last executing test programs: 3m41.794531881s ago: executing program 2 (id=375): socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x8000, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x804) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m41.062749476s ago: executing program 2 (id=382): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16], 0x7) 3m40.502882827s ago: executing program 2 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002440)={0x4c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x10) 3m39.509674507s ago: executing program 2 (id=395): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) close(0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x8000000000000000, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x7, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101042, 0x10d) close(r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, r3, 0x0}]) 3m39.203212216s ago: executing program 2 (id=399): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') r1 = getpgid(0x0) syz_open_procfs(r1, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) close(r2) r3 = syz_clone(0xac201300, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) wait4(r3, 0xfffffffffffffffe, 0x80000000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x4, 0x3, 0x2, 0x40}, 0x2c, 0x0, 0x5, 0xb, 0x8001, 0x1, 0x12, 0xe, 0x5, 0x7db8, {0x1, 0x8, 0xffff, 0x80, 0xffffffff, 0xd7d}}}}]}, 0x78}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@bloom_filter={0x1e, 0x8, 0x7, 0x1, 0x20040, r0, 0x1, '\x00', r5, r0, 0x4, 0x2, 0x2, 0xa}, 0x50) preadv(r0, &(0x7f0000001200)=[{0x0}], 0x1, 0x3f, 0x6a76) 3m38.633229501s ago: executing program 2 (id=403): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xfffffffe) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)}}], 0x1, 0x2, 0x0) 3m38.578856729s ago: executing program 32 (id=403): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xfffffffe) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)}}], 0x1, 0x2, 0x0) 9.70114336s ago: executing program 4 (id=1573): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 8.390491667s ago: executing program 1 (id=1579): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000003c0), 0x76, 0x101b01) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 8.386743003s ago: executing program 4 (id=1581): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x47, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) epoll_create1(0x80000) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x3, 0x1ff, "2179d46fd08e3c0ced34c7b4c7e6d7", "7ca24a13", '\x00', "94a200", ["060300000000000000001000", "bed0f3d6ce7a5f7389827f04", "0022010400000000fbea00", "0000001b00"]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) syz_open_dev$video4linux(0x0, 0x10000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="00f54e000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.332533352s ago: executing program 1 (id=1582): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) socket$nl_generic(0x10, 0x3, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 6.443742269s ago: executing program 4 (id=1587): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, 0x0) r1 = socket(0x10, 0x803, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x3) 5.461068909s ago: executing program 4 (id=1588): mkdir(&(0x7f0000000240)='./file0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) mount(&(0x7f0000000280)=@filename='127.0.0.1:/\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000340)='addr=127.0.0.1\x00') 5.246059843s ago: executing program 1 (id=1590): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./lower/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') lchown(&(0x7f0000000000)='./mnt/file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x67, &(0x7f0000000040)={@random="82cc73dddd21", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@llc_tr={0x11, {@snap={0xaa, 0xa9, ';', "0b1804", 0x22eb, "ecf9f1aee2613c3e761be802b37749c6eef1aa358ace179053b308b6b71bcf0bceae930a6c93e6ed0e3a7268674baa86943a0ad1d1c9751c92941dba639856cf66b793216a45d78091b78b0b5e56b43689"}}}}}, &(0x7f00000000c0)={0x0, 0x1, [0xff6, 0xcc1, 0x81a, 0x93c]}) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x60004099) 4.752399974s ago: executing program 0 (id=1593): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000f, 0x204031, 0xffffffffffffffff, 0x50728000) r4 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r4, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) 4.556905928s ago: executing program 0 (id=1594): r0 = inotify_init1(0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4.298492323s ago: executing program 1 (id=1595): clock_gettime(0x7, &(0x7f00000009c0)) io_getevents(0x0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 4.212695489s ago: executing program 4 (id=1596): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x2}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x1fd, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x4, 0x1ff}}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) 3.755825787s ago: executing program 3 (id=1597): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e05070b20"], 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000050006"], 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_clone(0x21000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) ptrace(0x8, r1) ptrace(0x4207, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="151e4af2153d65063c02ee7ce822fefb473885696e3d065533846c799fba92a4a956cefb7678791893056046e25a5a56a409d20cf7819270dc36b9b9e5d535139e80ca67e2236b000000000000000000000000b4c90f11053727ce659de299fe38a3b9f7ec43ca6d6872e1bcfb029bb58e39c2d85a2007d1964d133c2d4128bec898435cd859f25a39c808159b10e6b584eec3eda470c697061d41b4523d201b0646f240302d365b01e6735186e315a1325c1c94e0500b5f415e273f200f5680fcbd054e16e610cb1a2af5c822a9fd828f98da81b2018923e575290590c83ca2186d0de7b8f93061a4c414a205f13e6a93f4476d83b68c93d0f5a40a7097caeee28c92cda245e0b93fa8eafc556eaa10bf88fee8bf67f4c27306d4506d429060b4296f88dd91b3d9ea6f17b262f8c36d45f128d6d0eb04d562fe3c0420175ecc945c362c3e1d4c69ec1e", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000f07d860b02ffed56c8e87181fef57148d14b0a4b887c94260d313a440ca0b91ed6af131ac2b0014a6b9eba5fe8ea4afa0d6682156bc4645fd0aceba49cd181cf2d73d1ce1905d190a753e008d971bb355240448cfd4f"], 0x50) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x860}, 0x4000000) 3.486367554s ago: executing program 3 (id=1598): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0x1, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0101021800168014000300fc000800000000000000000000000000060015"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) close(r0) open(&(0x7f0000000080)='./file0\x00', 0x20002, 0x1a9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x53, 0xd8, 0xfffc, {0x20, 0x1}, {0x46, 0x2}, @ramp={0x3, 0x10, {0x6, 0x7fff, 0x1ff, 0xe4}}}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x12d8) 3.372060614s ago: executing program 1 (id=1599): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r3, 0x0, &(0x7f0000000080)={'syz', 0x2}, 0xfffffffffffffffc) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) bind$inet(r0, 0x0, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='cubic', 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r4, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x500) 3.253819719s ago: executing program 3 (id=1600): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, 0x0) r2 = socket(0x1e, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000540)={0x0, 0x8}, &(0x7f0000000580)=0x8) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r2, 0x0) r5 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20040001) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 3.051512268s ago: executing program 0 (id=1601): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 3.010335496s ago: executing program 3 (id=1602): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) file_setattr(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0xfff, 0x245b1f2a, 0x80f6, 0x10000}, 0x18, 0x1000) 2.494713218s ago: executing program 4 (id=1603): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffff7fa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) pause() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xa) fchdir(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r7, 0x2007ffb) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) fcntl$setsig(r8, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) syz_open_dev$dvb_frontend(0x0, 0xb, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 2.450161043s ago: executing program 3 (id=1604): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) semctl$GETNCNT(0x0, 0x4, 0xe, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unlink(&(0x7f0000000180)='./file1\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) getpid() semctl$SETALL(0x0, 0x0, 0x11, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.39839263s ago: executing program 0 (id=1605): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 615.324816ms ago: executing program 3 (id=1606): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fsetxattr$security_capability(r1, &(0x7f0000000200), 0x0, 0x0, 0x0) ioctl$ECCGETSTATS(0xffffffffffffffff, 0x80104d12, 0x0) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000019100)={0x0, 0x14}}, 0xc4) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, 0x0, 0x42801, 0x0) 611.089262ms ago: executing program 0 (id=1614): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 609.315866ms ago: executing program 1 (id=1607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fb, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0x2, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x4da5, 0x8, 0xfffffa71, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x40008000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0xa, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x6, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x5, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x37, 0x200, 0x8003, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x92a1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x6, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0xa, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0xffffffff, 0x2, 0x8043d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xf, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 0s ago: executing program 0 (id=1608): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, 0x0) r1 = socket(0x10, 0x803, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x3) kernel console output (not intermixed with test programs): 000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 144.296637][ T8223] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000006f2d [ 144.296644][ T8223] RDX: 00000000ff60014a RSI: 0000000000000000 RDI: 0000000000000000 [ 144.296650][ T8223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.296656][ T8223] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 144.296662][ T8223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.296676][ T8223] [ 144.392384][ T8223] Mem-Info: [ 144.392397][ T8223] active_anon:1635 inactive_anon:3177 isolated_anon:0 [ 144.392397][ T8223] active_file:5914 inactive_file:19414 isolated_file:0 [ 144.392397][ T8223] unevictable:0 dirty:570 writeback:0 [ 144.392397][ T8223] slab_reclaimable:6393 slab_unreclaimable:59091 [ 144.392397][ T8223] mapped:22704 shmem:2507 pagetables:1262 [ 144.392397][ T8223] sec_pagetables:296 bounce:0 [ 144.392397][ T8223] kernel_misc_reclaimable:0 [ 144.392397][ T8223] free:33547 free_pcp:15085 free_cma:0 [ 144.392444][ T8223] Node 0 active_anon:268kB inactive_anon:16kB active_file:36kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9536kB pagetables:1412kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 144.392483][ T8223] Node 1 active_anon:6272kB inactive_anon:12692kB active_file:23620kB inactive_file:77556kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90788kB dirty:2276kB writeback:0kB shmem:10024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5412kB pagetables:3636kB sec_pagetables:64kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 144.392523][ T8223] Node 0 DMA free:2076kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:376kB local_pcp:204kB free_cma:0kB [ 144.392572][ T8223] lowmem_reserve[]: 0 277 277 277 277 [ 144.392604][ T8223] Node 0 DMA32 free:17444kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:2048kB free_highatomic:108kB active_anon:268kB inactive_anon:16kB active_file:36kB inactive_file:100kB unevictable:0kB writepending:4kB zspages:1564kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:10216kB local_pcp:2684kB free_cma:0kB [ 144.392655][ T8223] lowmem_reserve[]: 0 0 0 0 0 [ 144.392685][ T8223] Node 1 DMA32 free:114668kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:6272kB inactive_anon:12692kB active_file:23620kB inactive_file:77556kB unevictable:0kB writepending:2276kB zspages:4260kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:49748kB local_pcp:12952kB free_cma:0kB [ 144.392737][ T8223] lowmem_reserve[]: 0 0 0 0 0 [ 144.392766][ T8223] Node 0 DMA: 65*4kB (UM) 13*8kB (UM) 5*16kB (UM) 1*32kB (M) 3*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2076kB [ 144.392934][ T8223] Node 0 DMA32: 150*4kB (UMEH) 117*8kB (UME) 54*16kB (ME) 102*32kB (UMEH) 34*64kB (UME) 19*128kB (UME) 8*256kB (UME) 4*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 17440kB [ 144.393068][ T8223] Node 1 DMA32: 191*4kB (UME) 35*8kB (UME) 85*16kB (UME) 139*32kB (ME) 110*64kB (UME) 97*128kB (UME) 83*256kB (UME) 55*512kB (UME) 24*1024kB (UM) 5*2048kB (UM) 1*4096kB (U) = 114628kB [ 144.393219][ T8223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.393234][ T8223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 144.393249][ T8223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.393311][ T8223] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 144.393328][ T8223] 28668 total pagecache pages [ 144.393335][ T8223] 835 pages in swap cache [ 144.393341][ T8223] Free swap = 97092kB [ 144.393347][ T8223] Total swap = 124996kB [ 144.393354][ T8223] 524155 pages RAM [ 144.393360][ T8223] 0 pages HighMem/MovableOnly [ 144.393366][ T8223] 212121 pages reserved [ 144.393372][ T8223] 0 pages cma reserved [ 145.298536][ T5739] Bluetooth: hci4: command 0x1003 tx timeout [ 145.298982][ T5745] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 146.201574][ T8247] lo speed is unknown, defaulting to 1000 [ 146.530402][ T8250] lo speed is unknown, defaulting to 1000 [ 147.428522][ T8268] netlink: 14 bytes leftover after parsing attributes in process `syz.0.701'. [ 148.078303][ T5739] Bluetooth: hci4: sending frame failed (-49) [ 148.080661][ T5745] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 149.616982][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 149.975895][ T8285] ======================================================= [ 149.975895][ T8285] WARNING: The mand mount option has been deprecated and [ 149.975895][ T8285] and is ignored by this kernel. Remove the mand [ 149.975895][ T8285] option from the mount to silence this warning. [ 149.975895][ T8285] ======================================================= [ 150.239102][ T44] kauditd_printk_skb: 35 callbacks suppressed [ 150.239116][ T44] audit: type=1800 audit(1789477100.538:93): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.705" name="blkio.bfq.avg_queue_size" dev="sda1" ino=2042 res=0 errno=0 [ 150.510450][ T8292] erspan0: left allmulticast mode [ 150.510467][ T8292] erspan0: left promiscuous mode [ 150.510561][ T8292] bridge1: port 1(erspan0) entered disabled state [ 150.542448][ T8292] bond4: (slave dummy0): Releasing active interface [ 150.581196][ T8292] bridge_slave_0: left allmulticast mode [ 150.581214][ T8292] bridge_slave_0: left promiscuous mode [ 150.581355][ T8292] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.598979][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.707'. [ 150.598998][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 150.603343][ T8292] bridge_slave_1: left allmulticast mode [ 150.603366][ T8292] bridge_slave_1: left promiscuous mode [ 150.603510][ T8292] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.627863][ T8292] bond0: (slave bond_slave_0): Releasing backup interface [ 150.632366][ T8292] bond0: (slave bond_slave_1): Releasing backup interface [ 150.657707][ T8292] team0: Port device team_slave_0 removed [ 150.663110][ T8292] team0: Port device team_slave_1 removed [ 150.666608][ T8292] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 150.741285][ T8298] 8021q: adding VLAN 0 to HW filter on device bond8 [ 150.801959][ T8300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.811180][ T8300] bond8: (slave bond0): Enslaving as an active interface with a down link [ 150.930622][ T8259] syz.3.695 (8259) used greatest stack depth: 17656 bytes left [ 153.678739][ T8339] genirq: Flags mismatch irq 0. 00200080 (ath9k) vs. 00215a00 (timer) [ 153.678766][ T8339] ath9k 0000:00:01.0: request_irq failed [ 153.678862][ T8339] ath9k 0000:00:01.0: probe with driver ath9k failed with error -16 [ 154.286961][ T8342] bridge_slave_0: left allmulticast mode [ 154.286988][ T8342] bridge_slave_0: left promiscuous mode [ 154.287158][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.292100][ T8342] bridge_slave_1: left allmulticast mode [ 154.292126][ T8342] bridge_slave_1: left promiscuous mode [ 154.293806][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.320511][ T8342] bond0: (slave bond_slave_0): Releasing backup interface [ 154.331721][ T8342] bond0: (slave bond_slave_1): Releasing backup interface [ 154.347344][ T8342] team0: Port device team_slave_0 removed [ 154.351290][ T8342] team0: Port device team_slave_1 removed [ 154.351890][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.351907][ T8342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.353547][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.353561][ T8342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.355081][ T8342] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 154.355547][ T8346] team0: Mode changed to "broadcast" [ 154.358151][ T8346] netlink: 'syz.0.727': attribute type 10 has an invalid length. [ 154.413120][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.719'. [ 154.413134][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'. [ 154.430856][ T8348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.455472][ T8346] bond1: (slave bond0): Releasing active interface [ 154.463273][ T8346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.465953][ T8346] team0: Port device bond0 added [ 154.467075][ T8351] vlan0: entered promiscuous mode [ 154.487031][ T8351] team0: Port device vlan0 added [ 154.505674][ T8342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.511245][ T8342] bond1: (slave bond0): Enslaving as an active interface with a down link [ 154.518908][ T8355] tipc: Enabled bearer , priority 0 [ 154.540861][ T8349] lo speed is unknown, defaulting to 1000 [ 154.747128][ T8360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.747546][ T8360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.795509][ T5821] tipc: Node number set to 100229917 [ 159.471620][ T8438] syz_tun: refused to change device tx_queue_len [ 159.573014][ T8441] netlink: 384 bytes leftover after parsing attributes in process `syz.3.747'. [ 159.574539][ T8441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.574549][ T8441] IPv6: NLM_F_CREATE should be set when creating new route [ 159.626011][ T8446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.748'. [ 159.872681][ T8448] LUN: removable file: (no medium) [ 162.241611][ T8480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.259656][ T6511] lo speed is unknown, defaulting to 1000 [ 162.259672][ T6511] rxe0: Port: 1 Link ACTIVE [ 162.282031][ T6511] lo speed is unknown, defaulting to 1000 [ 162.630523][ T8490] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.112197][ T8494] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.224631][ T8494] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.346560][ T8494] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.510069][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.510096][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.510124][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.527943][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.575979][ T44] audit: type=1800 audit(1789477113.878:94): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.765" name="nullb0" dev="tmpfs" ino=903 res=0 errno=0 [ 163.820985][ T8514] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 163.821015][ T8514] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 163.823569][ T8514] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 164.367297][ T43] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 164.517450][ T43] usb 9-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 164.518009][ T43] usb 9-1: config 0 has no interfaces? [ 164.519807][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.519819][ T43] usb 9-1: Product: syz [ 164.519826][ T43] usb 9-1: Manufacturer: syz [ 164.519834][ T43] usb 9-1: SerialNumber: syz [ 164.521409][ T43] usb 9-1: config 0 descriptor?? [ 164.835876][ T6511] usb 9-1: USB disconnect, device number 3 [ 165.115374][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 165.115388][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'. [ 165.115871][ T8530] bond0: left allmulticast mode [ 165.118535][ T8530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.121156][ T8530] bond8: (slave bond0): Enslaving as an active interface with a down link [ 165.130291][ T8530] netlink: 'syz.1.772': attribute type 4 has an invalid length. [ 165.130303][ T8530] netlink: 152 bytes leftover after parsing attributes in process `syz.1.772'. [ 165.130854][ T8530] .`: renamed from bond0 (while UP) [ 165.152884][ T5739] Bluetooth: hci1: command 0x0406 tx timeout [ 165.152912][ T5739] Bluetooth: hci0: command 0x0406 tx timeout [ 165.152926][ T5739] Bluetooth: hci2: command 0x0406 tx timeout [ 165.258982][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 165.351183][ T8533] bond0: entered promiscuous mode [ 165.351200][ T8533] bond0: entered allmulticast mode [ 166.056907][ T6515] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 166.232700][ T6515] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 166.233860][ T6515] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.233873][ T6515] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 166.233892][ T6515] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12389, setting to 8 [ 166.233912][ T6515] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.244369][ T6515] hub 8-1:1.0: bad descriptor, ignoring hub [ 166.244382][ T6515] hub 8-1:1.0: probe with driver hub failed with error -5 [ 166.249965][ T6515] cdc_wdm 8-1:1.0: skipping garbage [ 166.249976][ T6515] cdc_wdm 8-1:1.0: skipping garbage [ 166.250011][ T6515] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 166.707034][ T3269] usb 8-1: USB disconnect, device number 9 [ 167.873451][ T5749] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 167.898699][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 168.011451][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 168.041513][ T8570] netlink: 'syz.4.783': attribute type 1 has an invalid length. [ 168.041528][ T8570] netlink: 208 bytes leftover after parsing attributes in process `syz.4.783'. [ 168.233923][ T8575] syzkaller1: entered promiscuous mode [ 168.233937][ T8575] syzkaller1: entered allmulticast mode [ 168.755421][ T8604] tipc: New replicast peer: 172.20.20.187 [ 168.762045][ T8604] tipc: Enabled bearer , priority 10 [ 168.860573][ T8606] tipc: Enabling of bearer rejected, failed to enable media [ 169.117865][ T8612] tipc: Enabling of bearer rejected, failed to enable media [ 169.222036][ T8618] team0: Mode changed to "broadcast" [ 169.225134][ T8618] netlink: 'syz.4.794': attribute type 10 has an invalid length. [ 169.238186][ T8618] bond1: (slave bond0): Releasing active interface [ 169.239605][ T8618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.240354][ T8618] team0: Port device bond0 added [ 169.266030][ T8618] vlan0: entered promiscuous mode [ 169.272319][ T8618] team0: Port device vlan0 added [ 169.284013][ T8624] tipc: Enabling of bearer rejected, failed to enable media [ 169.299218][ T8618] tipc: Started in network mode [ 169.299241][ T8618] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 169.299420][ T8618] tipc: Enabled bearer , priority 0 [ 169.414960][ T8631] tipc: Enabled bearer , priority 0 [ 169.415358][ T8631] syzkaller0: entered promiscuous mode [ 169.415368][ T8631] syzkaller0: entered allmulticast mode [ 169.449316][ T8631] tipc: Resetting bearer [ 169.451656][ T8630] tipc: Resetting bearer [ 169.469217][ T8630] tipc: Disabling bearer [ 169.493616][ T8634] fuse: fd is not a fuse device [ 170.246287][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 170.364840][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.802'. [ 170.446039][ T6511] tipc: Node number set to 11578026 [ 171.203618][ T8680] fuse: fd is not a fuse device [ 171.699762][ T8717] syzkaller1: entered promiscuous mode [ 171.699777][ T8717] syzkaller1: entered allmulticast mode [ 171.782417][ T8719] tipc: New replicast peer: 172.20.20.187 [ 171.785366][ T8719] tipc: Enabled bearer , priority 10 [ 172.776983][ T6515] tipc: Node number set to 748438643 [ 174.083752][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 174.199753][ T8734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.816'. [ 175.439389][ T8755] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.731358][ T8758] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.829403][ T8758] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.891478][ T8758] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.006971][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.017499][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.017524][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.017542][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.135761][ T44] audit: type=1326 audit(1789477127.438:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8787 comm="syz.4.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 177.135795][ T44] audit: type=1326 audit(1789477127.438:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8787 comm="syz.4.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 177.155973][ T44] audit: type=1326 audit(1789477127.458:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8787 comm="syz.4.829" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 177.156003][ T44] audit: type=1326 audit(1789477127.458:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8787 comm="syz.4.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 177.156022][ T44] audit: type=1326 audit(1789477127.458:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8787 comm="syz.4.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 177.160817][ T44] audit: type=1326 audit(1789477127.468:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8787 comm="syz.4.829" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 177.160843][ T44] audit: type=1326 audit(1789477127.468:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8787 comm="syz.4.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 177.160862][ T44] audit: type=1326 audit(1789477127.468:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8787 comm="syz.4.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 177.161256][ T44] audit: type=1326 audit(1789477127.468:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8787 comm="syz.4.829" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 177.161277][ T44] audit: type=1326 audit(1789477127.468:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8787 comm="syz.4.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 177.402094][ T8794] Set syz0 is full, maxelem 0 reached [ 179.012249][ T5785] bridge_slave_1: left allmulticast mode [ 179.012277][ T5785] bridge_slave_1: left promiscuous mode [ 179.013293][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.016255][ T5785] bridge_slave_0: left allmulticast mode [ 179.016273][ T5785] bridge_slave_0: left promiscuous mode [ 179.016470][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.310422][ T8836] MTD: Couldn't look up './dev/mtdblock0': -2 [ 179.483414][ T5785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.512067][ T5785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.530445][ T5785] bond0 (unregistering): Released all slaves [ 179.543150][ T5785] bond1 (unregistering): (slave dummy0): Releasing active interface [ 179.562115][ T5785] bond1 (unregistering): Released all slaves [ 179.590137][ T5452] 8021q: adding VLAN 0 to HW filter on device eth2 [ 179.643064][ T8843] syzkaller0: entered promiscuous mode [ 179.643078][ T8843] syzkaller0: entered allmulticast mode [ 179.758062][ T5785] tipc: Left network mode [ 179.967907][ T8858] lo: entered allmulticast mode [ 179.970442][ T8858] tunl0: entered allmulticast mode [ 179.970759][ T8858] gre0: entered allmulticast mode [ 179.971043][ T8858] gretap0: entered allmulticast mode [ 179.971293][ T8858] erspan0: entered allmulticast mode [ 179.971542][ T8858] ip_vti0: entered allmulticast mode [ 179.971797][ T8858] ip6_vti0: entered allmulticast mode [ 179.972174][ T8858] sit0: entered allmulticast mode [ 179.972430][ T8858] ip6tnl0: entered allmulticast mode [ 179.972732][ T8858] ip6gre0: entered allmulticast mode [ 179.972967][ T8858] syz_tun: entered allmulticast mode [ 179.973259][ T8858] ip6gretap0: entered allmulticast mode [ 179.973587][ T8858] bridge0: entered allmulticast mode [ 179.973992][ T8858] vcan0: entered allmulticast mode [ 179.974264][ T8858] bond0: entered allmulticast mode [ 179.985668][ T8858] team0: Port device bond0 removed [ 179.985919][ T8858] team0: entered allmulticast mode [ 179.985928][ T8858] vlan0: entered allmulticast mode [ 179.985935][ T8858] veth0_vlan: entered allmulticast mode [ 179.986488][ T8858] dummy0: entered allmulticast mode [ 179.994584][ T8858] nlmon0: entered allmulticast mode [ 179.994873][ T8858] batadv0: entered allmulticast mode [ 179.995240][ T8858] vxcan0: entered allmulticast mode [ 179.995478][ T8858] vxcan1: entered allmulticast mode [ 179.995716][ T8858] veth0: entered allmulticast mode [ 180.001536][ T8858] veth1: entered allmulticast mode [ 180.001808][ T8858] wg0: entered allmulticast mode [ 180.002119][ T8858] wg1: entered allmulticast mode [ 180.002361][ T8858] wg2: entered allmulticast mode [ 180.002640][ T8858] veth0_to_bridge: entered allmulticast mode [ 180.002904][ T8858] bridge_slave_0: entered allmulticast mode [ 180.003189][ T8858] veth1_to_bridge: entered allmulticast mode [ 180.010733][ T8858] bridge_slave_1: entered allmulticast mode [ 180.011099][ T8858] veth0_to_bond: entered allmulticast mode [ 180.016166][ T8858] bond_slave_0: entered allmulticast mode [ 180.016559][ T8858] veth1_to_bond: entered allmulticast mode [ 180.019614][ T8858] bond_slave_1: entered allmulticast mode [ 180.020290][ T8858] veth0_to_team: entered allmulticast mode [ 180.025460][ T8858] team_slave_0: entered allmulticast mode [ 180.025823][ T8858] veth1_to_team: entered allmulticast mode [ 180.026220][ T8858] team_slave_1: entered allmulticast mode [ 180.026578][ T8858] veth0_to_batadv: entered allmulticast mode [ 180.033988][ T8858] batadv_slave_0: entered allmulticast mode [ 180.034503][ T8858] veth1_to_batadv: entered allmulticast mode [ 180.034952][ T8858] batadv_slave_1: entered allmulticast mode [ 180.035360][ T8858] xfrm0: entered allmulticast mode [ 180.035855][ T8858] veth0_to_hsr: entered allmulticast mode [ 180.041439][ T8858] hsr_slave_0: entered allmulticast mode [ 180.041746][ T8858] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 180.080867][ T5452] 8021q: adding VLAN 0 to HW filter on device eth3 [ 180.383040][ T5452] 8021q: adding VLAN 0 to HW filter on device eth4 [ 180.494159][ T5785] hsr_slave_0: left promiscuous mode [ 180.494906][ T5785] hsr_slave_1: left promiscuous mode [ 180.703742][ T5785] team0 (unregistering): Port device team_slave_1 removed [ 180.717782][ T5785] team0 (unregistering): Port device team_slave_0 removed [ 180.866334][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 181.357247][ T5785] IPVS: stop unused estimator thread 0... [ 182.189952][ T5749] Bluetooth: Unexpected continuation frame (len 18) [ 182.257163][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 182.418926][ T8967] tipc: Enabling of bearer rejected, failed to enable media [ 182.527043][ T5821] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 182.533536][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 182.653017][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.867'. [ 182.680528][ T5821] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 182.681712][ T5821] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 182.681746][ T5821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.723410][ T8977] syz.0.867: page allocation failure: order:9, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 182.728737][ T8977] CPU: 0 UID: 0 PID: 8977 Comm: syz.0.867 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.728766][ T8977] Tainted: [L]=SOFTLOCKUP [ 182.728774][ T8977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.728786][ T8977] Call Trace: [ 182.728794][ T8977] [ 182.728803][ T8977] dump_stack_lvl+0x100/0x190 [ 182.728849][ T8977] warn_alloc.cold+0x9e/0xb2 [ 182.728872][ T8977] ? __pfx_warn_alloc+0x10/0x10 [ 182.728904][ T8977] ? __pfx___might_resched+0x10/0x10 [ 182.728929][ T8977] ? lockdep_hardirqs_on+0x7d/0x110 [ 182.728963][ T8977] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 182.728997][ T8977] ? kasan_save_stack+0x3f/0x50 [ 182.729020][ T8977] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 182.729039][ T8977] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 182.729058][ T8977] ? idr_get_free+0x52e/0xa00 [ 182.729080][ T8977] ? basic_change+0xb64/0x1250 [ 182.729099][ T8977] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 182.729124][ T8977] ? netlink_rcv_skb+0x159/0x420 [ 182.729143][ T8977] ? netlink_unicast+0x585/0x850 [ 182.729161][ T8977] ? netlink_sendmsg+0x8b0/0xda0 [ 182.729181][ T8977] ? ____sys_sendmsg+0xa4d/0xbe0 [ 182.729196][ T8977] ? ___sys_sendmsg+0x190/0x1e0 [ 182.729212][ T8977] ? __sys_sendmsg+0x160/0x210 [ 182.729236][ T8977] ? __do_fast_syscall_32+0x13a/0x8b0 [ 182.729261][ T8977] ? do_fast_syscall_32+0x32/0x70 [ 182.729300][ T8977] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 182.729322][ T8977] ? policy_nodemask+0xed/0x4f0 [ 182.729345][ T8977] alloc_pages_mpol+0x201/0x550 [ 182.729366][ T8977] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 182.729393][ T8977] ___kmalloc_large_node+0xe8/0x130 [ 182.729415][ T8977] __kmalloc_large_node_noprof+0x1c/0x70 [ 182.729439][ T8977] __kmalloc_noprof+0x5a8/0x840 [ 182.729457][ T8977] ? tcf_em_tree_validate+0x1d1/0xd60 [ 182.729481][ T8977] tcf_em_tree_validate+0x1d1/0xd60 [ 182.729506][ T8977] ? __pfx_tcf_em_tree_validate+0x10/0x10 [ 182.729529][ T8977] ? tcf_exts_validate+0x42/0x60 [ 182.729558][ T8977] basic_change+0x3a5/0x1250 [ 182.729581][ T8977] ? __pfx_basic_change+0x10/0x10 [ 182.729600][ T8977] ? __mutex_unlock_slowpath+0x35d/0x930 [ 182.729638][ T8977] ? __pfx_basic_change+0x10/0x10 [ 182.729657][ T8977] tc_new_tfilter+0x9c3/0x24c0 [ 182.729700][ T8977] ? __pfx_tc_new_tfilter+0x10/0x10 [ 182.729724][ T8977] ? kmem_cache_free+0x127/0x6c0 [ 182.729763][ T8977] ? __lock_acquire+0x5c0/0x1f40 [ 182.729802][ T8977] ? lock_acquire+0x1d1/0x380 [ 182.729829][ T8977] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 182.729857][ T8977] ? find_held_lock+0x2b/0x80 [ 182.729876][ T8977] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 182.729904][ T8977] ? __pfx_tc_new_tfilter+0x10/0x10 [ 182.729924][ T8977] rtnetlink_rcv_msg+0x95e/0xe90 [ 182.729951][ T8977] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.729983][ T8977] ? ref_tracker_free+0x37e/0x6c0 [ 182.730029][ T8977] netlink_rcv_skb+0x159/0x420 [ 182.730053][ T8977] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.730081][ T8977] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.730112][ T8977] ? netlink_deliver_tap+0x1ae/0xcc0 [ 182.730139][ T8977] netlink_unicast+0x585/0x850 [ 182.730165][ T8977] ? __pfx_netlink_unicast+0x10/0x10 [ 182.730186][ T8977] ? aa_sk_perm+0x389/0xab0 [ 182.730217][ T8977] netlink_sendmsg+0x8b0/0xda0 [ 182.730245][ T8977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.730270][ T8977] ? apparmor_socket_sendmsg+0x165/0x280 [ 182.730299][ T8977] ____sys_sendmsg+0xa4d/0xbe0 [ 182.730315][ T8977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.730339][ T8977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.730370][ T8977] ___sys_sendmsg+0x190/0x1e0 [ 182.730392][ T8977] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.730413][ T8977] ? futex_wait+0x11e/0x370 [ 182.730447][ T8977] ? find_held_lock+0x2b/0x80 [ 182.730485][ T8977] __sys_sendmsg+0x160/0x210 [ 182.730538][ T8977] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.730579][ T8977] __do_fast_syscall_32+0x13a/0x8b0 [ 182.730615][ T8977] do_fast_syscall_32+0x32/0x70 [ 182.730646][ T8977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.730670][ T8977] RIP: 0023:0xf704efec [ 182.730691][ T8977] Code: Unable to access opcode bytes at 0xf704efc2. [ 182.730707][ T8977] RSP: 002b:00000000f52de50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 182.730727][ T8977] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 182.730740][ T8977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.730753][ T8977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.730765][ T8977] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 182.730777][ T8977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.730803][ T8977] [ 182.730852][ T8977] Mem-Info: [ 182.730862][ T8977] active_anon:1712 inactive_anon:119 isolated_anon:0 [ 182.730862][ T8977] active_file:1883 inactive_file:11478 isolated_file:0 [ 182.730862][ T8977] unevictable:0 dirty:549 writeback:0 [ 182.730862][ T8977] slab_reclaimable:6170 slab_unreclaimable:57418 [ 182.730862][ T8977] mapped:22825 shmem:3 pagetables:1376 [ 182.730862][ T8977] sec_pagetables:298 bounce:0 [ 182.730862][ T8977] kernel_misc_reclaimable:0 [ 182.730862][ T8977] free:31470 free_pcp:86 free_cma:0 [ 182.744363][ T8977] Node 0 active_anon:44kB inactive_anon:84kB active_file:32kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9280kB pagetables:1224kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 182.744419][ T8977] Node 1 active_anon:6804kB inactive_anon:392kB active_file:7500kB inactive_file:45808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:91272kB dirty:2192kB writeback:0kB shmem:8kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5532kB pagetables:4280kB sec_pagetables:68kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 182.744531][ T8977] Node 0 DMA free:2452kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.744584][ T8977] lowmem_reserve[]: 0 277 277 277 277 [ 182.744617][ T8977] Node 0 DMA32 free:24492kB boost:8192kB min:20820kB low:23976kB high:27132kB reserved_highatomic:2048kB free_highatomic:132kB active_anon:44kB inactive_anon:84kB active_file:32kB inactive_file:104kB unevictable:0kB writepending:4kB zspages:1536kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 182.744734][ T8977] lowmem_reserve[]: 0 0 0 0 0 [ 182.744769][ T8977] Node 1 DMA32 free:98936kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:6804kB inactive_anon:392kB active_file:7500kB inactive_file:45808kB unevictable:0kB writepending:2192kB zspages:4552kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:300kB local_pcp:300kB free_cma:0kB [ 182.744823][ T8977] lowmem_reserve[]: 0 0 0 0 0 [ 182.744916][ T8977] Node 0 DMA: 65*4kB (UM) 14*8kB (UM) 6*16kB (UM) 8*32kB (UM) 1*64kB (M) 1*128kB (M) 2*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2452kB [ 182.745110][ T8977] Node 0 DMA32: 90*4kB (UMEH) 85*8kB (UME) 50*16kB (UMEH) 119*32kB (UMEH) 60*64kB (UME) 27*128kB (UME) 17*256kB (UME) 8*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 24464kB [ 182.745304][ T8977] Node 1 DMA32: 2627*4kB (UME) 1765*8kB (UME) 770*16kB (UME) 424*32kB (UME) 166*64kB (UME) 112*128kB (UME) 60*256kB (UME) 14*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 99028kB [ 182.745502][ T8977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.745516][ T8977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 182.745530][ T8977] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.745603][ T8977] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 182.745620][ T8977] 14027 total pagecache pages [ 182.745627][ T8977] 663 pages in swap cache [ 182.745634][ T8977] Free swap = 84548kB [ 182.745641][ T8977] Total swap = 124996kB [ 182.745648][ T8977] 524155 pages RAM [ 182.745654][ T8977] 0 pages HighMem/MovableOnly [ 182.745660][ T8977] 212121 pages reserved [ 182.745666][ T8977] 0 pages cma reserved [ 182.918766][ T5821] qmi_wwan 8-1:1.0: cdc-wdm0: USB WDM device [ 182.960779][ T5821] wwan wwan0: port wwan0qmi0 attached [ 183.123092][ T5749] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 183.153963][ T44] kauditd_printk_skb: 280 callbacks suppressed [ 183.153977][ T44] audit: type=1326 audit(1789477133.458:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.1.868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 183.154041][ T44] audit: type=1326 audit(1789477133.458:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.1.868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 183.166397][ T44] audit: type=1326 audit(1789477133.468:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.1.868" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf706efec code=0x7ffc0000 [ 183.166651][ T44] audit: type=1326 audit(1789477133.468:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.1.868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 183.166775][ T44] audit: type=1326 audit(1789477133.468:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.1.868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 183.168242][ T44] audit: type=1326 audit(1789477133.478:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.1.868" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf706efec code=0x7ffc0000 [ 183.168373][ T44] audit: type=1326 audit(1789477133.478:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.1.868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 183.168639][ T44] audit: type=1326 audit(1789477133.478:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.1.868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 183.172149][ T44] audit: type=1326 audit(1789477133.478:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.1.868" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf706efec code=0x7ffc0000 [ 183.172240][ T44] audit: type=1326 audit(1789477133.478:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.1.868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 183.255918][ T5821] qmi_wwan 8-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 3a:55:43:09:c6:55 [ 183.260920][ T5821] usb 8-1: USB disconnect, device number 10 [ 183.270287][ T5821] qmi_wwan 8-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 183.399643][ T5821] wwan wwan0: port wwan0qmi0 disconnected [ 183.746622][ T37] IPVS: starting estimator thread 0... [ 183.837535][ T8992] IPVS: using max 43 ests per chain, 103200 per kthread [ 184.227520][ T9006] syzkaller1: entered promiscuous mode [ 184.227535][ T9006] syzkaller1: entered allmulticast mode [ 184.952539][ T9029] comedi comedi0: Minor 47 could not be opened [ 184.958622][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.880'. [ 187.826543][ T9089] tipc: Enabled bearer , priority 0 [ 187.829412][ T9089] syzkaller0: entered promiscuous mode [ 187.829425][ T9089] syzkaller0: entered allmulticast mode [ 187.848633][ T9089] tipc: Resetting bearer [ 187.851194][ T9088] tipc: Resetting bearer [ 187.862721][ T9088] tipc: Disabling bearer [ 188.168332][ T190] IPVS: starting estimator thread 0... [ 188.278201][ T9100] IPVS: using max 43 ests per chain, 103200 per kthread [ 188.660401][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.660432][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.977499][ T9106] syzkaller1: entered promiscuous mode [ 188.977513][ T9106] syzkaller1: entered allmulticast mode [ 190.156209][ T9122] random: crng reseeded on system resumption [ 191.774380][ T9170] lo speed is unknown, defaulting to 1000 [ 192.688168][ T9186] netlink: 36 bytes leftover after parsing attributes in process `syz.0.914'. [ 193.455329][ T9219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.923'. [ 194.278365][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.925'. [ 195.788403][ T9240] random: crng reseeded on system resumption [ 197.582212][ T9235] macsec1: entered allmulticast mode [ 197.582233][ T9235] veth1_macvtap: entered allmulticast mode [ 197.599266][ T9236] veth1_macvtap (unregistering): left allmulticast mode [ 197.709866][ T9247] lo speed is unknown, defaulting to 1000 [ 197.831500][ T9239] lo speed is unknown, defaulting to 1000 [ 198.883003][ T9273] netlink: 'syz.0.936': attribute type 1 has an invalid length. [ 199.167595][ T9273] bridge5: entered promiscuous mode [ 199.178936][ T9273] bond3: (slave bridge5): making interface the new active one [ 199.181254][ T9273] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 199.220597][ T9273] bridge6: entered promiscuous mode [ 199.224523][ T9273] bond3: (slave bridge6): Enslaving as a backup interface with an up link [ 199.339978][ T9282] lo speed is unknown, defaulting to 1000 [ 199.441420][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 199.627538][ T6512] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 199.780049][ T6512] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 199.780875][ T6512] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.780888][ T6512] usb 8-1: config 0 has no interfaces? [ 199.780945][ T6512] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.804438][ T6512] usb 8-1: config 0 descriptor?? [ 200.092630][ T6512] usb 8-1: USB disconnect, device number 11 [ 200.750569][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.947'. [ 201.239010][ T9335] fuse: fd is not a fuse device [ 203.196321][ T9403] sd 0:0:0:0: PR command failed: 1026 [ 203.196345][ T9403] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 203.196364][ T9403] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 203.240348][ T9407] netlink: 'syz.4.968': attribute type 1 has an invalid length. [ 203.294245][ T9407] bond2: entered promiscuous mode [ 203.294545][ T9407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.359921][ T9407] macvtap1: entered allmulticast mode [ 203.400482][ T9407] macvtap2: entered allmulticast mode [ 203.436597][ T9407] bond2: (slave bridge2): making interface the new active one [ 203.436611][ T9407] bridge2: entered promiscuous mode [ 203.438166][ T9407] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 203.595656][ T5749] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 203.596610][ T5749] Bluetooth: hci0: unexpected event for opcode 0x203e [ 203.722850][ T9433] lo speed is unknown, defaulting to 1000 [ 203.950748][ T9444] netlink: 'syz.4.981': attribute type 1 has an invalid length. [ 203.971076][ T9444] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.989543][ T9444] netlink: 28 bytes leftover after parsing attributes in process `syz.4.981'. [ 204.066159][ T9446] veth0_to_bond: left allmulticast mode [ 204.078040][ T9446] bond3: (slave veth0_to_bond): making interface the new active one [ 204.096957][ T9446] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 204.102461][ T9444] bond3: entered promiscuous mode [ 204.102475][ T9444] veth0_to_bond: entered promiscuous mode [ 204.102688][ T9444] bond3: entered allmulticast mode [ 204.102698][ T9444] veth0_to_bond: entered allmulticast mode [ 204.177157][ T9444] macvlan2: entered promiscuous mode [ 204.177179][ T9444] macvlan2: entered allmulticast mode [ 204.183183][ T9444] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 204.184929][ T9444] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 205.344426][ T9489] lo speed is unknown, defaulting to 1000 [ 205.385886][ T9493] random: crng reseeded on system resumption [ 205.763374][ T9502] netlink: 'syz.1.995': attribute type 1 has an invalid length. [ 205.810174][ T9502] 8021q: adding VLAN 0 to HW filter on device bond9 [ 205.846097][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.996'. [ 205.879573][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.995'. [ 205.908388][ T9507] can: request_module (can-proto-0) failed. [ 205.955235][ T9502] veth0_to_bond: left allmulticast mode [ 205.978469][ T25] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 206.013315][ T9502] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 206.026785][ T9501] bond9: entered promiscuous mode [ 206.036989][ T9501] bond9: entered allmulticast mode [ 206.159294][ T25] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.160454][ T25] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 206.160493][ T25] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.160562][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 206.160585][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 206.160606][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.160638][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.169315][ T25] usb 8-1: config 0 descriptor?? [ 206.188854][ T9499] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.390167][ T9501] macvlan3: entered promiscuous mode [ 206.390187][ T9501] macvlan3: entered allmulticast mode [ 206.396140][ T9501] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 206.623130][ T25] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 206.653013][ T25] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 206.999654][ T5821] usb 8-1: USB disconnect, device number 12 [ 207.075658][ T9517] fido_id[9517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/report_descriptor': No such file or directory [ 207.629615][ T5749] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 207.629656][ T5749] Bluetooth: hci0: Injecting HCI hardware error event [ 207.631856][ T5749] Bluetooth: hci0: hardware error 0x00 [ 208.863108][ T9548] fuse: fd is not a fuse device [ 208.870169][ T9548] fuse: fd is not a fuse device [ 209.567834][ T9560] netlink: 'syz.0.1011': attribute type 58 has an invalid length. [ 209.567856][ T9560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1011'. [ 209.781934][ T5749] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 210.007402][ T44] kauditd_printk_skb: 250 callbacks suppressed [ 210.007420][ T44] audit: type=1326 audit(1789477160.308:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.4.1013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 210.007456][ T44] audit: type=1326 audit(1789477160.308:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.4.1013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 210.007495][ T44] audit: type=1326 audit(1789477160.308:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.4.1013" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 210.007528][ T44] audit: type=1326 audit(1789477160.308:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.4.1013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 210.007560][ T44] audit: type=1326 audit(1789477160.308:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.4.1013" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 210.007593][ T44] audit: type=1326 audit(1789477160.308:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.4.1013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 210.007623][ T44] audit: type=1326 audit(1789477160.318:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.4.1013" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 210.007654][ T44] audit: type=1326 audit(1789477160.318:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.4.1013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 210.010462][ T44] audit: type=1326 audit(1789477160.318:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.4.1013" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 210.013308][ T44] audit: type=1326 audit(1789477160.318:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.4.1013" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 210.173291][ T9578] tipc: New replicast peer: 172.20.20.187 [ 210.173895][ T9578] tipc: Enabled bearer , priority 10 [ 210.182716][ T9572] lo speed is unknown, defaulting to 1000 [ 210.334021][ T9582] netlink: 'syz.0.1019': attribute type 1 has an invalid length. [ 210.393049][ T9585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1019'. [ 210.395737][ T9582] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.490431][ T9582] bond5: (slave veth0_to_bond): making interface the new active one [ 210.495196][ T9582] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 210.775739][ T9582] bond5: entered promiscuous mode [ 210.775758][ T9582] veth0_to_bond: entered promiscuous mode [ 210.780178][ T9582] bond5: entered allmulticast mode [ 210.780192][ T9582] veth0_to_bond: entered allmulticast mode [ 210.837139][ T9582] macvlan2: entered promiscuous mode [ 210.837160][ T9582] macvlan2: entered allmulticast mode [ 210.839699][ T9582] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 210.850419][ T9582] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 211.166976][ T43] tipc: Node number set to 3245104483 [ 212.608342][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 213.144186][ T9640] veth1_macvtap: left promiscuous mode [ 213.144211][ T9640] macsec0: entered promiscuous mode [ 213.152868][ T9640] veth1_macvtap: entered promiscuous mode [ 213.153065][ T9640] macsec0: left promiscuous mode [ 213.249147][ T9649] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 214.821535][ T9669] openvswitch: netlink: Message has 8 unknown bytes. [ 215.271971][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1044'. [ 215.271986][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1044'. [ 215.734312][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 216.845219][ T9717] lo speed is unknown, defaulting to 1000 [ 217.201475][ T9726] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 217.201491][ T9726] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 217.385784][ T9737] syzkaller0: entered promiscuous mode [ 217.385805][ T9737] syzkaller0: entered allmulticast mode [ 217.392600][ T9737] 0: reclassify loop, rule prio 0, protocol 700 [ 217.630232][ T9745] syzkaller0: entered promiscuous mode [ 217.630249][ T9745] syzkaller0: entered allmulticast mode [ 217.772796][ T9748] netlink: 'syz.3.1063': attribute type 1 has an invalid length. [ 217.785137][ T9748] 8021q: adding VLAN 0 to HW filter on device bond9 [ 217.813463][ T9748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1063'. [ 217.863268][ T9748] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 217.897933][ T9748] bond9: entered promiscuous mode [ 217.897957][ T9748] bond9: entered allmulticast mode [ 217.926200][ T9748] macvlan2: entered promiscuous mode [ 217.926216][ T9748] macvlan2: entered allmulticast mode [ 217.935171][ T9748] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 217.950815][ T5749] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 218.378826][ T5821] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 218.494984][ T9762] gretap1: left promiscuous mode [ 218.518927][ T9762] vlan2: left allmulticast mode [ 218.518942][ T9762] bridge1: left allmulticast mode [ 218.543676][ T9762] bond9: left promiscuous mode [ 218.543699][ T9762] bond9: left allmulticast mode [ 218.547054][ T9237] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.547092][ T9237] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.547121][ T9237] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.547149][ T9237] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.756512][ T5821] usb 9-1: unable to get BOS descriptor or descriptor too short [ 218.756552][ T5821] usb 9-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 218.766450][ T5821] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 218.766470][ T5821] usb 9-1: can't read configurations, error -71 [ 219.553458][ T9784] lo speed is unknown, defaulting to 1000 [ 219.675508][ T44] kauditd_printk_skb: 4 callbacks suppressed [ 219.675521][ T44] audit: type=1800 audit(1789477169.978:659): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1074" name="file2" dev="sda1" ino=2044 res=0 errno=0 [ 220.953962][ T9794] jffs2: notice: (9794) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 221.204079][ T44] audit: type=1326 audit(1789477171.508:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.1.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 221.204520][ T44] audit: type=1326 audit(1789477171.508:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.1.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 221.208532][ T44] audit: type=1326 audit(1789477171.518:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.1.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf706efec code=0x7ffc0000 [ 221.208993][ T44] audit: type=1326 audit(1789477171.518:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.1.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 221.211575][ T44] audit: type=1326 audit(1789477171.518:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.1.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 221.211963][ T44] audit: type=1326 audit(1789477171.518:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.1.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf706efec code=0x7ffc0000 [ 221.212705][ T44] audit: type=1326 audit(1789477171.518:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.1.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 221.215255][ T44] audit: type=1326 audit(1789477171.518:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.1.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706efec code=0x7ffc0000 [ 221.215985][ T44] audit: type=1326 audit(1789477171.518:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.1.1082" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 222.442545][ T9819] lo speed is unknown, defaulting to 1000 [ 223.092732][ T9832] syzkaller0: entered promiscuous mode [ 223.092745][ T9832] syzkaller0: entered allmulticast mode [ 223.470948][ T5842] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 223.640786][ T5842] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 223.641738][ T5842] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 223.641761][ T5842] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.641777][ T5842] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 223.641811][ T5842] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.643234][ T5842] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 223.643253][ T5842] usb 8-1: Product: syz [ 223.643264][ T5842] usb 8-1: Manufacturer: syz [ 223.696652][ T5842] cdc_wdm 8-1:1.0: skipping garbage [ 223.696671][ T5842] cdc_wdm 8-1:1.0: skipping garbage [ 223.716854][ T5842] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 223.716876][ T5842] cdc_wdm 8-1:1.0: Unknown control protocol [ 224.725265][ T3269] usb 8-1: USB disconnect, device number 13 [ 224.885635][ T9854] FAULT_INJECTION: forcing a failure. [ 224.885635][ T9854] name failslab, interval 1, probability 0, space 0, times 0 [ 224.885657][ T9854] CPU: 2 UID: 0 PID: 9854 Comm: syz.3.1097 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.885673][ T9854] Tainted: [L]=SOFTLOCKUP [ 224.885677][ T9854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.885684][ T9854] Call Trace: [ 224.885688][ T9854] [ 224.885693][ T9854] dump_stack_lvl+0x100/0x190 [ 224.885712][ T9854] should_fail_ex.cold+0x5/0xa [ 224.885726][ T9854] should_failslab+0xc2/0x120 [ 224.885743][ T9854] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 224.885758][ T9854] ? kasprintf+0xc7/0x100 [ 224.885775][ T9854] kvasprintf+0xbc/0x150 [ 224.885788][ T9854] ? __pfx_kvasprintf+0x10/0x10 [ 224.885803][ T9854] ? lock_acquire+0x1d1/0x380 [ 224.885817][ T9854] ? __is_module_percpu_address+0x2c/0x430 [ 224.885836][ T9854] kasprintf+0xc7/0x100 [ 224.885850][ T9854] ? __pfx_kasprintf+0x10/0x10 [ 224.885864][ T9854] ? __is_module_percpu_address+0x1c2/0x430 [ 224.885885][ T9854] wq_init_lockdep+0x3f/0xe0 [ 224.885896][ T9854] alloc_workqueue_noprof+0xdc/0x130 [ 224.885907][ T9854] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 224.885920][ T9854] ? lockdep_init_map_type+0x5c/0x250 [ 224.885936][ T9854] ? lockdep_init_map_type+0x5c/0x250 [ 224.885953][ T9854] __rds_conn_create+0x1234/0x25a0 [ 224.885974][ T9854] ? __pfx___rds_conn_create+0x10/0x10 [ 224.885998][ T9854] ? trace_kmalloc+0xeb/0x110 [ 224.886013][ T9854] ? __kasan_kmalloc+0xaa/0xb0 [ 224.886026][ T9854] ? lockdep_init_map_type+0x5c/0x250 [ 224.886044][ T9854] rds_conn_create_outgoing+0x44/0x60 [ 224.886064][ T9854] rds_sendmsg+0x10da/0x34d0 [ 224.886097][ T9854] ? __pfx_rds_sendmsg+0x10/0x10 [ 224.886109][ T9854] ? __pfx_aa_sk_perm+0x10/0x10 [ 224.886126][ T9854] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 224.886140][ T9854] ? aa_sock_msg_perm+0x11e/0x200 [ 224.886154][ T9854] ? apparmor_socket_sendmsg+0x165/0x280 [ 224.886170][ T9854] ? ____sys_sendmsg+0xa4d/0xbe0 [ 224.886181][ T9854] ____sys_sendmsg+0xa4d/0xbe0 [ 224.886191][ T9854] ? __pfx_rds_sendmsg+0x10/0x10 [ 224.886204][ T9854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.886217][ T9854] ? __pfx_do_swap_page+0x10/0x10 [ 224.886232][ T9854] ? lock_acquire+0x1d1/0x380 [ 224.886245][ T9854] ? __pte_offset_map+0x2f/0x310 [ 224.886262][ T9854] ___sys_sendmsg+0x190/0x1e0 [ 224.886280][ T9854] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.886317][ T9854] ? __pte_offset_map+0x179/0x310 [ 224.886347][ T9854] ? find_held_lock+0x2b/0x80 [ 224.886381][ T9854] __sys_sendmsg+0x160/0x210 [ 224.886406][ T9854] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.886437][ T9854] __do_fast_syscall_32+0x13a/0x8b0 [ 224.886456][ T9854] do_fast_syscall_32+0x32/0x70 [ 224.886472][ T9854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.886488][ T9854] RIP: 0023:0xf700efec [ 224.886502][ T9854] Code: Unable to access opcode bytes at 0xf700efc2. [ 224.886508][ T9854] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 224.886520][ T9854] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 224.886528][ T9854] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.886535][ T9854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.886542][ T9854] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 224.886548][ T9854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.886562][ T9854] [ 225.760034][ T9866] tipc: Started in network mode [ 225.760052][ T9866] tipc: Node identity 7f000001, cluster identity 4711 [ 225.760523][ T9866] tipc: Enabled bearer , priority 10 [ 225.771751][ T9866] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 225.771904][ T9866] tipc: Enabled bearer , priority 10 [ 225.878967][ T9866] dlm: Unknown command passed to DLM device : 0 [ 225.878967][ T9866] [ 226.576963][ T5749] Bluetooth: hci3: command 0x0406 tx timeout [ 226.876930][ T6512] tipc: Node number set to 2130706433 [ 226.910441][ T9893] Trying to write to read-only block-device nullb0 [ 227.470527][ T9902] lo speed is unknown, defaulting to 1000 [ 228.258991][ T9912] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 228.379215][ T9912] hub 1-0:1.0: USB hub found [ 228.381442][ T9912] hub 1-0:1.0: 2 ports detected [ 228.663334][ T9924] lo: entered allmulticast mode [ 228.663337][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'. [ 228.663351][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'. [ 228.665917][ T9924] bond0: entered allmulticast mode [ 228.666194][ T9924] dummy0: entered allmulticast mode [ 228.666385][ T9924] eql: entered allmulticast mode [ 228.666470][ T9924] ifb0: entered allmulticast mode [ 228.666599][ T9924] ifb1: entered allmulticast mode [ 228.675315][ T9924] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 228.692317][ T9924] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 228.699973][ T9924] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 228.700365][ T9924] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 228.700974][ T9924] hwsim0: entered allmulticast mode [ 228.701133][ T9924] ieee802154 phy0 wpan0: entered allmulticast mode [ 228.701404][ T9924] ieee802154 phy1 wpan1: entered allmulticast mode [ 228.701597][ T9924] teql0: entered allmulticast mode [ 228.701752][ T9924] tunl0: entered allmulticast mode [ 228.701948][ T9924] gre0: entered allmulticast mode [ 228.702083][ T9924] gretap0: entered allmulticast mode [ 228.703982][ T9924] erspan0: entered allmulticast mode [ 228.704332][ T9924] ip_vti0: entered allmulticast mode [ 228.704508][ T9924] ip6_vti0: entered allmulticast mode [ 228.704621][ T9924] sit0: entered allmulticast mode [ 228.704785][ T9924] ip6tnl0: entered allmulticast mode [ 228.704927][ T9924] ip6gre0: entered allmulticast mode [ 228.705067][ T9924] lapb0: entered allmulticast mode [ 228.705322][ T9924] lapb1: entered allmulticast mode [ 228.705564][ T9924] lapb2: entered allmulticast mode [ 228.705740][ T9924] lapb3: entered allmulticast mode [ 228.705999][ T9924] lapb4: entered allmulticast mode [ 228.706238][ T9924] lapb5: entered allmulticast mode [ 228.706592][ T9924] lapb6: entered allmulticast mode [ 228.709368][ T9924] lowpan0: entered allmulticast mode [ 228.709607][ T9924] wireguard0: entered allmulticast mode [ 228.710861][ T9924] netdevsim netdevsim2 eth2: entered allmulticast mode [ 228.713557][ T9924] netdevsim netdevsim2 eth3: entered allmulticast mode [ 228.714877][ T9924] netdevsim netdevsim2 eth4: entered allmulticast mode [ 228.715610][ T9924] netdevsim netdevsim2 eth5: entered allmulticast mode [ 229.300777][ T9947] lo speed is unknown, defaulting to 1000 [ 230.655063][T10000] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 230.655081][T10000] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 230.663061][T10000] vhci_hcd vhci_hcd.0: Device attached [ 230.783703][ T44] kauditd_printk_skb: 6 callbacks suppressed [ 230.783716][ T44] audit: type=1326 audit(1789477181.088:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 230.785765][ T44] audit: type=1326 audit(1789477181.088:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf700efec code=0x7ffc0000 [ 230.787190][ T44] audit: type=1326 audit(1789477181.098:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 230.787216][ T44] audit: type=1326 audit(1789477181.098:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 230.788499][ T44] audit: type=1326 audit(1789477181.098:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf700efec code=0x7ffc0000 [ 230.789486][ T44] audit: type=1326 audit(1789477181.098:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 230.791585][ T44] audit: type=1326 audit(1789477181.098:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 230.796500][ T44] audit: type=1326 audit(1789477181.098:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700efec code=0x7ffc0000 [ 230.796772][ T44] audit: type=1326 audit(1789477181.098:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 230.798209][ T44] audit: type=1326 audit(1789477181.108:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.3.1142" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf700efec code=0x7ffc0000 [ 230.858833][ T5842] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 230.906958][ T5821] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 230.927006][ T5842] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 231.057964][ T5821] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 231.058485][ T5821] usb 9-1: config 0 has no interfaces? [ 231.058501][ T5821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.062431][ T5821] usb 9-1: config 0 descriptor?? [ 231.405150][T10002] usb 45-1: recv xbuf, 0 [ 231.412959][ T5821] usb 9-1: USB disconnect, device number 6 [ 231.429050][ T7374] vhci_hcd vhci_hcd.4: stop threads [ 231.429526][ T7374] vhci_hcd vhci_hcd.4: release socket [ 231.430421][ T7374] vhci_hcd vhci_hcd.4: disconnect device [ 231.487179][ T5842] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 232.942929][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 233.298747][ T5842] kernel write not supported for file /hidraw0 (pid: 5842 comm: kworker/0:4) [ 235.282117][T10058] overlayfs: failed to clone upperpath [ 235.301294][T10058] Illegal XDP return value 4294967201 on prog (id 65) dev syz_tun, expect packet loss! [ 235.356345][T10061] jffs2: notice: (10061) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 236.108724][ T5745] Bluetooth: hci1: unexpected subevent 0x10 length: 30 > 2 [ 237.167708][T10075] 9p: Bad value for 'rfdno' [ 237.410550][T10094] Cannot find add_set index 1 as target [ 237.782073][T10100] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1170'. [ 237.967879][T10097] lo speed is unknown, defaulting to 1000 [ 238.178275][T10105] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 238.225355][T10105] kvm: pic: non byte read [ 238.234644][T10105] kvm: pic: level sensitive irq not supported [ 238.237572][T10105] kvm: pic: non byte read [ 238.245336][T10105] kvm: pic: level sensitive irq not supported [ 238.246636][T10105] kvm: pic: non byte read [ 238.260527][T10105] kvm: pic: level sensitive irq not supported [ 238.260852][T10105] kvm: pic: non byte read [ 238.261667][T10105] kvm: pic: level sensitive irq not supported [ 238.262258][T10105] kvm: pic: non byte read [ 239.670283][T10125] tipc: Enabled bearer , priority 0 [ 240.570329][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'. [ 241.125715][T10159] syzkaller0: entered promiscuous mode [ 241.125729][T10159] syzkaller0: entered allmulticast mode [ 241.160984][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'. [ 241.250477][T10165] tipc: Enabled bearer , priority 0 [ 241.250998][T10165] syzkaller0: entered promiscuous mode [ 241.251009][T10165] syzkaller0: entered allmulticast mode [ 241.253415][T10165] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 241.284889][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1190'. [ 241.287979][T10165] tipc: Resetting bearer [ 241.294120][T10164] tipc: Resetting bearer [ 241.345473][T10164] tipc: Disabling bearer [ 241.454826][ T5821] Process accounting resumed [ 241.573765][T10181] lo speed is unknown, defaulting to 1000 [ 242.260958][T10196] tipc: Enabled bearer , priority 0 [ 242.261483][T10196] syzkaller0: entered promiscuous mode [ 242.261493][T10196] syzkaller0: entered allmulticast mode [ 242.265757][T10196] tipc: Resetting bearer [ 242.279401][T10195] tipc: Resetting bearer [ 242.291755][T10195] tipc: Disabling bearer [ 242.491440][T10200] sctp: [Deprecated]: syz.0.1202 (pid 10200) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.491440][T10200] Use struct sctp_sack_info instead [ 243.773581][T10239] netlink: 'syz.0.1214': attribute type 39 has an invalid length. [ 243.958475][T10242] tc action pedit unable to extract header offset for header type (0x5) [ 243.958489][T10242] tc action pedit unable to extract header offset for header type (0x5) [ 243.958495][T10242] tc action pedit unable to extract header offset for header type (0x5) [ 243.958501][T10242] tc action pedit unable to extract header offset for header type (0x5) [ 243.958507][T10242] tc action pedit unable to extract header offset for header type (0x5) [ 243.958512][T10242] tc action pedit unable to extract header offset for header type (0x5) [ 243.958518][T10242] tc action pedit unable to extract header offset for header type (0x5) [ 243.958523][T10242] tc action pedit unable to extract header offset for header type (0x5) [ 243.958529][T10242] tc action pedit unable to extract header offset for header type (0x5) [ 243.958535][T10242] tc action pedit unable to extract header offset for header type (0x5) [ 243.958545][T10242] 0: reclassify loop, rule prio 0, protocol 800 [ 243.962317][T10244] fuse: fd is not a fuse device [ 244.239989][ T44] kauditd_printk_skb: 18 callbacks suppressed [ 244.240002][ T44] audit: type=1326 audit(1789477193.540:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 244.240028][ T44] audit: type=1326 audit(1789477193.550:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf700efec code=0x7ffc0000 [ 244.240048][ T44] audit: type=1326 audit(1789477193.550:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 244.240067][ T44] audit: type=1326 audit(1789477193.550:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 244.242071][ T44] audit: type=1326 audit(1789477193.550:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf700efec code=0x7ffc0000 [ 244.246015][ T44] audit: type=1326 audit(1789477193.550:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 244.278063][ T44] audit: type=1326 audit(1789477193.560:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 244.304888][ T44] audit: type=1326 audit(1789477193.610:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700efec code=0x7ffc0000 [ 244.304920][ T44] audit: type=1326 audit(1789477193.610:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 244.304939][ T44] audit: type=1326 audit(1789477193.610:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 244.362308][T10259] netlink: 'syz.0.1221': attribute type 10 has an invalid length. [ 244.362323][T10259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1221'. [ 244.362869][T10259] fuse: Bad value for 'fd' [ 244.522118][T10266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1223'. [ 246.034012][T10303] lo speed is unknown, defaulting to 1000 [ 246.057165][ T5821] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 246.228311][ T5821] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 246.229226][ T5821] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 246.229241][ T5821] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.229250][ T5821] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 246.229275][ T5821] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.230794][ T5821] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 246.230806][ T5821] usb 9-1: Product: syz [ 246.230814][ T5821] usb 9-1: Manufacturer: syz [ 246.235985][ T5821] cdc_wdm 9-1:1.0: skipping garbage [ 246.235995][ T5821] cdc_wdm 9-1:1.0: skipping garbage [ 246.238594][ T5821] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 246.238604][ T5821] cdc_wdm 9-1:1.0: Unknown control protocol [ 247.113861][T10315] /dev/nullb0: Can't lookup blockdev [ 248.131236][ T5842] usb 9-1: USB disconnect, device number 7 [ 248.334391][T10329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.887280][T10343] lo: entered allmulticast mode [ 248.890660][T10343] tunl0: entered allmulticast mode [ 248.891259][T10343] gre0: entered allmulticast mode [ 248.892249][T10343] gretap0: entered allmulticast mode [ 248.895236][T10343] erspan0: entered allmulticast mode [ 248.895915][T10343] ip_vti0: entered allmulticast mode [ 248.896417][T10343] ip6_vti0: entered allmulticast mode [ 248.910431][T10343] sit0: entered allmulticast mode [ 248.912403][T10343] ip6tnl0: entered allmulticast mode [ 248.913013][T10343] ip6gre0: entered allmulticast mode [ 248.913672][T10343] syz_tun: entered allmulticast mode [ 248.916079][T10343] bridge0: entered allmulticast mode [ 248.916612][T10343] bond0: entered allmulticast mode [ 248.927332][T10343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.930224][T10343] bond8: (slave bond0): Releasing active interface [ 248.932963][T10343] team0: entered allmulticast mode [ 248.933312][T10343] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.933667][T10343] dummy0: entered allmulticast mode [ 248.934598][T10343] nlmon0: entered allmulticast mode [ 248.935057][T10343] vxcan0: entered allmulticast mode [ 248.935531][T10343] vxcan1: entered allmulticast mode [ 248.935937][T10343] veth0: entered allmulticast mode [ 248.936422][T10343] veth1: entered allmulticast mode [ 248.960236][T10343] wg0: entered allmulticast mode [ 248.964929][T10343] wg2: entered allmulticast mode [ 248.965554][T10343] veth0_to_bridge: entered allmulticast mode [ 248.966056][T10343] bridge_slave_0: entered allmulticast mode [ 248.966342][T10343] veth1_to_bridge: entered allmulticast mode [ 248.979580][T10343] bridge_slave_1: entered allmulticast mode [ 248.980365][T10343] veth0_to_bond: entered allmulticast mode [ 248.990837][T10343] bond9: (slave veth0_to_bond): Releasing active interface [ 248.993310][T10343] bond_slave_0: entered allmulticast mode [ 248.993590][T10343] veth1_to_bond: entered allmulticast mode [ 248.994067][T10343] bond_slave_1: entered allmulticast mode [ 248.994359][T10343] veth0_to_team: entered allmulticast mode [ 248.996064][T10343] team_slave_0: entered allmulticast mode [ 248.996346][T10343] veth1_to_team: entered allmulticast mode [ 249.011124][T10343] team_slave_1: entered allmulticast mode [ 249.011467][T10343] veth0_to_batadv: entered allmulticast mode [ 249.011969][T10343] batadv_slave_0: entered allmulticast mode [ 249.012421][T10343] xfrm0: entered allmulticast mode [ 249.014453][T10343] veth0_to_hsr: entered allmulticast mode [ 249.014941][T10343] hsr_slave_0: entered allmulticast mode [ 249.015318][T10343] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 249.150111][T10345] vlan0 (unregistering): left allmulticast mode [ 249.150127][T10345] veth0_vlan (unregistering): left allmulticast mode [ 249.150863][T10345] team0: Port device vlan0 removed [ 249.289304][ T508] tipc: Resetting bearer [ 249.657722][ T44] kauditd_printk_skb: 30 callbacks suppressed [ 249.657742][ T44] audit: type=1326 audit(1789477198.970:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10358 comm="syz.4.1253" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 249.657783][ T44] audit: type=1326 audit(1789477198.970:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10358 comm="syz.4.1253" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 249.662953][ T44] audit: type=1326 audit(1789477198.970:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10358 comm="syz.4.1253" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 249.663087][ T44] audit: type=1326 audit(1789477198.970:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10358 comm="syz.4.1253" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 249.663192][ T44] audit: type=1326 audit(1789477198.970:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10358 comm="syz.4.1253" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 249.666601][ T44] audit: type=1326 audit(1789477198.970:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10358 comm="syz.4.1253" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 249.666648][ T44] audit: type=1326 audit(1789477198.970:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10358 comm="syz.4.1253" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 249.666685][ T44] audit: type=1326 audit(1789477198.970:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10358 comm="syz.4.1253" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 249.697944][ T44] audit: type=1326 audit(1789477199.010:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10358 comm="syz.4.1253" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71675ab code=0x7ffc0000 [ 249.698148][ T44] audit: type=1326 audit(1789477199.010:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10358 comm="syz.4.1253" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71675ab code=0x7ffc0000 [ 250.103248][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.103298][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.190094][T10374] netlink: 'syz.3.1258': attribute type 10 has an invalid length. [ 250.190236][T10374] dummy0: left allmulticast mode [ 250.216576][T10374] dummy0: entered allmulticast mode [ 250.223846][T10374] team0: Port device dummy0 added [ 250.457814][T10378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.471470][T10378] team0: Port device dummy0 removed [ 250.474443][T10378] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 251.042519][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'. [ 251.689720][T10407] syzkaller0: entered promiscuous mode [ 251.689735][T10407] syzkaller0: entered allmulticast mode [ 252.215552][T10422] 9pnet_fd: Insufficient options for proto=fd [ 252.357085][ T5821] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 252.519524][ T5821] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 252.520337][ T5821] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 252.521118][ T5821] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 252.523345][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.523363][ T5821] usb 8-1: Product: syz [ 252.523373][ T5821] usb 8-1: Manufacturer: syz [ 252.523380][ T5821] usb 8-1: SerialNumber: syz [ 252.552273][ T5821] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 252.561234][ T5821] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 252.570056][ T5821] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 252.854027][T10446] netlink: 496 bytes leftover after parsing attributes in process `syz.0.1282'. [ 253.754890][T10473] libceph: resolve '0' (ret=-3): failed [ 254.046977][ T3269] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 254.197879][ T3269] usb 9-1: Using ep0 maxpacket: 32 [ 254.201036][ T3269] usb 9-1: unable to get BOS descriptor or descriptor too short [ 254.201124][ T3269] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 254.208439][ T3269] usb 9-1: string descriptor 0 read error: -22 [ 254.208592][ T3269] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.232003][ T3269] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 254.232039][ T3269] dw2102: su3000_power_ctrl: 1, initialized 0 [ 254.232652][ T3269] dvb-usb: bulk message failed: -22 (2/0) [ 254.259734][ T3269] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 254.261055][ T3269] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 254.261096][ T3269] usb 9-1: media controller created [ 254.261471][ T3269] dvb-usb: bulk message failed: -22 (6/0) [ 254.261484][ T3269] dw2102: i2c transfer failed. [ 254.261515][ T3269] dvb-usb: bulk message failed: -22 (6/0) [ 254.261525][ T3269] dw2102: i2c transfer failed. [ 254.261534][ T3269] dvb-usb: bulk message failed: -22 (6/0) [ 254.261544][ T3269] dw2102: i2c transfer failed. [ 254.261552][ T3269] dvb-usb: bulk message failed: -22 (6/0) [ 254.261620][ T3269] dw2102: i2c transfer failed. [ 254.261630][ T3269] dvb-usb: bulk message failed: -22 (6/0) [ 254.261640][ T3269] dw2102: i2c transfer failed. [ 254.261648][ T3269] dvb-usb: bulk message failed: -22 (6/0) [ 254.261658][ T3269] dw2102: i2c transfer failed. [ 254.261663][ T3269] dvb-usb: MAC address: 02:02:02:02:02:02 [ 254.282493][ T3269] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.315560][ T3269] dvb-usb: bulk message failed: -22 (3/0) [ 254.316296][ T3269] dw2102: command 0x0e transfer failed. [ 254.316305][ T3269] dvb-usb: bulk message failed: -22 (3/0) [ 254.316315][ T3269] dw2102: command 0x0e transfer failed. [ 254.617560][ T3269] dvb-usb: bulk message failed: -22 (3/0) [ 254.617638][ T3269] dw2102: command 0x0e transfer failed. [ 254.617646][ T3269] dvb-usb: bulk message failed: -22 (3/0) [ 254.617656][ T3269] dw2102: command 0x0e transfer failed. [ 254.617662][ T3269] dvb-usb: bulk message failed: -22 (1/0) [ 254.617671][ T3269] dw2102: command 0x51 transfer failed. [ 254.725543][ T3269] DVB: Unable to find symbol ds3000_attach() [ 254.725616][ T3269] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 254.847148][ T3269] rc_core: IR keymap rc-su3000 not found [ 254.847161][ T3269] Registered IR keymap rc-empty [ 254.848792][ T3269] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 254.853565][ T3269] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input13 [ 254.859794][ T3269] dvb-usb: schedule remote query interval to 150 msecs. [ 254.859807][ T3269] dw2102: su3000_power_ctrl: 0, initialized 1 [ 254.859813][ T3269] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 254.867967][ T3269] usb 9-1: USB disconnect, device number 8 [ 254.927558][ T3269] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 255.108475][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1296'. [ 255.948866][T10419] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 255.949134][T10419] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 255.949152][T10419] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 255.974319][T10419] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 255.975358][T10419] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 255.978150][ T3269] usb 8-1: USB disconnect, device number 14 [ 255.998565][ T3269] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 256.003474][ T3269] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 256.003851][ T3269] ti_usb_3410_5052 8-1:2.0: device disconnected [ 256.120180][T10528] binder: 10526:10528 ioctl 4018620d 0 returned -22 [ 256.124005][T10528] binder: 10526:10528 ioctl c0306201 80000640 returned -22 [ 256.248990][T10531] syzkaller0: entered promiscuous mode [ 256.249004][T10531] syzkaller0: entered allmulticast mode [ 256.430962][T10541] tipc: Enabling of bearer rejected, failed to enable media [ 256.565986][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 256.621574][T10551] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1309'. [ 256.674009][T10524] fuse: fd is not a fuse device [ 256.724188][T10554] team0: Port device vlan0 removed [ 256.760216][ T629] tipc: Resetting bearer [ 256.768781][T10524] ip6t_srh: unknown srh match flags 4000 [ 257.218615][T10576] lo speed is unknown, defaulting to 1000 [ 257.246673][T10577] 8021q: adding VLAN 0 to HW filter on device .` [ 257.409286][T10577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.567114][T10577] 8021q: adding VLAN 0 to HW filter on device bond8 [ 257.568427][T10577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.578798][T10577] 8021q: adding VLAN 0 to HW filter on device bond9 [ 257.762258][ T8471] bond9: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 257.762526][ T8471] bond9: (slave veth0_to_bond): making interface the new active one [ 257.762540][ T8471] veth0_to_bond: entered promiscuous mode [ 257.762649][ T8471] veth0_to_bond: entered allmulticast mode [ 257.793453][ T8471] bond9: active interface up! [ 257.917994][T10585] tipc: Enabled bearer , priority 0 [ 257.922115][T10585] syzkaller0: entered promiscuous mode [ 257.922133][T10585] syzkaller0: entered allmulticast mode [ 257.927884][T10585] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 257.953754][T10585] tipc: Resetting bearer [ 257.956681][T10584] tipc: Resetting bearer [ 257.970418][T10584] tipc: Disabling bearer [ 259.027633][ T5821] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 259.167552][T10614] tipc: Resetting bearer [ 259.198092][ T5821] usb 9-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 259.205424][ T5821] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.212119][ T5821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.212141][ T5821] usb 9-1: Product: syz [ 259.212152][ T5821] usb 9-1: Manufacturer: syz [ 259.212164][ T5821] usb 9-1: SerialNumber: syz [ 259.227304][ T5821] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 260.063756][T10623] lo speed is unknown, defaulting to 1000 [ 260.149690][ T5821] gspca_mr97310a: reg read [21] error -110 [ 260.149757][ T5821] mr97310a 9-1:1.0: probe with driver mr97310a failed with error -110 [ 260.748826][ T44] kauditd_printk_skb: 103 callbacks suppressed [ 260.748842][ T44] audit: type=1326 audit(1789477210.060:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.3.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 260.748881][ T44] audit: type=1326 audit(1789477210.060:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.3.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 260.754789][ T44] audit: type=1326 audit(1789477210.060:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.3.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf700efec code=0x7ffc0000 [ 260.754834][ T44] audit: type=1326 audit(1789477210.060:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.3.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 260.754861][ T44] audit: type=1326 audit(1789477210.060:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.3.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 260.801972][ T44] audit: type=1326 audit(1789477210.080:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.3.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 260.802018][ T44] audit: type=1326 audit(1789477210.080:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.3.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 260.802051][ T44] audit: type=1326 audit(1789477210.080:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.3.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 260.802078][ T44] audit: type=1326 audit(1789477210.080:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.3.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf700efec code=0x7ffc0000 [ 260.802110][ T44] audit: type=1326 audit(1789477210.080:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.3.1330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 261.407917][T10638] jffs2: notice: (10638) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 261.800803][ T5821] usb 9-1: USB disconnect, device number 9 [ 262.396650][T10669] tipc: Enabled bearer , priority 0 [ 262.407466][T10669] syzkaller0: entered promiscuous mode [ 262.407479][T10669] syzkaller0: entered allmulticast mode [ 262.422574][T10669] tipc: Resetting bearer [ 262.427203][T10668] tipc: Resetting bearer [ 262.468115][T10668] tipc: Disabling bearer [ 264.234090][T10687] 9pnet_fd: Insufficient options for proto=fd [ 264.481084][ T6512] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 264.627641][ T6512] usb 8-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 264.628652][ T6512] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.630476][ T6512] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.630494][ T6512] usb 8-1: Product: syz [ 264.630505][ T6512] usb 8-1: Manufacturer: syz [ 264.630516][ T6512] usb 8-1: SerialNumber: syz [ 264.639935][ T6512] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 265.304733][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1351'. [ 265.653766][ T6512] gspca_mr97310a: reg read [21] error -110 [ 265.653870][ T6512] mr97310a 8-1:1.0: probe with driver mr97310a failed with error -110 [ 265.960506][T10708] lo speed is unknown, defaulting to 1000 [ 266.250047][T10714] macvlan0: entered allmulticast mode [ 266.252807][T10714] dummy0: entered promiscuous mode [ 266.255577][T10714] team0: Port device macvlan0 added [ 266.624132][T10726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.715900][T10726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.776471][T10732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.402414][ T5821] usb 8-1: USB disconnect, device number 15 [ 267.770292][T10749] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 267.770320][T10749] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 267.771733][T10749] vhci_hcd vhci_hcd.0: Device attached [ 268.067770][ T5821] usb 46-1: SetAddress Request (2) to port 0 [ 268.067828][ T5821] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 268.496637][T10750] vhci_hcd: connection reset by peer [ 268.500703][ T7374] vhci_hcd vhci_hcd.4: stop threads [ 268.500724][ T7374] vhci_hcd vhci_hcd.4: release socket [ 268.501513][ T7374] vhci_hcd vhci_hcd.4: disconnect device [ 269.384680][T10777] /dev/nullb0: Can't lookup blockdev [ 269.461637][T10778] tipc: Resetting bearer [ 269.506442][T10778] 8021q: adding VLAN 0 to HW filter on device eth0 [ 269.514114][T10778] 8021q: adding VLAN 0 to HW filter on device eth1 [ 269.523771][T10778] 8021q: adding VLAN 0 to HW filter on device eth2 [ 269.548223][T10778] 8021q: adding VLAN 0 to HW filter on device eth3 [ 269.566153][T10778] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.576378][T10778] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.588440][T10778] 8021q: adding VLAN 0 to HW filter on device bond5 [ 269.899291][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1378'. [ 270.456986][ T35] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 270.614740][ T35] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 270.617171][ T35] usb 9-1: config 0 has no interfaces? [ 270.617187][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.643466][ T35] usb 9-1: config 0 descriptor?? [ 270.945494][T10812] netlink: 'syz.3.1385': attribute type 2 has an invalid length. [ 270.945509][T10812] netlink: 'syz.3.1385': attribute type 2 has an invalid length. [ 270.966053][ T35] usb 9-1: USB disconnect, device number 10 [ 271.980646][T10827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.041704][T10827] bond2: entered allmulticast mode [ 272.041719][T10827] bridge2: entered allmulticast mode [ 272.042582][T10827] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 272.045214][T10827] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 272.060564][T10827] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.154207][ T5821] usb 46-1: device descriptor read/8, error -110 [ 273.192122][T10843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.216646][ T5745] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 273.547701][ T5821] usb usb46-port1: attempt power cycle [ 274.045084][T10863] libceph: resolve ' [ 274.045084][T10863] -&fYǝa2i [ 274.045084][T10863] .?&*&' (ret=-3): failed [ 274.153589][ T5821] usb usb46-port1: unable to enumerate USB device [ 274.688150][T10871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.697343][T10871] veth1_vlan: left promiscuous mode [ 274.704096][T10871] veth0_vlan: left promiscuous mode [ 274.704873][T10871] veth0_vlan: entered promiscuous mode [ 274.707480][T10871] veth1_vlan: entered promiscuous mode [ 274.721768][T10871] veth1_macvtap: left promiscuous mode [ 274.723050][T10871] veth0_macvtap: left promiscuous mode [ 274.724146][T10871] veth0_macvtap: entered promiscuous mode [ 274.737621][T10871] veth1_macvtap: entered promiscuous mode [ 274.759000][T10871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.765083][T10871] 8021q: adding VLAN 0 to HW filter on device bond2 [ 274.765574][T10871] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.775084][T10871] 8021q: adding VLAN 0 to HW filter on device bond4 [ 274.779941][T10871] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 274.804867][ T9237] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 274.804975][ T9237] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 274.827262][ T5842] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 274.839365][ T9237] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.839589][ T9237] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.839621][ T9237] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.839638][ T9237] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.137670][T10838] ip6t_srh: unknown srh match flags 4000 [ 275.397031][ T5884] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 275.446641][T10883] veth0: Caught tx_queue_len zero misconfig [ 275.662244][T10886] netlink: 'syz.3.1403': attribute type 1 has an invalid length. [ 275.662260][T10886] netlink: 756 bytes leftover after parsing attributes in process `syz.3.1403'. [ 275.777990][ T5884] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 276.787707][ T44] kauditd_printk_skb: 13 callbacks suppressed [ 276.787720][ T44] audit: type=1326 audit(1789477226.060:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.0.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 276.787742][ T44] audit: type=1326 audit(1789477226.060:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.0.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 276.787762][ T44] audit: type=1326 audit(1789477226.070:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.0.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf704efec code=0x7ffc0000 [ 276.787782][ T44] audit: type=1326 audit(1789477226.070:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.0.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 276.787802][ T44] audit: type=1326 audit(1789477226.070:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.0.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 276.787864][ T44] audit: type=1326 audit(1789477226.080:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.0.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704efec code=0x7ffc0000 [ 276.787885][ T44] audit: type=1326 audit(1789477226.080:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.0.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 276.787905][ T44] audit: type=1326 audit(1789477226.080:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.0.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 276.787924][ T44] audit: type=1326 audit(1789477226.080:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.0.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf704efec code=0x7ffc0000 [ 276.787943][ T44] audit: type=1326 audit(1789477226.080:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10911 comm="syz.0.1411" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 277.709299][T10927] tmpfs: Unknown parameter 'or_blxiet' [ 277.810947][T10932] bond1: option mode: unable to set because the bond device is up [ 277.824817][T10932] bond1: (slave bridge7): making interface the new active one [ 277.825475][T10932] bond1: (slave bridge7): Enslaving as an active interface with an up link [ 277.842887][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'. [ 277.842901][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 277.848438][T10932] team0: Port device bond0 removed [ 277.850429][T10932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.856445][T10932] bond1: (slave bond0): Enslaving as an active interface with a down link [ 277.919851][T10932] bond1 (unregistering): (slave bridge7): Releasing active interface [ 277.938340][T10932] bond1 (unregistering): (slave bond0): Releasing active interface [ 277.959901][T10932] bond1 (unregistering): Released all slaves [ 278.220136][T10936] netlink: 'syz.4.1417': attribute type 1 has an invalid length. [ 278.220152][T10936] netlink: 756 bytes leftover after parsing attributes in process `syz.4.1417'. [ 278.506978][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 279.177254][ T3269] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 279.327897][ T3269] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 279.334450][ T3269] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 279.334466][ T3269] usb 8-1: config 0 has no interface number 0 [ 279.334483][ T3269] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 279.334494][ T3269] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 279.334506][ T3269] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 279.334518][ T3269] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 279.334529][ T3269] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 279.334549][ T3269] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.337080][ T3269] usb 8-1: config 0 descriptor?? [ 279.340483][T10942] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 279.341628][ T3269] ldusb 8-1:0.55: Interrupt in endpoint not found [ 279.447619][T10968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.586342][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1421'. [ 279.624718][ T6512] usb 8-1: USB disconnect, device number 16 [ 280.492285][T10996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1430'. [ 280.542815][T10999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1431'. [ 280.542849][T10999] i: renamed from virt_wifi0 (while UP) [ 281.143477][T11006] /dev/nullb0: Can't lookup blockdev [ 281.772957][T11027] devpts: Bad value for 'max' [ 281.787019][T11027] netlink: 'syz.1.1441': attribute type 1 has an invalid length. [ 281.789274][T11027] netlink: 'syz.1.1441': attribute type 8 has an invalid length. [ 282.189030][ T5745] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 282.190590][ C2] sr 2:0:0:0: [sr0] tag#9 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 282.190633][ C2] sr 2:0:0:0: [sr0] tag#9 CDB: Read DVD structure ad d1 8b b6 80 3d [ 282.798308][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1450'. [ 283.088045][T11061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1451'. [ 283.160723][T11064] devpts: Bad value for 'max' [ 283.163727][T11064] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 283.164302][T11064] netlink: 'syz.0.1452': attribute type 8 has an invalid length. [ 283.382400][T11068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.553147][ T3269] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 283.728332][ T3269] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 283.733042][ T3269] usb 8-1: config 0 has no interfaces? [ 283.733342][ T3269] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.754626][ T3269] usb 8-1: config 0 descriptor?? [ 284.041661][ T3269] usb 8-1: USB disconnect, device number 17 [ 284.420491][T11078] jffs2: notice: (11078) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 284.425360][T11078] overlayfs: failed to clone upperpath [ 284.746300][T11076] lo speed is unknown, defaulting to 1000 [ 285.264896][T11095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.320225][T11095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.373001][T11089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.942998][T11107] /dev/nullb0: Can't lookup blockdev [ 286.586902][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 287.110314][T11122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1470'. [ 288.251197][T11139] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 288.378959][T11142] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 288.519581][T11143] lo speed is unknown, defaulting to 1000 [ 288.643310][T11150] /dev/nullb0: Can't lookup blockdev [ 290.550804][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'. [ 290.588652][T11173] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.714835][T11173] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.848090][T11173] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.853095][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1486'. [ 290.983454][T11173] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.244198][ T8471] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.298104][ T8471] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.307080][ T8471] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.307208][ T8471] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.608658][T11229] syzkaller0: entered promiscuous mode [ 292.610569][T11229] syzkaller0: entered allmulticast mode [ 293.035791][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1499'. [ 294.124658][T11247] pim6reg: entered allmulticast mode [ 294.134874][T11241] pim6reg: left allmulticast mode [ 294.823928][ T5842] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 294.850883][ T5842] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 295.527575][ T5842] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 295.691751][ T5842] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 295.697965][ T5842] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 295.698018][ T5842] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 295.698047][ T5842] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 295.698068][ T5842] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.698089][ T5842] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 295.698109][ T5842] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 295.698129][ T5842] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 295.698156][ T5842] usb 8-1: config 168 interface 0 has no altsetting 0 [ 295.701762][ T5842] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 295.701790][ T5842] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 295.701818][ T5842] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 295.701839][ T5842] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.701859][ T5842] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 295.701880][ T5842] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 295.701902][ T5842] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 295.701923][ T5842] usb 8-1: config 168 interface 0 has no altsetting 0 [ 295.702866][ T5842] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 295.702890][ T5842] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 295.702941][ T5842] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 295.702962][ T5842] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 295.702981][ T5842] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 295.703001][ T5842] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 295.703021][ T5842] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 295.703041][ T5842] usb 8-1: config 168 interface 0 has no altsetting 0 [ 295.706040][ T5842] usb 8-1: string descriptor 0 read error: -22 [ 295.706136][ T5842] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.757859][ T5842] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 295.900811][T11289] netlink: 'syz.4.1515': attribute type 3 has an invalid length. [ 295.910365][T11289] FAULT_INJECTION: forcing a failure. [ 295.910365][T11289] name failslab, interval 1, probability 0, space 0, times 0 [ 295.910386][T11289] CPU: 0 UID: 0 PID: 11289 Comm: syz.4.1515 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.910401][T11289] Tainted: [L]=SOFTLOCKUP [ 295.910406][T11289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 295.910412][T11289] Call Trace: [ 295.910416][T11289] [ 295.910421][T11289] dump_stack_lvl+0x100/0x190 [ 295.910440][T11289] should_fail_ex.cold+0x5/0xa [ 295.910455][T11289] should_failslab+0xc2/0x120 [ 295.910472][T11289] __kmalloc_noprof+0xfc/0x840 [ 295.910485][T11289] ? kvm_io_bus_register_dev+0x1d2/0x710 [ 295.910500][T11289] kvm_io_bus_register_dev+0x1d2/0x710 [ 295.910516][T11289] kvm_pic_init+0x22f/0x380 [ 295.910533][T11289] kvm_arch_vm_ioctl+0xec4/0x18d0 [ 295.910544][T11289] ? is_bpf_text_address+0x94/0x1a0 [ 295.910573][T11289] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 295.910590][T11289] ? __kernel_text_address+0xd/0x30 [ 295.910603][T11289] ? unwind_get_return_address+0x59/0xa0 [ 295.910618][T11289] ? __lock_acquire+0x5c0/0x1f40 [ 295.910636][T11289] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 295.910655][T11289] ? look_up_lock_class+0x55/0x120 [ 295.910671][T11289] ? register_lock_class+0x3f/0x7b0 [ 295.910685][T11289] ? find_held_lock+0x2b/0x80 [ 295.910696][T11289] ? ima_match_policy+0x8c4/0x23f0 [ 295.910716][T11289] ? __lock_acquire+0x5c0/0x1f40 [ 295.910739][T11289] ? __lock_acquire+0x5c0/0x1f40 [ 295.910756][T11289] ? __lock_acquire+0x5c0/0x1f40 [ 295.910772][T11289] ? lock_acquire+0x1d1/0x380 [ 295.910787][T11289] ? unwind_next_frame+0xbd/0x2090 [ 295.910803][T11289] ? lock_acquire+0x1d1/0x380 [ 295.910818][T11289] ? is_bpf_text_address+0x25/0x1a0 [ 295.910834][T11289] ? find_held_lock+0x2b/0x80 [ 295.910845][T11289] ? is_bpf_text_address+0x8a/0x1a0 [ 295.910859][T11289] ? is_bpf_text_address+0x8a/0x1a0 [ 295.910874][T11289] ? bpf_ksym_find+0x124/0x1c0 [ 295.910885][T11289] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 295.910900][T11289] ? is_bpf_text_address+0x94/0x1a0 [ 295.910914][T11289] ? kernel_text_address+0x8d/0x100 [ 295.910927][T11289] ? __pfx_widen_string+0x10/0x10 [ 295.910939][T11289] ? __kernel_text_address+0xd/0x30 [ 295.910951][T11289] ? unwind_get_return_address+0x59/0xa0 [ 295.910967][T11289] kvm_vm_ioctl+0x167d/0x42d0 [ 295.910979][T11289] ? tomoyo_path_number_perm+0x46d/0x580 [ 295.910995][T11289] ? stack_trace_save+0x8e/0xc0 [ 295.911008][T11289] ? __pfx_stack_trace_save+0x10/0x10 [ 295.911022][T11289] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 295.911031][T11289] ? __lock_acquire+0x5c0/0x1f40 [ 295.911046][T11289] ? tomoyo_path_number_perm+0x46d/0x580 [ 295.911061][T11289] ? kasan_save_stack+0x3f/0x50 [ 295.911074][T11289] ? kasan_save_stack+0x30/0x50 [ 295.911085][T11289] ? kasan_save_track+0x14/0x30 [ 295.911097][T11289] ? kasan_save_free_info+0x3b/0x70 [ 295.911112][T11289] ? __kasan_slab_free+0x5f/0x80 [ 295.911124][T11289] ? kfree+0x22b/0x6d0 [ 295.911139][T11289] ? tomoyo_path_number_perm+0x46d/0x580 [ 295.911159][T11289] ? security_file_ioctl_compat+0xd3/0x230 [ 295.911175][T11289] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 295.911192][T11289] ? __do_fast_syscall_32+0x13a/0x8b0 [ 295.911209][T11289] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 295.911228][T11289] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 295.911260][T11289] ? kasan_quarantine_put+0x104/0x240 [ 295.911272][T11289] ? lockdep_hardirqs_on+0x7d/0x110 [ 295.911288][T11289] ? find_held_lock+0x2b/0x80 [ 295.911298][T11289] ? tomoyo_path_number_perm+0x28f/0x580 [ 295.911313][T11289] ? tomoyo_path_number_perm+0x28f/0x580 [ 295.911331][T11289] ? tomoyo_path_number_perm+0x188/0x580 [ 295.911347][T11289] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 295.911362][T11289] ? futex_wait+0x11e/0x370 [ 295.911379][T11289] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 295.911395][T11289] ? do_vfs_ioctl+0x226/0x13e0 [ 295.911412][T11289] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 295.911430][T11289] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 295.911441][T11289] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 295.911451][T11289] ? __fget_files+0x34/0x3d0 [ 295.911463][T11289] ? find_held_lock+0x2b/0x80 [ 295.911474][T11289] ? __fget_files+0x215/0x3d0 [ 295.911484][T11289] ? hook_file_ioctl_common+0x140/0x440 [ 295.911503][T11289] ? __fget_files+0x21f/0x3d0 [ 295.911518][T11289] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 295.911529][T11289] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 295.911548][T11289] __do_fast_syscall_32+0x13a/0x8b0 [ 295.911564][T11289] ? lockdep_hardirqs_on+0x7d/0x110 [ 295.911581][T11289] do_fast_syscall_32+0x32/0x70 [ 295.911598][T11289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.911611][T11289] RIP: 0023:0xf7f67fec [ 295.911625][T11289] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 295.911638][T11289] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 295.911650][T11289] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000ae60 [ 295.911658][T11289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.911665][T11289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.911672][T11289] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 295.911679][T11289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.911694][T11289] [ 296.133103][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1514'. [ 296.195649][ T5842] usb 8-1: USB disconnect, device number 18 [ 296.278243][T11317] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 296.278643][T11317] netlink: 'syz.0.1520': attribute type 1 has an invalid length. [ 296.308230][T11317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.352556][T11317] bond1: (slave geneve2): making interface the new active one [ 296.361636][T11317] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 296.450275][T11322] bridge0: left allmulticast mode [ 296.454151][T11322] netlink: 'syz.4.1521': attribute type 10 has an invalid length. [ 297.236999][ T6512] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 297.390045][ T6512] usb 8-1: unable to get BOS descriptor or descriptor too short [ 297.390084][ T6512] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 297.391161][ T6512] usb 8-1: config 189 has an invalid interface number: 127 but max is 0 [ 297.391182][ T6512] usb 8-1: config 189 has no interface number 0 [ 297.391200][ T6512] usb 8-1: config 189 interface 127 has no altsetting 0 [ 297.392953][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1527'. [ 297.393545][ T6512] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.393563][ T6512] usb 8-1: Product: syz [ 297.393574][ T6512] usb 8-1: Manufacturer: syz [ 297.393586][ T6512] usb 8-1: SerialNumber: syz [ 297.654979][ T6512] usbserial_generic 8-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 297.654999][ T6512] usbserial_generic 8-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 297.655030][ T6512] usbserial_generic 8-1:189.127: device has no bulk endpoints [ 297.655584][ T6512] safe_serial 8-1:189.127: safe_serial converter detected [ 297.655694][ T6512] safe_serial 8-1:189.127: probe with driver safe_serial failed with error -22 [ 297.668115][ T6512] usb 8-1: USB disconnect, device number 19 [ 297.717715][ T25] e1000 0000:00:06.0 eth0: Reset adapter [ 297.720548][T11346] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 297.888475][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1530'. [ 297.964663][T11346] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 297.969922][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1529'. [ 297.969950][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1529'. [ 298.081756][T11363] futex_wake_op: syz.1.1529 tries to shift op by -1; fix this program [ 298.227262][ T25] e1000 0000:00:06.0 eth0: Reset adapter [ 298.249847][ T44] kauditd_printk_skb: 51 callbacks suppressed [ 298.249860][ T44] audit: type=1326 audit(1789477247.560:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11364 comm="syz.3.1531" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x0 [ 298.421852][ T5842] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 298.435972][T11374] netlink: 'syz.4.1533': attribute type 1 has an invalid length. [ 298.437423][ T43] e1000 0000:00:06.0 eth0: Reset adapter [ 298.570013][T11378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1533'. [ 298.655088][T11374] bond4: (slave geneve2): making interface the new active one [ 298.657423][T11374] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 298.658403][T11378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 298.710446][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 298.710662][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 298.710698][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 298.710729][ T13] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 300.667972][ T43] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 301.299944][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 303.617184][ T5749] Bluetooth: hci2: command 0x0406 tx timeout [ 308.214909][T11451] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 308.222836][T11451] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1542'. [ 308.386032][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1543'. [ 308.386054][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1543'. [ 308.455829][T11456] futex_wake_op: syz.4.1543 tries to shift op by -1; fix this program [ 308.553817][T11464] debugfs: '!' already exists in 'ieee80211' [ 308.697105][ T9237] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.708354][ T9237] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.708392][ T9237] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.708418][ T9237] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.061127][ T44] audit: type=1326 audit(1789477258.370:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.1.1550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 309.061235][ T44] audit: type=1326 audit(1789477258.370:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.1.1550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 309.062311][ T44] audit: type=1326 audit(1789477258.370:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.1.1550" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf706efec code=0x7ffc0000 [ 309.063057][ T44] audit: type=1326 audit(1789477258.370:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.1.1550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 309.065476][ T44] audit: type=1326 audit(1789477258.370:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.1.1550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 309.066087][ T44] audit: type=1326 audit(1789477258.370:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.1.1550" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706efec code=0x7ffc0000 [ 309.066181][ T44] audit: type=1326 audit(1789477258.370:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.1.1550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 309.066357][ T44] audit: type=1326 audit(1789477258.370:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.1.1550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 309.070207][ T44] audit: type=1326 audit(1789477258.380:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.1.1550" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf706efec code=0x7ffc0000 [ 309.070232][ T44] audit: type=1326 audit(1789477258.380:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.1.1550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 309.224839][T11506] fuse: fd is not a fuse device [ 309.364529][T11510] overlayfs: failed to clone lowerpath [ 310.106339][T11528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.320892][T11533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.321360][T11533] tipc: Resetting bearer [ 310.691360][T11556] fuse: fd is not a fuse device [ 310.736040][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 311.066488][T11566] syzkaller0: entered promiscuous mode [ 311.066508][T11566] syzkaller0: entered allmulticast mode [ 311.554667][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.554697][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.637317][T11576] lo speed is unknown, defaulting to 1000 [ 313.317550][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1573'. [ 317.479447][T11651] jffs2: notice: (11651) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 317.542420][T11651] overlayfs: failed to clone upperpath [ 317.564668][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'. [ 317.934152][T11666] netlink: 'syz.3.1591': attribute type 1 has an invalid length. [ 317.950556][T11666] 8021q: adding VLAN 0 to HW filter on device bond10 [ 318.041784][T11666] bond10: (slave geneve2): making interface the new active one [ 318.042672][T11666] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 319.030255][ T5745] Bluetooth: hci2: unexpected cc 0x200b length: 2 > 1 [ 319.030277][ T5745] Bluetooth: hci2: unexpected event for opcode 0x200b [ 319.030857][T11681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.333295][T11684] batadv_slave_0: Caught tx_queue_len zero misconfig [ 319.957101][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1601'. [ 320.250606][ T5785] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.250634][ T5785] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.250652][ T5785] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.250669][ T5785] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.476033][T11713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.964600][ T115] ------------[ cut here ]------------ [ 322.964614][ T115] current->flags & PF_MEMALLOC [ 322.964621][ T115] WARNING: mm/page_alloc.c:4816 at __alloc_frozen_pages_noprof+0x1eac/0x3300, CPU#0: kswapd1/115 [ 322.974736][ T115] Modules linked in: [ 322.977236][ T115] CPU: 0 UID: 0 PID: 115 Comm: kswapd1 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.981332][ T115] Tainted: [L]=SOFTLOCKUP [ 322.983029][ T115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.986976][ T115] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 322.989762][ T115] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 56 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 322.998243][ T115] RSP: 0000:ffffc9000219ed18 EFLAGS: 00010202 [ 323.000645][ T115] RAX: ffff8880404c0000 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 323.003736][ T115] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 323.006749][ T115] RBP: ffff8880404c002c R08: 0000000000008000 R09: 0000000000000001 [ 323.009958][ T115] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40 [ 323.012980][ T115] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000433dbd [ 323.016029][ T115] FS: 0000000000000000(0000) GS:ffff888096960000(0000) knlGS:0000000000000000 [ 323.019518][ T115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.022060][ T115] CR2: 00000000f53dbff4 CR3: 000000006dfc1000 CR4: 0000000000352ef0 [ 323.025164][ T115] Call Trace: [ 323.026543][ T115] [ 323.028081][ T115] ? lock_acquire+0x1d1/0x380 [ 323.029987][ T115] ? unwind_next_frame+0xbd/0x2090 [ 323.031937][ T115] ? lock_acquire+0x1d1/0x380 [ 323.033729][ T115] ? unwind_next_frame+0xbd/0x2090 [ 323.035606][ T115] ? find_held_lock+0x2b/0x80 [ 323.037432][ T115] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 323.039752][ T115] ? unwind_next_frame+0x3be/0x2090 [ 323.041370][ T115] ? unwind_next_frame+0x3c8/0x2090 [ 323.043070][ T115] ? __lock_acquire+0x5c0/0x1f40 [ 323.044910][ T115] ? arch_stack_walk+0x94/0xf0 [ 323.046697][ T115] ? __lock_acquire+0x5c0/0x1f40 [ 323.048649][ T115] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 323.050864][ T115] ? policy_nodemask+0xed/0x4f0 [ 323.052476][ T115] alloc_pages_mpol+0x201/0x550 [ 323.054051][ T115] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 323.056063][ T115] ? filemap_get_entry+0x22d/0x450 [ 323.058106][ T115] ? filemap_get_entry+0x22d/0x450 [ 323.059997][ T115] folio_alloc_noprof+0x22/0x250 [ 323.061903][ T115] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 323.064568][ T115] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 323.067247][ T115] ? lock_acquire+0x1d1/0x380 [ 323.068995][ T115] ? ext4_get_group_info+0x146/0x480 [ 323.070965][ T115] ? find_held_lock+0x2b/0x80 [ 323.072680][ T115] __filemap_get_folio_mpol+0x653/0x1320 [ 323.074777][ T115] ext4_mb_load_buddy_gfp+0x70d/0x1b20 [ 323.077818][ T115] ext4_discard_preallocations+0x584/0x10c0 [ 323.080024][ T115] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 323.082058][ T115] ? __pfx_xa_destroy+0x10/0x10 [ 323.083539][ T115] ? inode_wait_for_writeback+0x171/0x390 [ 323.085317][ T115] ? inode_lru_isolate+0x37/0xf00 [ 323.086925][ T115] ext4_clear_inode+0x6e/0x280 [ 323.088382][ T115] ext4_evict_inode+0x1de/0x17d0 [ 323.089988][ T115] ? evict+0x37e/0xad0 [ 323.091327][ T115] ? __pfx_ext4_evict_inode+0x10/0x10 [ 323.093007][ T115] evict+0x3c2/0xad0 [ 323.094226][ T115] ? _raw_spin_unlock+0x28/0x50 [ 323.095792][ T115] ? __list_lru_walk_one+0x26d/0x550 [ 323.097483][ T115] ? __pfx_evict+0x10/0x10 [ 323.098901][ T115] ? xa_load+0x149/0x2c0 [ 323.100171][ T115] ? xa_load+0x149/0x2c0 [ 323.101432][ T115] dispose_list+0x117/0x1e0 [ 323.102866][ T115] prune_icache_sb+0xea/0x150 [ 323.104305][ T115] ? list_lru_count_one+0x147/0x320 [ 323.105901][ T115] ? __pfx_prune_icache_sb+0x10/0x10 [ 323.107580][ T115] super_cache_scan+0x3ac/0x5c0 [ 323.109101][ T115] do_shrink_slab+0x416/0x1200 [ 323.110572][ T115] shrink_slab+0xa82/0x12e0 [ 323.111956][ T115] ? shrink_slab+0x677/0x12e0 [ 323.113378][ T115] ? __pfx_shrink_slab+0x10/0x10 [ 323.114887][ T115] ? lock_acquire+0x1d1/0x380 [ 323.116278][ T115] shrink_one+0x398/0x850 [ 323.117650][ T115] ? shrink_node+0x2b00/0x4320 [ 323.119127][ T115] shrink_node+0x2b20/0x4320 [ 323.120546][ T115] ? shrink_node+0x286e/0x4320 [ 323.121994][ T115] ? __pfx_shrink_node+0x10/0x10 [ 323.123503][ T115] ? find_held_lock+0x2b/0x80 [ 323.124937][ T115] ? balance_pgdat+0xb20/0x1f00 [ 323.126444][ T115] balance_pgdat+0xb20/0x1f00 [ 323.127940][ T115] ? do_raw_spin_lock+0x128/0x260 [ 323.129435][ T115] ? __pfx_balance_pgdat+0x10/0x10 [ 323.130944][ T115] ? lockdep_hardirqs_on+0x7d/0x110 [ 323.132413][ T115] ? __lock_acquire+0x5c0/0x1f40 [ 323.133910][ T115] ? rcu_is_watching+0x13/0xc0 [ 323.135371][ T115] kswapd+0x556/0xb50 [ 323.136617][ T115] ? __pfx_kswapd+0x10/0x10 [ 323.138107][ T115] ? __rcu_read_lock+0x20/0x70 [ 323.139527][ T115] ? __pfx_autoremove_wake_function+0x10/0x10 [ 323.141353][ T115] ? __kthread_parkme+0x18f/0x230 [ 323.142859][ T115] ? kthread+0x13a/0x450 [ 323.144127][ T115] ? __pfx_kswapd+0x10/0x10 [ 323.145504][ T115] kthread+0x373/0x450 [ 323.146808][ T115] ? __pfx_kthread+0x10/0x10 [ 323.148215][ T115] ret_from_fork+0x730/0xd60 [ 323.149650][ T115] ? __pfx_ret_from_fork+0x10/0x10 [ 323.151208][ T115] ? __switch_to+0x800/0x10f0 [ 323.152634][ T115] ? __pfx_kthread+0x10/0x10 [ 323.154100][ T115] ret_from_fork_asm+0x1a/0x30 [ 323.155564][ T115] [ 323.156532][ T115] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 323.158749][ T115] CPU: 0 UID: 0 PID: 115 Comm: kswapd1 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.161805][ T115] Tainted: [L]=SOFTLOCKUP [ 323.163113][ T115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 323.166056][ T115] Call Trace: [ 323.167104][ T115] [ 323.168013][ T115] dump_stack_lvl+0x100/0x190 [ 323.169467][ T115] vpanic+0x553/0x970 [ 323.170688][ T115] ? __pfx_vpanic+0x10/0x10 [ 323.172078][ T115] panic+0xd1/0xe0 [ 323.173214][ T115] ? __pfx_panic+0x10/0x10 [ 323.174602][ T115] check_panic_on_warn.cold+0x19/0x34 [ 323.176251][ T115] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 323.178287][ T115] __warn.cold+0x191/0x318 [ 323.179646][ T115] __report_bug+0x30f/0x440 [ 323.181021][ T115] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 323.182922][ T115] ? __pfx___report_bug+0x10/0x10 [ 323.184439][ T115] ? __zone_watermark_ok+0x281/0x500 [ 323.186048][ T115] ? get_page_from_freelist+0x344/0x35d0 [ 323.187775][ T115] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 323.189598][ T115] report_bug+0xb3/0x220 [ 323.190916][ T115] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 323.192791][ T115] handle_bug+0x16a/0x2a0 [ 323.194456][ T115] exc_invalid_op+0x17/0x50 [ 323.196085][ T115] asm_exc_invalid_op+0x1a/0x20 [ 323.197580][ T115] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 323.199598][ T115] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 56 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 323.205681][ T115] RSP: 0000:ffffc9000219ed18 EFLAGS: 00010202 [ 323.207747][ T115] RAX: ffff8880404c0000 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 323.210109][ T115] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 323.212639][ T115] RBP: ffff8880404c002c R08: 0000000000008000 R09: 0000000000000001 [ 323.215217][ T115] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40 [ 323.217526][ T115] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000433dbd [ 323.219876][ T115] ? __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 323.222115][ T115] ? lock_acquire+0x1d1/0x380 [ 323.223777][ T115] ? unwind_next_frame+0xbd/0x2090 [ 323.225547][ T115] ? lock_acquire+0x1d1/0x380 [ 323.227018][ T115] ? unwind_next_frame+0xbd/0x2090 [ 323.228557][ T115] ? find_held_lock+0x2b/0x80 [ 323.230079][ T115] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 323.232149][ T115] ? unwind_next_frame+0x3be/0x2090 [ 323.233755][ T115] ? unwind_next_frame+0x3c8/0x2090 [ 323.235333][ T115] ? __lock_acquire+0x5c0/0x1f40 [ 323.236820][ T115] ? arch_stack_walk+0x94/0xf0 [ 323.238295][ T115] ? __lock_acquire+0x5c0/0x1f40 [ 323.239801][ T115] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 323.241630][ T115] ? policy_nodemask+0xed/0x4f0 [ 323.243140][ T115] alloc_pages_mpol+0x201/0x550 [ 323.244610][ T115] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 323.246258][ T115] ? filemap_get_entry+0x22d/0x450 [ 323.247800][ T115] ? filemap_get_entry+0x22d/0x450 [ 323.249337][ T115] folio_alloc_noprof+0x22/0x250 [ 323.250946][ T115] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 323.252816][ T115] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 323.254839][ T115] ? lock_acquire+0x1d1/0x380 [ 323.256258][ T115] ? ext4_get_group_info+0x146/0x480 [ 323.257867][ T115] ? find_held_lock+0x2b/0x80 [ 323.259323][ T115] __filemap_get_folio_mpol+0x653/0x1320 [ 323.261133][ T115] ext4_mb_load_buddy_gfp+0x70d/0x1b20 [ 323.262814][ T115] ext4_discard_preallocations+0x584/0x10c0 [ 323.264596][ T115] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 323.266585][ T115] ? __pfx_xa_destroy+0x10/0x10 [ 323.268114][ T115] ? inode_wait_for_writeback+0x171/0x390 [ 323.269880][ T115] ? inode_lru_isolate+0x37/0xf00 [ 323.271564][ T115] ext4_clear_inode+0x6e/0x280 [ 323.273037][ T115] ext4_evict_inode+0x1de/0x17d0 [ 323.274582][ T115] ? evict+0x37e/0xad0 [ 323.275829][ T115] ? __pfx_ext4_evict_inode+0x10/0x10 [ 323.277473][ T115] evict+0x3c2/0xad0 [ 323.278679][ T115] ? _raw_spin_unlock+0x28/0x50 [ 323.280176][ T115] ? __list_lru_walk_one+0x26d/0x550 [ 323.281765][ T115] ? __pfx_evict+0x10/0x10 [ 323.283245][ T115] ? xa_load+0x149/0x2c0 [ 323.284557][ T115] ? xa_load+0x149/0x2c0 [ 323.285909][ T115] dispose_list+0x117/0x1e0 [ 323.287331][ T115] prune_icache_sb+0xea/0x150 [ 323.288780][ T115] ? list_lru_count_one+0x147/0x320 [ 323.290385][ T115] ? __pfx_prune_icache_sb+0x10/0x10 [ 323.291967][ T115] super_cache_scan+0x3ac/0x5c0 [ 323.293443][ T115] do_shrink_slab+0x416/0x1200 [ 323.294889][ T115] shrink_slab+0xa82/0x12e0 [ 323.296234][ T115] ? shrink_slab+0x677/0x12e0 [ 323.297702][ T115] ? __pfx_shrink_slab+0x10/0x10 [ 323.299255][ T115] ? lock_acquire+0x1d1/0x380 [ 323.300696][ T115] shrink_one+0x398/0x850 [ 323.302013][ T115] ? shrink_node+0x2b00/0x4320 [ 323.303475][ T115] shrink_node+0x2b20/0x4320 [ 323.304891][ T115] ? shrink_node+0x286e/0x4320 [ 323.306343][ T115] ? __pfx_shrink_node+0x10/0x10 [ 323.307853][ T115] ? find_held_lock+0x2b/0x80 [ 323.309295][ T115] ? balance_pgdat+0xb20/0x1f00 [ 323.311175][ T115] balance_pgdat+0xb20/0x1f00 [ 323.313122][ T115] ? do_raw_spin_lock+0x128/0x260 [ 323.315114][ T115] ? __pfx_balance_pgdat+0x10/0x10 [ 323.317074][ T115] ? lockdep_hardirqs_on+0x7d/0x110 [ 323.319083][ T115] ? __lock_acquire+0x5c0/0x1f40 [ 323.320701][ T115] ? rcu_is_watching+0x13/0xc0 [ 323.322161][ T115] kswapd+0x556/0xb50 [ 323.323378][ T115] ? __pfx_kswapd+0x10/0x10 [ 323.324761][ T115] ? __rcu_read_lock+0x20/0x70 [ 323.326247][ T115] ? __pfx_autoremove_wake_function+0x10/0x10 [ 323.328124][ T115] ? __kthread_parkme+0x18f/0x230 [ 323.329717][ T115] ? kthread+0x13a/0x450 [ 323.331015][ T115] ? __pfx_kswapd+0x10/0x10 [ 323.332406][ T115] kthread+0x373/0x450 [ 323.333693][ T115] ? __pfx_kthread+0x10/0x10 [ 323.335123][ T115] ret_from_fork+0x730/0xd60 [ 323.336540][ T115] ? __pfx_ret_from_fork+0x10/0x10 [ 323.338132][ T115] ? __switch_to+0x800/0x10f0 [ 323.339585][ T115] ? __pfx_kthread+0x10/0x10 [ 323.340982][ T115] ret_from_fork_asm+0x1a/0x30 [ 323.342572][ T115] [ 323.345276][ T115] Kernel Offset: disabled [ 323.346591][ T115] Rebooting in 86400 seconds..