last executing test programs: 5m47.229756517s ago: executing program 0 (id=102): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x187\xc2:}\xa3\x9bO\xdd\xdf\xdf\xaf\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9fWI\x17\x1eq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xbdc\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x98\x82\x94\x14\xe33\xb7H\xd4b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wL;\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfd\xf9\xa6\xdd\xf0\x1f\xed\xb3Q\x03\x03}Sb\x1b\x89\n?&\x11q^\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe3\x1b\x9f\xcf\x9e\xdf\x82)\xc7P\xa4\xcdi\xde\xb0\x14\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xc3p@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafTk\"\xfa\xc37\\8\xa7g\x0f!Y\x8e\\\xac\x01\x11R\x05p\x1a\"\r\xe9\x05\x00&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xeb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x95\xf4b:\x80^\xb7\x17@.\x91\xf1\xd2\v\x8dn6\x1a\xa3\x12\xbf$\x11\'B\xec\xebC%\x86\xa2Q\xc3\x8e(\x00'/890, 0x2) openat$full(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = gettid() sigaltstack(&(0x7f0000000000)={&(0x7f0000002b40)=""/4087, 0x0, 0xff4c}, 0x0) rt_sigqueueinfo(r5, 0x21, &(0x7f00000002c0)={0x3d}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) setns(0xc9, 0x0) setsockopt$sock_int(r6, 0x1, 0x1e, &(0x7f0000000400)=0x9, 0x4) 5m46.281592091s ago: executing program 0 (id=105): socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) tee(r1, r3, 0x1fc, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) userfaultfd(0x801) 5m45.2276188s ago: executing program 0 (id=110): r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_aout(r0, 0x0, 0xc8) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xa9525000) fcntl$setsig(r3, 0xa, 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x0) fchown(r4, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5m44.827248362s ago: executing program 0 (id=114): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) close(0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x8000000000000000, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x7, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101042, 0x10d) close(r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, r3, 0x0}]) 5m44.559051347s ago: executing program 0 (id=117): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f00000004c0)="99", 0x1}], 0x1, 0xfffffc01, 0x81, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x46, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0x1a, 0x0, 0xb4, 0x40, 0x856, 0xac19, 0xc2a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x4, 0xd9, 0x80, 0x9, "", [{{0x9, 0x4, 0x42, 0xa, 0x3, 0xa8, 0x14, 0xcb, 0x5, [@uac_as], [{{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x0, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x3ff}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x0, 0x81, 0xe}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x1, 0x3, 0x2}}]}}]}}]}}, 0x0) sync() 5m44.415632856s ago: executing program 0 (id=118): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000314050000000000000000000900020072786530000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e20, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000900)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x7f000001, @empty}, {0x2, 0x4e20, 0x7f000001, @empty}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000a00)={0xc, 0x8, 0xfa00, {&(0x7f0000000b00)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000c00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000d00)={0xc, 0x8, 0xfa00, {&(0x7f0000000e00)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000f00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0x1}, r3}}, 0x120) nanosleep(&(0x7f0000001000)={0x5}, 0x0) 5m44.378251125s ago: executing program 32 (id=118): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000314050000000000000000000900020072786530000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e20, @loopback}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000900)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x7f000001, @empty}, {0x2, 0x4e20, 0x7f000001, @empty}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000a00)={0xc, 0x8, 0xfa00, {&(0x7f0000000b00)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000c00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000d00)={0xc, 0x8, 0xfa00, {&(0x7f0000000e00)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000f00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0x1}, r3}}, 0x120) nanosleep(&(0x7f0000001000)={0x5}, 0x0) 16.26022164s ago: executing program 4 (id=1742): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1}) fcntl$lock(r1, 0x25, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bind$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f0000004d00)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @multicast1, {[@generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000300), 0x1000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x18000000000002a0, 0x16, 0x0, &(0x7f00000005c0)="76389e89f0f4b500000000000000eb810074c8893043", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.528715279s ago: executing program 4 (id=1747): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) unshare(0x6a060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) openat$zero(0xffffff9c, 0x0, 0x18000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r3, 0xffffffffffffffff, 0x13, 0x0, @void}, 0x10) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11.621121547s ago: executing program 2 (id=1751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 11.309292867s ago: executing program 4 (id=1752): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r1, &(0x7f0000000140)=@random={'user.', 'memory.events.loccl\x00'}) creat(&(0x7f0000000080)='./file0\x00', 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc01c5869, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x200, &(0x7f0000000180)={@_ha_fsid={[0x1, 0x6]}, {0x1, 0x100, 0x1, 0x7ff}}, 0x5, &(0x7f00000001c0), 0x0}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) close(0xffffffffffffffff) 7.579549057s ago: executing program 3 (id=1757): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x1002000ff) 7.213928667s ago: executing program 3 (id=1758): socket$rds(0x15, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) socket$phonet(0x23, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x34040817}, 0x80) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0f4) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x40054) 7.087972434s ago: executing program 2 (id=1759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 6.757079537s ago: executing program 4 (id=1760): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x5, &(0x7f00000000c0)={0x1, "810556c721100f00"}}) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) r2 = fsopen(&(0x7f0000000000)='pstore\x00', 0x1) mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/16, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000600)='./gadget/dummy_udc\x00', 0xc802, 0x104) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1fc) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac1_legacy.usb0\x00', 0x1ff) 6.223019234s ago: executing program 3 (id=1762): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100"], 0x48}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x8ff, 0x30}, &(0x7f0000000080)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r4, r3, 0x0, 0x8) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) syz_usb_connect(0x2, 0xdb4, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x8b, 0x7c, 0x2a, 0x10, 0x3f0, 0x2a76, 0xb8a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda2, 0x3, 0xb, 0x1, 0x40, 0x51, "", [{{0x9, 0x4, 0x1f, 0xa, 0xc, 0xff, 0x5d, 0x1, 0xfe, [], [{{0x9, 0x5, 0x1, 0xc, 0x10, 0x10, 0x8, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x5}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x8, 0xd8}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x7, 0x8b}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0xf9, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x2, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x1000}, @generic={0x16, 0x1, "205d8a9791ea6dfeeee986d2de2a5f9359dfd036"}]}}, {{0x9, 0x5, 0xe, 0xb, 0x10, 0x1, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x200}, @generic={0xbe, 0x21, "4ea533a7164bf400b0e0152c6bf8e326a53a3b63fda89061e313a5fa04f87b4540bab80c0308fe75a007f98d79be19317a41add219d1b96e5833ba3d717ed3a46618ceca9ccd0e11920aa98b20b9d6b6fb71e964fa53556de5bb1898dbd63423cc68d0eddd5348f3e32e15cf6d73f24ed539c3e9e522d67bd4fb8587d057c0c2ee7f8955e94c84f75ffa5986be0d3cdfd4d7de33c936b2e948fd95bd572829e40f407697cced09018e218d750558a1799c1c3972ffcb12a0e0b8f75e"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0xbb, 0x1, 0x8, [@generic={0xaf, 0x22, "cee24d22415d0493b92baf3e43e103208780e16d23a667cb9323c7d5565f3ae5b17cf97a13675848bcad260881f93a221269b6f41c7fbfe1022d12161323b64a44fc148594e316d84a29df3258356546dc08aa1c86f6fa78309df5a20a1c28950c4f1610572411378be7ac89d4d731d8de934b6249437d42d6a69763aaa0da8ea6015bfcf989c39112233aecc8a06004c3771cad75fd0ae787735dd6c571a5a53d15f5d48b71f250bed37a9be1"}, @generic={0x4c, 0xc, "6099ff768da228f5b2eaa400d44872f75aa44215821988dc345678d1477222f134a97de2369e28da35946866e7f5a26ce69daf55d8c0e145dfae4b90bc3e93815d52aff583d5fc3c8a07"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x6, 0xfc, 0x3, [@generic={0xde, 0x23, "9c9b3c4b4b9ef7046de733e0f7cccf1e7ae7649a3936731b417fe851301cefdc4c6cc7ccf46b0c8f44f11ca8952f58fb6cdbb00879c08057ab9ad1865b0014c0a719ba53ac2c34ebcf4a2ab75d7e6193d5aa0ba566dea60e5bf9c989bd807e113b62ae3e442d22ebd3035b8ec77fc9e16559a58aeba7a4b71e3ee443e6a0be7c8320b67373aaee8000d794dfa320e6eae70ea644e04b837810ec19b522951f312394e135722b0a2019c2e2cc68e516e93942c64dc88afd2e1af45e105822e1a2354f7639288dabf8060c9bcc836aa22ad0dbc5426171aadb5f903906"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x3, 0x1, 0x24, [@generic={0x3d, 0xb, "75f990189b664eeb2c56ee637e86c63b23fabaafd9af59d8d718b14a5c51debc594021fc27eba3e19639ef429b388f596412a51ead38b49c32ec2f"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf7, 0x2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x6, 0x7, 0x8, [@generic={0x2e, 0x16, "bb6236d084e976744a8ac2a968980a16b0eba348e3230bf3bd74af6ffdfb3e33b77c6c323002e4c44b8d0128"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x81, 0x3c, 0x9, [@generic={0x6a, 0xa, "0109cecc7d4172c17f98ff5c4db7921f442576410e680d04f6c12e38877805cb3f4c77ff45f41d6ab0010cce6cd4f17096658d114ae611876a766ec502c7fc68d1a29a3f4be9b0625cee33848204fe400516cfa85e3412cce0384e30370209ce5beeae86e759c077"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x3, 0xfc, 0x3, [@generic={0xc2, 0x7, "43bce3f406a2316c2d744372824b9b613ecc4cfe2e24209aab35a1cd24d6da2cd59f261e8fbc413107e7b91702b67ce28d7c1ebbfccf4a9e825181535dc3dd208e182d4dc2513bd64344a707e49996227a8d2acb6e81cb0c1363cd41ab1c8c9933a5a6de522a3b23f04ccb8bbdb7308491cb76ff267b5fd3991e1e071dc02b0f2f01e063ac216159ab67a6a5a12d021698541190f631fd2c351955106df9a310eb580f5acbaeda3454ea44d21c345fef9eb15aec21a308f2299fc6e4ff2b55a7"}]}}]}}, {{0x9, 0x4, 0xbc, 0x1b, 0xd, 0xc0, 0x42, 0x8b, 0x9, [], [{{0x9, 0x5, 0x1, 0xd, 0x200, 0x3, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xb, 0xfffd}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x2, 0x80, 0x7f, [@generic={0x33, 0xd, "236b9a90a3b3cb94b01c41767d022d1c4f3ed8b25f603632512db96bd2bc22ef906a1dce1950b54119bbb0afcb62e7ce35"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xb1, 0x5, 0x6, [@generic={0x7b, 0x22, "d057a7a6d95d1e9935469a39d6db84322697c8872d6fe54176b26e1c731626bdc1a63a1c0f5bfb0e0d27b994efab36c0a2ef7a49136520da56b12fa42c777f90d4ea8c8917b05903b9ce92a6b670bb04c79e142ae7a63c58f4019566c8ae1dbce67b1ea2051f996361a4e65357cd5aa8d8cee93be4bb1020af"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x0, 0x2, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x7, 0x4, 0x5c, [@generic={0x42, 0x2, "457ae4cb8dab75c3b0040633faef3b8f9841eeb4fbebe3e6df8689f73786f4541b89325d3e9fba6e47bec4017a7d27363eba944fc059bd8585f8952af28d20a0"}, @generic={0x6f, 0x3, "8a73f34013c37065a757a790458a650a3249fc7f751b584d6f9e5249ae0e72c6d9c78c809fd99eb9ba6a0a0959c10e8167d391300a589193504ed8d83c3c91312b44b3709c0ee0229ce76ee83ae1f42598e04a4c444d11ef3177885210d0c0f1be397e880212ffd275fbd64cd2"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x3, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6}]}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x6, 0x6, 0xe}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x7, 0x3, 0x8}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x9, 0xb, 0x7, [@generic={0xec, 0x2, "9de9c2c7e26e5fe37075fefb03fac24642cbf8532f85932a6542b8195d2f1530a42d8e34c1a75cd25f4515bafeace34daba8253e9ad4094b06537a0df9b48d891b1b88036ba812448be9433a713705225d6665b5721ea82fe3e26b8e49dde9b73648b6fe201a9480036822947e22c0feb36a840658354af84bedd04dba478bb0bca6ef7dabbb793c4cc1a7335bea6769b12b1a3b51be9272e9dc7a6b46222b2df0488c4cb99f374809c3ab49816b9e8ade4bed282d1f129493f18741e24d6f47961170276b70ef277b722e5cdea0c43ca157d728191ae085f102db1a8776c17c6c3ac007cd97e6746879"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x72, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb0, 0xc}]}}, {{0x9, 0x5, 0x6, 0xd47c946474d53c0, 0x3ff, 0x7a, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9c, 0x8000}, @generic={0x5b, 0x30, "4397ba696c01106f3bcf9c2a9342fe368b126a32be2e916dde828af1ac289cf00da5b1601fe50d9b6b90fd98dc5701d92258a2e3586b11c697d93be7654e75605987b4143a4ace297bc48bf4c0fb447c68132aface041a07be"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0xff, 0x0, 0x8, [@generic={0x1d, 0x2, "68866bfdb84267bb49ad3e6d96224b29652a06e6a07633e8aceffa"}]}}, {{0x9, 0x5, 0x6, 0x1c, 0x200, 0x2, 0x7, 0x90, [@generic={0x101, 0x23, "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"}]}}]}}, {{0x9, 0x4, 0xc9, 0x4, 0xf, 0xb4, 0xa6, 0x44, 0x1c, [@hid_hid={0x9, 0x21, 0x1000, 0x8, 0x1, {0x22, 0xf17}}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "8b"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x4000, 0xc746, 0x6d}, {0x6, 0x24, 0x1a, 0x4a, 0x5}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x8, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x6, 0x4}]}], [{{0x9, 0x5, 0x0, 0x8, 0x8, 0x5, 0x10, 0x7, [@generic={0xbf, 0x24, "ec0c59ba7a89701f4e2bda8db4969272d2b7b6ee6e07ea1dca54d7473023642f422d777d55e38d96bbaba6f0b1698188906ee63bb13f5d52df41941d95fb18f4acb3a6bf48187a172136ecdbf122d990524f93d3c7fbc59e71e80cad90132b54d25c51ddf10d712d036ddbc7b3eeecc29d054de36a4074c3a44b623e08ff1ec5e91c9ba17f63517abdcdcb29f350e49eed2ecbbd18f563b5496a09b517b660e6d413d28856639c1bf99ab934294c6e75c4a662936a1c8f83558fe59ed5"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x7f, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xff15}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x8, 0x7f, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x7f, 0x2, 0x28}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0xb, 0x3, 0xd}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x45, 0x3, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xfa, 0x7, 0x4, [@generic={0xfc, 0xc, "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"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x33, 0xf, 0x8, [@generic={0x2a, 0xf, "8518f84ca001f39f953d42f668085e1499e600a9b767387f4ea4281b7c58481427324327b8b2b054"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x7, 0xc, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0xa}, @generic={0xeb, 0x23, "b7a9359b17cb3eec671e95bfe8a0aa4c0e6f996cdd5fbb4818ba1bbb383cfc78c3b55b8c639b8a777b19285917edbb5d82e1d157f0c1afdd0eb3d3110d53faa8c784fed411e68ddbcce8c9b6242811ff45fad5496c98a73fbb265f63dd45d1294165fa29033213d86e803fc60a415d857de0c04d1d06a572f3209d18b8b0bd0651b07693b0f502abf09da04eb8484abada024f35d4173ea45a71bb3c5824e1e90cd84ea00fa4ddf886e9e9b4c66267d86beedfa1716ddcda0485c93d6c62c1d2b7d6cb2a99b6715e0b5a73771ddff99bbba7cc230ff4d915c2d4ff34771856f096edbdd49b836250d4"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x0, 0xfa, 0x3}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x3, 0x0, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x4, 0xb1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x1}]}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0x2, 0xf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x8}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0xe2, 0x8, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}, @generic={0x7f, 0x7, "d9b4dcbe60be29b9f7de271c8b8d505670df8f74ec49efa75f8634b71294a5743839d9529d6dbefc583441ab6667a9664559b9b6305babe3cfb4cc12fb0cc2de3c4e1d666bdc608653121bbb787b535c9d396cb5ba0d09f7a772dc36d2690586827ea686d8c4f06a266e4b0c30aea805c06ed8f5f6b3ee4261cf0a3c7c"}]}}, {{0x9, 0x5, 0xf, 0x12, 0x20, 0x74, 0x6, 0x7}}]}}]}}]}}, &(0x7f0000001500)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x200, 0x81, 0x3, 0x0, 0x40, 0x5}, 0x36, &(0x7f0000001140)={0x5, 0xf, 0x36, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x41, 0x53, 0x3, 0x6, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x7, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x10, 0x4, 0x1, 0xf, 0x9, [0xc000, 0xcf, 0x0, 0x3f0f]}]}, 0x8, [{0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x40e}}, {0x85, &(0x7f0000001280)=@string={0x85, 0x3, "0cf969074cbcba69f6f20e1fe260f1aa717945fadae41655a3cf497924a1e937a17481ef9acf915c2867e81e6590b6cbd105cdf731afdf240d6ee6837ae1466a4a4100ae159e88aaa102c758ff47e6a56829f4d3a35357d1d1dffa03e8437c54802d2e5feec19c2497196bbccca225772e37cb75c35f7cc685f5518e6abc3f21720d6c"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x416}}, {0x62, &(0x7f0000001440)=@string={0x62, 0x3, "5548f9c7eddf2217820c98978b0dc69828c8940b55470cb08404228b1a4ac4d5c9ad3fd46881492a94f1652901b90b5bb5686ff922ce3653a6c33530f53d9994aa8ac3dde0cf5204adecd539dadaf50c6834b7b91e4618839e85b79bf93bc567"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x2c05}}]}) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.791238966s ago: executing program 1 (id=1763): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x80}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008084}, 0x20040) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4050) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x5b3, 0x800, 0x100000000}, 0x4}, 0x20, 0x1, 0x0) getpid() connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) 5.453859671s ago: executing program 2 (id=1764): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f00000000c0)={0x18, 0x0, 0x71, 0x10001}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setns(0xc9, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x3f00) write(r2, &(0x7f0000000800)='0', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.218970242s ago: executing program 1 (id=1765): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b4, 0x0, 0x2, 0x158}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) write$tun(0xffffffffffffffff, &(0x7f0000000500)={@val={0x0, 0xfbfb}, @void, @llc={@snap={0x1fe, 0x0, "4ee7", "85071d", 0xf8, "ae6ca250a8b910a892eb6a98da7a744a7b5d0a839da93cb80e7518adbe5ba27c6b40683163a099000dd1ba8c5cf7c45a40d717f5ea4d2ed8dd53f6b64110edf3"}}}, 0x4d) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0x5ba, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = openat$incfs(r7, &(0x7f00000002c0)='.pending_reads\x00', 0x10000, 0xf2) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3, 0x12c, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0xa100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x24e}}], 0x1, &(0x7f0000000340)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r9, 0x402, 0x1a) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000000)='wlan0\x00', &(0x7f00000000c0)='./file0\x00', r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r11, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_EXIT_PERIODIC_INQ={{0xd1}, 0xb}}}, 0x7) write(r12, &(0x7f0000000f00), 0x0) 4.547203146s ago: executing program 4 (id=1766): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x7fffffff}}]}}]}, 0x48}}, 0x20040084) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x3004c8b9}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x4, {0x0, 0x0, 0x74, r12, {0xeffe068f8514295, 0x6}, {0xafabc05531515610, 0x2}, {0xfff2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) 3.448100524s ago: executing program 1 (id=1767): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x12, 0xc, 0x17d, 0x0}) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) unshare(0x24020400) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xa, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0x3, 0x0, 0xa, 0x1, 0x4}, @alu={0x0, 0x1, 0xb, 0x3, 0x2, 0x30}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @ldst={0x3, 0x0, 0x6, 0x1, 0x0, 0x30, 0x4}, @ldst={0x3, 0x1, 0x2, 0x3, 0x9, 0x1, 0x8}, @ringbuf_query], &(0x7f00000000c0)='GPL\x00', 0x1, 0xc1, &(0x7f0000000240)=""/193, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0xf, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x1, 0x4, 0x3}, {0x3, 0x3, 0xc, 0xc}], 0x10, 0x7}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)={0x98, r3, 0x405, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x16, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040df5}, 0x4040084) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x1d3) write(r5, &(0x7f0000000000)="313230eb7317c8fc", 0x8) 2.958274317s ago: executing program 3 (id=1768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x221, 0xc1, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3a) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x22) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r0}, 0x38) 2.824531356s ago: executing program 4 (id=1769): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000200)={'security\x00', 0x48, "a266a4f6a10cd6b1a28f44f204a4f7e4a845d3255a814e9e715ae6bfb94714a09497922df77a57868e39ddc1c1282613cc938890f50c00c9963a0f72459b6fabbb94cbad605566cb"}, &(0x7f0000000280)=0x6c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000140)={@val={0x0, 0x8917}, @void, @eth={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x4, 0x100, @void}}}}}}}}, 0x36) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x80) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.786642315s ago: executing program 1 (id=1770): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086610, 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) read$FUSE(r1, &(0x7f0000007140)={0x2020}, 0xffffffffffffffb8) r2 = io_uring_setup(0x2a6a, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000200)=0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) 2.700798294s ago: executing program 2 (id=1771): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@local}) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fe1825253be9e8480cb4f3524914f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336f04000000000000008e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba09000000000000001c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed081729b5ea722a98b34d0dac6de995de4ee263c81b2567b3f87e0897857edd5d7e97d61fc67076eab4846010d4828cc879f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a72345772b3ce9bf105490743dc4b700f24ce6b250b95e6c383fe44acaa55d140baf0ec339e3815b29a2246cb5c953048c43266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6134b8defe26674d65f908f9c3a8c201f661fc26efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3da8349ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b0237437200"}, 0x418, 0x7fffffff}) 2.322070146s ago: executing program 1 (id=1772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.30711421s ago: executing program 2 (id=1773): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000aab5a78600df2508004b002800"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4000004) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r1, 0x10001, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) write(r2, &(0x7f0000000200)='1', 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r3, @ANYRESHEX], 0xe0}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) socket$inet6_udp(0xa, 0x2, 0x0) fanotify_init(0x200, 0x0) socket$can_raw(0x1d, 0x3, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.887290404s ago: executing program 3 (id=1774): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000040)=0xf2b, 0x4) fcntl$addseals(0xffffffffffffffff, 0x409, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) r5 = syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r6, r7, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) 1.591669484s ago: executing program 2 (id=1775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d1000014000010203"], 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x10, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) write$P9_RMKNOD(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) clock_gettime(0x0, &(0x7f00000004c0)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x48212b8952c3aff5, 0x70bd27, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) 987.591847ms ago: executing program 1 (id=1776): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x48804) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0x2010, 0xffffffffffffffff, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x24, r2, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7d}]}, 0x24}}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000000)={0x1e5e, 0x0, 0x5, 0x803, 0xea, "5c9104000039ba0d00", 0x20000006, 0x4}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r4, 0x5000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 0s ago: executing program 3 (id=1777): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) setns(0xc9, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000195000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="1100000000000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES8=0x0, @ANYRES32=r0], 0x14) setitimer(0x2, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xfffffffffffffe4f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0xfffffffffffffff7) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) kernel console output (not intermixed with test programs): 7.434:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.4.801" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf704efec code=0x7ffc0000 [ 181.635115][ T43] audit: type=1326 audit(1789389287.434:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.4.801" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 181.635373][ T43] audit: type=1326 audit(1789389287.434:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.4.801" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 181.637021][ T43] audit: type=1326 audit(1789389287.434:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.4.801" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 181.637200][ T43] audit: type=1326 audit(1789389287.434:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.4.801" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 181.637742][ T43] audit: type=1326 audit(1789389287.434:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.4.801" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 181.637970][ T43] audit: type=1326 audit(1789389287.434:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.4.801" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf704efec code=0x7ffc0000 [ 181.673178][ T8805] capability: warning: `syz.4.801' uses 32-bit capabilities (legacy support in use) [ 181.830348][ T8807] tipc: Enabled bearer , priority 0 [ 181.831589][ T8807] syzkaller0: entered promiscuous mode [ 181.831607][ T8807] syzkaller0: entered allmulticast mode [ 181.845317][ T8807] tipc: Resetting bearer [ 181.850852][ T8806] tipc: Resetting bearer [ 181.873970][ T8806] tipc: Disabling bearer [ 182.307949][ T8816] syzkaller0: entered promiscuous mode [ 182.307970][ T8816] syzkaller0: entered allmulticast mode [ 182.841545][ C0] usb 7-1: yurex_control_callback - control failed: -2 [ 182.851793][ T73] usb 7-1: USB disconnect, device number 14 [ 182.857965][ T73] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 184.643941][ T8865] MTD: Couldn't look up './dev/mtdblock0': -2 [ 184.879746][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 185.008071][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.824'. [ 185.120314][ T5820] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 185.159062][ T8890] netlink: 'syz.3.826': attribute type 1 has an invalid length. [ 185.270694][ T5820] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 185.271517][ T5820] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 185.271541][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.333992][ T8890] bridge2: entered promiscuous mode [ 185.337223][ T8890] bond0: (slave bridge2): making interface the new active one [ 185.338463][ T8890] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 185.359471][ T8890] bridge3: entered promiscuous mode [ 185.364619][ T8890] bond0: (slave bridge3): Enslaving as a backup interface with an up link [ 185.516841][ T5820] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device [ 185.580294][ T5820] wwan wwan0: port wwan0qmi0 attached [ 185.709984][ T5740] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 185.738143][ T5820] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 0a:fa:bb:ce:d8:94 [ 185.738935][ T5820] usb 7-1: USB disconnect, device number 15 [ 185.750834][ T5820] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 185.895988][ T5820] wwan wwan0: port wwan0qmi0 disconnected [ 186.069844][ T8902] syzkaller0: entered promiscuous mode [ 186.069865][ T8902] syzkaller0: entered allmulticast mode [ 186.132506][ T8907] netlink: 1335 bytes leftover after parsing attributes in process `syz.1.832'. [ 186.737659][ T8923] syzkaller0: entered promiscuous mode [ 186.737672][ T8923] syzkaller0: entered allmulticast mode [ 187.284628][ T8932] netlink: 'syz.4.842': attribute type 58 has an invalid length. [ 187.284649][ T8932] netlink: 20 bytes leftover after parsing attributes in process `syz.4.842'. [ 187.415658][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 187.415672][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 189.506005][ T8989] tipc: Enabled bearer , priority 0 [ 189.506765][ T8989] syzkaller0: entered promiscuous mode [ 189.506777][ T8989] syzkaller0: entered allmulticast mode [ 189.536424][ T8989] tipc: Resetting bearer [ 189.547133][ T8988] tipc: Resetting bearer [ 189.567738][ T8988] tipc: Disabling bearer [ 189.883739][ T9005] pci_bus 0000:01: busn_res: [bus 01] is released [ 189.926903][ T9010] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 189.935764][ T9010] pci 0000:00:04.0: PCI bridge to [bus 01] [ 189.935971][ T9010] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 189.936110][ T9010] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 189.938823][ T9010] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 189.939386][ T9010] pci 0000:00:04.0: enabling Extended Tags [ 189.963525][ T9010] pci 0000:00:04.0: Adding to iommu group 4 [ 189.982589][ T9010] pci 0000:00:04.0: PCI bridge to [bus 01] [ 189.984776][ T9010] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 189.984807][ T9010] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 189.984875][ T9010] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 189.984892][ T9010] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 189.984908][ T9010] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 189.984971][ T9010] pci 0000:00:04.0: PCI bridge to [bus 01] [ 189.985032][ T9010] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 189.986481][ T9010] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 189.987448][ T9010] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 190.065537][ T9010] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 190.082580][ T9010] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 190.447092][ T9024] lo speed is unknown, defaulting to 1000 [ 190.840973][ T854] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 190.863590][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'. [ 190.951390][ T5738] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 190.952567][ T5738] Bluetooth: hci1: unexpected event for opcode 0x203e [ 191.018642][ T854] usb 9-1: unable to get BOS descriptor or descriptor too short [ 191.018667][ T854] usb 9-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 191.019317][ T854] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 191.019333][ T854] usb 9-1: can't read configurations, error -71 [ 191.479875][ T5738] Bluetooth: hci3: command 0x0406 tx timeout [ 191.602199][ T43] kauditd_printk_skb: 59 callbacks suppressed [ 191.602212][ T43] audit: type=1326 audit(1789389297.404:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 191.602321][ T43] audit: type=1326 audit(1789389297.404:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 191.603027][ T43] audit: type=1326 audit(1789389297.404:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 191.603546][ T43] audit: type=1326 audit(1789389297.404:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 191.603691][ T43] audit: type=1326 audit(1789389297.404:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.878" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf707efec code=0x7ffc0000 [ 191.606087][ T43] audit: type=1326 audit(1789389297.404:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 191.606109][ T43] audit: type=1326 audit(1789389297.404:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 191.606934][ T43] audit: type=1326 audit(1789389297.404:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 191.607285][ T43] audit: type=1326 audit(1789389297.404:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.878" exe="/syz-executor" sig=0 arch=40000003 syscall=324 compat=1 ip=0xf707efec code=0x7ffc0000 [ 191.607324][ T43] audit: type=1326 audit(1789389297.404:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 192.924517][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.890'. [ 192.974984][ T9115] tipc: Started in network mode [ 192.975009][ T9115] tipc: Node identity 7f000001, cluster identity 4711 [ 192.975473][ T9115] tipc: Enabled bearer , priority 10 [ 192.979175][ T9115] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 192.979333][ T9115] tipc: Enabled bearer , priority 10 [ 193.064723][ T9115] dlm: Unknown command passed to DLM device : 0 [ 193.064723][ T9115] [ 193.885235][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.979904][ T854] tipc: Node number set to 2130706433 [ 194.081959][ T5820] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 194.232216][ T5820] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 194.235705][ T5820] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.235728][ T5820] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 194.235769][ T5820] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12389, setting to 8 [ 194.235802][ T5820] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.265599][ T5820] hub 9-1:1.0: bad descriptor, ignoring hub [ 194.265626][ T5820] hub 9-1:1.0: probe with driver hub failed with error -5 [ 194.266046][ T5820] cdc_wdm 9-1:1.0: skipping garbage [ 194.266059][ T5820] cdc_wdm 9-1:1.0: skipping garbage [ 194.266117][ T5820] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 194.790071][ T5820] usb 9-1: USB disconnect, device number 10 [ 195.012171][ T5740] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 195.012236][ T5740] Bluetooth: hci1: Injecting HCI hardware error event [ 195.013754][ T5740] Bluetooth: hci1: hardware error 0x00 [ 195.428534][ T9140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.899'. [ 195.751346][ T9143] netlink: 'syz.2.900': attribute type 58 has an invalid length. [ 195.751360][ T9143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.900'. [ 195.922572][ T854] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 196.069925][ T854] usb 9-1: Using ep0 maxpacket: 8 [ 196.070366][ T854] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 196.071248][ T854] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 196.071261][ T854] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 196.071270][ T854] usb 9-1: config 179 has no interface number 0 [ 196.071299][ T854] usb 9-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 196.071319][ T854] usb 9-1: config 179 interface 65 has no altsetting 0 [ 196.071341][ T854] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.288280][ T5843] usb 9-1: USB disconnect, device number 11 [ 196.482205][ T5738] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 196.899274][ T9165] tipc: Enabling of bearer rejected, already enabled [ 196.907284][ T9165] tipc: Enabling of bearer rejected, already enabled [ 196.920506][ T43] kauditd_printk_skb: 38 callbacks suppressed [ 196.920525][ T43] audit: type=1326 audit(1789389302.724:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.1.905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 196.923912][ T43] audit: type=1326 audit(1789389302.724:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.1.905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 196.925938][ T43] audit: type=1326 audit(1789389302.724:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.1.905" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 196.935555][ T43] audit: type=1326 audit(1789389302.734:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.1.905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 196.935586][ T43] audit: type=1326 audit(1789389302.734:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.1.905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 196.943599][ T43] audit: type=1326 audit(1789389302.744:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.1.905" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 196.950252][ T43] audit: type=1326 audit(1789389302.744:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.1.905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 196.950282][ T43] audit: type=1326 audit(1789389302.744:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.1.905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 196.951546][ T43] audit: type=1326 audit(1789389302.754:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.1.905" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 196.956956][ T43] audit: type=1326 audit(1789389302.754:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.1.905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 197.080160][ T5740] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 198.367523][ T9183] tipc: Enabling of bearer rejected, failed to enable media [ 201.321117][ T9230] netlink: zone id is out of range [ 201.321290][ T9230] netlink: zone id is out of range [ 201.321504][ T9230] netlink: zone id is out of range [ 201.321570][ T9230] netlink: zone id is out of range [ 201.321626][ T9230] netlink: zone id is out of range [ 201.321817][ T9230] netlink: zone id is out of range [ 201.323407][ T9230] netlink: zone id is out of range [ 201.324006][ T9230] netlink: zone id is out of range [ 201.324221][ T9230] netlink: zone id is out of range [ 201.324286][ T9230] netlink: zone id is out of range [ 201.374630][ T9230] netlink: 124 bytes leftover after parsing attributes in process `syz.1.921'. [ 201.374693][ T9230] netlink: 124 bytes leftover after parsing attributes in process `syz.1.921'. [ 201.375938][ T9230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'. [ 202.291027][ T9247] FAULT_INJECTION: forcing a failure. [ 202.291027][ T9247] name fail_futex, interval 1, probability 0, space 0, times 0 [ 202.291060][ T9247] CPU: 0 UID: 0 PID: 9247 Comm: syz.2.929 Not tainted syzkaller #0 PREEMPT(full) [ 202.291082][ T9247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.291092][ T9247] Call Trace: [ 202.291099][ T9247] [ 202.291105][ T9247] dump_stack_lvl+0x100/0x190 [ 202.291133][ T9247] should_fail_ex.cold+0x5/0xa [ 202.291156][ T9247] get_futex_key+0x1d0/0x14f0 [ 202.291183][ T9247] ? __pfx_get_futex_key+0x10/0x10 [ 202.291205][ T9247] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 202.291231][ T9247] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 202.291259][ T9247] futex_wait_setup+0x91/0x540 [ 202.291288][ T9247] __futex_wait+0x19f/0x300 [ 202.291321][ T9247] ? __pfx___futex_wait+0x10/0x10 [ 202.291339][ T9247] ? __pfx_try_to_wake_up+0x10/0x10 [ 202.291364][ T9247] ? futex_hash+0x311/0x400 [ 202.291389][ T9247] ? __pfx_futex_wake_mark+0x10/0x10 [ 202.291414][ T9247] ? find_held_lock+0x2b/0x80 [ 202.291433][ T9247] ? futex_wake+0x4ea/0x5e0 [ 202.291459][ T9247] futex_wait+0xe6/0x370 [ 202.291480][ T9247] ? __pfx_futex_wait+0x10/0x10 [ 202.291499][ T9247] ? rcu_read_lock_any_held+0x6a/0x90 [ 202.291511][ T9247] ? find_held_lock+0x2b/0x80 [ 202.291522][ T9247] ? ksys_write+0x190/0x250 [ 202.291533][ T9247] ? ksys_write+0x190/0x250 [ 202.291545][ T9247] do_futex+0x265/0x440 [ 202.291556][ T9247] ? __pfx_do_futex+0x10/0x10 [ 202.291567][ T9247] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 202.291585][ T9247] __ia32_sys_futex_time32+0x2f4/0x470 [ 202.291598][ T9247] ? fput+0x7c/0x100 [ 202.291611][ T9247] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 202.291623][ T9247] ? ksys_write+0x1ac/0x250 [ 202.291633][ T9247] ? __pfx_ksys_write+0x10/0x10 [ 202.291648][ T9247] __do_fast_syscall_32+0x13a/0x8b0 [ 202.291666][ T9247] do_fast_syscall_32+0x32/0x70 [ 202.291683][ T9247] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.291697][ T9247] RIP: 0023:0xf707efec [ 202.291711][ T9247] Code: Unable to access opcode bytes at 0xf707efc2. [ 202.291716][ T9247] RSP: 002b:00000000f546d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 202.291727][ T9247] RAX: ffffffffffffffda RBX: 00000000f7474f88 RCX: 0000000000000080 [ 202.291734][ T9247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7474f8c [ 202.291741][ T9247] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 202.291747][ T9247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.291754][ T9247] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.291768][ T9247] [ 202.816234][ T9254] can: request_module (can-proto-0) failed. [ 203.369900][ T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.369929][ T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.369946][ T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.369964][ T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.683863][ T9302] netlink: 'syz.4.944': attribute type 21 has an invalid length. [ 204.686306][ T9302] device-mapper: ioctl: Unable to rename non-existent device, to uuid § [ 206.873154][ T9350] net_ratelimit: 9 callbacks suppressed [ 206.873167][ T9350] openvswitch: netlink: Message has 8 unknown bytes. [ 206.979611][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 207.691628][ T9378] Trying to write to read-only block-device nullb0 [ 209.691699][ T9420] lo speed is unknown, defaulting to 1000 [ 212.338908][ T9451] netlink: 'syz.2.985': attribute type 1 has an invalid length. [ 212.355161][ T9451] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.400774][ T9451] 8021q: adding VLAN 0 to HW filter on device bond5 [ 212.403759][ T9451] bond4: (slave bond5): Enslaving as an active interface with a down link [ 212.430992][ T9451] gretap2: entered promiscuous mode [ 212.433476][ T9451] bond4: (slave gretap2): making interface the new active one [ 212.434545][ T9451] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 214.655257][ T9483] fuse: fd is not a fuse device [ 215.787466][ T9494] netlink: zone id is out of range [ 215.787680][ T9494] netlink: zone id is out of range [ 215.787948][ T9494] netlink: zone id is out of range [ 215.788066][ T9494] netlink: zone id is out of range [ 215.788166][ T9494] netlink: zone id is out of range [ 215.788453][ T9494] netlink: zone id is out of range [ 215.788571][ T9494] netlink: zone id is out of range [ 215.788592][ T9494] netlink: zone id is out of range [ 215.788780][ T9494] netlink: zone id is out of range [ 215.788847][ T9494] netlink: zone id is out of range [ 215.861658][ T9495] netlink: 124 bytes leftover after parsing attributes in process `syz.3.995'. [ 215.861683][ T9495] netlink: 124 bytes leftover after parsing attributes in process `syz.3.995'. [ 215.877534][ T9495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.995'. [ 217.834751][ T9529] tipc: Enabling of bearer rejected, failed to enable media [ 217.898900][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1002'. [ 218.928766][ T9560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1013'. [ 219.801998][ T9582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.249923][ T854] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 220.404460][ T854] usb 7-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 220.405443][ T854] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 220.406820][ T854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 220.406838][ T854] usb 7-1: Product: syz [ 220.406849][ T854] usb 7-1: Manufacturer: syz [ 220.420516][ T9588] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 220.425074][ T854] iuu_phoenix 7-1:1.0: iuu_phoenix converter detected [ 220.446632][ T854] usb 7-1: iuu_phoenix converter now attached to ttyUSB0 [ 220.677102][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1030'. [ 220.917336][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 220.917353][ T43] audit: type=1800 audit(1789389326.724:398): pid=9613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1032" name="nullb0" dev="tmpfs" ino=1061 res=0 errno=0 [ 221.335659][ T9626] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1035'. [ 221.335688][ T9626] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1035'. [ 221.563189][ T9635] team0: No ports can be present during mode change [ 221.564158][ T9635] netlink: 'syz.3.1040': attribute type 10 has an invalid length. [ 221.566388][ T9635] bond7: (slave .`): Releasing active interface [ 221.578098][ T9635] 8021q: adding VLAN 0 to HW filter on device .` [ 221.584996][ T9635] team0: Port device .` added [ 221.604657][ T9635] vlan0: entered promiscuous mode [ 221.623525][ T9635] team0: Port device vlan0 added [ 221.641097][ T9635] tipc: Enabled bearer , priority 0 [ 221.731714][ T5820] usb 7-1: USB disconnect, device number 16 [ 221.736678][ T5820] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 221.736963][ T5820] iuu_phoenix 7-1:1.0: device disconnected [ 222.764346][ T73] tipc: Node number set to 1424085683 [ 224.481090][ T9679] syzkaller0: entered promiscuous mode [ 224.481104][ T9679] syzkaller0: entered allmulticast mode [ 224.642809][ T9683] net_ratelimit: 9 callbacks suppressed [ 224.642828][ T9683] netlink: zone id is out of range [ 224.642964][ T9683] netlink: zone id is out of range [ 224.643266][ T9683] netlink: zone id is out of range [ 224.643446][ T9683] netlink: zone id is out of range [ 224.643614][ T9683] netlink: zone id is out of range [ 224.643806][ T9683] netlink: zone id is out of range [ 224.643903][ T9683] netlink: zone id is out of range [ 224.643923][ T9683] netlink: zone id is out of range [ 224.644115][ T9683] netlink: zone id is out of range [ 224.644181][ T9683] netlink: zone id is out of range [ 224.658763][ T9687] netlink: 'syz.4.1053': attribute type 1 has an invalid length. [ 224.686439][ T9687] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.686642][ T9683] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1055'. [ 224.686665][ T9683] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1055'. [ 224.693442][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'. [ 224.766556][ T9687] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.768458][ T9687] bond4: (slave bond5): Enslaving as an active interface with a down link [ 224.842246][ T9687] gretap2: entered promiscuous mode [ 224.847319][ T9687] bond4: (slave gretap2): making interface the new active one [ 224.848165][ T9687] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 226.827677][ T9717] netlink: 'syz.2.1064': attribute type 1 has an invalid length. [ 226.849070][ T9717] 8021q: adding VLAN 0 to HW filter on device bond6 [ 226.860786][ T9717] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1064'. [ 226.869011][ T9717] bond6: (slave veth0_to_bond): making interface the new active one [ 226.874131][ T9717] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 226.881592][ T9717] bond6: entered promiscuous mode [ 226.881613][ T9717] veth0_to_bond: entered promiscuous mode [ 226.881751][ T9717] bond6: entered allmulticast mode [ 226.881763][ T9717] veth0_to_bond: entered allmulticast mode [ 226.892885][ T9717] macvlan2: entered promiscuous mode [ 226.892897][ T9717] macvlan2: entered allmulticast mode [ 226.893470][ T9717] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 226.897639][ T9717] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 228.930913][ T9751] lo speed is unknown, defaulting to 1000 [ 231.270770][ T9796] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 231.296583][ T9796] kvm: pic: non byte read [ 231.301665][ T9796] kvm: pic: level sensitive irq not supported [ 231.302372][ T9796] kvm: pic: non byte read [ 231.305477][ T9796] kvm: pic: level sensitive irq not supported [ 231.305880][ T9796] kvm: pic: non byte read [ 231.312073][ T9796] kvm: pic: level sensitive irq not supported [ 231.313170][ T9796] kvm: pic: non byte read [ 237.133057][ T9884] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 237.154440][ T9884] kvm: pic: non byte read [ 237.157003][ T9884] kvm: pic: level sensitive irq not supported [ 237.157953][ T9884] kvm: pic: non byte read [ 237.168824][ T9884] kvm: pic: level sensitive irq not supported [ 237.169559][ T9884] kvm: pic: non byte read [ 237.175866][ T9884] kvm: pic: level sensitive irq not supported [ 237.176199][ T9884] kvm: pic: non byte read [ 237.811844][ T50] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 237.970413][ T50] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.971199][ T50] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.971217][ T50] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 237.971234][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.973301][ T9891] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 237.975695][ T50] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.031877][ T6536] usb 7-1: USB disconnect, device number 17 [ 240.971810][ T43] audit: type=1326 audit(1789389346.774:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.4.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 240.972025][ T43] audit: type=1326 audit(1789389346.774:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.4.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 240.973694][ T43] audit: type=1326 audit(1789389346.774:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.4.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf704efec code=0x7ffc0000 [ 240.973739][ T43] audit: type=1326 audit(1789389346.774:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.4.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 240.973847][ T43] audit: type=1326 audit(1789389346.774:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.4.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 240.974350][ T43] audit: type=1326 audit(1789389346.774:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.4.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf704efec code=0x7ffc0000 [ 240.974391][ T43] audit: type=1326 audit(1789389346.774:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.4.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 240.974427][ T43] audit: type=1326 audit(1789389346.774:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.4.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 240.974841][ T43] audit: type=1326 audit(1789389346.774:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.4.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf704efec code=0x7ffc0000 [ 240.974879][ T43] audit: type=1326 audit(1789389346.774:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9915 comm="syz.4.1114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 241.469992][ T9911] macsec0: entered promiscuous mode [ 241.470665][ T9911] macsec0: left promiscuous mode [ 243.123601][ T9971] lo: entered allmulticast mode [ 243.124367][ T9971] bond0: entered allmulticast mode [ 243.124689][ T9971] dummy0: entered allmulticast mode [ 243.124943][ T9971] eql: entered allmulticast mode [ 243.125449][ T9971] ifb0: entered allmulticast mode [ 243.125598][ T9971] ifb1: entered allmulticast mode [ 243.128290][ T9971] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 243.135386][ T9971] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 243.140429][ T9971] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 243.140857][ T9971] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 243.141842][ T9971] hwsim0: entered allmulticast mode [ 243.141943][ T9971] ieee802154 phy1 wpan1: entered allmulticast mode [ 243.142111][ T9971] teql0: entered allmulticast mode [ 243.142207][ T9971] tunl0: entered allmulticast mode [ 243.142308][ T9971] gre0: entered allmulticast mode [ 243.142416][ T9971] gretap0: entered allmulticast mode [ 243.142769][ T9971] erspan0: entered allmulticast mode [ 243.142900][ T9971] ip_vti0: entered allmulticast mode [ 243.143006][ T9971] ip6_vti0: entered allmulticast mode [ 243.143093][ T9971] sit0: entered allmulticast mode [ 243.143221][ T9971] ip6tnl0: entered allmulticast mode [ 243.143320][ T9971] ip6gre0: entered allmulticast mode [ 243.143425][ T9971] lapb0: entered allmulticast mode [ 243.143605][ T9971] lapb1: entered allmulticast mode [ 243.143806][ T9971] lapb2: entered allmulticast mode [ 243.144128][ T9971] lapb3: entered allmulticast mode [ 243.144294][ T9971] lapb4: entered allmulticast mode [ 243.144464][ T9971] lapb5: entered allmulticast mode [ 243.144639][ T9971] lapb6: entered allmulticast mode [ 243.144816][ T9971] wireguard0: entered allmulticast mode [ 245.709497][T10020] Illegal XDP return value 4294967201 on prog (id 61) dev syz_tun, expect packet loss! [ 248.897566][T10049] syzkaller0: entered promiscuous mode [ 248.897586][T10049] syzkaller0: entered allmulticast mode [ 250.651166][T10069] lo speed is unknown, defaulting to 1000 [ 253.547468][T10114] overlayfs: failed to clone upperpath [ 253.900357][T10137] tipc: New replicast peer: 172.20.20.187 [ 253.900735][T10137] tipc: Enabled bearer , priority 10 [ 253.959947][ T9609] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 254.109926][ T9609] usb 7-1: Using ep0 maxpacket: 8 [ 254.111017][ T9609] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 254.112453][ T9609] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 254.112474][ T9609] usb 7-1: config 0 has no interface number 0 [ 254.112502][ T9609] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 254.113897][ T9609] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 254.113919][ T9609] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 254.113941][ T9609] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 254.113979][ T9609] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.118158][ T9609] usb 7-1: config 0 descriptor?? [ 254.136130][ T9609] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 254.438587][T10155] overlayfs: failed to clone upperpath [ 254.519880][ T6536] usb 7-1: USB disconnect, device number 18 [ 254.519903][ C3] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 254.525088][T10153] lo speed is unknown, defaulting to 1000 [ 254.554810][ T6536] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 254.559626][T10130] ldusb: No device or device unplugged -19 [ 254.993534][T10170] syzkaller0: entered promiscuous mode [ 254.993560][T10170] syzkaller0: entered allmulticast mode [ 255.292631][T10176] jffs2: notice: (10176) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 255.322301][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.998056][T10204] netlink: 'syz.2.1193': attribute type 10 has an invalid length. [ 257.686987][T10204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.688135][T10204] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 258.000140][ T5843] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 258.149913][ T5843] usb 9-1: Using ep0 maxpacket: 8 [ 258.150425][ T5843] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 258.152030][ T5843] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 258.152048][ T5843] usb 9-1: config 0 has no interface number 0 [ 258.152064][ T5843] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.152076][ T5843] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 258.152088][ T5843] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 258.152101][ T5843] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 258.152120][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.195315][ T5843] usb 9-1: config 0 descriptor?? [ 258.213752][ T5843] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 258.477844][T10234] lo speed is unknown, defaulting to 1000 [ 258.597011][ T9609] usb 9-1: USB disconnect, device number 12 [ 258.597114][ C3] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 258.617903][ T9609] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 258.619830][T10211] ldusb: No device or device unplugged -19 [ 258.901962][T10237] syzkaller0: entered promiscuous mode [ 258.901987][T10237] syzkaller0: entered allmulticast mode [ 263.159512][T10280] read descriptors [ 263.491210][ T6339] ffs_data_put(): freeing [ 263.615062][T10283] tipc: Enabling of bearer rejected, already enabled [ 265.535482][ T43] kauditd_printk_skb: 555 callbacks suppressed [ 265.535496][ T43] audit: type=1326 audit(1789389371.334:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.3.1227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 265.535545][ T43] audit: type=1326 audit(1789389371.334:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.3.1227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 265.539338][ T43] audit: type=1326 audit(1789389371.334:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.3.1227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 265.539398][ T43] audit: type=1326 audit(1789389371.334:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.3.1227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 265.539626][ T43] audit: type=1326 audit(1789389371.334:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.3.1227" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 265.539672][ T43] audit: type=1326 audit(1789389371.334:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.3.1227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 265.589944][ T43] audit: type=1326 audit(1789389371.334:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.3.1227" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 265.960050][ T5740] Bluetooth: hci3: command 0x0406 tx timeout [ 268.041742][T10364] lo speed is unknown, defaulting to 1000 [ 269.980265][ T5738] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 270.116073][T10411] syzkaller0: entered promiscuous mode [ 270.116092][T10411] syzkaller0: entered allmulticast mode [ 270.123481][T10411] tipc: Enabled bearer , priority 0 [ 270.139168][T10413] bridge1: port 1(erspan0) entered disabled state [ 270.157040][T10413] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.158973][T10413] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.201627][T10413] tipc: Resetting bearer [ 270.234636][T10413] net_ratelimit: 9 callbacks suppressed [ 270.234650][T10413] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 270.235485][T10411] tipc: Resetting bearer [ 270.238830][T10410] tipc: Resetting bearer [ 270.265319][T10410] tipc: Disabling bearer [ 270.275421][ T6840] bond2: (slave dummy0): link status definitely down, disabling slave [ 270.276785][ T6840] bond2: now running without any active interface! [ 272.018982][ T5738] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 272.337487][T10467] lo speed is unknown, defaulting to 1000 [ 273.630236][ T43] audit: type=1800 audit(1789389379.434:971): pid=10481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1273" name="(" dev="sda1" ino=2048 res=0 errno=0 [ 274.783462][T10503] netlink: 'syz.3.1279': attribute type 10 has an invalid length. [ 274.784456][T10503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.949293][T10511] syzkaller0: entered promiscuous mode [ 274.949307][T10511] syzkaller0: entered allmulticast mode [ 274.966719][T10511] tipc: Enabled bearer , priority 0 [ 274.981241][T10511] tipc: Resetting bearer [ 274.986884][T10510] tipc: Resetting bearer [ 275.013618][T10510] tipc: Disabling bearer [ 275.193226][T10516] netlink: 'syz.4.1284': attribute type 1 has an invalid length. [ 275.711362][ T43] audit: type=1326 audit(1789389381.504:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 275.711393][ T43] audit: type=1326 audit(1789389381.504:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 275.712250][ T43] audit: type=1326 audit(1789389381.514:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1287" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 275.712628][ T43] audit: type=1326 audit(1789389381.514:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 275.712652][ T43] audit: type=1326 audit(1789389381.514:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 275.712938][ T43] audit: type=1326 audit(1789389381.514:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1287" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 275.713019][ T43] audit: type=1326 audit(1789389381.514:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 275.718344][ T43] audit: type=1326 audit(1789389381.514:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53fec code=0x7ffc0000 [ 275.718374][ T43] audit: type=1326 audit(1789389381.514:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1287" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71575ab code=0x7ffc0000 [ 276.321369][T10537] tipc: Enabling of bearer rejected, failed to enable media [ 279.090555][T10545] ip6t_srh: unknown srh match flags 4000 [ 279.972859][T10582] libceph: resolve ' [ 279.972859][T10582] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 279.972859][T10582] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 282.128684][T10609] netlink: 'syz.4.1313': attribute type 10 has an invalid length. [ 282.134026][T10609] team0: Port device dummy0 added [ 283.270797][ T9609] Process accounting resumed [ 283.279192][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1316'. [ 283.494604][T10635] netlink: 'syz.2.1321': attribute type 2 has an invalid length. [ 283.494621][T10635] netlink: 'syz.2.1321': attribute type 2 has an invalid length. [ 283.649921][ T5843] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 283.799841][ T5843] usb 9-1: Using ep0 maxpacket: 8 [ 283.802300][ T5843] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 283.803119][ T5843] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 283.803132][ T5843] usb 9-1: config 0 has no interface number 0 [ 283.803150][ T5843] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 283.803161][ T5843] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 283.803173][ T5843] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 283.803186][ T5843] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 283.803204][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.804426][ T5843] usb 9-1: config 0 descriptor?? [ 283.844367][ T5843] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 284.023651][T10629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1319'. [ 284.023679][T10629] i: renamed from virt_wifi0 (while UP) [ 284.042252][ T5843] usb 9-1: USB disconnect, device number 13 [ 284.045933][ T5843] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 284.276619][T10659] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 284.296625][T10659] kvm: pic: non byte read [ 284.300145][T10659] kvm: pic: level sensitive irq not supported [ 284.301053][T10659] kvm: pic: non byte read [ 284.304476][T10659] kvm: pic: level sensitive irq not supported [ 284.304728][T10659] kvm: pic: non byte read [ 284.310497][T10659] kvm: pic: level sensitive irq not supported [ 284.311177][T10659] kvm: pic: non byte read [ 284.315740][T10659] kvm: pic: level sensitive irq not supported [ 284.317229][T10659] kvm: pic: non byte read [ 284.993527][T10690] netlink: 'syz.2.1337': attribute type 1 has an invalid length. [ 284.993549][T10690] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1337'. [ 285.000365][T10693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.078562][T10697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.143943][T10701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.388003][T10704] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 285.410942][T10704] kvm: pic: non byte read [ 285.415138][T10704] kvm: pic: level sensitive irq not supported [ 285.418115][T10704] kvm: pic: non byte read [ 285.422887][T10704] kvm: pic: level sensitive irq not supported [ 285.423958][T10704] kvm: pic: non byte read [ 285.427537][T10704] kvm: pic: level sensitive irq not supported [ 285.430151][T10704] kvm: pic: non byte read [ 285.435512][T10704] kvm: pic: level sensitive irq not supported [ 285.435778][T10704] kvm: pic: non byte read [ 285.714105][ T5738] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 285.773792][ T43] kauditd_printk_skb: 46 callbacks suppressed [ 285.773810][ T43] audit: type=1326 audit(1789389391.574:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.4.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 285.773850][ T43] audit: type=1326 audit(1789389391.574:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.4.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 285.773887][ T43] audit: type=1326 audit(1789389391.574:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.4.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704efec code=0x7ffc0000 [ 285.773921][ T43] audit: type=1326 audit(1789389391.574:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.4.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 285.773957][ T43] audit: type=1326 audit(1789389391.574:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.4.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 285.774276][ T43] audit: type=1326 audit(1789389391.574:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.4.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf704efec code=0x7ffc0000 [ 285.774352][ T43] audit: type=1326 audit(1789389391.574:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.4.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 285.774453][ T43] audit: type=1326 audit(1789389391.574:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.4.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 285.774719][ T43] audit: type=1326 audit(1789389391.574:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.4.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71875ab code=0x7ffc0000 [ 285.774899][ T43] audit: type=1326 audit(1789389391.574:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.4.1345" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71875ab code=0x7ffc0000 [ 286.052906][T10723] netlink: 'syz.2.1347': attribute type 10 has an invalid length. [ 286.068796][T10723] team0: Port device dummy0 added [ 286.137057][T10726] syzkaller0: entered promiscuous mode [ 286.137071][T10726] syzkaller0: entered allmulticast mode [ 286.142642][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1348'. [ 286.192157][T10728] 9p: Could not find request transport: uj [ 286.343354][T10733] syzkaller0: entered promiscuous mode [ 286.343370][T10733] syzkaller0: entered allmulticast mode [ 288.560432][T10751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.884134][T10766] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 290.132289][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1364'. [ 290.141943][T10772] 9p: Could not find request transport: uj [ 290.750982][ T38] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 290.825765][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.825787][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.919894][ T5740] Bluetooth: hci0: command 0x0406 tx timeout [ 291.150482][T10786] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.244825][T10790] jffs2: notice: (10790) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 291.413385][ T5740] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 291.428905][T10798] ecryptfs: Unknown parameter 'ecryptfs_cipher}aesecŒ|}«' [ 291.761232][ T43] kauditd_printk_skb: 37 callbacks suppressed [ 291.761250][ T43] audit: type=1326 audit(1789389397.564:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.2.1381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 291.761289][ T43] audit: type=1326 audit(1789389397.564:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.2.1381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 291.763489][ T43] audit: type=1326 audit(1789389397.564:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.2.1381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 291.763533][ T43] audit: type=1326 audit(1789389397.564:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.2.1381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 291.763568][ T43] audit: type=1326 audit(1789389397.564:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.2.1381" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf707efec code=0x7ffc0000 [ 291.763602][ T43] audit: type=1326 audit(1789389397.564:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.2.1381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 291.763638][ T43] audit: type=1326 audit(1789389397.564:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.2.1381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 291.763698][ T43] audit: type=1326 audit(1789389397.564:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.2.1381" exe="/syz-executor" sig=0 arch=40000003 syscall=298 compat=1 ip=0xf707efec code=0x7ffc0000 [ 291.764126][ T43] audit: type=1326 audit(1789389397.564:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.2.1381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 291.764150][ T43] audit: type=1326 audit(1789389397.564:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.2.1381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 291.785027][T10822] 9p: Could not find request transport: uj [ 292.415435][ T5740] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 292.449666][T10832] tipc: Enabled bearer , priority 0 [ 292.454341][T10832] syzkaller0: entered promiscuous mode [ 292.454354][T10832] syzkaller0: entered allmulticast mode [ 292.455834][T10832] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 292.476505][T10832] tipc: Resetting bearer [ 292.477476][T10831] tipc: Resetting bearer [ 292.490925][T10831] tipc: Disabling bearer [ 293.066705][T10856] jffs2: notice: (10856) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 293.300659][T10862] 8021q: adding VLAN 0 to HW filter on device bond6 [ 293.374040][T10862] bond6: (slave bridge3): making interface the new active one [ 293.374755][T10862] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 293.430169][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'. [ 293.430191][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1395'. [ 293.433621][T10862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.435007][T10862] bond6: (slave bond0): Enslaving as an active interface with a down link [ 293.667690][T10862] bond6 (unregistering): (slave bridge3): Releasing active interface [ 293.697722][T10862] bond6 (unregistering): (slave bond0): Releasing active interface [ 293.735792][T10862] bond6 (unregistering): Released all slaves [ 294.019878][T10869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.036343][ T5738] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 294.344625][T10889] netlink: 'syz.1.1404': attribute type 10 has an invalid length. [ 294.344641][T10889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1404'. [ 294.345220][T10889] fuse: Bad value for 'fd' [ 294.526791][T10893] tipc: Enabling of bearer rejected, failed to enable media [ 294.639936][T10899] tipc: Enabling of bearer rejected, failed to enable media [ 294.741874][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 294.981382][T10917] 9pnet_fd: Insufficient options for proto=fd [ 295.053403][T10921] binder: 10918:10921 ioctl 4018620d 0 returned -22 [ 295.057516][T10921] binder: 10918:10921 ioctl c0306201 80000640 returned -22 [ 295.389898][ T50] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 295.539829][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 295.540305][ T50] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 295.541679][ T50] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 295.541693][ T50] usb 7-1: config 0 has no interface number 0 [ 295.541710][ T50] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 295.541721][ T50] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 295.541733][ T50] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 295.541746][ T50] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 295.541765][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.542954][ T50] usb 7-1: config 0 descriptor?? [ 295.549961][ T50] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 295.795978][T10924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1413'. [ 295.796006][T10924] i: renamed from virt_wifi0 (while UP) [ 295.815529][ T2224] usb 7-1: USB disconnect, device number 19 [ 295.817063][ T2224] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 296.004377][T10944] ecryptfs: Unknown parameter 'ecryptfs_cipher}aesecŒ|}«' [ 296.510441][T10969] ecryptfs: Unknown parameter 'ecryptfs_cipher}aesecŒ|}«' [ 296.542632][T10971] macvlan3: entered allmulticast mode [ 296.542719][T10971] team0: Device macvlan3 is already an upper device of the team interface [ 296.551893][ T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 296.710340][ T10] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 296.711138][ T10] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 296.711926][ T10] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 296.713539][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.713551][ T10] usb 9-1: Product: syz [ 296.713558][ T10] usb 9-1: Manufacturer: syz [ 296.713565][ T10] usb 9-1: SerialNumber: syz [ 296.717229][ T10] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 296.732492][ T10] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 296.746511][ T10] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 296.764124][T10977] fuse: fd is not a fuse device [ 296.935590][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 296.935608][ T43] audit: type=1326 audit(1789389402.734:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.1437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 296.937940][ T43] audit: type=1326 audit(1789389402.734:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.1437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 296.937986][ T43] audit: type=1326 audit(1789389402.734:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.1437" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf707efec code=0x7ffc0000 [ 296.938022][ T43] audit: type=1326 audit(1789389402.734:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.1437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 296.938059][ T43] audit: type=1326 audit(1789389402.734:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.1437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 296.938098][ T43] audit: type=1326 audit(1789389402.734:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.1437" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707efec code=0x7ffc0000 [ 296.938132][ T43] audit: type=1326 audit(1789389402.734:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.1437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 296.938167][ T43] audit: type=1326 audit(1789389402.734:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.1437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 296.938431][ T43] audit: type=1326 audit(1789389402.734:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.1437" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf707efec code=0x7ffc0000 [ 296.938472][ T43] audit: type=1326 audit(1789389402.734:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.2.1437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 297.098330][T10987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1441'. [ 297.098426][T10987] i: renamed from virt_wifi0 [ 297.932657][T11000] macvlan2: entered allmulticast mode [ 297.932740][T11000] team0: Device macvlan2 is already an upper device of the team interface [ 298.044685][T11004] tipc: Enabling of bearer rejected, failed to enable media [ 298.250385][ T5738] Bluetooth: hci2: link tx timeout [ 298.250518][ T5738] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 298.292228][T11015] libceph: resolve ' [ 298.292228][T11015] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 298.292228][T11015] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 298.318242][T11017] 9pnet_fd: Insufficient options for proto=fd [ 298.475248][T11023] tipc: Enabling of bearer rejected, failed to enable media [ 298.578120][ T5738] Bluetooth: hci2: link tx timeout [ 298.578138][ T5738] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 298.703090][T11031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.715435][ T5738] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 299.270340][T11038] netlink: 496 bytes leftover after parsing attributes in process `syz.3.1458'. [ 299.623693][ T5738] Bluetooth: hci2: link tx timeout [ 299.623707][ T5738] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 299.724063][ T5738] Bluetooth: hci2: link tx timeout [ 299.724076][ T5738] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 299.889328][T11066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.894160][T11066] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.895218][T11066] tipc: Resetting bearer [ 299.933662][T11069] 9pnet_fd: Insufficient options for proto=fd [ 299.954155][T11066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 299.954178][T11066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.966365][T11066] veth1_vlan: left promiscuous mode [ 299.983406][T11066] veth1_vlan: entered promiscuous mode [ 299.997204][T11066] veth0_macvtap: left promiscuous mode [ 300.001857][T11066] veth0_macvtap: entered promiscuous mode [ 300.008269][T11066] geneve0: left promiscuous mode [ 300.020908][T11066] geneve0: entered promiscuous mode [ 300.024215][T11066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.028775][T11066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.031041][T11066] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.031546][T11066] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.045512][T11066] 8021q: adding VLAN 0 to HW filter on device eth0 [ 300.048412][T11066] 8021q: adding VLAN 0 to HW filter on device eth1 [ 300.053966][T11066] 8021q: adding VLAN 0 to HW filter on device eth2 [ 300.056293][T11066] 8021q: adding VLAN 0 to HW filter on device eth3 [ 300.060562][T11066] 8021q: adding VLAN 0 to HW filter on device bond5 [ 300.063599][T11066] 8021q: adding VLAN 0 to HW filter on device bond6 [ 300.071811][T11066] 8021q: adding VLAN 0 to HW filter on device bond7 [ 300.121635][T10957] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 300.121810][T10957] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 300.121830][T10957] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 300.159930][ T5547] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.159962][ T5547] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.163465][T10957] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 300.164368][T10957] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 300.165039][ T5843] usb 9-1: USB disconnect, device number 14 [ 300.168974][ T5843] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 300.189962][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.189983][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.190002][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.190015][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.190031][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.190045][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.190592][ T5843] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 300.190997][ T5843] ti_usb_3410_5052 9-1:2.0: device disconnected [ 300.282157][ T5738] Bluetooth: hci2: command 0x0406 tx timeout [ 300.742478][ T5740] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 301.623112][T11101] netlink: 'syz.3.1477': attribute type 10 has an invalid length. [ 301.623129][T11101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1477'. [ 301.628189][T11101] dummy0: entered promiscuous mode [ 301.680799][T11105] fuse: Bad value for 'fd' [ 301.707900][T11101] bond2: (slave dummy0): Releasing active interface [ 301.856235][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1485'. [ 301.912356][T11101] bridge0: port 3(dummy0) entered blocking state [ 301.912405][T11101] bridge0: port 3(dummy0) entered disabled state [ 301.912467][T11101] dummy0: entered allmulticast mode [ 302.038438][T11114] 9pnet_fd: Insufficient options for proto=fd [ 302.297861][T11131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1482'. [ 302.481645][T11140] devpts: Bad value for 'max' [ 302.489702][T11140] netlink: 'syz.3.1484': attribute type 1 has an invalid length. [ 302.494855][T11140] netlink: 'syz.3.1484': attribute type 8 has an invalid length. [ 302.526650][T11141] gadgetfs: bound to dummy_udc driver [ 302.590767][ T7802] udevd[7802]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 302.593455][ T7758] udevd[7758]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 302.617810][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'. [ 305.025656][T11191] syz_tun: entered allmulticast mode [ 305.064301][T11186] syz_tun: left allmulticast mode [ 308.033172][ T5740] Bluetooth: hci3: unexpected cc 0x200b length: 2 > 1 [ 308.033193][ T5740] Bluetooth: hci3: unexpected event for opcode 0x200b [ 308.033795][T11229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.127916][T11236] libceph: resolve ' [ 308.127916][T11236] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 308.127916][T11236] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 308.505959][T11242] MTD: Couldn't look up './dev/mtdblock0': -2 [ 308.783320][T11248] tipc: Enabling of bearer rejected, failed to enable media [ 308.835183][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 308.907088][T11251] lo speed is unknown, defaulting to 1000 [ 309.218260][T11256] lo speed is unknown, defaulting to 1000 [ 309.218317][T11256] lo speed is unknown, defaulting to 1000 [ 309.260505][T11256] lo speed is unknown, defaulting to 1000 [ 309.288336][T11256] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 309.288376][T11256] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 309.288416][T11256] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 309.354312][T11256] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 309.428543][T11256] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 309.483172][T11256] lo speed is unknown, defaulting to 1000 [ 309.484094][T11256] lo speed is unknown, defaulting to 1000 [ 309.494323][T11256] lo speed is unknown, defaulting to 1000 [ 309.531157][T11256] lo speed is unknown, defaulting to 1000 [ 309.533647][T11256] lo speed is unknown, defaulting to 1000 [ 309.534348][T11256] lo speed is unknown, defaulting to 1000 [ 309.642014][ T43] kauditd_printk_skb: 30 callbacks suppressed [ 309.642027][ T43] audit: type=1800 audit(1789389414.438:1140): pid=11281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1531" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 309.747224][T11288] netlink: 'syz.3.1532': attribute type 10 has an invalid length. [ 309.750373][T11288] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.750463][T11288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.769028][T11288] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.765996][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1537'. [ 312.375084][T11321] netlink: 'syz.1.1542': attribute type 10 has an invalid length. [ 312.380989][T11321] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 312.547584][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'. [ 312.653373][T11323] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 312.671218][ T9614] e1000 0000:00:06.0 eth0: Reset adapter [ 312.780822][T11323] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 312.820620][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'. [ 312.820642][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'. [ 312.861021][T11321] bond0: (slave bridge0): Releasing backup interface [ 313.070849][T11323] futex_wake_op: syz.2.1543 tries to shift op by -1; fix this program [ 313.120225][ T50] e1000 0000:00:06.0 eth0: Reset adapter [ 313.254934][ T5843] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 313.322730][T11352] jffs2: notice: (11352) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 313.324238][ T50] e1000 0000:00:06.0 eth0: Reset adapter [ 313.694299][T11365] syz.2.1550: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 313.694355][T11365] CPU: 0 UID: 0 PID: 11365 Comm: syz.2.1550 Not tainted syzkaller #0 PREEMPT(full) [ 313.694368][T11365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 313.694375][T11365] Call Trace: [ 313.694379][T11365] [ 313.694384][T11365] dump_stack_lvl+0x100/0x190 [ 313.694404][T11365] warn_alloc.cold+0x9e/0xb2 [ 313.694417][T11365] ? __pfx_warn_alloc+0x10/0x10 [ 313.694436][T11365] ? __lock_acquire+0x5c0/0x1f40 [ 313.694454][T11365] __vmalloc_node_range_noprof+0x123b/0x1420 [ 313.694469][T11365] ? __lock_acquire+0x5c0/0x1f40 [ 313.694483][T11365] ? __lock_acquire+0x5c0/0x1f40 [ 313.694500][T11365] ? do_replace+0x1c6/0x490 [ 313.694514][T11365] ? do_raw_spin_lock+0x128/0x260 [ 313.694532][T11365] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 313.694548][T11365] ? __lock_acquire+0x5c0/0x1f40 [ 313.694562][T11365] ? do_raw_spin_unlock+0x145/0x1e0 [ 313.694574][T11365] ? do_replace+0x1c6/0x490 [ 313.694586][T11365] __vmalloc_node_noprof+0xad/0xf0 [ 313.694601][T11365] ? do_replace+0x1c6/0x490 [ 313.694614][T11365] __vmalloc_noprof+0xa3/0x120 [ 313.694628][T11365] ? __pfx___vmalloc_noprof+0x10/0x10 [ 313.694647][T11365] do_replace+0x1c6/0x490 [ 313.694661][T11365] ? __pfx_do_replace+0x10/0x10 [ 313.694680][T11365] ? register_lock_class+0x3f/0x7b0 [ 313.694698][T11365] compat_do_replace+0x589/0x7a0 [ 313.694712][T11365] ? __pfx_compat_do_replace+0x10/0x10 [ 313.694733][T11365] ? bpf_lsm_capable+0x9/0x10 [ 313.694749][T11365] ? security_capable+0x80/0x260 [ 313.694764][T11365] do_ebt_set_ctl+0x3f4/0x4a0 [ 313.694778][T11365] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 313.694802][T11365] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 313.694812][T11365] ? futex_wake+0x4ea/0x5e0 [ 313.694828][T11365] ? nf_sockopt_find.isra.0+0x222/0x290 [ 313.694846][T11365] nf_setsockopt+0x8d/0xf0 [ 313.694864][T11365] ip_setsockopt+0xcb/0xf0 [ 313.694876][T11365] tcp_setsockopt+0xa7/0x100 [ 313.694892][T11365] smc_setsockopt+0x1b6/0xa40 [ 313.694905][T11365] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 313.694924][T11365] ? __pfx_smc_setsockopt+0x10/0x10 [ 313.694938][T11365] ? aa_sock_opt_perm+0x114/0x1e0 [ 313.694953][T11365] ? __pfx_smc_setsockopt+0x10/0x10 [ 313.694968][T11365] do_sock_setsockopt+0xf3/0x1d0 [ 313.695006][T11365] __sys_setsockopt+0x119/0x190 [ 313.695025][T11365] __ia32_sys_setsockopt+0xbc/0x160 [ 313.695039][T11365] ? __do_fast_syscall_32+0xb3/0x8b0 [ 313.695057][T11365] ? lockdep_hardirqs_on+0x7d/0x110 [ 313.695074][T11365] __do_fast_syscall_32+0x13a/0x8b0 [ 313.695093][T11365] do_fast_syscall_32+0x32/0x70 [ 313.695110][T11365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.695124][T11365] RIP: 0023:0xf707efec [ 313.695137][T11365] Code: Unable to access opcode bytes at 0xf707efc2. [ 313.695142][T11365] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 313.695153][T11365] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 313.695160][T11365] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 313.695167][T11365] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.695173][T11365] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 313.695179][T11365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.695193][T11365] [ 313.695222][T11365] Mem-Info: [ 313.695229][T11365] active_anon:486 inactive_anon:3282 isolated_anon:0 [ 313.695229][T11365] active_file:2593 inactive_file:5014 isolated_file:0 [ 313.695229][T11365] unevictable:0 dirty:17 writeback:13 [ 313.695229][T11365] slab_reclaimable:6316 slab_unreclaimable:64025 [ 313.695229][T11365] mapped:21869 shmem:21 pagetables:1250 [ 313.695229][T11365] sec_pagetables:335 bounce:0 [ 313.695229][T11365] kernel_misc_reclaimable:0 [ 313.695229][T11365] free:22491 free_pcp:968 free_cma:0 [ 313.695258][T11365] Node 0 active_anon:148kB inactive_anon:292kB active_file:3376kB inactive_file:7276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180kB dirty:0kB writeback:0kB shmem:72kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9152kB pagetables:1196kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 313.695288][T11365] Node 1 active_anon:1796kB inactive_anon:12836kB active_file:6996kB inactive_file:12780kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87296kB dirty:68kB writeback:52kB shmem:12kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5900kB pagetables:3804kB sec_pagetables:212kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 313.695319][T11365] Node 0 DMA free:2816kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:32kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 313.695352][T11365] lowmem_reserve[]: 0 277 277 277 277 [ 313.695372][T11365] Node 0 DMA32 free:17880kB boost:6144kB min:18772kB low:21928kB high:25084kB reserved_highatomic:0kB free_highatomic:0kB active_anon:148kB inactive_anon:292kB active_file:3376kB inactive_file:7276kB unevictable:0kB writepending:0kB zspages:768kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:2156kB local_pcp:272kB free_cma:0kB [ 313.695405][T11365] lowmem_reserve[]: 0 0 0 0 0 [ 313.695425][T11365] Node 1 DMA32 free:69268kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1796kB inactive_anon:12836kB active_file:6996kB inactive_file:12644kB unevictable:0kB writepending:120kB zspages:4876kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:1760kB local_pcp:568kB free_cma:0kB [ 313.695455][T11365] lowmem_reserve[]: 0 0 0 0 0 [ 313.695472][T11365] Node 0 DMA: 104*4kB (UE) 42*8kB (UE) 19*16kB (UE) 19*32kB (UE) 8*64kB (U) 1*128kB (E) 0*256kB 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2816kB [ 313.695587][T11365] Node 0 DMA32: 126*4kB (UE) 120*8kB (UME) 38*16kB (UME) 140*32kB (UE) 55*64kB (UE) 21*128kB (UME) 6*256kB (UM) 3*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 17880kB [ 313.695675][T11365] Node 1 DMA32: 162*4kB (ME) 299*8kB (UME) 284*16kB (UME) 93*32kB (UME) 87*64kB (UME) 49*128kB (UME) 27*256kB (UME) 16*512kB (UM) 13*1024kB (M) 7*2048kB (UM) 1*4096kB (M) = 69248kB [ 313.695767][T11365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.695776][T11365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 313.695789][T11365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.695798][T11365] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 313.695807][T11365] 9307 total pagecache pages [ 313.695811][T11365] 1690 pages in swap cache [ 313.695815][T11365] Free swap = 63080kB [ 313.695819][T11365] Total swap = 124996kB [ 313.695824][T11365] 524155 pages RAM [ 313.695828][T11365] 0 pages HighMem/MovableOnly [ 313.695831][T11365] 212121 pages reserved [ 313.695835][T11365] 0 pages cma reserved [ 315.571096][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 316.765436][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.699072][ T5740] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 326.704422][ C3] sr 2:0:0:0: [sr0] tag#6 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 326.704488][ C3] sr 2:0:0:0: [sr0] tag#6 CDB: Read DVD structure ad d1 8b b6 80 3d [ 326.803661][T11419] netlink: 'syz.3.1555': attribute type 10 has an invalid length. [ 326.804872][T11419] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.804967][T11419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.822088][T11419] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.085676][T11432] fuse: fd is not a fuse device [ 329.387302][T11461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 329.420719][T11461] 8021q: adding VLAN 0 to HW filter on device eth0 [ 329.424682][T11461] 8021q: adding VLAN 0 to HW filter on device eth1 [ 329.432870][T11461] 8021q: adding VLAN 0 to HW filter on device eth2 [ 329.443659][T11461] 8021q: adding VLAN 0 to HW filter on device eth3 [ 329.446771][T11461] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.451850][ T5843] lo speed is unknown, defaulting to 1000 [ 329.451866][ T5843] rxe0: Port: 1 Link ACTIVE [ 329.453270][ T5843] lo speed is unknown, defaulting to 1000 [ 329.466604][T11463] bridge1: port 1(erspan0) entered blocking state [ 329.466771][T11463] bridge1: port 1(erspan0) entered forwarding state [ 329.489524][T11463] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.489578][T11463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.498125][T11463] 8021q: adding VLAN 0 to HW filter on device .` [ 329.499418][T11463] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.506646][T11463] bridge0: port 3(dummy0) entered blocking state [ 329.506774][T11463] bridge0: port 3(dummy0) entered forwarding state [ 329.517991][T11463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.561316][ T5740] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 329.578006][T11463] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 329.619473][T11463] 8021q: adding VLAN 0 to HW filter on device bond3 [ 329.630262][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1571'. [ 329.645610][T11463] 8021q: adding VLAN 0 to HW filter on device eth0 [ 329.671693][T11463] 8021q: adding VLAN 0 to HW filter on device eth1 [ 329.681737][T11463] 8021q: adding VLAN 0 to HW filter on device eth2 [ 329.684635][T11463] 8021q: adding VLAN 0 to HW filter on device eth3 [ 329.693604][T11463] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.695965][T11463] 8021q: adding VLAN 0 to HW filter on device bond7 [ 329.698407][T11463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.699287][T11463] 8021q: adding VLAN 0 to HW filter on device bond8 [ 329.723017][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.726280][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.009947][T11498] syzkaller0: entered promiscuous mode [ 330.009968][T11498] syzkaller0: entered allmulticast mode [ 332.962913][T11541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.495537][ T43] audit: type=1326 audit(1789389438.298:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.3.1596" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x0 [ 333.595006][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1595'. [ 334.249942][ T854] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 334.400122][ T854] usb 9-1: Using ep0 maxpacket: 16 [ 334.401517][ T854] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 334.402356][ T854] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 334.404037][ T854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.404050][ T854] usb 9-1: Product: syz [ 334.404057][ T854] usb 9-1: Manufacturer: syz [ 334.404065][ T854] usb 9-1: SerialNumber: syz [ 334.405417][ T854] usb 9-1: config 0 descriptor?? [ 334.411254][ T854] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 334.411280][ T854] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 335.015024][ T854] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 335.762686][ T854] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 335.762705][ T854] em28xx 9-1:0.0: board has no eeprom [ 335.820398][ T854] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 335.820423][ T854] em28xx 9-1:0.0: dvb set to bulk mode. [ 335.825177][ T854] usb 9-1: USB disconnect, device number 15 [ 335.826323][ T854] em28xx 9-1:0.0: Disconnecting em28xx [ 335.826375][ T5843] em28xx 9-1:0.0: Binding DVB extension [ 335.900766][ T5843] em28xx 9-1:0.0: Registering input extension [ 335.901625][ T854] em28xx 9-1:0.0: Closing input extension [ 335.927864][ T854] em28xx: Freeing device [ 337.473835][T11617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1607'. [ 337.970045][ T9614] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 338.071336][T11628] netlink: 'syz.3.1611': attribute type 10 has an invalid length. [ 338.071859][T11628] bridge0: port 3(dummy0) entered disabled state [ 338.072002][T11628] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.072112][T11628] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.077845][T11628] bridge0: port 3(dummy0) entered blocking state [ 338.077924][T11628] bridge0: port 3(dummy0) entered forwarding state [ 338.078118][T11628] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.078200][T11628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.078373][T11628] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.078461][T11628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.109659][T11628] bridge0: port 3(dummy0) entered disabled state [ 338.109816][T11628] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.109890][T11628] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.143169][ T9614] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 338.145984][ T9614] usb 7-1: config 0 has no interfaces? [ 338.146002][ T9614] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.147277][ T9614] usb 7-1: config 0 descriptor?? [ 338.376807][ T9614] usb 7-1: USB disconnect, device number 20 [ 338.399570][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1611'. [ 338.399620][T11628] dummy0: left allmulticast mode [ 338.399890][T11628] bridge0: port 3(dummy0) entered disabled state [ 338.428325][T11628] bridge_slave_1: left allmulticast mode [ 338.428351][T11628] bridge_slave_1: left promiscuous mode [ 338.428493][T11628] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.462798][T11628] bridge_slave_0: left allmulticast mode [ 338.462818][T11628] bridge_slave_0: left promiscuous mode [ 338.462922][T11628] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.099543][T11639] IPVS: nq: FWM 3 0x00000003 - no destination available [ 339.424982][T11644] syz.4.1615: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 339.425048][T11644] CPU: 0 UID: 0 PID: 11644 Comm: syz.4.1615 Not tainted syzkaller #0 PREEMPT(full) [ 339.425069][T11644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.425080][T11644] Call Trace: [ 339.425087][T11644] [ 339.425094][T11644] dump_stack_lvl+0x100/0x190 [ 339.425123][T11644] warn_alloc.cold+0x9e/0xb2 [ 339.425144][T11644] ? __pfx_warn_alloc+0x10/0x10 [ 339.425174][T11644] ? rcu_is_watching+0x13/0xc0 [ 339.425196][T11644] __vmalloc_node_range_noprof+0x123b/0x1420 [ 339.425220][T11644] ? __lock_acquire+0x5c0/0x1f40 [ 339.425246][T11644] ? __dequeue_entity+0xe3b/0x1de0 [ 339.425268][T11644] ? do_replace+0x1c6/0x490 [ 339.425291][T11644] ? do_raw_spin_lock+0x128/0x260 [ 339.425320][T11644] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 339.425345][T11644] ? __lock_acquire+0x5c0/0x1f40 [ 339.425368][T11644] ? do_raw_spin_unlock+0x145/0x1e0 [ 339.425388][T11644] ? do_replace+0x1c6/0x490 [ 339.425407][T11644] __vmalloc_node_noprof+0xad/0xf0 [ 339.425430][T11644] ? do_replace+0x1c6/0x490 [ 339.425452][T11644] __vmalloc_noprof+0xa3/0x120 [ 339.425474][T11644] ? __pfx___vmalloc_noprof+0x10/0x10 [ 339.425504][T11644] do_replace+0x1c6/0x490 [ 339.425526][T11644] ? __pfx_do_replace+0x10/0x10 [ 339.425577][T11644] ? register_lock_class+0x3f/0x7b0 [ 339.425609][T11644] compat_do_replace+0x589/0x7a0 [ 339.425635][T11644] ? __pfx_compat_do_replace+0x10/0x10 [ 339.425674][T11644] ? bpf_lsm_capable+0x9/0x10 [ 339.425702][T11644] ? security_capable+0x80/0x260 [ 339.425729][T11644] do_ebt_set_ctl+0x3f4/0x4a0 [ 339.425752][T11644] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 339.425776][T11644] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 339.425798][T11644] ? nf_sockopt_find.isra.0+0x222/0x290 [ 339.425825][T11644] nf_setsockopt+0x8d/0xf0 [ 339.425850][T11644] ip_setsockopt+0xcb/0xf0 [ 339.425869][T11644] tcp_setsockopt+0xa7/0x100 [ 339.425892][T11644] smc_setsockopt+0x1b6/0xa40 [ 339.425913][T11644] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 339.425942][T11644] ? __pfx_smc_setsockopt+0x10/0x10 [ 339.425965][T11644] ? aa_sock_opt_perm+0x114/0x1e0 [ 339.425989][T11644] ? __pfx_smc_setsockopt+0x10/0x10 [ 339.426017][T11644] do_sock_setsockopt+0xf3/0x1d0 [ 339.426046][T11644] __sys_setsockopt+0x119/0x190 [ 339.426073][T11644] __ia32_sys_setsockopt+0xbc/0x160 [ 339.426095][T11644] ? __do_fast_syscall_32+0xb3/0x8b0 [ 339.426125][T11644] ? lockdep_hardirqs_on+0x7d/0x110 [ 339.426152][T11644] __do_fast_syscall_32+0x13a/0x8b0 [ 339.426183][T11644] do_fast_syscall_32+0x32/0x70 [ 339.426210][T11644] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.426233][T11644] RIP: 0023:0xf704efec [ 339.426253][T11644] Code: Unable to access opcode bytes at 0xf704efc2. [ 339.426261][T11644] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 339.426279][T11644] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 339.426290][T11644] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 339.426301][T11644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.426311][T11644] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 339.426321][T11644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.426345][T11644] [ 339.426401][T11644] Mem-Info: [ 339.426410][T11644] active_anon:1111 inactive_anon:1604 isolated_anon:0 [ 339.426410][T11644] active_file:1820 inactive_file:7009 isolated_file:0 [ 339.426410][T11644] unevictable:0 dirty:77 writeback:0 [ 339.426410][T11644] slab_reclaimable:6359 slab_unreclaimable:62845 [ 339.426410][T11644] mapped:22394 shmem:847 pagetables:1247 [ 339.426410][T11644] sec_pagetables:351 bounce:0 [ 339.426410][T11644] kernel_misc_reclaimable:0 [ 339.426410][T11644] free:19660 free_pcp:4821 free_cma:0 [ 339.426457][T11644] Node 0 active_anon:2472kB inactive_anon:548kB active_file:1084kB inactive_file:6996kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:736kB dirty:72kB writeback:0kB shmem:2472kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9216kB pagetables:1136kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 339.426506][T11644] Node 1 active_anon:1972kB inactive_anon:5868kB active_file:6196kB inactive_file:21040kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88840kB dirty:236kB writeback:0kB shmem:916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5776kB pagetables:3852kB sec_pagetables:248kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 339.426551][T11644] Node 0 DMA free:1352kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:468kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:32kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:1112kB local_pcp:0kB free_cma:0kB [ 339.426600][T11644] lowmem_reserve[]: 0 277 277 277 277 [ 339.426630][T11644] Node 0 DMA32 free:5628kB boost:12288kB min:24916kB low:28072kB high:31228kB reserved_highatomic:2048kB free_highatomic:584kB active_anon:2004kB inactive_anon:548kB active_file:1084kB inactive_file:6996kB unevictable:0kB writepending:72kB zspages:800kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:13868kB local_pcp:5468kB free_cma:0kB [ 339.426681][T11644] lowmem_reserve[]: 0 0 0 0 0 [ 339.426710][T11644] Node 1 DMA32 free:71660kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1972kB inactive_anon:5868kB active_file:6196kB inactive_file:21040kB unevictable:0kB writepending:236kB zspages:4884kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:4252kB local_pcp:680kB free_cma:0kB [ 339.426758][T11644] lowmem_reserve[]: 0 0 0 0 0 [ 339.426787][T11644] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 6*32kB (U) 8*64kB (U) 1*128kB (E) 0*256kB 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 1352kB [ 339.426896][T11644] Node 0 DMA32: 311*4kB (UMEH) 78*8kB (UEH) 11*16kB (UEH) 22*32kB (UEH) 17*64kB (UMEH) 10*128kB (UEH) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5628kB [ 339.427021][T11644] Node 1 DMA32: 38*4kB (UME) 232*8kB (UME) 713*16kB (UME) 459*32kB (UME) 150*64kB (UME) 45*128kB (UME) 25*256kB (UME) 8*512kB (UM) 15*1024kB (UM) 1*2048kB (M) 0*4096kB = 71368kB [ 339.427330][T11644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 339.427346][T11644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 339.427361][T11644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 339.427375][T11644] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 339.427389][T11644] 11156 total pagecache pages [ 339.427396][T11644] 1447 pages in swap cache [ 339.427403][T11644] Free swap = 65884kB [ 339.427409][T11644] Total swap = 124996kB [ 339.427416][T11644] 524155 pages RAM [ 339.427422][T11644] 0 pages HighMem/MovableOnly [ 339.427429][T11644] 212121 pages reserved [ 339.427459][T11644] 0 pages cma reserved [ 339.607802][T11654] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 339.653050][T11654] bond9: entered promiscuous mode [ 339.657841][T11654] 8021q: adding VLAN 0 to HW filter on device bond9 [ 340.574262][T11684] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 340.591882][ T5843] lo speed is unknown, defaulting to 1000 [ 340.597274][T11684] netlink: 'syz.3.1623': attribute type 1 has an invalid length. [ 340.651715][T11684] 8021q: adding VLAN 0 to HW filter on device bond10 [ 341.322231][ T5843] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 341.354343][T11696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.470520][ T5843] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 341.471383][ T5843] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.471406][ T5843] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.473030][ T5843] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.473047][ T5843] usb 9-1: Product: syz [ 341.473054][ T5843] usb 9-1: Manufacturer: syz [ 341.473061][ T5843] usb 9-1: SerialNumber: syz [ 341.587281][T11699] netlink: 'syz.2.1627': attribute type 1 has an invalid length. [ 341.614581][T11683] bond10: (slave geneve2): making interface the new active one [ 341.618473][T11683] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 341.626925][T11699] bond7: (slave gretap3): making interface the new active one [ 341.627226][T11699] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 341.681841][T11699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1627'. [ 341.682805][T11699] 8021q: adding VLAN 0 to HW filter on device bond7 [ 341.898611][T11705] netlink: 'syz.2.1629': attribute type 1 has an invalid length. [ 341.920149][T11705] bond8: entered promiscuous mode [ 341.920356][T11705] 8021q: adding VLAN 0 to HW filter on device bond8 [ 341.971004][ T5738] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 341.974718][ T2224] usb 9-1: USB disconnect, device number 16 [ 342.730863][T11718] jffs2: notice: (11718) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 343.279917][T11718] overlayfs: failed to resolve '/éø•²_¬âw”T–zë ‰ªê„¨¶“‚&yPâ½7òUÍÊ!6 }n®ˆm5´%ëfÂÒΟ9Bº[/Îf³nÎzdh]sg6wéDOp·k%ÌÒ›@’Îì@á@ [ 343.279917][T11718] é»ëBHF…€¥ÁüÇÖ’(ÛÞ) »<ûvwZà†¥Õ'¼ ': -2 [ 343.432370][ T5738] Bluetooth: hci0: command 0x0406 tx timeout [ 344.488562][T11730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.139847][ T2224] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 345.198671][T11726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.339041][T11738] netlink: 'syz.3.1640': attribute type 1 has an invalid length. [ 345.346476][ T2224] usb 9-1: Using ep0 maxpacket: 16 [ 345.400375][T11738] bond11: entered promiscuous mode [ 345.400779][T11738] 8021q: adding VLAN 0 to HW filter on device bond11 [ 345.406257][T11727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.056563][ T5740] Bluetooth: hci3: command 0x0406 tx timeout [ 346.222906][ T2224] usb 9-1: unable to get BOS descriptor or descriptor too short [ 346.222971][ T2224] usb 9-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 346.223001][ T2224] usb 9-1: no configurations [ 346.223011][ T2224] usb 9-1: can't read configurations, error -22 [ 347.210092][T11756] fuse: fd is not a fuse device [ 351.080050][T11782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.386687][T11776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.603066][T11790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1655'. [ 351.762628][T11794] netlink: 'syz.1.1656': attribute type 1 has an invalid length. [ 351.847906][T11794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1656'. [ 351.849022][T11794] 8021q: adding VLAN 0 to HW filter on device bond8 [ 352.350979][ T5843] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 352.378891][T11803] lo speed is unknown, defaulting to 1000 [ 352.465954][T11802] netlink: 'syz.1.1657': attribute type 3 has an invalid length. [ 352.609617][ T5843] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 352.613882][ T5843] usb 9-1: config 0 has no interfaces? [ 352.613916][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.667650][ T5843] usb 9-1: config 0 descriptor?? [ 352.746755][T11803] lo speed is unknown, defaulting to 1000 [ 353.150196][ T2224] usb 9-1: USB disconnect, device number 19 [ 355.628449][ T5746] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 355.888331][T11841] jffs2: notice: (11841) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 355.931943][T11841] overlayfs: failed to clone upperpath [ 356.298331][T11836] netlink: 'syz.4.1667': attribute type 10 has an invalid length. [ 356.322073][T11836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.355505][T11836] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 360.496630][ T5820] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 360.683672][ T5820] usb 9-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 360.699264][ T5820] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.699288][ T5820] usb 9-1: Product: syz [ 360.699300][ T5820] usb 9-1: Manufacturer: syz [ 360.699311][ T5820] usb 9-1: SerialNumber: syz [ 360.706278][ T5820] usb 9-1: NFC: intf ffff888021779000 id ffffffff8fe92bc0 [ 361.118009][T11884] netlink: 'syz.1.1682': attribute type 10 has an invalid length. [ 361.160166][ T5820] nfcmrvl 9-1:1.0: NFC: registered with nci successfully [ 361.644817][ T6840] nfcmrvl 9-1:1.0: NFC: send entry, len 4 [ 361.647629][ C2] nfcmrvl 9-1:1.0: NFC: urb ffff888060f9fc00 status 0 count 0 [ 363.475971][T11874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.771567][ T5820] usb 9-1: USB disconnect, device number 20 [ 363.773554][ T5820] usb 9-1: NFC: intf ffff888021779000 [ 363.914499][T11904] netlink: 'syz.1.1688': attribute type 1 has an invalid length. [ 364.031485][T11906] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 364.031580][T11906] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 364.038989][T11899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.556058][T11907] bond9: (slave geneve2): making interface the new active one [ 364.605793][T11907] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 364.619954][ T6840] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 364.652493][ T6840] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 364.652542][ T6840] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 364.652570][ T6840] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 365.004452][T11904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1688'. [ 365.075234][T11904] 8021q: adding VLAN 0 to HW filter on device bond9 [ 365.569098][ T5740] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 367.774094][T11926] fuse: fd is not a fuse device [ 368.603454][T11938] tipc: Enabling of bearer rejected, failed to enable media [ 369.588564][ T5740] Bluetooth: hci2: command 0x0406 tx timeout [ 369.861033][T11958] lo speed is unknown, defaulting to 1000 [ 370.008660][T11961] tmpfs: Bad value for 'mpol' [ 374.482431][T11958] lo speed is unknown, defaulting to 1000 [ 375.265177][T11987] tipc: Enabling of bearer rejected, failed to enable media [ 376.079074][T11993] syz.3.1708: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 376.079140][T11993] CPU: 3 UID: 0 PID: 11993 Comm: syz.3.1708 Not tainted syzkaller #0 PREEMPT(full) [ 376.079165][T11993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 376.079178][T11993] Call Trace: [ 376.079185][T11993] [ 376.079194][T11993] dump_stack_lvl+0x100/0x190 [ 376.079228][T11993] warn_alloc.cold+0x9e/0xb2 [ 376.079251][T11993] ? __pfx_warn_alloc+0x10/0x10 [ 376.079319][T11993] ? __lock_acquire+0x5c0/0x1f40 [ 376.079359][T11993] __vmalloc_node_range_noprof+0x123b/0x1420 [ 376.079388][T11993] ? __lock_acquire+0x5c0/0x1f40 [ 376.079416][T11993] ? __lock_acquire+0x5c0/0x1f40 [ 376.079448][T11993] ? do_replace+0x1c6/0x490 [ 376.079473][T11993] ? do_raw_spin_lock+0x128/0x260 [ 376.079507][T11993] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 376.079537][T11993] ? __lock_acquire+0x5c0/0x1f40 [ 376.079563][T11993] ? do_raw_spin_unlock+0x145/0x1e0 [ 376.079588][T11993] ? do_replace+0x1c6/0x490 [ 376.079611][T11993] __vmalloc_node_noprof+0xad/0xf0 [ 376.079639][T11993] ? do_replace+0x1c6/0x490 [ 376.079665][T11993] __vmalloc_noprof+0xa3/0x120 [ 376.079692][T11993] ? __pfx___vmalloc_noprof+0x10/0x10 [ 376.079729][T11993] do_replace+0x1c6/0x490 [ 376.079771][T11993] ? __pfx_do_replace+0x10/0x10 [ 376.079803][T11993] ? register_lock_class+0x3f/0x7b0 [ 376.079832][T11993] compat_do_replace+0x589/0x7a0 [ 376.079856][T11993] ? __pfx_compat_do_replace+0x10/0x10 [ 376.079895][T11993] ? bpf_lsm_capable+0x9/0x10 [ 376.079922][T11993] ? security_capable+0x80/0x260 [ 376.079950][T11993] do_ebt_set_ctl+0x3f4/0x4a0 [ 376.079977][T11993] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 376.080004][T11993] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 376.080023][T11993] ? futex_wake+0x4ea/0x5e0 [ 376.080051][T11993] ? nf_sockopt_find.isra.0+0x222/0x290 [ 376.080080][T11993] nf_setsockopt+0x8d/0xf0 [ 376.080108][T11993] ip_setsockopt+0xcb/0xf0 [ 376.080130][T11993] tcp_setsockopt+0xa7/0x100 [ 376.080155][T11993] smc_setsockopt+0x1b6/0xa40 [ 376.080179][T11993] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 376.080217][T11993] ? __pfx_smc_setsockopt+0x10/0x10 [ 376.080244][T11993] ? aa_sock_opt_perm+0x114/0x1e0 [ 376.080271][T11993] ? __pfx_smc_setsockopt+0x10/0x10 [ 376.080297][T11993] do_sock_setsockopt+0xf3/0x1d0 [ 376.080331][T11993] __sys_setsockopt+0x119/0x190 [ 376.080370][T11993] __ia32_sys_setsockopt+0xbc/0x160 [ 376.080398][T11993] ? __do_fast_syscall_32+0xb3/0x8b0 [ 376.080429][T11993] ? lockdep_hardirqs_on+0x7d/0x110 [ 376.080458][T11993] __do_fast_syscall_32+0x13a/0x8b0 [ 376.080492][T11993] do_fast_syscall_32+0x32/0x70 [ 376.080522][T11993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 376.080548][T11993] RIP: 0023:0xf7fc3fec [ 376.080573][T11993] Code: Unable to access opcode bytes at 0xf7fc3fc2. [ 376.080582][T11993] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 376.080602][T11993] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 376.080615][T11993] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 376.080626][T11993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 376.080635][T11993] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 376.080647][T11993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.080670][T11993] [ 376.080803][T11993] Mem-Info: [ 376.080814][T11993] active_anon:406 inactive_anon:1426 isolated_anon:3 [ 376.080814][T11993] active_file:811 inactive_file:5984 isolated_file:0 [ 376.080814][T11993] unevictable:2045 dirty:63 writeback:0 [ 376.080814][T11993] slab_reclaimable:6305 slab_unreclaimable:65999 [ 376.080814][T11993] mapped:21972 shmem:91 pagetables:1213 [ 376.080814][T11993] sec_pagetables:356 bounce:0 [ 376.080814][T11993] kernel_misc_reclaimable:0 [ 376.080814][T11993] free:20135 free_pcp:1520 free_cma:0 [ 376.080861][T11993] Node 0 active_anon:252kB inactive_anon:500kB active_file:1532kB inactive_file:1660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:828kB dirty:4kB writeback:0kB shmem:360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8928kB pagetables:1136kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 376.080904][T11993] Node 1 active_anon:1372kB inactive_anon:5204kB active_file:1712kB inactive_file:22276kB unevictable:8180kB isolated(anon):12kB isolated(file):0kB mapped:87060kB dirty:248kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6088kB pagetables:3716kB sec_pagetables:268kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 376.080949][T11993] Node 0 DMA free:2524kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:320kB active_file:84kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:32kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 376.080998][T11993] lowmem_reserve[]: 0 277 277 277 277 [ 376.081028][T11993] Node 0 DMA32 free:18288kB boost:18432kB min:31060kB low:34216kB high:37372kB reserved_highatomic:0kB free_highatomic:0kB active_anon:252kB inactive_anon:180kB active_file:1448kB inactive_file:1660kB unevictable:0kB writepending:4kB zspages:796kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:2316kB local_pcp:316kB free_cma:0kB [ 376.081080][T11993] lowmem_reserve[]: 0 0 0 0 0 [ 376.081110][T11993] Node 1 DMA32 free:59728kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1372kB inactive_anon:5204kB active_file:1712kB inactive_file:22276kB unevictable:8180kB writepending:248kB zspages:4792kB present:1048432kB managed:948208kB mlocked:8140kB bounce:0kB free_pcp:3760kB local_pcp:952kB free_cma:0kB [ 376.081163][T11993] lowmem_reserve[]: 0 0 0 0 0 [ 376.081194][T11993] Node 0 DMA: 99*4kB (UE) 24*8kB (UE) 9*16kB (UE) 20*32kB (UE) 8*64kB (U) 1*128kB (E) 0*256kB 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2524kB [ 376.081373][T11993] Node 0 DMA32: 586*4kB (UM) 257*8kB (UME) 130*16kB (UME) 87*32kB (ME) 45*64kB (ME) 12*128kB (ME) 6*256kB (UM) 4*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 18288kB [ 376.081513][T11993] Node 1 DMA32: 238*4kB (UME) 149*8kB (UME) 45*16kB (UE) 110*32kB (UME) 131*64kB (UME) 55*128kB (UME) 30*256kB (UME) 17*512kB (UM) 13*1024kB (UM) 4*2048kB (UM) 0*4096kB = 59696kB [ 376.081636][T11993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.081649][T11993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 376.081661][T11993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.081673][T11993] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 376.081685][T11993] 8239 total pagecache pages [ 376.081690][T11993] 1278 pages in swap cache [ 376.081696][T11993] Free swap = 66344kB [ 376.081702][T11993] Total swap = 124996kB [ 376.081708][T11993] 524155 pages RAM [ 376.081713][T11993] 0 pages HighMem/MovableOnly [ 376.081719][T11993] 212121 pages reserved [ 376.081724][T11993] 0 pages cma reserved [ 377.555627][ T5746] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 378.213886][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.368002][T12015] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 378.448355][T12017] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 379.670099][T12015] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1715'. [ 380.864326][ T73] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 380.956554][T12027] netlink: 'syz.3.1719': attribute type 1 has an invalid length. [ 381.033575][T12027] bond12: entered promiscuous mode [ 381.033960][T12027] 8021q: adding VLAN 0 to HW filter on device bond12 [ 381.065518][ T73] usb 7-1: Using ep0 maxpacket: 8 [ 381.277065][ T73] usb 7-1: unable to get BOS descriptor or descriptor too short [ 381.277109][ T73] usb 7-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 381.277930][ T73] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 381.277958][ T73] usb 7-1: can't read configurations, error -71 [ 382.660109][ T73] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 382.820247][ T73] usb 7-1: Using ep0 maxpacket: 16 [ 384.586300][T12056] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 386.118861][ T73] usb 7-1: unable to get BOS descriptor or descriptor too short [ 386.118924][ T73] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 386.118952][ T73] usb 7-1: no configurations [ 386.118962][ T73] usb 7-1: can't read configurations, error -22 [ 387.850076][ T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 387.895016][T12058] netlink: 'syz.3.1727': attribute type 5 has an invalid length. [ 388.000652][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 388.158696][T12066] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:21 [ 388.189878][T12069] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 388.304697][T12066] IPVS: stopping master sync thread 12069 ... [ 388.328100][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 388.328137][ T10] usb 9-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 388.328897][ T10] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 388.328920][ T10] usb 9-1: can't read configurations, error -71 [ 391.394629][T12096] warn_alloc: 1 callbacks suppressed [ 391.394649][T12096] syz.3.1738: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 391.394704][T12096] CPU: 3 UID: 0 PID: 12096 Comm: syz.3.1738 Not tainted syzkaller #0 PREEMPT(full) [ 391.394724][T12096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 391.394736][T12096] Call Trace: [ 391.394742][T12096] [ 391.394750][T12096] dump_stack_lvl+0x100/0x190 [ 391.394777][T12096] warn_alloc.cold+0x9e/0xb2 [ 391.394797][T12096] ? __pfx_warn_alloc+0x10/0x10 [ 391.394829][T12096] ? __lock_acquire+0x5c0/0x1f40 [ 391.394858][T12096] __vmalloc_node_range_noprof+0x123b/0x1420 [ 391.394890][T12096] ? __lock_acquire+0x5c0/0x1f40 [ 391.394915][T12096] ? __lock_acquire+0x5c0/0x1f40 [ 391.394947][T12096] ? do_replace+0x1c6/0x490 [ 391.394972][T12096] ? do_raw_spin_lock+0x128/0x260 [ 391.395003][T12096] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 391.395031][T12096] ? __lock_acquire+0x5c0/0x1f40 [ 391.395057][T12096] ? do_raw_spin_unlock+0x145/0x1e0 [ 391.395079][T12096] ? do_replace+0x1c6/0x490 [ 391.395100][T12096] __vmalloc_node_noprof+0xad/0xf0 [ 391.395125][T12096] ? do_replace+0x1c6/0x490 [ 391.395149][T12096] __vmalloc_noprof+0xa3/0x120 [ 391.395170][T12096] ? __pfx___vmalloc_noprof+0x10/0x10 [ 391.395238][T12096] do_replace+0x1c6/0x490 [ 391.395265][T12096] ? __pfx_do_replace+0x10/0x10 [ 391.395297][T12096] ? register_lock_class+0x3f/0x7b0 [ 391.395327][T12096] compat_do_replace+0x589/0x7a0 [ 391.395350][T12096] ? __pfx_compat_do_replace+0x10/0x10 [ 391.395384][T12096] ? bpf_lsm_capable+0x9/0x10 [ 391.395408][T12096] ? security_capable+0x80/0x260 [ 391.395432][T12096] do_ebt_set_ctl+0x3f4/0x4a0 [ 391.395455][T12096] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 391.395498][T12096] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 391.395514][T12096] ? futex_wake+0x4ea/0x5e0 [ 391.395538][T12096] ? nf_sockopt_find.isra.0+0x222/0x290 [ 391.395564][T12096] nf_setsockopt+0x8d/0xf0 [ 391.395588][T12096] ip_setsockopt+0xcb/0xf0 [ 391.395605][T12096] tcp_setsockopt+0xa7/0x100 [ 391.395632][T12096] smc_setsockopt+0x1b6/0xa40 [ 391.395655][T12096] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 391.395688][T12096] ? __pfx_smc_setsockopt+0x10/0x10 [ 391.395714][T12096] ? aa_sock_opt_perm+0x114/0x1e0 [ 391.395739][T12096] ? __pfx_smc_setsockopt+0x10/0x10 [ 391.395763][T12096] do_sock_setsockopt+0xf3/0x1d0 [ 391.395794][T12096] __sys_setsockopt+0x119/0x190 [ 391.395823][T12096] __ia32_sys_setsockopt+0xbc/0x160 [ 391.395844][T12096] ? __do_fast_syscall_32+0xb3/0x8b0 [ 391.395871][T12096] ? lockdep_hardirqs_on+0x7d/0x110 [ 391.395905][T12096] __do_fast_syscall_32+0x13a/0x8b0 [ 391.395938][T12096] do_fast_syscall_32+0x32/0x70 [ 391.395968][T12096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 391.395991][T12096] RIP: 0023:0xf7fc3fec [ 391.396014][T12096] Code: Unable to access opcode bytes at 0xf7fc3fc2. [ 391.396023][T12096] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 391.396042][T12096] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 391.396054][T12096] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 391.396070][T12096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 391.396081][T12096] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 391.396092][T12096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 391.396117][T12096] [ 391.396170][T12096] Mem-Info: [ 391.396180][T12096] active_anon:852 inactive_anon:5647 isolated_anon:0 [ 391.396180][T12096] active_file:737 inactive_file:5714 isolated_file:0 [ 391.396180][T12096] unevictable:0 dirty:24 writeback:0 [ 391.396180][T12096] slab_reclaimable:6307 slab_unreclaimable:66452 [ 391.396180][T12096] mapped:25186 shmem:4970 pagetables:1276 [ 391.396180][T12096] sec_pagetables:356 bounce:0 [ 391.396180][T12096] kernel_misc_reclaimable:0 [ 391.396180][T12096] free:15523 free_pcp:1884 free_cma:0 [ 391.396229][T12096] Node 0 active_anon:2716kB inactive_anon:8584kB active_file:412kB inactive_file:564kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3104kB dirty:36kB writeback:0kB shmem:11088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8928kB pagetables:1240kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 391.396284][T12096] Node 1 active_anon:692kB inactive_anon:14004kB active_file:2536kB inactive_file:22292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97640kB dirty:60kB writeback:0kB shmem:8792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6136kB pagetables:3864kB sec_pagetables:268kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 391.396331][T12096] Node 0 DMA free:2524kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:12kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:32kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 391.396383][T12096] lowmem_reserve[]: 0 277 277 277 277 [ 391.396415][T12096] Node 0 DMA32 free:9640kB boost:18432kB min:31060kB low:34216kB high:37372kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2716kB inactive_anon:8572kB active_file:408kB inactive_file:556kB unevictable:0kB writepending:36kB zspages:768kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:4416kB local_pcp:356kB free_cma:0kB [ 391.396466][T12096] lowmem_reserve[]: 0 0 0 0 0 [ 391.396495][T12096] Node 1 DMA32 free:49928kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:692kB inactive_anon:14004kB active_file:2536kB inactive_file:22292kB unevictable:0kB writepending:60kB zspages:5196kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:3120kB local_pcp:1020kB free_cma:0kB [ 391.396547][T12096] lowmem_reserve[]: 0 0 0 0 0 [ 391.396578][T12096] Node 0 DMA: 105*4kB (UE) 45*8kB (UE) 19*16kB (UE) 9*32kB (UE) 8*64kB (U) 1*128kB (E) 0*256kB 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2524kB [ 391.396708][T12096] Node 0 DMA32: 334*4kB (UE) 58*8kB (UE) 8*16kB (UE) 77*32kB (UE) 20*64kB (UME) 7*128kB (ME) 2*256kB (M) 3*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 9640kB [ 391.396978][T12096] Node 1 DMA32: 226*4kB (ME) 193*8kB (UME) 78*16kB (UME) 50*32kB (UME) 99*64kB (UME) 61*128kB (UME) 25*256kB (UME) 19*512kB (UM) 12*1024kB (UM) 1*2048kB (U) 0*4096kB = 49904kB [ 391.397117][T12096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 391.397132][T12096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 391.397146][T12096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 391.397160][T12096] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 391.397174][T12096] 12850 total pagecache pages [ 391.397180][T12096] 1344 pages in swap cache [ 391.397186][T12096] Free swap = 64648kB [ 391.397193][T12096] Total swap = 124996kB [ 391.397199][T12096] 524155 pages RAM [ 391.397205][T12096] 0 pages HighMem/MovableOnly [ 391.397211][T12096] 212121 pages reserved [ 391.397217][T12096] 0 pages cma reserved [ 393.128297][ T10] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 393.270000][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 396.649667][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 396.649708][ T10] usb 9-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 396.652360][ T10] usb 9-1: no configurations [ 396.652374][ T10] usb 9-1: can't read configurations, error -22 [ 397.655639][T12119] fuse: fd is not a fuse device [ 397.986126][T12123] lo speed is unknown, defaulting to 1000 [ 398.766708][T12123] lo speed is unknown, defaulting to 1000 [ 399.659630][ T5746] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 401.068534][T12142] FAULT_INJECTION: forcing a failure. [ 401.068534][T12142] name failslab, interval 1, probability 0, space 0, times 0 [ 401.068568][T12142] CPU: 0 UID: 0 PID: 12142 Comm: syz.2.1750 Not tainted syzkaller #0 PREEMPT(full) [ 401.068592][T12142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 401.068604][T12142] Call Trace: [ 401.068611][T12142] [ 401.068619][T12142] dump_stack_lvl+0x100/0x190 [ 401.068650][T12142] should_fail_ex.cold+0x5/0xa [ 401.068676][T12142] should_failslab+0xc2/0x120 [ 401.068702][T12142] __kmalloc_cache_noprof+0x91/0x6d0 [ 401.068733][T12142] ? loopback_open+0x9f6/0x13d0 [ 401.068761][T12142] loopback_open+0x9f6/0x13d0 [ 401.068786][T12142] snd_pcm_open_substream+0xa76/0x1850 [ 401.068812][T12142] ? __kasan_kmalloc+0xa0/0xb0 [ 401.068833][T12142] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 401.068854][T12142] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 401.068881][T12142] ? snd_pcm_oss_open+0x5c5/0x1380 [ 401.068909][T12142] snd_pcm_oss_open+0x715/0x1380 [ 401.068944][T12142] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 401.068977][T12142] ? __pfx_default_wake_function+0x10/0x10 [ 401.069007][T12142] ? __lock_acquire+0x5c0/0x1f40 [ 401.069040][T12142] ? do_raw_spin_lock+0x128/0x260 [ 401.069073][T12142] ? soundcore_open+0x231/0x5a0 [ 401.069102][T12142] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 401.069131][T12142] soundcore_open+0x2e3/0x5a0 [ 401.069160][T12142] ? __pfx_soundcore_open+0x10/0x10 [ 401.069187][T12142] chrdev_open+0x234/0x6a0 [ 401.069211][T12142] ? __pfx_chrdev_open+0x10/0x10 [ 401.069260][T12142] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 401.069293][T12142] do_dentry_open+0x6ab/0x14d0 [ 401.069316][T12142] ? __pfx_chrdev_open+0x10/0x10 [ 401.069346][T12142] vfs_open+0x82/0x3f0 [ 401.069376][T12142] path_openat+0x19fa/0x2440 [ 401.069404][T12142] ? __pfx_path_openat+0x10/0x10 [ 401.069436][T12142] do_file_open+0x20e/0x430 [ 401.069461][T12142] ? __pfx_do_file_open+0x10/0x10 [ 401.069504][T12142] ? _raw_spin_unlock+0x28/0x50 [ 401.069530][T12142] ? alloc_fd+0x471/0x7a0 [ 401.069560][T12142] do_sys_openat2+0x10f/0x1e0 [ 401.069588][T12142] ? __pfx_do_sys_openat2+0x10/0x10 [ 401.069624][T12142] __ia32_compat_sys_openat+0x12d/0x210 [ 401.069654][T12142] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 401.069693][T12142] __do_fast_syscall_32+0x13a/0x8b0 [ 401.069727][T12142] do_fast_syscall_32+0x32/0x70 [ 401.069753][T12142] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 401.069777][T12142] RIP: 0023:0xf707efec [ 401.069807][T12142] Code: Unable to access opcode bytes at 0xf707efc2. [ 401.069817][T12142] RSP: 002b:00000000f544c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 401.069836][T12142] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 401.069851][T12142] RDX: 0000000000020080 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.069865][T12142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.069878][T12142] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 401.069891][T12142] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 401.069919][T12142] [ 402.518249][T12149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1751'. [ 402.611851][ T5547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.611876][ T5547] syzkaller0: tun_net_xmit 76 [ 402.612553][ T5547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.612571][ T5547] syzkaller0: tun_net_xmit 48 [ 402.649890][ T2224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.649915][ T2224] syzkaller0: tun_net_xmit 76 [ 402.962020][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.962051][ T73] syzkaller0: tun_net_xmit 76 [ 403.376699][T12150] syzkaller0: create flow: hash 2775670339 index 2 [ 403.500660][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.500685][ T73] syzkaller0: tun_net_xmit 76 [ 403.751568][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.751593][ T50] syzkaller0: tun_net_xmit 76 [ 404.190068][T12149] syzkaller0: delete flow: hash 2775670339 index 2 [ 404.624931][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.624957][ T50] syzkaller0: tun_net_xmit 76 [ 404.810603][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.680295][T12181] netlink: 'syz.3.1758': attribute type 10 has an invalid length. [ 406.687225][T12181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.920170][ T50] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 407.067078][T12188] syzkaller0: entered promiscuous mode [ 407.067103][T12188] syzkaller0: entered allmulticast mode [ 407.109979][ T50] usb 9-1: Using ep0 maxpacket: 32 [ 407.112034][ T50] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 407.115105][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.117146][ T50] usb 9-1: config 0 descriptor?? [ 407.408099][ T50] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 407.411089][ T50] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 407.414559][ T50] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 407.414615][ T50] usb 9-1: media controller created [ 407.507544][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.664462][T12195] sctp: [Deprecated]: syz.3.1762 (pid 12195) Use of int in max_burst socket option. [ 407.664462][T12195] Use struct sctp_assoc_value instead [ 407.697007][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'. [ 407.697041][T12195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1762'. [ 407.787729][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'. [ 407.787770][T12196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1762'. [ 407.828350][ T50] az6027: usb out operation failed. (-71) [ 407.829604][ T50] az6027: usb out operation failed. (-71) [ 407.829619][ T50] stb0899_attach: Driver disabled by Kconfig [ 407.829628][ T50] az6027: no front-end attached [ 407.829628][ T50] [ 407.852439][ T50] az6027: usb out operation failed. (-71) [ 407.852455][ T50] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 407.889068][ T50] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input21 [ 407.928436][ T50] dvb-usb: schedule remote query interval to 400 msecs. [ 407.928457][ T50] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 407.965221][ T50] usb 9-1: USB disconnect, device number 25 [ 408.724129][ T5746] Bluetooth: hci2: unexpected event for opcode 0x0404 [ 408.917240][ T50] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 409.609082][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1766'. [ 410.752035][T12215] overlayfs: failed to clone lowerpath [ 410.773443][T12222] netlink: 'syz.2.1771': attribute type 1 has an invalid length. [ 410.812162][T12222] bond9: entered promiscuous mode [ 410.812773][T12222] 8021q: adding VLAN 0 to HW filter on device bond9 [ 411.179090][T12217] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.883775][T12217] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.247336][ T50] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 412.435563][ T50] usb 7-1: Using ep0 maxpacket: 16 [ 412.442593][T12217] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.966801][T12217] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.310019][ T6845] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.310061][ T6845] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.467386][ T5547] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.470068][ T6845] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.684787][T12257] ------------[ cut here ]------------ [ 416.684802][T12257] current->flags & PF_MEMALLOC [ 416.684809][T12257] WARNING: mm/page_alloc.c:4816 at __alloc_frozen_pages_noprof+0x1eac/0x3300, CPU#2: syz.3.1777/12257 [ 416.692906][T12257] Modules linked in: [ 416.694769][T12257] CPU: 2 UID: 0 PID: 12257 Comm: syz.3.1777 Not tainted syzkaller #0 PREEMPT(full) [ 416.701872][T12257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 416.711032][T12257] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 416.716490][T12257] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 56 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 416.728557][T12257] RSP: 0000:ffffc90002d165e8 EFLAGS: 00010202 [ 416.733302][T12257] RAX: ffff888013f30000 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 416.742225][T12257] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 416.754571][T12257] RBP: ffff888013f3002c R08: 0000000000008000 R09: 0000000000000001 [ 416.757129][T12257] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40 [ 416.774235][T12257] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff920005a2cd7 [ 416.777781][T12257] FS: 0000000000000000(0000) GS:ffff888096b60000(0063) knlGS:0000000057e74480 [ 416.782319][T12257] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 416.785365][T12257] CR2: 00007f925005f329 CR3: 000000005f84b000 CR4: 0000000000352ef0 [ 416.795662][T12257] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 416.799547][T12257] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 416.806673][T12257] Call Trace: [ 416.815358][T12257] [ 416.816699][T12257] ? __lock_acquire+0x5c0/0x1f40 [ 416.818814][T12257] ? __lock_acquire+0x5c0/0x1f40 [ 416.820996][T12257] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 416.823721][T12257] ? __lock_acquire+0x5c0/0x1f40 [ 416.836057][T12257] ? __lock_acquire+0x5c0/0x1f40 [ 416.838096][T12257] ? __lock_acquire+0x5c0/0x1f40 [ 416.845541][T12257] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 416.848402][T12257] ? policy_nodemask+0xed/0x4f0 [ 416.853612][T12257] alloc_pages_mpol+0x201/0x550 [ 416.855795][T12257] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 416.858075][T12257] ? filemap_get_entry+0x22d/0x450 [ 416.860949][T12257] ? filemap_get_entry+0x22d/0x450 [ 416.863703][T12257] folio_alloc_noprof+0x22/0x250 [ 416.866383][T12257] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 416.870384][T12257] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 416.873689][T12257] ? lock_acquire+0x1d1/0x380 [ 416.875785][T12257] ? ext4_get_group_info+0x146/0x480 [ 416.878082][T12257] ? find_held_lock+0x2b/0x80 [ 416.893639][T12257] __filemap_get_folio_mpol+0x653/0x1320 [ 416.900048][T12257] ext4_mb_load_buddy_gfp+0x70d/0x1b20 [ 416.904578][T12257] ext4_discard_preallocations+0x584/0x10c0 [ 416.907239][T12257] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 416.920158][T12257] ? __pfx_xa_destroy+0x10/0x10 [ 416.922673][T12257] ? inode_wait_for_writeback+0x171/0x390 [ 416.925474][T12257] ext4_clear_inode+0x6e/0x280 [ 416.941767][T12257] ext4_evict_inode+0x1de/0x17d0 [ 416.944317][T12257] ? evict+0x37e/0xad0 [ 416.946145][T12257] ? __pfx_ext4_evict_inode+0x10/0x10 [ 416.954777][T12257] evict+0x3c2/0xad0 [ 416.956647][T12257] ? _raw_spin_unlock+0x28/0x50 [ 416.966789][T12257] ? __list_lru_walk_one+0x26d/0x550 [ 416.969164][T12257] ? __pfx_evict+0x10/0x10 [ 416.971144][T12257] ? __pfx___might_resched+0x10/0x10 [ 416.988858][T12257] dispose_list+0x117/0x1e0 [ 416.991142][T12257] prune_icache_sb+0xea/0x150 [ 416.992988][T12257] ? list_lru_count_one+0x147/0x320 [ 416.995339][T12257] ? __pfx_prune_icache_sb+0x10/0x10 [ 416.998468][T12257] super_cache_scan+0x3ac/0x5c0 [ 417.005092][T12257] do_shrink_slab+0x416/0x1200 [ 417.007650][T12257] shrink_slab+0xa82/0x12e0 [ 417.009702][T12257] ? shrink_slab+0x677/0x12e0 [ 417.026184][T12257] ? __pfx_shrink_slab+0x10/0x10 [ 417.028321][T12257] ? lock_acquire+0x1d1/0x380 [ 417.039820][T12257] shrink_one+0x398/0x850 [ 417.041957][T12257] ? shrink_node+0x2b00/0x4320 [ 417.044200][T12257] shrink_node+0x2b20/0x4320 [ 417.046043][T12257] ? __queue_work+0x4d6/0x1370 [ 417.047876][T12257] ? shrink_node+0x286e/0x4320 [ 417.049715][T12257] ? __pfx_shrink_node+0x10/0x10 [ 417.051718][T12257] ? queue_work_on+0x141/0x1e0 [ 417.053722][T12257] ? do_try_to_free_pages+0x33e/0x16d0 [ 417.079824][T12257] do_try_to_free_pages+0x33e/0x16d0 [ 417.097216][T12257] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 417.108328][T12257] ? __lock_acquire+0x5c0/0x1f40 [ 417.125620][T12257] try_to_free_pages+0x2a0/0x740 [ 417.130867][T12257] ? __pfx_try_to_free_pages+0x10/0x10 [ 417.135946][T12257] ? find_held_lock+0x2b/0x80 [ 417.138361][T12257] ? fs_reclaim_acquire+0x70/0x100 [ 417.148933][T12257] ? fs_reclaim_acquire+0x70/0x100 [ 417.153401][T12257] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 417.156671][T12257] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 417.166325][T12257] ? __blk_flush_plug+0x2f3/0x4b0 [ 417.169091][T12257] ? __pfx_ext4_mpage_readpages.isra.0+0x10/0x10 [ 417.172014][T12257] ? __pfx___blk_flush_plug+0x10/0x10 [ 417.184858][T12257] ? __lock_acquire+0x5c0/0x1f40 [ 417.187580][T12257] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 417.191452][T12257] ? policy_nodemask+0xed/0x4f0 [ 417.199936][T12257] alloc_pages_mpol+0x201/0x550 [ 417.202046][T12257] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 417.205545][T12257] ? filemap_get_entry+0x22d/0x450 [ 417.207592][T12257] ? filemap_get_entry+0x22d/0x450 [ 417.210771][T12257] folio_alloc_noprof+0x22/0x250 [ 417.214506][T12257] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 417.218662][T12257] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 417.232423][T12257] __filemap_get_folio_mpol+0x653/0x1320 [ 417.236890][T12257] filemap_fault+0x879/0x3130 [ 417.252863][T12257] ? __pfx_filemap_fault+0x10/0x10 [ 417.255203][T12257] ? find_held_lock+0x2b/0x80 [ 417.257587][T12257] ? __pfx_filemap_map_pages+0x10/0x10 [ 417.276868][T12257] __do_fault+0x10b/0x440 [ 417.279395][T12257] do_fault+0xb3f/0x1830 [ 417.281682][T12257] ? __pfx_do_fault+0x10/0x10 [ 417.286067][T12257] ? rcu_read_unlock+0x2d/0xb0 [ 417.289307][T12257] ? rcu_read_unlock+0x2d/0xb0 [ 417.292528][T12257] ? __pte_offset_map+0x179/0x310 [ 417.295789][T12257] __handle_mm_fault+0x150b/0x2f60 [ 417.299162][T12257] ? lock_vma_under_rcu+0x11d/0x590 [ 417.327845][T12257] ? __pfx___handle_mm_fault+0x10/0x10 [ 417.330732][T12257] ? lock_vma_under_rcu+0x17c/0x590 [ 417.332908][T12257] handle_mm_fault+0x363/0xa20 [ 417.335007][T12257] do_user_addr_fault+0x59c/0x12f0 [ 417.337176][T12257] exc_page_fault+0x6f/0xd0 [ 417.348070][T12257] asm_exc_page_fault+0x26/0x30 [ 417.350819][T12257] RIP: 0023:0xf70cf465 [ 417.352868][T12257] Code: Unable to access opcode bytes at 0xf70cf43b. [ 417.377770][T12257] RSP: 002b:00000000fff3d1b0 EFLAGS: 00010246 [ 417.390602][T12257] RAX: 000000000c2f4d75 RBX: 00000000ffffffff RCX: 0000000000000000 [ 417.398865][T12257] RDX: 0000000000000001 RSI: 00000000000005e4 RDI: 00000000f7485080 [ 417.410342][T12257] RBP: 00000000f7fb5610 R08: 0000000000000000 R09: 0000000000000000 [ 417.424215][T12257] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 417.434717][T12257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.445474][T12257] [ 417.446856][T12257] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 417.450069][T12257] CPU: 2 UID: 0 PID: 12257 Comm: syz.3.1777 Not tainted syzkaller #0 PREEMPT(full) [ 417.491167][T12257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 417.500793][T12257] Call Trace: [ 417.502096][T12257] [ 417.503303][T12257] dump_stack_lvl+0x100/0x190 [ 417.512125][T12257] vpanic+0x553/0x970 [ 417.513568][T12257] ? __pfx_vpanic+0x10/0x10 [ 417.528857][T12257] panic+0xd1/0xe0 [ 417.530436][T12257] ? __pfx_panic+0x10/0x10 [ 417.532341][T12257] check_panic_on_warn.cold+0x19/0x34 [ 417.534414][T12257] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 417.536907][T12257] __warn.cold+0x191/0x318 [ 417.538829][T12257] __report_bug+0x30f/0x440 [ 417.548811][T12257] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 417.560628][T12257] ? __pfx___report_bug+0x10/0x10 [ 417.562409][T12257] ? __zone_watermark_ok+0x281/0x500 [ 417.564508][T12257] ? __lock_acquire+0x5c0/0x1f40 [ 417.566542][T12257] ? get_page_from_freelist+0x344/0x35d0 [ 417.591558][T12257] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 417.594241][T12257] report_bug+0xb3/0x220 [ 417.596349][T12257] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 417.608647][T12257] handle_bug+0x16a/0x2a0 [ 417.610271][T12257] exc_invalid_op+0x17/0x50 [ 417.623786][T12257] asm_exc_invalid_op+0x1a/0x20 [ 417.625874][T12257] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 417.636243][T12257] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 56 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 417.652983][T12257] RSP: 0000:ffffc90002d165e8 EFLAGS: 00010202 [ 417.658842][T12257] RAX: ffff888013f30000 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 417.673468][T12257] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 417.676021][T12257] RBP: ffff888013f3002c R08: 0000000000008000 R09: 0000000000000001 [ 417.678487][T12257] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40 [ 417.682551][T12257] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff920005a2cd7 [ 417.695047][T12257] ? __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 417.698151][T12257] ? __lock_acquire+0x5c0/0x1f40 [ 417.700855][T12257] ? __lock_acquire+0x5c0/0x1f40 [ 417.703164][T12257] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 417.708031][T12257] ? __lock_acquire+0x5c0/0x1f40 [ 417.710093][T12257] ? __lock_acquire+0x5c0/0x1f40 [ 417.711971][T12257] ? __lock_acquire+0x5c0/0x1f40 [ 417.713809][T12257] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 417.736379][T12257] ? policy_nodemask+0xed/0x4f0 [ 417.739420][T12257] alloc_pages_mpol+0x201/0x550 [ 417.741396][T12257] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 417.743776][T12257] ? filemap_get_entry+0x22d/0x450 [ 417.746052][T12257] ? filemap_get_entry+0x22d/0x450 [ 417.748303][T12257] folio_alloc_noprof+0x22/0x250 [ 417.765255][T12257] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 417.768902][T12257] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 417.772829][T12257] ? lock_acquire+0x1d1/0x380 [ 417.776169][T12257] ? ext4_get_group_info+0x146/0x480 [ 417.778265][T12257] ? find_held_lock+0x2b/0x80 [ 417.780556][T12257] __filemap_get_folio_mpol+0x653/0x1320 [ 417.794213][T12257] ext4_mb_load_buddy_gfp+0x70d/0x1b20 [ 417.796328][T12257] ext4_discard_preallocations+0x584/0x10c0 [ 417.798605][T12257] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 417.800995][T12257] ? __pfx_xa_destroy+0x10/0x10 [ 417.802997][T12257] ? inode_wait_for_writeback+0x171/0x390 [ 417.805641][T12257] ext4_clear_inode+0x6e/0x280 [ 417.807801][T12257] ext4_evict_inode+0x1de/0x17d0 [ 417.810135][T12257] ? evict+0x37e/0xad0 [ 417.814209][T12257] ? __pfx_ext4_evict_inode+0x10/0x10 [ 417.816433][T12257] evict+0x3c2/0xad0 [ 417.818320][T12257] ? _raw_spin_unlock+0x28/0x50 [ 417.820472][T12257] ? __list_lru_walk_one+0x26d/0x550 [ 417.822933][T12257] ? __pfx_evict+0x10/0x10 [ 417.827349][T12257] ? __pfx___might_resched+0x10/0x10 [ 417.829456][T12257] dispose_list+0x117/0x1e0 [ 417.830951][T12257] prune_icache_sb+0xea/0x150 [ 417.835127][T12257] ? list_lru_count_one+0x147/0x320 [ 417.838216][T12257] ? __pfx_prune_icache_sb+0x10/0x10 [ 417.841276][T12257] super_cache_scan+0x3ac/0x5c0 [ 417.847275][T12257] do_shrink_slab+0x416/0x1200 [ 417.849647][T12257] shrink_slab+0xa82/0x12e0 [ 417.851408][T12257] ? shrink_slab+0x677/0x12e0 [ 417.853347][T12257] ? __pfx_shrink_slab+0x10/0x10 [ 417.855502][T12257] ? lock_acquire+0x1d1/0x380 [ 417.857890][T12257] shrink_one+0x398/0x850 [ 417.860415][T12257] ? shrink_node+0x2b00/0x4320 [ 417.863094][T12257] shrink_node+0x2b20/0x4320 [ 417.865247][T12257] ? __queue_work+0x4d6/0x1370 [ 417.867555][T12257] ? shrink_node+0x286e/0x4320 [ 417.870385][T12257] ? __pfx_shrink_node+0x10/0x10 [ 417.873677][T12257] ? queue_work_on+0x141/0x1e0 [ 417.876598][T12257] ? do_try_to_free_pages+0x33e/0x16d0 [ 417.879360][T12257] do_try_to_free_pages+0x33e/0x16d0 [ 417.883156][T12257] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 417.886111][T12257] ? __lock_acquire+0x5c0/0x1f40 [ 417.887980][T12257] try_to_free_pages+0x2a0/0x740 [ 417.889574][T12257] ? __pfx_try_to_free_pages+0x10/0x10 [ 417.891516][T12257] ? find_held_lock+0x2b/0x80 [ 417.893534][T12257] ? fs_reclaim_acquire+0x70/0x100 [ 417.897786][T12257] ? fs_reclaim_acquire+0x70/0x100 [ 417.901266][T12257] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 417.904641][T12257] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 417.909580][T12257] ? __blk_flush_plug+0x2f3/0x4b0 [ 417.913808][T12257] ? __pfx_ext4_mpage_readpages.isra.0+0x10/0x10 [ 417.919105][T12257] ? __pfx___blk_flush_plug+0x10/0x10 [ 417.921397][T12257] ? __lock_acquire+0x5c0/0x1f40 [ 417.923609][T12257] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 417.927513][T12257] ? policy_nodemask+0xed/0x4f0 [ 417.930035][T12257] alloc_pages_mpol+0x201/0x550 [ 417.932983][T12257] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 417.935477][T12257] ? filemap_get_entry+0x22d/0x450 [ 417.937452][T12257] ? filemap_get_entry+0x22d/0x450 [ 417.939487][T12257] folio_alloc_noprof+0x22/0x250 [ 417.942164][T12257] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 417.945260][T12257] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 417.949265][T12257] __filemap_get_folio_mpol+0x653/0x1320 [ 417.952220][T12257] filemap_fault+0x879/0x3130 [ 417.961382][T12257] ? __pfx_filemap_fault+0x10/0x10 [ 417.964050][T12257] ? find_held_lock+0x2b/0x80 [ 417.966459][T12257] ? __pfx_filemap_map_pages+0x10/0x10 [ 417.969385][T12257] __do_fault+0x10b/0x440 [ 417.972054][T12257] do_fault+0xb3f/0x1830 [ 417.974305][T12257] ? __pfx_do_fault+0x10/0x10 [ 417.977292][T12257] ? rcu_read_unlock+0x2d/0xb0 [ 417.982271][T12257] ? rcu_read_unlock+0x2d/0xb0 [ 417.987338][T12257] ? __pte_offset_map+0x179/0x310 [ 417.992083][T12257] __handle_mm_fault+0x150b/0x2f60 [ 417.994828][T12257] ? lock_vma_under_rcu+0x11d/0x590 [ 417.997440][T12257] ? __pfx___handle_mm_fault+0x10/0x10 [ 417.999987][T12257] ? lock_vma_under_rcu+0x17c/0x590 [ 418.002325][T12257] handle_mm_fault+0x363/0xa20 [ 418.004512][T12257] do_user_addr_fault+0x59c/0x12f0 [ 418.007856][T12257] exc_page_fault+0x6f/0xd0 [ 418.010371][T12257] asm_exc_page_fault+0x26/0x30 [ 418.012797][T12257] RIP: 0023:0xf70cf465 [ 418.015531][T12257] Code: Unable to access opcode bytes at 0xf70cf43b. [ 418.020397][T12257] RSP: 002b:00000000fff3d1b0 EFLAGS: 00010246 [ 418.024442][T12257] RAX: 000000000c2f4d75 RBX: 00000000ffffffff RCX: 0000000000000000 [ 418.027647][T12257] RDX: 0000000000000001 RSI: 00000000000005e4 RDI: 00000000f7485080 [ 418.030569][T12257] RBP: 00000000f7fb5610 R08: 0000000000000000 R09: 0000000000000000 [ 418.033668][T12257] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 418.038395][T12257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 418.042766][T12257] [ 418.046053][T12257] Kernel Offset: disabled [ 418.049040][T12257] Rebooting in 86400 seconds..