last executing test programs: 3.65748556s ago: executing program 2 (id=349): r0 = memfd_create(&(0x7f0000000880)='\x00\x00\x00\x80\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf+2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~MxJ\x90\x00x\x86\xff\x9ce\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5b\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gL\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0t\xf2\xad\xa7\xd2\xd1\xe7\xfb+g\xc0\xaa\xf0c;\xba\x84Uq\xca0\xc8\xa0{\x10\x1e\xa6\x1073\xab\xa9\xd4!\xce4\xb3!\x91\x05\x9dG\xe4+\x0f1\a\xbc\xd6\xf7\xac\xab\xaa\xe5\x8f\x13M\x92\x7f\xb3\xa4\xd7d\xdc\xdd\xe9\xc20~\xcc\x82[\xc3+N\xc2x\x00\xd3\x87\x94\x7f\x8c\x1a\xe4_\xeffo\x15\xaa\xb2\x8f\x9d\xa4\x8dkt\x17\xb8A\x97\xb0\x99\x96\x8c\n]\x95FWQ\x10\xe3a\xcd=*\xf70\xb3Pj\x8e\xd6}\x13\xad\x01\b8p\xf7h\xbc\xd8\x18D\x03VK\x86\xe5\xe0bo\xcbXTS\x97b\x11\xf7\x9c96\n\x18>\x8e\x8bs\xca\n\xcc|\xff\xab\xd2\x9b\xf3\x9c\x8a$\xa7d\xf5\tQ\x83$e\x04\x7f\xf0Y', 0x3) write$binfmt_misc(r0, &(0x7f0000000180)="e502", 0x2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1027) 3.454893196s ago: executing program 2 (id=350): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) clock_gettime(0x4, &(0x7f0000000000)) socket(0x40000000015, 0x5, 0x0) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) (async) clock_gettime(0x4, &(0x7f0000000000)) (async) 3.388118225s ago: executing program 2 (id=351): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4002f00", 0x2a}], 0x1}, 0x30040000) (fail_nth: 6) 3.109879183s ago: executing program 1 (id=353): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0xa, 0x7) connect$inet6(r2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x9, 0xc8, @none, 0x1, 0x6, 0x8, 0x3, 0x9, 0x5}}}, 0x14) memfd_create(0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0xd, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) 3.061123609s ago: executing program 2 (id=354): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0xfffe, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RVERSION(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="15d8000065ffff"], 0x15) syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x81) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000080)) write(r0, &(0x7f0000000780)='transport=loop,nqn=testnqn', 0x1a) openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x880, 0x0) 2.94174972s ago: executing program 1 (id=356): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @remote}}}}, 0x0) (fail_nth: 8) 2.941335826s ago: executing program 1 (id=358): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x88a8, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @remote}}}}, 0x0) 2.889769048s ago: executing program 1 (id=359): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x1b11010, &(0x7f0000000300)={[{@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x4}}, {@stats}, {@max={'max', 0x3d, 0x3}}], [{@fsname={'fsname', 0x3d, 'ct\x00'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@fowner_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, '%.-:!.+{),'}}, {@appraise}, {@smackfstransmute}]}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@delchain={0x24, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0x150, 0x30, 0x1, 0x0, 0x0, {}, [{0x13c, 0x1, [@m_ct={0x138, 0x7, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x40}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}]}, {0xbd, 0x6, "6dff10b8c5720a660bc7187d7df061589bcd9409da4c23828caadb637d1100dca262ea65cb4ca32b7c369ad63f7f9eb7742555580090e4d3c92e6bd55cb7a33b5bd741502228b5b83007ff9579d40d8533f23d79ea9a537eb29aad00bf6d13d7de188634772fd4f959e9a6a1c27fa459cc0f360a7494cec676a061c650d74fb28ba70d1d916acaa4d6c5ac8253e982096467f13b4933e9c77938feaef86c44240e17e5c0100322d8f8fab5815ff1b58978c9ab561848afdb1e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x150}}, 0x0) 2.889517819s ago: executing program 1 (id=360): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000680)={&(0x7f0000000e80)={0x24, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.781338282s ago: executing program 1 (id=362): r0 = socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}]}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x1074, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xfffffed9, 0x2, [@TCA_FLOWER_ACT={0x1040, 0x3, [@m_tunnel_key={0x103c, 0x10, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xf93}]}, {0x1004, 0x6, "72db074a972493972e9a05474f3fafb024daed2801db48880da532370fcff03c41cd21ba6c2f0564f245460f923e2d78a134ea43f6ed083740079c4255eb32a80bf7641ac95956a4551f21f3c8ed67931d8aa5c3dbc2d3fa70456d422a445ff90857f5545b0e84290bdbc0ec5a1e98d4320c14ffcba6f6812386bbcbc7916d9824383d43720f0c0c9a9f12016d0982a393a88a8fb9be4a3112e92e31a4ea1eace319ca9e5e8d9579b6ece7c236127e5da28c73c98bd6af491b4ee545ebfaeca4ddb55d4efe59719d61741b67eed608d71e6d5a8c2b135114899bca7ad545bea1075b3cea8b0ef80f51f72f7da7cb8205f4901e197e5f30365ac68805f9e56d994dc79384c7ee08bd8653ad977dfaa8bfbd830416515e035eef241878212b255f38199bad170d4e4e2e10a0f2e01a099c20d0a024dc61e14624efa3ee601aadc363de5fa2f31ff4b727fefef087cf96358c522653d774583f0cf1fae282a422bdf3b26c7a9e7dc740e73b2de8f7104293a48043a686c504e6dc8914b0161d01e721c3b8ffa42b6d5ea41e596a2585ce8250b839ac024ba226e00694517a599a29bac5c69eebdc7ea08436faaad9e3b63ed72bb8e7827fb4da32edfd05d1e81e02fd29a438682b665b3921128b45885aae85fc0b5699feee304735116a1681d0aa2379431d24878ef21975921832c5859b028aa881f0ee32412dd193c8cc1928ceb375b03f90463009fc653178751b9c136e5730681945064a81514f7b114e11d18a5756685b7c142377bdf0835b4c7b82ce01c88193317528c64128e9660e1d7c4a7630074982e28a409b934432b5b783c6e5bb6355ad0aef962c3792b6ab9d0911949cbe786b0c87d91138492131554697e0db6d55e706d4e51a723cb8e74c8360c53aafd58b29f72c2298a7ef4395a31b0b06aeecac62ae664060ae55582dd97ab4d2020558f0f74502f95c3ee2ecb8b46089a260bfd6eee6f17925ef38dcbf95cc8013f506a8c0b6f3da57246abc500f12286fde5fac8ae2f4ecd91cb2217fe7c33f7e66a60a89cf5a377f7499256453ad09fcdc6fb9a1db47a73703507268b4cd29060f8567e82d1494cadb4a76ca5a273e3b163f8f4c57e1aa1c7262bf7ac8cba52fc28be268bf9cb93e521a252f3ee4e3827cad919ebf4137c6c81aee82de0aeb53908c40c620f6becfb5e814110d6990af677ab83c50c9a08d2a9f4e054a5a6983525d6a914244c3b58c5f6a5a8c16aaed1c7bcafcabf28a597546918d60338df37aa43534e5860c5357c2846d5301ea1711b6d14de7d010f8c19d07f9817baef9cee1638aad6531e77dec8eba2ba007aa775e97fce93fe47c01609fdf6b20da282028ffbe2914d9703531cc813fd87207d8faed8449cba3f1742651de14c711cc9b4cbe50a83b5e125feb347138217041ca08cceb8f63abb1d80fc2e02a1a4cf5d95a0f3dd7d5f2801ab98e49946cb4ab86c3609ad62a1a65b2f94d73f3fe5fa7667d9bc86d6a6cefa5cd104577d4223f2db0bb2a9ed107d0c022c449a98201080a0a9fab13515a698b4eb5f10d868cdb41c2cd6d98b4be8be8ddb7c786bda820f59783b4a2814216a8c7b2bc5c7bc383c958a7ece292c0d4039d30f4b2e27e066a309e41b99c75e6a6f0c95f8e28b42124f0ccfc750d707262743ecee384093499f44112e97b1542ae7921cede3ddf03a6d9d1fab6e4f7e8921af59f4ec85f7f1684e5710e228906ad56a737c0468e300f26fde5d89c50915781b52d477a88489202f11aa7e17293340ac96cea1a76fe79fdfb259109eab46a8dc4af250a24759aba0012ed89c0ea93c4c77740b3bcadb4b048f52e50fae2b9f77824161580aab22f83168db0813ecf6f4a5c851c6e3e0712077dbd5a4489a1c64cf709b75288e638398b84d5507c69e58617f7b37fde77c3ab7af2ba885dbafdb669be368d9c61a9abfb822c7e99d55fa811eec5f9bf6084e3db964d9eb47868427b8802ab850eabc167889cd112ee29cd6fd99565fbb3fccf5e82f0633e019573a76a7a7b45ad65b7edf234dd255b76864c38743370ae523192dc890840e2fc7e6b2847c13160116a133f7a998447fd7582b5f9b67bfae0809163987cff4c3fe4076a4d3a09d4455ae26be5f0a853dbee082f31919aff644fd9eab7da33303c034ae8981345e0dc88a88ac2f067a1f947f0502db59cd432b7e952d205c14b33a433981adcdcd5b46e720a08c130148579b8fd891c59a4a0b4cde130a1f665204d5e2397e8098bc563b0b91c6ca374d638841879f91d91b324c9ee3087288b2cc5b03243a8583887018350e53ba31749474ad573e2135fc14381269c91319322d29b104d6c5f3cfc4d5045023c448289aeba4faa42d835c9d65f38906c9135b37276f1db9d700652a7e2afdc5aef8cb686812ef756bd077bd24fa1b0c0c603123d0c09e09528083106d4141ea0b00895b9dae7ebcb8a8a08fe4da6ff4f9d2178f2276534ff21ac9921392ed97f23ef159f732f1f6f5ef9a141d0efdb57521d92aad28c38652b8e40773954fffa88ac510be288c89cba1eb1d73e8c81ab8382979896b9afadcc20b9a4c50cdcd8b318f26b6479264aeb03d299470e5a9918b2c9b3c03286d1af5b96ba5baf53c4d6012e8d37799a95610786eaf4b9a3d1d73039855e8f3def93d791c51152ae1a1bed53a40664eef05d09817d2fd44bc8f49a8f6d5d5f561d9442e3d7d032a8db61a1de7f58b77e8c747244790aab898cde0bcf80b771a23328116f545b34890cd677bbcb692a70b91534b2cd9a9d383a14ec432045b8bb93b766b376557b20499525ac242cd202a0f5adec0c9c21b2d318194a1041dc9270d9354b7086e977113dc6efe8cbbcca30b31d7bf7a42a911880b863bd09edaa641cc3b18e3305cd01b3c9a3dee247c0a8137dc0d253c25c40dd852bbd332949f9fdcc88c516b92606f381f7194e90702ba8aca14a085e88db24f2fcf9d5b2b3301f305eb5042cfe03edf4a1d2e2f1c320d014ab6fa4128987f413057976d08cdf753e8f2e75b7aa0b72d0782ad58c45d9c3c68f7b18e35770654e91863c2040cbc61177f38737957cdc7a13476be67cafc234f6b0b901d49f4081ee3ca3efa087173ad5f43326172c01b5435499306abfc4db3538438bbbb297023d6cfdadd2c9f29d35351e7fd8db515d338df6b89acff378a9349df20d51ddb8f847347a3f62ddf1fa3c529f5ef755a1c70460ec1e6ba6a30caaa817560946f13965d9a75a3b3605c45ea7818580a4373fe4eb0143676c98960030e3c59305c607b0e8c3dce8b1458394e671620d48723f05a41ff4d38306cad56b1608c3276b741e7e838f91d742ceda78e1ddabcb3a916f28f5211229c0722fa5df8351217f9e735f1b57efaf118be4c3a40d1234451ee7023e6c46fd2716cebbf7622e8d0a690fe4853911f97c6a5587f4bc0b8858baf600636b2cce98aabe02e2d1ae2ea62dd47af1b72b0a58ee525f0cc5aba06f0e26b63d84028e9d24c9aed7f8ef5d3b3ba1e3d71ffe9755a1478bf2a6d79feba643d1eb9e2fd2741b65096a48cc76e1cb91ed4cd62e12d6507a6745ce6ef3bb3850ffb206b3d5216b05e7db2c3d0224227e760220477d15f867de32232c8002bca2904a60706fe8d35efbdfbb9a6de757849ca795facd1f0eec7c502d5bb8b1ea3382eb63d2969d5220b699447b26938381e23790ce09cf7651bfe328458a165340db49b342ae533a72050afa5e642ef79b5dd3593ed6db4fa53472e1371ac45d80bb1fc36b6c70e3dfa720e5ea985f0252114b376a1385ec2d87e2fd55b08524b89f54b0e2be9ac773b30fd0e0fd84518fa9b4938a5d2c4eafea00e6bea2cf7810c53e12883fb6c89365e894babfa6e884f6421dfa411ecc9a8059e26bc0d665112d29b0e3c427d1ba2be3620c253171e36412b664414a67a39d9fe624478a29367769fb98630987097b3ce40ff0e1f8db409f391eedaa169f2cff082df24578bcafe0c2e423b24e3bf29ae4bb2fbe6fba506214530ea41ef2ded4bb0df7a1754d3d377689737754acde8aa20a14b0f81fadc14d40c491daa4c014909a1ded98e36d01a3367116791f6815ec6f37c37c2de73684ea4873b1e1f38b8b9e95a313e39ca03bc6d66cdb7f89fa05e6fd21744643980875b0f004ca500a2d2d5dd765a772061fbb70dd5b58438fa525c124a3a33b2fe588248c75405591bb9b1b8ef47a85cac6bd4bcf5bf38e6e52073d4043d82b1d2dc199ca9a8c3872fbc9ffdd8deac263891a2157ec8791e3876f7529e64996673baa5f2f7c58afe7eeeb64df287147cf3e85fdeb096a866e4d14cb745ea3282e9406f1515be61641e7857efe07ae19c5a1c8bc1274c57624ef66682ee75c93cede5a3ac5fad92e987183a6d60140a6ee92e6c7290a285c26a131eec332639a1465895fc3f1bbf1acf995c54c01f7d1b37423622f96c27fec5192be406c0ee68e49204c697d58518c426d71f4660d7848a6f4d31cd1adc1af25f986ec28b08a329b09e5e55858cfb756bd97e854f731a76a9e120211bb64958654c0e05848df02d4298ae62f1a3b6bd5303c15647eedef7293db5fff7b4a4fef1fca132a514edf099c999a75906570a66ccc9bc1fef7ef889a317da941ac1d5d932902309e36facd9ca00e8473698e3937f49ae2859e464afa4427a230687fc8ec70b66fd126db5a9cb14b9af36b6c2df0e3438524e13ab6d4bcbae5c0cfabfba72b6783fef036bfe3e688acf51e588faf3dce3f158643b2a2810b7f25bd90a597b518ba65525d52d3312fcda7c7434be8bc17f9a9cd95adc892e7cd6df8d6bbe977bd2842970bd162ce78cfc3c1881944d837fd1beea9726cd39aa570f33547722be1aeb66f8c9bb599f10eb0817cbc1d9afc3a66e701bb0f80399137e372c16b6e900701b87fe72e2feca6d1cff430a34258c3c64a8239463f0406973028da0cf3b9424bb472dabb068d41f206d6ed84c2ddf6c6f189a5e009741afe8b6b56a48e41e10596ff64398a3647fa4cda4bba6b8faaa2a455b63e7afc66c8030fb3fa5b983e1db583ce6f87ba67f7c1231be37a6431f59cec99a56b0c3f2962bd746b31271bb0410efb509e57461e33cb74fb84b95146617a51e13ad2103dd9a6c805d92318d57cc1ee11d2fe642f0dab7c0977dd8a013591e24fbf3a9953151557165d1bbb22d8629c9f1aedcde3afe05c3ae77f6c420739d48e74423e45e8b1ee8272bf9490eacd03ad31cd74d30965b9ee492c2254a5027362dfa31a6bd723aeaae0cd5fd47a4c8a1bd272f583e3dc0787b77088d9b52da24a5ec6ae26bd2187efe4ae67a95493a286afbd5d572373954c015ac6ba935b66add7d83b02a22bcf7471eb8d81f98d928ac562cdeab5e128ee8ce23813ac019e763b9cf1ac90d22f0c9ac3d789a5797f4125a916a234d840f00fbf172b0d2816aace8636b246b142e5f6a4b57fd4a5893240e09da499092a4006f225139fcaa92dcd4899f33c905e9dfeb55788412f16f2f0bf467acc12ddbda0bba9b61cc6bc3339742eccaed597ecbfe7aeb0dc8f2d939b5a2e04bf42053b5ae23f9c5c8f36595900ae9d8eaa8788a16b7d5c79c71cba1620385c9d77612b51b2d41ad49c7085b8b1f33164aefd6e06039275b2f8d6a492ac4ae2ae230b6bc2da772c6a27151d02a0dfed5a9fc57e45e0b21fe5878f70c22d8970aed7665f26e1c95552c7ff7520542d508d6be5c02eaf1036472e10ff9fe588bc7f5e496a70ab517483b49c13c45699b05c774c977e94e4f192"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1074}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000400)={0x1d, r4, 0x8000000000000003, {0x1}, 0x2}, 0xfffffffffffffcea) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendto$inet(r3, &(0x7f0000000000)="db", 0x1, 0x24000000, 0x0, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x1, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001f0000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x3, 0xd39edd0f225dd60c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x140, 0x1, {0x3}}) r9 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x10000, 0x0) write$tun(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="000000f6aaaaaaaaaaaa0180c200000e000d000000603b0100000095beaad49c4fae921da24c5bd6c3985b7aa004ebf74eb7ef40dc61834c45056324491d7f9c9834715c4bad811f2076c7d0d9c60b6af07021b7a6d40969d594"], 0x5a) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r10, 0xc138fd03, &(0x7f0000000240)="0400000000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000000000002e2e") bind$can_raw(r0, &(0x7f0000000000), 0x10) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/169, 0xa9) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x5, 0x1}]}) socket$nl_route(0x10, 0x3, 0x0) 2.171651356s ago: executing program 2 (id=368): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f000100697076366865616465720000080002000000000007000300200000001400000011000100000000000000000000000a00"], 0xec}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="fffffffffffffe000000000286dd6000000000082b40fe800000000000000000000000000001fe8000000000000000000000000000023b00040000000000"], 0x0) open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x54, 0x2c, 0xd2f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x114, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x40) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x81, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x4085}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@newtfilter={0x2c, 0x2c, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0xfff3}, {0x7, 0xb}, {0x5, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x801) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000880)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r10, @ANYBLOB="0800090001ac0f00500050800800070000000000200008800400020004000100040001000400010004000100040002000400020027e02ca437d80000000900040020bed740a9000000040006000c006e8004000100040002000800090004000000100050800800088004000100040006000800090005ac9726599223576b39da54b86094"], 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.061277313s ago: executing program 2 (id=370): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800030000000000", 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) fcntl$addseals(r0, 0x409, 0x1) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x144, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x989}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e67}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x963e214c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r4, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x8000000, 0x7d, 0x6, 0x1, "42341f9b1000007e4f00"}) r5 = syz_open_pts(r4, 0x40000) dup3(r5, r4, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x1f, &(0x7f0000000ac0), 0x90) splice(r4, 0x0, r3, 0x0, 0x7fffeff8, 0x0) r7 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.891689601s ago: executing program 0 (id=373): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000340)={[{@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}], [], 0x2c}) r0 = socket(0x10, 0x3, 0x0) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_DST_IPV4={0x8, 0x2, @loopback}]}, 0x24}}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1}}, 0x7) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x18, 0x52, 0x201, 0x2, 0x0, {0x1c}, [@generic="de"]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x40044c4) 1.78012489s ago: executing program 0 (id=375): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r2, 0x0) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80c00) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000040)=0x101, 0x8) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x85, 0x6, 0x0, 0x0, 0x10003, 0x3f, 0x400200cc1, 0xffd, 0x4, 0x9, 0x8001, 0x4, 0x2, 0xfffffffffffffffc, 0x6a, 0x8d], 0x60000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.640891009s ago: executing program 0 (id=377): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x3481cc60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000340)={{0x9, 0x4, 0x9a0, 0x4, 0x9}, [{0x8, 0x400, 0x0, 0x4}, {0x5, 0x10001, 0x94, 0x4}, {0x8000, 0xfffffffffffffffb, 0x81, 0x7}, {0x7, 0x200, 0x3, 0x8}, {0x8000000000000001, 0x8, 0x9, 0x4f}, {0x400, 0xfffffffffffffff9, 0x6, 0x5}, {0x3ff, 0x7, 0xff, 0x4}]}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, 0x0, 0x0) dup2(r5, r1) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r0, 0xffffffffffffffff, 0x2) 1.601545165s ago: executing program 3 (id=379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (fail_nth: 3) 1.544102257s ago: executing program 3 (id=380): r0 = socket$nl_generic(0x10, 0x3, 0x10) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000240)={0x0, 0x7, {0x0}, {0xee01}, 0x35, 0xff}) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x298, 0x26, 0x101, 0x70bd25, 0x25dfdbff, {0x8c}, [@nested={0x284, 0x155, 0x0, 0x1, [@typed={0x8, 0x85, 0x0, 0x0, @uid=r1}, @generic="4e0efb08e577304a506e0d13c30a1c1cc4e99be0e90aa7c8a452ae103c5f6c6ddc4bdd6883a367db0bd09c8a06dbeed888b1d228d4f33c665b0d28700c0e2c623bdc9c131f6c883322bfc1ae26d5e5589b948a32e0e4d6b547b3122bbeaf34303b152514feae84e301f61b3244a396eb9b0cdadb328539929074ec264fb6994486aab32bc3", @nested={0x16b, 0x118, 0x0, 0x1, [@typed={0x8, 0x10d, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x7a}, @generic="4e2b0854b0e758dbdf9101a29d2f7598782fe5cc56d4de0990fc95bfa3d2f21b4bb9270ccca3cf1a75c8e19877c9d951afb33eb53023525f4069d4ce64bd47d1b5ba5580e6c1bdad94fb6dbcc199c477c73a217e3c1167ea4ba7c270d78b972ec48152824d32f30b3ef477d9bfc2f32b093cd1599b16e5421303364a49bbc6df658c9c95cf08a232d8755cdd2e8240aff61acf05b9818d4f352b768cf1a37215be9d00bfd3db15e81a90a40b375fc0bfd2a6792aa96a4a49a6", @generic="f5dc50d3c7e246b71c3b4b445f317943bc97eb793b572f444951717e2af6155cdf732e4ae4e1572637d395c94df76521d399a0e6d4e3b29d9fbfad3aca3fade0cffab7661aba301f12075bc640aceaa0a89d62aac049cb0cb3eb3e3bf96dcb61a11551f1f41fa7596f0bbc20f111d8", @typed={0x8, 0x15b, 0x0, 0x0, @uid=r3}, @typed={0xc, 0x10, 0x0, 0x0, @u64=0xa2ac}, @generic="fa9884165d9e5bf5aab3827accc394ca85f4f24c63671d", @typed={0x8, 0x34, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="d27d28e36af0f18d5cccbb036ae5a38b3517da7e249d2e02df829ae9dd27567f7dc4266041953d3aae975b574b527e5d86af020264df02ea7d3602bfe3cb3ba7d37781f03af2e36cd0d2d7ebb9772a36473371a928889e23627a1ff67d3b36811aac4fed8054173d37d270f08d78d244e7cd5bb39a061eb051aaa065e34ad5"]}]}, 0x298}, 0x1, 0x0, 0x0, 0x20040992}, 0x2000000c) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000640)={0x4a}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0xa, 0x7fffffdb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x1}, 0x50) 494.285181ms ago: executing program 3 (id=381): mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008080}, 0x18015) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) recvmsg(0xffffffffffffffff, 0x0, 0x10060) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind(0xffffffffffffffff, &(0x7f0000000240)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1\x00', 0x2) (fail_nth: 5) 493.925483ms ago: executing program 0 (id=382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000003000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000e8ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1011}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400017c0000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) socket$inet6(0xa, 0x6, 0x0) 244.228047ms ago: executing program 3 (id=383): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf672000000000001602000000b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48) 139.907568ms ago: executing program 0 (id=384): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000340)={[{@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}], [], 0x2c}) r0 = socket(0x10, 0x3, 0x0) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_DST_IPV4={0x8, 0x2, @loopback}]}, 0x24}}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1}}, 0x7) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x18, 0x52, 0x201, 0x2, 0x0, {0x1c}, [@generic="de"]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x40044c4) 138.779165ms ago: executing program 3 (id=385): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0xa, 0x7) connect$inet6(r2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x9, 0xc8, @none, 0x1, 0x6, 0x8, 0x3, 0x9, 0x5}}}, 0x14) memfd_create(0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) 655.471µs ago: executing program 0 (id=386): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000440)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x240d4f6463445852, 0x10, 0x9, "ad862c930080149989fc8d503dc3bd3fe37d58128b9ad0099cebdc25f5ab60c9e6d66581000000000000ddffffff000000000000000000000000e800", "32d8cc964e3e2874df2cfc06c89f3d9e234b305d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a4b8aed1ef800", "715200601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0x9]}}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000), 0x4) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='1', 0x1) (fail_nth: 6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='1', 0x1) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000380)={0x0, {}, 0x2000000000000000, {}, 0xdb03, 0x9, 0xc, 0x4, "edf0c98dd46e2f433e157c11b61fd76e031f98e8aad01ccba893d22c6ca42d0e22404919797d9893631da439ace17384471651e41baa61a7fc47257802d43f31", "feb09f79899ce11f40e6932779d1f45df1ae19f87439dac78295c165d48aff1f", [0x3, 0x6]}) 0s ago: executing program 3 (id=387): syz_emit_ethernet(0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2006c21001122334455000a42420300010102"], 0x0) kernel console output (not intermixed with test programs): length: 249 > 2 [ 47.794340][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.797548][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.800850][ T5727] bridge_slave_0: entered allmulticast mode [ 47.803941][ T5727] bridge_slave_0: entered promiscuous mode [ 47.842543][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.845743][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.848702][ T5727] bridge_slave_1: entered allmulticast mode [ 47.852394][ T5727] bridge_slave_1: entered promiscuous mode [ 47.925974][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.929751][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.932687][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.935129][ T5735] bridge_slave_0: entered allmulticast mode [ 47.937771][ T5735] bridge_slave_0: entered promiscuous mode [ 47.941162][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.943495][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.946006][ T5735] bridge_slave_1: entered allmulticast mode [ 47.948647][ T5735] bridge_slave_1: entered promiscuous mode [ 47.970214][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.980252][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.983532][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.985920][ T5731] bridge_slave_0: entered allmulticast mode [ 47.989696][ T5731] bridge_slave_0: entered promiscuous mode [ 47.996504][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.999521][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.002415][ T5731] bridge_slave_1: entered allmulticast mode [ 48.008999][ T5731] bridge_slave_1: entered promiscuous mode [ 48.038038][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.040653][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.043056][ T5737] bridge_slave_0: entered allmulticast mode [ 48.045966][ T5737] bridge_slave_0: entered promiscuous mode [ 48.056122][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.064751][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.066955][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.069007][ T5737] bridge_slave_1: entered allmulticast mode [ 48.071734][ T5737] bridge_slave_1: entered promiscuous mode [ 48.075439][ T5727] team0: Port device team_slave_0 added [ 48.078320][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.084315][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.094625][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.098670][ T5727] team0: Port device team_slave_1 added [ 48.128619][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.141739][ T5735] team0: Port device team_slave_0 added [ 48.155479][ T5735] team0: Port device team_slave_1 added [ 48.158542][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.177308][ T5731] team0: Port device team_slave_0 added [ 48.187172][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.189414][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.197830][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.209204][ T5731] team0: Port device team_slave_1 added [ 48.229382][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.232754][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.240970][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.247528][ T5737] team0: Port device team_slave_0 added [ 48.250525][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.253485][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.264220][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.269486][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.271760][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.279931][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.289440][ T5737] team0: Port device team_slave_1 added [ 48.291864][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.294829][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.305642][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.310963][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.313603][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.323433][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.372559][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.375898][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.386393][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.396832][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.399597][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.410362][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.418734][ T5727] hsr_slave_0: entered promiscuous mode [ 48.421737][ T5727] hsr_slave_1: entered promiscuous mode [ 48.449661][ T5735] hsr_slave_0: entered promiscuous mode [ 48.452739][ T5735] hsr_slave_1: entered promiscuous mode [ 48.455084][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 48.457242][ T5735] Cannot create hsr debugfs directory [ 48.472629][ T5731] hsr_slave_0: entered promiscuous mode [ 48.475201][ T5731] hsr_slave_1: entered promiscuous mode [ 48.477436][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 48.479475][ T5731] Cannot create hsr debugfs directory [ 48.535852][ T5737] hsr_slave_0: entered promiscuous mode [ 48.538117][ T5737] hsr_slave_1: entered promiscuous mode [ 48.540131][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 48.541898][ T5737] Cannot create hsr debugfs directory [ 48.820074][ T5727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.829856][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.833886][ T5727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.841227][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.847221][ T5727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.854630][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.865112][ T5727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.872074][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.900177][ T5731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.904637][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.908742][ T5731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.915952][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.918787][ T5731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.923720][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.926506][ T5731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.931533][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.990157][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.994262][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.997952][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.001908][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.005927][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.011804][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.015377][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.019367][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.074822][ T5735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.081337][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.086657][ T5735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.091691][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.098979][ T5735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.102764][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.105536][ T5735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.109673][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.138782][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.168648][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.177450][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.185143][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.190248][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.193281][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.203973][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.206270][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.232358][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.235894][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.246391][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.248635][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.262162][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.264483][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.273949][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.276930][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.282638][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.285564][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.316070][ T5733] Bluetooth: hci1: command tx timeout [ 49.325183][ T5733] Bluetooth: hci2: command tx timeout [ 49.325352][ T5739] Bluetooth: hci3: command tx timeout [ 49.325377][ T5089] Bluetooth: hci0: command tx timeout [ 49.338340][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.383822][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.402302][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.405378][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.424904][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.427981][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.653831][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.689998][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.701579][ T5737] veth0_vlan: entered promiscuous mode [ 49.712724][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.720449][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.728652][ T5737] veth1_vlan: entered promiscuous mode [ 49.749114][ T5727] veth0_vlan: entered promiscuous mode [ 49.771012][ T5737] veth0_macvtap: entered promiscuous mode [ 49.776191][ T5727] veth1_vlan: entered promiscuous mode [ 49.786174][ T5737] veth1_macvtap: entered promiscuous mode [ 49.799556][ T5731] veth0_vlan: entered promiscuous mode [ 49.818550][ T5735] veth0_vlan: entered promiscuous mode [ 49.821840][ T5731] veth1_vlan: entered promiscuous mode [ 49.831358][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.836969][ T5735] veth1_vlan: entered promiscuous mode [ 49.845404][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.868783][ T5727] veth0_macvtap: entered promiscuous mode [ 49.885612][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.891346][ T5727] veth1_macvtap: entered promiscuous mode [ 49.904301][ T5731] veth0_macvtap: entered promiscuous mode [ 49.926258][ T5731] veth1_macvtap: entered promiscuous mode [ 49.930454][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.933858][ T5735] veth0_macvtap: entered promiscuous mode [ 49.934222][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.939862][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.946917][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.962992][ T5735] veth1_macvtap: entered promiscuous mode [ 49.968416][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.975740][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.991938][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.995508][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.008396][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.018781][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.038654][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.053414][ T5737] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.076013][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.077770][ T5737] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.078510][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.088249][ T5737] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.093555][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.096348][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.100838][ T5737] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.137117][ T5737] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.167278][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.176137][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.213162][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.217828][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.236357][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.241884][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.265265][ T5806] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.270916][ T5806] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.284290][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.293167][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.300291][ T5880] netlink: 774 bytes leftover after parsing attributes in process `syz.0.1'. [ 50.303361][ T5880] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1'. [ 50.311757][ T5880] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1'. [ 50.326204][ T5806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.333686][ T5806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.356408][ T5806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.362896][ T5806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.400208][ T5883] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 50.408710][ T5883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 50.455328][ T5806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.458819][ T5806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.462185][ T5806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.467072][ T5806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.481423][ T5888] syzkaller0: entered promiscuous mode [ 50.483633][ T5888] syzkaller0: entered allmulticast mode [ 50.505917][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.508230][ T5888] process 'syz.1.2' launched '/dev/fd/4' with NULL argv: empty string added [ 50.510357][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.517708][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.520637][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.562434][ T5893] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 50.592040][ T5896] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 50.600358][ T5896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6'. [ 50.735198][ T5903] netlink: 774 bytes leftover after parsing attributes in process `syz.0.7'. [ 50.738282][ T5903] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7'. [ 51.044844][ T5912] tipc: Started in network mode [ 51.048877][ T5912] tipc: Node identity , cluster identity 4711 [ 51.051401][ T5912] tipc: Failed to obtain node identity [ 51.053240][ T5912] tipc: Enabling of bearer rejected, failed to enable media [ 51.103156][ T5739] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 51.395212][ T5739] Bluetooth: hci0: command tx timeout [ 51.395529][ T5089] Bluetooth: hci3: command tx timeout [ 51.397229][ T5739] Bluetooth: hci1: command tx timeout [ 51.401006][ T5733] Bluetooth: hci2: command tx timeout [ 51.438564][ T5927] netlink: 774 bytes leftover after parsing attributes in process `syz.0.11'. [ 51.441353][ T5927] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11'. [ 51.448874][ T5927] netlink: 512 bytes leftover after parsing attributes in process `syz.0.11'. [ 52.740314][ T5947] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 52.798374][ T5947] syzkaller0: entered promiscuous mode [ 52.800137][ T5947] syzkaller0: entered allmulticast mode [ 52.915597][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.918567][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.956476][ T5956] Console: switching to colour dummy device 80x25 [ 53.062899][ T5960] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 53.070817][ T5958] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 53.100853][ T5958] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 53.103316][ T5958] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 53.109766][ T5958] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 53.113651][ T5958] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 53.124364][ T5960] syzkaller0: entered promiscuous mode [ 53.132666][ T5960] syzkaller0: entered allmulticast mode [ 53.133761][ T5958] pci 0000:00:01.0: Adding to iommu group 1 [ 53.144361][ T5958] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 53.146501][ T5958] pci 0000:00:01.0: vgaarb: bridge control possible [ 53.148552][ T5958] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 53.163404][ T5958] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 53.174764][ T5958] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 53.182612][ T5958] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 53.196537][ T5958] [drm] Found bochs VGA, ID 0xb0c5. [ 53.198803][ T5958] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 53.218366][ T5958] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 53.348586][ T5958] Console: switching to colour frame buffer device 160x50 [ 53.405473][ T5958] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 53.475670][ T5089] Bluetooth: hci3: command tx timeout [ 53.476446][ T5733] Bluetooth: hci1: command tx timeout [ 53.477858][ T5736] Bluetooth: hci2: command tx timeout [ 53.480359][ T5733] Bluetooth: hci0: command tx timeout [ 54.012381][ T5975] kernel profiling enabled (shift: 7) [ 54.068805][ T5975] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.254580][ T5988] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 54.316922][ T5988] tipc: Started in network mode [ 54.321997][ T5988] tipc: Node identity , cluster identity 4711 [ 54.325626][ T5988] tipc: Failed to obtain node identity [ 54.327728][ T5988] tipc: Enabling of bearer rejected, failed to enable media [ 54.333384][ T5988] syzkaller0: entered promiscuous mode [ 54.337236][ T5988] syzkaller0: entered allmulticast mode [ 54.411144][ T5990] kvm: pic: non byte write [ 54.414757][ T5990] kvm: pic: non byte write [ 54.417227][ T5993] syzkaller0: left promiscuous mode [ 54.420017][ T5990] kvm: pic: non byte write [ 54.421628][ T5993] syzkaller0: left allmulticast mode [ 54.425806][ T5990] kvm: pic: non byte write [ 54.428722][ T5990] kvm: pic: non byte write [ 54.430909][ T5990] kvm: pic: non byte write [ 54.433231][ T5990] kvm: pic: non byte write [ 54.438155][ T5990] kvm: pic: non byte write [ 54.440459][ T5990] kvm: pic: non byte write [ 54.442780][ T5990] kvm: pic: non byte write [ 54.882666][ T6010] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 55.488756][ T6033] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 55.501840][ T6033] syzkaller0: entered promiscuous mode [ 55.504244][ T6033] syzkaller0: entered allmulticast mode [ 55.555769][ T5733] Bluetooth: hci0: command tx timeout [ 55.556301][ T5736] Bluetooth: hci2: command tx timeout [ 55.557892][ T5733] Bluetooth: hci1: command tx timeout [ 55.559710][ T5089] Bluetooth: hci3: command tx timeout [ 55.647696][ T6045] __nla_validate_parse: 7 callbacks suppressed [ 55.647710][ T6045] netlink: 774 bytes leftover after parsing attributes in process `syz.0.37'. [ 55.652644][ T6045] netlink: 52 bytes leftover after parsing attributes in process `syz.0.37'. [ 55.660399][ T6045] netlink: 512 bytes leftover after parsing attributes in process `syz.0.37'. [ 56.066584][ T6054] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 56.071684][ T6054] netlink: 36 bytes leftover after parsing attributes in process `syz.1.38'. [ 56.352002][ T6061] netlink: 152 bytes leftover after parsing attributes in process `syz.3.40'. [ 56.975083][ T5813] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.126748][ T5813] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 57.133386][ T5813] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 57.139091][ T5813] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 57.146672][ T5813] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.149283][ T5813] usb 8-1: Product: syz [ 57.150648][ T5813] usb 8-1: Manufacturer: syz [ 57.152172][ T5813] usb 8-1: SerialNumber: syz [ 57.163914][ T5813] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 57.171607][ T5813] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 57.178005][ T5813] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 57.305121][ T5838] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.478235][ T5838] usb 5-1: unable to get BOS descriptor or descriptor too short [ 57.481062][ T5838] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 57.486547][ T5838] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 57.490097][ T5838] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 57.493124][ T5838] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 57.496375][ T5838] usb 5-1: config 129 has no interface number 0 [ 57.498487][ T5838] usb 5-1: config 129 has no interface number 1 [ 57.500705][ T5838] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 57.505132][ T5838] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 57.509407][ T5838] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 57.515340][ T5838] usb 5-1: config 129 interface 135 has no altsetting 0 [ 57.518252][ T5838] usb 5-1: config 129 interface 5 has no altsetting 0 [ 57.527775][ T5838] usb 5-1: string descriptor 0 read error: -22 [ 57.530509][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.552441][ T5838] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 57.555462][ T5838] usb 5-1: MIDIStreaming interface descriptor not found [ 57.997444][ T6089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.47'. [ 60.071444][ T34] usb 5-1: USB disconnect, device number 2 [ 60.127992][ T6067] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 60.135909][ T40] usb 8-1: USB disconnect, device number 2 [ 60.148185][ T40] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 60.157368][ T40] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 60.163561][ T40] ti_usb_3410_5052 8-1:2.0: device disconnected [ 60.443551][ T6123] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 60.615058][ T6126] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 60.640719][ T6126] syzkaller0: entered promiscuous mode [ 60.643178][ T6126] syzkaller0: entered allmulticast mode [ 61.451920][ T6137] input: syz1 as /devices/virtual/input/input5 [ 61.564054][ T6139] Zero length message leads to an empty skb [ 61.566675][ T6137] tap0: tun_chr_ioctl cmd 1074025677 [ 61.568963][ T6137] tap0: Linktype set failed because interface is up [ 61.589076][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 61.664094][ T6139] team0: Port device team_slave_0 removed [ 62.044802][ T6147] netlink: 'syz.1.57': attribute type 4 has an invalid length. [ 62.859680][ T6156] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 62.865147][ T6156] batman_adv: batadv0: Adding interface: gretap1 [ 62.867437][ T6156] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.876269][ T6156] batman_adv: batadv0: Interface activated: gretap1 [ 63.521578][ T6168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.66'. [ 64.003141][ T6178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.68'. [ 64.066346][ T6180] netlink: 16 bytes leftover after parsing attributes in process `syz.3.69'. [ 64.353157][ T6186] netlink: 774 bytes leftover after parsing attributes in process `syz.1.71'. [ 64.356426][ T6186] netlink: 52 bytes leftover after parsing attributes in process `syz.1.71'. [ 64.364159][ T6186] netlink: 512 bytes leftover after parsing attributes in process `syz.1.71'. [ 64.435186][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.577690][ T6191] loop0: detected capacity change from 0 to 128 [ 64.585941][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 64.590339][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 64.594407][ T24] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 64.601970][ T24] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 64.605489][ T24] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 64.608187][ T24] usb 5-1: config 14 has no interface number 0 [ 64.610428][ T24] usb 5-1: config 14 has no interface number 1 [ 64.612807][ T24] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 64.616470][ T24] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 64.620590][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 64.627283][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 64.644384][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 64.657943][ T24] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.662332][ T6193] 9pnet_virtio: no channels available for device 127.0.0.1 [ 64.662686][ T24] usb 5-1: config 14 interface 57 has no altsetting 0 [ 64.670120][ T24] usb 5-1: config 14 interface 228 has no altsetting 0 [ 64.679832][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.685178][ T24] usb 5-1: Product: 䮓歷ꢨë‰ç²±á¤ºê‰êŠ±æˆ”è·æ…‰è¶¢å£°î¨¼âª©ã©¼á„“ì´©ë¼‰è„†ë³­î½¦å¯§î³ [ 64.688134][ T6193] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 64.695059][ T24] usb 5-1: Manufacturer: à¡  [ 64.697861][ T24] usb 5-1: SerialNumber: syz [ 64.739784][ T6196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.74'. [ 65.125963][ T24] legousbtower 5-1:14.57: interrupt endpoints not found [ 65.145495][ T6202] netlink: 'syz.2.75': attribute type 4 has an invalid length. [ 65.544285][ T24] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 178.253 build 64441 [ 65.577858][ T24] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 65.713448][ T6207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.77'. [ 66.581019][ T6229] capability: warning: `syz.0.70' uses deprecated v2 capabilities in a way that may be insecure [ 67.292482][ T6237] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 67.335740][ T6237] syzkaller0: entered promiscuous mode [ 67.337563][ T6237] syzkaller0: entered allmulticast mode [ 67.739568][ C3] usb 5-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 67.752678][ T34] usb 5-1: USB disconnect, device number 3 [ 67.808750][ T34] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 67.959181][ T6253] netlink: 774 bytes leftover after parsing attributes in process `syz.3.86'. [ 67.963067][ T6253] netlink: 52 bytes leftover after parsing attributes in process `syz.3.86'. [ 67.972256][ T6253] netlink: 512 bytes leftover after parsing attributes in process `syz.3.86'. [ 68.299092][ T6259] tipc: Enabling of bearer rejected, failed to enable media [ 69.130808][ T6278] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 69.156082][ T6278] syzkaller0: entered promiscuous mode [ 69.158539][ T6278] syzkaller0: entered allmulticast mode [ 69.316277][ T6282] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 69.414510][ T6289] tipc: Started in network mode [ 69.419429][ T6289] tipc: Node identity , cluster identity 4711 [ 69.422257][ T6289] tipc: Failed to obtain node identity [ 69.433509][ T6289] tipc: Enabling of bearer rejected, failed to enable media [ 69.520327][ T5089] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 70.291624][ T6298] tipc: Enabling of bearer rejected, failed to enable media [ 70.475719][ T6305] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 70.505104][ T6305] syzkaller0: entered promiscuous mode [ 70.506886][ T6305] syzkaller0: entered allmulticast mode [ 70.931404][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.935397][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.877446][ T6324] warning: `syz.3.104' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.127353][ T6329] ======================================================= [ 72.127353][ T6329] WARNING: The mand mount option has been deprecated and [ 72.127353][ T6329] and is ignored by this kernel. Remove the mand [ 72.127353][ T6329] option from the mount to silence this warning. [ 72.127353][ T6329] ======================================================= [ 72.218556][ T42] audit: type=1804 audit(1786688536.631:2): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.105" name="/newroot/30/file1/file0" dev="9p" ino=77886011 res=1 errno=0 [ 72.398498][ T6338] tipc: Enabling of bearer rejected, failed to enable media [ 72.845278][ T48] rpcbind: server 127.0.0.1 not responding, timed out [ 73.065971][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 73.228873][ T24] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 73.234904][ T24] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 73.238948][ T24] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 73.243102][ T24] usb 5-1: config 0 has no interface number 0 [ 73.245895][ T24] usb 5-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 73.250349][ T24] usb 5-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 73.256207][ T24] usb 5-1: config 0 interface 143 has no altsetting 0 [ 73.260972][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.264284][ T24] usb 5-1: Product: syz [ 73.266417][ T24] usb 5-1: Manufacturer: syz [ 73.268293][ T24] usb 5-1: SerialNumber: syz [ 73.277646][ T24] usb 5-1: config 0 descriptor?? [ 73.336333][ T6353] FAULT_INJECTION: forcing a failure. [ 73.336333][ T6353] name failslab, interval 1, probability 0, space 0, times 1 [ 73.341999][ T6353] CPU: 3 UID: 0 PID: 6353 Comm: syz.3.111 Not tainted syzkaller #0 PREEMPT(full) [ 73.342022][ T6353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.342033][ T6353] Call Trace: [ 73.342056][ T6353] [ 73.342063][ T6353] dump_stack_lvl+0x100/0x190 [ 73.342215][ T6353] should_fail_ex.cold+0x5/0xa [ 73.342253][ T6353] should_failslab+0xc2/0x120 [ 73.342297][ T6353] __kmalloc_cache_noprof+0x91/0x6c0 [ 73.342327][ T6353] ? snd_seq_create_port+0xcf/0x590 [ 73.342423][ T6353] snd_seq_create_port+0xcf/0x590 [ 73.342443][ T6353] snd_seq_ioctl_create_port+0x250/0x9e0 [ 73.342468][ T6353] ? __pfx_snd_seq_ioctl_create_port+0x10/0x10 [ 73.342494][ T6353] ? __pfx_sprintf+0x10/0x10 [ 73.342581][ T6353] ? do_dentry_open+0x6ab/0x14d0 [ 73.342611][ T6353] ? do_sys_openat2+0x10f/0x1e0 [ 73.342643][ T6353] call_seq_client_ctl+0xa3/0x130 [ 73.342673][ T6353] snd_seq_kernel_client_ctl+0x77/0xd0 [ 73.342699][ T6353] create_port+0x19b/0x270 [ 73.342717][ T6353] ? __pfx_create_port+0x10/0x10 [ 73.342739][ T6353] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 73.342759][ T6353] ? __pfx_free_devinfo+0x10/0x10 [ 73.342790][ T6353] ? find_held_lock+0x2b/0x80 [ 73.342833][ T6353] ? mark_held_locks+0x40/0x70 [ 73.342865][ T6353] snd_seq_oss_open+0x292/0xa10 [ 73.342887][ T6353] odev_open+0x6f/0x90 [ 73.342913][ T6353] ? __pfx_odev_open+0x10/0x10 [ 73.342938][ T6353] soundcore_open+0x2e3/0x5a0 [ 73.342986][ T6353] ? __pfx_soundcore_open+0x10/0x10 [ 73.343012][ T6353] chrdev_open+0x234/0x6a0 [ 73.343030][ T6353] ? __pfx_apparmor_file_open+0x10/0x10 [ 73.343093][ T6353] ? __pfx_chrdev_open+0x10/0x10 [ 73.343114][ T6353] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 73.343156][ T6353] do_dentry_open+0x6ab/0x14d0 [ 73.343175][ T6353] ? __pfx_chrdev_open+0x10/0x10 [ 73.343200][ T6353] vfs_open+0x82/0x3f0 [ 73.343227][ T6353] path_openat+0x2873/0x4280 [ 73.343266][ T6353] ? __pfx_path_openat+0x10/0x10 [ 73.343292][ T6353] do_file_open+0x20e/0x430 [ 73.343311][ T6353] ? __lock_acquire+0x49f/0x1a40 [ 73.343330][ T6353] ? __pfx_do_file_open+0x10/0x10 [ 73.343366][ T6353] ? _raw_spin_unlock+0x28/0x50 [ 73.343387][ T6353] ? alloc_fd+0x471/0x7a0 [ 73.343415][ T6353] do_sys_openat2+0x10f/0x1e0 [ 73.343439][ T6353] ? __pfx_do_sys_openat2+0x10/0x10 [ 73.343469][ T6353] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 73.343501][ T6353] __ia32_compat_sys_openat+0x12d/0x210 [ 73.343527][ T6353] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 73.343551][ T6353] ? fput+0x79/0x100 [ 73.343570][ T6353] ? ksys_write+0x1ac/0x250 [ 73.343585][ T6353] ? __pfx_ksys_write+0x10/0x10 [ 73.343607][ T6353] __do_fast_syscall_32+0xe7/0x970 [ 73.343640][ T6353] ? lockdep_hardirqs_on+0x78/0x100 [ 73.343667][ T6353] do_fast_syscall_32+0x32/0x70 [ 73.343695][ T6353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.343718][ T6353] RIP: 0023:0xf709efec [ 73.343743][ T6353] Code: Unable to access opcode bytes at 0xf709efc2. [ 73.343771][ T6353] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 73.343789][ T6353] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000300 [ 73.343800][ T6353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.343809][ T6353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.343820][ T6353] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 73.343829][ T6353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.343854][ T6353] [ 73.343863][ T6353] ALSA: seq_oss: can't create port [ 73.503923][ T24] usb 5-1: USB disconnect, device number 4 [ 73.520540][ T6353] mmap: syz.3.111 (6353) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.015455][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 74.045261][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 74.175074][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 74.197538][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 74.201656][ T10] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 74.205334][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 74.207815][ T24] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 74.211772][ T24] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 74.214429][ T24] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 74.218056][ T24] usb 5-1: config 0 has no interface number 0 [ 74.220104][ T24] usb 5-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 74.223753][ T24] usb 5-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 74.224073][ T10] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 74.228703][ T24] usb 5-1: config 0 interface 143 has no altsetting 0 [ 74.235065][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.235606][ T10] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 74.237785][ T24] usb 5-1: Product: syz [ 74.237795][ T24] usb 5-1: Manufacturer: syz [ 74.243499][ T24] usb 5-1: SerialNumber: syz [ 74.249016][ T24] usb 5-1: config 0 descriptor?? [ 74.249700][ T10] usb 7-1: config 14 has no interface number 0 [ 74.256865][ T10] usb 7-1: config 14 has no interface number 1 [ 74.259262][ T10] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 74.268816][ T10] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 74.274600][ T10] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 74.282758][ T10] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 74.288988][ T10] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 74.296531][ T10] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.305051][ T10] usb 7-1: config 14 interface 57 has no altsetting 0 [ 74.309423][ T10] usb 7-1: config 14 interface 228 has no altsetting 0 [ 74.325096][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.328627][ T10] usb 7-1: Product: 䮓歷ꢨë‰ç²±á¤ºê‰êŠ±æˆ”è·æ…‰è¶¢å£°î¨¼âª©ã©¼á„“ì´©ë¼‰è„†ë³­î½¦å¯§î³ [ 74.331971][ T10] usb 7-1: Manufacturer: à¡  [ 74.335180][ T10] usb 7-1: SerialNumber: syz [ 74.459572][ T5838] IPVS: starting estimator thread 0... [ 74.477722][ T6347] fuse: fd is not a fuse device [ 74.493378][ T24] usb 5-1: USB disconnect, device number 5 [ 74.555292][ T6368] IPVS: using max 45 ests per chain, 108000 per kthread [ 74.804717][ T6370] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 74.812172][ T10] legousbtower 7-1:14.57: interrupt endpoints not found [ 74.824653][ T6370] tipc: Started in network mode [ 74.826675][ T6370] tipc: Node identity , cluster identity 4711 [ 74.829132][ T6370] tipc: Failed to obtain node identity [ 74.831621][ T6370] tipc: Enabling of bearer rejected, failed to enable media [ 74.835962][ T6370] syzkaller0: entered promiscuous mode [ 74.838236][ T6370] syzkaller0: entered allmulticast mode [ 74.905257][ T6374] syzkaller0: left promiscuous mode [ 74.910404][ T6374] syzkaller0: left allmulticast mode [ 75.257441][ T10] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 178.253 build 64441 [ 75.264328][ T10] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 76.388004][ T6421] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 76.404763][ T6421] syzkaller0: entered promiscuous mode [ 76.408054][ T6421] syzkaller0: entered allmulticast mode [ 76.684884][ T6425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.697091][ T6425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.014999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.123626][ T6439] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 77.146449][ T6439] tipc: Started in network mode [ 77.148075][ T6439] tipc: Node identity , cluster identity 4711 [ 77.150224][ T6439] tipc: Failed to obtain node identity [ 77.152169][ T6439] tipc: Enabling of bearer rejected, failed to enable media [ 77.156718][ T6439] syzkaller0: entered promiscuous mode [ 77.158558][ T6439] syzkaller0: entered allmulticast mode [ 77.225302][ T6441] syzkaller0: left promiscuous mode [ 77.227409][ T6441] syzkaller0: left allmulticast mode [ 77.255016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.295018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 77.305029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.397543][ C1] usb 7-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 77.402391][ T24] usb 7-1: USB disconnect, device number 2 [ 77.450609][ T24] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 77.537575][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'. [ 77.541689][ T6451] bridge_slave_1: left allmulticast mode [ 77.544107][ T6451] bridge_slave_1: left promiscuous mode [ 77.548273][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.575510][ T6451] bridge_slave_0: left allmulticast mode [ 77.577563][ T6451] bridge_slave_0: left promiscuous mode [ 77.581444][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.848034][ T6482] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 78.900458][ T6482] syzkaller0: entered promiscuous mode [ 78.909913][ T6482] syzkaller0: entered allmulticast mode [ 79.153199][ T6493] autofs: Unknown parameter '*û­ª³cŸ<¿©êÐ' [ 79.157595][ T6493] input: syz0 as /devices/virtual/input/input6 [ 79.421001][ T6502] netlink: 104 bytes leftover after parsing attributes in process `syz.3.138'. [ 79.434735][ T6502] netlink: 104 bytes leftover after parsing attributes in process `syz.3.138'. [ 79.541646][ T6496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.136'. [ 79.654197][ T6512] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 79.689856][ T6512] tipc: Started in network mode [ 79.692010][ T6512] tipc: Node identity , cluster identity 4711 [ 79.694161][ T6512] tipc: Failed to obtain node identity [ 79.697103][ T6512] tipc: Enabling of bearer rejected, failed to enable media [ 79.700740][ T6512] syzkaller0: entered promiscuous mode [ 79.702492][ T6512] syzkaller0: entered allmulticast mode [ 79.760234][ T6514] syzkaller0: left promiscuous mode [ 79.763011][ T6514] syzkaller0: left allmulticast mode [ 81.192938][ T1340] cfg80211: failed to load regulatory.db [ 81.197250][ T6560] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 81.237908][ T6560] syzkaller0: entered promiscuous mode [ 81.240094][ T6560] syzkaller0: entered allmulticast mode [ 81.377110][ T6571] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 81.402024][ T6571] tipc: Started in network mode [ 81.404079][ T6571] tipc: Node identity , cluster identity 4711 [ 81.409473][ T6571] tipc: Failed to obtain node identity [ 81.411878][ T6571] tipc: Enabling of bearer rejected, failed to enable media [ 81.427325][ T6571] syzkaller0: entered promiscuous mode [ 81.430513][ T6571] syzkaller0: entered allmulticast mode [ 81.490681][ T6576] syzkaller0: left promiscuous mode [ 81.492455][ T6576] syzkaller0: left allmulticast mode [ 81.691607][ T6586] pim6reg99999999: entered allmulticast mode [ 82.617715][ T6620] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 82.662173][ T6620] Error validating options; rc = [-22] [ 85.161101][ T6667] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 85.171863][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 85.175687][ T6668] bridge_slave_1: left allmulticast mode [ 85.177777][ T6668] bridge_slave_1: left promiscuous mode [ 85.180948][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.204650][ T6668] bridge_slave_0: left allmulticast mode [ 85.206636][ T6668] bridge_slave_0: left promiscuous mode [ 85.208895][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.305276][ T6667] tipc: Started in network mode [ 85.307262][ T6667] tipc: Node identity , cluster identity 4711 [ 85.317046][ T6667] tipc: Failed to obtain node identity [ 85.319306][ T6667] tipc: Enabling of bearer rejected, failed to enable media [ 85.326092][ T6667] syzkaller0: entered promiscuous mode [ 85.328764][ T6667] syzkaller0: entered allmulticast mode [ 85.408944][ T6670] syzkaller0: left promiscuous mode [ 85.416629][ T6670] syzkaller0: left allmulticast mode [ 86.170666][ T6701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.176'. [ 86.427857][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 86.441422][ T6720] sctp: [Deprecated]: syz.2.179 (pid 6720) Use of int in max_burst socket option. [ 86.441422][ T6720] Use struct sctp_assoc_value instead [ 87.143517][ T6739] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 87.231261][ T6739] wg2 speed is unknown, defaulting to 1000 [ 87.240710][ T6739] wg2 speed is unknown, defaulting to 1000 [ 87.250152][ T6739] wg2 speed is unknown, defaulting to 1000 [ 87.560186][ T5816] wg2 speed is unknown, defaulting to 1000 [ 87.580591][ T6739] infiniband syz0: set active [ 87.583089][ T6739] infiniband syz0: added wg2 [ 87.630800][ T6739] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 87.644078][ T6739] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 87.654378][ T6739] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 87.727752][ T6739] RDS/IB: syz0: added [ 87.738302][ T6739] smc: adding ib device syz0 with port count 1 [ 87.748516][ T6739] smc: ib device syz0 port 1 has no pnetid [ 87.763851][ T34] wg2 speed is unknown, defaulting to 1000 [ 87.783330][ T6739] wg2 speed is unknown, defaulting to 1000 [ 88.162794][ T6739] wg2 speed is unknown, defaulting to 1000 [ 88.558024][ T6739] wg2 speed is unknown, defaulting to 1000 [ 88.631208][ T6760] FAULT_INJECTION: forcing a failure. [ 88.631208][ T6760] name failslab, interval 1, probability 0, space 0, times 0 [ 88.647520][ T6760] CPU: 1 UID: 0 PID: 6760 Comm: syz.2.187 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.647548][ T6760] Tainted: [L]=SOFTLOCKUP [ 88.647554][ T6760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.647563][ T6760] Call Trace: [ 88.647569][ T6760] [ 88.647576][ T6760] dump_stack_lvl+0x100/0x190 [ 88.647602][ T6760] should_fail_ex.cold+0x5/0xa [ 88.647621][ T6760] should_failslab+0xc2/0x120 [ 88.647644][ T6760] kmem_cache_alloc_noprof+0x91/0x6a0 [ 88.647665][ T6760] ? do_getname+0x35/0x390 [ 88.647690][ T6760] do_getname+0x35/0x390 [ 88.647711][ T6760] do_sys_openat2+0xc7/0x1e0 [ 88.647738][ T6760] ? __pfx_do_sys_openat2+0x10/0x10 [ 88.647759][ T6760] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 88.647787][ T6760] ? __fget_files+0x21f/0x3d0 [ 88.647806][ T6760] __ia32_compat_sys_openat+0x12d/0x210 [ 88.647829][ T6760] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 88.647850][ T6760] ? ksys_write+0x1ac/0x250 [ 88.647873][ T6760] do_int80_emulation+0x14b/0x720 [ 88.647900][ T6760] asm_int80_emulation+0x1a/0x20 [ 88.647917][ T6760] RIP: 0023:0xf71574eb [ 88.647930][ T6760] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 88.647944][ T6760] RSP: 002b:00000000f53d403c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 88.647961][ T6760] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53d4100 [ 88.647970][ T6760] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.647978][ T6760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.647987][ T6760] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 88.647996][ T6760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.648015][ T6760] [ 88.865031][ T6760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.997137][ T6764] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 89.037032][ T6764] tipc: Started in network mode [ 89.044576][ T6764] tipc: Node identity , cluster identity 4711 [ 89.050525][ T6764] tipc: Failed to obtain node identity [ 89.056768][ T6764] tipc: Enabling of bearer rejected, failed to enable media [ 89.066477][ T6764] syzkaller0: entered promiscuous mode [ 89.072516][ T6764] syzkaller0: entered allmulticast mode [ 89.136229][ T6766] syzkaller0: left promiscuous mode [ 89.140576][ T6766] syzkaller0: left allmulticast mode [ 89.202140][ T6739] wg2 speed is unknown, defaulting to 1000 [ 89.554703][ T6783] FAULT_INJECTION: forcing a failure. [ 89.554703][ T6783] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.565163][ T6783] CPU: 1 UID: 0 PID: 6783 Comm: syz.3.191 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.565207][ T6783] Tainted: [L]=SOFTLOCKUP [ 89.565213][ T6783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.565229][ T6783] Call Trace: [ 89.565235][ T6783] [ 89.565241][ T6783] dump_stack_lvl+0x100/0x190 [ 89.565268][ T6783] should_fail_ex.cold+0x5/0xa [ 89.565287][ T6783] _copy_from_user+0x2e/0xd0 [ 89.565337][ T6783] __sys_bpf+0x2f5/0x4e80 [ 89.565372][ T6783] ? __pfx___sys_bpf+0x10/0x10 [ 89.565392][ T6783] ? find_held_lock+0x2b/0x80 [ 89.565412][ T6783] ? get_pid_task+0xfc/0x250 [ 89.565442][ T6783] ? get_pid_task+0xfc/0x250 [ 89.565468][ T6783] ? proc_fail_nth_write+0x9f/0x220 [ 89.565501][ T6783] ? find_held_lock+0x2b/0x80 [ 89.565525][ T6783] ? rcu_read_lock_any_held+0x6a/0xa0 [ 89.565557][ T6783] ? find_held_lock+0x2b/0x80 [ 89.565576][ T6783] ? ksys_write+0x190/0x250 [ 89.565591][ T6783] ? ksys_write+0x190/0x250 [ 89.565622][ T6783] ? fput+0x79/0x100 [ 89.565645][ T6783] ? __ia32_sys_bpf+0xcc/0x170 [ 89.565662][ T6783] __ia32_sys_bpf+0xcc/0x170 [ 89.565680][ T6783] ? __do_fast_syscall_32+0x98/0x970 [ 89.565708][ T6783] __do_fast_syscall_32+0xe7/0x970 [ 89.565733][ T6783] ? lockdep_hardirqs_on+0x78/0x100 [ 89.565758][ T6783] do_fast_syscall_32+0x32/0x70 [ 89.565783][ T6783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.565803][ T6783] RIP: 0023:0xf709efec [ 89.565826][ T6783] Code: Unable to access opcode bytes at 0xf709efc2. [ 89.565833][ T6783] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 89.565850][ T6783] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800016c0 [ 89.565859][ T6783] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.565868][ T6783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.565878][ T6783] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.565886][ T6783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.565907][ T6783] [ 89.816631][ T6787] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 89.892140][ T6788] MINIX-fs: unable to read superblock [ 90.683601][ T42] audit: type=1326 audit(1786688555.091:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.3.195" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 91.485055][ T59] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 91.645047][ T59] usb 7-1: Using ep0 maxpacket: 16 [ 91.649728][ T59] usb 7-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=3f.f6 [ 91.661351][ T59] usb 7-1: config 1 has an invalid interface number: 246 but max is 0 [ 91.665593][ T59] usb 7-1: config 1 has an invalid descriptor of length 235, skipping remainder of the config [ 91.673402][ T59] usb 7-1: config 1 has no interface number 0 [ 91.678337][ T59] usb 7-1: config 1 interface 246 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 91.692977][ T59] usb 7-1: config 1 interface 246 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 91.696886][ T59] usb 7-1: config 1 interface 246 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 91.702688][ T59] usb 7-1: config 1 interface 246 altsetting 128 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 91.708606][ T59] usb 7-1: config 1 interface 246 altsetting 128 endpoint 0xC has an invalid bInterval 248, changing to 11 [ 91.717799][ T59] usb 7-1: config 1 interface 246 altsetting 128 has a duplicate endpoint with address 0x2, skipping [ 91.726887][ T59] usb 7-1: config 1 interface 246 altsetting 128 has 9 endpoint descriptors, different from the interface descriptor's value: 12 [ 91.741784][ T59] usb 7-1: config 1 interface 246 has no altsetting 0 [ 91.747006][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.749459][ T6824] syz0: rxe_newlink: already configured on wg2 [ 91.754169][ T59] usb 7-1: Product: syz [ 91.754191][ T59] usb 7-1: Manufacturer: à Œ [ 91.754204][ T59] usb 7-1: SerialNumber: syz [ 91.973279][ T59] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 91.981570][ T59] gspca_mr97310a: reg write [21] error -22 [ 91.986636][ T59] mr97310a 7-1:1.246: probe with driver mr97310a failed with error -22 [ 92.092919][ T6832] FAULT_INJECTION: forcing a failure. [ 92.092919][ T6832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.097304][ T6832] CPU: 1 UID: 0 PID: 6832 Comm: syz.0.199 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.097332][ T6832] Tainted: [L]=SOFTLOCKUP [ 92.097337][ T6832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.097343][ T6832] Call Trace: [ 92.097348][ T6832] [ 92.097352][ T6832] dump_stack_lvl+0x100/0x190 [ 92.097369][ T6832] should_fail_ex.cold+0x5/0xa [ 92.097381][ T6832] _copy_from_user+0x2e/0xd0 [ 92.097399][ T6832] get_compat_msghdr+0xb3/0x480 [ 92.097430][ T6832] ? __pfx_get_compat_msghdr+0x10/0x10 [ 92.097448][ T6832] ? __pfx_do_swap_page+0x10/0x10 [ 92.097462][ T6832] ___sys_sendmsg+0x1b6/0x1e0 [ 92.097485][ T6832] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.097502][ T6832] ? find_held_lock+0x2b/0x80 [ 92.097524][ T6832] __sys_sendmsg+0x160/0x210 [ 92.097540][ T6832] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.097562][ T6832] __do_fast_syscall_32+0xe7/0x970 [ 92.097581][ T6832] do_fast_syscall_32+0x32/0x70 [ 92.097598][ T6832] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.097612][ T6832] RIP: 0023:0xf7ff4fec [ 92.097625][ T6832] Code: Unable to access opcode bytes at 0xf7ff4fc2. [ 92.097630][ T6832] RSP: 002b:00000000f549550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 92.097641][ T6832] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000800002c0 [ 92.097648][ T6832] RDX: 0000000014000810 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.097654][ T6832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.097660][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.097665][ T6832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.097678][ T6832] [ 92.196857][ T59] usb 7-1: USB disconnect, device number 3 [ 92.490024][ T6838] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 92.508637][ T6838] tipc: Started in network mode [ 92.510753][ T6838] tipc: Node identity , cluster identity 4711 [ 92.515169][ T6838] tipc: Failed to obtain node identity [ 92.517780][ T6838] tipc: Enabling of bearer rejected, failed to enable media [ 92.524339][ T6838] syzkaller0: entered promiscuous mode [ 92.527172][ T6838] syzkaller0: entered allmulticast mode [ 92.535431][ T5581] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 92.618623][ T6847] syzkaller0: left promiscuous mode [ 92.620371][ T6847] syzkaller0: left allmulticast mode [ 92.685750][ T5581] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 92.690862][ T5581] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 92.694285][ T5581] usb 6-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 92.699776][ T5581] usb 6-1: config 0 has no interface number 0 [ 92.702412][ T5581] usb 6-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 92.707346][ T5581] usb 6-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 92.712749][ T5581] usb 6-1: config 0 interface 143 has no altsetting 0 [ 92.719768][ T5581] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.722550][ T5581] usb 6-1: Product: syz [ 92.723996][ T5581] usb 6-1: Manufacturer: syz [ 92.726005][ T5581] usb 6-1: SerialNumber: syz [ 92.729668][ T5581] usb 6-1: config 0 descriptor?? [ 92.880963][ T6860] jffs2: notice: (6860) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 92.945689][ T5581] usb 6-1: USB disconnect, device number 2 [ 94.619042][ T6897] FAULT_INJECTION: forcing a failure. [ 94.619042][ T6897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.623255][ T6897] CPU: 1 UID: 0 PID: 6897 Comm: syz.3.210 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.623273][ T6897] Tainted: [L]=SOFTLOCKUP [ 94.623277][ T6897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.623283][ T6897] Call Trace: [ 94.623289][ T6897] [ 94.623293][ T6897] dump_stack_lvl+0x100/0x190 [ 94.623314][ T6897] should_fail_ex.cold+0x5/0xa [ 94.623327][ T6897] _copy_from_user+0x2e/0xd0 [ 94.623345][ T6897] get_compat_msghdr+0xb3/0x480 [ 94.623364][ T6897] ? __pfx_get_compat_msghdr+0x10/0x10 [ 94.623385][ T6897] ___sys_sendmsg+0x1b6/0x1e0 [ 94.623399][ T6897] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.623416][ T6897] ? find_held_lock+0x2b/0x80 [ 94.623438][ T6897] __sys_sendmsg+0x160/0x210 [ 94.623454][ T6897] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.623472][ T6897] ? __pfx_ksys_write+0x10/0x10 [ 94.623486][ T6897] __do_fast_syscall_32+0xe7/0x970 [ 94.623507][ T6897] ? lockdep_hardirqs_on+0x78/0x100 [ 94.623530][ T6897] do_fast_syscall_32+0x32/0x70 [ 94.623556][ T6897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.623570][ T6897] RIP: 0023:0xf709efec [ 94.623584][ T6897] Code: Unable to access opcode bytes at 0xf709efc2. [ 94.623589][ T6897] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 94.623600][ T6897] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 94.623606][ T6897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.623612][ T6897] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.623618][ T6897] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 94.623623][ T6897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.623635][ T6897] [ 94.771465][ T6900] netlink: 'syz.3.211': attribute type 3 has an invalid length. [ 95.075097][ T6863] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 95.085089][ T5089] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.089418][ T6863] Bluetooth: hci0: Opcode 0x0406 failed: -110 [ 97.155191][ T5089] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.573135][ T6863] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.718243][ T6863] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.720475][ T6863] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.727083][ T6863] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.730158][ T6863] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.732129][ T6863] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.740584][ T6863] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.744364][ T6863] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.746650][ T6863] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.758126][ T6863] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.810351][ T6904] Illegal XDP return value 4294967274 on prog (id 36) dev N/A, expect packet loss! [ 97.823457][ T6904] FAULT_INJECTION: forcing a failure. [ 97.823457][ T6904] name failslab, interval 1, probability 0, space 0, times 0 [ 97.825280][ T6906] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 97.827634][ T6904] CPU: 3 UID: 0 PID: 6904 Comm: syz.3.213 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.827651][ T6904] Tainted: [L]=SOFTLOCKUP [ 97.827655][ T6904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.827661][ T6904] Call Trace: [ 97.827665][ T6904] [ 97.827669][ T6904] dump_stack_lvl+0x100/0x190 [ 97.827686][ T6904] should_fail_ex.cold+0x5/0xa [ 97.827697][ T6904] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 97.827721][ T6904] should_failslab+0xc2/0x120 [ 97.827737][ T6904] kmem_cache_alloc_noprof+0x91/0x6a0 [ 97.827752][ T6904] ? skb_clone+0x190/0x400 [ 97.827773][ T6904] skb_clone+0x190/0x400 [ 97.827788][ T6904] netlink_deliver_tap+0xaed/0xcc0 [ 97.827821][ T6904] netlink_unicast+0x62b/0x850 [ 97.827834][ T6904] ? __pfx_netlink_unicast+0x10/0x10 [ 97.827850][ T6904] netlink_sendmsg+0x8b0/0xda0 [ 97.827866][ T6904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.827887][ T6904] ? apparmor_socket_sendmsg+0x15b/0x270 [ 97.827909][ T6904] ____sys_sendmsg+0xa4d/0xbe0 [ 97.827922][ T6904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.827936][ T6904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.827953][ T6904] ___sys_sendmsg+0x190/0x1e0 [ 97.827965][ T6904] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.827983][ T6904] ? find_held_lock+0x2b/0x80 [ 97.828005][ T6904] __sys_sendmsg+0x160/0x210 [ 97.828025][ T6904] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.828043][ T6904] ? __pfx_ksys_write+0x10/0x10 [ 97.828057][ T6904] __do_fast_syscall_32+0xe7/0x970 [ 97.828075][ T6904] ? lockdep_hardirqs_on+0x78/0x100 [ 97.828090][ T6904] do_fast_syscall_32+0x32/0x70 [ 97.828107][ T6904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.828120][ T6904] RIP: 0023:0xf709efec [ 97.828134][ T6904] Code: Unable to access opcode bytes at 0xf709efc2. [ 97.828139][ T6904] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 97.828150][ T6904] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000100 [ 97.828156][ T6904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.828162][ T6904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.828168][ T6904] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 97.828174][ T6904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.828186][ T6904] [ 97.828209][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 97.837139][ T6908] binder: 6907:6908 ioctl c00c620f 80000180 returned -22 [ 97.842423][ T6904] sctp: [Deprecated]: syz.3.213 (pid 6904) Use of int in max_burst socket option. [ 97.842423][ T6904] Use struct sctp_assoc_value instead [ 97.863385][ T6906] tipc: Started in network mode [ 97.909378][ T6915] FAULT_INJECTION: forcing a failure. [ 97.909378][ T6915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.920971][ T6906] tipc: Node identity , cluster identity 4711 [ 97.924747][ T6906] tipc: Failed to obtain node identity [ 97.924823][ T6915] CPU: 3 UID: 0 PID: 6915 Comm: syz.3.216 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.924841][ T6915] Tainted: [L]=SOFTLOCKUP [ 97.924844][ T6915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.924851][ T6915] Call Trace: [ 97.924855][ T6915] [ 97.924860][ T6915] dump_stack_lvl+0x100/0x190 [ 97.924890][ T6915] should_fail_ex.cold+0x5/0xa [ 97.924903][ T6915] _copy_from_iter+0x1f4/0x1690 [ 97.924923][ T6915] ? __pfx__copy_from_iter+0x10/0x10 [ 97.924939][ T6915] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 97.924956][ T6915] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 97.924979][ T6915] skb_copy_datagram_from_iter+0x11f/0x720 [ 97.925004][ T6915] packet_sendmsg+0x2257/0x4f00 [ 97.925050][ T6915] ? __pfx___might_resched+0x10/0x10 [ 97.925071][ T6915] ? aa_sk_perm+0x309/0xaa0 [ 97.925087][ T6915] ? __pfx_aa_sk_perm+0x10/0x10 [ 97.925101][ T6915] ? __pfx_packet_sendmsg+0x10/0x10 [ 97.925119][ T6915] ? apparmor_socket_sendmsg+0x15b/0x270 [ 97.925133][ T6915] ____sys_sendmsg+0xa4d/0xbe0 [ 97.925144][ T6915] ? __pfx_packet_sendmsg+0x10/0x10 [ 97.925160][ T6915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.925173][ T6915] ? _kstrtoull+0x13c/0x1f0 [ 97.925185][ T6915] ? __pfx__kstrtoull+0x10/0x10 [ 97.925197][ T6915] ___sys_sendmsg+0x190/0x1e0 [ 97.925210][ T6915] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.925221][ T6915] ? __lock_acquire+0x49f/0x1a40 [ 97.925246][ T6915] __sys_sendmmsg+0x309/0x440 [ 97.925262][ T6915] ? __pfx___sys_sendmmsg+0x10/0x10 [ 97.925277][ T6915] ? find_held_lock+0x2b/0x80 [ 97.925294][ T6915] ? __mutex_unlock_slowpath+0x35d/0x930 [ 97.925318][ T6915] ? fput+0x79/0x100 [ 97.925331][ T6915] ? ksys_write+0x1ac/0x250 [ 97.925343][ T6915] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 97.925354][ T6915] ? lockdep_hardirqs_on+0x78/0x100 [ 97.925369][ T6915] __do_fast_syscall_32+0xe7/0x970 [ 97.925385][ T6915] ? lockdep_hardirqs_on+0x78/0x100 [ 97.925401][ T6915] do_fast_syscall_32+0x32/0x70 [ 97.925417][ T6915] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.925432][ T6915] RIP: 0023:0xf709efec [ 97.925447][ T6915] Code: Unable to access opcode bytes at 0xf709efc2. [ 97.925451][ T6915] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 97.925465][ T6915] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000440 [ 97.925472][ T6915] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.925478][ T6915] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.925483][ T6915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.925489][ T6915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.925502][ T6915] [ 98.016412][ T6906] tipc: Enabling of bearer rejected, failed to enable media [ 98.019928][ T6916] syzkaller0: entered promiscuous mode [ 98.022418][ T6916] syzkaller0: entered allmulticast mode [ 98.073139][ T5089] Bluetooth: hci1: unexpected event for opcode 0x202a [ 98.075680][ T5089] Bluetooth: hci1: unexpected event for opcode 0x202a [ 98.110786][ T6916] syzkaller0: left promiscuous mode [ 98.112997][ T6916] syzkaller0: left allmulticast mode [ 98.199832][ T6935] NILFS (nullb0): couldn't find nilfs on the device [ 98.882562][ T6955] syz.3.225 uses obsolete (PF_INET,SOCK_PACKET) [ 99.073692][ T6963] FAULT_INJECTION: forcing a failure. [ 99.073692][ T6963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.099247][ T6963] CPU: 2 UID: 0 PID: 6963 Comm: syz.3.227 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.099266][ T6963] Tainted: [L]=SOFTLOCKUP [ 99.099270][ T6963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.099276][ T6963] Call Trace: [ 99.099281][ T6963] [ 99.099286][ T6963] dump_stack_lvl+0x100/0x190 [ 99.099304][ T6963] should_fail_ex.cold+0x5/0xa [ 99.099317][ T6963] _copy_from_user+0x2e/0xd0 [ 99.099334][ T6963] kstrtouint_from_user+0xd6/0x1d0 [ 99.099347][ T6963] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 99.099359][ T6963] ? __lock_acquire+0x49f/0x1a40 [ 99.099374][ T6963] proc_fail_nth_write+0x83/0x220 [ 99.099391][ T6963] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 99.099410][ T6963] vfs_write+0x2aa/0x1050 [ 99.099422][ T6963] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 99.099438][ T6963] ? __pfx_vfs_write+0x10/0x10 [ 99.099447][ T6963] ? find_held_lock+0x2b/0x80 [ 99.099461][ T6963] ? __fget_files+0x215/0x3d0 [ 99.099474][ T6963] ? __fget_files+0x21f/0x3d0 [ 99.099488][ T6963] ksys_write+0x12a/0x250 [ 99.099498][ T6963] ? __pfx_ksys_write+0x10/0x10 [ 99.099512][ T6963] do_int80_emulation+0x14b/0x720 [ 99.099531][ T6963] asm_int80_emulation+0x1a/0x20 [ 99.099542][ T6963] RIP: 0023:0xf71d74eb [ 99.099551][ T6963] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 99.099561][ T6963] RSP: 002b:00000000f546c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 99.099573][ T6963] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f546c5d0 [ 99.099579][ T6963] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.099585][ T6963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.099590][ T6963] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 99.099596][ T6963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.099609][ T6963] [ 99.307094][ T6975] FAULT_INJECTION: forcing a failure. [ 99.307094][ T6975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.331006][ T6975] CPU: 3 UID: 0 PID: 6975 Comm: syz.0.230 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.331025][ T6975] Tainted: [L]=SOFTLOCKUP [ 99.331029][ T6975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.331035][ T6975] Call Trace: [ 99.331039][ T6975] [ 99.331044][ T6975] dump_stack_lvl+0x100/0x190 [ 99.331062][ T6975] should_fail_ex.cold+0x5/0xa [ 99.331074][ T6975] _copy_from_user+0x2e/0xd0 [ 99.331092][ T6975] v4l2_compat_get_array_args+0x1a5/0x760 [ 99.331138][ T6975] ? rcu_is_watching+0x12/0xc0 [ 99.331152][ T6975] ? __pfx_v4l2_compat_get_array_args+0x10/0x10 [ 99.331166][ T6975] ? __kasan_kmalloc+0xaa/0xb0 [ 99.331181][ T6975] ? __kvmalloc_node_noprof+0x36d/0x970 [ 99.331194][ T6975] ? tomoyo_execute_permission+0x3d1/0x4b0 [ 99.331217][ T6975] ? get_pid_task+0x106/0x250 [ 99.331231][ T6975] ? video_usercopy+0x703/0x14c0 [ 99.331249][ T6975] video_usercopy+0xc1a/0x14c0 [ 99.331265][ T6975] ? __pfx___video_do_ioctl+0x10/0x10 [ 99.331281][ T6975] ? __pfx_video_usercopy+0x10/0x10 [ 99.331300][ T6975] ? __fget_files+0x215/0x3d0 [ 99.331310][ T6975] ? hook_file_ioctl_common+0x140/0x440 [ 99.331328][ T6975] v4l2_ioctl+0x1bd/0x250 [ 99.331346][ T6975] v4l2_compat_ioctl32+0x20f/0x2d0 [ 99.331359][ T6975] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 99.331372][ T6975] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 99.331392][ T6975] __do_fast_syscall_32+0xe7/0x970 [ 99.331410][ T6975] ? lockdep_hardirqs_on+0x78/0x100 [ 99.331425][ T6975] do_fast_syscall_32+0x32/0x70 [ 99.331442][ T6975] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.331456][ T6975] RIP: 0023:0xf7ff4fec [ 99.331470][ T6975] Code: Unable to access opcode bytes at 0xf7ff4fc2. [ 99.331474][ T6975] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 99.331485][ T6975] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0185648 [ 99.331492][ T6975] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.331498][ T6975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.331503][ T6975] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 99.331509][ T6975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.331521][ T6975] [ 99.433685][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'. [ 99.635370][ T5089] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.663109][ T6985] FAULT_INJECTION: forcing a failure. [ 99.663109][ T6985] name failslab, interval 1, probability 0, space 0, times 0 [ 99.675127][ T6985] CPU: 3 UID: 0 PID: 6985 Comm: syz.3.233 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.675155][ T6985] Tainted: [L]=SOFTLOCKUP [ 99.675161][ T6985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.675169][ T6985] Call Trace: [ 99.675176][ T6985] [ 99.675182][ T6985] dump_stack_lvl+0x100/0x190 [ 99.675210][ T6985] should_fail_ex.cold+0x5/0xa [ 99.675232][ T6985] should_failslab+0xc2/0x120 [ 99.675258][ T6985] __kmalloc_node_noprof+0x101/0x830 [ 99.675280][ T6985] ? crypto_create_tfm_node+0x8d/0x3b0 [ 99.675310][ T6985] crypto_create_tfm_node+0x8d/0x3b0 [ 99.675334][ T6985] crypto_alloc_tfm_node+0x102/0x260 [ 99.675358][ T6985] esp_init_aead.constprop.0+0x109/0x3b0 [ 99.675388][ T6985] ? __pfx_esp_init_aead.constprop.0+0x10/0x10 [ 99.675416][ T6985] ? find_held_lock+0x2b/0x80 [ 99.675447][ T6985] esp_init_state+0x86/0x530 [ 99.675466][ T6985] __xfrm_init_state+0x842/0x1dc0 [ 99.675503][ T6985] xfrm_add_sa+0x2725/0x5cb0 [ 99.675531][ T6985] ? __pfx_xfrm_add_sa+0x10/0x10 [ 99.675553][ T6985] ? __nla_parse+0x40/0x60 [ 99.675572][ T6985] ? __pfx_xfrm_add_sa+0x10/0x10 [ 99.675592][ T6985] xfrm_user_rcv_msg+0x411/0xd00 [ 99.675619][ T6985] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 99.675640][ T6985] ? kfree_skbmem+0x19f/0x210 [ 99.675661][ T6985] ? consume_skb+0xd6/0x110 [ 99.675709][ T6985] ? rcu_is_watching+0x12/0xc0 [ 99.675730][ T6985] ? trace_contention_end+0x126/0x160 [ 99.675746][ T6985] ? __mutex_lock+0x26d/0x1bd0 [ 99.675773][ T6985] netlink_rcv_skb+0x159/0x420 [ 99.675792][ T6985] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 99.675814][ T6985] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.675850][ T6985] xfrm_netlink_rcv+0x71/0x90 [ 99.675869][ T6985] netlink_unicast+0x585/0x850 [ 99.675892][ T6985] ? __pfx_netlink_unicast+0x10/0x10 [ 99.675919][ T6985] netlink_sendmsg+0x8b0/0xda0 [ 99.675941][ T6985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.675961][ T6985] ? apparmor_socket_sendmsg+0x15b/0x270 [ 99.675981][ T6985] ____sys_sendmsg+0xa4d/0xbe0 [ 99.675999][ T6985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.676020][ T6985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.676050][ T6985] ___sys_sendmsg+0x190/0x1e0 [ 99.676069][ T6985] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.676104][ T6985] ? find_held_lock+0x2b/0x80 [ 99.676137][ T6985] __sys_sendmsg+0x160/0x210 [ 99.676159][ T6985] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.676187][ T6985] ? __pfx_ksys_write+0x10/0x10 [ 99.676209][ T6985] __do_fast_syscall_32+0xe7/0x970 [ 99.676237][ T6985] ? lockdep_hardirqs_on+0x78/0x100 [ 99.676260][ T6985] do_fast_syscall_32+0x32/0x70 [ 99.676309][ T6985] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.676330][ T6985] RIP: 0023:0xf709efec [ 99.676352][ T6985] Code: Unable to access opcode bytes at 0xf709efc2. [ 99.676359][ T6985] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 99.676375][ T6985] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 99.676387][ T6985] RDX: 0000000000002094 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.676396][ T6985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.676406][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.676415][ T6985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.676446][ T6985] [ 99.809083][ T5089] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.812732][ T5089] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.098447][ T6996] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 100.132548][ T7000] FAULT_INJECTION: forcing a failure. [ 100.132548][ T7000] name failslab, interval 1, probability 0, space 0, times 0 [ 100.143179][ T7000] CPU: 3 UID: 0 PID: 7000 Comm: syz.3.237 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.143208][ T7000] Tainted: [L]=SOFTLOCKUP [ 100.143213][ T7000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.143222][ T7000] Call Trace: [ 100.143229][ T7000] [ 100.143235][ T7000] dump_stack_lvl+0x100/0x190 [ 100.143261][ T7000] should_fail_ex.cold+0x5/0xa [ 100.143302][ T7000] should_failslab+0xc2/0x120 [ 100.143326][ T7000] __kvmalloc_node_noprof+0x116/0x970 [ 100.143348][ T7000] ? lockdep_init_map_type+0x5c/0x250 [ 100.143366][ T7000] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 100.143398][ T7000] v4l2_ctrl_handler_init_class+0x201/0x350 [ 100.143423][ T7000] ? mutex_init_lockdep+0xf1/0x120 [ 100.143442][ T7000] vicodec_open+0x18b/0xf70 [ 100.143482][ T7000] ? kobject_get_unless_zero+0x156/0x200 [ 100.143518][ T7000] v4l2_open+0x1d2/0x490 [ 100.143546][ T7000] ? __pfx_v4l2_open+0x10/0x10 [ 100.143572][ T7000] chrdev_open+0x234/0x6a0 [ 100.143591][ T7000] ? __pfx_apparmor_file_open+0x10/0x10 [ 100.143612][ T7000] ? __pfx_chrdev_open+0x10/0x10 [ 100.143632][ T7000] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 100.143664][ T7000] do_dentry_open+0x6ab/0x14d0 [ 100.143683][ T7000] ? __pfx_chrdev_open+0x10/0x10 [ 100.143706][ T7000] vfs_open+0x82/0x3f0 [ 100.143732][ T7000] path_openat+0x2873/0x4280 [ 100.143762][ T7000] ? __pfx_path_openat+0x10/0x10 [ 100.143789][ T7000] do_file_open+0x20e/0x430 [ 100.143806][ T7000] ? __lock_acquire+0x49f/0x1a40 [ 100.143824][ T7000] ? __pfx_do_file_open+0x10/0x10 [ 100.143859][ T7000] ? _raw_spin_unlock+0x28/0x50 [ 100.143881][ T7000] ? alloc_fd+0x471/0x7a0 [ 100.143907][ T7000] do_sys_openat2+0x10f/0x1e0 [ 100.143932][ T7000] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.143957][ T7000] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 100.143989][ T7000] __ia32_compat_sys_openat+0x12d/0x210 [ 100.144015][ T7000] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 100.144038][ T7000] ? fput+0x79/0x100 [ 100.144059][ T7000] ? ksys_write+0x1ac/0x250 [ 100.144076][ T7000] ? __pfx_ksys_write+0x10/0x10 [ 100.144098][ T7000] __do_fast_syscall_32+0xe7/0x970 [ 100.144125][ T7000] ? lockdep_hardirqs_on+0x78/0x100 [ 100.144151][ T7000] do_fast_syscall_32+0x32/0x70 [ 100.144178][ T7000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.144200][ T7000] RIP: 0023:0xf709efec [ 100.144222][ T7000] Code: Unable to access opcode bytes at 0xf709efc2. [ 100.144229][ T7000] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 100.144245][ T7000] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 100.144256][ T7000] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.144264][ T7000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.144273][ T7000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.144310][ T7000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.144333][ T7000] [ 100.305162][ T6996] tipc: Started in network mode [ 100.306736][ T6996] tipc: Node identity , cluster identity 4711 [ 100.308625][ T6996] tipc: Failed to obtain node identity [ 100.310365][ T6996] tipc: Enabling of bearer rejected, failed to enable media [ 100.325316][ T6996] syzkaller0: entered promiscuous mode [ 100.327653][ T6996] syzkaller0: entered allmulticast mode [ 100.401212][ T7004] syzkaller0: left promiscuous mode [ 100.411061][ T7004] syzkaller0: left allmulticast mode [ 101.271268][ T7022] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 101.369039][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 101.387034][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 101.387749][ T7022] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 101.456506][ T7022] overlayfs: failed to look up (tracing) for ino (-66) [ 101.841918][ T7026] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 101.933161][ T5089] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.940836][ T5089] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.426880][ T7031] FAULT_INJECTION: forcing a failure. [ 102.426880][ T7031] name failslab, interval 1, probability 0, space 0, times 0 [ 102.442843][ T7031] CPU: 0 UID: 0 PID: 7031 Comm: syz.0.244 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.442862][ T7031] Tainted: [L]=SOFTLOCKUP [ 102.442865][ T7031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.442871][ T7031] Call Trace: [ 102.442876][ T7031] [ 102.442880][ T7031] dump_stack_lvl+0x100/0x190 [ 102.442898][ T7031] should_fail_ex.cold+0x5/0xa [ 102.442911][ T7031] should_failslab+0xc2/0x120 [ 102.442927][ T7031] __kmalloc_noprof+0xfc/0x820 [ 102.442942][ T7031] ? tomoyo_encode2+0xfb/0x3c0 [ 102.442961][ T7031] tomoyo_encode2+0xfb/0x3c0 [ 102.442978][ T7031] tomoyo_encode+0x29/0x50 [ 102.442993][ T7031] tomoyo_realpath_from_path+0x18c/0x690 [ 102.443011][ T7031] tomoyo_mount_acl+0x1b6/0x8b0 [ 102.443025][ T7031] ? is_bpf_text_address+0x8a/0x1a0 [ 102.443042][ T7031] ? is_bpf_text_address+0x8a/0x1a0 [ 102.443058][ T7031] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.443076][ T7031] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 102.443090][ T7031] ? kernel_text_address+0x8d/0x100 [ 102.443107][ T7031] ? unwind_get_return_address+0x59/0xa0 [ 102.443132][ T7031] ? arch_stack_walk+0xa6/0xf0 [ 102.443164][ T7031] ? tomoyo_domain+0xb2/0x150 [ 102.443174][ T7031] ? tomoyo_profile+0x47/0x60 [ 102.443185][ T7031] tomoyo_mount_permission+0x214/0x460 [ 102.443199][ T7031] ? tomoyo_mount_permission+0x1f6/0x460 [ 102.443214][ T7031] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 102.443236][ T7031] security_sb_mount+0xdd/0x270 [ 102.443250][ T7031] path_mount+0x158/0x23d0 [ 102.443277][ T7031] ? __pfx_path_mount+0x10/0x10 [ 102.443291][ T7031] ? lockdep_hardirqs_on+0x78/0x100 [ 102.443309][ T7031] ? putname+0xb1/0x110 [ 102.443320][ T7031] ? kmem_cache_free+0x127/0x6b0 [ 102.443336][ T7031] ? __ia32_sys_mount+0x292/0x310 [ 102.443348][ T7031] __ia32_sys_mount+0x292/0x310 [ 102.443362][ T7031] ? __pfx___ia32_sys_mount+0x10/0x10 [ 102.443374][ T7031] ? ksys_write+0x1ac/0x250 [ 102.443384][ T7031] ? __pfx_ksys_write+0x10/0x10 [ 102.443396][ T7031] __do_fast_syscall_32+0xe7/0x970 [ 102.443413][ T7031] ? lockdep_hardirqs_on+0x78/0x100 [ 102.443429][ T7031] do_fast_syscall_32+0x32/0x70 [ 102.443445][ T7031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.443459][ T7031] RIP: 0023:0xf7ff4fec [ 102.443474][ T7031] Code: Unable to access opcode bytes at 0xf7ff4fc2. [ 102.443479][ T7031] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 102.443490][ T7031] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000200 [ 102.443496][ T7031] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.443502][ T7031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.443508][ T7031] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 102.443514][ T7031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.443526][ T7031] [ 102.443561][ T7031] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.156769][ T7040] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 103.161322][ T7040] netlink: 244 bytes leftover after parsing attributes in process `syz.2.245'. [ 103.713379][ T7040] netlink: 'syz.2.245': attribute type 2 has an invalid length. [ 103.955414][ T5089] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.955431][ T5733] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.335055][ T40] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 104.486848][ T40] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 104.493791][ T40] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 104.499245][ T40] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 104.504888][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.528235][ T40] usb 7-1: USB2VGA dongle found at address 4 [ 104.544499][ T40] usb 7-1: Allocated 8 output buffers [ 104.680354][ T7064] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 104.683283][ T7064] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 104.761103][ T7063] netlink: NAT attribute has 5 unknown bytes [ 104.763136][ T7063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.881155][ T7064] vhci_hcd vhci_hcd.0: Device attached [ 104.964186][ T7083] netlink: 'syz.1.252': attribute type 1 has an invalid length. [ 104.978050][ T7083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.003645][ T7083] bond1: entered allmulticast mode [ 105.012983][ T7083] bond1: (slave ip6gretap1): making interface the new active one [ 105.012999][ T7083] ip6gretap1: entered allmulticast mode [ 105.013717][ T7083] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 105.356306][ T7079] vhci_hcd: connection closed [ 105.368053][ T5806] vhci_hcd vhci_hcd.0: stop threads [ 105.368483][ T5806] vhci_hcd vhci_hcd.0: release socket [ 105.368514][ T5806] vhci_hcd vhci_hcd.0: disconnect device [ 105.452898][ T6998] syz.0.230 (6998) used greatest stack depth: 18232 bytes left [ 106.058231][ T7096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.256'. [ 106.192190][ T7093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.218050][ T852] libceph: connect (1)[c::]:6789 error -101 [ 106.221385][ T852] libceph: mon0 (1)[c::]:6789 connect error [ 106.323552][ T7100] ceph: No mds server is up or the cluster is laggy [ 106.566728][ T7113] bridge_slave_0: left allmulticast mode [ 106.570589][ T7113] bridge_slave_0: left promiscuous mode [ 106.578982][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.586310][ T7113] bridge_slave_1: left allmulticast mode [ 106.588620][ T7113] bridge_slave_1: left promiscuous mode [ 106.592471][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.617275][ T7113] bond0: (slave bond_slave_0): Releasing backup interface [ 106.629622][ T7113] bond0: (slave bond_slave_1): Releasing backup interface [ 106.656471][ T7113] team0: Port device team_slave_1 removed [ 106.659102][ T7113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.662374][ T7113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.669032][ T7113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.672187][ T7113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.677767][ T5733] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 106.687488][ T7113] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.704181][ T7116] tipc: Started in network mode [ 106.707074][ T7116] tipc: Node identity , cluster identity 4711 [ 106.709641][ T7116] tipc: Failed to obtain node identity [ 106.712028][ T7116] tipc: Enabling of bearer rejected, failed to enable media [ 106.722727][ T7121] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 106.725428][ T7121] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 106.855440][ T852] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 106.954382][ T7128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.264'. [ 108.023884][ T7121] vhci_hcd vhci_hcd.0: Device attached [ 108.094929][ T7121] wg2 speed is unknown, defaulting to 1000 [ 108.109903][ T7121] wg2 speed is unknown, defaulting to 1000 [ 108.119970][ T7121] wg2 speed is unknown, defaulting to 1000 [ 108.147732][ T852] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 108.152910][ T852] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.155090][ T852] usb 5-1: config 0 has no interface number 0 [ 108.159235][ T852] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 108.168101][ T852] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 108.169136][ T7141] FAULT_INJECTION: forcing a failure. [ 108.169136][ T7141] name failslab, interval 1, probability 0, space 0, times 0 [ 108.177236][ T7141] CPU: 2 UID: 0 PID: 7141 Comm: syz.3.268 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.177261][ T7141] Tainted: [L]=SOFTLOCKUP [ 108.177267][ T7141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.177276][ T7141] Call Trace: [ 108.177282][ T7141] [ 108.177289][ T7141] dump_stack_lvl+0x100/0x190 [ 108.177314][ T7141] should_fail_ex.cold+0x5/0xa [ 108.177333][ T7141] should_failslab+0xc2/0x120 [ 108.177357][ T7141] __kmalloc_noprof+0xfc/0x820 [ 108.177378][ T7141] ? alloc_pipe_info+0x1ec/0x590 [ 108.177401][ T7141] alloc_pipe_info+0x1ec/0x590 [ 108.177420][ T7141] splice_direct_to_actor+0x78f/0xa30 [ 108.177441][ T7141] ? __pfx_direct_splice_actor+0x10/0x10 [ 108.177465][ T7141] ? __pfx_aa_file_perm+0x10/0x10 [ 108.177491][ T7141] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 108.177515][ T7141] do_splice_direct+0x174/0x240 [ 108.177533][ T7141] ? __pfx_do_splice_direct+0x10/0x10 [ 108.177551][ T7141] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 108.177572][ T7141] ? rw_verify_area+0xce/0x6d0 [ 108.177598][ T7141] do_sendfile+0xadc/0xe20 [ 108.177625][ T7141] ? __pfx_do_sendfile+0x10/0x10 [ 108.177653][ T7141] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.177680][ T7141] ? __fget_files+0x21f/0x3d0 [ 108.177701][ T7141] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 108.177718][ T7141] ? fput+0x79/0x100 [ 108.177730][ T7141] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 108.177742][ T7141] ? ksys_write+0x1ac/0x250 [ 108.177752][ T7141] ? __pfx_ksys_write+0x10/0x10 [ 108.177764][ T7141] __do_fast_syscall_32+0xe7/0x970 [ 108.177781][ T7141] ? lockdep_hardirqs_on+0x78/0x100 [ 108.177797][ T7141] do_fast_syscall_32+0x32/0x70 [ 108.177813][ T7141] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.177827][ T7141] RIP: 0023:0xf709efec [ 108.177836][ T7141] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 108.177846][ T7141] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 108.177858][ T7141] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000004 [ 108.177864][ T7141] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000000 [ 108.177870][ T7141] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.177876][ T7141] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 108.177881][ T7141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.177894][ T7141] [ 108.182665][ T852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.260468][ T852] usb 5-1: config 0 descriptor?? [ 108.262550][ T7117] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 108.268929][ T852] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 108.315089][ T1340] usb 40-1: SetAddress Request (2) to port 0 [ 108.317254][ T1340] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 108.494517][ T7145] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 108.497137][ T7145] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 108.507215][ T7145] vhci_hcd vhci_hcd.0: Device attached [ 108.552079][ T7145] syz0: rxe_newlink: already configured on wg2 [ 108.568859][ T852] usb 5-1: USB disconnect, device number 6 [ 108.651326][ T7121] infiniband syz2: set active [ 108.654123][ T59] wg2 speed is unknown, defaulting to 1000 [ 108.669065][ T7121] infiniband syz2: added wg2 [ 108.712969][ T7121] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 108.726235][ T7121] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 108.740697][ T7121] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 108.805264][ T60] usb 44-1: SetAddress Request (2) to port 0 [ 108.815055][ T7121] RDS/IB: syz2: added [ 108.819550][ T7121] smc: adding ib device syz2 with port count 1 [ 108.825482][ T7121] smc: ib device syz2 port 1 has no pnetid [ 108.831610][ T59] wg2 speed is unknown, defaulting to 1000 [ 108.839903][ T7121] wg2 speed is unknown, defaulting to 1000 [ 108.851373][ T60] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 109.028075][ T7121] wg2 speed is unknown, defaulting to 1000 [ 109.062766][ T7149] vhci_hcd: connection reset by peer [ 109.066426][ T12] vhci_hcd vhci_hcd.3: stop threads [ 109.068176][ T12] vhci_hcd vhci_hcd.3: release socket [ 109.071555][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 109.246070][ T7121] wg2 speed is unknown, defaulting to 1000 [ 109.318545][ T7157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.272'. [ 109.330946][ T7157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.272'. [ 109.354781][ T7122] vhci_hcd: connection reset by peer [ 109.365640][ T12] vhci_hcd vhci_hcd.1: stop threads [ 109.369690][ T12] vhci_hcd vhci_hcd.1: release socket [ 109.375435][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 109.434937][ T7159] tipc: Started in network mode [ 109.436947][ T7159] tipc: Node identity , cluster identity 4711 [ 109.438933][ T7159] tipc: Failed to obtain node identity [ 109.440822][ T7159] tipc: Enabling of bearer rejected, failed to enable media [ 109.447233][ T42] audit: type=1804 audit(1786688573.861:4): pid=7163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.273" name="/newroot/62/file0" dev="tmpfs" ino=364 res=1 errno=0 [ 109.475376][ T7166] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 109.499154][ T5733] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 109.544853][ T7121] wg2 speed is unknown, defaulting to 1000 [ 109.857516][ T7173] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 109.860345][ T7173] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 109.873579][ T7173] vhci_hcd vhci_hcd.0: Device attached [ 110.196039][ T59] usb 38-1: SetAddress Request (2) to port 0 [ 110.204396][ T59] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 110.865593][ T7189] FAULT_INJECTION: forcing a failure. [ 110.865593][ T7189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.873102][ T7189] CPU: 3 UID: 0 PID: 7189 Comm: syz.3.281 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.873129][ T7189] Tainted: [L]=SOFTLOCKUP [ 110.873136][ T7189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.873145][ T7189] Call Trace: [ 110.873152][ T7189] [ 110.873159][ T7189] dump_stack_lvl+0x100/0x190 [ 110.873187][ T7189] should_fail_ex.cold+0x5/0xa [ 110.873206][ T7189] _copy_from_user+0x2e/0xd0 [ 110.873235][ T7189] get_compat_msghdr+0xb3/0x480 [ 110.873261][ T7189] ? __pfx_get_compat_msghdr+0x10/0x10 [ 110.873286][ T7189] ? rcu_is_watching+0x12/0xc0 [ 110.873305][ T7189] ? ___sys_sendmsg+0x19d/0x1e0 [ 110.873324][ T7189] ? kfree+0x1e5/0x6c0 [ 110.873355][ T7189] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 110.873386][ T7189] ___sys_sendmsg+0x1b6/0x1e0 [ 110.873411][ T7189] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.873428][ T7189] ? do_user_addr_fault+0x7de/0x12f0 [ 110.873459][ T7189] ? lockdep_hardirqs_on+0x78/0x100 [ 110.873484][ T7189] ? irqentry_exit+0x24d/0xa00 [ 110.873516][ T7189] ? __pfx___might_resched+0x10/0x10 [ 110.873544][ T7189] ? __sys_sendmmsg+0x31d/0x440 [ 110.873573][ T7189] __sys_sendmmsg+0x309/0x440 [ 110.873600][ T7189] ? __pfx___sys_sendmmsg+0x10/0x10 [ 110.873624][ T7189] ? find_held_lock+0x2b/0x80 [ 110.873650][ T7189] ? __mutex_unlock_slowpath+0x35d/0x930 [ 110.873684][ T7189] ? fput+0x79/0x100 [ 110.873703][ T7189] ? ksys_write+0x1ac/0x250 [ 110.873725][ T7189] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 110.873744][ T7189] ? lockdep_hardirqs_on+0x78/0x100 [ 110.873768][ T7189] __do_fast_syscall_32+0xe7/0x970 [ 110.873794][ T7189] ? lockdep_hardirqs_on+0x78/0x100 [ 110.873820][ T7189] do_fast_syscall_32+0x32/0x70 [ 110.873847][ T7189] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.873871][ T7189] RIP: 0023:0xf709efec [ 110.873893][ T7189] Code: Unable to access opcode bytes at 0xf709efc2. [ 110.873900][ T7189] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 110.873917][ T7189] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080007fc0 [ 110.873928][ T7189] RDX: 000000000800001d RSI: 000000000000001c RDI: 0000000000000000 [ 110.873937][ T7189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.873945][ T7189] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 110.873954][ T7189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.873974][ T7189] [ 111.115459][ T7192] FAULT_INJECTION: forcing a failure. [ 111.115459][ T7192] name failslab, interval 1, probability 0, space 0, times 0 [ 111.122753][ T7192] CPU: 2 UID: 0 PID: 7192 Comm: syz.3.282 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.122779][ T7192] Tainted: [L]=SOFTLOCKUP [ 111.122784][ T7192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.122792][ T7192] Call Trace: [ 111.122798][ T7192] [ 111.122804][ T7192] dump_stack_lvl+0x100/0x190 [ 111.122832][ T7192] should_fail_ex.cold+0x5/0xa [ 111.122850][ T7192] should_failslab+0xc2/0x120 [ 111.122872][ T7192] __kmalloc_noprof+0xfc/0x820 [ 111.122894][ T7192] ? tomoyo_encode2+0xfb/0x3c0 [ 111.122925][ T7192] tomoyo_encode2+0xfb/0x3c0 [ 111.122954][ T7192] tomoyo_unix_entry+0x343/0x640 [ 111.122986][ T7192] ? __might_resched+0xc9/0x330 [ 111.123015][ T7192] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 111.123037][ T7192] ? restrict_one_thread_callback+0x448/0x6d0 [ 111.123077][ T7192] tomoyo_socket_connect_permission+0x31a/0x360 [ 111.123101][ T7192] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 111.123132][ T7192] ? __might_fault+0xc5/0x140 [ 111.123157][ T7192] security_socket_connect+0xd3/0x230 [ 111.123179][ T7192] __sys_connect_file+0x8f/0x1a0 [ 111.123205][ T7192] __sys_connect+0x141/0x170 [ 111.123227][ T7192] ? __pfx___sys_connect+0x10/0x10 [ 111.123264][ T7192] __ia32_sys_connect+0x71/0xb0 [ 111.123284][ T7192] ? lockdep_hardirqs_on+0x78/0x100 [ 111.123309][ T7192] do_int80_emulation+0x14b/0x720 [ 111.123339][ T7192] asm_int80_emulation+0x1a/0x20 [ 111.123358][ T7192] RIP: 0023:0xf709efec [ 111.123381][ T7192] Code: Unable to access opcode bytes at 0xf709efc2. [ 111.123389][ T7192] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 111.123406][ T7192] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 111.123417][ T7192] RDX: 000000000000006e RSI: 0000000000000000 RDI: 0000000000000000 [ 111.123427][ T7192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.123436][ T7192] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.123447][ T7192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.123469][ T7192] [ 112.395919][ T7174] vhci_hcd: connection reset by peer [ 112.409390][ T12] vhci_hcd vhci_hcd.0: stop threads [ 112.419584][ T12] vhci_hcd vhci_hcd.0: release socket [ 112.429831][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 112.589765][ T7223] netlink: 'syz.0.289': attribute type 5 has an invalid length. [ 112.593859][ T7223] netlink: 'syz.0.289': attribute type 1 has an invalid length. [ 112.660281][ T7223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.726690][ T7225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.745471][ T7225] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 112.751840][ T7225] bond1: (slave ipip0): Error -95 calling set_mac_address [ 112.917576][ T7235] netlink: 'syz.1.293': attribute type 4 has an invalid length. [ 112.920874][ T7235] netlink: 17 bytes leftover after parsing attributes in process `syz.1.293'. [ 112.965153][ T5813] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 113.012039][ T7238] gfs2: error -5 reading superblock [ 113.115051][ T5813] usb 8-1: Using ep0 maxpacket: 8 [ 113.458891][ T5813] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.767068][ T1340] usb 40-1: device descriptor read/8, error -110 [ 113.903482][ T5813] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 113.907008][ T5813] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.910922][ T5813] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.914795][ T5813] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.940059][ T5813] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.952754][ T5813] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.955971][ T60] usb 44-1: device descriptor read/8, error -110 [ 114.172371][ T7228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.175157][ T5813] usb 8-1: usb_control_msg returned -32 [ 114.175222][ T5813] usbtmc 8-1:16.0: can't read capabilities [ 114.186064][ T7228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.187481][ T1340] usb usb40-port1: attempt power cycle [ 114.195798][ T5813] usb 8-1: USB disconnect, device number 3 [ 114.363343][ T60] usb usb44-port1: attempt power cycle [ 114.799766][ T1340] usb usb40-port1: unable to enumerate USB device [ 114.926321][ T60] usb usb44-port1: unable to enumerate USB device [ 115.315874][ T59] usb 38-1: device descriptor read/8, error -110 [ 115.355278][ T7303] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 115.421912][ T7303] tipc: Started in network mode [ 115.423961][ T7303] tipc: Node identity , cluster identity 4711 [ 115.426739][ T7303] tipc: Failed to obtain node identity [ 115.428827][ T7303] tipc: Enabling of bearer rejected, failed to enable media [ 115.434493][ T7303] syzkaller0: entered promiscuous mode [ 115.440844][ T7303] syzkaller0: entered allmulticast mode [ 115.751911][ T59] usb usb38-port1: attempt power cycle [ 116.380453][ T5733] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 116.470112][ T7323] Bluetooth: MGMT ver 1.23 [ 116.478081][ T59] usb usb38-port1: unable to enumerate USB device [ 116.502635][ T7319] netlink: 'syz.0.315': attribute type 1 has an invalid length. [ 116.527554][ T7319] bond2: entered promiscuous mode [ 116.530699][ T42] audit: type=1326 audit(1786688580.941:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.2.316" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f54fec code=0x0 [ 116.541353][ T7319] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.549686][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.315'. [ 116.552561][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.315'. [ 116.635905][ T7337] FAULT_INJECTION: forcing a failure. [ 116.635905][ T7337] name failslab, interval 1, probability 0, space 0, times 0 [ 116.641238][ T7337] CPU: 2 UID: 0 PID: 7337 Comm: syz.0.317 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.641255][ T7337] Tainted: [L]=SOFTLOCKUP [ 116.641259][ T7337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.641265][ T7337] Call Trace: [ 116.641270][ T7337] [ 116.641275][ T7337] dump_stack_lvl+0x100/0x190 [ 116.641293][ T7337] should_fail_ex.cold+0x5/0xa [ 116.641306][ T7337] should_failslab+0xc2/0x120 [ 116.641322][ T7337] __kmalloc_flags_noprof+0x122/0x8b0 [ 116.641334][ T7337] ? alloc_slab_obj_exts+0x5a/0x160 [ 116.641348][ T7337] alloc_slab_obj_exts+0x5a/0x160 [ 116.641360][ T7337] __memcg_slab_post_alloc_hook+0x3d4/0x1160 [ 116.641382][ T7337] ? kasan_save_track+0x14/0x30 [ 116.641397][ T7337] kmem_cache_alloc_noprof+0x587/0x6a0 [ 116.641411][ T7337] ? inet_bind2_bucket_create+0x36/0x5f0 [ 116.641437][ T7337] inet_bind2_bucket_create+0x36/0x5f0 [ 116.641450][ T7337] __inet_hash_connect+0x1527/0x2000 [ 116.641466][ T7337] ? __pfx___inet6_check_established+0x10/0x10 [ 116.641481][ T7337] ? __pfx___inet_hash_connect+0x10/0x10 [ 116.641493][ T7337] ? inet6_ehashfn+0x25/0x3e0 [ 116.641505][ T7337] ? inet6_hash_connect+0xe7/0x180 [ 116.641518][ T7337] tcp_v6_connect+0x166f/0x2660 [ 116.641549][ T7337] ? __pfx_tcp_v6_connect+0x10/0x10 [ 116.641577][ T7337] __inet_stream_connect+0x208/0xfa0 [ 116.641610][ T7337] ? __pfx___inet_stream_connect+0x10/0x10 [ 116.641630][ T7337] ? kasan_save_track+0x14/0x30 [ 116.641643][ T7337] ? __kasan_kmalloc+0xaa/0xb0 [ 116.641657][ T7337] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 116.641668][ T7337] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 116.641682][ T7337] tcp_sendmsg_fastopen+0x3ed/0x750 [ 116.641695][ T7337] tcp_sendmsg_locked+0x276d/0x44d0 [ 116.641709][ T7337] ? __lock_acquire+0x49f/0x1a40 [ 116.641719][ T7337] ? __lock_acquire+0x49f/0x1a40 [ 116.641729][ T7337] ? __pfx___might_resched+0x10/0x10 [ 116.641748][ T7337] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 116.641760][ T7337] ? do_raw_spin_lock+0x128/0x260 [ 116.641772][ T7337] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 116.641787][ T7337] ? __local_bh_enable_ip+0x9e/0x120 [ 116.641811][ T7337] tcp_sendmsg+0x2e/0x50 [ 116.641820][ T7337] ? __pfx_tcp_sendmsg+0x10/0x10 [ 116.641830][ T7337] inet6_sendmsg+0xb9/0x140 [ 116.641844][ T7337] ____sys_sendmsg+0x704/0xbe0 [ 116.641858][ T7337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.641872][ T7337] ? _kstrtoull+0x13c/0x1f0 [ 116.641885][ T7337] ? __pfx__kstrtoull+0x10/0x10 [ 116.641897][ T7337] ___sys_sendmsg+0x190/0x1e0 [ 116.641910][ T7337] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.641921][ T7337] ? __lock_acquire+0x49f/0x1a40 [ 116.641946][ T7337] __sys_sendmmsg+0x309/0x440 [ 116.641963][ T7337] ? __pfx___sys_sendmmsg+0x10/0x10 [ 116.641991][ T7337] ? find_held_lock+0x2b/0x80 [ 116.642010][ T7337] ? __mutex_unlock_slowpath+0x35d/0x930 [ 116.642037][ T7337] ? fput+0x79/0x100 [ 116.642050][ T7337] ? ksys_write+0x1ac/0x250 [ 116.642063][ T7337] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 116.642075][ T7337] ? lockdep_hardirqs_on+0x78/0x100 [ 116.642090][ T7337] __do_fast_syscall_32+0xe7/0x970 [ 116.642107][ T7337] ? lockdep_hardirqs_on+0x78/0x100 [ 116.642123][ T7337] do_fast_syscall_32+0x32/0x70 [ 116.642139][ T7337] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.642154][ T7337] RIP: 0023:0xf7ff4fec [ 116.642169][ T7337] Code: Unable to access opcode bytes at 0xf7ff4fc2. [ 116.642174][ T7337] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 116.642185][ T7337] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002fc0 [ 116.642191][ T7337] RDX: 0000000000000001 RSI: 0000000020080058 RDI: 0000000000000000 [ 116.642197][ T7337] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.642203][ T7337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.642209][ T7337] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.642222][ T7337] [ 117.181441][ T7366] FAULT_INJECTION: forcing a failure. [ 117.181441][ T7366] name failslab, interval 1, probability 0, space 0, times 0 [ 117.185753][ T7366] CPU: 3 UID: 0 PID: 7366 Comm: syz.3.325 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.185771][ T7366] Tainted: [L]=SOFTLOCKUP [ 117.185786][ T7366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.185794][ T7366] Call Trace: [ 117.185799][ T7366] [ 117.185804][ T7366] dump_stack_lvl+0x100/0x190 [ 117.185821][ T7366] should_fail_ex.cold+0x5/0xa [ 117.185836][ T7366] should_failslab+0xc2/0x120 [ 117.185851][ T7366] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 117.185866][ T7366] ? __alloc_skb+0x5b7/0x710 [ 117.185881][ T7366] ? __alloc_skb+0x140/0x710 [ 117.185897][ T7366] __alloc_skb+0x140/0x710 [ 117.185910][ T7366] ? __alloc_skb+0x5b7/0x710 [ 117.185924][ T7366] ? __pfx___alloc_skb+0x10/0x10 [ 117.185952][ T7366] netlink_alloc_large_skb+0x69/0x150 [ 117.185970][ T7366] netlink_sendmsg+0x680/0xda0 [ 117.185988][ T7366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.186003][ T7366] ? apparmor_socket_sendmsg+0x15b/0x270 [ 117.186017][ T7366] ____sys_sendmsg+0xa4d/0xbe0 [ 117.186028][ T7366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.186041][ T7366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.186059][ T7366] ___sys_sendmsg+0x190/0x1e0 [ 117.186072][ T7366] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.186090][ T7366] ? find_held_lock+0x2b/0x80 [ 117.186113][ T7366] __sys_sendmsg+0x160/0x210 [ 117.186129][ T7366] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.186148][ T7366] ? __pfx_ksys_write+0x10/0x10 [ 117.186162][ T7366] __do_fast_syscall_32+0xe7/0x970 [ 117.186180][ T7366] ? lockdep_hardirqs_on+0x78/0x100 [ 117.186196][ T7366] do_fast_syscall_32+0x32/0x70 [ 117.186213][ T7366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.186228][ T7366] RIP: 0023:0xf709efec [ 117.186244][ T7366] Code: Unable to access opcode bytes at 0xf709efc2. [ 117.186249][ T7366] RSP: 002b:00000000f546c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 117.186260][ T7366] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 117.186267][ T7366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.186272][ T7366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.186278][ T7366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.186285][ T7366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.186298][ T7366] [ 118.054443][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'. [ 118.775511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!! [ 119.418789][ T7403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.332'. [ 119.565910][ T7407] netlink: 'syz.1.333': attribute type 4 has an invalid length. [ 119.568413][ T7407] netlink: 17 bytes leftover after parsing attributes in process `syz.1.333'. [ 119.733303][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'. [ 120.381468][ T7430] syz_tun: entered allmulticast mode [ 120.387092][ T7430] syz_tun: left allmulticast mode [ 121.281253][ T7442] syz_tun: entered allmulticast mode [ 121.321560][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'. [ 121.880163][ C2] vcan0: j1939_tp_rxtimer: 0xffff888012ef6000: rx timeout, send abort [ 121.931277][ T7388] Dynamic Preempt: lazy [ 122.382776][ C2] vcan0: j1939_tp_rxtimer: 0xffff888029934000: rx timeout, send abort [ 122.386160][ C2] vcan0: j1939_tp_rxtimer: 0xffff888012ef6000: abort rx timeout. Force session deactivation [ 122.498873][ T7472] tipc: Started in network mode [ 122.501050][ T7472] tipc: Node identity , cluster identity 4711 [ 122.503598][ T7472] tipc: Failed to obtain node identity [ 122.506038][ T7472] tipc: Enabling of bearer rejected, failed to enable media [ 122.562959][ T5733] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 122.567338][ T7476] FAULT_INJECTION: forcing a failure. [ 122.567338][ T7476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.575067][ T7476] CPU: 2 UID: 0 PID: 7476 Comm: syz.3.355 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 122.575087][ T7476] Tainted: [L]=SOFTLOCKUP [ 122.575091][ T7476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.575098][ T7476] Call Trace: [ 122.575102][ T7476] [ 122.575107][ T7476] dump_stack_lvl+0x100/0x190 [ 122.575125][ T7476] should_fail_ex.cold+0x5/0xa [ 122.575139][ T7476] _copy_to_user+0x32/0xd0 [ 122.575159][ T7476] simple_read_from_buffer+0xcb/0x170 [ 122.575179][ T7476] proc_fail_nth_read+0x1af/0x230 [ 122.575197][ T7476] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.575215][ T7476] ? rw_verify_area+0xce/0x6d0 [ 122.575232][ T7476] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.575249][ T7476] vfs_read+0x1e4/0xb40 [ 122.575261][ T7476] ? __pfx_vfs_read+0x10/0x10 [ 122.575270][ T7476] ? find_held_lock+0x2b/0x80 [ 122.575286][ T7476] ? __fget_files+0x215/0x3d0 [ 122.575300][ T7476] ? __fget_files+0x21f/0x3d0 [ 122.575314][ T7476] ksys_read+0x12a/0x250 [ 122.575324][ T7476] ? __pfx_ksys_read+0x10/0x10 [ 122.575338][ T7476] do_int80_emulation+0x14b/0x720 [ 122.575358][ T7476] asm_int80_emulation+0x1a/0x20 [ 122.575369][ T7476] RIP: 0023:0xf71d74eb [ 122.575379][ T7476] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 122.575389][ T7476] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 122.575401][ T7476] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548d5d0 [ 122.575408][ T7476] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 122.575413][ T7476] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.575419][ T7476] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 122.575425][ T7476] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.575438][ T7476] [ 122.734040][ T41] nvmet: connect request for invalid subsystem testnqn! [ 122.744095][ T7487] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 122.769627][ T7494] netlink: zone id is out of range [ 122.771327][ T7494] netlink: zone id is out of range [ 122.772998][ T7494] netlink: zone id is out of range [ 122.774708][ T7494] netlink: zone id is out of range [ 122.776641][ T7494] netlink: zone id is out of range [ 122.778374][ T7494] netlink: zone id is out of range [ 122.780081][ T7494] netlink: zone id is out of range [ 122.781936][ T7494] netlink: zone id is out of range [ 122.783633][ T7494] netlink: zone id is out of range [ 122.785705][ T7494] netlink: zone id is out of range [ 122.826392][ T5733] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 122.828390][ T7497] netlink: 4164 bytes leftover after parsing attributes in process `syz.1.362'. [ 122.838010][ T7497] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 122.848788][ T42] audit: type=1326 audit(1786688587.261:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.362" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 122.868662][ T7501] tipc: Started in network mode [ 122.870347][ T7501] tipc: Node identity , cluster identity 4711 [ 122.872285][ T7501] tipc: Failed to obtain node identity [ 122.873992][ T7501] tipc: Enabling of bearer rejected, failed to enable media [ 122.886076][ C2] vcan0: j1939_tp_rxtimer: 0xffff888029934000: abort rx timeout. Force session deactivation [ 122.931278][ T5733] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 123.494023][ T7518] netlink: 224 bytes leftover after parsing attributes in process `syz.2.368'. [ 123.498800][ T7518] netlink: 44 bytes leftover after parsing attributes in process `syz.2.368'. [ 123.501659][ T7518] netlink: 36 bytes leftover after parsing attributes in process `syz.2.368'. [ 123.694578][ T7531] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 123.707514][ T7531] tipc: Started in network mode [ 123.709586][ T7531] tipc: Node identity , cluster identity 4711 [ 123.711998][ T7531] tipc: Failed to obtain node identity [ 123.714190][ T7531] tipc: Enabling of bearer rejected, failed to enable media [ 123.720214][ T7531] syzkaller0: entered promiscuous mode [ 123.722348][ T7531] syzkaller0: entered allmulticast mode [ 123.821990][ T7536] tipc: Started in network mode [ 123.824086][ T7536] tipc: Node identity , cluster identity 4711 [ 123.827899][ T7536] tipc: Failed to obtain node identity [ 123.830296][ T7536] tipc: Enabling of bearer rejected, failed to enable media [ 123.889442][ T5733] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 125.203041][ T7574] FAULT_INJECTION: forcing a failure. [ 125.203041][ T7574] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 125.203068][ T7574] CPU: 1 UID: 0 PID: 7574 Comm: syz.3.381 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 125.203084][ T7574] Tainted: [L]=SOFTLOCKUP [ 125.203087][ T7574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.203094][ T7574] Call Trace: [ 125.203099][ T7574] [ 125.203103][ T7574] dump_stack_lvl+0x100/0x190 [ 125.203121][ T7574] should_fail_ex.cold+0x5/0xa [ 125.203132][ T7574] ? prepare_alloc_pages+0x16d/0x5f0 [ 125.203151][ T7574] should_fail_alloc_page+0xeb/0x140 [ 125.203168][ T7574] prepare_alloc_pages+0x1f0/0x5f0 [ 125.203186][ T7574] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 125.203200][ T7574] ? __kernel_text_address+0xd/0x30 [ 125.203220][ T7574] ? lock_acquire+0x1b9/0x370 [ 125.203232][ T7574] ? __bfs+0x150/0x2a0 [ 125.203247][ T7574] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 125.203261][ T7574] ? check_irq_usage+0xe5/0x810 [ 125.203277][ T7574] ? stack_depot_save_flags+0x479/0x9d0 [ 125.203295][ T7574] ? __bfs+0x150/0x2a0 [ 125.203341][ T7574] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 125.203375][ T7574] ? policy_nodemask+0xed/0x4f0 [ 125.203393][ T7574] alloc_pages_mpol+0x1fb/0x540 [ 125.203416][ T7574] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 125.203444][ T7574] ___kmalloc_large_node+0xe5/0x120 [ 125.203473][ T7574] __kmalloc_large_node_noprof+0x1c/0x70 [ 125.203501][ T7574] __kmalloc_noprof+0x5a1/0x820 [ 125.203520][ T7574] ? vc_do_resize+0x1dd/0xeb0 [ 125.203554][ T7574] vc_do_resize+0x1dd/0xeb0 [ 125.203567][ T7574] ? fb_match_mode+0x2b3/0x360 [ 125.203587][ T7574] ? __pfx_fb_match_mode+0x10/0x10 [ 125.203601][ T7574] ? __pfx_vc_do_resize+0x10/0x10 [ 125.203614][ T7574] ? __pfx_complement_pos+0x10/0x10 [ 125.203632][ T7574] fbcon_set_all_vcs+0x36f/0x470 [ 125.203652][ T7574] rotate_all_store+0x31e/0x410 [ 125.203669][ T7574] ? __pfx_rotate_all_store+0x10/0x10 [ 125.203686][ T7574] dev_attr_store+0x58/0x80 [ 125.203716][ T7574] ? __pfx_dev_attr_store+0x10/0x10 [ 125.203732][ T7574] sysfs_kf_write+0xf2/0x150 [ 125.203750][ T7574] kernfs_fop_write_iter+0x3e0/0x5f0 [ 125.203763][ T7574] ? __pfx_sysfs_kf_write+0x10/0x10 [ 125.203779][ T7574] vfs_write+0x6ac/0x1050 [ 125.203791][ T7574] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 125.203806][ T7574] ? __pfx_vfs_write+0x10/0x10 [ 125.203815][ T7574] ? find_held_lock+0x2b/0x80 [ 125.203838][ T7574] ksys_write+0x12a/0x250 [ 125.203848][ T7574] ? __pfx_ksys_write+0x10/0x10 [ 125.203857][ T7574] ? ksys_write+0x1ac/0x250 [ 125.203869][ T7574] ? __pfx_ksys_write+0x10/0x10 [ 125.203882][ T7574] __do_fast_syscall_32+0xe7/0x970 [ 125.203899][ T7574] ? lockdep_hardirqs_on+0x78/0x100 [ 125.203916][ T7574] do_fast_syscall_32+0x32/0x70 [ 125.203932][ T7574] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.203947][ T7574] RIP: 0023:0xf709efec [ 125.203961][ T7574] Code: Unable to access opcode bytes at 0xf709efc2. [ 125.203966][ T7574] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 125.203977][ T7574] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 125.203983][ T7574] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.203989][ T7574] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.203996][ T7574] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 125.204002][ T7574] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.204015][ T7574] [ 125.444766][ T7580] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 125.456506][ T7580] tipc: Started in network mode [ 125.458505][ T7580] tipc: Node identity , cluster identity 4711 [ 125.460854][ T7580] tipc: Failed to obtain node identity [ 125.462607][ T7580] tipc: Enabling of bearer rejected, failed to enable media [ 125.466730][ T7580] syzkaller0: entered promiscuous mode [ 125.468540][ T7580] syzkaller0: entered allmulticast mode [ 125.509808][ T7582] tipc: Started in network mode [ 125.511750][ T7582] tipc: Node identity , cluster identity 4711 [ 125.513867][ T7582] tipc: Failed to obtain node identity [ 125.515789][ T7582] tipc: Enabling of bearer rejected, failed to enable media [ 125.567739][ T5733] Bluetooth: hci1: Ignoring connect complete event for invalid link type qemu-system-x86_64: vtd_irte_get: detected non-present IRTE (index=15, high=0x0, low=0x0) [ 125.658033][ T7589] ------------[ cut here ]------------ [ 125.659971][ T7589] remove_proc_entry: removing non-empty directory 'irq/20', leaking at least 'comedi_parport' [ 125.663113][ T7589] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#1: syz.0.386/7589 [ 125.667353][ T7589] Modules linked in: [ 125.669320][ T7589] CPU: 1 UID: 0 PID: 7589 Comm: syz.0.386 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 125.672593][ T7589] Tainted: [L]=SOFTLOCKUP [ 125.673945][ T7589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.677286][ T7589] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 125.679059][ T7589] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 29 3a 6d 0e 49 8b 95 d0 00 00 00 48 c7 c6 80 fa e9 8b <67> 48 0f b9 3a e9 2a fe ff ff e8 4c c3 4e ff 48 8d 7d 18 48 b8 00 [ 125.685008][ T7589] RSP: 0000:ffffc900033af6a0 EFLAGS: 00010246 [ 125.686899][ T7589] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88802424685c [ 125.689409][ T7589] RDX: ffff88801d3765dc RSI: ffffffff8be9fa80 RDI: ffffffff91284660 [ 125.691857][ T7589] RBP: ffff888024246838 R08: ffff888050891edc R09: ffffed1004848cf3 [ 125.694300][ T7589] R10: ffff88802424679b R11: 0000000000000000 R12: ffff888024246780 [ 125.696896][ T7589] R13: ffff88801d376500 R14: ffff888050891eb8 R15: dffffc0000000000 [ 125.699519][ T7589] FS: 0000000000000000(0000) GS:ffff888096cf3000(0063) knlGS:00000000f54b6b40 [ 125.702309][ T7589] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 125.704290][ T7589] CR2: 00000000f74743f4 CR3: 000000004f705000 CR4: 0000000000352ef0 [ 125.706805][ T7589] DR0: ffffffffffff7fff DR1: 00000000000001f8 DR2: 0000000000000002 [ 125.709265][ T7589] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 125.711704][ T7589] Call Trace: [ 125.712778][ T7589] [ 125.713737][ T7589] ? __pfx_remove_proc_entry+0x10/0x10 [ 125.715455][ T7589] ? mtree_load+0x32d/0xa90 [ 125.716864][ T7589] ? __pfx_mtree_load+0x10/0x10 [ 125.718394][ T7589] ? rcu_is_watching+0x12/0xc0 [ 125.719940][ T7589] unregister_irq_proc+0x206/0x2a0 [ 125.721548][ T7589] ? __pfx_unregister_irq_proc+0x10/0x10 [ 125.723297][ T7589] free_desc+0x89/0x330 [ 125.724487][ T42] audit: type=1326 audit(1786688590.131:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.388" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709efec code=0x0 [ 125.724557][ T7589] ? __pfx_free_desc+0x10/0x10 [ 125.734517][ T7589] ? kasan_quarantine_put+0x104/0x240 [ 125.736507][ T7589] ? lockdep_hardirqs_on+0x78/0x100 [ 125.738133][ T7589] ? irq_domain_free_irqs+0x3e0/0x5c0 [ 125.739845][ T7589] irq_free_descs+0x84/0xc0 [ 125.741275][ T7589] irq_domain_free_irqs+0x46a/0x5c0 [ 125.742845][ T7589] mp_unmap_irq+0xf8/0x130 [ 125.744245][ T7589] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 125.746240][ T7589] acpi_unregister_gsi_ioapic+0x40/0x60 [ 125.747959][ T7589] acpi_unregister_gsi+0x25/0x40 [ 125.749512][ T7589] acpi_pci_irq_disable+0x275/0x360 [ 125.751173][ T7589] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 125.752908][ T7589] pcibios_disable_device+0x89/0xb0 [ 125.754479][ T7589] do_pci_disable_device+0x9f/0x100 [ 125.756190][ T7589] ? __pfx_do_pci_disable_device+0x10/0x10 [ 125.758011][ T7589] pci_disable_device+0x130/0x270 [ 125.759588][ T7589] pci_device_remove+0xb2/0x1d0 [ 125.761574][ T7589] ? __pfx_pci_device_remove+0x10/0x10 [ 125.763274][ T7589] device_remove+0xcb/0x180 [ 125.765152][ T7589] device_release_driver_internal+0x44e/0x620 [ 125.767071][ T7589] pci_stop_bus_device+0x120/0x160 [ 125.768713][ T7589] pci_stop_and_remove_bus_device+0x58/0xa0 [ 125.770588][ T7589] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 125.772538][ T7589] remove_store+0x123/0x140 [ 125.773929][ T7589] ? __pfx_remove_store+0x10/0x10 [ 125.775614][ T7589] ? find_held_lock+0x2b/0x80 [ 125.777134][ T7589] ? sysfs_file_kobj+0xe4/0x290 [ 125.778647][ T7589] ? sysfs_file_kobj+0xe4/0x290 [ 125.780219][ T7589] ? __pfx_remove_store+0x10/0x10 [ 125.781750][ T7589] dev_attr_store+0x58/0x80 [ 125.783138][ T7589] ? __pfx_dev_attr_store+0x10/0x10 [ 125.784777][ T7589] sysfs_kf_write+0xf2/0x150 [ 125.786306][ T7589] kernfs_fop_write_iter+0x3e0/0x5f0 [ 125.787961][ T7589] ? __pfx_sysfs_kf_write+0x10/0x10 [ 125.789594][ T7589] vfs_write+0x6ac/0x1050 [ 125.790977][ T7589] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 125.792800][ T7589] ? __pfx_vfs_write+0x10/0x10 [ 125.794311][ T7589] ? find_held_lock+0x2b/0x80 [ 125.795950][ T7589] ksys_write+0x12a/0x250 [ 125.797316][ T7589] ? __pfx_ksys_write+0x10/0x10 [ 125.798829][ T7589] ? ksys_write+0x1ac/0x250 [ 125.800288][ T7589] ? __pfx_ksys_write+0x10/0x10 [ 125.801812][ T7589] __do_fast_syscall_32+0xe7/0x970 [ 125.803411][ T7589] ? lockdep_hardirqs_on+0x78/0x100 [ 125.805110][ T7589] do_fast_syscall_32+0x32/0x70 [ 125.806651][ T7589] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.808617][ T7589] RIP: 0023:0xf7ff4fec [ 125.809937][ T7589] Code: Unable to access opcode bytes at 0xf7ff4fc2. [ 125.811980][ T7589] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 125.814565][ T7589] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000400 [ 125.817098][ T7589] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.819529][ T7589] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.821987][ T7589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.824432][ T7589] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.826960][ T7589] [ 125.827922][ T7589] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 125.830193][ T7589] CPU: 1 UID: 0 PID: 7589 Comm: syz.0.386 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 125.833460][ T7589] Tainted: [L]=SOFTLOCKUP [ 125.834815][ T7589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.837956][ T7589] Call Trace: [ 125.839011][ T7589] [ 125.839964][ T7589] dump_stack_lvl+0x100/0x190 [ 125.841445][ T7589] vpanic+0x552/0x970 [ 125.842701][ T7589] ? __pfx_vpanic+0x10/0x10 [ 125.844123][ T7589] panic+0xd1/0xe0 [ 125.845316][ T7589] ? __pfx_panic+0x10/0x10 [ 125.846733][ T7589] ? check_panic_on_warn+0x1f/0x90 [ 125.848357][ T7589] check_panic_on_warn.cold+0x19/0x34 [ 125.850053][ T7589] ? remove_proc_entry+0x4e7/0x610 [ 125.851656][ T7589] __warn.cold+0x191/0x318 [ 125.853072][ T7589] __report_bug+0x30f/0x440 [ 125.854516][ T7589] ? remove_proc_entry+0x4e7/0x610 [ 125.856129][ T7589] ? __pfx___report_bug+0x10/0x10 [ 125.857719][ T7589] ? __do_fast_syscall_32+0xe7/0x970 [ 125.859371][ T7589] ? do_fast_syscall_32+0x32/0x70 [ 125.860946][ T7589] ? do_raw_spin_lock+0x128/0x260 [ 125.862477][ T7589] ? find_held_lock+0x2b/0x80 [ 125.863988][ T7589] ? proc_entry_rundown+0x158/0x1e0 [ 125.865613][ T7589] ? proc_entry_rundown+0x158/0x1e0 [ 125.867200][ T7589] report_bug_entry+0xe1/0x290 [ 125.868725][ T7589] ? remove_proc_entry+0x4f5/0x610 [ 125.870339][ T7589] handle_bug+0x1cd/0x2a0 [ 125.871711][ T7589] exc_invalid_op+0x17/0x50 [ 125.873173][ T7589] asm_exc_invalid_op+0x1a/0x20 [ 125.874736][ T7589] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 125.876544][ T7589] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 29 3a 6d 0e 49 8b 95 d0 00 00 00 48 c7 c6 80 fa e9 8b <67> 48 0f b9 3a e9 2a fe ff ff e8 4c c3 4e ff 48 8d 7d 18 48 b8 00 [ 125.882462][ T7589] RSP: 0000:ffffc900033af6a0 EFLAGS: 00010246 [ 125.884357][ T7589] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88802424685c [ 125.886802][ T7589] RDX: ffff88801d3765dc RSI: ffffffff8be9fa80 RDI: ffffffff91284660 [ 125.889213][ T7589] RBP: ffff888024246838 R08: ffff888050891edc R09: ffffed1004848cf3 [ 125.891595][ T7589] R10: ffff88802424679b R11: 0000000000000000 R12: ffff888024246780 [ 125.893968][ T7589] R13: ffff88801d376500 R14: ffff888050891eb8 R15: dffffc0000000000 [ 125.896453][ T7589] ? __pfx_remove_proc_entry+0x10/0x10 [ 125.898150][ T7589] ? mtree_load+0x32d/0xa90 [ 125.899612][ T7589] ? __pfx_mtree_load+0x10/0x10 [ 125.901303][ T7589] ? rcu_is_watching+0x12/0xc0 [ 125.902859][ T7589] unregister_irq_proc+0x206/0x2a0 [ 125.904495][ T7589] ? __pfx_unregister_irq_proc+0x10/0x10 [ 125.906303][ T7589] free_desc+0x89/0x330 [ 125.907632][ T7589] ? __pfx_free_desc+0x10/0x10 [ 125.909167][ T7589] ? kasan_quarantine_put+0x104/0x240 [ 125.910869][ T7589] ? lockdep_hardirqs_on+0x78/0x100 [ 125.912535][ T7589] ? irq_domain_free_irqs+0x3e0/0x5c0 [ 125.914245][ T7589] irq_free_descs+0x84/0xc0 [ 125.915710][ T7589] irq_domain_free_irqs+0x46a/0x5c0 [ 125.917375][ T7589] mp_unmap_irq+0xf8/0x130 [ 125.918827][ T7589] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 125.920822][ T7589] acpi_unregister_gsi_ioapic+0x40/0x60 [ 125.922569][ T7589] acpi_unregister_gsi+0x25/0x40 [ 125.924115][ T7589] acpi_pci_irq_disable+0x275/0x360 [ 125.925741][ T7589] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 125.927482][ T7589] pcibios_disable_device+0x89/0xb0 [ 125.929082][ T7589] do_pci_disable_device+0x9f/0x100 [ 125.930726][ T7589] ? __pfx_do_pci_disable_device+0x10/0x10 [ 125.932565][ T7589] pci_disable_device+0x130/0x270 [ 125.934162][ T7589] pci_device_remove+0xb2/0x1d0 [ 125.935708][ T7589] ? __pfx_pci_device_remove+0x10/0x10 [ 125.937376][ T7589] device_remove+0xcb/0x180 [ 125.938764][ T7589] device_release_driver_internal+0x44e/0x620 [ 125.940703][ T7589] pci_stop_bus_device+0x120/0x160 [ 125.942320][ T7589] pci_stop_and_remove_bus_device+0x58/0xa0 [ 125.944183][ T7589] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 125.946224][ T7589] remove_store+0x123/0x140 [ 125.947661][ T7589] ? __pfx_remove_store+0x10/0x10 [ 125.949260][ T7589] ? find_held_lock+0x2b/0x80 [ 125.950762][ T7589] ? sysfs_file_kobj+0xe4/0x290 [ 125.952321][ T7589] ? sysfs_file_kobj+0xe4/0x290 [ 125.953864][ T7589] ? __pfx_remove_store+0x10/0x10 [ 125.955473][ T7589] dev_attr_store+0x58/0x80 [ 125.956902][ T7589] ? __pfx_dev_attr_store+0x10/0x10 [ 125.958498][ T7589] sysfs_kf_write+0xf2/0x150 [ 125.960005][ T7589] kernfs_fop_write_iter+0x3e0/0x5f0 [ 125.961682][ T7589] ? __pfx_sysfs_kf_write+0x10/0x10 [ 125.963228][ T7589] vfs_write+0x6ac/0x1050 [ 125.964556][ T7589] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 125.966337][ T7589] ? __pfx_vfs_write+0x10/0x10 [ 125.967789][ T7589] ? find_held_lock+0x2b/0x80 [ 125.969236][ T7589] ksys_write+0x12a/0x250 [ 125.970618][ T7589] ? __pfx_ksys_write+0x10/0x10 [ 125.972158][ T7589] ? ksys_write+0x1ac/0x250 [ 125.973620][ T7589] ? __pfx_ksys_write+0x10/0x10 [ 125.975175][ T7589] __do_fast_syscall_32+0xe7/0x970 [ 125.976812][ T7589] ? lockdep_hardirqs_on+0x78/0x100 [ 125.978502][ T7589] do_fast_syscall_32+0x32/0x70 [ 125.980064][ T7589] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.982073][ T7589] RIP: 0023:0xf7ff4fec [ 125.983378][ T7589] Code: Unable to access opcode bytes at 0xf7ff4fc2. [ 125.985469][ T7589] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 125.988079][ T7589] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000400 [ 125.990592][ T7589] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.993499][ T7589] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.996576][ T7589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.999637][ T7589] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.002558][ T7589] [ 126.004250][ T7589] Kernel Offset: disabled [ 126.005813][ T7589] Rebooting in 86400 seconds..