last executing test programs: 3.738239796s ago: executing program 0 (id=481): prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000d80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000e80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000ec0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000005080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x318145a8, 0x0, 0xfffe, 0x3, 0xfffffff8, 0x0, 0x0, 0x2, 0x101}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000005100)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04f74120"], 0x7) io_uring_setup(0x5e22, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f000000d880)=[{{0x0, 0x0, 0x0}, 0xfffffff7}], 0x1, 0x2142, 0x0) 2.47927879s ago: executing program 2 (id=500): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) r5 = dup(r3) inotify_rm_watch(r5, r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000003c0)={0x84, @multicast2, 0x4e31, 0x3, 'wrr\x00', 0x1, 0x9, 0x4030}, 0x2c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000440)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x305c00, 0x142) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) 2.317779593s ago: executing program 0 (id=502): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x6, @loopback, 0xba}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0xd}}}], 0x30}}], 0x1, 0x0) 2.198901407s ago: executing program 0 (id=503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x48, r1, 0x5, 0x0, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x48}}, 0x0) 2.15084634s ago: executing program 0 (id=504): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) r5 = dup(r3) inotify_rm_watch(r5, r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000003c0)={0x84, @multicast2, 0x4e31, 0x3, 'wrr\x00', 0x1, 0x9, 0x4030}, 0x2c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000440)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[], 0x8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x20000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x305c00, 0x142) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) 1.594240045s ago: executing program 3 (id=505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a00)={0x44, r1, 0x1, 0x70bd2e, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1c00}, @broadcast, @device_a, @initial, {0x6, 0x1}}, @val={0x0, 0x8, @random="99836cbcf3ae7d21"}, @void, @void, @void, @void}}]}, 0x44}}, 0x28008004) 1.594100005s ago: executing program 3 (id=506): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000080)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002300)=""/217, 0xd9}, {&(0x7f0000002400)=""/130, 0x82}, {&(0x7f00000024c0)=""/4105, 0x1009}, {&(0x7f0000003500)=""/250, 0xfa}, {&(0x7f0000003600)=""/296, 0x128}, {&(0x7f0000003740)=""/276, 0x114}, {&(0x7f0000003880)=""/141, 0x8d}], 0x7}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x7fe}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4000c}, {{0x0, 0x0, 0x0}, 0x4000000}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x4}], 0x8, 0x2000, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) 1.550327808s ago: executing program 2 (id=508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000005c0)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000640), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) shutdown(r0, 0x1) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x442d, 0x80000, 0x0, 0x60055}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x490}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 1.545390356s ago: executing program 3 (id=509): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setgroups(0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0]) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.470961869s ago: executing program 2 (id=510): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000280)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000380)=[@acquire]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f00000006c0)=[@free_buffer={0x40086303, r4}]}) 1.470720321s ago: executing program 2 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000d80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000e80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000ec0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000005080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x318145a8, 0x0, 0xfffe, 0x3, 0xfffffff8, 0x0, 0x0, 0x2, 0x101}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000005100)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04f74120"], 0x7) io_uring_setup(0x5e22, 0x0) getpid() 1.453236361s ago: executing program 1 (id=512): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890c, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') 1.368367609s ago: executing program 1 (id=513): mknodat$md(0xffffffffffffff9c, &(0x7f0000000040)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x0, 0x0) ioctl$RESTART_ARRAY_RW(r0, 0x934, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x64) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000140)={0x1, 0x1, 0x0, 0x10007, 0xfffffffffffffff5, 0x35a, 0x0, 0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000}) 1.269036659s ago: executing program 1 (id=514): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) 1.268836198s ago: executing program 1 (id=515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a00)={0x44, r1, 0x1, 0x70bd2e, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1c00}, @broadcast, @device_a, @initial, {0x6, 0x1}}, @val={0x0, 0x8, @random="99836cbcf3ae7d21"}, @void, @void, @void, @void}}]}, 0x44}}, 0x28008004) 1.268286779s ago: executing program 0 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) r5 = dup(r3) inotify_rm_watch(r5, r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000003c0)={0x84, @multicast2, 0x4e31, 0x3, 'wrr\x00', 0x1, 0x9, 0x4030}, 0x2c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000440)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x305c00, 0x142) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) 1.266351522s ago: executing program 1 (id=517): syz_open_dev$usbmon(0x0, 0xcef, 0x20200) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, 0x0, 0x15) socket$inet6(0xa, 0x800000000000002, 0x3) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8001, 0x80000008e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x2, &(0x7f0000000540)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000580)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSRS485(r5, 0x542f, 0x0) r6 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r6, &(0x7f0000000640), 0x40000000000017d, 0x888) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, &(0x7f0000001cc0)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "2fc7eecad58f368bf3ba45a6f7874bf0f0a2e2d039d23b33645c7a714b200d1ec427e16f2d87c3a7f0a258b1856e10dbfadd1f9f5b294c68af413bb746e6b0803177028065618aa080c2ca8efe18fbb6c85459e9ff5c1aa9c17498a05220b09c2d859832bf5ae846009f6a415023b9a7110bda56f514841bf04e54bf592d28107037e86729ff5789dd40d9180160cf72a92609650dc97d806d75465c3cbabb3e8f59afcd807086dc9a87048f229a1c8b183c2077b18922f8dcade6cbf835b715887e9a20c69f14468fb321e017c8a2361f5300617d2ff15e5e2df6b8fa425461dc9c997020beed571b01b0ae899a7a21fe7f9dce8b2ff0374cde255fe2cd3444fa236242d0a976de3ceed2abb0bcb9e4580db4bf248fa20f27dc7c9a953b420f032e6fe0de2a657b7903f0a3d4d67908255b1ac3274313a683ad8a328816336d20dbfdc9f262073dade576891220dd05e0cb6e97bb433637adb6f42c3a040a0089d9a86b42dffeba614460c184bd405cf3749fad5a47609eeb5c48f0222ea459597a0fa855c9d6d789ed17235c6cbf62757d54c99a03b777b7af6058a33b32aa49973625747e0ff1d3c4898a1ea7e68807d9be2b9ca09de22790441964131b1e6dbf633f06c23ddb02736a741396cb1c3dbe49eabdad6f662ee642be86560e24bf2578bc93119d19b446587a8455b445e1cbcb86848331888a8a8adb0836628a73c9c41f8501ae67caa0165fca251674fcfd5f78415a4497519f0d4a79ba166a55721c4db05be7155ae7bca92f4fff5cdcf2d581d2da972ee240355984210e5927904ee74bd15da96d23e0b5bb07ce1adf2683032e8ae4dd9dd6f5bd841ef30ccdce954426f1cf29f2f35decb485f4faa36caae23e7d136317dbb6ace192dc0484d5e3cc341dee5041430dcd5f320a9f3679196bd2a2348619c4a55e090cecf0da78fdba2b25a3373a813d5e719ef2fbfea38035828e28d1666b64dbabce44140e9f0c7e8685e69d8192d1953c1dba2c2a471658538ade2e295732c4a23ca63b54252673ea15374da608ff431e56c9b74bc88b858511910a8ff6a294354093449e90994cf70a60cb108e19ad7625c27bc7934076a8a8fa8a14b06b0e94813a9ff3961e251856a0d34b728025121cf045be55d3997ca1ba4643509fb7eb84b1dbf97663f63fbf32b32f92eebff4ff420cd8c45fda163c09aa879283c282ef4bc93d416854ada56921cc6f82a67a3d024c1a828eb8d4c901f6066f8df327f694f828124d880da4f98c66087f8a825b9b01609f980a0f48c471fdcb7696e493a02a7b34420ccddae0e26b8f4db77ee712ccbc480fb8fe625d51ee2ead77637b9f7bd4a70fc21581498915c72ce999eb2a3888ad4c66c5e623d2f9c983f4c3e17714a63af06c222a62671b407a8f30619f1cb8a9efc177a18ceefc0760a27f5001124e81eeff04950364cf1881c03c1cc99b1e5dbc36ec94ed875c54a87dc18143303b2ad34738e683fdfe7e257fa5609e785e3c81dcd387bccfba8d31077b2140b06a361167ab1abb6e8c9b6e7b8918c992a7c4fce8797048bc3eba6ef7f65789b6d59ce4e4dcc5a3d44b9ef24de8996347c79cbaaaaef13dbac1dab9fb6090a757be36cf3e15bcde5bddc318bd42265371ebfe941f63a5d2dbcd9c6103ab91b5c292ae86e4dc6df13194dd81319db2ad7f51fe377196b2b87db9614cd1d572f3df9b518d36aacd8c4f454c1a61fd587642e87e8a4d4029e46064cc730e7b75efae0e6b798184b33365160696e327ce80ad8ec0a5c20e57b07b2cc19f849b1c527994b6631ae61bd9c6703966d141714bffb6cfb7708e2c6669cf33f42c8e8130d73a2bdb42bbd3316e1a2deae59b7bbe6e77518326d11714ac543143c8bc4c9cf39d84b06bf10ad463d7b9d14f5d44d98c78f5bc96793c254a652e300065a0e568234110f4f3d93b584b5767e41cb9d2514a16138d8dd650b885b6ac87ce233957dee5c1d2004fc5882d41ffcc1751d565ad92d04ce0cf0221ac7d7a0441f4024ce74ff4d3df9559026ebb5b5602ee9e8d87f189b8f6e61879c417a00321e87ceac1b952e51700d384ed3b07c70fd8be0d61290b6100abc393bfd33f425892509e55350797f139b64b68e357f66a1776504ea67689ca482534308c9c7b76c7f9fbe1d1cc739dee391c0b7a781d6bade90ec2a46f617d436cc7f51eb1c94de092ccf1d7b57c31fc1c8e18b9bab9858792a129dfa62b379d22aec6129065a867bda550337e30edcfc0732a5b69559c8d45270d7df9d06b385c51a05e57280d66f5c02c7ca1f463e6ef6d1d2e3b04c6df77fd88e06197acf4d5287660e90d7b1d5d4b7410d44e36aa3652e86d9b97935fc19459bd1e7f155e497bee58013f9cbef97b669b3d8fbd77a286a50b86aa11e4376e44275297bcdcb252ad8ca4742a6cd66563c4ba6318b765899d853043877b6400d654ba955fa6376857b6307d443168211dde06a156d8908269ab033c9de9546b3cc41583e7cae7038720d909fed58b52f7bc7aba12b1be3a2e23474af919426326556cf37d584c4e905f8d84604fdb192f0993b213107fae21c323d69f3113d2f5d6371a49a40b98030868c824ff0916556044bc32ce80497c46c01e254e2accfd01aeabf18c545b907cd5fd0b00a82c42e644690ad1099dc3ec5e0df8c5d783ec93e6712857137eee4d06762fa12233d1ba4e7bc597d970a434ce615ffe432f6289bd297f7973f29e8460391c44cab29f2e21f639e7aea6c0c7e57a35585573b88ce6a2beed7807278b73a9eb21d82a477f7f9eef24c1cf0b7fddee8b3dfa633cb37c3f1ac53f34acd6dc0e29494d644f9bdce8d65e734fa52d1cdd0f147d48f02000b31fd0dcd2766cf8ea8b92bd340195c6833e4320eaf125ad61fa8772ac380f363fd2b3b5df23aa0e08034cfe5963fada592e851f5b274e6defae6cb1dbc5f29c52855352d8417262780ba7c8040cac21a0fda09a76af7a58b66f9a89d35f7a957548cf49f7117542a2f0f2c1c8bb371eba256aaac009798a97a27a62256fafad3988bb9b577eb00c06d28a91c85aa20f176e44e52b37a8068bfec1434c1277e68619e8459f83359976c81ca49462e1b9abf83fed9d4e08d9fdc6626bd73099ff8c2e95384e0517eff3e02a1882ef5a804989ad5a9536628f3989631f610ba9172c92c44c372ff48d590be9896e741001b3ea511727a1476d706debdea7216e1bf2461fda61a7bc6db99c098fe4f32eafbe2ac15782ddfd1609cec300015b542c835ff195cd779699d8ced1edd571f3734ef6373c526553ee9684674cd5ae1e8f390065ed761257cbb120168dcebacc94f22a15d6bc8444afff61601305c9212f086ae5a322968983568bfaed808fd935a8260709781a58bf3cbc3256e81d272a9c1271b93a1f97feebe77e94912e0361c149076abd1aa186ac38e65d879e92bc58bc7adde9339f712b8a07d798ad573318559a31c1e64354bfc5f3e9a195118cab384d9b7d192305e5fe6e8eaebd7403095e3833fb3a6425e7b8b7ae0515d5cba8a19c2b49e33cd9bedbac96f01c5a24ddc36b35f16cfd55ec584f18ecf7313a812d5d44b6ac02808ab4389e7ed6426454d9f4c69a288d36a211f27c4770cad16daba3c97e0d51a7012ba7ee4881daf21ca720c0a14d54852516c8342989ed328d13366be829416218e0d2cc9c708a06669873b4a7a32e35dbc59d5f7eeebb7fb3c307e84c287c2e3a921e94149a90a56e4c8bcf954844eb7edefea72690c518075cdce72c222961c388ba8cb9e2f881582131cce0898c86ab2f7c1a925301eb6a33bf33baf957f18d648b55e0c613db371343cc7ce89f91423629e644b286bba4d8b4cbb116e30da5f7a4bba8606093fe5d6bad8bc5f98fb1ac476bf8724a8008a725ed3aed86c763f2eac7d77f1ef9a96702e13ec5080bb82606741e08fde37aceb1dd32c11afa92be85ff46ec2010ce17d5cf92e91243ccb1070000002a746ca1f1135b1b0638ffe19c8b31644a08f9f1990685e0f458f096daae910e9f36a83a8ba01dde2b5d0d3097b1cf03be7aee0a8c7c4c8672d45c6310e7d2e5558143ad9e79a9751b8ac54a3e86fdfd9320ef69c7130460e259462be21db94fcbd3181903130f3f982f4c8011bfe62bd5903ad8713281be0fa8de38553ea6c3e566152518bd80fbeb5863f0de7c7cf26606b48b63c89d9f9c798816e7e1e1dbb3946a1048ebf383f117ac9bf565a277086fd9cc0250dd22cf1d2c3cf58fa227f4f2c201be2df79230b6a95333f3a3ded0d11f9b647da9b4cb70fa02631552df57b7a6009b1b36d8f7c9f2fc7ac53912f29e79fdb57acecd431adf2dca1c0e7d31d7ff38ce7b3089416d9ab4f7474f1b68141228d4350ad7541676caf115e6c4eeecc706e0268c2eda740cce7a22e1090fb0216608a13c50316ee056414d0dfce99ab3f9c4619df20d7e0c254c3e9a9717f140b1a4ecdba1ca5ce3bb252083a69bb107338184f55d064c912745aa81588de2299fb9f77201c5ded7cbf572b64c0d6d300344226355d1a4cb8088e43780e01e190e9b877ba14431d115296e31c2cc0266c0df82da2530ac1e094cdfee42fcfdb8ee5d03c251d24d5b0fefafa7b9c2a2e73a814e768d57a5429372dce6266dc547a4c93a05dece1e7601a658d4855843db66ba8ecae9cd1703d66a3aff1be2be77c0ce96772d570c73f88d028eb8716dcb5e49792b39f1a5a4275a4f83d8ae2ea8883bbfaa42050392da86d7a4a22835553cd2fdcd0cca630ad003c4a15ae0b7a7cee875b5a08f0ef70d86187054260001c9698419bf1569b1802439cd3fe320d9272b853e7b34a322a5fbade5cd3ad0e1c4b07d111981494215d3b82c2fe8a7697052a3b7b1ef3fb22d5e33e57c8d422b5e3dc9cf1a5df5401559c56610f44a4e409b12aa82bf661c17a2bb76e469583531f782b55da4eabbb68cb39bf32844398fe0ffb79e4c95e3e3c3ed3e9ac304cf1980b7cde8fcf76966cca196748e4ad7a02debd6ccc4a3e9b8adaa7dc668a76cbd137b2e6fbc673900000100000000009bf5ed16d5f5818535802fa7627a7d352f4216ba3f84481394c0500b7aea67e838d5dd0422eeb940ad42546e1f3c2cd85c53abbaada51b5571323d7ea53d436c2d349befca87909c1dc2a23d2db53ecc272b80896b65fa0cad8854e6b36e052ecbe677024b9614a180fc54c20fac7ed4d16e7ba17a368f0a00a036d23ae4b19ad3d99642ff054850233b60e706a4f575e49234acc76211a5bace9b8417eb6d986dab4bc6b8b510ee0477f6b8738f00709b7f35aac1730017c0037e5c40404d145b527a29500fab1e3c00"}) 611.141495ms ago: executing program 3 (id=518): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000080)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002300)=""/217, 0xd9}, {&(0x7f0000002400)=""/130, 0x82}, {&(0x7f00000024c0)=""/4105, 0x1009}, {&(0x7f0000003500)=""/250, 0xfa}, {&(0x7f0000003600)=""/296, 0x128}, {&(0x7f0000003740)=""/276, 0x114}, {&(0x7f0000003880)=""/141, 0x8d}], 0x7}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x7fe}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4000c}, {{0x0, 0x0, 0x0}, 0x4000000}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x4}], 0x8, 0x2000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) 539.334139ms ago: executing program 3 (id=519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000005c0)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000640), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) shutdown(r0, 0x1) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x442d, 0x80000, 0x0, 0x60055}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x490}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 539.085421ms ago: executing program 3 (id=520): setns(0xc9, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x4010) r0 = socket(0x1f, 0x3, 0x1) bind(r0, 0x0, 0x0) write(r0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) nanosleep(&(0x7f0000000240)={0x0, 0x2faf080}, 0x0) r1 = socket(0x1f, 0x5, 0x8) bind(r1, 0x0, 0x0) setsockopt(r1, 0x112, 0x7, &(0x7f0000000300), 0x4) connect(r1, &(0x7f0000000340)=@generic={0x1f, "0102030405060100"}, 0xa) nanosleep(&(0x7f00000003c0)={0x0, 0x5f5e100}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc) 359.592608ms ago: executing program 1 (id=521): semget$private(0x0, 0x207, 0xa0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a80)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000c00), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000c80)=""/102345, 0xffffff61, 0x0) clock_gettime(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x100042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000440)=0x2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x89901) fchdir(r4) close(r4) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x81100) move_mount(r5, 0x0, r3, 0x0, 0x46) read(r2, 0x0, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d00000020af7740040000000100000000000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x402280, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r7, &(0x7f0000000380)}, 0x20) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r8 = semget(0x1, 0x5, 0x21) semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000500)) truncate(&(0x7f0000000180)='./file1\x00', 0x24b9) 301.239189ms ago: executing program 0 (id=522): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffff8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'sit0\x00', 0x0}) 187.826µs ago: executing program 2 (id=523): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x202408) keyctl$describe(0x6, r0, 0x0, 0x0) 0s ago: executing program 2 (id=524): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x1, 0x0, 0x0, @by_dev={r1}, [@snapshot={0x0, 0x800, 0x0, 0x78, 'snapshot-merge\x00', {@ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, 'PO', 0x20, '256', ' 1 discard_zeroes_cow'}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:8487' (ED25519) to the list of known hosts. [ 33.500912][ T5690] cgroup: Unknown subsys name 'net' [ 33.630870][ T5690] cgroup: Unknown subsys name 'cpuset' [ 33.635142][ T5690] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.806957][ T5690] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.867467][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.868988][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.869963][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 39.871843][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 39.872324][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 39.872684][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.873335][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 39.873680][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 39.878031][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.881813][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.895258][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 39.902975][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 39.903769][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 39.904574][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 39.905298][ T67] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 39.906605][ T67] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 39.906926][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 39.907719][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 39.909500][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 39.910944][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 40.168824][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 40.173426][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.173527][ T5779] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 40.176183][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.182675][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.193017][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 40.340912][ T5775] infiniband rxe0: set active [ 40.340931][ T5775] infiniband rxe0: added rxe_eth0 [ 40.346212][ T41] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.361448][ T5775] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 40.361481][ T5775] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 40.361515][ T5775] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 40.381548][ T5775] RDS/IB: rxe0: added [ 40.381758][ T5775] smc: adding ib device rxe0 with port count 1 [ 40.381843][ T5775] smc: ib device rxe0 port 1 has no pnetid [ 40.383200][ T2414] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.419051][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.522792][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.523653][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.523720][ T5779] bridge_slave_0: entered allmulticast mode [ 40.524919][ T5779] bridge_slave_0: entered promiscuous mode [ 40.530374][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.530447][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.530538][ T5779] bridge_slave_1: entered allmulticast mode [ 40.531719][ T5779] bridge_slave_1: entered promiscuous mode [ 40.568978][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.580777][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.593314][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.645119][ T5779] team0: Port device team_slave_0 added [ 40.646988][ T5779] team0: Port device team_slave_1 added [ 40.702850][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.703007][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.703047][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.703110][ T5786] bridge_slave_0: entered allmulticast mode [ 40.703779][ T5786] bridge_slave_0: entered promiscuous mode [ 40.705183][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.705223][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.705279][ T5786] bridge_slave_1: entered allmulticast mode [ 40.706002][ T5786] bridge_slave_1: entered promiscuous mode [ 40.719817][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.719834][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.719854][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.732482][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.732607][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.732706][ T5784] bridge_slave_0: entered allmulticast mode [ 40.733990][ T5784] bridge_slave_0: entered promiscuous mode [ 40.737184][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.737196][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.737266][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.740419][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.740710][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.740835][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.740940][ T5784] bridge_slave_1: entered allmulticast mode [ 40.742204][ T5784] bridge_slave_1: entered promiscuous mode [ 40.753723][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.795793][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.799600][ T5786] team0: Port device team_slave_0 added [ 40.820320][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.826839][ T5786] team0: Port device team_slave_1 added [ 40.837196][ T5779] hsr_slave_0: entered promiscuous mode [ 40.837750][ T5779] hsr_slave_1: entered promiscuous mode [ 40.859742][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.859753][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.859766][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.861424][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.861432][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.861446][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.867140][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.872216][ T5784] team0: Port device team_slave_0 added [ 40.887726][ T5784] team0: Port device team_slave_1 added [ 40.936615][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.936631][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.936650][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.953550][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.953565][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.953586][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.962810][ T5786] hsr_slave_0: entered promiscuous mode [ 40.963602][ T5786] hsr_slave_1: entered promiscuous mode [ 40.964196][ T5786] debugfs: 'hsr0' already exists in 'hsr' [ 40.964262][ T5786] Cannot create hsr debugfs directory [ 41.080088][ T5784] hsr_slave_0: entered promiscuous mode [ 41.080838][ T5784] hsr_slave_1: entered promiscuous mode [ 41.081367][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 41.081383][ T5784] Cannot create hsr debugfs directory [ 41.340545][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.351807][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.361895][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.373185][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.408845][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.415569][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.443125][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.447103][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.498002][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.504786][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.505489][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.509021][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.561104][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.566130][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.566998][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.570261][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.604798][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.604903][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.605053][ T5775] bridge_slave_0: entered allmulticast mode [ 41.605811][ T5775] bridge_slave_0: entered promiscuous mode [ 41.610088][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.611126][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.611243][ T5775] bridge_slave_1: entered allmulticast mode [ 41.612504][ T5775] bridge_slave_1: entered promiscuous mode [ 41.651878][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.659198][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.660694][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.665302][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.688189][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.691294][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.692155][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.695804][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.696498][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.699927][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.701854][ T5775] team0: Port device team_slave_0 added [ 41.712502][ T5775] team0: Port device team_slave_1 added [ 41.743486][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.743497][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.743511][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.752143][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.752153][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.752167][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.796689][ T5775] hsr_slave_0: entered promiscuous mode [ 41.797120][ T5775] hsr_slave_1: entered promiscuous mode [ 41.797429][ T5775] debugfs: 'hsr0' already exists in 'hsr' [ 41.797442][ T5775] Cannot create hsr debugfs directory [ 41.887312][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.898383][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.946793][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.950133][ T5137] Bluetooth: hci2: command tx timeout [ 41.950315][ T5137] Bluetooth: hci3: command tx timeout [ 41.950388][ T5137] Bluetooth: hci1: command tx timeout [ 41.950442][ T5137] Bluetooth: hci0: command tx timeout [ 41.951290][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.953235][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.956212][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.956628][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.960460][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.963257][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.969356][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.969843][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.975094][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.982314][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.988240][ T580] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.988366][ T580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.992945][ T580] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.992992][ T580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.003490][ T580] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.003578][ T580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.011813][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.023434][ T580] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.023509][ T580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.036726][ T580] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.036803][ T580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.052711][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.052757][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.139196][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.162482][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.169693][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.169763][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.176819][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.176888][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.474022][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.495186][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.527589][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.531795][ T5786] veth0_vlan: entered promiscuous mode [ 42.541769][ T5786] veth1_vlan: entered promiscuous mode [ 42.572343][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.600465][ T5775] veth0_vlan: entered promiscuous mode [ 42.613417][ T5779] veth0_vlan: entered promiscuous mode [ 42.623557][ T5786] veth0_macvtap: entered promiscuous mode [ 42.626607][ T5775] veth1_vlan: entered promiscuous mode [ 42.635813][ T5786] veth1_macvtap: entered promiscuous mode [ 42.645182][ T5779] veth1_vlan: entered promiscuous mode [ 42.657993][ T5784] veth0_vlan: entered promiscuous mode [ 42.675448][ T5784] veth1_vlan: entered promiscuous mode [ 42.698184][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.705425][ T5775] veth0_macvtap: entered promiscuous mode [ 42.712141][ T5775] veth1_macvtap: entered promiscuous mode [ 42.714908][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.717946][ T5779] veth0_macvtap: entered promiscuous mode [ 42.726022][ T5779] veth1_macvtap: entered promiscuous mode [ 42.745850][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.761739][ T5784] veth0_macvtap: entered promiscuous mode [ 42.768721][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.771510][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.785314][ T5784] veth1_macvtap: entered promiscuous mode [ 42.793849][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.839997][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.840018][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.844026][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.848380][ T5874] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.871142][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.888510][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.888553][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.888583][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.888612][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.888642][ T5874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.888672][ T5874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.888701][ T5874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.888731][ T5874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.893621][ T229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.893639][ T229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.967188][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.967208][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.994133][ T5786] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 43.002978][ T5786] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 43.010293][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.010310][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.014114][ T5786] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 43.015611][ T5786] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 43.027279][ T5786] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 43.029405][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.043351][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.043368][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.116734][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.116753][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.122521][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.122539][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.128476][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.128512][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.128539][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.128565][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.128593][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.128622][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.171958][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.171978][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.222916][ T5926] Bluetooth: ISO socket layer initialized [ 43.281659][ T5928] binder: BINDER_SET_CONTEXT_MGR already set [ 43.281675][ T5928] binder: 5925:5928 ioctl 4018620d 800004c0 returned -16 [ 43.282330][ T5928] binder: 5925:5928 ioctl c0306201 80000780 returned -22 [ 43.308992][ T5931] Zero length message leads to an empty skb [ 43.316137][ T5931] FAULT_INJECTION: forcing a failure. [ 43.316137][ T5931] name failslab, interval 1, probability 0, space 0, times 1 [ 43.316160][ T5931] CPU: 2 UID: 0 PID: 5931 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 43.316173][ T5931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.316179][ T5931] Call Trace: [ 43.316183][ T5931] [ 43.316187][ T5931] dump_stack_lvl+0x100/0x190 [ 43.316205][ T5931] should_fail_ex.cold+0x5/0xa [ 43.316220][ T5931] should_failslab+0xc2/0x120 [ 43.316246][ T5931] __kmalloc_noprof+0xfc/0x840 [ 43.316260][ T5931] ? trace_kmalloc+0xeb/0x110 [ 43.316270][ T5931] ? lsm_blob_alloc+0x68/0x90 [ 43.316283][ T5931] lsm_blob_alloc+0x68/0x90 [ 43.316293][ T5931] security_sk_alloc+0x2d/0x290 [ 43.316307][ T5931] sk_prot_alloc+0x12a/0x2a0 [ 43.316325][ T5931] sk_alloc+0x36/0xe80 [ 43.316340][ T5931] bpf_prog_test_run_skb+0x4d2/0x3530 [ 43.316355][ T5931] ? lock_acquire+0x1d1/0x380 [ 43.316369][ T5931] ? __fget_files+0x34/0x3d0 [ 43.316384][ T5931] ? find_held_lock+0x2b/0x80 [ 43.316396][ T5931] ? __fget_files+0x1e1/0x3d0 [ 43.316414][ T5931] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 43.316429][ T5931] ? fput+0x7c/0x100 [ 43.316439][ T5931] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 43.316452][ T5931] __sys_bpf+0x2265/0x4a30 [ 43.316469][ T5931] ? __pfx___sys_bpf+0x10/0x10 [ 43.316480][ T5931] ? find_held_lock+0x2b/0x80 [ 43.316491][ T5931] ? futex_wake+0x4ea/0x5e0 [ 43.316527][ T5931] ? lock_acquire+0x1d1/0x380 [ 43.316541][ T5931] ? __might_fault+0xc5/0x140 [ 43.316554][ T5931] ? find_held_lock+0x2b/0x80 [ 43.316567][ T5931] ? __ia32_sys_bpf+0xcc/0x170 [ 43.316580][ T5931] __ia32_sys_bpf+0xcc/0x170 [ 43.316594][ T5931] ? __might_fault+0x111/0x140 [ 43.316606][ T5931] __do_fast_syscall_32+0x14b/0x8c0 [ 43.316621][ T5931] do_fast_syscall_32+0x32/0x70 [ 43.316633][ T5931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 43.316647][ T5931] RIP: 0023:0xf73aefbc [ 43.316656][ T5931] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 43.316666][ T5931] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 43.316677][ T5931] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080001180 [ 43.316684][ T5931] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.316691][ T5931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 43.316697][ T5931] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 43.316704][ T5931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 43.316719][ T5931] [ 43.406039][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 43.624568][ T857] hid-generic 0005:0008:0007.0002: item fetching failed at offset 5/6 [ 43.625238][ T857] hid-generic 0005:0008:0007.0002: probe with driver hid-generic failed with error -22 [ 44.018642][ T5137] Bluetooth: hci1: command tx timeout [ 44.018663][ T67] Bluetooth: hci2: command tx timeout [ 44.018745][ T5781] Bluetooth: hci0: command tx timeout [ 44.039436][ T5957] binder: BINDER_SET_CONTEXT_MGR already set [ 44.039445][ T5957] binder: 5956:5957 ioctl 4018620d 800004c0 returned -16 [ 44.039718][ T5957] binder: 5956:5957 ioctl c0306201 80000780 returned -22 [ 44.088449][ T5959] TC_ACT_REPEAT abuse ? [ 44.217919][ T5961] hub 5-0:1.0: USB hub found [ 44.219554][ T5961] hub 5-0:1.0: 1 port detected [ 44.529558][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 44.533199][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 44.603350][ T5981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22'. [ 44.692346][ T5987] Bluetooth: MGMT ver 1.23 [ 44.859527][ T229] IPVS: starting estimator thread 0... [ 44.948249][ T6002] IPVS: using max 27 ests per chain, 64800 per kthread [ 45.027163][ T6016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.31'. [ 45.128061][ T6020] wlan1 speed is unknown, defaulting to 1000 [ 45.128175][ T6020] wlan1 speed is unknown, defaulting to 1000 [ 45.129869][ T6020] wlan1 speed is unknown, defaulting to 1000 [ 45.130617][ T6020] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 45.130636][ T6020] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 45.130658][ T6020] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 45.133317][ T6020] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 45.137654][ T6020] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 45.147072][ T6020] wlan1 speed is unknown, defaulting to 1000 [ 45.148485][ T6020] wlan1 speed is unknown, defaulting to 1000 [ 45.149163][ T6020] wlan1 speed is unknown, defaulting to 1000 [ 45.149778][ T6020] wlan1 speed is unknown, defaulting to 1000 [ 45.206375][ T6022] hub 5-0:1.0: USB hub found [ 45.206811][ T6022] hub 5-0:1.0: 1 port detected [ 45.404725][ T6037] syzkaller0: entered promiscuous mode [ 45.404738][ T6037] syzkaller0: entered allmulticast mode [ 45.824043][ T6051] hub 5-0:1.0: USB hub found [ 45.824509][ T6051] hub 5-0:1.0: 1 port detected [ 45.964638][ T6055] hub 5-0:1.0: USB hub found [ 45.964873][ T6055] hub 5-0:1.0: 1 port detected [ 46.099187][ T5781] Bluetooth: hci1: command tx timeout [ 46.099219][ T5781] Bluetooth: hci2: command tx timeout [ 46.151511][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 46.154148][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 46.532758][ T6077] hub 5-0:1.0: USB hub found [ 46.532988][ T6077] hub 5-0:1.0: 1 port detected [ 46.611330][ T6082] FAULT_INJECTION: forcing a failure. [ 46.611330][ T6082] name failslab, interval 1, probability 0, space 0, times 0 [ 46.611364][ T6082] CPU: 1 UID: 0 PID: 6082 Comm: syz.1.55 Not tainted syzkaller #0 PREEMPT(full) [ 46.611388][ T6082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.611399][ T6082] Call Trace: [ 46.611406][ T6082] [ 46.611414][ T6082] dump_stack_lvl+0x100/0x190 [ 46.611444][ T6082] should_fail_ex.cold+0x5/0xa [ 46.611469][ T6082] should_failslab+0xc2/0x120 [ 46.611499][ T6082] kmem_cache_alloc_noprof+0x92/0x6a0 [ 46.611527][ T6082] ? __anon_vma_prepare+0xa9/0x690 [ 46.611553][ T6082] __anon_vma_prepare+0xa9/0x690 [ 46.611574][ T6082] ? __pfx___pte_alloc+0x10/0x10 [ 46.611599][ T6082] ? __pfx_mprotect_fixup+0x10/0x10 [ 46.611621][ T6082] __vmf_anon_prepare+0x11f/0x250 [ 46.611651][ T6082] do_anonymous_page+0x47d/0x2050 [ 46.611676][ T6082] ? find_held_lock+0x2b/0x80 [ 46.611699][ T6082] ? __pfx_do_anonymous_page+0x10/0x10 [ 46.611727][ T6082] ? pgd_none+0x9f/0xe0 [ 46.611746][ T6082] ? __pfx_pgd_none+0x10/0x10 [ 46.611768][ T6082] ? lock_acquire+0x1d1/0x380 [ 46.611799][ T6082] __handle_mm_fault+0x1ff3/0x2f60 [ 46.611824][ T6082] ? lock_vma_under_rcu+0x11d/0x590 [ 46.611844][ T6082] ? __pfx___handle_mm_fault+0x10/0x10 [ 46.611870][ T6082] ? lock_vma_under_rcu+0x17c/0x590 [ 46.611906][ T6082] handle_mm_fault+0x363/0xa20 [ 46.611949][ T6082] do_user_addr_fault+0x59c/0x12f0 [ 46.611982][ T6082] exc_page_fault+0x6f/0xd0 [ 46.612004][ T6082] asm_exc_page_fault+0x26/0x30 [ 46.612023][ T6082] RIP: 0023:0xf71e8e90 [ 46.612038][ T6082] Code: 00 83 ec 04 8d 83 2e 1d e5 ff 50 56 55 e8 48 21 03 00 8b 83 20 67 00 00 83 c4 10 83 e8 01 39 f0 0f 82 b4 00 00 00 8b 44 24 04 <89> 75 08 89 75 0c 89 45 10 83 c4 1c 89 e8 5b 5e 5f 5d c3 2e 8d 74 [ 46.612056][ T6082] RSP: 002b:00000000f54a5270 EFLAGS: 00010286 [ 46.612072][ T6082] RAX: 0000000000001000 RBX: 00000000f747dff4 RCX: 0000000000000000 [ 46.612083][ T6082] RDX: 00000000f5300000 RSI: 0000000000021000 RDI: 0000000000100000 [ 46.612094][ T6082] RBP: 00000000f5300000 R08: 0000000000000000 R09: 0000000000000000 [ 46.612106][ T6082] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 46.612117][ T6082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 46.612142][ T6082] [ 46.612322][ T6082] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 47.587433][ T6108] hub 5-0:1.0: USB hub found [ 47.587602][ T6108] hub 5-0:1.0: 1 port detected [ 47.671189][ T6112] device-mapper: raid: Choosing default region size of 4MiB [ 47.672285][ T6112] device-mapper: raid: Device 0 specified for rebuild; clearing superblock [ 47.888793][ T6112] device-mapper: table: 248:0: raid: Insufficient redundancy to activate array (-EINVAL) [ 47.888820][ T6112] device-mapper: ioctl: error adding target to table [ 47.949403][ T6120] hub 5-0:1.0: USB hub found [ 47.949674][ T6120] hub 5-0:1.0: 1 port detected [ 48.712459][ T6147] netlink: 32 bytes leftover after parsing attributes in process `syz.0.78'. [ 48.776376][ T42] audit: type=1326 audit(1792746814.298:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.0.80" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x0 [ 48.964453][ T6158] hub 5-0:1.0: USB hub found [ 48.964653][ T6158] hub 5-0:1.0: 1 port detected [ 49.052348][ T6162] syzkaller0: entered promiscuous mode [ 49.052368][ T6162] syzkaller0: entered allmulticast mode [ 49.197576][ T6169] netlink: 32 bytes leftover after parsing attributes in process `syz.1.88'. [ 49.240066][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.89'. [ 49.901008][ T6183] hub 5-0:1.0: USB hub found [ 49.901164][ T6183] hub 5-0:1.0: 1 port detected [ 50.331612][ T6196] hub 5-0:1.0: USB hub found [ 50.331842][ T6196] hub 5-0:1.0: 1 port detected [ 50.446896][ T6206] batman_adv: batadv0: Adding interface: syzkaller0 [ 50.446914][ T6206] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.446938][ T6206] batman_adv: batadv0: Interface activated: syzkaller0 [ 50.450966][ T6205] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 50.472492][ T6205] batman_adv: batadv0: Removing interface: syzkaller0 [ 50.560687][ T6213] binder: 6212:6213 ioctl c0306201 80000780 returned -22 [ 51.012742][ T6224] @0Ù: renamed from dummy0 (while UP) [ 51.328172][ T5923] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.507064][ T6236] hub 5-0:1.0: USB hub found [ 51.507354][ T6236] hub 5-0:1.0: 1 port detected [ 51.599208][ T6245] binder: 6244:6245 ioctl c0306201 80000780 returned -22 [ 51.638005][ T42] audit: type=1326 audit(1792746817.158:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.2.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fbc code=0x7ffc0000 [ 51.638036][ T42] audit: type=1326 audit(1792746817.158:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.2.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fbc code=0x7ffc0000 [ 51.640133][ T42] audit: type=1326 audit(1792746817.168:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.2.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fbc code=0x7ffc0000 [ 51.640165][ T42] audit: type=1326 audit(1792746817.168:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.2.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fbc code=0x7ffc0000 [ 51.640186][ T42] audit: type=1326 audit(1792746817.168:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.2.115" exe="/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf7fd8fbc code=0x7ffc0000 [ 51.640205][ T42] audit: type=1326 audit(1792746817.168:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.2.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fbc code=0x7ffc0000 [ 51.640289][ T42] audit: type=1326 audit(1792746817.168:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.2.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fbc code=0x7ffc0000 [ 51.640309][ T42] audit: type=1326 audit(1792746817.168:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.2.115" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fd8fbc code=0x7ffc0000 [ 51.640329][ T42] audit: type=1326 audit(1792746817.168:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.2.115" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7fd8fbc code=0x7ffc0000 [ 51.690052][ T6250] hub 5-0:1.0: USB hub found [ 51.690553][ T6250] hub 5-0:1.0: 1 port detected [ 51.817519][ T6261] hub 5-0:1.0: USB hub found [ 51.817646][ T6261] hub 5-0:1.0: 1 port detected [ 51.866950][ T6268] binder: 6267:6268 ioctl c0306201 80000780 returned -22 [ 52.082140][ T6275] @0Ù: renamed from dummy0 (while UP) [ 52.575506][ T6286] hub 5-0:1.0: USB hub found [ 52.575737][ T6286] hub 5-0:1.0: 1 port detected [ 52.610659][ T6288] syzkaller0: entered promiscuous mode [ 52.610673][ T6288] syzkaller0: entered allmulticast mode [ 52.735554][ T6293] hub 5-0:1.0: USB hub found [ 52.735693][ T6293] hub 5-0:1.0: 1 port detected [ 52.880140][ T6307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.138'. [ 53.555278][ T6318] device-mapper: table: 248:1: adding target device ram5 caused an alignment inconsistency: physical_block_size=4096, logical_block_size=512, alignment_offset=0, start=4193792 [ 53.555303][ T6318] device-mapper: table: 248:1: adding target device ram5 caused an alignment inconsistency: physical_block_size=4096, logical_block_size=512, alignment_offset=0, start=0 [ 53.555316][ T6318] device-mapper: table: 248:1: ram5 too small for target: start=8191, len=128, dev_size=8192 [ 53.555331][ T6318] device-mapper: core: Cannot calculate initial queue limits [ 53.555335][ T6318] device-mapper: ioctl: unable to set up device queue for new table. [ 53.787329][ T6327] batman_adv: batadv0: Adding interface: syzkaller0 [ 53.787345][ T6327] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.787376][ T6327] batman_adv: batadv0: Interface activated: syzkaller0 [ 53.792260][ T6326] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 53.812645][ T6326] batman_adv: batadv0: Removing interface: syzkaller0 [ 53.858617][ T6329] hub 5-0:1.0: USB hub found [ 53.859051][ T6329] hub 5-0:1.0: 1 port detected [ 54.084794][ T6343] @0Ù: renamed from dummy0 (while UP) [ 54.850739][ T6366] batman_adv: batadv0: Adding interface: syzkaller0 [ 54.850750][ T6366] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.850765][ T6366] batman_adv: batadv0: Interface activated: syzkaller0 [ 54.852316][ T6365] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 54.858899][ T6365] batman_adv: batadv0: Removing interface: syzkaller0 [ 54.957545][ T6368] hub 5-0:1.0: USB hub found [ 54.957677][ T6368] hub 5-0:1.0: 1 port detected [ 55.027268][ T6372] hub 5-0:1.0: USB hub found [ 55.027482][ T6372] hub 5-0:1.0: 1 port detected [ 55.392762][ T6398] binder: 6397:6398 ioctl 4018620d 0 returned -22 [ 55.393414][ T6398] binder: 6397:6398 ioctl c0306201 80000780 returned -22 [ 55.456530][ T6402] hub 5-0:1.0: USB hub found [ 55.456652][ T6402] hub 5-0:1.0: 1 port detected [ 55.897104][ T6429] hub 5-0:1.0: USB hub found [ 55.897235][ T6429] hub 5-0:1.0: 1 port detected [ 55.978452][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 55.978470][ T42] audit: type=1326 audit(1792746821.508:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.3.181" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x0 [ 57.474051][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'. [ 58.307445][ T6487] hub 5-0:1.0: USB hub found [ 58.307588][ T6487] hub 5-0:1.0: 1 port detected [ 60.146334][ T6545] batman_adv: batadv0: Adding interface: syzkaller0 [ 60.146345][ T6545] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.146361][ T6545] batman_adv: batadv0: Interface activated: syzkaller0 [ 60.165811][ T6543] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 60.175081][ T6543] batman_adv: batadv0: Removing interface: syzkaller0 [ 61.363087][ T6589] @0Ù: renamed from dummy0 (while UP) [ 61.989414][ T6601] netlink: 32 bytes leftover after parsing attributes in process `syz.3.239'. [ 62.420047][ T6624] hub 5-0:1.0: USB hub found [ 62.420535][ T6624] hub 5-0:1.0: 1 port detected [ 62.504863][ T6628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.250'. [ 62.551776][ T6630] device-mapper: multipath round-robin: repeat_count > 1 is deprecated, using 1 instead [ 62.552020][ T6630] device-mapper: table: 248:3: multipath: not enough priority group arguments (-EINVAL) [ 62.552038][ T6630] device-mapper: ioctl: error adding target to table [ 63.015617][ T6659] hub 5-0:1.0: USB hub found [ 63.015815][ T6659] hub 5-0:1.0: 1 port detected [ 63.047228][ T6664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.260'. [ 63.690416][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 63.715781][ T5866] wlan1 speed is unknown, defaulting to 1000 [ 63.855388][ T6708] binder: 6707:6708 ioctl c0306201 80000780 returned -22 [ 64.093403][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 64.097240][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 64.825694][ T6737] binder: 6736:6737 ioctl c0306201 80000780 returned -22 [ 64.861470][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 65.208982][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 65.209677][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 65.702158][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 65.702977][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 66.362845][ T6772] binder: 6771:6772 ioctl c0306201 80000780 returned -22 [ 67.288348][ T6796] hub 5-0:1.0: USB hub found [ 67.288473][ T6796] hub 5-0:1.0: 1 port detected [ 67.317288][ T6798] binder: 6797:6798 ioctl c0306201 80000780 returned -22 [ 67.345078][ T6801] binder: 6800:6801 ioctl c0306201 80000780 returned -22 [ 68.171028][ T6821] hub 5-0:1.0: USB hub found [ 68.171264][ T6821] hub 5-0:1.0: 1 port detected [ 68.215234][ T6823] binder: 6822:6823 ioctl c0306201 0 returned -14 [ 68.215561][ T6823] binder: 6822:6823 ioctl c0306201 80000780 returned -22 [ 68.268369][ T6825] hub 5-0:1.0: USB hub found [ 68.268613][ T6825] hub 5-0:1.0: 1 port detected [ 68.320937][ T6827] syzkaller0: entered promiscuous mode [ 68.320957][ T6827] syzkaller0: entered allmulticast mode [ 68.771435][ T6841] __nla_validate_parse: 2 callbacks suppressed [ 68.771454][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 68.772215][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 69.022275][ T6845] binder: 6844:6845 ioctl c0306201 0 returned -14 [ 69.022824][ T6845] binder: 6844:6845 ioctl c0306201 80000780 returned -22 [ 69.072804][ T6847] hub 5-0:1.0: USB hub found [ 69.075538][ T6847] hub 5-0:1.0: 1 port detected [ 69.218055][ T6852] hub 5-0:1.0: USB hub found [ 69.218315][ T6852] hub 5-0:1.0: 1 port detected [ 70.227809][ T6875] binder: 6874:6875 ioctl c0306201 80000780 returned -22 [ 70.390740][ T6880] hub 5-0:1.0: USB hub found [ 70.392288][ T6880] hub 5-0:1.0: 1 port detected [ 70.914889][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.914928][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.917762][ T29] cfg80211: failed to load regulatory.db [ 72.614074][ T5874] bond0: (slave bond_slave_0): interface is now down [ 72.614095][ T5874] bond0: (slave bond_slave_1): interface is now down [ 72.629188][ T5874] bond0: (slave bond_slave_0): interface is now down [ 72.629209][ T5874] bond0: (slave bond_slave_1): interface is now down [ 72.632494][ T5874] bond0: now running without any active interface! [ 72.720873][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 72.721709][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 74.249391][ T42] audit: type=1326 audit(1792746839.778:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.1.346" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff5fbc code=0x0 [ 74.437069][ T6935] hub 5-0:1.0: USB hub found [ 74.437337][ T6935] hub 5-0:1.0: 1 port detected [ 74.502446][ T67] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 74.502461][ T67] CPU: 2 UID: 0 PID: 67 Comm: kworker/u34:0 Not tainted syzkaller #0 PREEMPT(full) [ 74.502476][ T67] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.502484][ T67] Workqueue: hci3 hci_rx_work [ 74.502505][ T67] Call Trace: [ 74.502509][ T67] [ 74.502514][ T67] dump_stack_lvl+0x100/0x190 [ 74.502552][ T67] sysfs_warn_dup.cold+0x1c/0x28 [ 74.502573][ T67] sysfs_create_dir_ns+0x24b/0x2b0 [ 74.502592][ T67] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 74.502609][ T67] ? find_held_lock+0x2b/0x80 [ 74.502621][ T67] ? kobject_add_internal+0x25f/0x930 [ 74.502641][ T67] ? kobject_add_internal+0x25f/0x930 [ 74.502658][ T67] ? do_raw_spin_unlock+0x145/0x1e0 [ 74.502671][ T67] kobject_add_internal+0x2c8/0x930 [ 74.502690][ T67] kobject_add+0x16a/0x1e0 [ 74.502706][ T67] ? __pfx_kobject_add+0x10/0x10 [ 74.502720][ T67] ? class_to_subsys+0x10f/0x150 [ 74.502737][ T67] ? kobject_put+0xb9/0x640 [ 74.502751][ T67] ? _raw_spin_unlock+0x28/0x50 [ 74.502771][ T67] device_add+0x294/0x1970 [ 74.502784][ T67] ? __pfx_dev_set_name+0x10/0x10 [ 74.502799][ T67] ? __pfx_device_add+0x10/0x10 [ 74.502813][ T67] ? mgmt_send_event_skb+0x2fb/0x460 [ 74.502833][ T67] hci_conn_add_sysfs+0x1a3/0x260 [ 74.502845][ T67] le_conn_complete_evt+0x122f/0x2130 [ 74.502864][ T67] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 74.502879][ T67] ? hci_event_packet+0x186/0xcd0 [ 74.502898][ T67] hci_le_conn_complete_evt+0x23c/0x3a0 [ 74.502914][ T67] ? skb_pull_data+0x15f/0x1e0 [ 74.502926][ T67] hci_le_meta_evt+0x34a/0x5f0 [ 74.502943][ T67] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 74.502972][ T67] hci_event_packet+0x51c/0xcd0 [ 74.502990][ T67] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 74.503007][ T67] ? __pfx_hci_event_packet+0x10/0x10 [ 74.503025][ T67] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.503040][ T67] hci_rx_work+0x451/0xfc0 [ 74.503057][ T67] process_one_work+0xac7/0x1b10 [ 74.503076][ T67] ? __pfx_process_one_work+0x10/0x10 [ 74.503090][ T67] ? lock_acquire+0x1d1/0x380 [ 74.503109][ T67] ? __pfx_hci_rx_work+0x10/0x10 [ 74.503125][ T67] worker_thread+0x5ef/0xe50 [ 74.503146][ T67] ? kthread+0x13a/0x450 [ 74.503156][ T67] ? __pfx_worker_thread+0x10/0x10 [ 74.503168][ T67] kthread+0x373/0x450 [ 74.503178][ T67] ? __pfx_kthread+0x10/0x10 [ 74.503190][ T67] ret_from_fork+0x730/0xd60 [ 74.503202][ T67] ? __pfx_ret_from_fork+0x10/0x10 [ 74.503220][ T67] ? __switch_to+0x800/0x10e0 [ 74.503234][ T67] ? __pfx_kthread+0x10/0x10 [ 74.503246][ T67] ret_from_fork_asm+0x1a/0x30 [ 74.503264][ T67] [ 74.503301][ T67] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 74.503321][ T67] Bluetooth: hci3: failed to register connection device [ 75.240236][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 75.358625][ T6963] capability: warning: `syz.0.361' uses deprecated v2 capabilities in a way that may be insecure [ 75.885946][ T6980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.367'. [ 76.161036][ T6985] binder: 6984:6985 ioctl c0306201 0 returned -14 [ 76.204866][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 76.588645][ T5781] Bluetooth: hci3: command 0x2016 tx timeout [ 76.707169][ T7003] hub 5-0:1.0: USB hub found [ 76.707833][ T7003] hub 5-0:1.0: 1 port detected [ 76.876284][ T7012] netlink: 'syz.3.379': attribute type 10 has an invalid length. [ 76.876854][ T7012] macvlan1: entered promiscuous mode [ 76.876867][ T7012] macvlan1: entered allmulticast mode [ 76.879664][ T7012] veth1_vlan: entered allmulticast mode [ 76.881781][ T7012] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 76.890916][ T7012] netlink: 'syz.3.379': attribute type 4 has an invalid length. [ 76.890929][ T7012] netlink: 156 bytes leftover after parsing attributes in process `syz.3.379'. [ 76.908257][ T13] bond0: (slave macvlan1): interface is now down [ 76.908644][ T13] bond0: now running without any active interface! [ 77.056699][ T7021] netlink: 40 bytes leftover after parsing attributes in process `syz.3.381'. [ 77.341164][ T7028] binder: 7027:7028 ioctl c0306201 80000780 returned -22 [ 77.470941][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 77.727479][ T7056] syzkaller0: entered promiscuous mode [ 77.727498][ T7056] syzkaller0: entered allmulticast mode [ 77.805477][ T7059] binder: 7058:7059 ioctl c0306201 80000780 returned -22 [ 77.865028][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 77.969238][ T67] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 77.969318][ T67] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 78.168208][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 78.320738][ T29] usb 8-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 78.326814][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.326833][ T29] usb 8-1: Product: syz [ 78.326840][ T29] usb 8-1: Manufacturer: syz [ 78.326847][ T29] usb 8-1: SerialNumber: syz [ 78.542200][ T29] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 78.570631][ T29] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 78.578442][ T29] usb 8-1: USB disconnect, device number 2 [ 78.614558][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.910059][ T7086] syzkaller0: entered promiscuous mode [ 78.910072][ T7086] syzkaller0: entered allmulticast mode [ 79.211238][ T7101] hub 5-0:1.0: USB hub found [ 79.212677][ T7101] hub 5-0:1.0: 1 port detected [ 79.456754][ T7110] netlink: 40 bytes leftover after parsing attributes in process `syz.1.413'. [ 79.762063][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 79.762913][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 80.655104][ T7152] netlink: 'syz.2.429': attribute type 4 has an invalid length. [ 80.655119][ T7152] __nla_validate_parse: 1 callbacks suppressed [ 80.655126][ T7152] netlink: 156 bytes leftover after parsing attributes in process `syz.2.429'. [ 80.656069][ T7152] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 81.042270][ T7159] can0: slcan on ptm0. [ 81.076341][ T7161] hub 5-0:1.0: USB hub found [ 81.076837][ T7161] hub 5-0:1.0: 1 port detected [ 81.090387][ T7158] can0 (unregistered): slcan off ptm0. [ 81.221106][ T7169] hub 5-0:1.0: USB hub found [ 81.223497][ T7169] hub 5-0:1.0: 1 port detected [ 81.403931][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.433'. [ 81.409643][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.433'. [ 82.013784][ T7190] hub 5-0:1.0: USB hub found [ 82.013902][ T7190] hub 5-0:1.0: 1 port detected [ 82.051254][ T7193] FAULT_INJECTION: forcing a failure. [ 82.051254][ T7193] name failslab, interval 1, probability 0, space 0, times 0 [ 82.051284][ T7193] CPU: 2 UID: 0 PID: 7193 Comm: syz.2.444 Not tainted syzkaller #0 PREEMPT(full) [ 82.051302][ T7193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.051311][ T7193] Call Trace: [ 82.051317][ T7193] [ 82.051325][ T7193] dump_stack_lvl+0x100/0x190 [ 82.051355][ T7193] should_fail_ex.cold+0x5/0xa [ 82.051381][ T7193] should_failslab+0xc2/0x120 [ 82.051415][ T7193] __kmalloc_noprof+0xfc/0x840 [ 82.051441][ T7193] ? nft_set_elem_init+0xd6/0x630 [ 82.051468][ T7193] nft_set_elem_init+0xd6/0x630 [ 82.051494][ T7193] nft_add_set_elem+0x2536/0x44a0 [ 82.051520][ T7193] ? netlink_sendmsg+0x900/0x10c0 [ 82.051544][ T7193] ? __pfx_do_fast_syscall_32+0x10/0x10 [ 82.051560][ T7193] ? srso_alias_untrain_ret+0x10/0x10 [ 82.051578][ T7193] ? __pfx_nft_add_set_elem+0x10/0x10 [ 82.051611][ T7193] ? print_usage_bug.part.0+0x1b0/0x340 [ 82.051632][ T7193] ? net_generic+0x25/0x2a0 [ 82.051650][ T7193] ? find_held_lock+0x2b/0x80 [ 82.051665][ T7193] ? net_generic+0xea/0x2a0 [ 82.051688][ T7193] ? net_generic+0xea/0x2a0 [ 82.051721][ T7193] ? __nla_validate_parse+0x1e7/0x28b0 [ 82.051758][ T7193] ? nla_strcmp+0xff/0x130 [ 82.051786][ T7193] ? nft_set_lookup_global+0x163/0x390 [ 82.051812][ T7193] nf_tables_newsetelem+0x721/0xa60 [ 82.051842][ T7193] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 82.051871][ T7193] ? net_generic+0x25/0x2a0 [ 82.051899][ T7193] ? __nla_parse+0x40/0x60 [ 82.051922][ T7193] nfnetlink_rcv_batch+0x1410/0x2880 [ 82.051957][ T7193] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 82.051980][ T7193] ? find_held_lock+0x2b/0x80 [ 82.052001][ T7193] ? __local_bh_enable_ip+0xa5/0x120 [ 82.052027][ T7193] ? lockdep_hardirqs_on+0x7d/0x110 [ 82.052047][ T7193] ? __dev_queue_xmit+0xa60/0x4a40 [ 82.052101][ T7193] ? __nla_parse+0x40/0x60 [ 82.052135][ T7193] nfnetlink_rcv+0x3bd/0x440 [ 82.052165][ T7193] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 82.052204][ T7193] netlink_unicast+0x65f/0x950 [ 82.052234][ T7193] ? __pfx_netlink_unicast+0x10/0x10 [ 82.052266][ T7193] netlink_sendmsg+0x9ac/0x10c0 [ 82.052314][ T7193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.052350][ T7193] ? apparmor_socket_sendmsg+0x165/0x280 [ 82.052379][ T7193] ? ____sys_sendmsg+0xa4d/0xbe0 [ 82.052399][ T7193] ____sys_sendmsg+0xa4d/0xbe0 [ 82.052417][ T7193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.052444][ T7193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.052476][ T7193] ___sys_sendmsg+0x190/0x1e0 [ 82.052499][ T7193] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.052520][ T7193] ? futex_wait+0x11e/0x370 [ 82.052555][ T7193] ? find_held_lock+0x2b/0x80 [ 82.052593][ T7193] __sys_sendmsg+0x160/0x210 [ 82.052620][ T7193] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.052660][ T7193] __do_fast_syscall_32+0x14b/0x8c0 [ 82.052686][ T7193] do_fast_syscall_32+0x32/0x70 [ 82.052708][ T7193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.052731][ T7193] RIP: 0023:0xf7fd8fbc [ 82.052748][ T7193] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 82.052766][ T7193] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 82.052785][ T7193] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000400 [ 82.052797][ T7193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.052808][ T7193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.052837][ T7193] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 82.052848][ T7193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.052876][ T7193] [ 82.055152][ T7194] can0: slcan on ptm0. [ 82.180679][ T7191] can0 (unregistered): slcan off ptm0. [ 82.249984][ T7202] netlink: 32 bytes leftover after parsing attributes in process `syz.3.447'. [ 82.303314][ T7208] binder: 7206:7208 ioctl c0306201 0 returned -14 [ 82.335778][ T7211] binder: 7209:7211 ioctl c0306201 80000780 returned -22 [ 82.526859][ T7222] syzkaller0: entered promiscuous mode [ 82.526874][ T7222] syzkaller0: entered allmulticast mode [ 82.726824][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 82.727342][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 83.034249][ T7232] can0: slcan on ptm0. [ 83.108850][ T7231] can0 (unregistered): slcan off ptm0. [ 83.116763][ T7234] netlink: 32 bytes leftover after parsing attributes in process `syz.0.458'. [ 83.267273][ T7247] hub 5-0:1.0: USB hub found [ 83.267407][ T7247] hub 5-0:1.0: 1 port detected [ 83.585144][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 83.585720][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 83.946980][ T7282] can0: slcan on ptm0. [ 84.018978][ T7281] can0 (unregistered): slcan off ptm0. [ 84.441218][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 85.094203][ T7309] hub 5-0:1.0: USB hub found [ 85.094556][ T7309] hub 5-0:1.0: 1 port detected [ 85.189504][ T7313] netlink: 'syz.0.478': attribute type 4 has an invalid length. [ 85.190315][ T7313] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 85.286255][ T7322] syz.2.482 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 85.286276][ T7322] CPU: 0 UID: 0 PID: 7322 Comm: syz.2.482 Not tainted syzkaller #0 PREEMPT(full) [ 85.286290][ T7322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.286298][ T7322] Call Trace: [ 85.286302][ T7322] [ 85.286307][ T7322] dump_stack_lvl+0x100/0x190 [ 85.286325][ T7322] dump_header+0xfb/0x606 [ 85.286338][ T7322] oom_kill_process.cold+0xd/0x380 [ 85.286352][ T7322] out_of_memory+0x340/0x14f0 [ 85.286373][ T7322] ? __pfx_out_of_memory+0x10/0x10 [ 85.286395][ T7322] mem_cgroup_out_of_memory+0xc6/0x130 [ 85.286410][ T7322] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 85.286426][ T7322] ? find_held_lock+0x2b/0x80 [ 85.286442][ T7322] ? do_raw_spin_unlock+0x145/0x1e0 [ 85.286453][ T7322] ? _raw_spin_unlock+0x28/0x50 [ 85.286471][ T7322] try_charge_memcg+0x783/0xf60 [ 85.286518][ T7322] ? __pfx_try_charge_memcg+0x10/0x10 [ 85.286538][ T7322] ? find_held_lock+0x2b/0x80 [ 85.286554][ T7322] ? rcu_read_unlock+0x17/0x60 [ 85.286570][ T7322] ? rcu_read_unlock+0x17/0x60 [ 85.286593][ T7322] obj_cgroup_charge_pages+0x2b/0x1f0 [ 85.286611][ T7322] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 85.286634][ T7322] ? kasan_save_track+0x14/0x30 [ 85.286656][ T7322] kmem_cache_alloc_lru_noprof+0x4f1/0x6a0 [ 85.286676][ T7322] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 85.286698][ T7322] ? __d_alloc+0x34/0xad0 [ 85.286722][ T7322] __d_alloc+0x34/0xad0 [ 85.286745][ T7322] d_make_root+0x3e/0x90 [ 85.286758][ T7322] binderfs_fill_super+0x69d/0x13d0 [ 85.286785][ T7322] ? __pfx_binderfs_fill_super+0x10/0x10 [ 85.286807][ T7322] ? __init_swait_queue_head+0xca/0x150 [ 85.286845][ T7322] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 85.286862][ T7322] ? rcu_is_watching+0x13/0xc0 [ 85.286899][ T7322] ? apparmor_capable+0x1d7/0x4d0 [ 85.286919][ T7322] ? __pfx_binderfs_fill_super+0x10/0x10 [ 85.286940][ T7322] get_tree_nodev+0xdd/0x190 [ 85.286961][ T7322] vfs_get_tree+0x92/0x320 [ 85.286977][ T7322] path_mount+0x7d0/0x2850 [ 85.286996][ T7322] ? __pfx_path_mount+0x10/0x10 [ 85.287009][ T7322] ? lockdep_hardirqs_on+0x7d/0x110 [ 85.287034][ T7322] ? putname+0xb1/0x110 [ 85.287046][ T7322] ? kmem_cache_free+0x127/0x6c0 [ 85.287072][ T7322] ? __ia32_sys_mount+0x292/0x310 [ 85.287086][ T7322] __ia32_sys_mount+0x292/0x310 [ 85.287102][ T7322] ? __pfx___ia32_sys_mount+0x10/0x10 [ 85.287123][ T7322] __do_fast_syscall_32+0x14b/0x8c0 [ 85.287141][ T7322] do_fast_syscall_32+0x32/0x70 [ 85.287157][ T7322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.287174][ T7322] RIP: 0023:0xf7fd8fbc [ 85.287187][ T7322] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 85.287199][ T7322] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 85.287214][ T7322] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 85.287224][ T7322] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.287233][ T7322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.287241][ T7322] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.287249][ T7322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.287268][ T7322] [ 85.287644][ T7322] memory: usage 4kB, limit 0kB, failcnt 21 [ 85.287656][ T7322] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 85.287666][ T7322] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 85.287674][ T7322] Memory cgroup stats for /syz2/test: [ 85.287848][ T7322] cache 0 [ 85.287855][ T7322] rss 0 [ 85.287859][ T7322] rss_huge 0 [ 85.287864][ T7322] shmem 0 [ 85.287869][ T7322] mapped_file 0 [ 85.287874][ T7322] dirty 0 [ 85.287879][ T7322] writeback 0 [ 85.287884][ T7322] workingset_refault_anon 0 [ 85.287890][ T7322] workingset_refault_file 0 [ 85.287896][ T7322] swap 0 [ 85.287901][ T7322] swapcached 0 [ 85.287906][ T7322] pgpgin 0 [ 85.287910][ T7322] pgpgout 0 [ 85.287915][ T7322] pgfault 0 [ 85.287920][ T7322] pgmajfault 0 [ 85.287925][ T7322] inactive_anon 0 [ 85.287929][ T7322] active_anon 0 [ 85.287934][ T7322] inactive_file 0 [ 85.287939][ T7322] active_file 0 [ 85.287943][ T7322] unevictable 0 [ 85.287948][ T7322] hierarchical_memory_limit 0 [ 85.287953][ T7322] hierarchical_memsw_limit 9223372036854771712 [ 85.287959][ T7322] total_cache 0 [ 85.287964][ T7322] total_rss 0 [ 85.287968][ T7322] total_rss_huge 0 [ 85.287973][ T7322] total_shmem 0 [ 85.287978][ T7322] total_mapped_file 0 [ 85.287983][ T7322] total_dirty 0 [ 85.287987][ T7322] total_writeback 0 [ 85.287992][ T7322] total_workingset_refault_anon 0 [ 85.287998][ T7322] total_workingset_refault_file 0 [ 85.288003][ T7322] total_swap 0 [ 85.288008][ T7322] total_swapcached 0 [ 85.288013][ T7322] total_pgpgin 0 [ 85.288024][ T7322] total_pgpgout 0 [ 85.288030][ T7322] total_pgfault 0 [ 85.288036][ T7322] total_pgmajfault 0 [ 85.288041][ T7322] total_inactive_anon 0 [ 85.288047][ T7322] total_active_anon 0 [ 85.288053][ T7322] total_inactive_file 0 [ 85.288058][ T7322] total_active_file 0 [ 85.288063][ T7322] total_unevictable 0 [ 85.288069][ T7322] anon_cost 0 [ 85.288074][ T7322] file_cost 0 [ 85.288080][ T7322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.482,pid=7321,uid=0 [ 85.288664][ T7322] Memory cgroup out of memory: Killed process 7321 (syz.2.482) total-vm:102048kB, anon-rss:1280kB, file-rss:23144kB, shmem-rss:4kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 85.426140][ T7337] can0: slcan on ptm1. [ 85.493831][ T5781] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 85.510953][ T7336] can0 (unregistered): slcan off ptm1. [ 86.134003][ T7364] __nla_validate_parse: 5 callbacks suppressed [ 86.134022][ T7364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.491'. [ 86.176565][ T7369] ======================================================= [ 86.176565][ T7369] WARNING: The mand mount option has been deprecated and [ 86.176565][ T7369] and is ignored by this kernel. Remove the mand [ 86.176565][ T7369] option from the mount to silence this warning. [ 86.176565][ T7369] ======================================================= [ 86.234870][ T29] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.304465][ T29] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 86.365715][ T7379] fido_id[7379]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 86.385704][ T7386] hub 5-0:1.0: USB hub found [ 86.388665][ T7386] hub 5-0:1.0: 1 port detected [ 86.442909][ T7390] blk-mq: reduced tag depth (128 -> 64) [ 86.975679][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 86.976862][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 87.385718][ T7417] hub 5-0:1.0: USB hub found [ 87.385836][ T7417] hub 5-0:1.0: 1 port detected [ 87.440048][ T7425] binder_alloc: 7424: pid 7424 spamming oneway? 1 buffers allocated for a total size of 4096 [ 87.440716][ T7425] binder_alloc: 7424: pid 7424 spamming oneway? 2 buffers allocated for a total size of 5120 [ 87.549590][ T7432] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.549741][ T7432] block device autoloading is deprecated and will be removed. [ 88.347063][ T7452] hub 5-0:1.0: USB hub found [ 88.350830][ T7452] hub 5-0:1.0: 1 port detected [ 88.993978][ T7468] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 88.996389][ T7468] CPU: 3 UID: 0 PID: 7468 Comm: syz.2.524 Not tainted syzkaller #0 PREEMPT(full) [ 88.999383][ T7468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.002608][ T7468] RIP: 0010:blk_stack_limits+0x105f/0x2110 [ 89.004605][ T7468] Code: 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 98 0d 00 00 41 8b 45 74 c1 eb 09 31 d2 31 ff 89 de c1 e8 09 8d 0c 18 48 8b 44 24 48 <48> f7 f6 89 c8 44 89 e6 29 d0 31 d2 f7 f3 c1 e2 09 89 d5 e8 19 07 [ 89.010669][ T7468] RSP: 0000:ffffc900069176f0 EFLAGS: 00010246 [ 89.012619][ T7468] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 89.015341][ T7468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.017848][ T7468] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 89.020402][ T7468] R10: 00000000ffffffff R11: 000000000000001f R12: 0000000000000000 [ 89.022965][ T7468] R13: ffffc90006917848 R14: 00000000ffffffff R15: ffffc900069179e8 [ 89.025498][ T7468] FS: 0000000000000000(0000) GS:ffff8880955c4000(0063) knlGS:00000000f5486b40 [ 89.028606][ T7468] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 89.030728][ T7468] CR2: 000000000c410003 CR3: 000000004657c000 CR4: 0000000000352ef0 [ 89.033466][ T7468] Call Trace: [ 89.034623][ T7468] [ 89.035603][ T7468] dm_calculate_queue_limits+0x38f/0xeb0 [ 89.037424][ T7468] ? __pfx_dm_calculate_queue_limits+0x10/0x10 [ 89.039758][ T7468] ? mempool_init_noprof+0x3a/0x50 [ 89.041615][ T7468] ? kasan_save_track+0x14/0x30 [ 89.043370][ T7468] ? bioset_init+0x3e8/0x8a0 [ 89.044988][ T7468] ? __pfx_bioset_init+0x10/0x10 [ 89.046677][ T7468] dm_setup_md_queue+0xe2/0x550 [ 89.048570][ T7468] ? dm_table_complete+0xaa6/0x1c90 [ 89.050787][ T7468] ? dm_table_complete+0xbc0/0x1c90 [ 89.052490][ T7468] ? __pfx_dm_setup_md_queue+0x10/0x10 [ 89.054287][ T7468] ? __pfx_dm_table_complete+0x10/0x10 [ 89.056057][ T7468] table_load+0x4e8/0x7b0 [ 89.057472][ T7468] ? __pfx_table_load+0x10/0x10 [ 89.059082][ T7468] ? __might_fault+0xc5/0x140 [ 89.060614][ T7468] ? __might_fault+0xc5/0x140 [ 89.062136][ T7468] ctl_ioctl+0x4d2/0xcc0 [ 89.063675][ T7468] ? __pfx_table_load+0x10/0x10 [ 89.065727][ T7468] ? __pfx_ctl_ioctl+0x10/0x10 [ 89.067571][ T7468] ? __fget_files+0x21f/0x3d0 [ 89.069102][ T7468] dm_compat_ctl_ioctl+0x23/0x30 [ 89.070711][ T7468] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 89.072519][ T7468] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 89.074483][ T7468] __do_fast_syscall_32+0x14b/0x8c0 [ 89.076175][ T7468] do_fast_syscall_32+0x32/0x70 [ 89.077676][ T7468] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.079708][ T7468] RIP: 0023:0xf7fd8fbc [ 89.081016][ T7468] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 89.087152][ T7468] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 89.089782][ T7468] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09 [ 89.092438][ T7468] RDX: 00000000800006c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.095202][ T7468] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.097617][ T7468] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.100120][ T7468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.102653][ T7468] [ 89.103705][ T7468] Modules linked in: [ 89.105564][ T7468] ---[ end trace 0000000000000000 ]--- ** replaying previous printk message ** [ 89.108177][ T7468] RIP: 0010:blk_stack_limits+0x105f/0x2110 [ 89.108197][ T7468] Code: 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 98 0d 00 00 41 8b 45 74 c1 eb 09 31 d2 31 ff 89 de c1 e8 09 8d 0c 18 48 8b 44 24 48 <48> f7 f6 89 c8 44 89 e6 29 d0 31 d2 f7 f3 c1 e2 09 89 d5 e8 19 07 [ 89.108207][ T7468] RSP: 0000:ffffc900069176f0 EFLAGS: 00010246 [ 89.108217][ T7468] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 89.108224][ T7468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.108230][ T7468] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 89.108237][ T7468] R10: 00000000ffffffff R11: 000000000000001f R12: 0000000000000000 [ 89.108243][ T7468] R13: ffffc90006917848 R14: 00000000ffffffff R15: ffffc900069179e8 [ 89.108250][ T7468] FS: 0000000000000000(0000) GS:ffff8880955c4000(0063) knlGS:00000000f5486b40 [ 89.108272][ T7468] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 89.108282][ T7468] CR2: 000000000c410003 CR3: 000000004657c000 CR4: 0000000000352ef0 [ 89.108291][ T7468] Kernel panic - not syncing: Fatal exception [ 89.142108][ T7468] Kernel Offset: disabled [ 89.143890][ T7468] Rebooting in 86400 seconds..