(r1, &(0x7f0000000340), 0x0, 0x83, 0x5) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) getsockopt$inet6_buf(r0, 0x29, 0xca, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) write$cgroup_devices(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='c '], 0xb) unshare(0x40000000) 40.522500419s ago: executing program 3 (id=772): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_setup(0x6, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0xffc, 0x7, 0x4) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x9, r0, 0x0, 0x0, 0x2, 0x0, 0x1}]) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) io_destroy(0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x8044) close(0x3) 28.490472235s ago: executing program 1 (id=840): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000002c0)=""/199) read$FUSE(0xffffffffffffffff, &(0x7f0000003d80)={0x2020}, 0x2020) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x80000001]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) r1 = gettid() fcntl$setown(r0, 0x8, r1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0x500001e4) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x8]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101001, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 27.960569634s ago: executing program 1 (id=843): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc/thread-self/fail-nth\x00', 0x40002, 0x0) mount(0x0, 0x0, &(0x7f0000000600)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./gadget/dummy_udc\x00', 0x902, 0x4) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000800)='270', 0x3) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) mount(0x0, &(0x7f00000008c0)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./dir0\x00', 0x1ff) mount(&(0x7f0000000980)=@filename='127.0.0.1:6789:/\x00', &(0x7f00000009c0)='./dir0\x00', &(0x7f0000000a00)='ceph\x00', 0x0, 0x0) 25.44262222s ago: executing program 32 (id=772): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_setup(0x6, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0xffc, 0x7, 0x4) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x9, r0, 0x0, 0x0, 0x2, 0x0, 0x1}]) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) io_destroy(0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x8044) close(0x3) 24.985974764s ago: executing program 1 (id=846): r0 = fsopen(&(0x7f0000000040)='jffs2\x00', 0x1) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x5423) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe, 0x1e, &(0x7f0000000400)="e0b9507ed387dbe9abc89b6f5be4", 0x0, 0x80000e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20002000}, 0x4c) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00') read$qrtrtun(r4, &(0x7f0000000200)=""/57, 0x39) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{0xee}, 0x40}}}, 0x7) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x79612302045c9862}}, './file0\x00'}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000700)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x8001, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/cpuinfo\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='{-\x00', &(0x7f00000000c0)="a3281c01e2d67686a96083577ad046f80484aef2aeb4998a658fcab5a469497c7654e10ec8866e28fc75a5683865a8230e3b5e801ad90e0250172630afa4b7d3783242861ffd740d2304e4b3759bafae6f90b296d27ab2b366a9984653aca4f43b8bfd340180af24fbe65a72c2af57ecf37ef455e00f19d04eba1ea06af7d81b85f02e79b66550beaa65e42c72dde7f09fb7b593dbd0bf0abeda35d943006499d7a32af6174c703e41dcbcc0b7f260d03bf3792bc3bfb39aa2437c92a4d75110e87f3c8fc1cbb5548fb1", 0xca) ioctl$DM_DEV_SUSPEND(r1, 0xc138fd06, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) 24.417642235s ago: executing program 1 (id=851): mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000880), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000009c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004e00)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x1, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002a80)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b40)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004b80)='./file0\x00', 0x105001, 0x0) r3 = syz_open_dev$loop(&(0x7f0000004bc0), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) close(r0) creat(0x0, 0x0) mount(&(0x7f0000004c40)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000004cc0)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x3, 0xc04, 0x0, 0x0, 0x19, 0x5, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0xfe]}) 24.218094233s ago: executing program 1 (id=852): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r1, @ANYBLOB="089805000750050008001300", @ANYRES32=r2, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 24.02791694s ago: executing program 1 (id=854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000009c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b80)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x7, 0x10}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x6, 0x1, 0x80000000}, 0x18}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000d40), 0x56) sendmsg$kcm(r6, &(0x7f0000000d80)={&(0x7f0000000dc0)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e80)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 23.970799461s ago: executing program 33 (id=854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000009c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b80)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x7, 0x10}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x6, 0x1, 0x80000000}, 0x18}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000d40), 0x56) sendmsg$kcm(r6, &(0x7f0000000d80)={&(0x7f0000000dc0)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e80)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 6.773498263s ago: executing program 5 (id=964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x601, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x26000000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffff}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0xffffffffffffffff, 0x6, 0x4}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0x1d) 6.507682337s ago: executing program 5 (id=966): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$packet(0x11, 0xa, 0x300) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/wakeup_count', 0x0, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x161042, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r3}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000280)={0xa000001c}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r5, 0x20, 0x5, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffff282}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbec}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x17, &(0x7f0000000100)=0x1, 0x4) 6.358946053s ago: executing program 5 (id=968): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f00000001c0)=0x4, 0x67) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) syz_open_dev$char_usb(0xc, 0xb4, 0x4) mount(&(0x7f0000000380)=@filename='./dev/sda1\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000400)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000440)='./mnt\x00') write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x130) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x0, 0x21) r1 = open(&(0x7f0000000000)='./bus\x00', 0x148447, 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000540)=@v1={0x0, @aes128, 0x3, @desc2}) 6.277348946s ago: executing program 5 (id=969): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs'], 0x35, 0x0) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x180, 0x4000000f, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x220080c1, &(0x7f00000000c0)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 4.757582923s ago: executing program 4 (id=981): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x100000) iopl(0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000d, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x9020080, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) msgsnd(0x0, 0x0, 0x8, 0x800) syz_clone3(0x0, 0x0) fsopen(&(0x7f0000000300)='ubifs\x00', 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='vegas', 0x5) write$binfmt_script(r1, &(0x7f0000000480), 0xfffffd9d) 4.214574046s ago: executing program 4 (id=986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x94, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x6d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x54, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x5, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x20000014) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000300)={'wlan0\x00'}) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x3f, &(0x7f0000000340)=0x2, 0x4) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x20000000000003, 0x1004}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.058146115s ago: executing program 4 (id=988): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x101, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r3 = socket$inet(0x2, 0x3, 0x2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 3.813783601s ago: executing program 4 (id=991): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$uac3(0x4, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) timer_settime(0x0, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) poll(0x0, 0x0, 0xd4) landlock_restrict_self(0xffffffffffffffff, 0xc) 3.203608497s ago: executing program 5 (id=998): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xfffff7fa, 0x3]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000740)={0x0, 0x60cf, 0x8, 0x1, 0x1000051}, &(0x7f0000000800)=0x0, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000a80)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = fsopen(&(0x7f0000000b00)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xa) fchdir(r6) r7 = open(&(0x7f0000000b40)='./bus\x00', 0x1031c2, 0x0) ftruncate(r7, 0x2007ffb) r8 = open(&(0x7f0000000b80)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) fcntl$setsig(r8, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./bus\x00', 0x88882, 0x0) 2.772612387s ago: executing program 2 (id=1000): r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x240080d0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) 2.637725479s ago: executing program 2 (id=1001): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0xb) openat$sndseq(0xffffffffffffff9c, 0x0, 0x8002) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f00000000c0)}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0x200440c1}, 0x24008000) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x4054) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x6}}, [""]}, 0x24}}, 0x4000800) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) 2.637457221s ago: executing program 0 (id=1002): openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() rt_sigtimedwait(&(0x7f0000002c80)={[0x4000000a]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) shmdt(0x0) timer_create(0x1, &(0x7f0000000300)={0x0, 0xf, 0x4}, &(0x7f0000002d00)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000002d40)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002d80)={0xaa, 0x108}) socketpair$unix(0x1, 0x2, 0x0, 0x0) 2.476801829s ago: executing program 2 (id=1003): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_usb_connect(0x5, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032090400000308065000070501020002000705820200020007058303"], 0x0) syz_usb_disconnect(r2) syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0x90, 0xd, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x8}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f00000001c0)=""/188, 0xba) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r4, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xe79}, @NL80211_ATTR_FRAME={0x32, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_a, @device_a, @random="8d70eb289953", {0x8}, @value=@ver_80211n={0x0, 0x9, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0x1, 0x4}}, @val={0x3e, 0x1, 0x2}, @val={0x76, 0x6, {0xb, 0x75, 0x2b, 0x40e2}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x2, 0x8, 0xa31, 0x6, 0x2, 0x7, 0x8, 0xdfc, 0x3, 0x7a]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0xa5a9f162a4b72619}, 0x400c080) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r5, 0x1, 0x2d, 0x0, &(0x7f0000000280)) read$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r1) 2.340700252s ago: executing program 5 (id=1004): getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x169802, 0x0) r1 = dup(r0) pselect6(0x0, 0x0, &(0x7f0000000080)={0xe, 0x48000000, 0x8, 0x0, 0xffff, 0x9, 0x1, 0x4}, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect(0x0, 0x32, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000300)=0x1000000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x10, 0xffffffffffffffff, 0xf154b000) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000001480)) setns(0xc9, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 2.308190752s ago: executing program 0 (id=1005): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x20040400) unshare(0x4000000) openat$vcsa(0xffffffffffffff9c, 0x0, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x14, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_clone(0x20000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000340), 0x88002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000000a882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.196671773s ago: executing program 0 (id=1006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000140), 0xc) mq_notify(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280)=@v3={0x3000000, [{0x35ff, 0x80e}, {0x9, 0x6}]}, 0x18, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x387) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000480)='./file0/file1\x00', 0xe2) 2.131678856s ago: executing program 0 (id=1007): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r3 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r3, 0x0, 0x0, 0x1, 0x3000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fremovexattr(r4, &(0x7f0000002480)=@known='trusted.overlay.upper\x00') msgsnd(r3, &(0x7f0000000040)={0x1}, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xaa}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.438146869s ago: executing program 2 (id=1008): syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x4000) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='127.0.0.1', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='7', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/ocfs2/heartbeat/hb0/block_bytes\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='51', 0x2) 1.268224123s ago: executing program 2 (id=1009): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x7, @loopback, 0x6}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000004c0)="13", 0x1}], 0x1}, 0x48043) write$binfmt_script(r1, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "698efc4a970c20e519683303c2d20fb06287c5a9590b730a4126567f5c6ee431f97fa12babf477563697702d8961a8a9fd59d87ced46843f70e0401cc350ff0a3df974e5544dffc5d45e19"}, 0x56) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.096963092s ago: executing program 0 (id=1010): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0x84, @loopback, 0x4e20, 0x0, 'rr\x00'}, {@loopback, 0x4e20, 0x1, 0x1}}, 0x44) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new defaulser:syz 00000000000040-3\x00\x00\x00\x00\x00'], 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000040), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) 767.409001ms ago: executing program 4 (id=1011): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x200000c, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002a00)="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", 0x2000, &(0x7f0000004a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004ac0)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r3, r4, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004b80)={0x50, 0x0, r2, {0x7, 0x26, 0x5, 0xffffffff80210000, 0x0, 0xfffc, 0x5, 0x7, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004c00)="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", 0x2000, &(0x7f0000006c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006cc0)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r3, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000006d80)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) close_range(r0, r1, 0x0) write$binfmt_misc(r5, &(0x7f0000006dc0)=';', 0x1) r6 = open(&(0x7f0000000300)='./pipefs/gssd/clntXX/gssd\x00', 0x169c02, 0x96) close_range(r6, 0xffffffffffffffff, 0x0) 461.588771ms ago: executing program 4 (id=1012): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2a, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf1, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 4.316054ms ago: executing program 2 (id=1013): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xfffff7fa, 0x3]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000740)={0x0, 0x60cf, 0x8, 0x1, 0x1000051}, &(0x7f0000000800)=0x0, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000a80)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = fsopen(&(0x7f0000000b00)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xa) fchdir(r6) r7 = open(&(0x7f0000000b40)='./bus\x00', 0x1031c2, 0x0) ftruncate(r7, 0x2007ffb) r8 = open(&(0x7f0000000b80)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) fcntl$setsig(r8, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./bus\x00', 0x88882, 0x0) 0s ago: executing program 0 (id=1014): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000001ac0)=@svm={0x0, 0x1, 0x1080, {0x41000, 0x8}, {"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"}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x100) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) socket(0x40000000015, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000005c0)='10', 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x8080) syz_io_uring_setup(0xf00, &(0x7f0000000040)={0x0, 0x5961, 0x10000, 0x2, 0x103e2}, &(0x7f0000000480), &(0x7f0000000100), &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="300000003e0007010000000005000000027c00000400fc680c000180062106"], 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) kernel console output (not intermixed with test programs): 36.278930][ T7846] ? kobject_get_path+0xcf/0x2c0 [ 136.278948][ T7846] kobject_get_path+0xcf/0x2c0 [ 136.278964][ T7846] kobject_uevent_env+0x287/0x18b0 [ 136.278981][ T7846] ? rpc_sysfs_client_setup+0x112/0x310 [ 136.279001][ T7846] rpc_sysfs_client_setup+0x233/0x310 [ 136.279019][ T7846] ? __pfx_rpc_sysfs_client_setup+0x10/0x10 [ 136.279041][ T7846] rpc_new_client+0x95e/0x1360 [ 136.279066][ T7846] rpc_create_xprt+0xd9/0x440 [ 136.279079][ T7846] rpc_create+0x4a0/0x840 [ 136.279093][ T7846] ? __pfx_rpc_create+0x10/0x10 [ 136.279126][ T7846] ? rcu_is_watching+0x13/0xc0 [ 136.279145][ T7846] ? trace_contention_end+0x126/0x160 [ 136.279162][ T7846] rpcb_create_af_local+0x18e/0x380 [ 136.279180][ T7846] ? __pfx_rpcb_create_af_local+0x10/0x10 [ 136.279207][ T7846] ? find_held_lock+0x2b/0x80 [ 136.279223][ T7846] ? rpcb_create_local+0x1da/0x270 [ 136.279240][ T7846] ? rpcb_create_local+0x1da/0x270 [ 136.279262][ T7846] rpcb_create_local+0x1ee/0x270 [ 136.279281][ T7846] svc_bind+0x23c/0x2c0 [ 136.279307][ T7846] nfsd_create_serv+0x317/0x4e0 [ 136.279323][ T7846] ? __pfx_nfsd_create_serv+0x10/0x10 [ 136.279337][ T7846] ? net_generic+0xea/0x2a0 [ 136.279356][ T7846] write_ports+0x2f1/0xd60 [ 136.279373][ T7846] ? __pfx_write_ports+0x10/0x10 [ 136.279389][ T7846] ? __might_fault+0xc5/0x140 [ 136.279406][ T7846] ? find_held_lock+0x2b/0x80 [ 136.279423][ T7846] ? __might_fault+0xc5/0x140 [ 136.279441][ T7846] ? __pfx_write_ports+0x10/0x10 [ 136.279458][ T7846] ? _copy_from_user+0x59/0xd0 [ 136.279479][ T7846] ? __pfx_write_ports+0x10/0x10 [ 136.279494][ T7846] nfsctl_transaction_write+0x106/0x1a0 [ 136.279510][ T7846] vfs_write+0x2aa/0x1040 [ 136.279524][ T7846] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 136.279539][ T7846] ? lock_acquire+0x1d1/0x380 [ 136.279551][ T7846] ? __fget_files+0x34/0x3d0 [ 136.279566][ T7846] ? __pfx_vfs_write+0x10/0x10 [ 136.279578][ T7846] ? find_held_lock+0x2b/0x80 [ 136.279614][ T7846] ? __fget_files+0x215/0x3d0 [ 136.279632][ T7846] ? __fget_files+0x21f/0x3d0 [ 136.279651][ T7846] ksys_write+0x12a/0x250 [ 136.279666][ T7846] ? __pfx_ksys_write+0x10/0x10 [ 136.279685][ T7846] __do_fast_syscall_32+0x14d/0x8e0 [ 136.279708][ T7846] do_fast_syscall_32+0x32/0x70 [ 136.279727][ T7846] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.279743][ T7846] RIP: 0023:0xf743efbc [ 136.279754][ T7846] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 136.279766][ T7846] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 136.279779][ T7846] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000580 [ 136.279786][ T7846] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.279793][ T7846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.279801][ T7846] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 136.279808][ T7846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.279824][ T7846] [ 136.368522][ T5800] svc: failed to register nfsdv3 RPC service (errno 5). [ 136.368537][ T5800] failed to unregister tcp with rpcbind [ 136.550533][ T7845] ip6tnl0 speed is unknown, defaulting to 1000 [ 136.550990][ T7845] ip6tnl0 speed is unknown, defaulting to 1000 [ 136.551331][ T7845] ip6tnl0 speed is unknown, defaulting to 1000 [ 136.552253][ T7845] FAULT_INJECTION: forcing a failure. [ 136.552253][ T7845] name failslab, interval 1, probability 0, space 0, times 0 [ 136.552271][ T7845] CPU: 1 UID: 0 PID: 7845 Comm: syz.3.543 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.552288][ T7845] Tainted: [L]=SOFTLOCKUP [ 136.552298][ T7845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.552305][ T7845] Call Trace: [ 136.552309][ T7845] [ 136.552315][ T7845] dump_stack_lvl+0x100/0x190 [ 136.552338][ T7845] should_fail_ex.cold+0x5/0xa [ 136.552358][ T7845] should_failslab+0xc2/0x120 [ 136.552375][ T7845] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 136.552391][ T7845] ? kstrdup_const+0x63/0x80 [ 136.552409][ T7845] kstrdup+0x51/0xe0 [ 136.552424][ T7845] kstrdup_const+0x63/0x80 [ 136.552439][ T7845] __kernfs_new_node+0x9b/0xa10 [ 136.552454][ T7845] ? __pfx___kernfs_new_node+0x10/0x10 [ 136.552467][ T7845] ? lock_acquire+0x1d1/0x380 [ 136.552480][ T7845] ? kernfs_root+0x23/0x2a0 [ 136.552498][ T7845] ? find_held_lock+0x2b/0x80 [ 136.552515][ T7845] ? kernfs_root+0xee/0x2a0 [ 136.552531][ T7845] ? kernfs_root+0xee/0x2a0 [ 136.552552][ T7845] kernfs_new_node+0x194/0x200 [ 136.552566][ T7845] ? __pfx_kernfs_new_node+0x10/0x10 [ 136.552579][ T7845] ? kernfs_add_one+0x213/0xb40 [ 136.552614][ T7845] __kernfs_create_file+0x53/0x350 [ 136.552632][ T7845] sysfs_add_file_mode_ns+0x207/0x3c0 [ 136.552654][ T7845] internal_create_group+0x593/0xfb0 [ 136.552678][ T7845] ? __pfx_internal_create_group+0x10/0x10 [ 136.552697][ T7845] ? __pfx_kobject_add+0x10/0x10 [ 136.552714][ T7845] ? __pfx_get_perf_mad+0x10/0x10 [ 136.552727][ T7845] ? __kmalloc_noprof+0x350/0x840 [ 136.552741][ T7845] internal_create_groups+0x9d/0x150 [ 136.552761][ T7845] setup_port+0x409/0x16c0 [ 136.552779][ T7845] ? __pfx_setup_port+0x10/0x10 [ 136.552791][ T7845] ? do_raw_spin_unlock+0x145/0x1e0 [ 136.552809][ T7845] ? rxe_get_link_layer+0x64/0xc0 [ 136.552822][ T7845] ? __pfx_rxe_get_link_layer+0x10/0x10 [ 136.552834][ T7845] ? rdma_port_get_link_layer+0x57/0xe0 [ 136.552850][ T7845] ib_setup_port_attrs+0x201/0x600 [ 136.552863][ T7845] ? kobject_put+0xb9/0x640 [ 136.552878][ T7845] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 136.552895][ T7845] ? __pfx_rxe_ib_alloc_hw_port_stats+0x10/0x10 [ 136.552914][ T7845] ? rdma_counter_init+0x209/0x400 [ 136.552936][ T7845] ib_register_device+0x8a7/0xdd0 [ 136.552956][ T7845] rxe_register_device+0x277/0x360 [ 136.552969][ T7845] rxe_net_add+0x95/0xf0 [ 136.552987][ T7845] rxe_newlink+0x9c/0x160 [ 136.553002][ T7845] nldev_newlink+0x3b0/0x630 [ 136.553016][ T7845] ? __pfx_nldev_newlink+0x10/0x10 [ 136.553072][ T7845] ? lock_acquire+0x1d1/0x380 [ 136.553084][ T7845] ? rdma_nl_rcv_msg+0x168/0x6f0 [ 136.553097][ T7845] ? hook_capable+0x1bc/0x500 [ 136.553117][ T7845] ? security_capable+0x80/0x260 [ 136.553133][ T7845] ? ns_capable+0xcd/0xf0 [ 136.553144][ T7845] ? __pfx_nldev_newlink+0x10/0x10 [ 136.553157][ T7845] rdma_nl_rcv_msg+0x392/0x6f0 [ 136.553171][ T7845] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 136.553186][ T7845] ? __lock_acquire+0x5c0/0x1f40 [ 136.553202][ T7845] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 136.553219][ T7845] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 136.553239][ T7845] ? netlink_deliver_tap+0x1ae/0xb50 [ 136.553261][ T7845] netlink_unicast+0x668/0x950 [ 136.553276][ T7845] ? __pfx_netlink_unicast+0x10/0x10 [ 136.553297][ T7845] netlink_sendmsg+0x9ac/0x10c0 [ 136.553313][ T7845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.553330][ T7845] ? apparmor_socket_sendmsg+0x165/0x280 [ 136.553350][ T7845] ? ____sys_sendmsg+0xa99/0xc30 [ 136.553364][ T7845] ____sys_sendmsg+0xa99/0xc30 [ 136.553378][ T7845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.553392][ T7845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.553415][ T7845] ___sys_sendmsg+0x190/0x1e0 [ 136.553432][ T7845] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.553452][ T7845] ? futex_wait+0x11e/0x370 [ 136.553471][ T7845] ? find_held_lock+0x2b/0x80 [ 136.553498][ T7845] __sys_sendmsg+0x160/0x210 [ 136.553517][ T7845] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.553544][ T7845] __do_fast_syscall_32+0x14d/0x8e0 [ 136.553565][ T7845] do_fast_syscall_32+0x32/0x70 [ 136.553585][ T7845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.553600][ T7845] RIP: 0023:0xf7f42fbc [ 136.553612][ T7845] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 136.553624][ T7845] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 136.553636][ T7845] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000700 [ 136.553644][ T7845] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.553651][ T7845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.553658][ T7845] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 136.553665][ T7845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.553681][ T7845] [ 136.564722][ T7845] infiniband syz0: Couldn't register device with driver model [ 136.568452][ T7845] rdma_rxe: rxe_newlink: failed to add ip6tnl0 [ 138.087327][ T7877] bridge0: port 3(syz_tun) entered blocking state [ 138.087659][ T7877] bridge0: port 3(syz_tun) entered disabled state [ 138.087786][ T7877] syz_tun: entered allmulticast mode [ 138.088721][ T7877] FAULT_INJECTION: forcing a failure. [ 138.088721][ T7877] name failslab, interval 1, probability 0, space 0, times 0 [ 138.088747][ T7877] CPU: 0 UID: 0 PID: 7877 Comm: syz.1.544 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.088773][ T7877] Tainted: [L]=SOFTLOCKUP [ 138.088780][ T7877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.088791][ T7877] Call Trace: [ 138.088797][ T7877] [ 138.088806][ T7877] dump_stack_lvl+0x100/0x190 [ 138.088844][ T7877] should_fail_ex.cold+0x5/0xa [ 138.088874][ T7877] should_failslab+0xc2/0x120 [ 138.088899][ T7877] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 138.088929][ T7877] ? kstrdup_const+0x63/0x80 [ 138.088960][ T7877] kstrdup+0x51/0xe0 [ 138.088987][ T7877] kstrdup_const+0x63/0x80 [ 138.089012][ T7877] __kernfs_new_node+0x9b/0xa10 [ 138.089035][ T7877] ? kernfs_add_one+0x20e/0xb40 [ 138.089054][ T7877] ? __pfx___kernfs_new_node+0x10/0x10 [ 138.089076][ T7877] ? lock_acquire+0x1d1/0x380 [ 138.089095][ T7877] ? kernfs_root+0x23/0x2a0 [ 138.089125][ T7877] ? find_held_lock+0x2b/0x80 [ 138.089154][ T7877] ? kernfs_root+0xee/0x2a0 [ 138.089181][ T7877] ? kernfs_root+0xee/0x2a0 [ 138.089213][ T7877] kernfs_new_node+0x194/0x200 [ 138.089236][ T7877] ? __pfx_kernfs_new_node+0x10/0x10 [ 138.089256][ T7877] ? kernfs_create_link+0xe4/0x280 [ 138.089278][ T7877] ? kernfs_create_link+0xe4/0x280 [ 138.089318][ T7877] kernfs_create_link+0x100/0x280 [ 138.089348][ T7877] sysfs_do_create_link_sd+0x90/0x140 [ 138.089380][ T7877] sysfs_create_link+0x61/0xc0 [ 138.089410][ T7877] br_sysfs_addif+0x1ae/0x210 [ 138.089437][ T7877] br_add_if+0x82c/0x1c80 [ 138.089463][ T7877] ? __pfx_br_add_slave+0x10/0x10 [ 138.089489][ T7877] do_set_master+0x40f/0x730 [ 138.089513][ T7877] do_setlink.isra.0+0xb2b/0x3f50 [ 138.089538][ T7877] ? unwind_next_frame+0xbd/0x2090 [ 138.089591][ T7877] ? unwind_next_frame+0x3be/0x2090 [ 138.089621][ T7877] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 138.089646][ T7877] ? __lock_acquire+0x5c0/0x1f40 [ 138.089669][ T7877] ? do_fast_syscall_32+0x32/0x70 [ 138.089703][ T7877] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.089731][ T7877] ? __kernel_text_address+0xd/0x30 [ 138.089761][ T7877] ? unwind_get_return_address+0x59/0xa0 [ 138.089793][ T7877] ? lock_acquire+0x1d1/0x380 [ 138.089811][ T7877] ? rtnl_setlink+0x4fc/0xaf0 [ 138.089837][ T7877] ? rcu_is_watching+0x13/0xc0 [ 138.089866][ T7877] ? trace_contention_end+0x126/0x160 [ 138.089892][ T7877] ? __mutex_lock+0x267/0x1c10 [ 138.089923][ T7877] ? rtnl_setlink+0x4fc/0xaf0 [ 138.089942][ T7877] ? __nla_validate_parse+0x1e7/0x28b0 [ 138.089973][ T7877] ? hook_capable+0x1bc/0x500 [ 138.090001][ T7877] ? __pfx___mutex_lock+0x10/0x10 [ 138.090033][ T7877] ? rcu_is_watching+0x13/0xc0 [ 138.090064][ T7877] ? apparmor_capable+0x1d7/0x4d0 [ 138.090106][ T7877] rtnl_setlink+0x61f/0xaf0 [ 138.090133][ T7877] ? __pfx_rtnl_setlink+0x10/0x10 [ 138.090153][ T7877] ? __lock_acquire+0x5c0/0x1f40 [ 138.090227][ T7877] ? __lock_acquire+0x5c0/0x1f40 [ 138.090249][ T7877] ? hook_capable+0x1bc/0x500 [ 138.090272][ T7877] ? stack_trace_save+0x8e/0xc0 [ 138.090303][ T7877] ? __pfx_stack_trace_save+0x10/0x10 [ 138.090330][ T7877] ? lock_acquire+0x1d1/0x380 [ 138.090352][ T7877] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 138.090395][ T7877] ? find_held_lock+0x2b/0x80 [ 138.090424][ T7877] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 138.090446][ T7877] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 138.090475][ T7877] ? __pfx_rtnl_setlink+0x10/0x10 [ 138.090499][ T7877] rtnetlink_rcv_msg+0x95e/0xe90 [ 138.090525][ T7877] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.090551][ T7877] ? __lock_acquire+0x5c0/0x1f40 [ 138.090578][ T7877] netlink_rcv_skb+0x159/0x420 [ 138.090621][ T7877] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.090649][ T7877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.090680][ T7877] ? netlink_deliver_tap+0x1ae/0xb50 [ 138.090719][ T7877] netlink_unicast+0x668/0x950 [ 138.090745][ T7877] ? __pfx_netlink_unicast+0x10/0x10 [ 138.090772][ T7877] netlink_sendmsg+0x9ac/0x10c0 [ 138.090796][ T7877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.090821][ T7877] ? apparmor_socket_sendmsg+0x165/0x280 [ 138.090852][ T7877] ? ____sys_sendmsg+0xa99/0xc30 [ 138.090873][ T7877] ____sys_sendmsg+0xa99/0xc30 [ 138.090893][ T7877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.090917][ T7877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.090954][ T7877] ___sys_sendmsg+0x190/0x1e0 [ 138.090980][ T7877] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.091007][ T7877] ? futex_wait+0x11e/0x370 [ 138.091041][ T7877] ? find_held_lock+0x2b/0x80 [ 138.091085][ T7877] __sys_sendmsg+0x160/0x210 [ 138.091119][ T7877] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.091164][ T7877] __do_fast_syscall_32+0x14d/0x8e0 [ 138.091199][ T7877] do_fast_syscall_32+0x32/0x70 [ 138.091231][ T7877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.091256][ T7877] RIP: 0023:0xf748efbc [ 138.091276][ T7877] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 138.091302][ T7877] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 138.091325][ T7877] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 138.091339][ T7877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.091351][ T7877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.091361][ T7877] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 138.091375][ T7877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.091401][ T7877] [ 138.092362][ T7877] syz_tun: left allmulticast mode [ 138.280533][ T7882] syzkaller0: entered promiscuous mode [ 138.280548][ T7882] syzkaller0: entered allmulticast mode [ 138.490340][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 138.490353][ T43] audit: type=1326 audit(1794341320.189:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 138.493874][ T43] audit: type=1326 audit(1794341320.189:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 138.496780][ T43] audit: type=1326 audit(1794341320.199:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.549" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 138.497244][ T43] audit: type=1326 audit(1794341320.199:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 138.498694][ T43] audit: type=1326 audit(1794341320.199:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 138.500189][ T43] audit: type=1326 audit(1794341320.199:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.549" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 138.501883][ T43] audit: type=1326 audit(1794341320.199:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 138.503451][ T43] audit: type=1326 audit(1794341320.199:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 138.508402][ T43] audit: type=1326 audit(1794341320.209:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.549" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 138.508558][ T43] audit: type=1326 audit(1794341320.209:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.1.549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 138.755607][ T7886] ip6tnl0 speed is unknown, defaulting to 1000 [ 138.756082][ T7886] ip6tnl0 speed is unknown, defaulting to 1000 [ 138.756424][ T7886] ip6tnl0 speed is unknown, defaulting to 1000 [ 138.958398][ T7886] infiniband syz0: set active [ 138.958457][ T65] ip6tnl0 speed is unknown, defaulting to 1000 [ 138.958520][ T7886] infiniband syz0: added ip6tnl0 [ 138.983797][ T7886] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 138.983825][ T7886] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 138.983850][ T7886] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 139.021224][ T7892] syzkaller0: entered promiscuous mode [ 139.021239][ T7892] syzkaller0: entered allmulticast mode [ 139.022883][ T7886] RDS/IB: syz0: added [ 139.022926][ T7886] smc: adding ib device syz0 with port count 1 [ 139.022943][ T7886] smc: ib device syz0 port 1 has no pnetid [ 139.037437][ T65] ip6tnl0 speed is unknown, defaulting to 1000 [ 139.050271][ T7886] ip6tnl0 speed is unknown, defaulting to 1000 [ 139.323438][ T7886] ip6tnl0 speed is unknown, defaulting to 1000 [ 139.441017][ T7901] syzkaller0: entered promiscuous mode [ 139.441032][ T7901] syzkaller0: entered allmulticast mode [ 139.556300][ T7886] ip6tnl0 speed is unknown, defaulting to 1000 [ 139.684104][ T7886] ip6tnl0 speed is unknown, defaulting to 1000 [ 140.774329][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 140.850106][ T7952] FAULT_INJECTION: forcing a failure. [ 140.850106][ T7952] name failslab, interval 1, probability 0, space 0, times 0 [ 140.850143][ T7952] CPU: 3 UID: 0 PID: 7952 Comm: syz.3.569 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.850176][ T7952] Tainted: [L]=SOFTLOCKUP [ 140.850186][ T7952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.850200][ T7952] Call Trace: [ 140.850209][ T7952] [ 140.850217][ T7952] dump_stack_lvl+0x100/0x190 [ 140.850278][ T7952] should_fail_ex.cold+0x5/0xa [ 140.850310][ T7952] should_failslab+0xc2/0x120 [ 140.850340][ T7952] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 140.850366][ T7952] ? lockdep_hardirqs_on+0x7d/0x110 [ 140.850398][ T7952] ? ip6_route_net_init+0x224/0x8d0 [ 140.850429][ T7952] kmemdup_noprof+0x29/0x60 [ 140.850456][ T7952] ip6_route_net_init+0x224/0x8d0 [ 140.850483][ T7952] ? __pfx_ip6_route_net_init+0x10/0x10 [ 140.850508][ T7952] ops_init+0x1e2/0x5f0 [ 140.850535][ T7952] setup_net+0x118/0x3a0 [ 140.850559][ T7952] ? __pfx_setup_net+0x10/0x10 [ 140.850607][ T7952] ? bpf_lsm_namespace_init+0x9/0x10 [ 140.850642][ T7952] copy_net_ns+0x340/0x7a0 [ 140.850672][ T7952] create_new_namespaces+0x3ea/0xac0 [ 140.850699][ T7917] cgroup: fork rejected by pids controller in [ 140.850711][ T7952] unshare_nsproxy_namespaces+0xf6/0x210 [ 140.850739][ T7952] ksys_unshare+0x44f/0x980 [ 140.850767][ T7952] ? __pfx_ksys_unshare+0x10/0x10 [ 140.850795][ T7952] ? __might_fault+0xc5/0x140 [ 140.850831][ T7952] __ia32_sys_unshare+0x30/0x40 [ 140.850856][ T7952] __do_fast_syscall_32+0x14d/0x8e0 [ 140.850897][ T7917] /syz1 [ 140.850891][ T7952] do_fast_syscall_32+0x32/0x70 [ 140.850925][ T7952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.850951][ T7952] RIP: 0023:0xf7f42fbc [ 140.850970][ T7952] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 140.850991][ T7952] RSP: 002b:00000000f53f650c EFLAGS: 00000292 [ 140.850994][ T7917] [ 140.851002][ T7952] ORIG_RAX: 0000000000000136 [ 140.851014][ T7952] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 140.851044][ T7952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.851057][ T7952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.851069][ T7952] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 140.851081][ T7952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.851109][ T7952] [ 141.315564][ C3] tipc: RX(1000001): key[1] is activated [ 141.630893][ T7983] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3323 [ 142.362820][ T7988] cgroup: fork rejected by pids controller in /syz3 [ 142.438044][ T8030] FAULT_INJECTION: forcing a failure. [ 142.438044][ T8030] name failslab, interval 1, probability 0, space 0, times 0 [ 142.438066][ T8030] CPU: 3 UID: 0 PID: 8030 Comm: syz.0.574 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.438084][ T8030] Tainted: [L]=SOFTLOCKUP [ 142.438097][ T8030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.438104][ T8030] Call Trace: [ 142.438109][ T8030] [ 142.438114][ T8030] dump_stack_lvl+0x100/0x190 [ 142.438138][ T8030] should_fail_ex.cold+0x5/0xa [ 142.438159][ T8030] should_failslab+0xc2/0x120 [ 142.438176][ T8030] __kmalloc_cache_noprof+0x91/0x6d0 [ 142.438200][ T8030] ? ipv6_inetpeer_init+0x3f/0xb0 [ 142.438231][ T8030] ? __pfx_ipv6_inetpeer_init+0x10/0x10 [ 142.438245][ T8030] ipv6_inetpeer_init+0x3f/0xb0 [ 142.438259][ T8030] ops_init+0x1e2/0x5f0 [ 142.438275][ T8030] setup_net+0x118/0x3a0 [ 142.438288][ T8030] ? __pfx_setup_net+0x10/0x10 [ 142.438302][ T8030] ? bpf_lsm_namespace_init+0x9/0x10 [ 142.438321][ T8030] copy_net_ns+0x340/0x7a0 [ 142.438337][ T8030] create_new_namespaces+0x3ea/0xac0 [ 142.438354][ T8030] unshare_nsproxy_namespaces+0xf6/0x210 [ 142.438369][ T8030] ksys_unshare+0x44f/0x980 [ 142.438383][ T8030] ? __pfx_ksys_unshare+0x10/0x10 [ 142.438398][ T8030] ? __might_fault+0xc5/0x140 [ 142.438419][ T8030] __ia32_sys_unshare+0x30/0x40 [ 142.438432][ T8030] __do_fast_syscall_32+0x14d/0x8e0 [ 142.438454][ T8030] do_fast_syscall_32+0x32/0x70 [ 142.438473][ T8030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.438489][ T8030] RIP: 0023:0xf743efbc [ 142.438499][ T8030] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 142.438511][ T8030] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 142.438523][ T8030] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 142.438531][ T8030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.438538][ T8030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.438545][ T8030] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 142.438552][ T8030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.438588][ T8030] [ 142.491926][ T8034] syzkaller0: entered promiscuous mode [ 142.491940][ T8034] syzkaller0: entered allmulticast mode [ 142.558487][ T8040] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.635812][ T8040] ip6tnl0 speed is unknown, defaulting to 1000 [ 143.801626][ T43] kauditd_printk_skb: 47 callbacks suppressed [ 143.801641][ T43] audit: type=1326 audit(1794341325.499:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 143.801673][ T43] audit: type=1326 audit(1794341325.499:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 143.803303][ T43] audit: type=1326 audit(1794341325.499:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.582" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 143.803538][ T43] audit: type=1326 audit(1794341325.499:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 143.803566][ T43] audit: type=1326 audit(1794341325.499:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 143.803991][ T43] audit: type=1326 audit(1794341325.499:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.582" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 143.804253][ T43] audit: type=1326 audit(1794341325.499:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 143.804278][ T43] audit: type=1326 audit(1794341325.499:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 143.805875][ T43] audit: type=1326 audit(1794341325.509:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.582" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 143.806001][ T43] audit: type=1326 audit(1794341325.509:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.0.582" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743efbc code=0x7ffc0000 [ 144.766943][ T8082] FAULT_INJECTION: forcing a failure. [ 144.766943][ T8082] name failslab, interval 1, probability 0, space 0, times 0 [ 144.766967][ T8082] CPU: 1 UID: 0 PID: 8082 Comm: syz.1.588 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.766984][ T8082] Tainted: [L]=SOFTLOCKUP [ 144.766989][ T8082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.766996][ T8082] Call Trace: [ 144.767001][ T8082] [ 144.767006][ T8082] dump_stack_lvl+0x100/0x190 [ 144.767030][ T8082] should_fail_ex.cold+0x5/0xa [ 144.767049][ T8082] should_failslab+0xc2/0x120 [ 144.767066][ T8082] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 144.767081][ T8082] ? trace_kmalloc+0xeb/0x110 [ 144.767095][ T8082] ? fib_notifier_ops_register+0x32/0x270 [ 144.767113][ T8082] ? __pfx_fib6_net_init+0x10/0x10 [ 144.767129][ T8082] kmemdup_noprof+0x29/0x60 [ 144.767144][ T8082] fib_notifier_ops_register+0x32/0x270 [ 144.767161][ T8082] ? __pfx_fib6_net_init+0x10/0x10 [ 144.767176][ T8082] fib6_notifier_init+0x1d/0x90 [ 144.767192][ T8082] fib6_net_init+0x22/0xb20 [ 144.767207][ T8082] ? __pfx_fib6_net_init+0x10/0x10 [ 144.767221][ T8082] ops_init+0x1e2/0x5f0 [ 144.767236][ T8082] setup_net+0x118/0x3a0 [ 144.767250][ T8082] ? __pfx_setup_net+0x10/0x10 [ 144.767265][ T8082] ? bpf_lsm_namespace_init+0x9/0x10 [ 144.767283][ T8082] copy_net_ns+0x340/0x7a0 [ 144.767298][ T8082] create_new_namespaces+0x3ea/0xac0 [ 144.767315][ T8082] unshare_nsproxy_namespaces+0xf6/0x210 [ 144.767331][ T8082] ksys_unshare+0x44f/0x980 [ 144.767345][ T8082] ? __pfx_ksys_unshare+0x10/0x10 [ 144.767360][ T8082] ? __might_fault+0xc5/0x140 [ 144.767380][ T8082] __ia32_sys_unshare+0x30/0x40 [ 144.767394][ T8082] __do_fast_syscall_32+0x14d/0x8e0 [ 144.767415][ T8082] do_fast_syscall_32+0x32/0x70 [ 144.767434][ T8082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.767450][ T8082] RIP: 0023:0xf748efbc [ 144.767461][ T8082] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 144.767473][ T8082] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 144.767486][ T8082] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 144.767494][ T8082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.767501][ T8082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.767508][ T8082] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 144.767516][ T8082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.767531][ T8082] [ 144.783269][ T8090] fuse: fd is not a fuse device [ 144.833860][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'. [ 145.100891][ T8080] cgroup: fork rejected by pids controller in /syz0 [ 145.719907][ T8149] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 147.795592][ T5795] Bluetooth: hci4: command 0x1003 tx timeout [ 147.795729][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 147.873173][ T8199] bridge0: port 3(syz_tun) entered blocking state [ 147.873252][ T8199] bridge0: port 3(syz_tun) entered disabled state [ 147.873343][ T8199] syz_tun: entered allmulticast mode [ 147.874334][ T8199] syz_tun: left allmulticast mode [ 147.879700][ T8199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.888009][ T8199] bridge_slave_0 (unregistering): left allmulticast mode [ 147.888026][ T8199] bridge_slave_0 (unregistering): left promiscuous mode [ 147.888068][ T8199] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.841968][ T67] Bluetooth: hci3: link tx timeout [ 149.841986][ T67] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 149.846993][ T67] Bluetooth: hci3: link tx timeout [ 149.847003][ T67] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.342107][ T8225] syzkaller0: entered promiscuous mode [ 150.342122][ T8225] syzkaller0: entered allmulticast mode [ 150.357698][ T8225] tipc: Enabled bearer , priority 0 [ 150.365494][ T8224] tipc: Resetting bearer [ 150.396589][ T8224] tipc: Disabling bearer [ 151.073964][ T8232] syzkaller0: entered promiscuous mode [ 151.073985][ T8232] syzkaller0: entered allmulticast mode [ 151.324915][ T8242] fuse: fd is not a fuse device [ 151.882843][ T67] Bluetooth: hci3: command 0x1407 tx timeout [ 152.654145][ T8269] FAULT_INJECTION: forcing a failure. [ 152.654145][ T8269] name failslab, interval 1, probability 0, space 0, times 0 [ 152.654167][ T8269] CPU: 1 UID: 0 PID: 8269 Comm: syz.1.631 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.654185][ T8269] Tainted: [L]=SOFTLOCKUP [ 152.654189][ T8269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.654197][ T8269] Call Trace: [ 152.654201][ T8269] [ 152.654207][ T8269] dump_stack_lvl+0x100/0x190 [ 152.654231][ T8269] should_fail_ex.cold+0x5/0xa [ 152.654250][ T8269] should_failslab+0xc2/0x120 [ 152.654281][ T8269] __kmalloc_noprof+0xfc/0x840 [ 152.654296][ T8269] ? keyctl_pkey_e_d_s+0x196/0x360 [ 152.654312][ T8269] keyctl_pkey_e_d_s+0x196/0x360 [ 152.654325][ T8269] ? __pfx_keyctl_pkey_e_d_s+0x10/0x10 [ 152.654342][ T8269] ? find_held_lock+0x2b/0x80 [ 152.654361][ T8269] ? __might_fault+0xc5/0x140 [ 152.654376][ T8269] ? __might_fault+0xc5/0x140 [ 152.654395][ T8269] __ia32_compat_sys_keyctl+0x2f2/0x550 [ 152.654418][ T8269] __do_fast_syscall_32+0x14d/0x8e0 [ 152.654439][ T8269] do_fast_syscall_32+0x32/0x70 [ 152.654459][ T8269] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.654474][ T8269] RIP: 0023:0xf748efbc [ 152.654485][ T8269] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 152.654496][ T8269] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 152.654508][ T8269] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 0000000080000000 [ 152.654516][ T8269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.654550][ T8269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.654561][ T8269] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 152.654572][ T8269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.654593][ T8269] [ 153.136815][ T8280] rxe_eth0 speed is unknown, defaulting to 1000 [ 153.513028][ T8280] ip6tnl0 speed is unknown, defaulting to 1000 [ 153.829597][ T43] kauditd_printk_skb: 45 callbacks suppressed [ 153.829620][ T43] audit: type=1326 audit(1794341335.519:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.1.639" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x0 [ 154.115307][ T67] Bluetooth: hci3: command 0x1407 tx timeout [ 154.305283][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 154.455953][ T10] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 154.456769][ T10] usb 8-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 513 [ 154.456784][ T10] usb 8-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 154.456799][ T10] usb 8-1: config 1 interface 0 has no altsetting 0 [ 154.457589][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 154.457601][ T10] usb 8-1: SerialNumber: syz [ 154.495377][ T8299] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 154.704170][ T8299] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 154.745038][ T8306] syzkaller0: entered promiscuous mode [ 154.745053][ T8306] syzkaller0: entered allmulticast mode [ 154.904156][ T8240] syz.0.622 (8240) used greatest stack depth: 17544 bytes left [ 155.242428][ T10] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 155.660938][ T65] usb 8-1: USB disconnect, device number 4 [ 155.661952][ T65] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x1a4000) [ 156.108079][ T1131] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 156.108095][ T1131] ata1: failed to read log page 10h (errno=-5) [ 156.108105][ T1131] ata1.00: exception Emask 0x1 SAct 0x4000800 SErr 0x0 action 0x0 [ 156.108117][ T1131] ata1.00: irq_stat 0x41000000 [ 156.108127][ T1131] ata1.00: failed command: READ FPDMA QUEUED [ 156.108134][ T1131] ata1.00: cmd 60/20:58:86:26:01/0d:00:00:00:00/40 tag 11 ncq dma 1720320 in [ 156.108134][ T1131] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 156.108165][ T1131] ata1.00: status: { DRDY } [ 156.108173][ T1131] ata1.00: error: { ABRT } [ 156.108182][ T1131] ata1.00: failed command: READ FPDMA QUEUED [ 156.108189][ T1131] ata1.00: cmd 60/38:d0:8e:bb:02/01:00:00:00:00/40 tag 26 ncq dma 159744 in [ 156.108189][ T1131] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 156.108220][ T1131] ata1.00: status: { DRDY } [ 156.108227][ T1131] ata1.00: error: { ABRT } [ 156.110827][ T1131] ata1.00: configured for UDMA/100 [ 156.111240][ T1131] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 156.111278][ T1131] sd 0:0:0:0: [sda] tag#11 Sense Key : Aborted Command [current] [ 156.111308][ T1131] sd 0:0:0:0: [sda] tag#11 Add. Sense: No additional sense information [ 156.111342][ T1131] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 01 26 86 00 0d 20 00 [ 156.111363][ T1131] I/O error, dev sda, sector 75398 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 156.146768][ T1131] sd 0:0:0:0: [sda] tag#26 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 156.146810][ T1131] sd 0:0:0:0: [sda] tag#26 Sense Key : Aborted Command [current] [ 156.146839][ T1131] sd 0:0:0:0: [sda] tag#26 Add. Sense: No additional sense information [ 156.146873][ T1131] sd 0:0:0:0: [sda] tag#26 CDB: Read(10) 28 00 00 02 bb 8e 00 01 38 00 [ 156.146895][ T1131] I/O error, dev sda, sector 179086 op 0x0:(READ) flags 0x80700 phys_seg 39 prio class 2 [ 156.159837][ T1131] ata1: EH complete [ 156.312845][ T8320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.357461][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.378117][ T8320] bridge_slave_0 (unregistering): left allmulticast mode [ 156.378135][ T8320] bridge_slave_0 (unregistering): left promiscuous mode [ 156.378177][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.926738][ T8345] FAULT_INJECTION: forcing a failure. [ 156.926738][ T8345] name failslab, interval 1, probability 0, space 0, times 0 [ 156.926762][ T8345] CPU: 1 UID: 0 PID: 8345 Comm: syz.1.654 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.926781][ T8345] Tainted: [L]=SOFTLOCKUP [ 156.926785][ T8345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.926792][ T8345] Call Trace: [ 156.926797][ T8345] [ 156.926802][ T8345] dump_stack_lvl+0x100/0x190 [ 156.926825][ T8345] should_fail_ex.cold+0x5/0xa [ 156.926844][ T8345] should_failslab+0xc2/0x120 [ 156.926861][ T8345] kmem_cache_alloc_noprof+0x92/0x6a0 [ 156.926874][ T8345] ? __proc_create+0xc1/0x8f0 [ 156.926886][ T8345] ? __proc_create+0x247/0x8f0 [ 156.926901][ T8345] __proc_create+0x247/0x8f0 [ 156.926914][ T8345] ? __pfx___proc_create+0x10/0x10 [ 156.926928][ T8345] ? _raw_write_unlock+0x28/0x50 [ 156.926945][ T8345] ? proc_register+0x56d/0x910 [ 156.926959][ T8345] proc_create_reg+0x75/0x170 [ 156.926973][ T8345] proc_create_net_data+0x8e/0x1c0 [ 156.926987][ T8345] ? __pfx_proc_create_net_data+0x10/0x10 [ 156.927000][ T8345] ? __pfx_ndisc_net_init+0x10/0x10 [ 156.927020][ T8345] ? __pfx_if6_proc_net_init+0x10/0x10 [ 156.927032][ T8345] if6_proc_net_init+0x53/0x80 [ 156.927043][ T8345] ops_init+0x1e2/0x5f0 [ 156.927058][ T8345] setup_net+0x118/0x3a0 [ 156.927070][ T8345] ? __pfx_setup_net+0x10/0x10 [ 156.927084][ T8345] ? bpf_lsm_namespace_init+0x9/0x10 [ 156.927101][ T8345] copy_net_ns+0x340/0x7a0 [ 156.927116][ T8345] create_new_namespaces+0x3ea/0xac0 [ 156.927136][ T8345] unshare_nsproxy_namespaces+0xf6/0x210 [ 156.927158][ T8345] ksys_unshare+0x44f/0x980 [ 156.927178][ T8345] ? __pfx_ksys_unshare+0x10/0x10 [ 156.927199][ T8345] ? __might_fault+0xc5/0x140 [ 156.927229][ T8345] __ia32_sys_unshare+0x30/0x40 [ 156.927247][ T8345] __do_fast_syscall_32+0x14d/0x8e0 [ 156.927269][ T8345] do_fast_syscall_32+0x32/0x70 [ 156.927287][ T8345] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.927303][ T8345] RIP: 0023:0xf748efbc [ 156.927331][ T8345] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 156.927344][ T8345] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 156.927358][ T8345] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 156.927366][ T8345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.927374][ T8345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.927381][ T8345] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 156.927388][ T8345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.927405][ T8345] [ 161.613792][ T8390] syzkaller0: entered promiscuous mode [ 161.613812][ T8390] syzkaller0: entered allmulticast mode [ 162.362336][ T5887] e1000 0000:00:07.0 eth0: Reset adapter [ 162.468850][ T8433] Set syz1 is full, maxelem 6117 reached [ 162.776494][ T5887] e1000 0000:00:07.0 eth0: Reset adapter [ 162.998865][ T857] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 163.125099][ T8455] syzkaller0: entered promiscuous mode [ 163.125113][ T8455] syzkaller0: entered allmulticast mode [ 165.155496][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 165.155641][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 165.155735][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 165.162826][ T30] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 173.126805][ T43] audit: type=1326 audit(1794341354.829:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.3.693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7fc00000 [ 173.127118][ T43] audit: type=1326 audit(1794341354.829:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.3.693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7fc00000 [ 173.127495][ T43] audit: type=1326 audit(1794341354.829:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.3.693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7fc00000 [ 173.127697][ T43] audit: type=1326 audit(1794341354.829:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.3.693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7fc00000 [ 173.127885][ T43] audit: type=1326 audit(1794341354.829:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.3.693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fbc code=0x7fc00000 [ 173.188267][ T43] audit: type=1326 audit(1794341354.889:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.3.693" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f42fbc code=0x7fc00000 [ 173.196330][ T43] audit: type=1326 audit(1794341354.899:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.3.693" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f42fbc code=0x7fc00000 [ 173.814669][ T8525] syzkaller0: entered promiscuous mode [ 173.814692][ T8525] syzkaller0: entered allmulticast mode [ 173.999894][ T8532] netlink: 'syz.1.700': attribute type 1 has an invalid length. [ 174.013647][ T8532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.062080][ T8532] batman_adv: batadv0: Removing interface: dummy0 [ 174.084970][ T8532] bond2: (slave dummy0): making interface the new active one [ 174.092215][ T8532] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 174.123283][ T8532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.700'. [ 174.123356][ T8532] bond2: entered promiscuous mode [ 174.123372][ T8532] dummy0: entered promiscuous mode [ 174.123574][ T8532] bond2: entered allmulticast mode [ 174.123588][ T8532] dummy0: entered allmulticast mode [ 174.278729][ T1182] IPVS: starting estimator thread 0... [ 174.365560][ T8539] IPVS: using max 29 ests per chain, 69600 per kthread [ 176.115001][ T8569] overlayfs: failed to verify upper (180/file1, ino=988, err=-116) [ 176.115036][ T8569] overlayfs: failed to verify index dir 'upper' xattr [ 176.115041][ T8569] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 176.152967][ T8571] rxe_eth0 speed is unknown, defaulting to 1000 [ 176.263516][ T8578] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 176.263539][ T8578] overlayfs: failed to set xattr on upper [ 176.263547][ T8578] overlayfs: ...falling back to redirect_dir=nofollow. [ 176.263553][ T8578] overlayfs: ...falling back to index=off. [ 176.263560][ T8578] overlayfs: ...falling back to uuid=null. [ 176.307143][ T8571] ip6tnl0 speed is unknown, defaulting to 1000 [ 176.426578][ T8587] netlink: 56 bytes leftover after parsing attributes in process `syz.3.718'. [ 176.552085][ T43] audit: type=1326 audit(1794341358.249:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.0.717" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf743efbc code=0x0 [ 176.725942][ T5806] Bluetooth: hci0: unexpected event 0x30 length: 6 > 3 [ 176.845804][ T5869] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 176.888298][ T8608] loop6: detected capacity change from 0 to 2640 [ 176.894974][ T8608] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.895016][ T8608] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.895050][ T8608] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.895076][ T8608] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.895101][ T8608] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.895141][ T8608] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.895178][ T8608] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.896120][ T8608] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.896138][ T8608] ldm_validate_partition_table(): Disk read failed. [ 176.896160][ T8608] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.896185][ T8608] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.896223][ T8608] Dev loop6: unable to read RDB block 0 [ 176.899745][ T8608] loop6: unable to read partition table [ 176.899926][ T8608] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 176.996440][ T5869] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 176.997474][ T5869] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.997518][ T5869] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 176.997532][ T5869] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.999400][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 176.999413][ T5869] usb 5-1: Product: syz [ 176.999445][ T5869] usb 5-1: Manufacturer: syz [ 176.999455][ T5869] usb 5-1: SerialNumber: syz [ 177.004599][ T5869] usb 5-1: config 0 descriptor?? [ 177.007229][ T8591] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.016947][ T5869] usb 5-1: selecting invalid altsetting 0 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x400000) [ 177.116394][ T1131] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 177.116415][ T1131] ata1: failed to read log page 10h (errno=-5) [ 177.116431][ T1131] ata1.00: exception Emask 0x1 SAct 0x300 SErr 0x0 action 0x0 [ 177.116447][ T1131] ata1.00: irq_stat 0x41000000 [ 177.116461][ T1131] ata1.00: failed command: READ FPDMA QUEUED [ 177.116474][ T1131] ata1.00: cmd 60/00:40:6e:1b:01/20:00:00:00:00/40 tag 8 ncq dma 4194304 in [ 177.116474][ T1131] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 177.116526][ T1131] ata1.00: status: { DRDY } [ 177.116541][ T1131] ata1.00: failed command: READ FPDMA QUEUED [ 177.116550][ T1131] ata1.00: cmd 60/b8:48:6e:3b:01/03:00:00:00:00/40 tag 9 ncq dma 487424 in [ 177.116550][ T1131] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 177.116596][ T1131] ata1.00: status: { DRDY } [ 177.118633][ T1131] ata1.00: configured for UDMA/100 [ 177.119055][ T1131] sd 0:0:0:0: [sda] tag#8 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 177.119104][ T1131] sd 0:0:0:0: [sda] tag#8 Sense Key : Aborted Command [current] [ 177.119133][ T1131] sd 0:0:0:0: [sda] tag#8 Add. Sense: No additional sense information [ 177.119433][ T1131] sd 0:0:0:0: [sda] tag#8 CDB: Read(10) 28 00 00 01 1b 6e 00 20 00 00 [ 177.119649][ T1131] I/O error, dev sda, sector 72558 op 0x0:(READ) flags 0x84700 phys_seg 139 prio class 2 [ 177.119875][ T1131] sd 0:0:0:0: [sda] tag#9 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 177.119906][ T1131] sd 0:0:0:0: [sda] tag#9 Sense Key : Aborted Command [current] [ 177.119932][ T1131] sd 0:0:0:0: [sda] tag#9 Add. Sense: No additional sense information [ 177.119959][ T1131] sd 0:0:0:0: [sda] tag#9 CDB: Read(10) 28 00 00 01 3b 6e 00 03 b8 00 [ 177.119976][ T1131] I/O error, dev sda, sector 80750 op 0x0:(READ) flags 0x80700 phys_seg 118 prio class 2 [ 177.120630][ T1131] ata1: EH complete [ 177.534817][ T42] libceph: connect (1)[c::]:6789 error -101 [ 177.535006][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 177.547301][ T42] libceph: connect (1)[c::]:6789 error -101 [ 177.547447][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 177.615971][ T8606] FAULT_INJECTION: forcing a failure. [ 177.615971][ T8606] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 177.615996][ T8606] CPU: 1 UID: 0 PID: 8606 Comm: syz.1.731 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.616015][ T8606] Tainted: [L]=SOFTLOCKUP [ 177.616020][ T8606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.616028][ T8606] Call Trace: [ 177.616033][ T8606] [ 177.616039][ T8606] dump_stack_lvl+0x100/0x190 [ 177.616064][ T8606] should_fail_ex.cold+0x5/0xa [ 177.616083][ T8606] should_fail_alloc_page+0xeb/0x140 [ 177.616102][ T8606] prepare_alloc_pages+0x1f0/0x5b0 [ 177.616119][ T8606] ? __lock_acquire+0x5c0/0x1f40 [ 177.616134][ T8606] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 177.616154][ T8606] ? kasan_save_track+0x14/0x30 [ 177.616167][ T8606] ? kasan_save_free_info+0x3b/0x70 [ 177.616185][ T8606] ? zswap_entry_free+0x3a0/0x640 [ 177.616202][ T8606] ? zswap_load+0x4af/0x9f0 [ 177.616219][ T8606] ? swap_read_folio+0xa95/0x1ab0 [ 177.616236][ T8606] ? swap_cache_read_folio+0xb6/0x150 [ 177.616247][ T8606] ? swap_cluster_readahead+0x477/0x5d0 [ 177.616259][ T8606] ? swapin_readahead+0xf0/0x260 [ 177.616270][ T8606] ? do_swap_page+0xf98/0x54a0 [ 177.616284][ T8606] ? __handle_mm_fault+0x190a/0x2f40 [ 177.616299][ T8606] ? handle_mm_fault+0x363/0xa30 [ 177.616314][ T8606] ? do_user_addr_fault+0x745/0x12f0 [ 177.616331][ T8606] ? exc_page_fault+0x6f/0xd0 [ 177.616349][ T8606] ? asm_exc_page_fault+0x26/0x30 [ 177.616361][ T8606] ? rep_stos_alternative+0x40/0x80 [ 177.616373][ T8606] ? copy_fpstate_to_sigframe+0x178/0xb60 [ 177.616400][ T8606] ? get_sigframe+0x3fb/0x940 [ 177.616426][ T8606] ? ia32_setup_frame+0xe5/0x990 [ 177.616440][ T8606] ? arch_do_signal_or_restart+0x571/0x7a0 [ 177.616458][ T8606] ? exit_to_user_mode_loop+0x139/0x700 [ 177.616475][ T8606] ? __do_fast_syscall_32+0x651/0x8e0 [ 177.616494][ T8606] ? do_fast_syscall_32+0x32/0x70 [ 177.616512][ T8606] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.616529][ T8606] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 177.616560][ T8606] ? kasan_quarantine_put+0x104/0x240 [ 177.616575][ T8606] ? __lock_acquire+0x5c0/0x1f40 [ 177.616588][ T8606] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.616604][ T8606] ? policy_nodemask+0xed/0x5e0 [ 177.616622][ T8606] alloc_pages_mpol+0x201/0x560 [ 177.616639][ T8606] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 177.616655][ T8606] ? do_raw_spin_lock+0x128/0x260 [ 177.616685][ T8606] ? find_held_lock+0x2b/0x80 [ 177.616705][ T8606] ? __swap_cache_alloc_folio+0x374/0xc50 [ 177.616720][ T8606] folio_alloc_mpol_noprof+0x36/0x260 [ 177.616741][ T8606] __swap_cache_alloc_folio+0x3d7/0xc50 [ 177.616757][ T8606] ? __pfx___swap_cache_alloc_folio+0x10/0x10 [ 177.616770][ T8606] ? swap_cache_get_folio+0x35c/0x4f0 [ 177.616789][ T8606] ? xas_find_marked+0x310/0x12f0 [ 177.616810][ T8606] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 177.616835][ T8606] swap_cache_read_folio+0x47/0x150 [ 177.616850][ T8606] swap_cluster_readahead+0x477/0x5d0 [ 177.616862][ T8606] ? __lock_acquire+0x5c0/0x1f40 [ 177.616877][ T8606] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 177.616891][ T8606] ? lock_acquire+0x1d1/0x380 [ 177.616913][ T8606] swapin_readahead+0xf0/0x260 [ 177.616926][ T8606] ? __pfx_swapin_readahead+0x10/0x10 [ 177.616937][ T8606] ? __pfx_get_swap_device+0x10/0x10 [ 177.616961][ T8606] do_swap_page+0xf98/0x54a0 [ 177.616983][ T8606] ? rcu_is_watching+0x13/0xc0 [ 177.617001][ T8606] ? __pte_offset_map+0x1e9/0x470 [ 177.617013][ T8606] ? __pfx_do_swap_page+0x10/0x10 [ 177.617029][ T8606] ? is_bpf_text_address+0x25/0x1a0 [ 177.617050][ T8606] ? mtree_range_walk+0x72b/0xb70 [ 177.617069][ T8606] ? pgd_none+0x9f/0xe0 [ 177.617084][ T8606] ? __pfx_pgd_none+0x10/0x10 [ 177.617103][ T8606] __handle_mm_fault+0x190a/0x2f40 [ 177.617122][ T8606] ? __pfx___handle_mm_fault+0x10/0x10 [ 177.617137][ T8606] ? __pfx_mt_find+0x10/0x10 [ 177.617158][ T8606] ? find_vma+0xbf/0x140 [ 177.617169][ T8606] ? __pfx_find_vma+0x10/0x10 [ 177.617181][ T8606] handle_mm_fault+0x363/0xa30 [ 177.617200][ T8606] do_user_addr_fault+0x745/0x12f0 [ 177.617221][ T8606] exc_page_fault+0x6f/0xd0 [ 177.617239][ T8606] asm_exc_page_fault+0x26/0x30 [ 177.617250][ T8606] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 177.617265][ T8606] Code: c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 177.617276][ T8606] RSP: 0000:ffffc900204b7aa8 EFLAGS: 00050206 [ 177.617288][ T8606] RAX: 0000000000000000 RBX: 0000000000000a80 RCX: 0000000000000500 [ 177.617295][ T8606] RDX: 0000000000080000 RSI: ffffffff826861b1 RDI: 00000000f54a6000 [ 177.617303][ T8606] RBP: ffff888048af8000 R08: 0000000000063ab9 R09: 00000000000001dc [ 177.617310][ T8606] R10: 0000000000000200 R11: 0000000000000000 R12: dffffc0000000000 [ 177.617318][ T8606] R13: 00000000f54a5a80 R14: ffff888048af9ac0 R15: ffff888048af9ac0 [ 177.617330][ T8606] ? __might_fault+0x111/0x140 [ 177.617349][ T8606] copy_fpstate_to_sigframe+0x31d/0xb60 [ 177.617362][ T8606] ? do_dec_rlimit_put_ucounts+0xfc/0x150 [ 177.617380][ T8606] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 177.617393][ T8606] ? __sigqueue_free+0xc3/0x2a0 [ 177.617409][ T8606] ? collect_signal+0x271/0x550 [ 177.617425][ T8606] ? x86_task_fpu+0x5f/0x90 [ 177.617443][ T8606] get_sigframe+0x3fb/0x940 [ 177.617464][ T8606] ? __pfx_get_sigframe+0x10/0x10 [ 177.617483][ T8606] ? _raw_spin_unlock_irq+0x23/0x50 [ 177.617499][ T8606] ? siginfo_layout+0x156/0x290 [ 177.617518][ T8606] ? get_signal+0x173/0x22e0 [ 177.617532][ T8606] ia32_setup_frame+0xe5/0x990 [ 177.617549][ T8606] ? __pfx_ia32_setup_frame+0x10/0x10 [ 177.617565][ T8606] ? __do_compat_sys_waitid+0x180/0x250 [ 177.617583][ T8606] arch_do_signal_or_restart+0x571/0x7a0 [ 177.617604][ T8606] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 177.617632][ T8606] exit_to_user_mode_loop+0x139/0x700 [ 177.617649][ T8606] ? rcu_is_watching+0x13/0xc0 [ 177.617667][ T8606] __do_fast_syscall_32+0x651/0x8e0 [ 177.617688][ T8606] do_fast_syscall_32+0x32/0x70 [ 177.617707][ T8606] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.617722][ T8606] RIP: 0023:0xf748efbc [ 177.617732][ T8606] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 177.617743][ T8606] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000011c [ 177.617755][ T8606] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 177.617762][ T8606] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 177.617769][ T8606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.617775][ T8606] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 177.617782][ T8606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.617798][ T8606] [ 177.678606][ T8620] ceph: No mds server is up or the cluster is laggy [ 177.959554][ T8633] tipc: Started in network mode [ 177.959573][ T8633] tipc: Node identity 4, cluster identity 4711 [ 177.959584][ T8633] tipc: Node number set to 4 [ 177.960585][ T8633] tipc: Enabled bearer , priority 0 [ 177.962535][ T8633] tipc: Disabling bearer [ 178.133053][ T8640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.733'. [ 178.171955][ T8640] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 178.172962][ T8640] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 178.596858][ T8657] netlink: 'syz.2.738': attribute type 1 has an invalid length. [ 178.612648][ T8657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.672854][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'. [ 178.697076][ T8657] bond1: (slave bridge3): making interface the new active one [ 178.697847][ T8657] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 178.755365][ T67] Bluetooth: hci0: command 0x0406 tx timeout [ 178.755742][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 178.928200][ T8670] rxe_eth0 speed is unknown, defaulting to 1000 [ 179.024985][ T8670] ip6tnl0 speed is unknown, defaulting to 1000 [ 179.343843][ T8677] netlink: 'syz.1.744': attribute type 1 has an invalid length. [ 179.438746][ T30] usb 5-1: USB disconnect, device number 9 [ 179.490594][ T8677] e1000e 0000:00:02.0 eth1: removed PHC [ 179.732467][ T8677] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 180.009059][ T8697] syzkaller0: entered promiscuous mode [ 180.009074][ T8697] syzkaller0: entered allmulticast mode [ 180.057529][ T8701] tipc: Enabling of bearer rejected, failed to enable media [ 180.090994][ T8680] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 180.142077][ T8680] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 180.142141][ T8680] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 180.142196][ T8680] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 180.142405][ T8680] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 180.142582][ T8680] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 180.157275][ T8680] pci 0000:00:02.0: enabling Extended Tags [ 180.200297][ T8680] pci 0000:00:02.0: Adding to iommu group 2 [ 180.223478][ T8680] pci 0000:00:02.0: ROM [mem 0x80000000-0x8003ffff pref]: assigned [ 180.223503][ T8680] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff]: assigned [ 180.224780][ T8680] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff]: assigned [ 180.228652][ T8680] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff]: assigned [ 180.229589][ T8680] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 180.386968][ T8680] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 180.396904][ T8709] syzkaller0: entered promiscuous mode [ 180.396917][ T8709] syzkaller0: entered allmulticast mode [ 180.460577][ T8680] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 180.613098][ T8718] FAULT_INJECTION: forcing a failure. [ 180.613098][ T8718] name failslab, interval 1, probability 0, space 0, times 0 [ 180.613121][ T8718] CPU: 0 UID: 0 PID: 8718 Comm: syz.0.752 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.613140][ T8718] Tainted: [L]=SOFTLOCKUP [ 180.613144][ T8718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.613152][ T8718] Call Trace: [ 180.613156][ T8718] [ 180.613162][ T8718] dump_stack_lvl+0x100/0x190 [ 180.613186][ T8718] should_fail_ex.cold+0x5/0xa [ 180.613206][ T8718] should_failslab+0xc2/0x120 [ 180.613221][ T8718] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 180.613237][ T8718] ? __d_alloc+0x34/0xad0 [ 180.613263][ T8718] __d_alloc+0x34/0xad0 [ 180.613290][ T8718] d_alloc+0x4a/0x1e0 [ 180.613315][ T8718] lookup_one_qstr_excl+0x171/0x250 [ 180.613348][ T8718] start_creating+0xd8/0x120 [ 180.613372][ T8718] ovl_workdir_create+0x1c3/0xaa0 [ 180.613420][ T8718] ? lock_acquire+0x1d1/0x380 [ 180.613441][ T8718] ? __pfx_ovl_workdir_create+0x10/0x10 [ 180.613466][ T8718] ? mnt_get_write_access+0x52/0x2f0 [ 180.613487][ T8718] ? mnt_get_write_access+0x52/0x2f0 [ 180.613509][ T8718] ? mnt_get_write_access+0x52/0x2f0 [ 180.613530][ T8718] ? mnt_get_write_access+0x1ec/0x2f0 [ 180.613553][ T8718] ovl_fill_super+0xf67/0x5fd0 [ 180.613583][ T8718] ? __pfx_ovl_fill_super+0x10/0x10 [ 180.613598][ T8718] ? __pfx_sget_fc+0x10/0x10 [ 180.613609][ T8718] ? hook_capable+0x1bc/0x500 [ 180.613624][ T8718] ? ovl_next_opt+0x143/0x1c0 [ 180.613640][ T8718] ? rcu_is_watching+0x13/0xc0 [ 180.613658][ T8718] ? apparmor_capable+0x1d7/0x4d0 [ 180.613676][ T8718] ? __pfx_ovl_fill_super+0x10/0x10 [ 180.613709][ T8718] get_tree_nodev+0xe3/0x190 [ 180.613723][ T8718] vfs_get_tree+0x92/0x320 [ 180.613743][ T8718] path_mount+0x7d0/0x2850 [ 180.613765][ T8718] ? __pfx_path_mount+0x10/0x10 [ 180.613782][ T8718] ? lockdep_hardirqs_on+0x7d/0x110 [ 180.613825][ T8718] ? putname+0xb1/0x110 [ 180.613842][ T8718] ? kmem_cache_free+0x127/0x6c0 [ 180.613867][ T8718] ? __ia32_sys_mount+0x292/0x310 [ 180.613885][ T8718] __ia32_sys_mount+0x292/0x310 [ 180.613904][ T8718] ? __pfx___ia32_sys_mount+0x10/0x10 [ 180.613928][ T8718] __do_fast_syscall_32+0x14d/0x8e0 [ 180.613951][ T8718] ? lockdep_hardirqs_on+0x7d/0x110 [ 180.613969][ T8718] do_fast_syscall_32+0x32/0x70 [ 180.613988][ T8718] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.614006][ T8718] RIP: 0023:0xf743efbc [ 180.614017][ T8718] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 180.614029][ T8718] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 180.614042][ T8718] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800017c0 [ 180.614053][ T8718] RDX: 0000000080001800 RSI: 0000000000000000 RDI: 0000000080001840 [ 180.614065][ T8718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 180.614075][ T8718] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 180.614082][ T8718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.614100][ T8718] [ 180.614133][ T8718] overlayfs: failed to create directory ./file0/work (errno: 12); mounting read-only [ 180.630089][ T8680] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 180.630108][ T8680] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 180.630271][ T8680] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 180.888069][ T8726] syzkaller0: entered promiscuous mode [ 180.888094][ T8726] syzkaller0: entered allmulticast mode [ 181.088989][ T8752] fuse: fd is not a fuse device [ 181.357855][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 181.358002][ T8775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.362080][ T8775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.741011][ T5508] 8021q: adding VLAN 0 to HW filter on device eth1 [ 181.833982][ T8806] FAULT_INJECTION: forcing a failure. [ 181.833982][ T8806] name failslab, interval 1, probability 0, space 0, times 0 [ 181.834005][ T8806] CPU: 2 UID: 0 PID: 8806 Comm: syz.3.771 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.834023][ T8806] Tainted: [L]=SOFTLOCKUP [ 181.834028][ T8806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.834036][ T8806] Call Trace: [ 181.834040][ T8806] [ 181.834045][ T8806] dump_stack_lvl+0x100/0x190 [ 181.834067][ T8806] should_fail_ex.cold+0x5/0xa [ 181.834087][ T8806] should_failslab+0xc2/0x120 [ 181.834103][ T8806] kmem_cache_alloc_noprof+0x92/0x6a0 [ 181.834116][ T8806] ? __proc_create+0xc1/0x8f0 [ 181.834129][ T8806] ? __proc_create+0x247/0x8f0 [ 181.834144][ T8806] __proc_create+0x247/0x8f0 [ 181.834156][ T8806] ? __pfx___proc_create+0x10/0x10 [ 181.834168][ T8806] ? pcpu_chunk_relocate+0x2f7/0x5a0 [ 181.834187][ T8806] proc_create_reg+0x75/0x170 [ 181.834201][ T8806] proc_create_net_data+0x8e/0x1c0 [ 181.834215][ T8806] ? __pfx_proc_create_net_data+0x10/0x10 [ 181.834232][ T8806] neigh_table_register+0x503/0x11b0 [ 181.834252][ T8806] ? __pfx_arp_net_init+0x10/0x10 [ 181.834273][ T8806] arp_net_init+0x21/0x160 [ 181.834292][ T8806] ops_init+0x1e2/0x5f0 [ 181.834306][ T8806] setup_net+0x118/0x3a0 [ 181.834319][ T8806] ? __pfx_setup_net+0x10/0x10 [ 181.834332][ T8806] ? bpf_lsm_namespace_init+0x9/0x10 [ 181.834350][ T8806] copy_net_ns+0x340/0x7a0 [ 181.834366][ T8806] create_new_namespaces+0x3ea/0xac0 [ 181.834403][ T8806] unshare_nsproxy_namespaces+0xf6/0x210 [ 181.834421][ T8806] ksys_unshare+0x44f/0x980 [ 181.834436][ T8806] ? __pfx_ksys_unshare+0x10/0x10 [ 181.834453][ T8806] ? __might_fault+0xc5/0x140 [ 181.834474][ T8806] __ia32_sys_unshare+0x30/0x40 [ 181.834489][ T8806] __do_fast_syscall_32+0x14d/0x8e0 [ 181.834510][ T8806] do_fast_syscall_32+0x32/0x70 [ 181.834529][ T8806] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.834547][ T8806] RIP: 0023:0xf7f42fbc [ 181.834558][ T8806] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 181.834570][ T8806] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 181.834582][ T8806] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 181.834590][ T8806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.834602][ T8806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.834609][ T8806] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 181.834617][ T8806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.834633][ T8806] [ 182.087751][ T43] audit: type=1326 audit(1794341363.789:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.1.774" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 182.087884][ T43] audit: type=1326 audit(1794341363.789:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.1.774" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 182.088989][ T43] audit: type=1326 audit(1794341363.789:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.1.774" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 182.089271][ T43] audit: type=1326 audit(1794341363.789:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.1.774" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 182.089381][ T43] audit: type=1326 audit(1794341363.789:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.1.774" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 182.091672][ T43] audit: type=1326 audit(1794341363.789:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.1.774" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 182.091700][ T43] audit: type=1326 audit(1794341363.789:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.1.774" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 182.092989][ T43] audit: type=1326 audit(1794341363.789:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.1.774" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 182.093448][ T43] audit: type=1326 audit(1794341363.789:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.1.774" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 182.093565][ T43] audit: type=1326 audit(1794341363.789:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.1.774" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748efbc code=0x7ffc0000 [ 182.225954][ T42] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 182.994903][ T8837] trusted_key: encrypted_key: insufficient parameters specified [ 183.002327][ T8837] Could not find key with description: [syz] [ 183.002337][ T8837] process_request_key_err: No key [ 183.002342][ T8837] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 183.002349][ T8837] One or more global auth toks could not properly register; rc = [-2] [ 183.002372][ T8837] Error validating options; rc = [-2] [ 183.386237][ T8848] syzkaller0: entered promiscuous mode [ 183.386251][ T8848] syzkaller0: entered allmulticast mode [ 183.390144][ T8848] tipc: Enabled bearer , priority 0 [ 183.391309][ T8847] tipc: Resetting bearer [ 183.413865][ T8847] tipc: Disabling bearer [ 185.219627][ T8897] syzkaller0: entered promiscuous mode [ 185.219648][ T8897] syzkaller0: entered allmulticast mode [ 185.460280][ T8906] netlink: 'syz.1.802': attribute type 1 has an invalid length. [ 185.768205][ T8912] netlink: 52 bytes leftover after parsing attributes in process `syz.2.803'. [ 187.466465][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 187.466481][ T43] audit: type=1800 audit(1794341369.159:226): pid=8925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.807" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 189.607593][ T8941] syzkaller0: entered promiscuous mode [ 189.607607][ T8941] syzkaller0: entered allmulticast mode [ 189.644886][ T8943] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 189.786055][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 189.786143][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 189.933288][ T8949] ceph: No mds server is up or the cluster is laggy [ 189.971559][ T8956] Invalid ELF header magic: != ELF [ 190.689759][ T8963] jffs2: notice: (8963) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 190.852164][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 190.859523][ T8973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.162646][ T8976] jffs2: notice: (8976) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 191.736580][ T5887] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 191.886328][ T5887] usb 5-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 191.887862][ T5887] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 191.887881][ T5887] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 191.891392][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.891414][ T5887] usb 5-1: Product: syz [ 191.891428][ T5887] usb 5-1: Manufacturer: syz [ 191.891440][ T5887] usb 5-1: SerialNumber: syz [ 192.767500][ T8985] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 192.767602][ T8985] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 192.769984][ T5887] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 192.769997][ T5887] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 192.770025][ T5887] usbserial_generic 5-1:1.0: generic converter detected [ 192.774117][ T5887] usb 5-1: generic converter now attached to ttyUSB0 [ 192.872458][ T9022] FAULT_INJECTION: forcing a failure. [ 192.872458][ T9022] name failslab, interval 1, probability 0, space 0, times 0 [ 192.872484][ T9022] CPU: 3 UID: 0 PID: 9022 Comm: syz.1.832 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.872502][ T9022] Tainted: [L]=SOFTLOCKUP [ 192.872508][ T9022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.872516][ T9022] Call Trace: [ 192.872520][ T9022] [ 192.872525][ T9022] dump_stack_lvl+0x100/0x190 [ 192.872549][ T9022] should_fail_ex.cold+0x5/0xa [ 192.872568][ T9022] ? __pfx_ovl_inode_set+0x10/0x10 [ 192.872583][ T9022] should_failslab+0xc2/0x120 [ 192.872600][ T9022] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 192.872613][ T9022] ? __pfx_ovl_inode_test+0x10/0x10 [ 192.872627][ T9022] ? ovl_alloc_inode+0x25/0x190 [ 192.872643][ T9022] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 192.872657][ T9022] ? __pfx_ovl_inode_test+0x10/0x10 [ 192.872672][ T9022] ? __pfx_ovl_inode_set+0x10/0x10 [ 192.872686][ T9022] ovl_alloc_inode+0x25/0x190 [ 192.872700][ T9022] alloc_inode+0x68/0x250 [ 192.872712][ T9022] iget5_locked+0x5f/0xa0 [ 192.872725][ T9022] ovl_get_trap_inode+0xb2/0x210 [ 192.872742][ T9022] ovl_fill_super+0xea5/0x5fd0 [ 192.872768][ T9022] ? __pfx_ovl_fill_super+0x10/0x10 [ 192.872784][ T9022] ? __pfx_sget_fc+0x10/0x10 [ 192.872795][ T9022] ? hook_capable+0x1bc/0x500 [ 192.872809][ T9022] ? ovl_next_opt+0x143/0x1c0 [ 192.872824][ T9022] ? rcu_is_watching+0x13/0xc0 [ 192.872842][ T9022] ? apparmor_capable+0x1d7/0x4d0 [ 192.872860][ T9022] ? __pfx_ovl_fill_super+0x10/0x10 [ 192.872875][ T9022] get_tree_nodev+0xe3/0x190 [ 192.872888][ T9022] vfs_get_tree+0x92/0x320 [ 192.872915][ T9022] path_mount+0x7d0/0x2850 [ 192.872936][ T9022] ? __pfx_path_mount+0x10/0x10 [ 192.872953][ T9022] ? lockdep_hardirqs_on+0x7d/0x110 [ 192.872974][ T9022] ? putname+0xb1/0x110 [ 192.872990][ T9022] ? kmem_cache_free+0x127/0x6c0 [ 192.873014][ T9022] ? __ia32_sys_mount+0x292/0x310 [ 192.873031][ T9022] __ia32_sys_mount+0x292/0x310 [ 192.873049][ T9022] ? __pfx___ia32_sys_mount+0x10/0x10 [ 192.873071][ T9022] __do_fast_syscall_32+0x14d/0x8e0 [ 192.873089][ T9022] ? lockdep_hardirqs_on+0x7d/0x110 [ 192.873108][ T9022] do_fast_syscall_32+0x32/0x70 [ 192.873128][ T9022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.873144][ T9022] RIP: 0023:0xf748efbc [ 192.873154][ T9022] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 192.873166][ T9022] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 192.873178][ T9022] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800017c0 [ 192.873186][ T9022] RDX: 0000000080001800 RSI: 0000000000000000 RDI: 0000000080001840 [ 192.873194][ T9022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.873201][ T9022] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 192.873208][ T9022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.873222][ T9022] [ 193.013601][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.019897][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.019984][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.020213][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.020275][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.020404][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.020441][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.020609][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.020640][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.021939][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.025571][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.025647][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.025818][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.025864][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.026243][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.026316][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.026503][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.026561][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.026692][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.026722][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.027112][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.027189][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.027351][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.027405][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.027553][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 193.044361][ T5869] usb 5-1: USB disconnect, device number 10 [ 193.064765][ T5869] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 193.068364][ T5869] usbserial_generic 5-1:1.0: device disconnected [ 193.729716][ T9049] event trace: Could not enable event p [ 193.807101][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.807155][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.924618][ T9051] Console: switching to colour dummy device 80x25 [ 194.200513][ T9052] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 194.258853][ T9052] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 194.258971][ T9052] pci 0000:00:01.0: BAR 2 [mem 0xfeaf6000-0xfeaf6fff] [ 194.259148][ T9052] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 194.259602][ T9052] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 194.300245][ T9052] pci 0000:00:01.0: Adding to iommu group 1 [ 194.331510][ T9052] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 194.331525][ T9052] pci 0000:00:01.0: vgaarb: bridge control possible [ 194.331534][ T9052] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 194.356886][ T9052] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 194.373935][ T9052] pci 0000:00:01.0: BAR 2 [mem 0x80084000-0x80084fff]: assigned [ 194.383220][ T9052] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 194.537544][ T9052] [drm] Found bochs VGA, ID 0xb0c5. [ 194.537558][ T9052] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80084000. [ 194.611240][ T9052] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 194.765085][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 194.766658][ T9068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.778372][ T9068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.888457][ T9052] Console: switching to colour frame buffer device 160x50 [ 194.925070][ T9052] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 195.413681][ T9067] ceph: No mds server is up or the cluster is laggy [ 197.168941][ T67] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.172463][ T67] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.173195][ T67] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.180215][ T67] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.184734][ T67] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.389624][ T9074] rxe_eth0 speed is unknown, defaulting to 1000 [ 197.463999][ T9074] ip6tnl0 speed is unknown, defaulting to 1000 [ 197.574498][ T5806] Bluetooth: hci1: unexpected event for opcode 0x0c24 [ 197.608467][ T9089] fuse: fd is not a fuse device [ 197.785987][ T9095] input: syz0 as /devices/virtual/input/input7 [ 197.809522][ T9074] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.809678][ T9074] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.809781][ T9074] bridge_slave_0: entered allmulticast mode [ 197.813413][ T9074] bridge_slave_0: entered promiscuous mode [ 197.816642][ T9074] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.816713][ T9074] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.816778][ T9074] bridge_slave_1: entered allmulticast mode [ 197.817448][ T9074] bridge_slave_1: entered promiscuous mode [ 197.831791][ T9074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.833148][ T9074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.864642][ T9074] team0: Port device team_slave_0 added [ 197.869443][ T9074] team0: Port device team_slave_1 added [ 197.892328][ T9074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.892344][ T9074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.892368][ T9074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.893892][ T9074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.893904][ T9074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.893927][ T9074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.920484][ T9074] hsr_slave_0: entered promiscuous mode [ 197.921185][ T9074] hsr_slave_1: entered promiscuous mode [ 197.921621][ T9074] debugfs: 'hsr0' already exists in 'hsr' [ 197.921631][ T9074] Cannot create hsr debugfs directory [ 198.084562][ T9074] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 198.087154][ T9074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.087586][ T9074] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 198.095737][ T9074] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.096439][ T9074] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 198.100326][ T9074] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.100935][ T9074] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 198.107231][ T9074] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.122129][ T9074] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.122177][ T9074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.122279][ T9074] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.122348][ T9074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.153291][ T9074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.159934][ T1182] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.160330][ T1182] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.163814][ T9074] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.169071][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.169116][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.171777][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.171819][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.457536][ T9074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.628972][ T9074] veth0_vlan: entered promiscuous mode [ 198.642256][ T43] audit: type=1326 audit(1794341380.339:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.2.853" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66fbc code=0x0 [ 198.644248][ T67] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.648967][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.649716][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.650031][ T9074] veth1_vlan: entered promiscuous mode [ 198.654484][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.654786][ T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.687389][ T9074] veth0_macvtap: entered promiscuous mode [ 198.689947][ T9074] veth1_macvtap: entered promiscuous mode [ 198.702928][ T9074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.709459][ T9074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.715380][ T5894] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.715488][ T5894] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.715518][ T5894] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.715536][ T5894] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.792482][ T182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.792497][ T182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.810452][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.810465][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.913471][ T9138] rxe_eth0 speed is unknown, defaulting to 1000 [ 198.997980][ T9138] ip6tnl0 speed is unknown, defaulting to 1000 [ 199.235434][ T67] Bluetooth: hci4: command tx timeout [ 199.373397][ T9138] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.373543][ T9138] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.373638][ T9138] bridge_slave_0: entered allmulticast mode [ 199.374980][ T9138] bridge_slave_0: entered promiscuous mode [ 199.377106][ T9138] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.377183][ T9138] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.377274][ T9138] bridge_slave_1: entered allmulticast mode [ 199.378878][ T9138] bridge_slave_1: entered promiscuous mode [ 199.401632][ T9170] netlink: 20 bytes leftover after parsing attributes in process `syz.4.859'. [ 199.417969][ T9160] syzkaller0: entered promiscuous mode [ 199.417986][ T9160] syzkaller0: entered allmulticast mode [ 199.419801][ T9138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.427054][ T9170] team0 (unregistering): Port device team_slave_0 removed [ 199.431089][ T9170] team0 (unregistering): Port device team_slave_1 removed [ 199.447727][ T9138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.511200][ T9138] team0: Port device team_slave_0 added [ 199.513322][ T9138] team0: Port device team_slave_1 added [ 199.531218][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.531231][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.531245][ T9138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.532229][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.532238][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.532252][ T9138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.550480][ T9138] hsr_slave_0: entered promiscuous mode [ 199.550900][ T9138] hsr_slave_1: entered promiscuous mode [ 199.551194][ T9138] debugfs: 'hsr0' already exists in 'hsr' [ 199.551204][ T9138] Cannot create hsr debugfs directory [ 199.610669][ T67] Bluetooth: hci0: unexpected event for opcode 0x200c [ 199.699268][ T9138] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.704132][ T9138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.704671][ T9138] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.711227][ T9138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.711658][ T9138] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 199.720905][ T9138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.721824][ T9138] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 199.724683][ T9138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.763431][ T9138] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.763519][ T9138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.763716][ T9138] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.763800][ T9138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.804473][ T9138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.814745][ T9138] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.820586][ T182] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.822026][ T182] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.850752][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.850800][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.865849][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.865989][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.258467][ T9138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.677033][ T67] Bluetooth: hci1: command tx timeout [ 200.681738][ T9138] veth0_vlan: entered promiscuous mode [ 200.688795][ T9138] veth1_vlan: entered promiscuous mode [ 200.710418][ T9138] veth0_macvtap: entered promiscuous mode [ 200.716329][ T9138] veth1_macvtap: entered promiscuous mode [ 200.730477][ T9138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.741011][ T9138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.767329][ T5894] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.767492][ T5894] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.767515][ T5894] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.767534][ T5894] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.915105][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.915123][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.031734][ T182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.031750][ T182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.162809][ T9249] tipc: Enabling of bearer rejected, already enabled [ 201.318575][ T67] Bluetooth: hci4: command tx timeout [ 201.340905][ T67] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 201.361718][ T9263] syzkaller0: entered promiscuous mode [ 201.361733][ T9263] syzkaller0: entered allmulticast mode [ 201.812198][ T9279] netlink: 'syz.2.868': attribute type 1 has an invalid length. [ 201.829125][ T9279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.843182][ T9279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.868'. [ 201.848138][ T9279] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.851310][ T9279] bond2: (slave team0): making interface the new active one [ 201.853130][ T9279] bond2: (slave team0): Enslaving as an active interface with an up link [ 201.939534][ T9282] syzkaller0: entered promiscuous mode [ 201.939549][ T9282] syzkaller0: entered allmulticast mode [ 201.949741][ T9282] tipc: Enabled bearer , priority 0 [ 201.956515][ T9281] tipc: Resetting bearer [ 201.964704][ T9281] tipc: Disabling bearer [ 201.989795][ T9284] rxe_eth0 speed is unknown, defaulting to 1000 [ 202.223216][ T9284] ip6tnl0 speed is unknown, defaulting to 1000 [ 202.756806][ T67] Bluetooth: hci1: command tx timeout [ 202.905688][ T9292] device-mapper: table: 248:6: linear: Device lookup failed (-ENOENT) [ 202.905705][ T9292] device-mapper: ioctl: error adding target to table [ 203.409857][ T67] Bluetooth: hci4: command tx timeout qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x195000) [ 203.477168][ T6006] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 203.491768][ T1131] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 203.491789][ T1131] ata1: failed to read log page 10h (errno=-5) [ 203.491805][ T1131] ata1.00: NCQ disabled due to excessive errors [ 203.491817][ T1131] ata1.00: exception Emask 0x1 SAct 0x1800 SErr 0x0 action 0x0 [ 203.491834][ T1131] ata1.00: irq_stat 0x40000000 [ 203.491849][ T1131] ata1.00: failed command: READ FPDMA QUEUED [ 203.491860][ T1131] ata1.00: cmd 60/a8:58:76:23:01/0c:00:00:00:00/40 tag 11 ncq dma 1658880 in [ 203.491860][ T1131] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 203.491911][ T1131] ata1.00: status: { DRDY } [ 203.491926][ T1131] ata1.00: failed command: READ FPDMA QUEUED [ 203.491936][ T1131] ata1.00: cmd 60/30:60:1e:30:01/06:00:00:00:00/40 tag 12 ncq dma 811008 in [ 203.491936][ T1131] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 203.491985][ T1131] ata1.00: status: { DRDY } [ 203.498627][ T1131] ata1.00: configured for UDMA/100 [ 203.499135][ T1131] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 203.499174][ T1131] sd 0:0:0:0: [sda] tag#11 Sense Key : Aborted Command [current] [ 203.499247][ T1131] sd 0:0:0:0: [sda] tag#11 Add. Sense: No additional sense information [ 203.499283][ T1131] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 01 23 76 00 0c a8 00 [ 203.499304][ T1131] I/O error, dev sda, sector 74614 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 203.502606][ T1131] sd 0:0:0:0: [sda] tag#12 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 203.502648][ T1131] sd 0:0:0:0: [sda] tag#12 Sense Key : Aborted Command [current] [ 203.502680][ T1131] sd 0:0:0:0: [sda] tag#12 Add. Sense: No additional sense information [ 203.502714][ T1131] sd 0:0:0:0: [sda] tag#12 CDB: Read(10) 28 00 00 01 30 1e 00 06 30 00 [ 203.502791][ T1131] I/O error, dev sda, sector 77854 op 0x0:(READ) flags 0x80700 phys_seg 88 prio class 2 [ 203.503025][ T1131] ata1: EH complete [ 203.646763][ T6006] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 203.647379][ T6006] usb 5-1: config 0 has no interfaces? [ 203.647409][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.678403][ T6006] usb 5-1: config 0 descriptor?? [ 203.773412][ T9300] udc usbip-vudc.0: failed to start g1: -19 [ 203.807460][ T9300] UDC core: g1: couldn't find an available UDC or it's busy [ 204.021165][ T43] audit: type=1804 audit(1794341385.719:228): pid=9310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.876" name="/newroot/213/file0" dev="fuse" ino=1 res=1 errno=0 [ 204.026613][ T5869] usb 5-1: USB disconnect, device number 11 [ 204.036968][ T9326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.036979][ T9326] IPv6: NLM_F_CREATE should be set when creating new route [ 204.076589][ T9326] FAULT_INJECTION: forcing a failure. [ 204.076589][ T9326] name failslab, interval 1, probability 0, space 0, times 0 [ 204.076612][ T9326] CPU: 0 UID: 0 PID: 9326 Comm: syz.5.879 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.076630][ T9326] Tainted: [L]=SOFTLOCKUP [ 204.076635][ T9326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.076658][ T9326] Call Trace: [ 204.076670][ T9326] [ 204.076676][ T9326] dump_stack_lvl+0x100/0x190 [ 204.076773][ T9326] should_fail_ex.cold+0x5/0xa [ 204.076815][ T9326] should_failslab+0xc2/0x120 [ 204.076859][ T9326] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 204.076881][ T9326] ? zswap_store+0xc81/0x2f90 [ 204.076904][ T9326] zswap_store+0xc81/0x2f90 [ 204.076928][ T9326] ? __pfx_zswap_store+0x10/0x10 [ 204.076953][ T9326] ? lock_acquire+0x1d1/0x380 [ 204.076968][ T9326] ? do_raw_spin_lock+0x128/0x260 [ 204.076985][ T9326] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 204.077001][ T9326] ? find_held_lock+0x2b/0x80 [ 204.077020][ T9326] ? swap_writeout+0xdc7/0x1b30 [ 204.077038][ T9326] ? swap_writeout+0xdc7/0x1b30 [ 204.077060][ T9326] swap_writeout+0xdcf/0x1b30 [ 204.077085][ T9326] shrink_folio_list+0x528c/0x59c0 [ 204.077111][ T9326] ? __pfx_shrink_folio_list+0x10/0x10 [ 204.077132][ T9326] ? __lock_acquire+0x560/0x1f40 [ 204.077166][ T9326] ? __lock_acquire+0x5c0/0x1f40 [ 204.077179][ T9326] ? trace_tlb_flush+0x14b/0x1a0 [ 204.077205][ T9326] reclaim_folio_list+0xe9/0x5e0 [ 204.077227][ T9326] ? __pfx_reclaim_folio_list+0x10/0x10 [ 204.077255][ T9326] ? lru_gen_update_size+0x3ea/0x12f0 [ 204.077277][ T9326] ? lru_gen_del_folio+0x3ea/0x720 [ 204.077297][ T9326] reclaim_pages+0x428/0x5e0 [ 204.077312][ T9326] ? __pfx_reclaim_pages+0x10/0x10 [ 204.077324][ T9326] ? find_held_lock+0x2b/0x80 [ 204.077342][ T9326] ? madvise_cold_or_pageout_pte_range+0xb6f/0x2600 [ 204.077364][ T9326] madvise_cold_or_pageout_pte_range+0x182e/0x2600 [ 204.077388][ T9326] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 204.077410][ T9326] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 204.077429][ T9326] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 204.077447][ T9326] walk_pgd_range+0xbef/0x1e00 [ 204.077469][ T9326] ? __pfx_clockevents_program_event+0x10/0x10 [ 204.077495][ T9326] ? __pfx_walk_pgd_range+0x10/0x10 [ 204.077513][ T9326] ? irqentry_exit+0x202/0xab0 [ 204.077595][ T9326] ? lockdep_hardirqs_on+0x7d/0x110 [ 204.077613][ T9326] ? irqentry_exit+0x202/0xab0 [ 204.077634][ T9326] __walk_page_range+0x171/0x850 [ 204.077661][ T9326] walk_page_range_vma_unsafe+0x209/0x8f0 [ 204.077684][ T9326] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 204.077707][ T9326] ? find_held_lock+0x2b/0x80 [ 204.077724][ T9326] ? mlock_drain_local+0x254/0x4e0 [ 204.077742][ T9326] ? mlock_drain_local+0x254/0x4e0 [ 204.077761][ T9326] walk_page_range_vma+0x63/0x90 [ 204.077781][ T9326] madvise_pageout+0x29e/0x5b0 [ 204.077797][ T9326] ? __pfx_madvise_pageout+0x10/0x10 [ 204.077841][ T9326] ? mt_find+0x728/0x9b0 [ 204.077853][ T9326] ? mt_find+0x728/0x9b0 [ 204.077868][ T9326] madvise_vma_behavior+0x41f/0x2170 [ 204.077887][ T9326] ? __pfx_mt_find+0x10/0x10 [ 204.077901][ T9326] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 204.077920][ T9326] ? find_vma_prev+0xd8/0x150 [ 204.077942][ T9326] ? find_vma+0xbf/0x140 [ 204.077954][ T9326] ? __pfx_find_vma+0x10/0x10 [ 204.077968][ T9326] madvise_walk_vmas+0x30e/0xf00 [ 204.077988][ T9326] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 204.078007][ T9326] ? __pfx_futex_wake_mark+0x10/0x10 [ 204.078024][ T9326] ? lock_acquire+0x1d1/0x380 [ 204.078040][ T9326] madvise_do_behavior+0x1ea/0x510 [ 204.078059][ T9326] ? __pfx_madvise_do_behavior+0x10/0x10 [ 204.078077][ T9326] ? down_read+0x136/0x4c0 [ 204.078097][ T9326] do_madvise+0x238/0x290 [ 204.078113][ T9326] ? __pfx_do_madvise+0x10/0x10 [ 204.078134][ T9326] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.078159][ T9326] ? __might_fault+0xc5/0x140 [ 204.078174][ T9326] ? __might_fault+0xc5/0x140 [ 204.078192][ T9326] __ia32_sys_madvise+0xa7/0x110 [ 204.078210][ T9326] __do_fast_syscall_32+0x14d/0x8e0 [ 204.078231][ T9326] do_fast_syscall_32+0x32/0x70 [ 204.078250][ T9326] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.078266][ T9326] RIP: 0023:0xf7f12fbc [ 204.078309][ T9326] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 204.078322][ T9326] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 204.078345][ T9326] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 00000000ffffffff [ 204.078355][ T9326] RDX: 0000000000000015 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.078362][ T9326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.078371][ T9326] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 204.078378][ T9326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.078396][ T9326] [ 204.191140][ T9328] IPVS: nq: FWM 3 0x00000003 - no destination available [ 204.191803][ T95] IPVS: starting estimator thread 0... [ 204.233492][ T9331] syzkaller0: entered promiscuous mode [ 204.233514][ T9331] syzkaller0: entered allmulticast mode [ 204.307661][ T9329] IPVS: using max 42 ests per chain, 100800 per kthread [ 204.845862][ T67] Bluetooth: hci1: command tx timeout [ 204.858968][ T9339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.883'. [ 204.971577][ T9348] syzkaller0: entered promiscuous mode [ 204.971592][ T9348] syzkaller0: entered allmulticast mode [ 205.407187][ T67] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 205.407229][ T67] Bluetooth: hci3: Injecting HCI hardware error event [ 205.408800][ T67] Bluetooth: hci3: hardware error 0x00 [ 205.477850][ T5806] Bluetooth: hci4: command tx timeout [ 206.915960][ T5806] Bluetooth: hci1: command tx timeout [ 207.028967][ T5806] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 207.039318][ T9379] netlink: 'syz.5.894': attribute type 4 has an invalid length. [ 207.237172][ T9384] netlink: 16 bytes leftover after parsing attributes in process `syz.5.897'. [ 207.765306][ T43] audit: type=1326 audit(1794341389.459:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.2.900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fbc code=0x7ffc0000 [ 207.765681][ T43] audit: type=1326 audit(1794341389.459:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.2.900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fbc code=0x7ffc0000 [ 207.770435][ T43] audit: type=1326 audit(1794341389.469:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.2.900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fbc code=0x7ffc0000 [ 207.771440][ T43] audit: type=1326 audit(1794341389.469:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.2.900" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f66fbc code=0x7ffc0000 [ 207.771667][ T43] audit: type=1326 audit(1794341389.469:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.2.900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fbc code=0x7ffc0000 [ 207.771786][ T43] audit: type=1326 audit(1794341389.469:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.2.900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fbc code=0x7ffc0000 [ 207.771929][ T43] audit: type=1326 audit(1794341389.469:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.2.900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fbc code=0x7ffc0000 [ 207.772716][ T43] audit: type=1326 audit(1794341389.469:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.2.900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fbc code=0x7ffc0000 [ 207.773248][ T43] audit: type=1326 audit(1794341389.469:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.2.900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fbc code=0x7ffc0000 [ 207.800302][ T67] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 207.998310][ T9398] pci_bus 0000:01: busn_res: [bus 01] is released [ 208.008890][ T9401] overlayfs: failed to resolve './file2': -2 [ 208.057780][ T9401] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 208.070194][ T9401] pci 0000:00:04.0: PCI bridge to [bus 01] [ 208.070390][ T9401] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 208.070598][ T9401] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 208.071827][ T9401] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 208.074770][ T9401] pci 0000:00:04.0: enabling Extended Tags [ 208.097044][ T9401] pci 0000:00:04.0: Adding to iommu group 4 [ 208.129050][ T9401] pci 0000:00:04.0: PCI bridge to [bus 01] [ 208.134965][ T9401] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 208.135000][ T9401] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 208.135075][ T9401] pci 0000:00:04.0: bridge window [mem 0x80100000-0x802fffff]: assigned [ 208.135091][ T9401] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 208.135121][ T9401] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 208.135464][ T9401] pci 0000:00:04.0: PCI bridge to [bus 01] [ 208.135531][ T9401] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 208.139653][ T9401] pci 0000:00:04.0: bridge window [mem 0x80100000-0x802fffff] [ 208.144307][ T9401] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 208.358215][ T9401] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 208.733046][ T9413] netlink: 144 bytes leftover after parsing attributes in process `syz.0.905'. [ 208.933001][ T9415] syz_tun: entered allmulticast mode [ 208.934610][ T9415] syz_tun: left allmulticast mode [ 209.205306][ T9423] tipc: Enabled bearer , priority 10 [ 209.438037][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 210.095453][ T9440] pimreg: entered allmulticast mode [ 210.174053][ T9442] netlink: 'syz.4.914': attribute type 39 has an invalid length. [ 210.228685][ T9447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.228703][ T9447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.233576][ T9447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.233594][ T9447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.363373][ T9449] block nbd0: Unsupported socket: should be TCP or UNIX. [ 211.626713][ T9465] udc usbip-vudc.0: failed to start g1: -19 [ 211.627156][ T9465] UDC core: g1: couldn't find an available UDC or it's busy [ 211.701819][ T9471] FAULT_INJECTION: forcing a failure. [ 211.701819][ T9471] name failslab, interval 1, probability 0, space 0, times 0 [ 211.701856][ T9471] CPU: 1 UID: 0 PID: 9471 Comm: syz.4.924 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.701882][ T9471] Tainted: [L]=SOFTLOCKUP [ 211.701889][ T9471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.701901][ T9471] Call Trace: [ 211.701907][ T9471] [ 211.701915][ T9471] dump_stack_lvl+0x100/0x190 [ 211.701947][ T9471] should_fail_ex.cold+0x5/0xa [ 211.701975][ T9471] should_failslab+0xc2/0x120 [ 211.701997][ T9471] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 211.702021][ T9471] ? kstrdup_const+0x63/0x80 [ 211.702048][ T9471] kstrdup+0x51/0xe0 [ 211.702070][ T9471] kstrdup_const+0x63/0x80 [ 211.702092][ T9471] __kernfs_new_node+0x9b/0xa10 [ 211.702143][ T9471] ? __pfx___kernfs_new_node+0x10/0x10 [ 211.702166][ T9471] ? lock_acquire+0x1d1/0x380 [ 211.702186][ T9471] ? kernfs_root+0x23/0x2a0 [ 211.702214][ T9471] ? find_held_lock+0x2b/0x80 [ 211.702266][ T9471] ? kernfs_root+0xee/0x2a0 [ 211.702294][ T9471] ? kernfs_root+0xee/0x2a0 [ 211.702329][ T9471] kernfs_new_node+0x194/0x200 [ 211.702350][ T9471] ? __pfx_kernfs_new_node+0x10/0x10 [ 211.702377][ T9471] __kernfs_create_file+0x53/0x350 [ 211.702403][ T9471] sysfs_add_file_mode_ns+0x207/0x3c0 [ 211.702435][ T9471] internal_create_group+0x593/0xfb0 [ 211.702470][ T9471] ? __pfx_internal_create_group+0x10/0x10 [ 211.702496][ T9471] ? __pfx_kobject_add+0x10/0x10 [ 211.702528][ T9471] internal_create_groups+0x9d/0x150 [ 211.702559][ T9471] ib_setup_port_attrs+0x41f/0x600 [ 211.702654][ T9471] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 211.702682][ T9471] ? rdma_counter_init+0x209/0x400 [ 211.702718][ T9471] ib_register_device+0x8a7/0xdd0 [ 211.702747][ T9471] siw_newlink+0xb44/0xe70 [ 211.702798][ T9471] nldev_newlink+0x3b0/0x630 [ 211.702822][ T9471] ? __pfx_nldev_newlink+0x10/0x10 [ 211.702926][ T9471] ? lock_acquire+0x1d1/0x380 [ 211.702947][ T9471] ? rdma_nl_rcv_msg+0x168/0x6f0 [ 211.702969][ T9471] ? hook_capable+0x1bc/0x500 [ 211.703017][ T9471] ? security_capable+0x80/0x260 [ 211.703043][ T9471] ? ns_capable+0xcd/0xf0 [ 211.703061][ T9471] ? __pfx_nldev_newlink+0x10/0x10 [ 211.703083][ T9471] rdma_nl_rcv_msg+0x392/0x6f0 [ 211.703105][ T9471] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 211.703128][ T9471] ? __lock_acquire+0x5c0/0x1f40 [ 211.703155][ T9471] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 211.703180][ T9471] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 211.703212][ T9471] ? netlink_deliver_tap+0x1ae/0xb50 [ 211.703255][ T9471] netlink_unicast+0x668/0x950 [ 211.703278][ T9471] ? __pfx_netlink_unicast+0x10/0x10 [ 211.703305][ T9471] netlink_sendmsg+0x9ac/0x10c0 [ 211.703329][ T9471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.703355][ T9471] ? apparmor_socket_sendmsg+0x165/0x280 [ 211.703384][ T9471] ? ____sys_sendmsg+0xa99/0xc30 [ 211.703406][ T9471] ____sys_sendmsg+0xa99/0xc30 [ 211.703426][ T9471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.703449][ T9471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.703484][ T9471] ___sys_sendmsg+0x190/0x1e0 [ 211.703509][ T9471] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.703533][ T9471] ? futex_wait+0x11e/0x370 [ 211.703563][ T9471] ? find_held_lock+0x2b/0x80 [ 211.703606][ T9471] __sys_sendmsg+0x160/0x210 [ 211.703635][ T9471] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.703678][ T9471] __do_fast_syscall_32+0x14d/0x8e0 [ 211.703710][ T9471] do_fast_syscall_32+0x32/0x70 [ 211.703738][ T9471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.703761][ T9471] RIP: 0023:0xf740efbc [ 211.703778][ T9471] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 211.703796][ T9471] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 211.703815][ T9471] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000700 [ 211.703828][ T9471] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.703845][ T9471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.703857][ T9471] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 211.703869][ T9471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.703896][ T9471] [ 211.718470][ T9471] infiniband syz2: Couldn't register device with driver model [ 211.727857][ T9471] siw: device registration error -12 [ 211.884178][ T9467] raw_sendmsg: syz.2.922 forgot to set AF_INET. Fix it! [ 212.283150][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 212.289158][ T9504] TCP: TCP_TX_DELAY enabled [ 212.429057][ T9509] syzkaller0: entered promiscuous mode [ 212.429071][ T9509] syzkaller0: entered allmulticast mode [ 212.631031][ T9514] fuse: fd is not a fuse device [ 213.429283][ T9519] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 213.765030][ T9530] tipc: New replicast peer: 172.20.20.187 [ 213.766743][ T9530] tipc: Enabled bearer , priority 10 [ 214.062634][ T9542] syzkaller0: entered promiscuous mode [ 214.062649][ T9542] syzkaller0: entered allmulticast mode [ 214.561197][ T9564] syzkaller0: entered promiscuous mode [ 214.561212][ T9564] syzkaller0: entered allmulticast mode [ 214.762920][ T9570] rxe_eth0 speed is unknown, defaulting to 1000 [ 214.807438][ T9568] fuse: fd is not a fuse device [ 214.904833][ T9575] overlayfs: failed to resolve './file2': -2 [ 214.909957][ T9570] ip6tnl0 speed is unknown, defaulting to 1000 [ 214.973884][ T9578] netlink: 'syz.2.955': attribute type 3 has an invalid length. [ 215.011368][ T9581] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:286 [ 215.035853][ T25] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 215.112469][ T9587] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 215.117776][ T9587] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 215.117836][ T9587] pci 0000:00:03.0: BAR 1 [mem 0xfeaf7000-0xfeaf7fff] [ 215.118036][ T9587] pci 0000:00:03.0: BAR 4 [mem 0xfe200000-0xfe203fff 64bit pref] [ 215.124979][ T9587] pci 0000:00:03.0: Adding to iommu group 3 [ 215.140346][ T9587] pci 0000:00:03.0: BAR 4 [mem 0x580200000-0x580203fff 64bit pref]: assigned [ 215.144204][ T9587] pci 0000:00:03.0: BAR 1 [mem 0x80085000-0x80085fff]: assigned [ 215.145082][ T9587] pci 0000:00:03.0: BAR 0 [io 0x2020-0x203f]: assigned [ 215.176201][ T9581] veth1_macvtap: left promiscuous mode [ 215.176220][ T9581] macsec0: entered allmulticast mode [ 215.195274][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 215.195733][ T25] usb 10-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 215.196674][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 215.198333][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.198346][ T25] usb 10-1: Product: syz [ 215.198354][ T25] usb 10-1: Manufacturer: syz [ 215.198362][ T25] usb 10-1: SerialNumber: syz [ 215.202361][ T25] usb 10-1: config 0 descriptor?? [ 215.209347][ T25] hub 10-1:0.0: bad descriptor, ignoring hub [ 215.209361][ T25] hub 10-1:0.0: probe with driver hub failed with error -5 [ 215.210869][ T25] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.669809][ T25] usb 10-1: USB disconnect, device number 2 [ 216.365353][ T9627] trusted_key: encrypted_key: master key parameter is missing [ 216.426586][ T9616] FAULT_INJECTION: forcing a failure. [ 216.426586][ T9616] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 216.426618][ T9616] CPU: 1 UID: 0 PID: 9616 Comm: syz.0.967 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.426645][ T9616] Tainted: [L]=SOFTLOCKUP [ 216.426653][ T9616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.426664][ T9616] Call Trace: [ 216.426672][ T9616] [ 216.426680][ T9616] dump_stack_lvl+0x100/0x190 [ 216.426718][ T9616] should_fail_ex.cold+0x5/0xa [ 216.426746][ T9616] should_fail_alloc_page+0xeb/0x140 [ 216.426771][ T9616] prepare_alloc_pages+0x1f0/0x5b0 [ 216.426800][ T9616] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 216.426833][ T9616] ? mark_held_locks+0x40/0x70 [ 216.426853][ T9616] ? smp_call_function_many_cond+0x1458/0x18c0 [ 216.426879][ T9616] ? lockdep_hardirqs_on+0x7d/0x110 [ 216.426906][ T9616] ? __pfx_flush_tlb_func+0x10/0x10 [ 216.426931][ T9616] ? smp_call_function_many_cond+0x944/0x18c0 [ 216.426957][ T9616] ? __pfx_should_flush_tlb+0x10/0x10 [ 216.426976][ T9616] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 216.427018][ T9616] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 216.427038][ T9616] ? rcu_is_watching+0x13/0xc0 [ 216.427056][ T9616] ? trace_tlb_flush+0x14b/0x1a0 [ 216.427077][ T9616] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 216.427094][ T9616] ? policy_nodemask+0xed/0x5e0 [ 216.427111][ T9616] alloc_pages_mpol+0x201/0x560 [ 216.427129][ T9616] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 216.427149][ T9616] folio_alloc_mpol_noprof+0x36/0x260 [ 216.427168][ T9616] vma_alloc_folio_noprof+0xed/0x1d0 [ 216.427187][ T9616] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 216.427210][ T9616] do_wp_page+0x1c19/0x46c0 [ 216.427227][ T9616] ? __pfx___pte_offset_map+0x10/0x10 [ 216.427238][ T9616] ? is_bpf_text_address+0x25/0x1a0 [ 216.427254][ T9616] ? __pfx_do_wp_page+0x10/0x10 [ 216.427269][ T9616] ? do_raw_spin_lock+0x128/0x260 [ 216.427285][ T9616] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 216.427300][ T9616] ? __pfx_pgd_none+0x10/0x10 [ 216.427318][ T9616] __handle_mm_fault+0x1d72/0x2f40 [ 216.427337][ T9616] ? __pfx___handle_mm_fault+0x10/0x10 [ 216.427352][ T9616] ? __pfx_mt_find+0x10/0x10 [ 216.427373][ T9616] ? find_vma+0xbf/0x140 [ 216.427383][ T9616] ? __pfx_find_vma+0x10/0x10 [ 216.427396][ T9616] handle_mm_fault+0x363/0xa30 [ 216.427428][ T9616] do_user_addr_fault+0x745/0x12f0 [ 216.427454][ T9616] exc_page_fault+0x6f/0xd0 [ 216.427473][ T9616] asm_exc_page_fault+0x26/0x30 [ 216.427486][ T9616] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 216.427503][ T9616] Code: c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 216.427517][ T9616] RSP: 0000:ffffc90004327aa8 EFLAGS: 00050206 [ 216.427528][ T9616] RAX: 0000000000000000 RBX: 0000000000000a80 RCX: 0000000000000500 [ 216.427536][ T9616] RDX: 0000000000080000 RSI: ffffffff826861b1 RDI: 00000000f5456000 [ 216.427543][ T9616] RBP: ffff8880259ba580 R08: 0000000000063ab9 R09: 00000000000001dc [ 216.427551][ T9616] R10: 0000000000000200 R11: 0000000000000000 R12: dffffc0000000000 [ 216.427558][ T9616] R13: 00000000f5455a80 R14: ffff8880259bc040 R15: ffff8880259bc040 [ 216.427570][ T9616] ? __might_fault+0x111/0x140 [ 216.427589][ T9616] copy_fpstate_to_sigframe+0x31d/0xb60 [ 216.427616][ T9616] ? do_dec_rlimit_put_ucounts+0xfc/0x150 [ 216.427635][ T9616] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 216.427649][ T9616] ? __sigqueue_free+0xc3/0x2a0 [ 216.427666][ T9616] ? collect_signal+0x271/0x550 [ 216.427683][ T9616] ? x86_task_fpu+0x5f/0x90 [ 216.427704][ T9616] get_sigframe+0x3fb/0x940 [ 216.427732][ T9616] ? __pfx_get_sigframe+0x10/0x10 [ 216.427751][ T9616] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.427770][ T9616] ? siginfo_layout+0x156/0x290 [ 216.427797][ T9616] ? get_signal+0x173/0x22e0 [ 216.427818][ T9616] ia32_setup_frame+0xe5/0x990 [ 216.427845][ T9616] ? __pfx_ia32_setup_frame+0x10/0x10 [ 216.427869][ T9616] ? __do_compat_sys_waitid+0x180/0x250 [ 216.427896][ T9616] arch_do_signal_or_restart+0x571/0x7a0 [ 216.427928][ T9616] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 216.427973][ T9616] exit_to_user_mode_loop+0x139/0x700 [ 216.428006][ T9616] ? rcu_is_watching+0x13/0xc0 [ 216.428038][ T9616] __do_fast_syscall_32+0x651/0x8e0 [ 216.428073][ T9616] do_fast_syscall_32+0x32/0x70 [ 216.428104][ T9616] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.428128][ T9616] RIP: 0023:0xf743efbc [ 216.428144][ T9616] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 216.428161][ T9616] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 000000000000011c [ 216.428179][ T9616] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 216.428189][ T9616] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 216.428200][ T9616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 216.428210][ T9616] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 216.428221][ T9616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.428247][ T9616] [ 216.462168][ T9629] tipc: Started in network mode [ 216.462185][ T9629] tipc: Node identity ac14140f, cluster identity 4711 [ 216.462421][ T9629] tipc: New replicast peer: 255.255.255.255 [ 216.462817][ T9629] tipc: Enabled bearer , priority 10 [ 216.710368][ T9633] tipc: Bearer : already 2 bearers with priority 10 [ 216.710382][ T9633] tipc: Bearer : trying with adjusted priority [ 216.710425][ T9633] tipc: Enabling of bearer rejected, failed to enable media [ 216.807715][ T9637] syzkaller0: entered promiscuous mode [ 216.807729][ T9637] syzkaller0: entered allmulticast mode [ 217.465427][ T25] tipc: Node number set to 2886997007 [ 217.794003][ T9655] netlink: 'syz.2.980': attribute type 39 has an invalid length. [ 217.849235][ T9657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.849251][ T9657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.098197][ T9662] overlayfs: failed to clone upperpath [ 218.236660][ T9664] netlink: 14 bytes leftover after parsing attributes in process `syz.2.984'. [ 218.325937][ T9668] warning: `syz.4.986' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 218.427742][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'. [ 218.439241][ T9674] bond1: entered promiscuous mode [ 218.439482][ T9674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.507492][ T9674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.507817][ T9674] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 218.508462][ T9674] bond1: (slave sit1): Error -95 calling set_mac_address [ 218.825437][ T5869] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 218.975361][ T5869] usb 9-1: Using ep0 maxpacket: 8 [ 218.978147][ T5869] usb 9-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 218.979319][ T5869] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.979337][ T5869] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 218.979372][ T5869] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 218.979396][ T5869] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 218.979430][ T5869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.006967][ T5869] hub 9-1:1.0: bad descriptor, ignoring hub [ 219.006991][ T5869] hub 9-1:1.0: probe with driver hub failed with error -5 [ 219.007418][ T5869] cdc_wdm 9-1:1.0: skipping garbage [ 219.007429][ T5869] cdc_wdm 9-1:1.0: skipping garbage [ 219.030983][ T5869] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 219.030996][ T5869] cdc_wdm 9-1:1.0: Unknown control protocol [ 219.787127][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 220.268128][ T9743] Trying to write to read-only block-device nullb0 [ 221.434855][ T95] IPVS: starting estimator thread 0... [ 221.525340][ T9757] IPVS: using max 42 ests per chain, 100800 per kthread [ 221.648014][ T25] usb 9-1: USB disconnect, device number 2 [ 222.261307][ T9759] FAULT_INJECTION: forcing a failure. [ 222.261307][ T9759] name fail_futex, interval 1, probability 0, space 0, times 1 [ 222.261340][ T9759] CPU: 0 UID: 0 PID: 9759 Comm: syz.0.1010 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.261369][ T9759] Tainted: [L]=SOFTLOCKUP [ 222.261376][ T9759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.261388][ T9759] Call Trace: [ 222.261394][ T9759] [ 222.261402][ T9759] dump_stack_lvl+0x100/0x190 [ 222.261437][ T9759] should_fail_ex.cold+0x5/0xa [ 222.261466][ T9759] get_futex_key+0x28c/0x13e0 [ 222.261493][ T9759] ? __pfx_get_futex_key+0x10/0x10 [ 222.261516][ T9759] ? __mutex_unlock_slowpath+0x35d/0x930 [ 222.261547][ T9759] futex_wake+0xf4/0x5e0 [ 222.261573][ T9759] ? __pfx_futex_wake+0x10/0x10 [ 222.261597][ T9759] ? detach_task_ctx_data+0x83/0x490 [ 222.261624][ T9759] do_futex+0x2b2/0x440 [ 222.261655][ T9759] ? __pfx_do_futex+0x10/0x10 [ 222.261678][ T9759] ? __might_fault+0xc5/0x140 [ 222.261706][ T9759] mm_exit_exec_release+0x256/0x2f0 [ 222.261728][ T9759] do_exit+0x6d8/0x2a00 [ 222.261752][ T9759] ? __pfx_futex_wake_mark+0x10/0x10 [ 222.261776][ T9759] ? __pfx_do_exit+0x10/0x10 [ 222.261800][ T9759] ? do_raw_spin_lock+0x128/0x260 [ 222.261825][ T9759] ? find_held_lock+0x2b/0x80 [ 222.261852][ T9759] ? get_signal+0xa28/0x22e0 [ 222.261872][ T9759] do_group_exit+0xd5/0x2a0 [ 222.261896][ T9759] get_signal+0x1f58/0x22e0 [ 222.261911][ T9759] ? __pfx_futex_wait+0x10/0x10 [ 222.261952][ T9759] ? find_held_lock+0x2b/0x80 [ 222.261982][ T9759] ? __pfx_get_signal+0x10/0x10 [ 222.262003][ T9759] ? do_futex+0x190/0x440 [ 222.262035][ T9759] arch_do_signal_or_restart+0x91/0x7a0 [ 222.262065][ T9759] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 222.262105][ T9759] exit_to_user_mode_loop+0x139/0x700 [ 222.262127][ T9759] ? rcu_is_watching+0x13/0xc0 [ 222.262158][ T9759] __do_fast_syscall_32+0x651/0x8e0 [ 222.262191][ T9759] do_fast_syscall_32+0x32/0x70 [ 222.262243][ T9759] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.262266][ T9759] RIP: 0023:0xf743efbc [ 222.262279][ T9759] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 222.262296][ T9759] RSP: 002b:00000000f54355bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 222.262314][ T9759] RAX: fffffffffffffe00 RBX: 00000000f7465020 RCX: 0000000000000080 [ 222.262326][ T9759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7465024 [ 222.262339][ T9759] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 222.262349][ T9759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.262360][ T9759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.262386][ T9759] [ 222.822444][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1014'. [ 223.627573][ T117] ------------[ cut here ]------------ [ 223.627589][ T117] current->flags & PF_MEMALLOC [ 223.627618][ T117] WARNING: mm/page_alloc.c:4824 at __alloc_frozen_pages_noprof+0x1e0b/0x31e0, CPU#2: kswapd1/117 [ 223.636153][ T117] Modules linked in: [ 223.637903][ T117] CPU: 2 UID: 0 PID: 117 Comm: kswapd1 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.642300][ T117] Tainted: [L]=SOFTLOCKUP [ 223.644103][ T117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.648474][ T117] RIP: 0010:__alloc_frozen_pages_noprof+0x1e0b/0x31e0 [ 223.651284][ T117] Code: 38 d0 7c 08 84 d2 0f 85 56 13 00 00 65 48 8b 05 43 7c 41 13 c7 84 24 a0 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 0d e7 ff ff 90 <0f> 0b 90 e9 04 e7 ff ff 90 0f 0b 90 e9 63 f8 ff ff 8b 84 24 a0 00 [ 223.659688][ T117] RSP: 0018:ffffc900021e6d48 EFLAGS: 00010202 [ 223.662252][ T117] RAX: ffff888041ef8000 RBX: 0000000000000000 RCX: 1ffff1100fffad69 [ 223.665601][ T117] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888041ef802c [ 223.669109][ T117] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000002de8 [ 223.671742][ T117] R10: ffff88807ffd7217 R11: 0000000000000001 R12: 0000000000000000 [ 223.674317][ T117] R13: 0000000000000000 R14: ffffffff9cca2064 R15: 0000000000048c40 [ 223.677947][ T117] FS: 0000000000000000(0000) GS:ffff888095479000(0000) knlGS:0000000000000000 [ 223.681848][ T117] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.684721][ T117] CR2: 00000000f7124f30 CR3: 000000004fdd4000 CR4: 0000000000352ef0 [ 223.688050][ T117] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 223.691301][ T117] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 223.694575][ T117] Call Trace: [ 223.696053][ T117] [ 223.697320][ T117] ? lru_gen_look_around+0x370/0x1240 [ 223.699605][ T117] ? reacquire_held_locks+0xdd/0x1f0 [ 223.701809][ T117] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 223.704469][ T117] ? find_held_lock+0x2b/0x80 [ 223.706487][ T117] ? folio_referenced_one+0x121c/0x17d0 [ 223.708740][ T117] ? folio_referenced_one+0x121c/0x17d0 [ 223.710460][ T117] ? do_raw_spin_unlock+0x145/0x1e0 [ 223.712096][ T117] ? folio_referenced_one+0x47b/0x17d0 [ 223.714334][ T117] ? __lock_acquire+0x5c0/0x1f40 [ 223.716454][ T117] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 223.719083][ T117] ? policy_nodemask+0xed/0x5e0 [ 223.721157][ T117] alloc_pages_mpol+0x201/0x560 [ 223.723395][ T117] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 223.725751][ T117] ? filemap_get_entry+0x22d/0x450 [ 223.727710][ T117] ? filemap_get_entry+0x22d/0x450 [ 223.729630][ T117] folio_alloc_noprof+0x22/0x250 [ 223.731395][ T117] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 223.733240][ T117] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 223.735385][ T117] ? lock_acquire+0x1d1/0x380 [ 223.736809][ T117] ? ext4_get_group_info+0x177/0x4b0 [ 223.738470][ T117] ? find_held_lock+0x2b/0x80 [ 223.739987][ T117] __filemap_get_folio_mpol+0x64e/0x11d0 [ 223.741743][ T117] ext4_mb_load_buddy_gfp+0x708/0x1b20 [ 223.743476][ T117] ext4_discard_preallocations+0x584/0x10c0 [ 223.745390][ T117] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 223.747363][ T117] ? __pfx_xa_destroy+0x10/0x10 [ 223.748930][ T117] ? inode_wait_for_writeback+0x171/0x390 [ 223.750712][ T117] ? inode_lru_isolate+0x30/0x11d0 [ 223.752279][ T117] ext4_clear_inode+0x6e/0x280 [ 223.753756][ T117] ext4_evict_inode+0x1de/0x1890 [ 223.755401][ T117] ? evict+0x37e/0xad0 [ 223.756707][ T117] ? __pfx_ext4_evict_inode+0x10/0x10 [ 223.758668][ T117] evict+0x3c2/0xad0 [ 223.759930][ T117] ? _raw_spin_unlock+0x28/0x50 [ 223.761434][ T117] ? __list_lru_walk_one+0x26d/0x550 [ 223.763040][ T117] ? __pfx_evict+0x10/0x10 [ 223.764420][ T117] ? xa_load+0x149/0x2c0 [ 223.765766][ T117] ? xa_load+0x149/0x2c0 [ 223.767043][ T117] dispose_list+0x117/0x1e0 [ 223.768471][ T117] prune_icache_sb+0xea/0x150 [ 223.770402][ T117] ? list_lru_count_one+0x147/0x320 [ 223.772600][ T117] ? __pfx_prune_icache_sb+0x10/0x10 [ 223.774563][ T117] super_cache_scan+0x37c/0x560 [ 223.776116][ T117] do_shrink_slab+0x411/0x1200 [ 223.777539][ T117] shrink_slab+0xa78/0x12d0 [ 223.779100][ T117] ? shrink_slab+0x68b/0x12d0 [ 223.780582][ T117] ? __pfx_shrink_slab+0x10/0x10 [ 223.782138][ T117] ? lock_acquire+0x1d1/0x380 [ 223.783619][ T117] shrink_one+0x3d3/0x870 [ 223.784982][ T117] ? shrink_node+0x2a41/0x4410 [ 223.786517][ T117] shrink_node+0x2a61/0x4410 [ 223.787915][ T117] ? __lock_acquire+0x5c0/0x1f40 [ 223.789519][ T117] ? shrink_node+0x276d/0x4410 [ 223.791289][ T117] ? __pfx_shrink_node+0x10/0x10 [ 223.792852][ T117] ? find_held_lock+0x2b/0x80 [ 223.794470][ T117] ? balance_pgdat+0xa9e/0x1e60 [ 223.796077][ T117] balance_pgdat+0xa9e/0x1e60 [ 223.797570][ T117] ? __pfx_balance_pgdat+0x10/0x10 [ 223.799266][ T117] ? __lock_acquire+0x5c0/0x1f40 [ 223.800858][ T117] ? rcu_is_watching+0x13/0xc0 [ 223.802403][ T117] kswapd+0x556/0xb50 [ 223.803676][ T117] ? __pfx_kswapd+0x10/0x10 [ 223.805116][ T117] ? __rcu_read_lock+0x50/0x70 [ 223.806765][ T117] ? __pfx_autoremove_wake_function+0x10/0x10 [ 223.808996][ T117] ? __kthread_parkme+0x18f/0x230 [ 223.811208][ T117] ? kthread+0x13a/0x450 [ 223.813004][ T117] ? __pfx_kswapd+0x10/0x10 [ 223.814871][ T117] kthread+0x373/0x450 [ 223.816663][ T117] ? __pfx_kthread+0x10/0x10 [ 223.818652][ T117] ret_from_fork+0x730/0xd60 [ 223.820637][ T117] ? __pfx_ret_from_fork+0x10/0x10 [ 223.822810][ T117] ? __switch_to+0x800/0x10e0 [ 223.824712][ T117] ? __pfx_kthread+0x10/0x10 [ 223.826648][ T117] ret_from_fork_asm+0x1a/0x30 [ 223.828692][ T117] [ 223.829992][ T117] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 223.832981][ T117] CPU: 2 UID: 0 PID: 117 Comm: kswapd1 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.837288][ T117] Tainted: [L]=SOFTLOCKUP [ 223.839146][ T117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.843024][ T117] Call Trace: [ 223.844083][ T117] [ 223.845027][ T117] dump_stack_lvl+0x100/0x190 [ 223.846530][ T117] vpanic+0x2dc/0x6f8 [ 223.847852][ T117] panic+0xd1/0xe0 [ 223.849074][ T117] ? __pfx_panic+0x10/0x10 [ 223.850509][ T117] check_panic_on_warn.cold+0x19/0x34 [ 223.852423][ T117] ? __alloc_frozen_pages_noprof+0x1e0b/0x31e0 [ 223.854367][ T117] __warn.cold+0x191/0x321 [ 223.855779][ T117] __report_bug+0x30f/0x440 [ 223.857312][ T117] ? __alloc_frozen_pages_noprof+0x1e0b/0x31e0 [ 223.859550][ T117] ? __pfx___report_bug+0x10/0x10 [ 223.861515][ T117] ? __zone_watermark_ok+0x281/0x500 [ 223.863346][ T117] ? get_page_from_freelist+0x511/0x2c80 [ 223.865096][ T117] ? __pte_offset_map+0x9a/0x470 [ 223.866718][ T117] ? __alloc_frozen_pages_noprof+0x1e0b/0x31e0 [ 223.869178][ T117] report_bug+0xb3/0x220 [ 223.871135][ T117] ? __alloc_frozen_pages_noprof+0x1e0b/0x31e0 [ 223.873735][ T117] handle_bug+0x16a/0x2a0 [ 223.875798][ T117] exc_invalid_op+0x17/0x50 [ 223.877843][ T117] asm_exc_invalid_op+0x1a/0x20 [ 223.879910][ T117] RIP: 0010:__alloc_frozen_pages_noprof+0x1e0b/0x31e0 [ 223.882754][ T117] Code: 38 d0 7c 08 84 d2 0f 85 56 13 00 00 65 48 8b 05 43 7c 41 13 c7 84 24 a0 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 0d e7 ff ff 90 <0f> 0b 90 e9 04 e7 ff ff 90 0f 0b 90 e9 63 f8 ff ff 8b 84 24 a0 00 [ 223.889790][ T117] RSP: 0018:ffffc900021e6d48 EFLAGS: 00010202 [ 223.891771][ T117] RAX: ffff888041ef8000 RBX: 0000000000000000 RCX: 1ffff1100fffad69 [ 223.894627][ T117] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888041ef802c [ 223.897083][ T117] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000002de8 [ 223.899612][ T117] R10: ffff88807ffd7217 R11: 0000000000000001 R12: 0000000000000000 [ 223.902497][ T117] R13: 0000000000000000 R14: ffffffff9cca2064 R15: 0000000000048c40 [ 223.905033][ T117] ? __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 223.907118][ T117] ? lru_gen_look_around+0x370/0x1240 [ 223.908844][ T117] ? reacquire_held_locks+0xdd/0x1f0 [ 223.910508][ T117] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 223.912484][ T117] ? find_held_lock+0x2b/0x80 [ 223.913999][ T117] ? folio_referenced_one+0x121c/0x17d0 [ 223.916337][ T117] ? folio_referenced_one+0x121c/0x17d0 [ 223.918724][ T117] ? do_raw_spin_unlock+0x145/0x1e0 [ 223.921165][ T117] ? folio_referenced_one+0x47b/0x17d0 [ 223.923479][ T117] ? __lock_acquire+0x5c0/0x1f40 [ 223.925625][ T117] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 223.928145][ T117] ? policy_nodemask+0xed/0x5e0 [ 223.930208][ T117] alloc_pages_mpol+0x201/0x560 [ 223.931952][ T117] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 223.933641][ T117] ? filemap_get_entry+0x22d/0x450 [ 223.935257][ T117] ? filemap_get_entry+0x22d/0x450 [ 223.936860][ T117] folio_alloc_noprof+0x22/0x250 [ 223.938454][ T117] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 223.940453][ T117] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 223.942901][ T117] ? lock_acquire+0x1d1/0x380 [ 223.944441][ T117] ? ext4_get_group_info+0x177/0x4b0 [ 223.946125][ T117] ? find_held_lock+0x2b/0x80 [ 223.947727][ T117] __filemap_get_folio_mpol+0x64e/0x11d0 [ 223.949840][ T117] ext4_mb_load_buddy_gfp+0x708/0x1b20 [ 223.951933][ T117] ext4_discard_preallocations+0x584/0x10c0 [ 223.953781][ T117] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 223.955750][ T117] ? __pfx_xa_destroy+0x10/0x10 [ 223.957292][ T117] ? inode_wait_for_writeback+0x171/0x390 [ 223.959053][ T117] ? inode_lru_isolate+0x30/0x11d0 [ 223.960617][ T117] ext4_clear_inode+0x6e/0x280 [ 223.962131][ T117] ext4_evict_inode+0x1de/0x1890 [ 223.964237][ T117] ? evict+0x37e/0xad0 [ 223.965729][ T117] ? __pfx_ext4_evict_inode+0x10/0x10 [ 223.967415][ T117] evict+0x3c2/0xad0 [ 223.968708][ T117] ? _raw_spin_unlock+0x28/0x50 [ 223.970251][ T117] ? __list_lru_walk_one+0x26d/0x550 [ 223.971910][ T117] ? __pfx_evict+0x10/0x10 [ 223.973322][ T117] ? xa_load+0x149/0x2c0 [ 223.974654][ T117] ? xa_load+0x149/0x2c0 [ 223.975962][ T117] dispose_list+0x117/0x1e0 [ 223.977357][ T117] prune_icache_sb+0xea/0x150 [ 223.978997][ T117] ? list_lru_count_one+0x147/0x320 [ 223.980929][ T117] ? __pfx_prune_icache_sb+0x10/0x10 [ 223.982594][ T117] super_cache_scan+0x37c/0x560 [ 223.984121][ T117] do_shrink_slab+0x411/0x1200 [ 223.985634][ T117] shrink_slab+0xa78/0x12d0 [ 223.987228][ T117] ? shrink_slab+0x68b/0x12d0 [ 223.988743][ T117] ? __pfx_shrink_slab+0x10/0x10 [ 223.990306][ T117] ? lock_acquire+0x1d1/0x380 [ 223.991788][ T117] shrink_one+0x3d3/0x870 [ 223.993480][ T117] ? shrink_node+0x2a41/0x4410 [ 223.995243][ T117] shrink_node+0x2a61/0x4410 [ 223.997080][ T117] ? __lock_acquire+0x5c0/0x1f40 [ 223.998688][ T117] ? shrink_node+0x276d/0x4410 [ 224.000149][ T117] ? __pfx_shrink_node+0x10/0x10 [ 224.001855][ T117] ? find_held_lock+0x2b/0x80 [ 224.003408][ T117] ? balance_pgdat+0xa9e/0x1e60 [ 224.004949][ T117] balance_pgdat+0xa9e/0x1e60 [ 224.006427][ T117] ? __pfx_balance_pgdat+0x10/0x10 [ 224.008041][ T117] ? __lock_acquire+0x5c0/0x1f40 [ 224.010127][ T117] ? rcu_is_watching+0x13/0xc0 [ 224.012041][ T117] kswapd+0x556/0xb50 [ 224.013269][ T117] ? __pfx_kswapd+0x10/0x10 [ 224.014826][ T117] ? __rcu_read_lock+0x50/0x70 [ 224.016343][ T117] ? __pfx_autoremove_wake_function+0x10/0x10 [ 224.018305][ T117] ? __kthread_parkme+0x18f/0x230 [ 224.019911][ T117] ? kthread+0x13a/0x450 [ 224.021254][ T117] ? __pfx_kswapd+0x10/0x10 [ 224.022806][ T117] kthread+0x373/0x450 [ 224.024091][ T117] ? __pfx_kthread+0x10/0x10 [ 224.025832][ T117] ret_from_fork+0x730/0xd60 [ 224.027322][ T117] ? __pfx_ret_from_fork+0x10/0x10 [ 224.029045][ T117] ? __switch_to+0x800/0x10e0 [ 224.030574][ T117] ? __pfx_kthread+0x10/0x10 [ 224.032179][ T117] ret_from_fork_asm+0x1a/0x30 [ 224.033708][ T117] [ 224.035509][ T117] Kernel Offset: disabled [ 224.036885][ T117] Rebooting in 86400 seconds..