last executing test programs: 1m12.621486493s ago: executing program 3 (id=227): r0 = socket$inet6(0x10, 0x4, 0x0) sendmsg(r0, 0x0, 0x20048000) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) write(r1, &(0x7f0000000300)="2e53ceadfce184ad2e74e5b66cc232acce9952476ecff0ff0c0738591e8528bbb6bdeb5da14094287635c17e19360de50ff2b5223b61d2986dcaaa397d68d4476253d3efd0f5d6b911165e32b4134ce4e330b339cac77f98f315315f0a04e8f5eb663476f8a0584158de79bae3bd7b6bb5956ed8b1bde7f2502c6b17dbe154bae852c646fac72bcca424b0788269bd2be68acdf281763b07d101c2c88f50227cd2f70c2a266e2447b098fdf4ce45caee9f150c49e5a082", 0xb7) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x3}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000180)) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000000), &(0x7f00000000c0)=0x4) mmap$fb(&(0x7f000016e000/0x1000)=nil, 0x1000, 0xc, 0x13, 0xffffffffffffffff, 0x20000) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000240), &(0x7f00000001c0)=0xffffffffffffff0b) 1m11.732820392s ago: executing program 3 (id=237): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) io_setup(0xa, &(0x7f0000000280)) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x143142, 0x80) 1m11.585213719s ago: executing program 3 (id=239): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x16, 0xa01, 0x0, 0x0, {0x8}, [@typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x1c}}, 0x0) 1m11.488260523s ago: executing program 3 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x5, &(0x7f00000000c0)={0x0, 0x0, 0x1000000000000002, 0x162d}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01df25270000000800030000000000000000", @ANYRES32=r3, @ANYBLOB="0a000600d34885f3359800000600360003000000"], 0x30}}, 0x4) 1m11.392461373s ago: executing program 3 (id=244): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="b5", 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e27, @rand_addr=0x64010100}, 0xfffffffffffffefc, &(0x7f0000000040)=[{&(0x7f0000000240)="d8a901000000000000000783f0bf12464ffe5d9773544a6ea1759210c6159f3cd265008f77e354661d3f250aaf60d100dd90f2d4257f12c6abc6abfe0c0a9eb39d3fe9bd8a3dc314b595e7b2833ddfb0988fb48a834c1a556736096022", 0x93}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000180), 0x43) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x3000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r3, 0x0, 0x0) write(r0, &(0x7f0000000500)='oom_score_adj & 1', 0x11) 1m10.301534372s ago: executing program 3 (id=255): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 54.831776785s ago: executing program 32 (id=255): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 5.202454577s ago: executing program 0 (id=645): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) 5.202012921s ago: executing program 0 (id=646): syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x3ff, &(0x7f0000000000)) getegid() r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000240)="08000000778cb8078e007da7528bdec1c3b7e028ca894c871b56c61622a22fb9663c87dc91c2f62d232ee3e1d9bb31c7a79507a5ff21b1888b030092434cb115", 0x40}, {0x0}, {&(0x7f00000003c0)="a66ce993b0c91f1ec1f2c31a5c64e0033b139074cd0a0a4c79d229faca4665de6283ff2613a25807ac5683eff56b94fcab4ab34e94aebfa09b375327c2e380e257d7d61b89f8262875e335a48802db22a1975a56113cd9370227c0f91f0bbe45899f084bb2d4f86d5aa269086a06ed", 0x6f}, {&(0x7f0000000440)="1601165173b17d1d24d6a94eb28740017eac170b5c3233fe5eb409d1c0b13d3ffeacbe2a0a95f2e1cf5ea8bffe95577bf08c61e595fc5b120677f68f9b2299255183c28961729e5b3648def69673880e8dd3f6b235c8935845784b34e179db87ed8ab7f8268acea007a4d4512e92b2bd68d19feb13a5927d2520", 0x7a}], 0x4) syz_open_dev$vim2m(0x0, 0x0, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r2, 0x0, 0x24002000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4801) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 4.339461903s ago: executing program 1 (id=651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val={0x6000, 0x1c}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x4000, 0x9, 0x11, 0x0, @multicast2, @empty}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x24, 0x100, @void}}}}}}}}, 0x36) 4.252799291s ago: executing program 0 (id=652): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r6 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(r6, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x5, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0xffffffff, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x1, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 4.067855173s ago: executing program 1 (id=653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local, 0x3}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @in={0x2, 0x4e20, @private=0xa010102}, 0x501, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x300}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000001a80)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000005040)=0x1, 0x4) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf19, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xffffffff}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x39, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af", @generic="68eb7e22475186e591e23a"]}]}, 0x50}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 3.439162395s ago: executing program 2 (id=659): times(0xfffffffffffffffe) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x4076, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x2, 0x8, 0xd780, 0xa1, 0x0, 0x6, 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) setns(0xc9, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000040), 0x2c}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r3, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000240), 0x4) bind$rds(r4, &(0x7f0000000440)={0x2, 0x4e22, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) exit(0x1ff) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) connect$rds(r3, &(0x7f0000000500)={0x2, 0x4e22, @loopback}, 0x10) sendto(r3, &(0x7f0000000600)='hello ', 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='N', 0x1, 0x7f7ffffe) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x100, r8, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) 2.910728765s ago: executing program 1 (id=660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r4, 0x0) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x400, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfb, 0x8, 0x6, 0x5, 0x0, 0x9, 0x3, 0x2}}, {0x8, 0x2, [0x0, 0x5]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x200040e0}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a40000000060a010400000000000000000a0004050900010073797a31000000002800048010000180090001006d61737100000000140001800e000100636f6e6e6c696d69740000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f00000001c0)=0x7) read(r9, &(0x7f00000042c0)=""/4116, 0x1014) socket$netlink(0x10, 0x3, 0x10) 2.567863826s ago: executing program 2 (id=661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) syz_open_procfs$userns(0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x900, 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000540)={0x0, 0xfffffffffffffee2, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf253d00000008000300", @ANYRES32=r2, @ANYBLOB="08005d0001070000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40810) 2.38451197s ago: executing program 2 (id=663): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x2a0}}], 0x1, 0x24008010) 2.242397399s ago: executing program 2 (id=665): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff1100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0x36, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket(0x400000000010, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x7, 0x700, 0x12f, 0x1, {{0xa, 0x4, 0x0, 0x24, 0x28, 0x64, 0x0, 0x34, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@generic={0x86, 0x7, "b0bdb1d91e"}, @timestamp_addr={0x44, 0xc, 0xd2, 0x1, 0x9, [{@multicast1, 0x401}]}]}}}}}) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x101000) ioctl$MON_IOCX_GET(r3, 0x400c9206, &(0x7f0000000500)={0x0, 0x0}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0xb, 0x4, @vifc_lcl_ifindex=r2, @broadcast}, 0x10) r4 = openat$ndctl0(0xffffff9c, &(0x7f00000002c0), 0x20802, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) socket$inet(0x2, 0x2, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000004a0ef3f71c3b2eb02000000ea220e7b14c8e7b6b78bd8b3380000000000000052fd1beba5f533cd3c59", @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) close(0x3) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f00000004c0)={0x6, 0x0, 0x5}) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000000)=0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000400)={0x2d6, 0x6, 0x0, 'queue0\x00', 0x3}) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[], 0xcc}}, 0x0) r9 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, &(0x7f0000000080)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 1.871623404s ago: executing program 4 (id=668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local, 0x3}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @in={0x2, 0x4e20, @private=0xa010102}, 0x501, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x300}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000001a80)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000005040)=0x1, 0x4) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf19, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xffffffff}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x39, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af", @generic="68eb7e22475186e591e23a"]}]}, 0x50}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.671147951s ago: executing program 1 (id=669): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f0000000100), &(0x7f0000000340), 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$vcsa(0x0, 0x1, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000400000004000000"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r4}, 0x38) 1.37610525s ago: executing program 1 (id=670): times(0xfffffffffffffffe) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x4076, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x2, 0x8, 0xd780, 0xa1, 0x0, 0x6, 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) setns(0xc9, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000000c0)={&(0x7f0000000040), 0x2c}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r3, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000240), 0x4) bind$rds(r4, &(0x7f0000000440)={0x2, 0x4e22, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) exit(0x1ff) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) connect$rds(r3, &(0x7f0000000500)={0x2, 0x4e22, @loopback}, 0x10) sendto(r3, &(0x7f0000000600)='hello wor', 0x9, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='N', 0x1, 0x7f7ffffe) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x100, r8, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) 1.322957746s ago: executing program 2 (id=671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local, 0x3}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @in={0x2, 0x4e20, @private=0xa010102}, 0x501, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x300}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000001a80)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000005040)=0x1, 0x4) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf19, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xffffffff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x43, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af", @generic="68eb7e22475186e591e23ad38a08862df02baf33ef"]}]}, 0x58}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.045923354s ago: executing program 0 (id=672): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6fa, 0x800, &(0x7f0000000080)) sendto$inet6(r1, 0x0, 0x0, 0x4000000, &(0x7f00000000c0)={0xa, 0x4, 0x4002, @dev={0xfe, 0x80, '\x00', 0x26}, 0x6}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x113001, 0x18a) fanotify_mark(r3, 0x8, 0xccafd085bc30189c, r4, &(0x7f0000000180)='./file0\x00') ioctl$TUNSETTXFILTER(r2, 0x401054d5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r6, 0x2000) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x7f11b2d5, 0x8, 0x2, 0xd2d0, 0x1, 0x6, 0x0, 0x91, 0xffffffff, 0x200, 0x0, 0x0, 0x8000, 0x0, 0x799, 0x0, 0x0, 0x8, 0x40000c, 0x5}}) r7 = getpgid(0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x494, 0x23, 0x409, 0x70bd25, 0x25dfdbff, {0x1d}, [@nested={0xdc, 0x57, 0x0, 0x1, [@typed={0x8, 0x90, 0x0, 0x0, @str=':\'^\x00'}, @generic="ef1a8b7acfd530336a9458c3c41fed2750d79d6e09d06961f17072688b2a0981b6149d2c882d14f654760900de3bedca8c5d10d4d9ac9cf2e399e415a24b20f601f2678df55e84a69b16742f343d3b88e42f1c9796304559441ade5325ffc15455fdb0b0bd8ae2fb18a3b80547d1c1b956ffdd0fab6577e0a55206dfa822d50b24b72836d02a6c828b88dd366453dea1a465dd9231a272eb", @typed={0xc, 0x95, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x121, 0x0, 0x0, @pid=r7}, @nested={0x21, 0xac, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @u32=0xd0b}, @nested={0x4, 0xe5}, @generic="e28d4407e1e2bb5e0d944a06c274b01267"]}]}, @typed={0x8, 0xcd, 0x0, 0x0, @fd=r2}, @typed={0x8, 0xb, 0x0, 0x0, @fd=r6}, @nested={0x1d5, 0x151, 0x0, 0x1, [@generic="1966d1e1", @typed={0x14, 0x85, 0x0, 0x0, @ipv6=@loopback}, @nested={0x1a4, 0x10e, 0x0, 0x1, [@nested={0x4, 0xf2}, @generic="2977ddcc19cb115ec61e707fa4410ec336be81375aff2fa13e395092e7b46f579d2981a5554b2f2321ba59f3cb6ed1f1a99713b8eca430abfaf0ee7e74b2cd23dc3e21321c94291c0a00ce723ce74ee2680343c7f602a7479c22186908325fb784293c393cd987", @typed={0x4, 0x61}, @nested={0x4, 0xf8}, @generic="9b50a60e13d385c1c01e78ee9c527828b576804b6aee58a7c3b2ff05443bb88f63a276cb94a9835c5745425c409fc865690b145f185a2c8739c65a536aadac35c6bc6e70412aba9a7a99d141e70813589029526d7fa8228d51f3cd37d7dec1372f69869bda9b8cdc6e5b654897a163e57bfd3c63f8aff3", @nested={0x4, 0x150}, @generic="c0539d66a23dd044a8170bb4e8160b08d02f7dc119c51fb0882b1aa58b9df4471b5878453d4828f6d881ca6cdd2bce99e9a7441b417273e99f6fb27767148c9ec318c8697925478f3e513bcf44a3691d73bf0efefebc9ebc55086f42b9dc328e1b211646c5de63b54093881ff55d0703d129022f9696a04d32a3e5ec813b1abd9749551f1ce04c0f8dc77a5217eb3e045b4e0311669a0d33d3f217041dfa1b99f1f21560876c5b37ddc666058670d9e800fd"]}, @generic="3a4c24752ea4d6d2f8c44e83315432b4b21d6ecf52"]}, @typed={0x8, 0x106, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}}, @nested={0x4, 0xf}, @generic="8efc281f86d8eef41f310efc99604f24aef5ba87d5f4585110b99cd2f431201ba3fb04c1813ada829e23002401dc2db57e7cbf", @typed={0xce, 0x152, 0x0, 0x0, @binary="1f71df161e71f01bc8124b5e65865a1c7db9211cc5895cbe47883e34d2760f463dbe16ff058c71061c1d549a5602303be33eb3400c7fd57ad740c942e97d71c76bb4fdfb343601dec239dd6b258129bd2b1ccd9e688849e4455cd191b1e615ad85c7cad2e903284daff996e74008480529c13ff8b47d753716ba0e06c442b7bc095b1e92e723df611affa3de0df9d5c560067d27b015435064ae992ea3783ae5d06dcc9d0aeedf6f1d940a1ff8e33aba26244958641b277376b1da159a79a243623cb392f07310366982"}, @nested={0xa0, 0x56, 0x0, 0x1, [@generic="b65a893d235cb2bb7cace7bb15da40a10487d7750a42365cdab51e95d5036942eddb2f4d529281844f43d06f8d343c20a8940b663a71e65056fcdf3a7b6708917eae8e499ac87e0a0f8c4aebc5feaecd550e9383ae853762e3a46054d04a358912d0066ba65ed25fb9a557795fbc0801957dcc66363199c9", @nested={0x22, 0x86, 0x0, 0x1, [@generic="083abe6ad002475d40115127b897bdc4e61d50a92d76", @typed={0x5, 0xe0, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0xc9, 0x0, 0x0, @str='syz_tun\x00'}]}, 0x494}, 0x1, 0x0, 0x0, 0x24044881}, 0x0) 839.085888ms ago: executing program 0 (id=673): r0 = socket$inet6(0x10, 0x4, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b92", 0x53}], 0x1}, 0x20048000) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) write(r1, &(0x7f0000000300)="2e53ceadfce184ad2e74e5b66cc232acce9952476ecff0ff0c0738591e8528bbb6bdeb5da14094287635c17e19360de50ff2b5223b61d2986dcaaa397d68d4476253d3efd0f5d6b911165e32b4134ce4e330b339cac77f98f315315f0a04e8f5eb663476f8a0584158de79bae3bd7b6bb5956ed8b1bde7f2502c6b17dbe154bae852c646fac72bcca424b0788269bd2be68acdf281763b07d101c2c88f50227cd2f70c2a266e2447b098fdf4ce45caee9f150c49e5a082", 0xb7) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x3}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000180)) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000000), &(0x7f00000000c0)=0x4) mmap$fb(&(0x7f000016e000/0x1000)=nil, 0x1000, 0xc, 0x13, 0xffffffffffffffff, 0x20000) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000240), &(0x7f00000001c0)=0xffffffffffffff0b) 835.293899ms ago: executing program 4 (id=674): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x6, 0x4, 0x100fff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (fail_nth: 13) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) setxattr$system_posix_acl(&(0x7f0000000380)='./file0/file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x7}, [], {0x4, 0x3}, [], {0x10, 0x4}, {0x20, 0x4}}, 0x24, 0x1) 770.244321ms ago: executing program 4 (id=675): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x463b, 0x0}, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) r1 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="d9190ac5610fdae92864c92c25422f74a12ce25274cbaebe5770c2a5fec708bba1bda2a68cb00a44bbd00984a62ce9d10db7e6e84ef6d6b378814aeca242e9da545a4a1acb990da74223c6dc48"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf131}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0800a0009e09000008009f0004000000080026008009"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0xb}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) r7 = openat$dir(0xffffff9c, &(0x7f0000000300)='./file0\x00', 0x10000, 0x149) faccessat2(r7, &(0x7f0000000340)='./file0\x00', 0x396, 0x1000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 447.433747ms ago: executing program 2 (id=676): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYBLOB="3f536f190ad79c6471e4f87256d139e2b201001e79e7be1b31af4a1d1681cc2314cdf8898a9c55c1a40d4ef5093fbad8ae30086cbc60cbd40cf6b025fddc8931e520cf27", @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYRES32], 0x50) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000280)="89deb398670a6735", 0x8}, {&(0x7f0000000300)="f04aa36a6b0f21b75c6423145d7a59048a1aad0754f103a0017967d8379b76300d70afd0de5534d6aabb2e36cd6e28c8c18b930e1dd15609464ac7993dde991b9b92efa4b6b9887256396c6a6133d36b22494c9c58fb65ac447117b03ff8d07fe719140c7cee50f932eea78bfb6dec361764c7c88178e10ffc59453d88e2a4406cbbf32c160a3856005b0ca571c314f1e45b1d66650b22e8c23d5031db31bf834a56d0f625589e882f78c332d5ab6f6f10e055c7d83c13f65a3a71472dbcc86689e1dc9d786ca98b2ae078e30d2b13c57f24a7", 0xd3}, {&(0x7f0000000400)="2136e9b0450716fbcfd98080b5d0ad5fca9f507423b4592bdae295c18696017d0dda20099e871271137663f37dc6bb466cb4922ec7a00d7d8f9d6866e27f00e64f77357b49a7eea19d32842af86493fa1285d10bf34ca193930b48aef7a08300423ebc8f959afa1c1888c7c737902bce22161abff31ef4ae74f96367a72afe3eb13b89500b181aa4254e257d51f7815b929d0c486758", 0x96}], 0x3, 0x2, 0x406d) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) brk(0x55555ede6001) r0 = socket(0x10, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = fsopen(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x450, 0x240, 0x240, 0x450, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xbb02, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x540) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0xffffffffffffff2c) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}}, 0x4000) madvise(&(0x7f0000016000/0x1000)=nil, 0x1000, 0xc) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, &(0x7f00000001c0)='discard') 446.225924ms ago: executing program 1 (id=677): mkdirat(0xffffffffffffff9c, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x2, 0x6, 0x3, 0x87, 0xffffffff, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = dup(r0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0x4000, 0x2, 0x9d, 0x0, r1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020000400900020073797a32000000000900010073797a30000000005000048018000180080001006f7366000c000280080001400000000424000180090001006d65746100000000140002800800024000000013080003"], 0xa4}}, 0x0) r3 = epoll_create1(0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_wait(r6, &(0x7f00000002c0), 0x0, 0x200) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) close(0xffffffffffffffff) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x44, 0x1a, 0x1, 0x2, 0xfffffffd, {0x7}, [@NDA_CACHEINFO={0x14, 0x3, {0x9}}, @NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x4004840) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000380)="ad56b6c5820fae9d6dcd3292ea54c7beef915dfa3d20fbcb3ed63bfcb5c0a2d3564c90c20033df6701d7ac9789b55d3df4a99fbd469078955057dc84e25eb8d02fa5b11608ffa603afd4a3be94fe88a6067fdd68826aa365b4bc37dfe214b8019a6aca34ba18909e83b9df3531f61c4988218ceabf2c73b71f5abe78805df6c79e28de61047f4af9088da27297f7e85a298539f65b0e43e5a9a73fe34f0f9b3d0b87f8c7ec714a49df606685b9ed657e26ff9dc8811b24e3e78132db1cb6d598806641c2a409007bfde044bb4d4a425993b3dcfe20e7891c397b8ffebb444067bbba22e046a40d9a7b8239baec1fd637", 0xf0) socket$nl_generic(0x10, 0x3, 0x10) 413.042612ms ago: executing program 4 (id=678): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, 0x0) r1 = socket$inet6(0xa, 0x4, 0x9) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$inet6(0xa, 0xa, 0x7) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000071c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [{0x40000020, 0x0, 0x145d}, {0x40000097, 0x0, 0xff}]}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000d80)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="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", @ANYRES8, @ANYRES32=r11, @ANYRES16=r7, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="60f4eb3dc602d2e9d8ed46eb99569fdca6a2d6e38640ef8b7c4bb1ff72ea289242daad8c21c4616759e72d20cb9163c62821a5d0382b8654a57c112cac"], 0x32600) fchown(r4, r5, r7) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in=@broadcast, @in=@private=0xa010101, 0x4e24, 0x0, 0x4e23, 0x0, 0x2, 0x20, 0x90, 0x3b, r2, r5}, {0x921, 0x4, 0x8001, 0x100000000, 0x3, 0x8000000000000001, 0x4e, 0x4}, {0x5, 0x4, 0x2d, 0x9}, 0x10001, 0x6e6bbe, 0x2, 0x1, 0x1, 0x3}, {{@in=@loopback, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x4, 0x0, 0x4, 0x81, 0x80, 0x6}}, 0xe4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r12) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r15, 0x29, 0x3b, &(0x7f0000000000)={0x2f, 0xf, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x8, 0x3, [0x2, 0x0, 0x10000, 0x5, 0x6, 0xfff, 0x4]}}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @pad1]}, 0x80) sendmsg$NL80211_CMD_SET_MCAST_RATE(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002abd706b00dbdf2599ff000008000300", @ANYRES32=r14, @ANYBLOB='\b\x00k'], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x800) 162.628874ms ago: executing program 4 (id=679): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0x36, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket(0x400000000010, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x7, 0x700, 0x12f, 0x1, {{0xa, 0x4, 0x0, 0x24, 0x28, 0x64, 0x0, 0x34, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@generic={0x86, 0x7, "b0bdb1d91e"}, @timestamp_addr={0x44, 0xc, 0xd2, 0x1, 0x9, [{@multicast1, 0x401}]}]}}}}}) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x101000) ioctl$MON_IOCX_GET(r3, 0x400c9206, &(0x7f0000000500)={0x0, 0x0}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0xb, 0x4, @vifc_lcl_ifindex=r2, @broadcast}, 0x10) r4 = openat$ndctl0(0xffffff9c, &(0x7f00000002c0), 0x20802, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x891d, &(0x7f00000000c0)={'caif0\x00', @ifru_flags=0x2800}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000004a0ef3f71c3b2eb02000000ea220e7b14c8e7b6b78bd8b3380000000000000052fd1beba5f533cd3c59", @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) close(0x3) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f00000004c0)={0x6, 0x0, 0x5}) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000000)=0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000400)={0x2d6, 0x6, 0x0, 'queue0\x00', 0x3}) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[], 0xcc}}, 0x0) r9 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, &(0x7f0000000080)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 2.165372ms ago: executing program 4 (id=680): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='r:my_probe ./file0:0x0', 0x16) (fail_nth: 8) 0s ago: executing program 0 (id=681): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) prctl$PR_GET_TSC(0x43, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000140)={@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x35}}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x5}}, 0x20040840) r4 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001b00)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0x6}, {0xf, 0xa}, {0xb, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0xc050) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000400)) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)=@getpolicy={0x194, 0x15, 0x200, 0x70bd29, 0x25dfdbfc, {{@in=@empty, @in6=@loopback, 0x4e24, 0x6, 0x4e21, 0x33c, 0x2, 0x80, 0x20, 0x0, 0x0, 0xee00}, 0x6e6bb8, 0x2}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd2a, 0x70bd6d, 0x70bd2d, 0x70bd26, 0x400, [0x3, 0x6]}}, @tfcpad={0x8, 0x16, 0x7f}, @algo_crypt={0xc6, 0x2, {{'ecb-twofish-avx\x00'}, 0x3f0, "17ebf39d427a2af048b1afc993e6205f41179e859dd0dc6e8ef4488238efd7c5e6e832a8d25b01aa0cbb72319c617cdd5a49ee79f671a8fc3c7abef786836a012870fcc6247251fa027f152d80855241217d22cb1b978644954309a0a4399677405ac6523374f0d2dc1203f95ba054ef67e741feffebf004e81b12d3ef32"}}, @algo_crypt={0x4d, 0x2, {{'cbc(cast5)\x00'}, 0x28, "52a3905e39"}}]}, 0x194}, 0x1, 0x0, 0x0, 0x20000004}, 0x4814) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f0000000000)={0x1, 0xfffffffc}) recvmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4092, 0xffc}], 0x1}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r6) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='./file0\x00', 0x80000006) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x31, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ered blocking state [ 54.757277][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.819595][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.832056][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.835237][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.857243][ T219] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.860408][ T219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.093328][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.150815][ T5743] veth0_vlan: entered promiscuous mode [ 55.162407][ T5743] veth1_vlan: entered promiscuous mode [ 55.200675][ T5743] veth0_macvtap: entered promiscuous mode [ 55.208758][ T5743] veth1_macvtap: entered promiscuous mode [ 55.228521][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.239790][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.270890][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.274249][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.282830][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.288245][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.304300][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.311802][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.385564][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.407216][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.411115][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.426414][ T5745] veth0_vlan: entered promiscuous mode [ 55.460127][ T5742] veth0_vlan: entered promiscuous mode [ 55.462832][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.466315][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.468234][ T5745] veth1_vlan: entered promiscuous mode [ 55.477877][ T5742] veth1_vlan: entered promiscuous mode [ 55.515098][ T5744] veth0_vlan: entered promiscuous mode [ 55.523186][ T5744] veth1_vlan: entered promiscuous mode [ 55.532504][ T5743] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.555374][ T5743] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 55.556426][ T5742] veth0_macvtap: entered promiscuous mode [ 55.579187][ T5743] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 55.587879][ T5742] veth1_macvtap: entered promiscuous mode [ 55.588542][ T5743] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 55.605245][ T5745] veth0_macvtap: entered promiscuous mode [ 55.613613][ T5744] veth0_macvtap: entered promiscuous mode [ 55.622900][ T5743] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 55.623660][ T5745] veth1_macvtap: entered promiscuous mode [ 55.633647][ T5744] veth1_macvtap: entered promiscuous mode [ 55.658088][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.683428][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.689952][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.697890][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.712615][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.717584][ T5797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.732977][ T5797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.746573][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.754882][ T5797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.759514][ T5797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.780195][ T5797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.784258][ T5797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.802558][ T5797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.810239][ T5797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.824769][ T5750] Bluetooth: hci1: command tx timeout [ 55.834876][ T5750] Bluetooth: hci3: command tx timeout [ 55.835107][ T5757] Bluetooth: hci0: command tx timeout [ 55.837834][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.861268][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.904955][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.905212][ T5757] Bluetooth: hci2: command tx timeout [ 55.917453][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.011263][ T224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.017118][ T224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.079377][ T224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.082648][ T224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.133338][ T224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.139359][ T224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.173113][ T224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.177685][ T224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.196149][ T224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.199431][ T224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.239016][ T224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.251463][ T224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.256903][ T5904] Cannot find add_set index 0 as target [ 56.421719][ T9] libceph: connect (1)[c::]:6789 error -101 [ 56.429945][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 56.442421][ T9] libceph: connect (1)[c::]:6789 error -101 [ 56.454761][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 56.638608][ T5914] dvmrp1: entered allmulticast mode [ 56.716033][ T9] libceph: connect (1)[c::]:6789 error -101 [ 56.719715][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 56.723375][ T5917] Zero length message leads to an empty skb [ 56.894576][ T5919] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 56.970051][ T5905] ceph: No mds server is up or the cluster is laggy [ 57.160965][ T5927] ======================================================= [ 57.160965][ T5927] WARNING: The mand mount option has been deprecated and [ 57.160965][ T5927] and is ignored by this kernel. Remove the mand [ 57.160965][ T5927] option from the mount to silence this warning. [ 57.160965][ T5927] ======================================================= [ 57.633801][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 57.904732][ T5757] Bluetooth: hci3: command tx timeout [ 57.905048][ T5750] Bluetooth: hci0: command tx timeout [ 57.907450][ T5756] Bluetooth: hci1: command tx timeout [ 57.986696][ T5757] Bluetooth: hci2: command tx timeout [ 59.004660][ T5960] tipc: Started in network mode [ 59.007413][ T5960] tipc: Node identity bec3477e3527, cluster identity 4711 [ 59.011426][ T5960] tipc: Enabled bearer , priority 0 [ 59.022795][ T5960] syzkaller0: entered promiscuous mode [ 59.026182][ T5960] syzkaller0: entered allmulticast mode [ 59.075501][ T5960] tipc: Resetting bearer [ 59.085899][ T5959] tipc: Resetting bearer [ 59.106859][ T5959] tipc: Disabling bearer [ 59.174266][ T5964] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21'. [ 59.391045][ T55] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 59.439758][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 59.444226][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 59.656134][ T55] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 59.938522][ T1044] libceph: connect (1)[c::]:6789 error -101 [ 59.942227][ T1044] libceph: mon0 (1)[c::]:6789 connect error [ 59.975353][ T1044] libceph: connect (1)[c::]:6789 error -101 [ 59.981441][ T5985] ceph: No mds server is up or the cluster is laggy [ 59.992517][ T1044] libceph: mon0 (1)[c::]:6789 connect error [ 59.994868][ T5756] Bluetooth: hci3: command tx timeout [ 59.997839][ T5750] Bluetooth: hci1: command tx timeout [ 59.998024][ T5757] Bluetooth: hci0: command tx timeout [ 60.074818][ T5757] Bluetooth: hci2: command tx timeout [ 60.172148][ T55] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 60.268348][ T1044] libceph: connect (1)[c::]:6789 error -101 [ 60.279829][ T1044] libceph: mon0 (1)[c::]:6789 connect error [ 60.705407][ T5974] ceph: No mds server is up or the cluster is laggy [ 61.542059][ T6012] fuse: Bad value for 'fd' [ 62.034659][ T6020] tmpfs: Unknown parameter 'hug P' [ 62.041046][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 62.374611][ T2231] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 62.549008][ T2231] usb 8-1: unable to get BOS descriptor or descriptor too short [ 62.557038][ T2231] usb 8-1: not running at top speed; connect to a high speed hub [ 62.563004][ T2231] usb 8-1: config 3 has an invalid interface number: 255 but max is 0 [ 62.567546][ T2231] usb 8-1: config 3 has an invalid descriptor of length 242, skipping remainder of the config [ 62.577857][ T2231] usb 8-1: config 3 has no interface number 0 [ 62.582988][ T2231] usb 8-1: config 3 interface 255 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 62.591617][ T2231] usb 8-1: config 3 interface 255 has no altsetting 0 [ 62.599806][ T2231] usb 8-1: language id specifier not provided by device, defaulting to English [ 62.626558][ T2231] usb 8-1: New USB device found, idVendor=24d2, idProduct=1084, bcdDevice=50.4f [ 62.632247][ T2231] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.703437][ T42] audit: type=1800 audit(1785436639.164:2): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.34" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 62.755931][ T6034] vfio-pci 0000:00:03.0: No device request channel registered, blocked until released by user [ 62.943351][ T6020] Bluetooth: MGMT ver 1.23 [ 62.987696][ T2231] usb 8-1: USB disconnect, device number 2 [ 63.084803][ T42] audit: type=1326 audit(1785436639.544:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.1.37" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f44fec code=0x0 [ 63.516821][ T6051] Bluetooth: MGMT ver 1.23 [ 64.258356][ T6070] syzkaller0: entered promiscuous mode [ 64.260792][ T6070] syzkaller0: entered allmulticast mode [ 64.271022][ T6070] tipc: Started in network mode [ 64.272944][ T6070] tipc: Node identity 82e7cde12827, cluster identity 4711 [ 64.276443][ T6070] tipc: Enabled bearer , priority 0 [ 64.283770][ T6069] tipc: Resetting bearer [ 64.337627][ T6069] tipc: Disabling bearer [ 64.610036][ T6081] FAULT_INJECTION: forcing a failure. [ 64.610036][ T6081] name failslab, interval 1, probability 0, space 0, times 1 [ 64.625406][ T6081] CPU: 3 UID: 0 PID: 6081 Comm: syz.3.50 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.625442][ T6081] Tainted: [L]=SOFTLOCKUP [ 64.625450][ T6081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.625462][ T6081] Call Trace: [ 64.625488][ T6081] [ 64.625497][ T6081] dump_stack_lvl+0x100/0x190 [ 64.625529][ T6081] should_fail_ex.cold+0x5/0xa [ 64.625549][ T6081] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 64.625583][ T6081] should_failslab+0xc2/0x120 [ 64.625615][ T6081] kmem_cache_alloc_noprof+0x91/0x6a0 [ 64.625641][ T6081] ? skb_clone+0x190/0x400 [ 64.625672][ T6081] skb_clone+0x190/0x400 [ 64.625697][ T6081] netlink_deliver_tap+0xaed/0xcc0 [ 64.625721][ T6081] netlink_unicast+0x62b/0x850 [ 64.625749][ T6081] ? __pfx_netlink_unicast+0x10/0x10 [ 64.625777][ T6081] netlink_sendmsg+0x8b0/0xda0 [ 64.625803][ T6081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.625828][ T6081] ? apparmor_socket_sendmsg+0x15b/0x270 [ 64.625854][ T6081] __sys_sendto+0x48b/0x4e0 [ 64.625877][ T6081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.625895][ T6081] ? __pfx___sys_sendto+0x10/0x10 [ 64.625951][ T6081] __ia32_compat_sys_socketcall+0x59a/0x770 [ 64.625986][ T6081] ? __fget_files+0x21f/0x3d0 [ 64.626004][ T6081] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 64.626056][ T6081] do_int80_emulation+0x14b/0x720 [ 64.626085][ T6081] asm_int80_emulation+0x1a/0x20 [ 64.626105][ T6081] RIP: 0023:0xf711736b [ 64.626122][ T6081] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 64.626139][ T6081] RSP: 002b:00000000f53ab34c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 64.626158][ T6081] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f53ab3f4 [ 64.626169][ T6081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.626180][ T6081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.626191][ T6081] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 64.626201][ T6081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.626229][ T6081] [ 64.780433][ T6093] tipc: Enabling of bearer rejected, failed to enable media [ 65.218796][ T6100] evm: overlay not supported [ 65.314195][ T42] audit: type=1804 audit(1785436641.774:4): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.54" name="/newroot/12/file0/file1" dev="overlay" ino=82 res=1 errno=0 [ 65.805843][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.810548][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.934207][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.947445][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.098574][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.103351][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.112102][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.122344][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.130763][ T6116] tipc: Enabling of bearer rejected, failed to enable media [ 66.206545][ T6120] netlink: 9 bytes leftover after parsing attributes in process `syz.1.62'. [ 66.211092][ T6120] gretap0: entered promiscuous mode [ 66.219687][ T6122] netlink: 'syz.3.63': attribute type 1 has an invalid length. [ 66.249583][ T6124] capability: warning: `syz.0.64' uses deprecated v2 capabilities in a way that may be insecure [ 66.312644][ T6126] netlink: 5 bytes leftover after parsing attributes in process `syz.1.62'. [ 66.319894][ T6126] 0ªî{X¹¦: renamed from gretap0 [ 66.333046][ T6126] 0ªî{X¹¦: left promiscuous mode [ 66.363101][ T6126] 0ªî{X¹¦: entered allmulticast mode [ 66.367137][ T6126] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 66.423064][ T42] audit: type=1326 audit(1785436642.884:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.0.67" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aefec code=0x0 [ 66.787014][ T6140] tipc: Enabling of bearer rejected, failed to enable media [ 66.893690][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 66.954007][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 67.064129][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 67.414633][ T6165] warning: `syz.1.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.043352][ T6177] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 69.113873][ T6177] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 69.119741][ T6177] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 69.128657][ T6177] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 69.132759][ T6177] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 69.203887][ T6177] pci 0000:00:01.0: Adding to iommu group 1 [ 69.238901][ T6177] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 69.241999][ T6177] pci 0000:00:01.0: vgaarb: bridge control possible [ 69.245151][ T6177] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 69.268515][ T6177] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 69.290907][ T6177] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 69.300340][ T6177] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 69.334142][ T6177] [drm] Found bochs VGA, ID 0xb0c5. [ 69.338134][ T6177] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 69.384394][ T6177] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 69.468499][ T6177] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 71.030924][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.036514][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.204216][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 71.472027][ T6222] dvmrp1: entered allmulticast mode [ 71.595419][ T6229] netlink: 220 bytes leftover after parsing attributes in process `syz.2.97'. [ 71.600245][ T6229] tc_dump_action: action bad kind [ 71.661608][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.97'. [ 72.036013][ T6237] smpboot: CPU 1 is now offline [ 72.090707][ T6240] netlink: 20 bytes leftover after parsing attributes in process `syz.0.100'. [ 72.116979][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 72.292165][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'. [ 72.786197][ T5757] Bluetooth: hci0: command tx timeout [ 72.803067][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 72.859414][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 73.434865][ T6273] FAULT_INJECTION: forcing a failure. [ 73.434865][ T6273] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 73.905366][ T6273] CPU: 3 UID: 0 PID: 6273 Comm: syz.3.110 Tainted: G S L syzkaller #0 PREEMPT(full) [ 73.905400][ T6273] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 73.905407][ T6273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.905416][ T6273] Call Trace: [ 73.905439][ T6273] [ 73.905448][ T6273] dump_stack_lvl+0x100/0x190 [ 73.905628][ T6273] should_fail_ex.cold+0x5/0xa [ 73.905667][ T6273] _copy_from_user+0x2e/0xd0 [ 73.905754][ T6273] get_compat_msghdr+0xb3/0x480 [ 73.905819][ T6273] ? __pfx_get_compat_msghdr+0x10/0x10 [ 73.905845][ T6273] ? rcu_is_watching+0x12/0xc0 [ 73.905889][ T6273] ? ___sys_recvmsg+0x177/0x1a0 [ 73.905906][ T6273] ? kfree+0x1e5/0x6c0 [ 73.905938][ T6273] ? __lock_acquire+0x49f/0x1a40 [ 73.905967][ T6273] ___sys_recvmsg+0x193/0x1a0 [ 73.905986][ T6273] ? __pfx____sys_recvmsg+0x10/0x10 [ 73.906018][ T6273] ? __pfx___might_resched+0x10/0x10 [ 73.906050][ T6273] do_recvmmsg+0x54d/0x740 [ 73.906071][ T6273] ? __pfx_do_recvmmsg+0x10/0x10 [ 73.906092][ T6273] ? find_held_lock+0x2b/0x80 [ 73.906118][ T6273] ? ksys_write+0x190/0x250 [ 73.906137][ T6273] ? ksys_write+0x190/0x250 [ 73.906162][ T6273] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 73.906211][ T6273] __sys_recvmmsg+0x21f/0x270 [ 73.906236][ T6273] ? __pfx___sys_recvmmsg+0x10/0x10 [ 73.906283][ T6273] ? ksys_write+0x1ac/0x250 [ 73.906302][ T6273] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 73.906329][ T6273] ? __do_fast_syscall_32+0x98/0x970 [ 73.906351][ T6273] ? lockdep_hardirqs_on+0x78/0x100 [ 73.906370][ T6273] __do_fast_syscall_32+0xe7/0x970 [ 73.906392][ T6273] ? lockdep_hardirqs_on+0x78/0x100 [ 73.906413][ T6273] do_fast_syscall_32+0x32/0x70 [ 73.906436][ T6273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.906459][ T6273] RIP: 0023:0xf6fdefec [ 73.906480][ T6273] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 73.906499][ T6273] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 73.906516][ T6273] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001740 [ 73.906527][ T6273] RDX: 0000000004000210 RSI: 0000000000000002 RDI: 0000000000000000 [ 73.906537][ T6273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.906546][ T6273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.906556][ T6273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.906578][ T6273] [ 74.362055][ T6280] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.370066][ T6280] block device autoloading is deprecated and will be removed. [ 74.691178][ T6291] process 'syz.2.117' launched '/dev/fd/10' with NULL argv: empty string added [ 74.738326][ T6293] netlink: 'syz.3.114': attribute type 1 has an invalid length. [ 74.781273][ T6293] bond1: entered promiscuous mode [ 74.781744][ T6293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.794151][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 74.819921][ T6293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.820282][ T6293] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 74.820301][ T6293] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 74.826484][ T6293] bond1: (slave vti0): making interface the new active one [ 74.826508][ T6293] vti0: entered promiscuous mode [ 74.828287][ T6293] bond1: (slave vti0): Enslaving as an active interface with an up link [ 74.982621][ T6299] bond1 (unregistering): Released all slaves [ 75.066699][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 75.497903][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.503883][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.510292][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.514083][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.518060][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.521911][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.526377][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.529729][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.534357][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.537193][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.539470][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.541808][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.550885][ T6315] cgroup: Bad value for 'name' [ 75.554497][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.562681][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.567226][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.574624][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.584726][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.590477][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.593803][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.597378][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.599864][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.602234][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.605098][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.607816][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.610636][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.615641][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.620403][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.639686][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.641889][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.644007][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.652722][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.655261][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.657555][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.669638][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.676169][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.685040][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.692834][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.701108][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.706312][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.710569][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.716334][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.721439][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.724800][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.728429][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.732355][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.737786][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.741139][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.744770][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.749378][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.753057][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.758711][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.765516][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.783157][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.788915][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.793564][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.801338][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.803748][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.808988][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.819487][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.824902][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.831522][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.833708][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.836246][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.870337][ T6316] tmpfs: Unknown parameter 'mpo' [ 75.872991][ T6316] tmpfs: Unknown parameter 'mpo' [ 76.093845][ T6338] qnx4: no qnx4 filesystem (no root dir). [ 76.659925][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 77.370320][ T6352] syz.1.139 (6352): drop_caches: 2 [ 77.502489][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 77.873282][ T6396] program syz.2.152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.045780][ T6399] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 79.181338][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 79.506303][ T6429] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 79.723044][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'. [ 79.838582][ T6449] netlink: 32 bytes leftover after parsing attributes in process `syz.2.171'. [ 79.868958][ T6449] netlink: 'syz.2.171': attribute type 30 has an invalid length. [ 79.896244][ T6453] FAULT_INJECTION: forcing a failure. [ 79.896244][ T6453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.903963][ T6453] CPU: 0 UID: 0 PID: 6453 Comm: syz.3.172 Tainted: G S L syzkaller #0 PREEMPT(full) [ 79.904006][ T6453] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 79.904014][ T6453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.904025][ T6453] Call Trace: [ 79.904034][ T6453] [ 79.904043][ T6453] dump_stack_lvl+0x100/0x190 [ 79.904072][ T6453] should_fail_ex.cold+0x5/0xa [ 79.904092][ T6453] _copy_to_user+0x32/0xd0 [ 79.904123][ T6453] simple_read_from_buffer+0xcb/0x170 [ 79.904180][ T6453] proc_fail_nth_read+0x1af/0x230 [ 79.904219][ T6453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.904245][ T6453] ? rw_verify_area+0xce/0x6d0 [ 79.904270][ T6453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.904297][ T6453] vfs_read+0x1e4/0xb40 [ 79.904317][ T6453] ? __pfx_vfs_read+0x10/0x10 [ 79.904342][ T6453] ? find_held_lock+0x2b/0x80 [ 79.904364][ T6453] ? __fget_files+0x215/0x3d0 [ 79.904387][ T6453] ? __fget_files+0x21f/0x3d0 [ 79.904408][ T6453] ksys_read+0x12a/0x250 [ 79.904441][ T6453] ? __pfx_ksys_read+0x10/0x10 [ 79.904467][ T6453] do_int80_emulation+0x14b/0x720 [ 79.904490][ T6453] asm_int80_emulation+0x1a/0x20 [ 79.904507][ T6453] RIP: 0023:0xf711736b [ 79.904521][ T6453] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 79.904538][ T6453] RSP: 002b:00000000f53cd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 79.904557][ T6453] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53cd5d0 [ 79.904569][ T6453] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 79.904579][ T6453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.904590][ T6453] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 79.904600][ T6453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.904624][ T6453] [ 79.948876][ T6454] 9p: Bad value for 'rfdno' [ 80.105590][ T6458] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 80.198641][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 80.343384][ T10] cfg80211: failed to load regulatory.db [ 80.405576][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'. [ 80.473092][ T6472] bridge1: entered promiscuous mode [ 80.475971][ T6472] bridge1: entered allmulticast mode [ 80.489276][ T6472] bridge0: port 3(syz_tun) entered blocking state [ 80.491806][ T6472] bridge0: port 3(syz_tun) entered disabled state [ 80.494901][ T6472] syz_tun: entered allmulticast mode [ 80.498352][ T6472] syz_tun: entered promiscuous mode [ 80.501168][ T6472] bridge0: port 3(syz_tun) entered blocking state [ 80.503708][ T6472] bridge0: port 3(syz_tun) entered forwarding state [ 80.511440][ T6472] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 80.517587][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 80.551937][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 80.759338][ T6479] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 81.312948][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 82.012798][ T6510] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 82.925755][ T6528] __nla_validate_parse: 1 callbacks suppressed [ 82.925775][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 83.069841][ T6534] netlink: 32 bytes leftover after parsing attributes in process `syz.3.203'. [ 83.255230][ T6537] tipc: Started in network mode [ 83.261982][ T6537] tipc: Node identity d208da85f601, cluster identity 4711 [ 83.269462][ T6537] tipc: Enabled bearer , priority 0 [ 83.300342][ T6536] tipc: Disabling bearer [ 83.367724][ T6542] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 83.617560][ T6549] dvmrp1: entered allmulticast mode [ 84.010737][ T6560] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 84.070757][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 84.196429][ T6564] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 84.302395][ T6566] Config c/1 of g1 needs at least one function. [ 84.315185][ T6566] udc dummy_udc.0: failed to start g1: -22 [ 84.325907][ T6568] FAULT_INJECTION: forcing a failure. [ 84.325907][ T6568] name failslab, interval 1, probability 0, space 0, times 0 [ 84.326599][ T6566] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 84.331195][ T6568] CPU: 0 UID: 0 PID: 6568 Comm: syz.2.213 Tainted: G S L syzkaller #0 PREEMPT(full) [ 84.331237][ T6568] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 84.331245][ T6568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.331255][ T6568] Call Trace: [ 84.331262][ T6568] [ 84.331269][ T6568] dump_stack_lvl+0x100/0x190 [ 84.331296][ T6568] should_fail_ex.cold+0x5/0xa [ 84.331317][ T6568] should_failslab+0xc2/0x120 [ 84.331343][ T6568] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 84.331368][ T6568] ? __alloc_skb+0x140/0x710 [ 84.331396][ T6568] __alloc_skb+0x140/0x710 [ 84.331417][ T6568] ? __alloc_skb+0x5b7/0x710 [ 84.331438][ T6568] ? __pfx___alloc_skb+0x10/0x10 [ 84.331461][ T6568] ? sk_page_frag_refill+0x6c/0x340 [ 84.331484][ T6568] __ip_append_data+0x2c95/0x44d0 [ 84.331523][ T6568] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 84.331551][ T6568] ? __pfx___ip_append_data+0x10/0x10 [ 84.331571][ T6568] ? do_raw_spin_lock+0x128/0x260 [ 84.331593][ T6568] ip_append_data+0x10f/0x1a0 [ 84.331615][ T6568] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 84.331636][ T6568] udp_sendmsg+0x9e8/0x2720 [ 84.331652][ T6568] ? __kernel_text_address+0xd/0x30 [ 84.331672][ T6568] ? __pfx_udp_sendmsg+0x10/0x10 [ 84.331687][ T6568] ? __lock_acquire+0x49f/0x1a40 [ 84.331720][ T6568] ? __pfx___might_resched+0x10/0x10 [ 84.331746][ T6568] ? aa_sk_perm+0x309/0xaa0 [ 84.331790][ T6568] ? __pfx_aa_sk_perm+0x10/0x10 [ 84.331816][ T6568] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 84.331836][ T6568] ? __pfx_udp_sendmsg+0x10/0x10 [ 84.331855][ T6568] inet_sendmsg+0x105/0x140 [ 84.331877][ T6568] sock_write_iter+0x4ea/0x5b0 [ 84.331893][ T6568] ? __pfx_inet_sendmsg+0x10/0x10 [ 84.331919][ T6568] ? __pfx_sock_write_iter+0x10/0x10 [ 84.331934][ T6568] ? bpf_lsm_file_permission+0x9/0x10 [ 84.331949][ T6568] ? security_file_permission+0x76/0x210 [ 84.331990][ T6568] ? rw_verify_area+0xce/0x6d0 [ 84.332013][ T6568] vfs_write+0x6ac/0x1050 [ 84.332023][ T6568] ? __pfx_sock_write_iter+0x10/0x10 [ 84.332034][ T6568] ? __pfx_vfs_write+0x10/0x10 [ 84.332043][ T6568] ? find_held_lock+0x2b/0x80 [ 84.332075][ T6568] ksys_write+0x1f8/0x250 [ 84.332090][ T6568] ? __pfx_ksys_write+0x10/0x10 [ 84.332103][ T6568] ? ksys_write+0x1ac/0x250 [ 84.332117][ T6568] ? __pfx_ksys_write+0x10/0x10 [ 84.332130][ T6568] __do_fast_syscall_32+0xe7/0x970 [ 84.332144][ T6568] ? lockdep_hardirqs_on+0x78/0x100 [ 84.332158][ T6568] do_fast_syscall_32+0x32/0x70 [ 84.332171][ T6568] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.332185][ T6568] RIP: 0023:0xf704efec [ 84.332198][ T6568] Code: Unable to access opcode bytes at 0xf704efc2. [ 84.332203][ T6568] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 84.332213][ T6568] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 84.332220][ T6568] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 84.332226][ T6568] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.332231][ T6568] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 84.332237][ T6568] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.332250][ T6568] [ 84.384912][ T5756] Bluetooth: hci3: command 0x0405 tx timeout [ 84.395327][ T6566] UDC core: g1: couldn't find an available UDC or it's busy [ 84.453052][ T6573] tipc: Enabled bearer , priority 0 [ 84.497589][ T6572] tipc: Disabling bearer [ 84.547174][ T5757] Bluetooth: hci2: Unable to find connection for big 0x00 [ 84.817298][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 85.401968][ T6583] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 85.864934][ T2231] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 86.027783][ T2231] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 86.034672][ T2231] usb 6-1: config 0 has no interface number 0 [ 86.039279][ T2231] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 86.053061][ T2231] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 86.060342][ T2231] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 86.066370][ T2231] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 86.073520][ T2231] usb 6-1: Product: syz [ 86.075485][ T2231] usb 6-1: SerialNumber: syz [ 86.093230][ T2231] usb 6-1: config 0 descriptor?? [ 86.103535][ T2231] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 86.111377][ T2231] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input5 [ 86.306491][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.310749][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.314127][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.317070][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.320205][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.323104][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.325945][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.329148][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.332555][ T2231] usb 6-1: USB disconnect, device number 2 [ 86.334973][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.334997][ C2] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 86.356540][ T2231] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 86.479869][ T6611] tipc: Enabled bearer , priority 0 [ 86.486456][ T6610] tipc: Disabling bearer [ 86.682793][ T6617] FAULT_INJECTION: forcing a failure. [ 86.682793][ T6617] name failslab, interval 1, probability 0, space 0, times 0 [ 86.688747][ T6617] CPU: 2 UID: 0 PID: 6617 Comm: syz.2.229 Tainted: G S L syzkaller #0 PREEMPT(full) [ 86.688778][ T6617] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 86.688785][ T6617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.688795][ T6617] Call Trace: [ 86.688801][ T6617] [ 86.688808][ T6617] dump_stack_lvl+0x100/0x190 [ 86.688834][ T6617] should_fail_ex.cold+0x5/0xa [ 86.688855][ T6617] should_failslab+0xc2/0x120 [ 86.688881][ T6617] __kmalloc_noprof+0xfc/0x820 [ 86.688901][ T6617] ? rcu_is_watching+0x12/0xc0 [ 86.688924][ T6617] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 86.688954][ T6617] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 86.688983][ T6617] genl_family_rcv_msg_doit+0xc7/0x300 [ 86.689007][ T6617] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 86.689034][ T6617] ? genl_get_cmd+0x3e7/0x760 [ 86.689060][ T6617] ? bpf_lsm_capable+0x9/0x10 [ 86.689079][ T6617] ? security_capable+0x80/0x260 [ 86.689099][ T6617] ? ns_capable+0xd2/0xf0 [ 86.689120][ T6617] genl_rcv_msg+0x560/0x800 [ 86.689145][ T6617] ? __pfx_genl_rcv_msg+0x10/0x10 [ 86.689166][ T6617] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 86.689203][ T6617] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 86.689220][ T6617] ? __pfx_nl80211_post_doit+0x10/0x10 [ 86.689252][ T6617] netlink_rcv_skb+0x159/0x420 [ 86.689271][ T6617] ? __pfx_genl_rcv_msg+0x10/0x10 [ 86.689293][ T6617] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 86.689323][ T6617] ? netlink_deliver_tap+0x1ae/0xcc0 [ 86.689345][ T6617] genl_rcv+0x28/0x40 [ 86.689363][ T6617] netlink_unicast+0x585/0x850 [ 86.689385][ T6617] ? __pfx_netlink_unicast+0x10/0x10 [ 86.689412][ T6617] netlink_sendmsg+0x8b0/0xda0 [ 86.689435][ T6617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.689458][ T6617] ? apparmor_socket_sendmsg+0x15b/0x270 [ 86.689486][ T6617] ____sys_sendmsg+0xa4d/0xbe0 [ 86.689502][ T6617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.689527][ T6617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.689560][ T6617] ___sys_sendmsg+0x190/0x1e0 [ 86.689581][ T6617] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.689615][ T6617] ? find_held_lock+0x2b/0x80 [ 86.689655][ T6617] __sys_sendmsg+0x160/0x210 [ 86.689679][ T6617] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.689710][ T6617] ? __pfx_ksys_write+0x10/0x10 [ 86.689732][ T6617] __do_fast_syscall_32+0xe7/0x970 [ 86.689759][ T6617] ? lockdep_hardirqs_on+0x78/0x100 [ 86.689785][ T6617] do_fast_syscall_32+0x32/0x70 [ 86.689808][ T6617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.689830][ T6617] RIP: 0023:0xf704efec [ 86.689850][ T6617] Code: Unable to access opcode bytes at 0xf704efc2. [ 86.689857][ T6617] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 86.689874][ T6617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 86.689884][ T6617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.689893][ T6617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.689903][ T6617] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 86.689912][ T6617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.689936][ T6617] [ 86.842839][ T6621] netlink: 40 bytes leftover after parsing attributes in process `syz.0.232'. [ 87.518693][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 87.550213][ T6637] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 87.687860][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 87.800726][ T6656] GUP no longer grows the stack in syz.3.244 (6656): 80004000-8000a000 (80002000) [ 87.805245][ T6656] CPU: 3 UID: 0 PID: 6656 Comm: syz.3.244 Tainted: G S L syzkaller #0 PREEMPT(full) [ 87.805277][ T6656] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 87.805286][ T6656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.805298][ T6656] Call Trace: [ 87.805305][ T6656] [ 87.805312][ T6656] dump_stack_lvl+0x100/0x190 [ 87.805341][ T6656] gup_vma_lookup.cold+0x83/0x96 [ 87.805370][ T6656] __get_user_pages+0x241/0x32a0 [ 87.805406][ T6656] ? find_held_lock+0x2b/0x80 [ 87.805429][ T6656] ? mtree_load+0x311/0xa90 [ 87.805453][ T6656] ? __pfx___get_user_pages+0x10/0x10 [ 87.805489][ T6656] get_user_pages_remote+0x3d2/0xb10 [ 87.805520][ T6656] ? mas_root_expand+0x6e0/0x750 [ 87.805561][ T6656] ? __pfx_get_user_pages_remote+0x10/0x10 [ 87.805600][ T6656] __access_remote_vm+0x3bb/0x890 [ 87.805635][ T6656] ? __pfx___access_remote_vm+0x10/0x10 [ 87.805659][ T6656] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 87.805685][ T6656] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 87.805715][ T6656] proc_pid_cmdline_read+0x552/0x9a0 [ 87.805745][ T6656] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 87.805774][ T6656] ? rw_verify_area+0xce/0x6d0 [ 87.805803][ T6656] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 87.805828][ T6656] vfs_readv+0x5d8/0x8d0 [ 87.805863][ T6656] ? __pfx_vfs_readv+0x10/0x10 [ 87.805909][ T6656] ? __fget_files+0x21f/0x3d0 [ 87.805934][ T6656] ? do_preadv+0x1ac/0x270 [ 87.805973][ T6656] do_preadv+0x1ac/0x270 [ 87.806007][ T6656] ? __pfx_do_preadv+0x10/0x10 [ 87.806046][ T6656] __do_fast_syscall_32+0xe7/0x970 [ 87.806074][ T6656] ? lockdep_hardirqs_on+0x78/0x100 [ 87.806099][ T6656] do_fast_syscall_32+0x32/0x70 [ 87.806123][ T6656] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.806147][ T6656] RIP: 0023:0xf6fdefec [ 87.806169][ T6656] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 87.806177][ T6656] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 000000000000014d [ 87.806238][ T6656] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 87.806250][ T6656] RDX: 0000000000000001 RSI: 0000000000000300 RDI: 0000000000000000 [ 87.806261][ T6656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.806273][ T6656] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 87.806285][ T6656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.806313][ T6656] [ 87.853316][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 87.895095][ T6655] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 87.941663][ T6663] FAULT_INJECTION: forcing a failure. [ 87.941663][ T6663] name failslab, interval 1, probability 0, space 0, times 0 [ 87.948017][ T6663] CPU: 3 UID: 0 PID: 6663 Comm: syz.0.249 Tainted: G S L syzkaller #0 PREEMPT(full) [ 87.948047][ T6663] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 87.948054][ T6663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.948063][ T6663] Call Trace: [ 87.948069][ T6663] [ 87.948076][ T6663] dump_stack_lvl+0x100/0x190 [ 87.948098][ T6663] should_fail_ex.cold+0x5/0xa [ 87.948117][ T6663] should_failslab+0xc2/0x120 [ 87.948141][ T6663] kmem_cache_alloc_noprof+0x91/0x6a0 [ 87.948163][ T6663] ? do_getname+0x35/0x390 [ 87.948187][ T6663] do_getname+0x35/0x390 [ 87.948209][ T6663] user_path_at+0x26/0x60 [ 87.948234][ T6663] bpf_uprobe_multi_link_attach+0x540/0x1600 [ 87.948258][ T6663] ? find_held_lock+0x2b/0x80 [ 87.948285][ T6663] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 87.948303][ T6663] ? __fget_files+0x21f/0x3d0 [ 87.948323][ T6663] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.948353][ T6663] __sys_bpf+0x414f/0x4e80 [ 87.948379][ T6663] ? __pfx___sys_bpf+0x10/0x10 [ 87.948398][ T6663] ? find_held_lock+0x2b/0x80 [ 87.948415][ T6663] ? get_pid_task+0xfc/0x250 [ 87.948434][ T6663] ? get_pid_task+0xfc/0x250 [ 87.948458][ T6663] ? proc_fail_nth_write+0x9f/0x220 [ 87.948481][ T6663] ? find_held_lock+0x2b/0x80 [ 87.948503][ T6663] ? rcu_read_lock_any_held+0x6a/0xa0 [ 87.948522][ T6663] ? find_held_lock+0x2b/0x80 [ 87.948541][ T6663] ? ksys_write+0x190/0x250 [ 87.948553][ T6663] ? ksys_write+0x190/0x250 [ 87.948582][ T6663] ? fput+0x79/0x100 [ 87.948601][ T6663] ? __ia32_sys_bpf+0xcc/0x170 [ 87.948616][ T6663] __ia32_sys_bpf+0xcc/0x170 [ 87.948634][ T6663] ? __do_fast_syscall_32+0x98/0x970 [ 87.948658][ T6663] __do_fast_syscall_32+0xe7/0x970 [ 87.948677][ T6663] ? lockdep_hardirqs_on+0x78/0x100 [ 87.948693][ T6663] do_fast_syscall_32+0x32/0x70 [ 87.948707][ T6663] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.948721][ T6663] RIP: 0023:0xf70aefec [ 87.948735][ T6663] Code: Unable to access opcode bytes at 0xf70aefc2. [ 87.948739][ T6663] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 87.948750][ T6663] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00000000800012c0 [ 87.948756][ T6663] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.948762][ T6663] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.948768][ T6663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.948774][ T6663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.948787][ T6663] [ 88.127774][ T6669] netlink: 44 bytes leftover after parsing attributes in process `syz.1.252'. [ 88.179278][ T6673] netlink: 40 bytes leftover after parsing attributes in process `syz.2.253'. [ 89.190079][ T6682] FAULT_INJECTION: forcing a failure. [ 89.190079][ T6682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.210514][ T6682] CPU: 0 UID: 0 PID: 6682 Comm: syz.1.256 Tainted: G S L syzkaller #0 PREEMPT(full) [ 89.210547][ T6682] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 89.210554][ T6682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.210564][ T6682] Call Trace: [ 89.210571][ T6682] [ 89.210578][ T6682] dump_stack_lvl+0x100/0x190 [ 89.210604][ T6682] should_fail_ex.cold+0x5/0xa [ 89.210625][ T6682] _copy_from_user+0x2e/0xd0 [ 89.210651][ T6682] get_compat_msghdr+0xb3/0x480 [ 89.210678][ T6682] ? __pfx_get_compat_msghdr+0x10/0x10 [ 89.210705][ T6682] ___sys_sendmsg+0x1b6/0x1e0 [ 89.210718][ T6682] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.210742][ T6682] ? find_held_lock+0x2b/0x80 [ 89.210779][ T6682] __sys_sendmsg+0x160/0x210 [ 89.210803][ T6682] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.210833][ T6682] ? __pfx_ksys_write+0x10/0x10 [ 89.210858][ T6682] __do_fast_syscall_32+0xe7/0x970 [ 89.210879][ T6682] ? lockdep_hardirqs_on+0x78/0x100 [ 89.210900][ T6682] do_fast_syscall_32+0x32/0x70 [ 89.210917][ T6682] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.210931][ T6682] RIP: 0023:0xf7f44fec [ 89.210944][ T6682] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 89.210949][ T6682] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 89.210965][ T6682] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 89.210974][ T6682] RDX: 0000000000044000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.210983][ T6682] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.210992][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.211000][ T6682] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.211021][ T6682] [ 89.341600][ T6687] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 89.611049][ T6701] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 89.626440][ T6701] lo: entered allmulticast mode [ 89.630934][ T6701] lo: left allmulticast mode [ 89.848125][ T5757] Bluetooth: hci0: Unable to find connection for big 0x00 [ 91.068710][ T6704] syz.2.262 (6704) used greatest stack depth: 19464 bytes left [ 91.527745][ T6730] raw_sendmsg: syz.0.273 forgot to set AF_INET. Fix it! [ 91.558301][ T9] libceph: connect (1)[c::]:6789 error -101 [ 91.560645][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 91.570105][ T5757] Bluetooth: hci3: Unable to find connection for big 0x00 [ 91.586795][ T6730] ceph: No mds server is up or the cluster is laggy [ 92.196724][ T6746] FAULT_INJECTION: forcing a failure. [ 92.196724][ T6746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.207343][ T6746] CPU: 0 UID: 0 PID: 6746 Comm: syz.2.277 Tainted: G S L syzkaller #0 PREEMPT(full) [ 92.207372][ T6746] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 92.207380][ T6746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.207389][ T6746] Call Trace: [ 92.207400][ T6746] [ 92.207407][ T6746] dump_stack_lvl+0x100/0x190 [ 92.207433][ T6746] should_fail_ex.cold+0x5/0xa [ 92.207453][ T6746] _copy_from_user+0x2e/0xd0 [ 92.207480][ T6746] move_addr_to_kernel+0x65/0x170 [ 92.207500][ T6746] get_compat_msghdr+0x3c7/0x480 [ 92.207527][ T6746] ? __pfx_get_compat_msghdr+0x10/0x10 [ 92.207562][ T6746] ___sys_sendmsg+0x1b6/0x1e0 [ 92.207582][ T6746] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.207612][ T6746] ? find_held_lock+0x2b/0x80 [ 92.207649][ T6746] __sys_sendmsg+0x160/0x210 [ 92.207673][ T6746] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.207703][ T6746] ? __pfx_ksys_write+0x10/0x10 [ 92.207724][ T6746] __do_fast_syscall_32+0xe7/0x970 [ 92.207746][ T6746] ? lockdep_hardirqs_on+0x78/0x100 [ 92.207768][ T6746] do_fast_syscall_32+0x32/0x70 [ 92.207790][ T6746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.207811][ T6746] RIP: 0023:0xf704efec [ 92.207829][ T6746] Code: Unable to access opcode bytes at 0xf704efc2. [ 92.207836][ T6746] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 92.207853][ T6746] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 92.207863][ T6746] RDX: 000000001400c0c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.207873][ T6746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.207882][ T6746] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 92.207892][ T6746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.207914][ T6746] [ 92.670736][ T6765] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 92.878247][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 92.931066][ T6770] random: crng reseeded on system resumption [ 93.061358][ T5757] Bluetooth: hci1: Unable to find connection for big 0x00 [ 93.447342][ T6787] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 93.623556][ T42] audit: type=1800 audit(1785436670.084:6): pid=6797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.291" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 93.721102][ T6799] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 93.827853][ T6804] syzkaller0: entered promiscuous mode [ 93.830284][ T6804] syzkaller0: entered allmulticast mode [ 93.835819][ T6804] FAULT_INJECTION: forcing a failure. [ 93.835819][ T6804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.842252][ T6804] CPU: 3 UID: 0 PID: 6804 Comm: syz.0.294 Tainted: G S L syzkaller #0 PREEMPT(full) [ 93.842281][ T6804] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 93.842288][ T6804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.842298][ T6804] Call Trace: [ 93.842304][ T6804] [ 93.842310][ T6804] dump_stack_lvl+0x100/0x190 [ 93.842338][ T6804] should_fail_ex.cold+0x5/0xa [ 93.842359][ T6804] _copy_from_user+0x2e/0xd0 [ 93.842387][ T6804] move_addr_to_kernel+0x65/0x170 [ 93.842408][ T6804] get_compat_msghdr+0x3c7/0x480 [ 93.842435][ T6804] ? __pfx_get_compat_msghdr+0x10/0x10 [ 93.842477][ T6804] ___sys_sendmsg+0x1b6/0x1e0 [ 93.842497][ T6804] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.842528][ T6804] ? find_held_lock+0x2b/0x80 [ 93.842566][ T6804] __sys_sendmsg+0x160/0x210 [ 93.842591][ T6804] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.842622][ T6804] ? __pfx_ksys_write+0x10/0x10 [ 93.842644][ T6804] __do_fast_syscall_32+0xe7/0x970 [ 93.842667][ T6804] ? lockdep_hardirqs_on+0x78/0x100 [ 93.842689][ T6804] do_fast_syscall_32+0x32/0x70 [ 93.842711][ T6804] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.842733][ T6804] RIP: 0023:0xf70aefec [ 93.842755][ T6804] Code: Unable to access opcode bytes at 0xf70aefc2. [ 93.842762][ T6804] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 93.842779][ T6804] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 93.842790][ T6804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.842800][ T6804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.842810][ T6804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.842820][ T6804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.842843][ T6804] [ 94.202644][ T6811] program syz.0.295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.737547][ T6818] syzkaller0: entered promiscuous mode [ 94.739874][ T6818] syzkaller0: entered allmulticast mode [ 94.958236][ T6820] FAULT_INJECTION: forcing a failure. [ 94.958236][ T6820] name failslab, interval 1, probability 0, space 0, times 0 [ 94.963070][ T6820] CPU: 2 UID: 0 PID: 6820 Comm: syz.0.298 Tainted: G S L syzkaller #0 PREEMPT(full) [ 94.963103][ T6820] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 94.963110][ T6820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.963121][ T6820] Call Trace: [ 94.963129][ T6820] [ 94.963137][ T6820] dump_stack_lvl+0x100/0x190 [ 94.963166][ T6820] should_fail_ex.cold+0x5/0xa [ 94.963190][ T6820] should_failslab+0xc2/0x120 [ 94.963218][ T6820] __kmalloc_noprof+0xfc/0x820 [ 94.963239][ T6820] ? lockdep_init_map_type+0x5c/0x250 [ 94.963258][ T6820] ? nft_trans_alloc+0x1d/0x2d0 [ 94.963280][ T6820] nft_trans_alloc+0x1d/0x2d0 [ 94.963298][ T6820] nf_tables_newtable+0x1340/0x19f0 [ 94.963326][ T6820] ? __pfx_nf_tables_newtable+0x10/0x10 [ 94.963351][ T6820] ? __nla_parse+0x40/0x60 [ 94.963389][ T6820] nfnetlink_rcv_batch+0x1410/0x2880 [ 94.963428][ T6820] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 94.963452][ T6820] ? find_held_lock+0x2b/0x80 [ 94.963476][ T6820] ? __local_bh_enable_ip+0x9e/0x120 [ 94.963516][ T6820] ? lockdep_hardirqs_on+0x78/0x100 [ 94.963546][ T6820] ? __dev_queue_xmit+0xa12/0x4970 [ 94.963599][ T6820] ? __nla_parse+0x40/0x60 [ 94.963624][ T6820] nfnetlink_rcv+0x3bd/0x440 [ 94.963650][ T6820] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 94.963681][ T6820] netlink_unicast+0x585/0x850 [ 94.963706][ T6820] ? __pfx_netlink_unicast+0x10/0x10 [ 94.963732][ T6820] netlink_sendmsg+0x8b0/0xda0 [ 94.963756][ T6820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.963779][ T6820] ? apparmor_socket_sendmsg+0x15b/0x270 [ 94.963805][ T6820] ____sys_sendmsg+0xa4d/0xbe0 [ 94.963823][ T6820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.963845][ T6820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.963874][ T6820] ___sys_sendmsg+0x190/0x1e0 [ 94.963895][ T6820] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.963927][ T6820] ? find_held_lock+0x2b/0x80 [ 94.963965][ T6820] __sys_sendmsg+0x160/0x210 [ 94.963991][ T6820] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.964023][ T6820] ? __pfx_ksys_write+0x10/0x10 [ 94.964047][ T6820] __do_fast_syscall_32+0xe7/0x970 [ 94.964070][ T6820] ? lockdep_hardirqs_on+0x78/0x100 [ 94.964093][ T6820] do_fast_syscall_32+0x32/0x70 [ 94.964118][ T6820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.964142][ T6820] RIP: 0023:0xf70aefec [ 94.964166][ T6820] Code: Unable to access opcode bytes at 0xf70aefc2. [ 94.964174][ T6820] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 94.964191][ T6820] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 94.964202][ T6820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.964212][ T6820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.964222][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.964232][ T6820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.964256][ T6820] [ 95.182825][ T6824] netlink: 'syz.0.301': attribute type 9 has an invalid length. [ 95.192513][ T6824] macvlan2: entered promiscuous mode [ 95.195385][ T6824] macvlan2: entered allmulticast mode [ 95.315051][ T6827] netlink: 'syz.1.302': attribute type 2 has an invalid length. [ 95.452148][ T6833] loop4: detected capacity change from 0 to 7 [ 95.459371][ T6833] Dev loop4: unable to read RDB block 7 [ 95.462532][ T6833] loop4: AHDI p1 p2 p3 [ 95.464292][ T6833] loop4: partition table partially beyond EOD, truncated [ 95.467682][ T6833] loop4: p1 start 1601398130 is beyond EOD, truncated [ 95.470364][ T6833] loop4: p2 start 1702059890 is beyond EOD, truncated [ 96.233714][ T6845] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 97.450774][ T6885] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 97.588187][ T6887] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 99.094091][ T6914] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 99.276741][ T6917] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 99.339252][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 99.442666][ T6927] loop5: detected capacity change from 0 to 4639 [ 99.463668][ T5746] Buffer I/O error on dev loop5, logical block 579, async page read [ 100.967312][ T6943] FAULT_INJECTION: forcing a failure. [ 100.967312][ T6943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.986497][ T6943] CPU: 2 UID: 0 PID: 6943 Comm: syz.0.336 Tainted: G S L syzkaller #0 PREEMPT(full) [ 100.986527][ T6943] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 100.986534][ T6943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.986543][ T6943] Call Trace: [ 100.986551][ T6943] [ 100.986558][ T6943] dump_stack_lvl+0x100/0x190 [ 100.986583][ T6943] should_fail_ex.cold+0x5/0xa [ 100.986602][ T6943] _copy_from_iter+0x1f4/0x1690 [ 100.986631][ T6943] ? rcu_is_watching+0x12/0xc0 [ 100.986651][ T6943] ? __pfx__copy_from_iter+0x10/0x10 [ 100.986674][ T6943] ? __kasan_kmalloc+0xaa/0xb0 [ 100.986695][ T6943] ? __kvmalloc_node_noprof+0x36d/0x970 [ 100.986714][ T6943] ? file_tty_write.isra.0+0x694/0x890 [ 100.986782][ T6943] ? rcu_is_watching+0x12/0xc0 [ 100.986801][ T6943] ? file_tty_write.isra.0+0x694/0x890 [ 100.986820][ T6943] ? kfree+0x1e5/0x6c0 [ 100.986840][ T6943] file_tty_write.isra.0+0x45b/0x890 [ 100.986867][ T6943] vfs_write+0x6ac/0x1050 [ 100.986883][ T6943] ? __pfx_tty_write+0x10/0x10 [ 100.986906][ T6943] ? __pfx_vfs_write+0x10/0x10 [ 100.986919][ T6943] ? find_held_lock+0x2b/0x80 [ 100.986955][ T6943] ksys_write+0x12a/0x250 [ 100.986971][ T6943] ? __pfx_ksys_write+0x10/0x10 [ 100.986985][ T6943] ? ksys_write+0x1ac/0x250 [ 100.986999][ T6943] ? __pfx_ksys_write+0x10/0x10 [ 100.987020][ T6943] __do_fast_syscall_32+0xe7/0x970 [ 100.987040][ T6943] ? lockdep_hardirqs_on+0x78/0x100 [ 100.987062][ T6943] do_fast_syscall_32+0x32/0x70 [ 100.987083][ T6943] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.987103][ T6943] RIP: 0023:0xf70aefec [ 100.987123][ T6943] Code: Unable to access opcode bytes at 0xf70aefc2. [ 100.987130][ T6943] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 100.987146][ T6943] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080002400 [ 100.987155][ T6943] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.987164][ T6943] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.987173][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.987182][ T6943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.987204][ T6943] [ 104.710771][ T5756] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.728383][ T5756] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.734383][ T5756] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.740715][ T5756] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.744940][ T5756] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.894674][ T7002] netlink: 'syz.2.354': attribute type 3 has an invalid length. [ 104.898710][ T7002] netlink: 'syz.2.354': attribute type 3 has an invalid length. [ 105.108729][ T5797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.190448][ T5797] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.291257][ T5797] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.366250][ T5797] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.502562][ T6992] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.506155][ T6992] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.508442][ T6992] bridge_slave_0: entered allmulticast mode [ 105.511054][ T6992] bridge_slave_0: entered promiscuous mode [ 105.515794][ T6992] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.518790][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.521522][ T6992] bridge_slave_1: entered allmulticast mode [ 105.525847][ T6992] bridge_slave_1: entered promiscuous mode [ 105.596631][ T6992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.616268][ T6992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.661363][ T6992] team0: Port device team_slave_0 added [ 105.680291][ T6992] team0: Port device team_slave_1 added [ 105.698089][ T5797] bridge_slave_1: left allmulticast mode [ 105.701216][ T5797] bridge_slave_1: left promiscuous mode [ 105.705720][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.719478][ T5797] bridge_slave_0: left allmulticast mode [ 105.721697][ T5797] bridge_slave_0: left promiscuous mode [ 105.724117][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.752203][ T5797] dvmrp1: left allmulticast mode [ 105.934979][ T5797] bond1 (unregistering): (slave vti0): Releasing backup interface [ 105.938693][ T5797] vti0 (unregistering): left promiscuous mode [ 106.019230][ T5797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.048729][ T5797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.061292][ T5797] bond0 (unregistering): Released all slaves [ 106.084177][ T5797] bond1 (unregistering): Released all slaves [ 106.498312][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.507632][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.535877][ T6992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.595832][ T7047] xt_connbytes: Forcing CT accounting to be enabled [ 106.598859][ T7047] Cannot find del_set index 0 as target [ 106.754179][ T7049] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 106.787046][ T5756] Bluetooth: hci4: command tx timeout [ 107.115415][ T7046] vfio-pci 0000:00:03.0: No device request channel registered, blocked until released by user [ 107.302670][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.328638][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.374698][ T6992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.529757][ T6992] hsr_slave_0: entered promiscuous mode [ 107.535324][ T6992] hsr_slave_1: entered promiscuous mode [ 107.538126][ T6992] debugfs: 'hsr0' already exists in 'hsr' [ 107.540378][ T6992] Cannot create hsr debugfs directory [ 107.542828][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 107.550647][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 107.561964][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 107.568231][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 107.591880][ T7065] netlink: 884 bytes leftover after parsing attributes in process `syz.0.367'. [ 107.661509][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 107.828932][ T6992] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.850335][ T6992] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.855693][ T6992] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.863941][ T6992] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.903095][ T6992] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.910616][ T6992] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.915035][ T6992] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.922375][ T6992] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.037879][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3 [ 108.065986][ T6992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.105649][ T5797] hsr_slave_0: left promiscuous mode [ 108.109222][ T5797] hsr_slave_1: left promiscuous mode [ 108.112066][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.116181][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.120462][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.123390][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.138601][ T5797] veth1_macvtap: left promiscuous mode [ 108.141986][ T5797] veth0_macvtap: left promiscuous mode [ 108.146625][ T5797] veth1_vlan: left promiscuous mode [ 108.149052][ T5797] veth0_vlan: left promiscuous mode [ 108.572676][ T5797] team0 (unregistering): Port device team_slave_1 removed [ 108.586137][ T7090] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 108.616477][ T5797] team0 (unregistering): Port device team_slave_0 removed [ 108.737888][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4 [ 108.864515][ T5756] Bluetooth: hci4: command tx timeout [ 109.013346][ T6992] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.052182][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.054802][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.065354][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.067935][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.158407][ T7110] FAULT_INJECTION: forcing a failure. [ 109.158407][ T7110] name failslab, interval 1, probability 0, space 0, times 0 [ 109.163635][ T7110] CPU: 2 UID: 0 PID: 7110 Comm: syz.1.374 Tainted: G S L syzkaller #0 PREEMPT(full) [ 109.163665][ T7110] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 109.163672][ T7110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.163682][ T7110] Call Trace: [ 109.163688][ T7110] [ 109.163695][ T7110] dump_stack_lvl+0x100/0x190 [ 109.163723][ T7110] should_fail_ex.cold+0x5/0xa [ 109.163744][ T7110] should_failslab+0xc2/0x120 [ 109.163769][ T7110] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 109.163795][ T7110] ? __get_vm_area_node+0x101/0x330 [ 109.163822][ T7110] __get_vm_area_node+0x101/0x330 [ 109.163848][ T7110] __vmalloc_node_range_noprof+0x228/0x1630 [ 109.163874][ T7110] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 109.163899][ T7110] ? find_held_lock+0x2b/0x80 [ 109.163921][ T7110] ? process_measurement+0x4c8/0x2350 [ 109.163956][ T7110] ? process_measurement+0x4c8/0x2350 [ 109.163979][ T7110] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 109.164010][ T7110] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 109.164039][ T7110] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 109.164072][ T7110] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 109.164094][ T7110] __vmalloc_node_noprof+0xad/0xf0 [ 109.164137][ T7110] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 109.164164][ T7110] __vmalloc_noprof+0xa3/0x120 [ 109.164190][ T7110] ? __pfx___vmalloc_noprof+0x10/0x10 [ 109.164217][ T7110] ? rcu_is_watching+0x12/0xc0 [ 109.164238][ T7110] ? apparmor_capable+0x1d7/0x4d0 [ 109.164258][ T7110] bpf_prog_alloc_no_stats+0x58/0x640 [ 109.164278][ T7110] ? security_capable+0x80/0x260 [ 109.164295][ T7110] bpf_prog_alloc+0x3b/0x200 [ 109.164316][ T7110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.164341][ T7110] bpf_prog_load+0x4a9/0x2fa0 [ 109.164380][ T7110] ? __pfx_bpf_prog_load+0x10/0x10 [ 109.164403][ T7110] ? __lock_acquire+0x49f/0x1a40 [ 109.164453][ T7110] __sys_bpf+0x18dc/0x4e80 [ 109.164479][ T7110] ? __pfx___sys_bpf+0x10/0x10 [ 109.164498][ T7110] ? find_held_lock+0x2b/0x80 [ 109.164518][ T7110] ? get_pid_task+0xfc/0x250 [ 109.164541][ T7110] ? get_pid_task+0xfc/0x250 [ 109.164568][ T7110] ? proc_fail_nth_write+0x9f/0x220 [ 109.164593][ T7110] ? find_held_lock+0x2b/0x80 [ 109.164619][ T7110] ? rcu_read_lock_any_held+0x6a/0xa0 [ 109.164642][ T7110] ? find_held_lock+0x2b/0x80 [ 109.164661][ T7110] ? ksys_write+0x190/0x250 [ 109.164677][ T7110] ? ksys_write+0x190/0x250 [ 109.164711][ T7110] ? fput+0x79/0x100 [ 109.164733][ T7110] ? __ia32_sys_bpf+0xcc/0x170 [ 109.164751][ T7110] __ia32_sys_bpf+0xcc/0x170 [ 109.164771][ T7110] ? __do_fast_syscall_32+0x98/0x970 [ 109.164796][ T7110] __do_fast_syscall_32+0xe7/0x970 [ 109.164817][ T7110] ? lockdep_hardirqs_on+0x78/0x100 [ 109.164840][ T7110] do_fast_syscall_32+0x32/0x70 [ 109.164861][ T7110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.164884][ T7110] RIP: 0023:0xf7f44fec [ 109.164905][ T7110] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 109.164913][ T7110] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 109.164929][ T7110] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 109.164940][ T7110] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.164950][ T7110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.164959][ T7110] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 109.164968][ T7110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.164991][ T7110] [ 109.284721][ T5453] 8021q: adding VLAN 0 to HW filter on device eth5 [ 109.304054][ T7110] syz.1.374: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 109.311066][ T7110] CPU: 2 UID: 0 PID: 7110 Comm: syz.1.374 Tainted: G S L syzkaller #0 PREEMPT(full) [ 109.311093][ T7110] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 109.311101][ T7110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.311110][ T7110] Call Trace: [ 109.311117][ T7110] [ 109.311124][ T7110] dump_stack_lvl+0x100/0x190 [ 109.311150][ T7110] warn_alloc.cold+0x94/0xa8 [ 109.311170][ T7110] ? __pfx_warn_alloc+0x10/0x10 [ 109.311188][ T7110] ? __kasan_kmalloc+0x8a/0xb0 [ 109.311218][ T7110] ? __get_vm_area_node+0x208/0x330 [ 109.311244][ T7110] __vmalloc_node_range_noprof+0xccd/0x1630 [ 109.311269][ T7110] ? find_held_lock+0x2b/0x80 [ 109.311291][ T7110] ? process_measurement+0x4c8/0x2350 [ 109.311311][ T7110] ? process_measurement+0x4c8/0x2350 [ 109.311334][ T7110] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 109.311368][ T7110] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 109.311397][ T7110] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 109.311428][ T7110] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 109.311451][ T7110] __vmalloc_node_noprof+0xad/0xf0 [ 109.311477][ T7110] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 109.311504][ T7110] __vmalloc_noprof+0xa3/0x120 [ 109.311529][ T7110] ? __pfx___vmalloc_noprof+0x10/0x10 [ 109.311558][ T7110] ? rcu_is_watching+0x12/0xc0 [ 109.311579][ T7110] ? apparmor_capable+0x1d7/0x4d0 [ 109.311603][ T7110] bpf_prog_alloc_no_stats+0x58/0x640 [ 109.311626][ T7110] ? security_capable+0x80/0x260 [ 109.311646][ T7110] bpf_prog_alloc+0x3b/0x200 [ 109.311667][ T7110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.311695][ T7110] bpf_prog_load+0x4a9/0x2fa0 [ 109.311721][ T7110] ? __pfx_bpf_prog_load+0x10/0x10 [ 109.311740][ T7110] ? __lock_acquire+0x49f/0x1a40 [ 109.311795][ T7110] __sys_bpf+0x18dc/0x4e80 [ 109.311822][ T7110] ? __pfx___sys_bpf+0x10/0x10 [ 109.311841][ T7110] ? find_held_lock+0x2b/0x80 [ 109.311860][ T7110] ? get_pid_task+0xfc/0x250 [ 109.311882][ T7110] ? get_pid_task+0xfc/0x250 [ 109.311907][ T7110] ? proc_fail_nth_write+0x9f/0x220 [ 109.311927][ T7110] ? find_held_lock+0x2b/0x80 [ 109.311946][ T7110] ? rcu_read_lock_any_held+0x6a/0xa0 [ 109.311963][ T7110] ? find_held_lock+0x2b/0x80 [ 109.311978][ T7110] ? ksys_write+0x190/0x250 [ 109.311991][ T7110] ? ksys_write+0x190/0x250 [ 109.312023][ T7110] ? fput+0x79/0x100 [ 109.312046][ T7110] ? __ia32_sys_bpf+0xcc/0x170 [ 109.312063][ T7110] __ia32_sys_bpf+0xcc/0x170 [ 109.312082][ T7110] ? __do_fast_syscall_32+0x98/0x970 [ 109.312107][ T7110] __do_fast_syscall_32+0xe7/0x970 [ 109.312128][ T7110] ? lockdep_hardirqs_on+0x78/0x100 [ 109.312151][ T7110] do_fast_syscall_32+0x32/0x70 [ 109.312173][ T7110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.312194][ T7110] RIP: 0023:0xf7f44fec [ 109.312213][ T7110] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 109.312220][ T7110] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 109.312235][ T7110] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 109.312246][ T7110] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.312256][ T7110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.312265][ T7110] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 109.312275][ T7110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.312297][ T7110] [ 109.312304][ T7110] Mem-Info: [ 109.452227][ T7110] active_anon:13633 inactive_anon:2011 isolated_anon:0 [ 109.452227][ T7110] active_file:7056 inactive_file:47161 isolated_file:0 [ 109.452227][ T7110] unevictable:1777 dirty:59 writeback:0 [ 109.452227][ T7110] slab_reclaimable:6541 slab_unreclaimable:53976 [ 109.452227][ T7110] mapped:24641 shmem:12160 pagetables:1259 [ 109.452227][ T7110] sec_pagetables:298 bounce:0 [ 109.452227][ T7110] kernel_misc_reclaimable:0 [ 109.452227][ T7110] free:30007 free_pcp:13526 free_cma:0 [ 109.470389][ T7110] Node 0 active_anon:2500kB inactive_anon:72kB active_file:8kB inactive_file:68kB unevictable:1572kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:3660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8480kB pagetables:2056kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 109.494944][ T7110] Node 1 active_anon:52084kB inactive_anon:7972kB active_file:28216kB inactive_file:188576kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:98024kB dirty:236kB writeback:0kB shmem:44980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4864kB pagetables:2912kB sec_pagetables:52kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 109.509700][ T7110] Node 0 DMA free:2060kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:696kB local_pcp:208kB free_cma:0kB [ 109.523193][ T7110] lowmem_reserve[]: 0 280 280 280 280 [ 109.525821][ T7110] Node 0 DMA32 free:16300kB boost:0kB min:12772kB low:15964kB high:19156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2500kB inactive_anon:60kB active_file:4kB inactive_file:76kB unevictable:1536kB writepending:0kB zspages:0kB present:1032196kB managed:286948kB mlocked:0kB bounce:0kB free_pcp:5432kB local_pcp:1084kB free_cma:0kB [ 109.543342][ T7110] lowmem_reserve[]: 0 0 0 0 0 [ 109.549109][ T7110] Node 1 DMA32 free:101664kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52052kB inactive_anon:7972kB active_file:28216kB inactive_file:188576kB unevictable:5536kB writepending:264kB zspages:2312kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:44596kB local_pcp:17976kB free_cma:0kB [ 109.571783][ T7110] lowmem_reserve[]: 0 0 0 0 0 [ 109.573583][ T7110] Node 0 DMA: 41*4kB (UM) 9*8kB (UM) 4*16kB (UM) 1*32kB (U) 9*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2060kB [ 109.582019][ T7110] Node 0 DMA32: 10*4kB (UE) 38*8kB (E) 0*16kB 21*32kB (UME) 30*64kB (UME) 25*128kB (UME) 5*256kB (ME) 5*512kB (UM) 2*1024kB (UM) 2*2048kB (M) 0*4096kB = 16120kB [ 109.592223][ T7110] Node 1 DMA32: 240*4kB (UME) 196*8kB (UME) 46*16kB (UME) 147*32kB (UME) 74*64kB (UME) 127*128kB (UME) 54*256kB (UME) 17*512kB (UME) 13*1024kB (UM) 6*2048kB (UM) 6*4096kB (UM) = 101664kB [ 109.604299][ T7110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.610985][ T7110] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.615392][ T7110] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.621976][ T7110] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.626706][ T7110] 66741 total pagecache pages [ 109.628748][ T7110] 368 pages in swap cache [ 109.630625][ T7110] Free swap = 120328kB [ 109.632524][ T7110] Total swap = 124996kB [ 109.634285][ T7110] 524155 pages RAM [ 109.639272][ T7110] 0 pages HighMem/MovableOnly [ 109.641690][ T7110] 211525 pages reserved [ 109.643401][ T7110] 0 pages cma reserved [ 109.768743][ T7135] netlink: 884 bytes leftover after parsing attributes in process `syz.2.376'. [ 109.787263][ T7132] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 109.811544][ T6992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.003303][ T7144] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 110.037687][ T6992] veth0_vlan: entered promiscuous mode [ 110.048443][ T6992] veth1_vlan: entered promiscuous mode [ 110.095100][ T6992] veth0_macvtap: entered promiscuous mode [ 110.101193][ T6992] veth1_macvtap: entered promiscuous mode [ 110.114547][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.126503][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.134369][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.140406][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.144092][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.162810][ T5797] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.235470][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.242474][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.268915][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.276620][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.604971][ T5756] Bluetooth: hci3: Unable to find connection for big 0x00 [ 110.922195][ T7165] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 110.944680][ T5756] Bluetooth: hci4: command tx timeout [ 111.075425][ T7167] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 111.238999][ T7170] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 111.281359][ T7173] syzkaller0: entered promiscuous mode [ 111.283583][ T7173] syzkaller0: entered allmulticast mode [ 111.287805][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.291144][ T5797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.448369][ T7179] bond1: Removing last arp target with arp_interval on [ 111.452799][ T7179] bond1: entered promiscuous mode [ 111.455703][ T7179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.466286][ T7189] netlink: 884 bytes leftover after parsing attributes in process `syz.4.392'. [ 111.691145][ T7197] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 113.024742][ T5756] Bluetooth: hci4: command tx timeout [ 113.182964][ T7214] syzkaller0: entered promiscuous mode [ 113.186156][ T7211] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 113.186678][ T7214] syzkaller0: entered allmulticast mode [ 114.094571][ T9] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 114.112507][ T7228] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 114.255670][ T9] usb 9-1: not running at top speed; connect to a high speed hub [ 114.261279][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.319725][ T9] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 114.543902][ T5823] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 114.670404][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.679092][ T9] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 114.679258][ T9] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 114.681285][ T9] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 114.683978][ T9] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 114.699512][ T9] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 114.710790][ T9] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 114.717637][ T9] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 114.720854][ T9] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 114.725485][ T9] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 114.857003][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.869560][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.881714][ T5823] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.899330][ T5823] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.905782][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.917015][ T5823] usb 6-1: config 0 descriptor?? [ 115.085711][ T7232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.161138][ T9] usb 9-1: USB disconnect, device number 2 [ 115.193376][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 115.211779][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 115.231655][ T9] keyspan 9-1:1.0: device disconnected [ 115.433221][ T7230] tipc: Started in network mode [ 115.443877][ T7230] tipc: Node identity 7f000001, cluster identity 4711 [ 115.457654][ T7230] tipc: Enabled bearer , priority 10 [ 115.494255][ T7230] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 115.503725][ T7230] tipc: Enabled bearer , priority 10 [ 115.531377][ T7230] Invalid ELF header type: 3 != 1 [ 115.558523][ T5823] usbhid 6-1:0.0: can't add hid device: -71 [ 115.563594][ T5823] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 115.592709][ T5823] usb 6-1: USB disconnect, device number 3 [ 115.652965][ T7248] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 116.019255][ T7255] netlink: 72 bytes leftover after parsing attributes in process `syz.2.411'. [ 116.171307][ T5756] Bluetooth: hci0: Unable to find connection for big 0x00 [ 116.219382][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 116.506466][ T10] tipc: Node number set to 2130706433 [ 117.563097][ T7285] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 117.680908][ T7290] dvmrp1: entered allmulticast mode [ 118.131261][ T5756] Bluetooth: hci1: Unable to find connection for big 0x00 [ 118.367667][ T7313] dyndbg: bad flag-op , at start of #.P,³c [ 118.371645][ T7309] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 118.381051][ T7313] dyndbg: flags parse failed [ 118.415397][ T7316] capability: warning: `syz.4.430' uses 32-bit capabilities (legacy support in use) [ 119.123277][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'. [ 119.424542][ T5823] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 119.541556][ T7357] syzkaller0: entered promiscuous mode [ 119.544769][ T7357] syzkaller0: entered allmulticast mode [ 119.584717][ T5823] usb 6-1: Using ep0 maxpacket: 32 [ 119.592297][ T5823] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 119.598448][ T5823] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 119.607181][ T5823] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 119.615293][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.624626][ T5823] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 119.631529][ T5823] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 119.642839][ T5823] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 119.650130][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.671975][ T5823] usb 6-1: config 0 descriptor?? [ 119.809405][ T7367] netlink: 892 bytes leftover after parsing attributes in process `syz.0.446'. [ 119.907900][ T7355] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 119.922118][ T5823] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 122.076276][ T5823] usb 6-1: USB disconnect, device number 4 [ 122.104015][ T5823] usblp0: removed [ 123.635144][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 124.180792][ T7434] dvmrp1: entered allmulticast mode [ 124.709568][ T7457] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 125.043205][ T7463] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 125.146733][ T7472] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 125.149426][ T7472] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 125.174776][ T7472] vhci_hcd vhci_hcd.0: Device attached [ 125.454733][ T5823] usb 38-1: SetAddress Request (2) to port 0 [ 125.460467][ T5823] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 125.810610][ T7473] vhci_hcd: connection reset by peer [ 125.834081][ T5797] vhci_hcd vhci_hcd.0: stop threads [ 125.855738][ T5797] vhci_hcd vhci_hcd.0: release socket [ 125.873582][ T5797] vhci_hcd vhci_hcd.0: disconnect device [ 126.289881][ T7502] netlink: 36 bytes leftover after parsing attributes in process `syz.4.475'. [ 127.356520][ T7506] netlink: 868 bytes leftover after parsing attributes in process `syz.0.477'. [ 128.119821][ T7524] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 128.410452][ T7529] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 128.717651][ T7540] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 129.221679][ T7556] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 129.290099][ T7559] FAULT_INJECTION: forcing a failure. [ 129.290099][ T7559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.297749][ T7559] CPU: 0 UID: 0 PID: 7559 Comm: syz.1.490 Tainted: G S L syzkaller #0 PREEMPT(full) [ 129.297781][ T7559] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 129.297789][ T7559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.297799][ T7559] Call Trace: [ 129.297806][ T7559] [ 129.297813][ T7559] dump_stack_lvl+0x100/0x190 [ 129.297842][ T7559] should_fail_ex.cold+0x5/0xa [ 129.297864][ T7559] _copy_to_iter+0x5a4/0x1720 [ 129.297899][ T7559] ? __pfx__copy_to_iter+0x10/0x10 [ 129.297924][ T7559] ? proc_single_show+0x179/0x1f0 [ 129.297948][ T7559] ? single_next+0xd/0x40 [ 129.297971][ T7559] ? single_stop+0x9/0x10 [ 129.297991][ T7559] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 129.298051][ T7559] seq_read_iter+0x691/0x1270 [ 129.298077][ T7559] ? __lock_acquire+0x49f/0x1a40 [ 129.298113][ T7559] seq_read+0x344/0x4d0 [ 129.298140][ T7559] ? __pfx_seq_read+0x10/0x10 [ 129.298162][ T7559] ? __pfx___might_resched+0x10/0x10 [ 129.298186][ T7559] ? get_pid_task+0xfc/0x250 [ 129.298219][ T7559] ? rw_verify_area+0xce/0x6d0 [ 129.298243][ T7559] ? __pfx_seq_read+0x10/0x10 [ 129.298269][ T7559] vfs_read+0x1e4/0xb40 [ 129.298285][ T7559] ? __pfx_vfs_read+0x10/0x10 [ 129.298301][ T7559] ? find_held_lock+0x2b/0x80 [ 129.298314][ T7559] ? __fget_files+0x215/0x3d0 [ 129.298324][ T7559] ? __fget_files+0x215/0x3d0 [ 129.298336][ T7559] ? __fget_files+0x21f/0x3d0 [ 129.298350][ T7559] ksys_pread64+0x161/0x1a0 [ 129.298364][ T7559] ? __pfx_ksys_pread64+0x10/0x10 [ 129.298378][ T7559] ? ksys_write+0x1ac/0x250 [ 129.298394][ T7559] ? __pfx_ksys_write+0x10/0x10 [ 129.298415][ T7559] __do_fast_syscall_32+0xe7/0x970 [ 129.298436][ T7559] ? lockdep_hardirqs_on+0x78/0x100 [ 129.298458][ T7559] do_fast_syscall_32+0x32/0x70 [ 129.298481][ T7559] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 129.298502][ T7559] RIP: 0023:0xf7f44fec [ 129.298523][ T7559] Code: Unable to access opcode bytes at 0xf7f44fc2. [ 129.298530][ T7559] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 00000000000000b4 [ 129.298547][ T7559] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000100 [ 129.298558][ T7559] RDX: 000000000000003c RSI: 0000000000000004 RDI: 0000000000000000 [ 129.298568][ T7559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.298578][ T7559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.298588][ T7559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.298609][ T7559] [ 129.534571][ T1044] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 129.664647][ T1044] usb 6-1: device descriptor read/64, error -71 [ 129.904802][ T1044] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 130.034881][ T7564] FAULT_INJECTION: forcing a failure. [ 130.034881][ T7564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.040361][ T7564] CPU: 3 UID: 0 PID: 7564 Comm: syz.2.491 Tainted: G S L syzkaller #0 PREEMPT(full) [ 130.040390][ T7564] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 130.040397][ T7564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.040407][ T7564] Call Trace: [ 130.040414][ T7564] [ 130.040421][ T7564] dump_stack_lvl+0x100/0x190 [ 130.040448][ T7564] should_fail_ex.cold+0x5/0xa [ 130.040470][ T7564] _copy_from_user+0x2e/0xd0 [ 130.040499][ T7564] kstrtouint_from_user+0xd6/0x1d0 [ 130.040521][ T7564] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 130.040542][ T7564] ? __lock_acquire+0x49f/0x1a40 [ 130.040582][ T7564] proc_fail_nth_write+0x83/0x220 [ 130.040608][ T7564] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.040639][ T7564] vfs_write+0x2aa/0x1050 [ 130.040659][ T7564] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.040687][ T7564] ? __pfx_vfs_write+0x10/0x10 [ 130.040703][ T7564] ? find_held_lock+0x2b/0x80 [ 130.040724][ T7564] ? __fget_files+0x215/0x3d0 [ 130.040746][ T7564] ? __fget_files+0x21f/0x3d0 [ 130.040771][ T7564] ksys_write+0x12a/0x250 [ 130.040795][ T7564] ? __pfx_ksys_write+0x10/0x10 [ 130.040821][ T7564] do_int80_emulation+0x14b/0x720 [ 130.040849][ T7564] asm_int80_emulation+0x1a/0x20 [ 130.040867][ T7564] RIP: 0023:0xf718736b [ 130.040882][ T7564] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 130.040898][ T7564] RSP: 002b:00000000f541c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 130.040916][ T7564] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f541c5d0 [ 130.040926][ T7564] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.040936][ T7564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.040945][ T7564] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 130.040955][ T7564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.040983][ T7564] [ 130.054659][ T1044] usb 6-1: device descriptor read/64, error -71 [ 130.235380][ T1044] usb usb6-port1: attempt power cycle [ 130.541392][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 130.546499][ T5823] usb 38-1: device descriptor read/8, error -110 [ 130.585152][ T1044] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 130.601719][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 130.608071][ T1044] usb 6-1: device descriptor read/8, error -71 [ 130.847292][ T1044] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 130.867066][ T1044] usb 6-1: device descriptor read/8, error -71 [ 130.909046][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 130.936764][ T5823] usb usb38-port1: attempt power cycle [ 130.966251][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 130.981592][ T1044] usb usb6-port1: unable to enumerate USB device [ 131.090252][ T7584] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 131.166689][ T7586] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 131.195777][ T224] rpcbind: server 127.0.0.1 not responding, timed out [ 131.291944][ T7589] batadv1: entered promiscuous mode [ 131.527469][ T5823] usb usb38-port1: unable to enumerate USB device [ 131.837287][ T7598] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 131.916815][ T7600] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 131.925117][ T7600] CIFS mount error: No usable UNC path provided in device string! [ 131.925117][ T7600] [ 131.928544][ T7600] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 131.931914][ T7600] CIFS mount error: No usable UNC path provided in device string! [ 131.931914][ T7600] [ 131.936796][ T7600] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 131.974924][ T7602] loop0: detected capacity change from 0 to 32768 [ 131.979509][ T7602] loop1: detected capacity change from 0 to 32768 [ 132.005844][ T7602] loop2: detected capacity change from 0 to 32768 [ 132.022960][ T7602] loop3: detected capacity change from 0 to 32768 [ 132.091496][ T7602] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.323230][ T7602] md/raid:md0: not clean -- starting background reconstruction [ 132.333911][ T7602] md/raid:md0: invalid chunk size 0 [ 132.337600][ T7602] md: pers->run() failed ... [ 132.466087][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.468135][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.622348][ T7610] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 133.061965][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 133.120180][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 133.266410][ T7588] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 133.566109][ T7627] FAULT_INJECTION: forcing a failure. [ 133.566109][ T7627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.583753][ T7627] CPU: 0 UID: 0 PID: 7627 Comm: syz.1.511 Tainted: G S L syzkaller #0 PREEMPT(full) [ 133.583781][ T7627] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 133.583786][ T7627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.583793][ T7627] Call Trace: [ 133.583797][ T7627] [ 133.583801][ T7627] dump_stack_lvl+0x100/0x190 [ 133.583833][ T7627] should_fail_ex.cold+0x5/0xa [ 133.583846][ T7627] _copy_from_user+0x2e/0xd0 [ 133.583864][ T7627] kstrtouint_from_user+0xd6/0x1d0 [ 133.583877][ T7627] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 133.583889][ T7627] ? __lock_acquire+0x49f/0x1a40 [ 133.583912][ T7627] proc_fail_nth_write+0x83/0x220 [ 133.583929][ T7627] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 133.583947][ T7627] vfs_write+0x2aa/0x1050 [ 133.583958][ T7627] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 133.583975][ T7627] ? __pfx_vfs_write+0x10/0x10 [ 133.583988][ T7627] ? find_held_lock+0x2b/0x80 [ 133.584016][ T7627] ? __fget_files+0x215/0x3d0 [ 133.584039][ T7627] ? __fget_files+0x21f/0x3d0 [ 133.584062][ T7627] ksys_write+0x12a/0x250 [ 133.584077][ T7627] ? __pfx_ksys_write+0x10/0x10 [ 133.584100][ T7627] do_int80_emulation+0x14b/0x720 [ 133.584117][ T7627] asm_int80_emulation+0x1a/0x20 [ 133.584129][ T7627] RIP: 0023:0xf714736b [ 133.584138][ T7627] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 133.584149][ T7627] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 133.584161][ T7627] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54065d0 [ 133.584168][ T7627] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.584174][ T7627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.584180][ T7627] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 133.584186][ T7627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.584199][ T7627] [ 133.666007][ T7631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'. [ 134.788552][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'. [ 135.773509][ T7654] syz.4.517 (7654) used greatest stack depth: 19104 bytes left [ 136.323848][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 136.687133][ T7685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.527'. [ 136.710917][ T7685] team0 (unregistering): Port device team_slave_0 removed [ 136.730069][ T7685] team0 (unregistering): Port device team_slave_1 removed [ 136.767790][ T5757] Bluetooth: hci4: unexpected subevent 0x10 length: 5 > 2 [ 137.026405][ T7694] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 137.163549][ T7703] netlink: 860 bytes leftover after parsing attributes in process `syz.1.532'. [ 137.418034][ T7708] netlink: 144 bytes leftover after parsing attributes in process `syz.2.534'. [ 137.503023][ T7701] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 137.525851][ T5823] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 137.667148][ T5823] usb 6-1: device descriptor read/64, error -71 [ 137.904755][ T5823] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 138.044588][ T5823] usb 6-1: device descriptor read/64, error -71 [ 138.058640][ T7722] 9p: Bad value for 'wfdno' [ 138.237071][ T5823] usb usb6-port1: attempt power cycle [ 138.257295][ T7722] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 138.260808][ T7722] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 138.403492][ T7730] netlink: 860 bytes leftover after parsing attributes in process `syz.4.542'. [ 138.614665][ T5823] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 138.636741][ T5823] usb 6-1: device descriptor read/8, error -71 [ 138.884643][ T5823] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 138.905692][ T5823] usb 6-1: device descriptor read/8, error -71 [ 139.024729][ T5823] usb usb6-port1: unable to enumerate USB device [ 139.548820][ T7760] FAULT_INJECTION: forcing a failure. [ 139.548820][ T7760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.558381][ T7760] CPU: 0 UID: 0 PID: 7760 Comm: syz.2.552 Tainted: G S L syzkaller #0 PREEMPT(full) [ 139.558403][ T7760] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 139.558407][ T7760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.558413][ T7760] Call Trace: [ 139.558417][ T7760] [ 139.558422][ T7760] dump_stack_lvl+0x100/0x190 [ 139.558439][ T7760] should_fail_ex.cold+0x5/0xa [ 139.558453][ T7760] _copy_from_iter+0x1f4/0x1690 [ 139.558473][ T7760] ? __pfx__copy_from_iter+0x10/0x10 [ 139.558490][ T7760] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 139.558511][ T7760] copy_page_from_iter+0x238/0x300 [ 139.558529][ T7760] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 139.558568][ T7760] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 139.558580][ T7760] ? unwind_get_return_address+0x59/0xa0 [ 139.558611][ T7760] ? arch_stack_walk+0xa6/0xf0 [ 139.558635][ T7760] ? __lock_acquire+0x49f/0x1a40 [ 139.558664][ T7760] tun_get_user+0x16d6/0x3c20 [ 139.558683][ T7760] ? __pfx_tun_get_user+0x10/0x10 [ 139.558696][ T7760] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 139.558712][ T7760] ? find_held_lock+0x2b/0x80 [ 139.558725][ T7760] ? tun_get+0x191/0x370 [ 139.558735][ T7760] ? tun_get+0x191/0x370 [ 139.558749][ T7760] tun_chr_write_iter+0xdc/0x200 [ 139.558762][ T7760] vfs_write+0x6ac/0x1050 [ 139.558774][ T7760] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 139.558788][ T7760] ? __pfx_vfs_write+0x10/0x10 [ 139.558796][ T7760] ? find_held_lock+0x2b/0x80 [ 139.558817][ T7760] ksys_write+0x12a/0x250 [ 139.558827][ T7760] ? __pfx_ksys_write+0x10/0x10 [ 139.558841][ T7760] do_int80_emulation+0x14b/0x720 [ 139.558859][ T7760] asm_int80_emulation+0x1a/0x20 [ 139.558870][ T7760] RIP: 0023:0xf718736b [ 139.558879][ T7760] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 139.558890][ T7760] RSP: 002b:00000000f543d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 139.558901][ T7760] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800003c0 [ 139.558907][ T7760] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.558913][ T7760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.558919][ T7760] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 139.558925][ T7760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.558938][ T7760] [ 140.725680][ T7776] bond1: Removing last arp target with arp_interval on [ 140.731241][ T7776] bond1: entered allmulticast mode [ 140.734218][ T7776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.485675][ T7786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.560'. [ 141.491245][ T7788] netlink: 860 bytes leftover after parsing attributes in process `syz.1.561'. [ 141.566994][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 142.115769][ T7806] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 143.362082][ T7881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.572'. [ 143.384271][ T7881] ip6gre1: entered promiscuous mode [ 143.389203][ T7881] ip6gre1: entered allmulticast mode [ 143.424771][ T7881] netlink: 72 bytes leftover after parsing attributes in process `syz.2.572'. [ 143.428714][ T7886] FAULT_INJECTION: forcing a failure. [ 143.428714][ T7886] name failslab, interval 1, probability 0, space 0, times 0 [ 143.434221][ T7886] CPU: 0 UID: 0 PID: 7886 Comm: syz.0.576 Tainted: G S L syzkaller #0 PREEMPT(full) [ 143.434241][ T7886] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 143.434246][ T7886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.434252][ T7886] Call Trace: [ 143.434257][ T7886] [ 143.434263][ T7886] dump_stack_lvl+0x100/0x190 [ 143.434288][ T7886] should_fail_ex.cold+0x5/0xa [ 143.434307][ T7886] should_failslab+0xc2/0x120 [ 143.434330][ T7886] __kmalloc_noprof+0xfc/0x820 [ 143.434352][ T7886] ? __pfx_ovl_lookup_index+0x10/0x10 [ 143.434437][ T7886] ? ovl_alloc_entry+0x21/0x70 [ 143.434458][ T7886] ovl_alloc_entry+0x21/0x70 [ 143.434474][ T7886] ovl_lookup_layers+0xf1c/0x2ac0 [ 143.434512][ T7886] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 143.434538][ T7886] ? trace_kmem_cache_alloc+0xdd/0x100 [ 143.434567][ T7886] ? find_held_lock+0x2b/0x80 [ 143.434587][ T7886] ? d_alloc_parallel+0x46e/0x14b0 [ 143.434612][ T7886] ? d_alloc_parallel+0x46e/0x14b0 [ 143.434640][ T7886] ovl_lookup+0x4a8/0x6b0 [ 143.434665][ T7886] ? d_alloc_parallel+0x9ed/0x14b0 [ 143.434690][ T7886] ? __pfx_ovl_lookup+0x10/0x10 [ 143.434719][ T7886] ? __pfx_d_alloc_parallel+0x10/0x10 [ 143.434751][ T7886] ? down_read+0x13b/0x4c0 [ 143.434775][ T7886] ? __pfx_down_read+0x10/0x10 [ 143.434799][ T7886] __lookup_slow+0x155/0x320 [ 143.434822][ T7886] lookup_slow+0x50/0x70 [ 143.434845][ T7886] path_lookupat+0x5e8/0xc40 [ 143.434870][ T7886] ? __do_fast_syscall_32+0xe7/0x970 [ 143.434889][ T7886] ? do_fast_syscall_32+0x32/0x70 [ 143.434912][ T7886] filename_lookup+0x202/0x590 [ 143.434941][ T7886] ? __pfx_filename_lookup+0x10/0x10 [ 143.434986][ T7886] ? find_held_lock+0x2b/0x80 [ 143.435006][ T7886] ? __might_fault+0xc5/0x140 [ 143.435022][ T7886] ? __might_fault+0xc5/0x140 [ 143.435045][ T7886] filename_setxattr+0xa1/0x1d0 [ 143.435065][ T7886] ? __pfx_filename_setxattr+0x10/0x10 [ 143.435086][ T7886] ? do_getname+0x191/0x390 [ 143.435108][ T7886] path_setxattrat+0x1ff/0x3b0 [ 143.435127][ T7886] ? __pfx_path_setxattrat+0x10/0x10 [ 143.435148][ T7886] ? rcu_read_lock_any_held+0x6a/0xa0 [ 143.435176][ T7886] ? find_held_lock+0x2b/0x80 [ 143.435219][ T7886] ? fput+0x79/0x100 [ 143.435237][ T7886] ? ksys_write+0x1ac/0x250 [ 143.435252][ T7886] __ia32_sys_setxattr+0xc4/0x140 [ 143.435269][ T7886] ? __do_fast_syscall_32+0x98/0x970 [ 143.435289][ T7886] ? lockdep_hardirqs_on+0x78/0x100 [ 143.435309][ T7886] __do_fast_syscall_32+0xe7/0x970 [ 143.435330][ T7886] ? lockdep_hardirqs_on+0x78/0x100 [ 143.435352][ T7886] do_fast_syscall_32+0x32/0x70 [ 143.435374][ T7886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.435395][ T7886] RIP: 0023:0xf70aefec [ 143.435416][ T7886] Code: Unable to access opcode bytes at 0xf70aefc2. [ 143.435424][ T7886] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000e2 [ 143.435441][ T7886] RAX: ffffffffffffffda RBX: 0000000080000380 RCX: 00000000800003c0 [ 143.435453][ T7886] RDX: 0000000080000940 RSI: 0000000000000024 RDI: 0000000000000001 [ 143.435464][ T7886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.435474][ T7886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.435484][ T7886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.435507][ T7886] [ 143.447046][ T7878] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 143.688151][ T7896] vfio-pci 0000:00:03.0: No device request channel registered, blocked until released by user [ 143.710761][ T7893] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 143.754127][ T7896] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 144.092183][ T7908] FAULT_INJECTION: forcing a failure. [ 144.092183][ T7908] name failslab, interval 1, probability 0, space 0, times 0 [ 144.096329][ T7908] CPU: 0 UID: 0 PID: 7908 Comm: syz.4.582 Tainted: G S L syzkaller #0 PREEMPT(full) [ 144.096348][ T7908] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 144.096353][ T7908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.096360][ T7908] Call Trace: [ 144.096364][ T7908] [ 144.096368][ T7908] dump_stack_lvl+0x100/0x190 [ 144.096385][ T7908] should_fail_ex.cold+0x5/0xa [ 144.096404][ T7908] should_failslab+0xc2/0x120 [ 144.096426][ T7908] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 144.096445][ T7908] ? __alloc_skb+0x5b7/0x710 [ 144.096466][ T7908] ? __alloc_skb+0x140/0x710 [ 144.096489][ T7908] __alloc_skb+0x140/0x710 [ 144.096506][ T7908] ? __alloc_skb+0x5b7/0x710 [ 144.096524][ T7908] ? __pfx___alloc_skb+0x10/0x10 [ 144.096547][ T7908] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 144.096569][ T7908] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 144.096596][ T7908] alloc_skb_with_frags+0xdd/0x760 [ 144.096614][ T7908] ? __kernel_text_address+0xd/0x30 [ 144.096631][ T7908] ? unwind_get_return_address+0x59/0xa0 [ 144.096650][ T7908] sock_alloc_send_pskb+0x801/0x980 [ 144.096668][ T7908] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 144.096683][ T7908] ? aa_sk_perm+0x309/0xaa0 [ 144.096700][ T7908] hci_sock_sendmsg+0x1c7/0x2620 [ 144.096718][ T7908] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 144.096737][ T7908] ? apparmor_socket_sendmsg+0x15b/0x270 [ 144.096751][ T7908] sock_write_iter+0x53a/0x5b0 [ 144.096762][ T7908] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 144.096775][ T7908] ? __pfx_sock_write_iter+0x10/0x10 [ 144.096788][ T7908] ? bpf_lsm_file_permission+0x9/0x10 [ 144.096799][ T7908] ? security_file_permission+0x76/0x210 [ 144.096816][ T7908] ? rw_verify_area+0xce/0x6d0 [ 144.096833][ T7908] vfs_write+0x6ac/0x1050 [ 144.096843][ T7908] ? __pfx_sock_write_iter+0x10/0x10 [ 144.096855][ T7908] ? __pfx_vfs_write+0x10/0x10 [ 144.096864][ T7908] ? find_held_lock+0x2b/0x80 [ 144.096885][ T7908] ksys_write+0x1f8/0x250 [ 144.096895][ T7908] ? __pfx_ksys_write+0x10/0x10 [ 144.096904][ T7908] ? ksys_write+0x1ac/0x250 [ 144.096913][ T7908] ? __pfx_ksys_write+0x10/0x10 [ 144.096925][ T7908] __do_fast_syscall_32+0xe7/0x970 [ 144.096939][ T7908] ? lockdep_hardirqs_on+0x78/0x100 [ 144.096953][ T7908] do_fast_syscall_32+0x32/0x70 [ 144.096967][ T7908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.096981][ T7908] RIP: 0023:0xf70befec [ 144.096996][ T7908] Code: Unable to access opcode bytes at 0xf70befc2. [ 144.097000][ T7908] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 144.097010][ T7908] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 144.097017][ T7908] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.097023][ T7908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.097029][ T7908] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 144.097035][ T7908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.097048][ T7908] [ 144.791972][ T7925] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 144.843863][ T7926] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 145.057149][ T7944] pimreg: tun_chr_ioctl cmd 1074025684 [ 145.953410][ T7957] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 146.052063][ T7961] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 146.233490][ T7967] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 148.034778][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.244652][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 148.251209][ T24] usb 5-1: config index 0 descriptor too short (expected 12827, got 27) [ 148.257661][ T24] usb 5-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 148.262312][ T24] usb 5-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 148.286294][ T24] usb 5-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 148.300258][ T24] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 148.304300][ T24] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 148.316724][ T24] usb 5-1: Product: syz [ 148.322591][ T24] usb 5-1: Manufacturer: syz [ 148.327788][ T24] usb 5-1: SerialNumber: syz [ 148.704002][ T8006] syz.0.612 uses obsolete (PF_INET,SOCK_PACKET) [ 149.153243][ T8031] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 149.780581][ T8037] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 149.888566][ T42] audit: type=1800 audit(1785436726.354:7): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.618" name="enable" dev="configfs" ino=21864 res=0 errno=0 [ 150.509240][ T24] usb 5-1: USB disconnect, device number 2 [ 151.308277][ T8072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.627'. [ 151.383551][ T8076] binder: 8075:8076 ioctl c00c6211 0 returned -14 [ 151.408539][ T8076] syzkaller0: entered promiscuous mode [ 151.410502][ T8076] syzkaller0: entered allmulticast mode [ 152.385462][ T8090] FAULT_INJECTION: forcing a failure. [ 152.385462][ T8090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.399209][ T8090] CPU: 0 UID: 0 PID: 8090 Comm: syz.1.634 Tainted: G S L syzkaller #0 PREEMPT(full) [ 152.399246][ T8090] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 152.399251][ T8090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.399257][ T8090] Call Trace: [ 152.399261][ T8090] [ 152.399266][ T8090] dump_stack_lvl+0x100/0x190 [ 152.399284][ T8090] should_fail_ex.cold+0x5/0xa [ 152.399299][ T8090] _copy_to_user+0x32/0xd0 [ 152.399318][ T8090] simple_read_from_buffer+0xcb/0x170 [ 152.399337][ T8090] proc_fail_nth_read+0x1af/0x230 [ 152.399353][ T8090] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.399368][ T8090] ? rw_verify_area+0xce/0x6d0 [ 152.399383][ T8090] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.399398][ T8090] vfs_read+0x1e4/0xb40 [ 152.399409][ T8090] ? __pfx_vfs_read+0x10/0x10 [ 152.399424][ T8090] ? find_held_lock+0x2b/0x80 [ 152.399438][ T8090] ? __fget_files+0x215/0x3d0 [ 152.399451][ T8090] ? __fget_files+0x21f/0x3d0 [ 152.399464][ T8090] ksys_read+0x12a/0x250 [ 152.399474][ T8090] ? __pfx_ksys_read+0x10/0x10 [ 152.399487][ T8090] do_int80_emulation+0x14b/0x720 [ 152.399518][ T8090] asm_int80_emulation+0x1a/0x20 [ 152.399530][ T8090] RIP: 0023:0xf714736b [ 152.399539][ T8090] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 152.399550][ T8090] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 152.399561][ T8090] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54065d0 [ 152.399567][ T8090] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 152.399573][ T8090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.399579][ T8090] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 152.399585][ T8090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.399598][ T8090] [ 152.704532][ T5823] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 153.160498][ T8091] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 153.173571][ T24] IPVS: starting estimator thread 0... [ 153.274747][ T8110] IPVS: using max 21 ests per chain, 50400 per kthread [ 153.331325][ T5823] usb 9-1: unable to get BOS descriptor or descriptor too short [ 153.337595][ T5823] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 153.344843][ T5823] usb 9-1: can't read configurations, error -71 [ 154.151281][ T8130] vfio-pci 0000:00:03.0: No device request channel registered, blocked until released by user [ 154.238387][ T8132] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 155.161463][ T8148] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 155.164255][ T8148] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 155.206105][ T8148] vhci_hcd vhci_hcd.0: Device attached [ 155.493991][ T6179] usb 38-1: SetAddress Request (6) to port 0 [ 155.516194][ T6179] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 155.573681][ T8163] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 155.739960][ T8157] wg2 speed is unknown, defaulting to 1000 [ 155.744350][ T8157] wg2 speed is unknown, defaulting to 1000 [ 155.899758][ T8157] wg2 speed is unknown, defaulting to 1000 [ 156.051948][ T8150] vhci_hcd: connection reset by peer [ 156.055009][ T5797] vhci_hcd vhci_hcd.0: stop threads [ 156.057160][ T5797] vhci_hcd vhci_hcd.0: release socket [ 156.058948][ T5797] vhci_hcd vhci_hcd.0: disconnect device [ 156.157818][ T8174] syzkaller0: entered promiscuous mode [ 156.160231][ T8174] syzkaller0: entered allmulticast mode [ 156.168224][ T8174] netlink: 32 bytes leftover after parsing attributes in process `syz.1.660'. [ 156.343958][ T8157] infiniband syz2: set active [ 156.347058][ T5831] wg2 speed is unknown, defaulting to 1000 [ 156.349536][ T8157] infiniband syz2: added wg2 [ 156.368396][ T8157] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 156.374319][ T8157] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 156.380411][ T8157] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 156.442581][ T8157] RDS/IB: syz2: added [ 156.446507][ T8157] smc: adding ib device syz2 with port count 1 [ 156.449395][ T8157] smc: ib device syz2 port 1 has no pnetid [ 156.456151][ T5823] wg2 speed is unknown, defaulting to 1000 [ 156.466877][ T8157] wg2 speed is unknown, defaulting to 1000 [ 156.653337][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.662'. [ 156.972644][ T8157] wg2 speed is unknown, defaulting to 1000 [ 157.240472][ T8157] wg2 speed is unknown, defaulting to 1000 [ 157.448770][ T8157] wg2 speed is unknown, defaulting to 1000 [ 158.188307][ T8218] FAULT_INJECTION: forcing a failure. [ 158.188307][ T8218] name failslab, interval 1, probability 0, space 0, times 0 [ 158.192516][ T8218] CPU: 0 UID: 0 PID: 8218 Comm: syz.4.674 Tainted: G S L syzkaller #0 PREEMPT(full) [ 158.192537][ T8218] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 158.192541][ T8218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.192548][ T8218] Call Trace: [ 158.192552][ T8218] [ 158.192557][ T8218] dump_stack_lvl+0x100/0x190 [ 158.192576][ T8218] should_fail_ex.cold+0x5/0xa [ 158.192588][ T8218] should_failslab+0xc2/0x120 [ 158.192606][ T8218] kmem_cache_alloc_noprof+0x91/0x6a0 [ 158.192620][ T8218] ? do_getname_kernel+0x5d/0x250 [ 158.192636][ T8218] do_getname_kernel+0x5d/0x250 [ 158.192650][ T8218] kern_path+0x1f/0x50 [ 158.192666][ T8218] ovl_mount_dir+0x142/0x1c0 [ 158.192684][ T8218] ovl_parse_param+0x11a8/0x1600 [ 158.192699][ T8218] ? rcu_is_watching+0x12/0xc0 [ 158.192714][ T8218] ? __pfx_ovl_parse_param+0x10/0x10 [ 158.192731][ T8218] ? static_key_count+0x5a/0x70 [ 158.192746][ T8218] ? __pfx_ovl_parse_param+0x10/0x10 [ 158.192762][ T8218] vfs_parse_fs_param+0x200/0x3b0 [ 158.192777][ T8218] vfs_parse_fs_qstr+0x138/0x1c0 [ 158.192790][ T8218] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 158.192803][ T8218] ? kasan_save_track+0x14/0x30 [ 158.192818][ T8218] ? lockdep_init_map_type+0x5c/0x250 [ 158.192829][ T8218] ? ovl_next_opt+0x143/0x1c0 [ 158.192843][ T8218] ? __pfx_ovl_next_opt+0x10/0x10 [ 158.192857][ T8218] vfs_parse_monolithic_sep+0x195/0x210 [ 158.192871][ T8218] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 158.192885][ T8218] ? alloc_fs_context+0x65a/0xf40 [ 158.192900][ T8218] path_mount+0x77f/0x23d0 [ 158.192915][ T8218] ? __pfx_path_mount+0x10/0x10 [ 158.192927][ T8218] ? lockdep_hardirqs_on+0x78/0x100 [ 158.192941][ T8218] ? putname+0xb1/0x110 [ 158.192952][ T8218] ? kmem_cache_free+0x127/0x6b0 [ 158.192966][ T8218] ? __ia32_sys_mount+0x292/0x310 [ 158.192979][ T8218] __ia32_sys_mount+0x292/0x310 [ 158.192991][ T8218] ? __pfx___ia32_sys_mount+0x10/0x10 [ 158.193003][ T8218] ? ksys_write+0x1ac/0x250 [ 158.193013][ T8218] ? __pfx_ksys_write+0x10/0x10 [ 158.193025][ T8218] __do_fast_syscall_32+0xe7/0x970 [ 158.193039][ T8218] ? lockdep_hardirqs_on+0x78/0x100 [ 158.193052][ T8218] do_fast_syscall_32+0x32/0x70 [ 158.193066][ T8218] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.193079][ T8218] RIP: 0023:0xf70befec [ 158.193094][ T8218] Code: Unable to access opcode bytes at 0xf70befc2. [ 158.193099][ T8218] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 158.193109][ T8218] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 158.193116][ T8218] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 00000000800000c0 [ 158.193122][ T8218] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.193128][ T8218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.193134][ T8218] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.193146][ T8218] [ 158.193151][ T8218] overlayfs: failed to resolve './file0': -12 [ 158.894631][ T1834] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 158.946919][ T8245] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.961341][ T8245] XFS (nullb0): Invalid superblock magic number [ 159.027799][ T8252] FAULT_INJECTION: forcing a failure. [ 159.027799][ T8252] name failslab, interval 1, probability 0, space 0, times 0 [ 159.033986][ T8252] CPU: 2 UID: 0 PID: 8252 Comm: syz.4.680 Tainted: G S L syzkaller #0 PREEMPT(full) [ 159.034020][ T8252] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 159.034028][ T8252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.034045][ T8252] Call Trace: [ 159.034051][ T8252] [ 159.034060][ T8252] dump_stack_lvl+0x100/0x190 [ 159.034086][ T8252] should_fail_ex.cold+0x5/0xa [ 159.034109][ T8252] should_failslab+0xc2/0x120 [ 159.034135][ T8252] __kmalloc_noprof+0xfc/0x820 [ 159.034156][ T8252] ? kasan_save_track+0x14/0x30 [ 159.034179][ T8252] ? alloc_trace_uprobe+0x86/0x370 [ 159.034208][ T8252] alloc_trace_uprobe+0x86/0x370 [ 159.034237][ T8252] __trace_uprobe_create+0x673/0x22f0 [ 159.034273][ T8252] ? __pfx___trace_uprobe_create+0x10/0x10 [ 159.034302][ T8252] ? __kmalloc_noprof+0x343/0x820 [ 159.034324][ T8252] ? argv_split+0x173/0x420 [ 159.034350][ T8252] ? argv_split+0x359/0x420 [ 159.034370][ T8252] ? __pfx___trace_uprobe_create+0x10/0x10 [ 159.034398][ T8252] trace_probe_create+0xef/0x100 [ 159.034437][ T8252] ? __pfx_trace_probe_create+0x10/0x10 [ 159.034469][ T8252] dyn_event_create+0x46/0x70 [ 159.034489][ T8252] create_or_delete_trace_uprobe+0x5a/0xb0 [ 159.034516][ T8252] trace_parse_run_command+0x1ab/0x3b0 [ 159.034540][ T8252] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 159.034570][ T8252] vfs_write+0x2aa/0x1050 [ 159.034589][ T8252] ? __pfx_probes_write+0x10/0x10 [ 159.034616][ T8252] ? __pfx_vfs_write+0x10/0x10 [ 159.034630][ T8252] ? find_held_lock+0x2b/0x80 [ 159.034681][ T8252] ? __fget_files+0x215/0x3d0 [ 159.034703][ T8252] ? __fget_files+0x21f/0x3d0 [ 159.034727][ T8252] ksys_write+0x12a/0x250 [ 159.034744][ T8252] ? __pfx_ksys_write+0x10/0x10 [ 159.034761][ T8252] ? ksys_write+0x1ac/0x250 [ 159.034776][ T8252] ? __pfx_ksys_write+0x10/0x10 [ 159.034798][ T8252] __do_fast_syscall_32+0xe7/0x970 [ 159.034821][ T8252] ? lockdep_hardirqs_on+0x78/0x100 [ 159.034842][ T8252] do_fast_syscall_32+0x32/0x70 [ 159.034865][ T8252] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.034887][ T8252] RIP: 0023:0xf70befec [ 159.034908][ T8252] Code: Unable to access opcode bytes at 0xf70befc2. [ 159.034916][ T8252] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 159.034933][ T8252] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 159.034944][ T8252] RDX: 0000000000000016 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.034953][ T8252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.034962][ T8252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.034972][ T8252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.034995][ T8252] [ 159.064581][ T1834] usb 6-1: Using ep0 maxpacket: 16 [ 159.085803][ T8252] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN NOPTI [ 159.088238][ T1834] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 159.088582][ T8252] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 159.090208][ T1834] usb 6-1: config 0 has no interface number 0 [ 159.092187][ T8252] CPU: 2 UID: 0 PID: 8252 Comm: syz.4.680 Tainted: G S L syzkaller #0 PREEMPT(full) [ 159.092219][ T8252] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 159.092226][ T8252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.092238][ T8252] RIP: 0010:path_put+0x22/0x70 [ 159.094077][ T1834] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 159.095993][ T8252] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 fb e8 f3 77 79 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 29 48 8b 7b 08 e8 df 82 04 00 48 89 da 48 b8 00 00 [ 159.096015][ T8252] RSP: 0018:ffffc90003d4fa50 EFLAGS: 00010203 [ 159.096031][ T8252] RAX: dffffc0000000000 RBX: 000000000000003c RCX: 0000000000000000 [ 159.096048][ T8252] RDX: 0000000000000008 RSI: ffffffff8290346d RDI: 0000000000000044 [ 159.096060][ T8252] RBP: ffffc90003d4fbe0 R08: 0000000000000001 R09: 0000000000000000 [ 159.096071][ T8252] R10: ffffffff9b744c40 R11: 0000000000000000 R12: ffff88806c581e88 [ 159.096082][ T8252] R13: ffff8880250840e0 R14: ffff88804c7b8680 R15: fffffffffffffff4 [ 159.096096][ T8252] FS: 0000000000000000(0000) GS:ffff888096de3000(0063) knlGS:00000000f54adb40 [ 159.096129][ T8252] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 159.096143][ T8252] CR2: 00000000f72789d0 CR3: 000000005c524000 CR4: 0000000000352ef0 [ 159.096155][ T8252] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 159.096168][ T8252] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 159.096179][ T8252] Call Trace: [ 159.096184][ T8252] [ 159.096194][ T8252] __trace_uprobe_create+0x96d/0x22f0 [ 159.098446][ T1834] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 159.099700][ T8252] ? __pfx___trace_uprobe_create+0x10/0x10 [ 159.101528][ T1834] usb 6-1: config 0 interface 41 has no altsetting 0 [ 159.103442][ T8252] ? __kmalloc_noprof+0x343/0x820 [ 159.107383][ T1834] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 159.109409][ T8252] ? argv_split+0x173/0x420 [ 159.109429][ T8252] ? argv_split+0x359/0x420 [ 159.109441][ T8252] ? __pfx___trace_uprobe_create+0x10/0x10 [ 159.111323][ T1834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.113341][ T8252] trace_probe_create+0xef/0x100 [ 159.113364][ T8252] ? __pfx_trace_probe_create+0x10/0x10 [ 159.115043][ T1834] usb 6-1: Product: syz [ 159.117808][ T8252] dyn_event_create+0x46/0x70 [ 159.120660][ T1834] usb 6-1: Manufacturer: syz [ 159.123877][ T8252] create_or_delete_trace_uprobe+0x5a/0xb0 [ 159.123915][ T8252] trace_parse_run_command+0x1ab/0x3b0 [ 159.123941][ T8252] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 159.127631][ T1834] usb 6-1: SerialNumber: syz [ 159.129701][ T8252] vfs_write+0x2aa/0x1050 [ 159.129725][ T8252] ? __pfx_probes_write+0x10/0x10 [ 159.129750][ T8252] ? __pfx_vfs_write+0x10/0x10 [ 159.136195][ T1834] usb 6-1: config 0 descriptor?? [ 159.137087][ T8252] ? find_held_lock+0x2b/0x80 [ 159.137118][ T8252] ? __fget_files+0x215/0x3d0 [ 159.137134][ T8252] ? __fget_files+0x21f/0x3d0 [ 159.142638][ T8234] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.143793][ T8252] ksys_write+0x12a/0x250 [ 159.147027][ T8234] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.150373][ T8252] ? __pfx_ksys_write+0x10/0x10 [ 159.283695][ T8252] ? ksys_write+0x1ac/0x250 [ 159.285472][ T8252] ? __pfx_ksys_write+0x10/0x10 [ 159.287525][ T8252] __do_fast_syscall_32+0xe7/0x970 [ 159.289581][ T8252] ? lockdep_hardirqs_on+0x78/0x100 [ 159.291742][ T8252] do_fast_syscall_32+0x32/0x70 [ 159.293690][ T8252] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.296262][ T8252] RIP: 0023:0xf70befec [ 159.297921][ T8252] Code: Unable to access opcode bytes at 0xf70befc2. [ 159.300445][ T8252] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 159.303681][ T8252] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 159.306666][ T8252] RDX: 0000000000000016 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.309836][ T8252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.313015][ T8252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.316265][ T8252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.319518][ T8252] [ 159.320765][ T8252] Modules linked in: [ 159.323263][ T8252] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 159.333617][ T8252] RIP: 0010:path_put+0x22/0x70 [ 159.336108][ T8252] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 fb e8 f3 77 79 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 29 48 8b 7b 08 e8 df 82 04 00 48 89 da 48 b8 00 00 [ 159.344778][ T8252] RSP: 0018:ffffc90003d4fa50 EFLAGS: 00010203 [ 159.350882][ T8252] RAX: dffffc0000000000 RBX: 000000000000003c RCX: 0000000000000000 [ 159.356064][ T8234] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.358862][ T8252] RDX: 0000000000000008 RSI: ffffffff8290346d RDI: 0000000000000044 [ 159.363523][ T8234] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.370015][ T8252] RBP: ffffc90003d4fbe0 R08: 0000000000000001 R09: 0000000000000000 [ 159.389653][ T8252] R10: ffffffff9b744c40 R11: 0000000000000000 R12: ffff88806c581e88 [ 159.395696][ T8252] R13: ffff8880250840e0 R14: ffff88804c7b8680 R15: fffffffffffffff4 [ 159.404593][ T8252] FS: 0000000000000000(0000) GS:ffff888096be3000(0063) knlGS:00000000f54adb40 [ 159.408469][ T8252] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 159.411293][ T8252] CR2: 00007fa03d736490 CR3: 000000005c524000 CR4: 0000000000352ef0 [ 159.415701][ T8252] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 159.419137][ T8252] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 159.422499][ T8252] Kernel panic - not syncing: Fatal exception [ 159.425690][ T8252] Kernel Offset: disabled [ 159.427498][ T8252] Rebooting in 86400 seconds..