last executing test programs: 3m14.219702632s ago: executing program 0 (id=76): socket$nl_audit(0x10, 0x3, 0x9) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3m14.180387907s ago: executing program 0 (id=77): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000007c0)=0x2) recvmmsg(r1, &(0x7f0000000800), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m13.227743206s ago: executing program 0 (id=84): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000600)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f0000000700)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000780)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x8, 0x0, &(0x7f0000000800)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000840)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000900)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000980)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a00)}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000a40), 0x40002, 0x0) epoll_create1(0x80000) pselect6(0x40, &(0x7f0000000a80)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000ac0)={0x1ff, 0x1000000000, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b00)={0x44, 0x0, &(0x7f0000000b40)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 3m12.345800286s ago: executing program 0 (id=91): r0 = syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dsp(0xffffff9c, &(0x7f0000002300), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000002340)=0x6) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000002380), 0x2, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000023c0)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x15, "518aba4d000000000000000000000000002000"}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002400)={0xfc, {"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", 0xce2}}, 0x1006) ioctl$FBIOBLANK(r3, 0x4611, 0x2) ptrace$setopts(0x4206, r0, 0x0, 0x40) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000003480)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003500)={&(0x7f0000003540)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r6, @ANYBLOB="916f0600c06a010064001280110001006272696467655f736c617665000000004c00058005001e0009"], 0x84}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) write(r7, &(0x7f0000000040)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4', 0x38) 3m12.058872585s ago: executing program 0 (id=92): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x9, 0xfff, 0x7, 0x0, 0x12, 0x8, 0x40, 0x4, 0x2b, 0x2, 0x7, 0x0, 0x7fffffffffffffff}, {0x7ff, 0x1ff, 0x9, 0x18, 0x9, 0x81, 0x97, 0x40, 0x5, 0xbc, 0x4, 0x9, 0x3}, {0xd3, 0x80b0, 0x5, 0x2, 0x84, 0x9, 0xfc, 0xe, 0xe, 0x9, 0xe, 0x6, 0x4}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x7, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m11.611008274s ago: executing program 0 (id=98): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_bloc']) chdir(0x0) setresuid(0x0, 0xee00, 0x0) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r1, 0xc) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 3m11.500555442s ago: executing program 32 (id=98): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_bloc']) chdir(0x0) setresuid(0x0, 0xee00, 0x0) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r1, 0xc) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 2m38.996047714s ago: executing program 1 (id=257): sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000003, 0x204031, 0xffffffffffffffff, 0x97170000) timer_create(0x4, &(0x7f0000000300)={0x0, 0x38, 0x0, @thr={&(0x7f0000000100)="4c499e8369aba39a2969a6d0b462b7", 0x0}}, &(0x7f0000000340)) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0x3, 0x6}, 'syz0\x00', 0x38}) write$input_event(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x2710}, 0x12, 0x7, 0x100000a}, 0x18) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb635773f06ebbeeb, 0x8010, 0xffffffffffffffff, 0xffff9000) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) 2m38.5763431s ago: executing program 1 (id=258): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000480)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x20) write(r1, &(0x7f0000000140)='md0\n', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/metadata_version\x00', 0x509000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) write(r2, &(0x7f0000000240)='externa', 0x7) syz_open_dev$sndctrl(&(0x7f0000000280), 0x8d, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='65536\n', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/layout\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/layout\x00', 0x2, 0x10) write(r3, &(0x7f0000000600)='12', 0x2) 2m37.675950634s ago: executing program 1 (id=265): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r0 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x2, 0x14d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{r5, 0x8440}], 0x1, 0x0, 0x0, 0x0) dup2(r4, r5) syz_emit_ethernet(0x0, 0x0, 0x0) personality(0xeaffffffffffffff) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) 2m37.431003087s ago: executing program 1 (id=266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000740)="58dd", 0x2}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0x1000ffb, 0x7, 0x10, 0xc1, 0x4, 0x1, 0x3, 0x1, 0x101, 0x107e, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x800004, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b13, 0x100, 0x6, 0x1c04, 0xb, 0x0, 0xbef4, 0x8, 0x80020fe, 0x3, 0x3, 0x11000, 0x9, 0x2, 0x79b, 0x2, 0x1, 0x7d, 0x8, 0xfffffffe, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x405, 0x6, 0x8, 0x9, 0xb, 0x5, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x3, 0x8, 0xffff, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x6, 0x83, 0x800100, 0x5, 0x255, 0x81, 0x4, 0x5, 0x20006, 0x7, 0xffffffff, 0xb, 0x2, 0x800, 0x1, 0x2a2, 0xfffffffc, 0x2, 0x2, 0x7, 0x1, 0x0, 0xfffffffd, 0x2, 0x40, 0x8, 0x1, 0x3, 0x3ff, 0x66cd, 0x8, 0x8, 0x2, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m36.994956283s ago: executing program 1 (id=272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff010000000000000000000000000057f5c76e114c8b65010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000002"], 0x94}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, 0x0, 0x0) memfd_secret(0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x6, &(0x7f00000004c0)={0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000000) 2m35.249958334s ago: executing program 1 (id=275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x8080, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000840)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendto$inet6(r0, &(0x7f0000000500)='j', 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x1, 0x700, 0x40, 0x2000001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f6, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14}}}}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x419}}}, 0x7) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x10800, 0x0) fsopen(&(0x7f0000000280)='gadgetfs\x00', 0x0) fchdir(0xffffffffffffffff) 2m20.289911833s ago: executing program 33 (id=275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x8080, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000840)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendto$inet6(r0, &(0x7f0000000500)='j', 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x1, 0x700, 0x40, 0x2000001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f6, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14}}}}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x419}}}, 0x7) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x10800, 0x0) fsopen(&(0x7f0000000280)='gadgetfs\x00', 0x0) fchdir(0xffffffffffffffff) 52.080944468s ago: executing program 5 (id=781): sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='on\n', 0x3) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./trace\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/irq_vectors/x86_platform_ipi_entry/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r1, 0x0, 0x0, 0x83f) pwrite64(r1, &(0x7f0000000440)="f700040000000000", 0x8, 0x830) nanosleep(&(0x7f0000000640)={0x0, 0x2faf080}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./trace/trace\x00', 0x0, 0x0) read(r2, 0x0, 0x0) close(r2) 51.835830996s ago: executing program 5 (id=786): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000740)='X', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0x1000ffb, 0x7, 0x10, 0xc1, 0x4, 0x1, 0x3, 0x1, 0x101, 0x107e, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x800004, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b13, 0x100, 0x6, 0x1c04, 0xb, 0x0, 0xbef4, 0x8, 0x80020fe, 0x3, 0x3, 0x11000, 0x9, 0x2, 0x79b, 0x2, 0x1, 0x7d, 0x8, 0xfffffffe, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x405, 0x6, 0x8, 0x9, 0xb, 0x5, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x3, 0x8, 0xffff, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x6, 0x83, 0x800100, 0x5, 0x255, 0x81, 0x4, 0x5, 0x20006, 0x7, 0xffffffff, 0xb, 0x2, 0x800, 0x1, 0x2a2, 0xfffffffc, 0x2, 0x2, 0x7, 0x1, 0x0, 0xfffffffd, 0x2, 0x40, 0x8, 0x1, 0x3, 0x3ff, 0x66cd, 0x8, 0x8, 0x2, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 51.657590791s ago: executing program 5 (id=788): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./pipe\x00', 0x1ff) io_setup(0x6, &(0x7f0000000d80)=0x0) io_submit(r0, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, 0xffffffffffffffff, &(0x7f0000000000)="31ce", 0x2fe, 0xfbe, 0x0, 0x1}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./pipe\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf250b0000000c000580070001"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./pipe/gssd/clntXX/gssd\x00', 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x1, 0x7d312eb190dc5e7e, 0x1, 0x3}, &(0x7f0000000180)=0x18) mount(&(0x7f00000001c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000080)='./mnt\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./pipe/nfs/clnt0/gssd\x00', 0x2, 0x0) write(r5, &(0x7f0000000300)='\x00\x00\x00\x00', 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="0a000000010001", 0x7) 51.507694471s ago: executing program 5 (id=789): writev(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="589daae13ba3b6c4fa0acd94a01d25560f62e8b233301e2a69a819a31fce5e46991134f988aca65ae41b7ec82b13660f0689d961bc0080f3d7324cadd43021c56646981ea5646a2885f8ded225090384eb899751cb5c0e2e158ef61299b6b56d58127bd50d847613f72b6cce64192a8032a949fcdc1aa12a9bce6c7f1d5965d482d4b0fb2754186a0bb0b572a473e2c252395f5cf13925140bdf1757e8d33ac4be51d87408cd508ab3cc486d28cd80a3e4e485", 0xb3}, {}], 0x5) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/md0\x00', 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000004c0)=@buf) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000540)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000580)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000005c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02fa0000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) 51.425450536s ago: executing program 5 (id=790): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./myconfig/usb_gadget/g1/max_speed\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r1, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/64, 0x40}], 0x1, 0x8001, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x119, 0x84, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') fchdir(r2) mmap(&(0x7f00000b1000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, r2, 0x6f422000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) write(r0, &(0x7f0000000900)='s', 0x1) 51.305803391s ago: executing program 5 (id=791): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) socket(0xa, 0x1, 0x0) setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x4, 0x70bd2b, 0x25dfdc02, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x841}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0], 0x50}}, 0x8040) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 51.28176251s ago: executing program 34 (id=791): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) socket(0xa, 0x1, 0x0) setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x4, 0x70bd2b, 0x25dfdc02, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x841}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0], 0x50}}, 0x8040) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.006497578s ago: executing program 3 (id=966): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x100d0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x4008860) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r2, 0x0, r5, 0x0, 0xacb6, 0x8) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000380)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb417, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x2, 0xde7, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x4}}}, 0x0) splice(r4, 0x0, r3, 0x0, 0x7fffffffffffffff, 0x0) write(r1, &(0x7f0000000040), 0xffffff4a) userfaultfd(0x801) 6.111486193s ago: executing program 3 (id=975): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, {0x259a}, 0x1}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0x104) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/106, 0x6a}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24000000) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x402) 4.471989635s ago: executing program 4 (id=981): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x890) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) 4.023291825s ago: executing program 3 (id=984): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000040)='\x00', 0x1) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0xc, 0x110, 0x1}, {0xc, 0x110, 0xe}], 0x18}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0x9}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0xf, 0xf3, 0xe1c, 0x2a6e63a2eef8f473, @empty, @loopback, 0x10, 0x0, 0xf261, 0x8}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) read(r2, &(0x7f00000003c0)=""/232, 0xe8) write$bt_hci(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) r6 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) bind(r6, &(0x7f0000000300)=@generic={0x1f, "0000000000000100"}, 0xa) listen(r6, 0x1) 3.328478272s ago: executing program 3 (id=986): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb080045000014000000000000000000000000ffffff"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x3f) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000100)='net/packet\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x40f4, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(r0, &(0x7f00000006c0)='net/ip6_tables_matches\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 3.20707853s ago: executing program 6 (id=987): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000480)=0x7, 0x4) r1 = socket(0x29, 0x2, 0x0) sendmmsg$alg(r1, &(0x7f0000001340), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000020601030000000000000000000000020073797a31000000000c00078008001300d4c3"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000013c0)={0x2020}, 0x2020) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x24020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r3, 0x2290, 0x58ff, 0x0, &(0x7f0000000300)={[0x70c]}, 0x8) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x0, @multicast2, 0x4e24, 0x3, 'ovf\x00', 0x8, 0x1, 0x50}, 0x2c) 2.877710852s ago: executing program 4 (id=988): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000029c0)={r3, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x3, 0xb9, 0x9, 0x80, 0x2, 0x5}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110af00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @rand_addr=0x64010100}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.548476024s ago: executing program 4 (id=989): ioctl(0xffffffffffffffff, 0x8990, &(0x7f0000000040)='veth0:') socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x800, 0x25, 0x4}, 0x18) ioctl$FIBMAP(r0, 0x1, 0x0) syz_clone(0x2180100, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, 0x0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 2.329044992s ago: executing program 6 (id=990): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x11f) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000380)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000f4c000/0x2000)=nil, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x4) syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1a0040, 0x0) chdir(&(0x7f00000197c0)='./file0\x00') creat(&(0x7f0000019800)='./file0\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000019840)='./proc\x00', 0x1ff) 2.309974525s ago: executing program 2 (id=991): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) inotify_init1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0xa) landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.198896083s ago: executing program 6 (id=992): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0xc014) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, 0x0, 0x4040041) r1 = memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) syz_emit_ethernet(0x26, &(0x7f0000000100)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @random="ba1aed2bd9ca", @multicast1, @broadcast, @rand_addr=0x64010101}}}}, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0xe, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) ioctl$KDSIGACCEPT(r0, 0x5607, 0x16) keyctl$KEYCTL_RESTRICT_KEYRING(0x1f, 0x0, &(0x7f00000000c0)='asymmetric\x00', 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x3, 0x6}) 2.137533411s ago: executing program 3 (id=994): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESHEX], 0x8) socket$packet(0x11, 0x3, 0x300) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r4, 0x4}, 0x38) 1.957844422s ago: executing program 6 (id=995): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x22183, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl(r2, 0x404c4701, &(0x7f0000000080)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x5) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x1c) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xf9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000011c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40) 1.4777881s ago: executing program 6 (id=996): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) chdir(&(0x7f0000000340)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.355252682s ago: executing program 2 (id=997): r0 = epoll_create1(0x80000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) r3 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0xa6) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r2) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) r4 = epoll_create1(0x0) dup2(r1, r0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 1.354600181s ago: executing program 2 (id=998): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a810ff0800459900180067000009329078ac1414aaac1e03010f453e4700000000102683d69ba1905f3516d17f5b14347ef6a199c760c2313f3f67bff151f550b575dd39685d8d1f9cc6efe88675fefb66e03a300c08f330046b86c3"], 0x2e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x84, @empty, 0x4e1c, 0x3, 'wlc\x00', 0x39, 0x80, 0x2}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1', 0x1) socket$kcm(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@fallback=r2, r2, 0x2f}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@fallback=r2, r3, 0x2f, 0x2030, 0x4, @void, @void, @value=r4}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[], 0x20) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x8, 0x323b, 0x56}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 1.327311006s ago: executing program 2 (id=999): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x149102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000500), 0x40800, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000540)=ANY=[@ANYRESHEX]) 966.154902ms ago: executing program 4 (id=1000): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r0, 0x1, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135", 0x1b, 0xfffffffffffffffe) syz_open_dev$video4linux(0x0, 0x3, 0x42583) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) 965.936778ms ago: executing program 2 (id=1001): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='/dev/ram0,65536\n\x00', 0x11) close(r0) r1 = syz_open_dev$mtd(&(0x7f0000000180), 0x1, 0x2) ioctl$MEMERASE(r1, 0x40084d02, &(0x7f0000000200)={0x0, 0x400000}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000a80)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x16}]}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) ioctl(0xffffffffffffffff, 0x8914, 0x0) close(0x3) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl(r5, 0x40186f40, &(0x7f0000000280)="000000000100"/24) nanosleep(&(0x7f0000000500)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ubi/ubi0/dev\x00', 0x0, 0x0) 423.322598ms ago: executing program 6 (id=1002): socket$netlink(0x10, 0x3, 0x0) io_pgetevents(0x0, 0xe9, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) read$FUSE(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7c754000000000061106a0000000000000000000000000095000000f3000000"], 0x0}, 0x90) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc9}}}, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x30}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='9', 0x1) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc9, 0xb918}]}}}, 0x8) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000380)={0xddc, 0xfffffffb}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r5, &(0x7f0000000200)='2\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) 225.527374ms ago: executing program 3 (id=1003): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x100d0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x4008860) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r2, 0x0, r5, 0x0, 0xacb6, 0x8) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000380)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb417, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x2, 0xde7, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x4}}}, 0x0) splice(r4, 0x0, r3, 0x0, 0x7fffffffffffffff, 0x0) write(r1, &(0x7f0000000040), 0xffffff4a) userfaultfd(0x801) 8.320747ms ago: executing program 2 (id=1004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0xe4}}, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x10000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = timerfd_create(0x0, 0x80000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x3, 0xac5) r3 = syz_open_dev$radio(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, 0x0) syz_clone3(&(0x7f0000000340)={0x23800000, &(0x7f00000003c0)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) timerfd_settime(r2, 0x3, &(0x7f00000004c0)={{}, {0x0, 0x989680}}, 0x0) openat$rtc(0xffffff9c, 0x0, 0x101000, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000280), 0x0, 0x2) read$usbfs(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='synaptics-smbus', 0xf) sendmsg$nl_generic(r1, 0x0, 0x4000000) 0s ago: executing program 4 (id=1005): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x200448d3}, 0x8094) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000c"], 0x0, 0x80, 0x0, 0x1, 0x9}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000280)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./drv\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./drv/unbind\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='0000:00:1f.3', 0xc) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)={{0x77359400}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='100', 0x3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffffc, 0xea, 0x440, 0x3, 0x32, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000740)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./drv/bind\x00', 0x1, 0x0) write(r3, &(0x7f00000005c0)='0000:00:1f.3\x00', 0xd) kernel console output (not intermixed with test programs): 74.850856][ T5742] le_conn_complete_evt+0x122f/0x2130 [ 74.850874][ T5742] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 74.850888][ T5742] ? hci_event_packet+0x186/0xcd0 [ 74.850906][ T5742] hci_le_conn_complete_evt+0x23c/0x3a0 [ 74.850922][ T5742] ? skb_pull_data+0x15f/0x1e0 [ 74.850958][ T5742] hci_le_meta_evt+0x34a/0x5f0 [ 74.850982][ T5742] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 74.850999][ T5742] hci_event_packet+0x51c/0xcd0 [ 74.851023][ T5742] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 74.851040][ T5742] ? __pfx_hci_event_packet+0x10/0x10 [ 74.851065][ T5742] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.851080][ T5742] hci_rx_work+0x451/0xfc0 [ 74.851110][ T5742] process_one_work+0xac7/0x1b10 [ 74.851137][ T5742] ? __pfx_process_one_work+0x10/0x10 [ 74.851154][ T5742] ? lock_acquire+0x1d1/0x380 [ 74.851181][ T5742] ? __pfx_hci_rx_work+0x10/0x10 [ 74.851197][ T5742] worker_thread+0x5ef/0xe50 [ 74.851223][ T5742] ? kthread+0x13a/0x450 [ 74.851235][ T5742] ? __pfx_worker_thread+0x10/0x10 [ 74.851256][ T5742] kthread+0x373/0x450 [ 74.851269][ T5742] ? __pfx_kthread+0x10/0x10 [ 74.851288][ T5742] ret_from_fork+0x730/0xd60 [ 74.851301][ T5742] ? __pfx_ret_from_fork+0x10/0x10 [ 74.851320][ T5742] ? __switch_to+0x800/0x10f0 [ 74.851336][ T5742] ? __pfx_kthread+0x10/0x10 [ 74.851355][ T5742] ret_from_fork_asm+0x1a/0x30 [ 74.851376][ T5742] [ 74.851390][ T5742] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 74.851416][ T5742] Bluetooth: hci2: failed to register connection device [ 75.304783][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 75.304807][ T10] usb 9-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 75.305460][ T10] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 75.305476][ T10] usb 9-1: can't read configurations, error -71 [ 75.353775][ T6718] netlink: 44 bytes leftover after parsing attributes in process `syz.3.170'. [ 75.358551][ T6718] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.358963][ T6718] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.750716][ T47] IPVS: starting estimator thread 0... [ 75.751552][ T6731] IPVS: dh: TCP 127.0.0.1:5376 - no destination available [ 75.838807][ T6733] IPVS: using max 25 ests per chain, 60000 per kthread [ 76.668771][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 76.841452][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 76.842772][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.160531][ T10] net1080 9-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.4-1, NetChip TurboCONNECT, 02:40:47:b9:68:56 [ 77.414830][ T41] usb 9-1: USB disconnect, device number 4 [ 77.423633][ T41] net1080 9-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.4-1, NetChip TurboCONNECT [ 77.468747][ T5816] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.468780][ T5816] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.468798][ T5816] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.468815][ T5816] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.111225][ T6807] __nla_validate_parse: 10 callbacks suppressed [ 78.111247][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 78.111259][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 78.113737][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 78.113764][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 78.354177][ T6817] warning: `syz.3.195' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.508033][ T6820] netlink: 40 bytes leftover after parsing attributes in process `syz.3.196'. [ 78.919117][ T41] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 79.008273][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 79.008294][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'. [ 79.017463][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 79.017503][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'. [ 79.069540][ T41] usb 8-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 79.070746][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.191212][ T6838] syzkaller1: entered promiscuous mode [ 79.191235][ T6838] syzkaller1: entered allmulticast mode [ 79.316344][ T41] net1080 8-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, da:40:b3:a2:75:0f [ 79.562266][ T70] usb 8-1: USB disconnect, device number 6 [ 79.563255][ T70] net1080 8-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT [ 79.642215][ T9] libceph: connect (1)[c::]:6789 error -101 [ 79.642295][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 79.743359][ T6870] ceph: No mds server is up or the cluster is laggy [ 81.179205][ T5736] Bluetooth: hci2: command 0x0406 tx timeout [ 81.630926][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 81.630938][ T42] audit: type=1326 audit(1792411382.353:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.2.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 81.631046][ T42] audit: type=1326 audit(1792411382.353:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.2.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 81.632979][ T42] audit: type=1326 audit(1792411382.353:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.2.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 81.633028][ T42] audit: type=1326 audit(1792411382.353:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.2.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 81.633059][ T42] audit: type=1326 audit(1792411382.353:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.2.217" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 81.633125][ T42] audit: type=1326 audit(1792411382.353:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.2.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 81.633160][ T42] audit: type=1326 audit(1792411382.353:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.2.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 81.633601][ T42] audit: type=1326 audit(1792411382.353:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.2.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 81.634106][ T42] audit: type=1326 audit(1792411382.353:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.2.217" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 81.635040][ T42] audit: type=1326 audit(1792411382.353:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.2.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 82.111012][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 82.171539][ T50] libceph: connect (1)[c::]:6789 error -101 [ 82.171672][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 82.275262][ T6931] ceph: No mds server is up or the cluster is laggy [ 82.859319][ T50] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 83.020149][ T50] usb 6-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 83.021680][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.313436][ T50] net1080 6-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.1-1, NetChip TurboCONNECT, 06:96:87:1a:d0:3d [ 83.609004][ T70] usb 6-1: USB disconnect, device number 5 [ 83.609982][ T70] net1080 6-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.1-1, NetChip TurboCONNECT [ 83.930374][ T6974] __nla_validate_parse: 3 callbacks suppressed [ 83.930389][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 83.930397][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 83.931160][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 83.931169][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 84.003308][ T6982] 9p: Bad value for 'rfdno' [ 84.466011][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.466035][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.468386][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.468408][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.552996][ T70] libceph: connect (1)[c::]:6789 error -101 [ 84.553086][ T70] libceph: mon0 (1)[c::]:6789 connect error [ 84.653387][ T7006] ceph: No mds server is up or the cluster is laggy [ 84.809903][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 84.809919][ T7016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 84.813430][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 84.813440][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 85.139514][ T5742] Bluetooth: hci1: connection err: -111 [ 85.348814][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 86.289267][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 86.290075][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.355903][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 86.355917][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.250'. [ 86.465248][ T41] libceph: connect (1)[c::]:6789 error -101 [ 86.465345][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 86.517799][ T9] net1080 9-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.4-1, NetChip TurboCONNECT, d2:ee:37:bb:72:4a [ 86.567845][ T7047] ceph: No mds server is up or the cluster is laggy [ 86.767486][ T70] usb 9-1: USB disconnect, device number 5 [ 86.768440][ T70] net1080 9-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.4-1, NetChip TurboCONNECT [ 87.189113][ T7079] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.293796][ T7079] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.423218][ T7079] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.547464][ T7079] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.651070][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.651109][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.651138][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.651166][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.811837][ T7083] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.380860][ T6215] libceph: connect (1)[c::]:6789 error -101 [ 88.380957][ T6215] libceph: mon0 (1)[c::]:6789 connect error [ 88.468076][ T7103] ceph: No mds server is up or the cluster is laggy [ 89.239590][ T6215] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 89.409474][ T6215] usb 8-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 89.410938][ T6215] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.453365][ T7146] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.519324][ T7153] __nla_validate_parse: 10 callbacks suppressed [ 89.519345][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 89.661302][ T6215] net1080 8-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, 26:19:3a:7c:75:10 [ 89.910620][ T6215] usb 8-1: USB disconnect, device number 7 [ 89.924325][ T6215] net1080 8-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT [ 90.618784][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 90.618881][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 90.770719][ T7168] ceph: No mds server is up or the cluster is laggy [ 90.891769][ T7175] FAULT_INJECTION: forcing a failure. [ 90.891769][ T7175] name failslab, interval 1, probability 0, space 0, times 0 [ 90.891800][ T7175] CPU: 0 UID: 60928 PID: 7175 Comm: syz.4.276 Not tainted syzkaller #0 PREEMPT(full) [ 90.891821][ T7175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.891832][ T7175] Call Trace: [ 90.891838][ T7175] [ 90.891846][ T7175] dump_stack_lvl+0x100/0x190 [ 90.891877][ T7175] should_fail_ex.cold+0x5/0xa [ 90.891903][ T7175] should_failslab+0xc2/0x120 [ 90.891933][ T7175] kmem_cache_alloc_noprof+0x92/0x6a0 [ 90.891981][ T7175] ? key_alloc+0x3c5/0x1310 [ 90.892010][ T7175] key_alloc+0x3c5/0x1310 [ 90.892039][ T7175] ? __pfx_key_alloc+0x10/0x10 [ 90.892060][ T7175] ? __pfx_key_default_cmp+0x10/0x10 [ 90.892086][ T7175] ? __pfx_keyring_search_iterator+0x10/0x10 [ 90.892114][ T7175] keyring_alloc+0x44/0xc0 [ 90.892142][ T7175] look_up_user_keyrings+0x508/0x790 [ 90.892173][ T7175] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 90.892206][ T7175] lookup_user_key+0xbb1/0x1300 [ 90.892230][ T7175] ? __pfx_lookup_user_key+0x10/0x10 [ 90.892250][ T7175] ? futex_wait+0x11e/0x370 [ 90.892274][ T7175] ? __pfx_futex_wait+0x10/0x10 [ 90.892299][ T7175] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 90.892322][ T7175] ? ksys_write+0x190/0x250 [ 90.892343][ T7175] ? ksys_write+0x190/0x250 [ 90.892368][ T7175] keyctl_get_persistent+0x197/0x940 [ 90.892390][ T7175] ? __pfx_do_futex+0x10/0x10 [ 90.892409][ T7175] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 90.892432][ T7175] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 90.892456][ T7175] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 90.892481][ T7175] ? xfd_validate_state+0x129/0x190 [ 90.892514][ T7175] __ia32_compat_sys_keyctl+0x38f/0x550 [ 90.892541][ T7175] __do_fast_syscall_32+0x13a/0x8b0 [ 90.892563][ T7175] do_fast_syscall_32+0x32/0x70 [ 90.892581][ T7175] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.892602][ T7175] RIP: 0023:0xf749efec [ 90.892642][ T7175] Code: Unable to access opcode bytes at 0xf749efc2. [ 90.892653][ T7175] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 90.892672][ T7175] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 00000000ffffffff [ 90.892684][ T7175] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000 [ 90.892694][ T7175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.892703][ T7175] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 90.892713][ T7175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.892737][ T7175] [ 90.997089][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 90.997111][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 91.003611][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 91.003647][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 91.988787][ T5850] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.140098][ T5850] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 92.142837][ T5850] usb 5-1: Dual-Role OTG device on HNP port [ 92.143188][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.166995][ T5850] gspca_main: spca501-2.14.0 probing 0000:0000 [ 92.167273][ T5850] gspca_spca501: reg write: error -32 [ 92.167280][ T5850] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 92.167314][ T5850] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 92.182702][ T5850] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.806285][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 92.806306][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.287'. [ 92.853048][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 92.853069][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.287'. [ 92.948011][ T7219] tc action pedit unable to extract header offset for header type (0x5) [ 92.948032][ T7219] tc action pedit unable to extract header offset for header type (0x5) [ 92.948042][ T7219] tc action pedit unable to extract header offset for header type (0x5) [ 92.948050][ T7219] tc action pedit unable to extract header offset for header type (0x5) [ 92.948059][ T7219] tc action pedit unable to extract header offset for header type (0x5) [ 92.948067][ T7219] tc action pedit unable to extract header offset for header type (0x5) [ 92.948076][ T7219] tc action pedit unable to extract header offset for header type (0x5) [ 92.948084][ T7219] tc action pedit unable to extract header offset for header type (0x5) [ 92.948092][ T7219] tc action pedit unable to extract header offset for header type (0x5) [ 92.948100][ T7219] tc action pedit unable to extract header offset for header type (0x5) [ 92.948117][ T7219] 0: reclassify loop, rule prio 0, protocol 800 [ 93.970867][ T7238] FAULT_INJECTION: forcing a failure. [ 93.970867][ T7238] name failslab, interval 1, probability 0, space 0, times 0 [ 93.970887][ T7238] CPU: 0 UID: 0 PID: 7238 Comm: syz.3.295 Not tainted syzkaller #0 PREEMPT(full) [ 93.970899][ T7238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.970905][ T7238] Call Trace: [ 93.970909][ T7238] [ 93.970914][ T7238] dump_stack_lvl+0x100/0x190 [ 93.970933][ T7238] should_fail_ex.cold+0x5/0xa [ 93.970949][ T7238] should_failslab+0xc2/0x120 [ 93.970968][ T7238] kmem_cache_alloc_noprof+0x92/0x6a0 [ 93.970983][ T7238] ? fsnotify_add_mark_locked+0x3ed/0x1610 [ 93.970997][ T7238] ? fsnotify_add_mark_locked+0x44b/0x1610 [ 93.971022][ T7238] fsnotify_add_mark_locked+0x44b/0x1610 [ 93.971037][ T7238] ? __pfx_inc_ucount+0x10/0x10 [ 93.971049][ T7238] ? find_held_lock+0x2b/0x80 [ 93.971067][ T7238] inotify_update_watch+0x769/0xa50 [ 93.971085][ T7238] __ia32_sys_inotify_add_watch+0x2d7/0x370 [ 93.971102][ T7238] ? __pfx___ia32_sys_inotify_add_watch+0x10/0x10 [ 93.971123][ T7238] __do_fast_syscall_32+0x13a/0x8b0 [ 93.971138][ T7238] do_fast_syscall_32+0x32/0x70 [ 93.971150][ T7238] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.971163][ T7238] RIP: 0023:0xf7f93fec [ 93.971176][ T7238] Code: Unable to access opcode bytes at 0xf7f93fc2. [ 93.971181][ T7238] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000124 [ 93.971192][ T7238] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 93.971198][ T7238] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.971205][ T7238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.971211][ T7238] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 93.971217][ T7238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.971231][ T7238] [ 94.005345][ T7239] netlink: 'syz.2.294': attribute type 4 has an invalid length. [ 94.025741][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 94.101941][ T7245] syzkaller0: entered promiscuous mode [ 94.101958][ T7245] syzkaller0: entered allmulticast mode [ 94.213114][ T7247] syzkaller0: entered promiscuous mode [ 94.213128][ T7247] syzkaller0: entered allmulticast mode [ 94.502720][ T7260] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.618058][ T7264] __nla_validate_parse: 6 callbacks suppressed [ 94.618072][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 94.618143][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'. [ 94.622387][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 94.622399][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'. [ 94.758162][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'. [ 95.391248][ T7280] input: syz1 as /devices/virtual/input/input9 [ 95.975015][ T7296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.315'. [ 96.013089][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.315'. [ 96.366083][ T7309] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.366173][ T7309] bridge0: port 2(bridge_slave_1) entered listening state [ 96.366286][ T7309] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.366330][ T7309] bridge0: port 1(bridge_slave_0) entered listening state [ 97.537642][ T7321] syz_tun: entered allmulticast mode [ 97.541416][ T7321] syz_tun: left allmulticast mode [ 97.846334][ T7329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.327'. [ 97.879507][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'. [ 97.923886][ T7334] netlink: 'syz.4.329': attribute type 1 has an invalid length. [ 97.940986][ T7334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.278728][ T41] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 98.429318][ T41] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 98.430334][ T41] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.431849][ T41] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 98.433871][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.433883][ T41] usb 8-1: Product: syz [ 98.433890][ T41] usb 8-1: Manufacturer: syz [ 98.433897][ T41] usb 8-1: SerialNumber: syz [ 98.460782][ T41] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 98.474553][ T41] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 98.484525][ T41] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 98.572978][ T7347] tipc: Enabling of bearer rejected, failed to enable media [ 98.897175][ T6215] libceph: connect (1)[c::]:6789 error -101 [ 98.897262][ T6215] libceph: mon0 (1)[c::]:6789 connect error [ 99.045589][ T7357] ceph: No mds server is up or the cluster is laggy [ 99.253416][ T7369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.338'. [ 99.420470][ T7378] team0: Port device team_slave_0 removed [ 99.514881][ T7383] capability: warning: `syz.2.344' uses deprecated v2 capabilities in a way that may be insecure [ 100.302371][ T7393] __nla_validate_parse: 4 callbacks suppressed [ 100.302387][ T7393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.348'. [ 100.310614][ T70] libceph: connect (1)[c::]:6789 error -101 [ 100.310695][ T70] libceph: mon0 (1)[c::]:6789 connect error [ 100.325067][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'. [ 100.467588][ T7396] ceph: No mds server is up or the cluster is laggy [ 100.762033][ T7422] netlink: 24 bytes leftover after parsing attributes in process `syz.2.357'. [ 100.787270][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 100.913137][ T7430] netlink: 36 bytes leftover after parsing attributes in process `syz.2.360'. [ 102.810526][ T7342] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -110 [ 102.814519][ T5877] usb 8-1: USB disconnect, device number 8 [ 102.829977][ T5877] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 102.833019][ T5877] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 102.833849][ T5877] ti_usb_3410_5052 8-1:2.0: device disconnected [ 103.128740][ T5736] Bluetooth: hci3: command 0x0406 tx timeout [ 105.898456][ T7448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.366'. [ 105.931718][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 105.960739][ T5736] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.961412][ T5736] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.962585][ T5736] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.963609][ T5736] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.964328][ T5736] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.012756][ T7147] tipc: Resetting bearer [ 106.034188][ T7147] tipc: Disabling bearer [ 106.087731][ T5742] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 106.109781][ T7465] Invalid ELF header magic: != ELF [ 106.461581][ T5816] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.540460][ T7450] rxe_eth0 speed is unknown, defaulting to 1000 [ 106.801289][ T5816] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.107901][ T5816] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.435372][ T5816] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.498195][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 107.498216][ T7484] netlink: 'syz.3.372': attribute type 11 has an invalid length. [ 107.498223][ T7484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.372'. [ 107.526121][ T7450] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.527160][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.527261][ T7450] bridge_slave_0: entered allmulticast mode [ 107.531503][ T7450] bridge_slave_0: entered promiscuous mode [ 107.545238][ T7450] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.545391][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.545540][ T7450] bridge_slave_1: entered allmulticast mode [ 107.547788][ T7450] bridge_slave_1: entered promiscuous mode [ 107.603584][ T7450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.605902][ T7450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.639049][ T5816] bridge_slave_1: left allmulticast mode [ 107.639071][ T5816] bridge_slave_1: left promiscuous mode [ 107.639319][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.641829][ T5816] bridge_slave_0: left allmulticast mode [ 107.641846][ T5816] bridge_slave_0: left promiscuous mode [ 107.643701][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.775669][ T5816] bond1 (unregistering): (slave .`): Releasing backup interface [ 107.782242][ T42] kauditd_printk_skb: 83 callbacks suppressed [ 107.782260][ T42] audit: type=1326 audit(1792411408.503:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 107.783104][ T5816] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.783537][ T42] audit: type=1326 audit(1792411408.503:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 107.783569][ T42] audit: type=1326 audit(1792411408.503:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 107.783588][ T42] audit: type=1326 audit(1792411408.503:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.373" exe="/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 107.783607][ T42] audit: type=1326 audit(1792411408.503:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 107.783625][ T42] audit: type=1326 audit(1792411408.503:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 107.784075][ T42] audit: type=1326 audit(1792411408.503:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 107.785092][ T42] audit: type=1326 audit(1792411408.503:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.373" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 107.785114][ T42] audit: type=1326 audit(1792411408.503:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.373" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71877eb code=0x7ffc0000 [ 107.785132][ T42] audit: type=1326 audit(1792411408.503:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.2.373" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71877eb code=0x7ffc0000 [ 107.786450][ T5816] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.787894][ T5816] .` (unregistering): Released all slaves [ 107.794909][ T5816] bond1 (unregistering): Released all slaves [ 107.807896][ T7450] team0: Port device team_slave_0 added [ 107.842709][ T7450] team0: Port device team_slave_1 added [ 107.875370][ T7450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.875386][ T7450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.875406][ T7450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.876849][ T7450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.876860][ T7450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.876880][ T7450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.884190][ T5816] tipc: Left network mode [ 107.932462][ T7489] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 107.953689][ T7450] hsr_slave_0: entered promiscuous mode [ 107.954459][ T7450] hsr_slave_1: entered promiscuous mode [ 107.954976][ T7450] debugfs: 'hsr0' already exists in 'hsr' [ 107.954994][ T7450] Cannot create hsr debugfs directory [ 107.965269][ T7489] bond0: entered promiscuous mode [ 107.965481][ T7489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.000331][ T7489] bond0: (slave bridge1): making interface the new active one [ 108.000347][ T7489] bridge1: entered promiscuous mode [ 108.001057][ T7489] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 108.009082][ T5742] Bluetooth: hci4: command tx timeout [ 108.052773][ T7489] ipvlan2: entered allmulticast mode [ 108.052787][ T7489] bond0: entered allmulticast mode [ 108.052796][ T7489] bridge1: entered allmulticast mode [ 108.053151][ T7489] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 108.053165][ T7489] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 108.196972][ T7499] 8021q: adding VLAN 0 to HW filter on device eth0 [ 108.202636][ T7499] 8021q: adding VLAN 0 to HW filter on device eth1 [ 108.204043][ T7499] 8021q: adding VLAN 0 to HW filter on device eth2 [ 108.205627][ T7499] 8021q: adding VLAN 0 to HW filter on device eth3 [ 108.206081][ T7499] bond0: left promiscuous mode [ 108.206092][ T7499] bridge1: left promiscuous mode [ 108.206805][ T7492] syzkaller0: entered promiscuous mode [ 108.206815][ T7492] syzkaller0: entered allmulticast mode [ 108.304075][ T13] netdevsim netdevsim1 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.304269][ T13] netdevsim netdevsim1 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.304300][ T13] netdevsim netdevsim1 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.304328][ T13] netdevsim netdevsim1 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.370836][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6 [ 108.402734][ T7450] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.406392][ T7508] tc action pedit offset must be on 32 bit boundaries [ 108.407989][ T7450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.427720][ T7450] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.442367][ T7450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.448197][ T5816] hsr_slave_0: left promiscuous mode [ 108.456337][ T5816] hsr_slave_1: left promiscuous mode [ 108.457267][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.457285][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.460685][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.460697][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.472564][ T5816] veth1_macvtap: left promiscuous mode [ 108.472600][ T5816] veth0_macvtap: left promiscuous mode [ 108.472733][ T5816] veth1_vlan: left promiscuous mode [ 108.472831][ T5816] veth0_vlan: left promiscuous mode [ 108.702203][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 108.714849][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 108.804179][ T7450] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.813611][ T7450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.814564][ T7510] rxe_eth0 speed is unknown, defaulting to 1000 [ 108.814984][ T7450] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.818419][ T7450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.882257][ T7450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.893080][ T7450] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.903611][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.903694][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.907873][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.907952][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.081615][ T5449] 8021q: adding VLAN 0 to HW filter on device eth7 [ 109.232085][ T7450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.258250][ T5449] 8021q: adding VLAN 0 to HW filter on device eth8 [ 109.367670][ T7560] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 109.410248][ T7567] FAULT_INJECTION: forcing a failure. [ 109.410248][ T7567] name failslab, interval 1, probability 0, space 0, times 0 [ 109.410293][ T7567] CPU: 2 UID: 0 PID: 7567 Comm: syz.4.386 Not tainted syzkaller #0 PREEMPT(full) [ 109.410315][ T7567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.410327][ T7567] Call Trace: [ 109.410335][ T7567] [ 109.410343][ T7567] dump_stack_lvl+0x100/0x190 [ 109.410441][ T7567] should_fail_ex.cold+0x5/0xa [ 109.410469][ T7567] should_failslab+0xc2/0x120 [ 109.410504][ T7567] __kmalloc_cache_noprof+0x91/0x6d0 [ 109.410520][ T7567] ? ktime_get+0x22c/0x320 [ 109.410538][ T7567] ? cec_queue_event_fh+0xcc/0x1060 [ 109.410566][ T7567] cec_queue_event_fh+0xcc/0x1060 [ 109.410583][ T7567] ? lockdep_init_map_type+0x5c/0x250 [ 109.410606][ T7567] cec_open+0x40e/0x690 [ 109.410623][ T7567] ? __pfx_cec_open+0x10/0x10 [ 109.410642][ T7567] ? chrdev_open+0x589/0x6a0 [ 109.410662][ T7567] ? __pfx_cec_open+0x10/0x10 [ 109.410677][ T7567] chrdev_open+0x234/0x6a0 [ 109.410692][ T7567] ? __pfx_chrdev_open+0x10/0x10 [ 109.410708][ T7567] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 109.410723][ T7567] do_dentry_open+0x6ab/0x14d0 [ 109.410737][ T7567] ? __pfx_chrdev_open+0x10/0x10 [ 109.410756][ T7567] vfs_open+0x82/0x3f0 [ 109.410783][ T7567] path_openat+0x1a23/0x2450 [ 109.410804][ T7567] ? __pfx_path_openat+0x10/0x10 [ 109.410825][ T7567] do_file_open+0x20e/0x430 [ 109.410843][ T7567] ? __pfx_do_file_open+0x10/0x10 [ 109.410869][ T7567] ? _raw_spin_unlock+0x28/0x50 [ 109.410906][ T7567] ? alloc_fd+0x471/0x7a0 [ 109.410926][ T7567] do_sys_openat2+0x10f/0x1e0 [ 109.410938][ T7567] ? __pfx_do_sys_openat2+0x10/0x10 [ 109.410954][ T7567] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 109.410968][ T7567] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 109.410985][ T7567] __ia32_compat_sys_openat+0x12d/0x210 [ 109.410998][ T7567] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 109.411010][ T7567] ? ksys_write+0x1ac/0x250 [ 109.411030][ T7567] do_int80_emulation+0x166/0x650 [ 109.411044][ T7567] asm_int80_emulation+0x1a/0x20 [ 109.411055][ T7567] RIP: 0023:0xf71f77eb [ 109.411077][ T7567] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 109.411089][ T7567] RSP: 002b:00000000f54b603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 109.411113][ T7567] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54b6100 [ 109.411120][ T7567] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.411127][ T7567] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.411133][ T7567] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 109.411140][ T7567] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.411156][ T7567] [ 109.458727][ T7567] netlink: Failed to add helper -22 [ 109.458762][ T7567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.567671][ T7450] veth0_vlan: entered promiscuous mode [ 109.575647][ T7450] veth1_vlan: entered promiscuous mode [ 109.599184][ T7450] veth0_macvtap: entered promiscuous mode [ 109.601683][ T7450] veth1_macvtap: entered promiscuous mode [ 109.609863][ T7450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.619623][ T7450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.623536][ T7516] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.623619][ T7516] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.623691][ T7516] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.623720][ T7516] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.088779][ T5742] Bluetooth: hci4: command tx timeout [ 110.195306][ T5449] 8021q: adding VLAN 0 to HW filter on device eth9 [ 111.273498][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.273514][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.344063][ T7586] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.347563][ T228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.347576][ T228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.431189][ T7586] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.445356][ T5850] libceph: connect (1)[c::]:6789 error -101 [ 111.445493][ T5850] libceph: mon0 (1)[c::]:6789 connect error [ 111.492485][ T7586] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.594512][ T7586] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.604249][ T7589] ceph: No mds server is up or the cluster is laggy [ 111.657344][ T5609] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.657387][ T5609] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.657419][ T5609] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.657448][ T5609] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.859609][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 111.860456][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 112.168889][ T5742] Bluetooth: hci4: command tx timeout [ 112.960245][ T7628] qrtr: Invalid version 0 [ 112.977288][ T7628] syzkaller1: entered promiscuous mode [ 112.977302][ T7628] syzkaller1: entered allmulticast mode [ 113.395354][ T5850] libceph: connect (1)[c::]:6789 error -101 [ 113.395496][ T5850] libceph: mon0 (1)[c::]:6789 connect error [ 113.546688][ T7641] ceph: No mds server is up or the cluster is laggy [ 113.834273][ T7658] program syz.3.407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.872562][ T42] kauditd_printk_skb: 89 callbacks suppressed [ 113.872576][ T42] audit: type=1326 audit(1792411414.593:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 113.872601][ T42] audit: type=1326 audit(1792411414.593:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 113.874339][ T42] audit: type=1326 audit(1792411414.593:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 113.874439][ T42] audit: type=1326 audit(1792411414.593:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 113.874530][ T42] audit: type=1326 audit(1792411414.593:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 113.875718][ T42] audit: type=1326 audit(1792411414.593:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 113.875884][ T42] audit: type=1326 audit(1792411414.593:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 113.875979][ T42] audit: type=1326 audit(1792411414.593:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 113.876650][ T42] audit: type=1326 audit(1792411414.593:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 113.876672][ T42] audit: type=1326 audit(1792411414.593:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.2.408" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f92fec code=0x7ffc0000 [ 113.977704][ T7663] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 113.993456][ T7663] kvm: pic: level sensitive irq not supported [ 113.994510][ T7663] kvm: pic: non byte read [ 113.995810][ T7663] kvm: pic: level sensitive irq not supported [ 113.996224][ T7663] kvm: pic: non byte read [ 114.248720][ T5742] Bluetooth: hci4: command tx timeout [ 115.284500][ T7681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.414'. [ 115.304702][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 115.365354][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 115.365400][ T7687] bridge_slave_1: left allmulticast mode [ 115.365412][ T7687] bridge_slave_1: left promiscuous mode [ 115.365538][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.368261][ T7687] bridge_slave_0: left allmulticast mode [ 115.368275][ T7687] bridge_slave_0: left promiscuous mode [ 115.368380][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.536317][ T7694] syzkaller0: entered promiscuous mode [ 115.536331][ T7694] syzkaller0: entered allmulticast mode [ 117.046269][ T7728] netlink: 24 bytes leftover after parsing attributes in process `syz.4.425'. [ 117.065506][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 117.388742][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 117.454242][ T7753] netlink: 44 bytes leftover after parsing attributes in process `syz.2.433'. [ 117.569141][ T10] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 117.569928][ T10] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 117.569942][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.569955][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 117.569975][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.571131][ T10] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 117.571144][ T10] usb 10-1: Product: syz [ 117.571152][ T10] usb 10-1: Manufacturer: syz [ 117.577593][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 117.577603][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 117.584491][ T10] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 117.584502][ T10] cdc_wdm 10-1:1.0: Unknown control protocol [ 117.648709][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 117.792655][ T70] usb 10-1: USB disconnect, device number 2 [ 117.810173][ T9] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 117.812378][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.812432][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.814083][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.814096][ T9] usb 8-1: Product: syz [ 117.814103][ T9] usb 8-1: Manufacturer: syz [ 117.814111][ T9] usb 8-1: SerialNumber: syz [ 117.865460][ T7773] FAULT_INJECTION: forcing a failure. [ 117.865460][ T7773] name failslab, interval 1, probability 0, space 0, times 0 [ 117.865499][ T7773] CPU: 2 UID: 0 PID: 7773 Comm: syz.4.439 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.865524][ T7773] Tainted: [L]=SOFTLOCKUP [ 117.865531][ T7773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.865542][ T7773] Call Trace: [ 117.865549][ T7773] [ 117.865555][ T7773] dump_stack_lvl+0x100/0x190 [ 117.865653][ T7773] should_fail_ex.cold+0x5/0xa [ 117.865700][ T7773] should_failslab+0xc2/0x120 [ 117.865748][ T7773] __kmalloc_noprof+0xfc/0x840 [ 117.865770][ T7773] ? __register_sysctl_table+0xac/0x1650 [ 117.865817][ T7773] __register_sysctl_table+0xac/0x1650 [ 117.865839][ T7773] ? lock_acquire+0x1d1/0x380 [ 117.865872][ T7773] ? __pfx___register_sysctl_table+0x10/0x10 [ 117.865891][ T7773] ? is_module_address+0x5f/0xf0 [ 117.865910][ T7773] ? is_module_address+0x5f/0xf0 [ 117.865935][ T7773] register_net_sysctl_sz+0x325/0x420 [ 117.865980][ T7773] ? __asan_memcpy+0x3c/0x60 [ 117.866003][ T7773] xfrm_sysctl_init+0x1f5/0x2d0 [ 117.866030][ T7773] xfrm_net_init+0x856/0xcf0 [ 117.866063][ T7773] ? __pfx_xfrm_net_init+0x10/0x10 [ 117.866084][ T7773] ops_init+0x1e2/0x5f0 [ 117.866120][ T7773] setup_net+0x118/0x3a0 [ 117.866146][ T7773] ? __pfx_setup_net+0x10/0x10 [ 117.866173][ T7773] copy_net_ns+0x345/0x7a0 [ 117.866199][ T7773] create_new_namespaces+0x3ea/0xac0 [ 117.866232][ T7773] unshare_nsproxy_namespaces+0xf2/0x220 [ 117.866261][ T7773] ksys_unshare+0x4a2/0xb30 [ 117.866276][ T7773] ? __pfx_ksys_unshare+0x10/0x10 [ 117.866305][ T7773] __ia32_sys_unshare+0x30/0x40 [ 117.866323][ T7773] __do_fast_syscall_32+0x13a/0x8b0 [ 117.866348][ T7773] do_fast_syscall_32+0x32/0x70 [ 117.866368][ T7773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.866389][ T7773] RIP: 0023:0xf749efec [ 117.866415][ T7773] Code: Unable to access opcode bytes at 0xf749efc2. [ 117.866432][ T7773] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 117.866451][ T7773] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 117.866463][ T7773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.866475][ T7773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.866486][ T7773] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 117.866497][ T7773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.866521][ T7773] [ 118.239031][ T6215] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 118.253677][ T5877] usb 8-1: USB disconnect, device number 9 [ 118.267318][ T7781] netlink: 72 bytes leftover after parsing attributes in process `syz.4.443'. [ 118.390207][ T6215] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 118.391179][ T6215] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 118.391202][ T6215] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.391218][ T6215] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 118.391252][ T6215] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.392611][ T6215] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 118.392630][ T6215] usb 10-1: Product: syz [ 118.392643][ T6215] usb 10-1: Manufacturer: syz [ 118.400043][ T6215] cdc_wdm 10-1:1.0: skipping garbage [ 118.400058][ T6215] cdc_wdm 10-1:1.0: skipping garbage [ 118.406182][ T6215] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 118.406197][ T6215] cdc_wdm 10-1:1.0: Unknown control protocol [ 119.323419][ C3] cdc_wdm 10-1:1.0: unknown notification 192 received: index 18576 len 28119 [ 119.323603][ C3] cdc_wdm 10-1:1.0: unknown notification 201 received: index 46169 len 50156 [ 119.323778][ C3] cdc_wdm 10-1:1.0: unknown notification 125 received: index 1837 len 32788 [ 119.323949][ C3] cdc_wdm 10-1:1.0: unknown notification 54 received: index 48192 len 31817 [ 119.324126][ C3] cdc_wdm 10-1:1.0: unknown notification 250 received: index 48248 len 61534 [ 119.324295][ C3] cdc_wdm 10-1:1.0: unknown notification 146 received: index 45473 len 17130 [ 119.324464][ C3] cdc_wdm 10-1:1.0: unknown notification 78 received: index 59002 len 27588 [ 119.324671][ C3] cdc_wdm 10-1:1.0: unknown notification 223 received: index 19393 len 60670 [ 119.325090][ C3] cdc_wdm 10-1:1.0: unknown notification 198 received: index 42648 len 2275 [ 119.325495][ C3] cdc_wdm 10-1:1.0: unknown notification 228 received: index 6245 len 35911 [ 119.325873][ C3] cdc_wdm 10-1:1.0: unknown notification 228 received: index 45382 len 41738 [ 119.326346][ C3] cdc_wdm 10-1:1.0: unknown notification 178 received: index 19896 len 39590 [ 119.326541][ C3] cdc_wdm 10-1:1.0: unknown notification 91 received: index 14758 len 58903 [ 119.326710][ C3] cdc_wdm 10-1:1.0: unknown notification 92 received: index 43570 len 10536 [ 119.326879][ C3] cdc_wdm 10-1:1.0: unknown notification 194 received: index 24199 len 256 [ 119.327048][ C3] cdc_wdm 10-1:1.0: unknown notification 117 received: index 21525 len 7080 [ 119.327216][ C3] cdc_wdm 10-1:1.0: unknown notification 185 received: index 26554 len 29136 [ 119.327385][ C3] cdc_wdm 10-1:1.0: unknown notification 36 received: index 3838 len 62182 [ 119.327558][ C3] cdc_wdm 10-1:1.0: unknown notification 176 received: index 60588 len 64939 [ 119.327727][ C3] cdc_wdm 10-1:1.0: unknown notification 107 received: index 2797 len 42965 [ 119.614675][ T5824] usb 10-1: USB disconnect, device number 3 [ 119.970453][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 120.151953][ T7766] syz.2.436 (7766) used greatest stack depth: 17992 bytes left [ 120.332093][ T7823] jffs2: notice: (7823) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 120.419471][ T7831] tcf_pedit_act: 7 callbacks suppressed [ 120.419484][ T7831] tc action pedit unable to extract header offset for header type (0x4) [ 120.419491][ T7831] tc action pedit unable to extract header offset for header type (0x4) [ 120.419497][ T7831] tc action pedit unable to extract header offset for header type (0x4) [ 120.419503][ T7831] tc action pedit unable to extract header offset for header type (0x4) [ 120.419508][ T7831] tc action pedit unable to extract header offset for header type (0x4) [ 120.419514][ T7831] tc action pedit unable to extract header offset for header type (0x4) [ 120.419519][ T7831] tc action pedit unable to extract header offset for header type (0x4) [ 120.419525][ T7831] tc action pedit unable to extract header offset for header type (0x4) [ 120.419530][ T7831] tc action pedit unable to extract header offset for header type (0x4) [ 120.419536][ T7831] tc action pedit unable to extract header offset for header type (0x4) [ 120.419546][ T7831] 0: reclassify loop, rule prio 0, protocol 800 [ 120.520381][ T7839] bond1: (slave .`): Releasing backup interface [ 120.527436][ T7839] bridge_slave_0: left allmulticast mode [ 120.527452][ T7839] bridge_slave_0: left promiscuous mode [ 120.527613][ T7839] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.535558][ T7839] bridge_slave_1: left allmulticast mode [ 120.535578][ T7839] bridge_slave_1: left promiscuous mode [ 120.536462][ T7839] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.547746][ T7839] .`: (slave bond_slave_0): Releasing backup interface [ 120.552787][ T7839] .`: (slave bond_slave_1): Releasing backup interface [ 120.561667][ T7839] team0: Port device team_slave_0 removed [ 120.567421][ T7839] team0: Port device team_slave_1 removed [ 120.568061][ T7839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.568078][ T7839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.570568][ T7839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.570585][ T7839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.573591][ T7839] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 120.578105][ T7840] team0: Mode changed to "broadcast" [ 120.613271][ T7839] vlan0: entered promiscuous mode [ 120.619898][ T7839] team0: Port device vlan0 added [ 120.628235][ T7839] tipc: Started in network mode [ 120.628251][ T7839] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 120.628515][ T7839] tipc: Enabled bearer , priority 0 [ 120.771123][ T7857] si4713 0-0063: IRQ not configured. Using timeouts. [ 120.771258][ T7857] si4713 0-0063: Error while sending command 0x01 [ 120.771267][ T7857] si4713 0-0063: Failed to probe device information. [ 120.772197][ T7857] si4713 0-0063: probe with driver si4713 failed with error -95 [ 120.773270][ T7857] i2c i2c-0: new_device: Instantiated device si4713 at 0x63 [ 120.775847][ T7857] syz.3.462 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 120.825046][ T7860] fuse: fd is not a fuse device [ 120.867966][ T7862] tipc: Enabled bearer , priority 0 [ 120.869152][ T7862] syzkaller0: entered promiscuous mode [ 120.869168][ T7862] syzkaller0: entered allmulticast mode [ 120.873985][ T7862] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 120.892137][ T7862] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 120.894531][ T7862] tipc: Resetting bearer [ 120.897124][ T7861] tipc: Resetting bearer [ 120.912572][ T7861] tipc: Disabling bearer [ 121.114030][ T7874] bridge0: entered promiscuous mode [ 121.114046][ T7874] bridge0: entered allmulticast mode [ 121.174510][ T7877] syzkaller0: entered promiscuous mode [ 121.174531][ T7877] syzkaller0: entered allmulticast mode [ 121.336081][ T7881] evm: overlay not supported [ 121.591045][ T7890] jffs2: notice: (7890) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.594937][ T7889] syzkaller0: entered promiscuous mode [ 121.594951][ T7889] syzkaller0: entered allmulticast mode [ 121.658681][ T5850] tipc: Node number set to 11578026 [ 122.018226][ T7908] tmpfs: Using encoding : utf8-12.1.0 [ 122.438344][ T7942] FAULT_INJECTION: forcing a failure. [ 122.438344][ T7942] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 122.438383][ T7942] CPU: 3 UID: 0 PID: 7942 Comm: syz.4.486 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.438409][ T7942] Tainted: [L]=SOFTLOCKUP [ 122.438417][ T7942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.438429][ T7942] Call Trace: [ 122.438435][ T7942] [ 122.438443][ T7942] dump_stack_lvl+0x100/0x190 [ 122.438471][ T7942] should_fail_ex.cold+0x5/0xa [ 122.438496][ T7942] should_fail_alloc_page+0xeb/0x140 [ 122.438527][ T7942] prepare_alloc_pages+0x1f0/0x5b0 [ 122.438559][ T7942] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 122.438611][ T7942] ? rcu_is_watching+0x13/0xc0 [ 122.438634][ T7942] ? iommu_map_nosync+0x296/0x860 [ 122.438662][ T7942] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 122.438691][ T7942] ? __pfx_iommu_map_nosync+0x10/0x10 [ 122.438711][ T7942] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 122.438728][ T7942] ? lockdep_hardirqs_on+0x7d/0x110 [ 122.438739][ T7942] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 122.438756][ T7942] ? alloc_iova_fast+0x5ab/0xa70 [ 122.438774][ T7942] ? intel_iommu_iotlb_sync_map+0x57/0xa0 [ 122.438792][ T7942] ? iommu_map+0xbb/0xf0 [ 122.438808][ T7942] ? __iommu_dma_map+0x1ac/0x300 [ 122.438819][ T7942] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.438844][ T7942] ? policy_nodemask+0xed/0x4f0 [ 122.438863][ T7942] alloc_pages_mpol+0x201/0x550 [ 122.438882][ T7942] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 122.438898][ T7942] ? dma_map_phys+0x151/0x460 [ 122.438925][ T7942] alloc_pages_noprof+0x1a/0x160 [ 122.438946][ T7942] e1000_alloc_jumbo_rx_buffers+0x531/0x700 [ 122.438982][ T7942] e1000_configure+0xa34/0xda0 [ 122.438998][ T7942] ? __pfx_e1000_alloc_jumbo_rx_buffers+0x10/0x10 [ 122.439033][ T7942] e1000_up+0x1a/0x190 [ 122.439052][ T7942] e1000_change_mtu+0x24b/0x510 [ 122.439074][ T7942] ? __pfx_e1000_change_mtu+0x10/0x10 [ 122.439094][ T7942] netif_set_mtu_ext+0x438/0x7b0 [ 122.439135][ T7942] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 122.439160][ T7942] ? __pfx_validate_linkmsg+0x10/0x10 [ 122.439185][ T7942] ? netdev_work_dequeue+0x10a/0x310 [ 122.439211][ T7942] ? __local_bh_enable_ip+0xa5/0x120 [ 122.439242][ T7942] ? netdev_work_dequeue+0x10a/0x310 [ 122.439271][ T7942] do_setlink.isra.0+0x7f9/0x3e60 [ 122.439297][ T7942] ? stack_trace_save+0x8e/0xc0 [ 122.439324][ T7942] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 122.439351][ T7942] ? __lock_acquire+0x5c0/0x1f40 [ 122.439382][ T7942] ? kasan_save_track+0x14/0x30 [ 122.439405][ T7942] ? __kasan_kmalloc+0xaa/0xb0 [ 122.439429][ T7942] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 122.439450][ T7942] ? rtnl_newlink+0x139/0x2620 [ 122.439473][ T7942] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 122.439495][ T7942] ? netlink_rcv_skb+0x159/0x420 [ 122.439513][ T7942] ? netlink_unicast+0x65f/0x950 [ 122.439530][ T7942] ? netlink_sendmsg+0x8b0/0xda0 [ 122.439549][ T7942] ? ____sys_sendmsg+0xa4d/0xbe0 [ 122.439572][ T7942] ? ___sys_sendmsg+0x190/0x1e0 [ 122.439600][ T7942] ? lock_acquire+0x1d1/0x380 [ 122.439626][ T7942] ? rtnl_newlink+0xac3/0x2620 [ 122.439653][ T7942] ? rcu_is_watching+0x13/0xc0 [ 122.439672][ T7942] ? trace_contention_end+0x126/0x160 [ 122.439701][ T7942] ? __mutex_lock+0x26c/0x1bd0 [ 122.439720][ T7942] ? rtnl_newlink+0xac3/0x2620 [ 122.439741][ T7942] ? __nla_validate_parse+0x1e7/0x28b0 [ 122.439772][ T7942] ? __pfx___mutex_lock+0x10/0x10 [ 122.439790][ T7942] ? rcu_is_watching+0x13/0xc0 [ 122.439811][ T7942] ? apparmor_capable+0x1d7/0x4d0 [ 122.439846][ T7942] rtnl_newlink+0x1dc4/0x2620 [ 122.439879][ T7942] ? __pfx_rtnl_newlink+0x10/0x10 [ 122.439901][ T7942] ? is_bpf_text_address+0x94/0x1a0 [ 122.439929][ T7942] ? kernel_text_address+0x8d/0x100 [ 122.439950][ T7942] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 122.439974][ T7942] ? __kernel_text_address+0xd/0x30 [ 122.439997][ T7942] ? unwind_get_return_address+0x59/0xa0 [ 122.440020][ T7942] ? arch_stack_walk+0xa6/0xf0 [ 122.440051][ T7942] ? __lock_acquire+0x5c0/0x1f40 [ 122.440078][ T7942] ? stack_depot_save_flags+0x27/0x9f0 [ 122.440098][ T7942] ? stack_trace_save+0x8e/0xc0 [ 122.440122][ T7942] ? __pfx_stack_trace_save+0x10/0x10 [ 122.440150][ T7942] ? lock_acquire+0x1d1/0x380 [ 122.440174][ T7942] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 122.440198][ T7942] ? find_held_lock+0x2b/0x80 [ 122.440218][ T7942] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 122.440240][ T7942] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 122.440265][ T7942] ? __pfx_rtnl_newlink+0x10/0x10 [ 122.440289][ T7942] rtnetlink_rcv_msg+0x95e/0xe90 [ 122.440315][ T7942] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.440344][ T7942] ? __lock_acquire+0x5c0/0x1f40 [ 122.440378][ T7942] netlink_rcv_skb+0x159/0x420 [ 122.440400][ T7942] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.440426][ T7942] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.440456][ T7942] ? netlink_deliver_tap+0x1ae/0xcc0 [ 122.440480][ T7942] netlink_unicast+0x65f/0x950 [ 122.440504][ T7942] ? __pfx_netlink_unicast+0x10/0x10 [ 122.440530][ T7942] netlink_sendmsg+0x8b0/0xda0 [ 122.440554][ T7942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.440576][ T7942] ? apparmor_socket_sendmsg+0x165/0x280 [ 122.440600][ T7942] ____sys_sendmsg+0xa4d/0xbe0 [ 122.440624][ T7942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.440646][ T7942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.440684][ T7942] ___sys_sendmsg+0x190/0x1e0 [ 122.440713][ T7942] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.440740][ T7942] ? futex_wait+0x11e/0x370 [ 122.440773][ T7942] ? find_held_lock+0x2b/0x80 [ 122.440825][ T7942] __sys_sendmsg+0x160/0x210 [ 122.440850][ T7942] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.440885][ T7942] __do_fast_syscall_32+0x13a/0x8b0 [ 122.440910][ T7942] do_fast_syscall_32+0x32/0x70 [ 122.440930][ T7942] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.440952][ T7942] RIP: 0023:0xf749efec [ 122.440972][ T7942] Code: Unable to access opcode bytes at 0xf749efc2. [ 122.440980][ T7942] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 122.440998][ T7942] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000480 [ 122.441010][ T7942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.441021][ T7942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.441032][ T7942] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 122.441043][ T7942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.441067][ T7942] [ 122.464956][ T7942] e1000e 0000:00:02.0: Interrupt Throttle Rate on [ 122.468959][ T6215] e1000 0000:00:06.0 eth0: Reset adapter [ 122.591898][ T7942] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 122.709516][ T5877] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 122.721398][ T6215] e1000 0000:00:06.0 eth0: Reset adapter [ 122.879174][ T5877] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.879954][ T5877] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 122.879967][ T5877] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.879980][ T5877] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 122.880009][ T5877] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.881551][ T5877] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 122.881569][ T5877] usb 8-1: Product: syz [ 122.881580][ T5877] usb 8-1: Manufacturer: syz [ 122.893193][ T5877] cdc_wdm 8-1:1.0: skipping garbage [ 122.893203][ T5877] cdc_wdm 8-1:1.0: skipping garbage [ 122.896982][ T5877] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 122.896997][ T5877] cdc_wdm 8-1:1.0: Unknown control protocol [ 123.074083][ T29] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 123.206242][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 123.206310][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 123.206386][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 123.206398][ T5815] usb 8-1: USB disconnect, device number 10 [ 124.889606][ T6215] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 125.654277][ T7953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.330532][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.330584][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.236882][ T8032] FAULT_INJECTION: forcing a failure. [ 133.236882][ T8032] name failslab, interval 1, probability 0, space 0, times 0 [ 133.236907][ T8032] CPU: 2 UID: 0 PID: 8032 Comm: syz.4.495 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.236924][ T8032] Tainted: [L]=SOFTLOCKUP [ 133.236928][ T8032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.236935][ T8032] Call Trace: [ 133.236940][ T8032] [ 133.236945][ T8032] dump_stack_lvl+0x100/0x190 [ 133.236965][ T8032] should_fail_ex.cold+0x5/0xa [ 133.236980][ T8032] should_failslab+0xc2/0x120 [ 133.237000][ T8032] __kmalloc_node_noprof+0xff/0x880 [ 133.237017][ T8032] ? __pfx___up_read+0x10/0x10 [ 133.237029][ T8032] ? crypto_create_tfm_node+0x8d/0x3b0 [ 133.237049][ T8032] crypto_create_tfm_node+0x8d/0x3b0 [ 133.237064][ T8032] ? __pfx_rsassa_pkcs1_init_tfm+0x10/0x10 [ 133.237079][ T8032] crypto_spawn_tfm2+0x62/0xc0 [ 133.237092][ T8032] rsassa_pkcs1_init_tfm+0x39/0xb0 [ 133.237106][ T8032] crypto_sig_init_tfm+0xba/0xf0 [ 133.237123][ T8032] crypto_create_tfm_node+0x171/0x3b0 [ 133.237139][ T8032] crypto_alloc_tfm_node+0x102/0x260 [ 133.237157][ T8032] public_key_verify_signature+0x21b/0x910 [ 133.237176][ T8032] ? __pfx_public_key_verify_signature+0x10/0x10 [ 133.237201][ T8032] ? asymmetric_key_generate_id+0x7e/0x180 [ 133.237220][ T8032] x509_check_for_self_signed+0x325/0x510 [ 133.237258][ T8032] x509_cert_parse+0x60c/0x910 [ 133.237278][ T8032] x509_key_preparse+0x65/0x9c0 [ 133.237292][ T8032] asymmetric_key_preparse+0xce/0x1d0 [ 133.237307][ T8032] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 133.237324][ T8032] __key_create_or_update+0x413/0xe30 [ 133.237344][ T8032] ? __pfx___key_create_or_update+0x10/0x10 [ 133.237361][ T8032] ? lookup_user_key+0x3f3/0x1300 [ 133.237382][ T8032] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 133.237400][ T8032] key_create_or_update+0x42/0x60 [ 133.237417][ T8032] __do_sys_add_key+0x2e8/0x460 [ 133.237441][ T8032] ? __pfx___do_sys_add_key+0x10/0x10 [ 133.237464][ T8032] __do_fast_syscall_32+0x13a/0x8b0 [ 133.237480][ T8032] do_fast_syscall_32+0x32/0x70 [ 133.237494][ T8032] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.237509][ T8032] RIP: 0023:0xf749efec [ 133.237523][ T8032] Code: Unable to access opcode bytes at 0xf749efc2. [ 133.237529][ T8032] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 133.237541][ T8032] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 133.237549][ T8032] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 133.237556][ T8032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.237562][ T8032] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 133.237569][ T8032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.237583][ T8032] [ 134.687986][ T8057] netlink: 64 bytes leftover after parsing attributes in process `syz.4.500'. [ 135.928806][ T29] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 135.942260][ T70] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 135.974190][ T8079] bridge0: port 3(syz_tun) entered blocking state [ 135.974336][ T8079] bridge0: port 3(syz_tun) entered disabled state [ 135.974614][ T8079] syz_tun: entered allmulticast mode [ 135.978343][ T8079] syz_tun: entered promiscuous mode [ 135.979828][ T8079] bridge0: port 3(syz_tun) entered blocking state [ 135.979928][ T8079] bridge0: port 3(syz_tun) entered forwarding state [ 135.988176][ T8079] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 136.098726][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 136.100054][ T70] usb 9-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 136.100070][ T29] usb 8-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 136.100888][ T70] usb 9-1: config 8 has an invalid interface number: 16 but max is 0 [ 136.100901][ T70] usb 9-1: config 8 has no interface number 0 [ 136.100918][ T70] usb 9-1: config 8 interface 16 altsetting 32 has an invalid descriptor for endpoint zero, skipping [ 136.100929][ T70] usb 9-1: config 8 interface 16 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.100942][ T70] usb 9-1: config 8 interface 16 has no altsetting 0 [ 136.100957][ T70] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.101783][ T29] usb 8-1: config 0 has no interfaces? [ 136.104419][ T29] usb 8-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 136.104432][ T29] usb 8-1: Product: syz [ 136.104439][ T29] usb 8-1: Manufacturer: syz [ 136.104446][ T29] usb 8-1: SerialNumber: syz [ 136.107910][ T29] usb 8-1: config 0 descriptor?? [ 136.114616][ T70] usbhid 9-1:8.16: couldn't find an input interrupt endpoint [ 136.337596][ T42] kauditd_printk_skb: 292 callbacks suppressed [ 136.337615][ T42] audit: type=1326 audit(1792411437.053:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.4.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 136.337800][ T42] audit: type=1326 audit(1792411437.053:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.4.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 136.338201][ T42] audit: type=1326 audit(1792411437.053:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.4.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 136.338384][ T42] audit: type=1326 audit(1792411437.053:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.4.502" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 136.338762][ T42] audit: type=1326 audit(1792411437.053:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.4.502" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf749efec code=0x7ffc0000 [ 136.350102][ T5877] usb 8-1: USB disconnect, device number 11 [ 136.428048][ T8065] kvm_intel: kvm [8064]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0x1d9) = 0xffffeef0000f0106 [ 136.508858][ T8065] kvm [8064]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0x11e) = 0xffff67f0000f0106 [ 136.907074][ T8093] qnx6: unable to read the first superblock [ 136.908300][ T8095] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 136.922283][ T8093] ipvlan1: entered allmulticast mode [ 136.922296][ T8093] veth0_vlan: entered allmulticast mode [ 136.930693][ T8093] Bluetooth: MGMT ver 1.23 [ 137.175625][ T42] audit: type=1326 audit(1792411437.893:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.3.512" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 137.175745][ T42] audit: type=1326 audit(1792411437.893:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.3.512" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 137.176607][ T42] audit: type=1326 audit(1792411437.893:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.3.512" exe="/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 137.251320][ T42] audit: type=1326 audit(1792411437.973:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.3.512" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 137.251387][ T42] audit: type=1326 audit(1792411437.973:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.3.512" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 137.488893][ T7505] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 137.668728][ T7505] usb 8-1: Using ep0 maxpacket: 8 [ 137.669779][ T7505] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.670345][ T7505] usb 8-1: config 0 has no interfaces? [ 137.670362][ T7505] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.675744][ T7505] usb 8-1: config 0 descriptor?? [ 137.811932][ T29] usb 9-1: USB disconnect, device number 6 [ 137.888113][ T7505] usb 8-1: USB disconnect, device number 12 [ 137.936147][ T8102] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 138.514448][ T7505] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x89000) [ 139.180127][ T8162] block device autoloading is deprecated and will be removed. [ 139.512988][ T8167] mmap: syz.4.522 (8167) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.881748][ T6215] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 156.108900][ T8220] syzkaller0: entered promiscuous mode [ 156.108915][ T8220] syzkaller0: entered allmulticast mode [ 156.112100][ T8219] random: crng reseeded on system resumption [ 156.126499][ T8220] tipc: Enabled bearer , priority 0 [ 156.128437][ T8217] tipc: Resetting bearer [ 156.141756][ T8217] tipc: Disabling bearer [ 157.011240][ T8244] netlink: 44 bytes leftover after parsing attributes in process `syz.5.536'. [ 157.012197][ T8244] bridge0: port 3(syz_tun) entered disabled state [ 157.012319][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.012489][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.056379][ T8246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.537'. [ 157.163825][ T8250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 157.188761][ T5609] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.188790][ T5609] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.188808][ T5609] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.188830][ T5609] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.488770][ T5736] Bluetooth: hci1: command 0x2016 tx timeout [ 158.570393][ T8276] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 158.705088][ T8287] dummy0 speed is unknown, defaulting to 1000 [ 158.705466][ T8287] dummy0 speed is unknown, defaulting to 1000 [ 158.726665][ T8287] dummy0 speed is unknown, defaulting to 1000 [ 158.732119][ T8287] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 158.732232][ T8287] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 158.732292][ T8287] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 158.745390][ T8287] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 158.773048][ T8287] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 158.821713][ T8287] dummy0 speed is unknown, defaulting to 1000 [ 158.826310][ T8287] dummy0 speed is unknown, defaulting to 1000 [ 158.827042][ T8287] dummy0 speed is unknown, defaulting to 1000 [ 158.831956][ T8287] dummy0 speed is unknown, defaulting to 1000 [ 158.832677][ T8287] dummy0 speed is unknown, defaulting to 1000 [ 158.836562][ T8291] smc: removing ib device rxe0 [ 158.843491][ T8289] syz.5.543: page allocation failure: order:1, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 158.843594][ T8289] CPU: 1 UID: 0 PID: 8289 Comm: syz.5.543 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.843625][ T8289] Tainted: [L]=SOFTLOCKUP [ 158.843630][ T8289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.843637][ T8289] Call Trace: [ 158.843642][ T8289] [ 158.843649][ T8289] dump_stack_lvl+0x100/0x190 [ 158.843670][ T8289] warn_alloc.cold+0x9e/0xb2 [ 158.843683][ T8289] ? __pfx_warn_alloc+0x10/0x10 [ 158.843701][ T8289] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 158.843715][ T8289] ? __pfx_get_page_from_freelist+0x10/0x10 [ 158.843734][ T8289] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 158.843755][ T8289] ? do_raw_spin_lock+0x128/0x260 [ 158.843770][ T8289] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 158.843786][ T8289] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 158.843804][ T8289] ? lockdep_hardirqs_on+0x7d/0x110 [ 158.843814][ T8289] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 158.843831][ T8289] ? stack_depot_save_flags+0x49a/0x9f0 [ 158.843851][ T8289] ? comedi_isadma_alloc+0xc6/0x620 [ 158.843865][ T8289] ? pcl812_attach+0x18f5/0x2300 [ 158.843881][ T8289] ? comedi_device_attach+0x40e/0x6b0 [ 158.843898][ T8289] ? do_devconfig_ioctl+0x1b3/0x6d0 [ 158.843910][ T8289] ? comedi_unlocked_ioctl+0x860/0x3310 [ 158.843932][ T8289] alloc_pages_node_noprof+0x93/0x200 [ 158.843947][ T8289] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 158.843965][ T8289] __dma_direct_alloc_pages.isra.0+0x35e/0x540 [ 158.843984][ T8289] dma_direct_alloc+0x104/0x8a0 [ 158.844000][ T8289] dma_alloc_attrs+0x1b9/0x3e0 [ 158.844014][ T8289] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 158.844027][ T8289] ? __kmalloc_noprof+0x350/0x840 [ 158.844042][ T8289] ? dma_direct_supported+0xca/0x220 [ 158.844060][ T8289] comedi_isadma_alloc+0x331/0x620 [ 158.844075][ T8289] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 158.844090][ T8289] ? request_threaded_irq+0x27b/0x3e0 [ 158.844108][ T8289] pcl812_attach+0x18f5/0x2300 [ 158.844129][ T8289] comedi_device_attach+0x40e/0x6b0 [ 158.844155][ T8289] do_devconfig_ioctl+0x1b3/0x6d0 [ 158.844167][ T8289] ? comedi_unlocked_ioctl+0x180/0x3310 [ 158.844183][ T8289] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 158.844203][ T8289] ? tomoyo_path_number_perm+0x46d/0x580 [ 158.844218][ T8289] ? kasan_save_stack+0x3f/0x50 [ 158.844235][ T8289] ? kasan_save_stack+0x30/0x50 [ 158.844250][ T8289] ? kasan_save_track+0x14/0x30 [ 158.844265][ T8289] ? kasan_save_free_info+0x3b/0x70 [ 158.844280][ T8289] comedi_unlocked_ioctl+0x860/0x3310 [ 158.844299][ T8289] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 158.844325][ T8289] ? kasan_quarantine_put+0x104/0x240 [ 158.844354][ T8289] ? lockdep_hardirqs_on+0x7d/0x110 [ 158.844370][ T8289] ? find_held_lock+0x2b/0x80 [ 158.844389][ T8289] ? tomoyo_path_number_perm+0x28f/0x580 [ 158.844408][ T8289] ? tomoyo_path_number_perm+0x28f/0x580 [ 158.844431][ T8289] ? tomoyo_path_number_perm+0x188/0x580 [ 158.844453][ T8289] comedi_compat_ioctl+0x438/0xe20 [ 158.844476][ T8289] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 158.844495][ T8289] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 158.844523][ T8289] ? do_vfs_ioctl+0x226/0x13e0 [ 158.844542][ T8289] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 158.844569][ T8289] ? __fget_files+0x34/0x3d0 [ 158.844593][ T8289] ? find_held_lock+0x2b/0x80 [ 158.844610][ T8289] ? __fget_files+0x215/0x3d0 [ 158.844628][ T8289] ? hook_file_ioctl_common+0x140/0x440 [ 158.844656][ T8289] ? __fget_files+0x21f/0x3d0 [ 158.844684][ T8289] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 158.844707][ T8289] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 158.844732][ T8289] __do_fast_syscall_32+0x13a/0x8b0 [ 158.844755][ T8289] do_fast_syscall_32+0x32/0x70 [ 158.844773][ T8289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.844795][ T8289] RIP: 0023:0xf73fefec [ 158.844815][ T8289] Code: Unable to access opcode bytes at 0xf73fefc2. [ 158.844824][ T8289] RSP: 002b:00000000f53d450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 158.844837][ T8289] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000040946400 [ 158.844844][ T8289] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.844851][ T8289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.844857][ T8289] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 158.844863][ T8289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.844878][ T8289] [ 158.845065][ T8289] Mem-Info: [ 158.845072][ T8289] active_anon:6691 inactive_anon:19639 isolated_anon:0 [ 158.845072][ T8289] active_file:9353 inactive_file:7066 isolated_file:0 [ 158.845072][ T8289] unevictable:1000 dirty:470 writeback:1 [ 158.845072][ T8289] slab_reclaimable:6379 slab_unreclaimable:59581 [ 158.845072][ T8289] mapped:36138 shmem:20463 pagetables:1508 [ 158.845072][ T8289] sec_pagetables:311 bounce:0 [ 158.845072][ T8289] kernel_misc_reclaimable:0 [ 158.845072][ T8289] free:25985 free_pcp:0 free_cma:0 [ 158.845199][ T8289] Node 0 active_anon:0kB inactive_anon:188kB active_file:104kB inactive_file:36kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8608kB pagetables:1388kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 158.845234][ T8289] Node 0 DMA free:2708kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 158.845263][ T8289] lowmem_reserve[]: 0 259 259 259 259 [ 158.845282][ T8289] Node 0 DMA: 151*4kB (UE) 46*8kB (UE) 14*16kB (UE) 14*32kB (UE) 7*64kB (UE) 1*128kB (U) 0*256kB 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2732kB [ 158.845414][ T8289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.845423][ T8289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 158.845432][ T8289] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.845440][ T8289] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 158.845448][ T8289] 37261 total pagecache pages [ 158.845452][ T8289] 381 pages in swap cache [ 158.845456][ T8289] Free swap = 104724kB [ 158.845460][ T8289] Total swap = 124996kB [ 158.845558][ T8289] 524155 pages RAM [ 158.845565][ T8289] 0 pages HighMem/MovableOnly [ 158.845614][ T8289] 216927 pages reserved [ 158.845732][ T8289] 0 pages cma reserved [ 158.886064][ T8291] smbdirect: ib_dev[rxe0] removed [ 159.621617][ T8301] usb 5-1: USB disconnect, device number 3 [ 160.444469][ T5095] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 160.578709][ T5095] Bluetooth: hci1: command 0x2016 tx timeout [ 162.728820][ T5095] Bluetooth: hci1: command 0x2016 tx timeout [ 162.829933][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.567'. [ 162.831934][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 162.882170][ T8362] binder: 8354:8362 ioctl c018620c 80000200 returned -1 [ 164.143275][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 164.568878][ T5095] Bluetooth: hci3: command 0x0406 tx timeout [ 164.819171][ T5736] Bluetooth: hci1: command 0x2016 tx timeout [ 165.061755][ T8393] lo: entered allmulticast mode [ 165.080858][ T8393] dvmrp6: entered allmulticast mode [ 165.088535][ T8392] lo: left allmulticast mode [ 165.122312][ T8396] netlink: 'syz.5.577': attribute type 4 has an invalid length. [ 165.626278][ T8414] tipc: Cannot configure node identity twice [ 166.746678][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 167.227035][ T8461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.593'. [ 167.227774][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 167.692848][ T8472] netlink: 40 bytes leftover after parsing attributes in process `syz.3.597'. [ 167.786073][ T8478] ipvlan1: entered allmulticast mode [ 167.786094][ T8478] veth0_vlan: entered allmulticast mode [ 167.916883][ T8485] binder: 8481:8485 ioctl c018620c 80000200 returned -1 [ 168.375588][ T8497] netlink: 40 bytes leftover after parsing attributes in process `syz.4.606'. [ 168.899736][ T1128] ata1.00: exception Emask 0x0 SAct 0x4000 SErr 0x0 action 0x6 frozen [ 168.899768][ T1128] ata1.00: failed command: READ FPDMA QUEUED [ 168.899779][ T1128] ata1.00: cmd 60/48:70:3e:2f:08/04:00:00:00:00/40 tag 14 ncq dma 561152 in [ 168.899779][ T1128] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [ 168.899824][ T1128] ata1.00: status: { DRDY } [ 168.899875][ T1128] ata1: hard resetting link [ 169.221638][ T1128] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 169.224539][ T1128] ata1.00: configured for UDMA/100 [ 169.224878][ T1128] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=30s [ 169.224904][ T1128] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 169.224923][ T1128] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 169.224944][ T1128] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 08 2f 3e 00 04 48 00 [ 169.225015][ T1128] I/O error, dev sda, sector 536382 op 0x0:(READ) flags 0x80700 phys_seg 40 prio class 2 [ 169.228839][ T1128] ata1: EH complete [ 169.718139][ T5742] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 169.838970][ T29] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 170.018711][ T29] usb 10-1: Using ep0 maxpacket: 32 [ 170.019211][ T29] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 170.020025][ T29] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.020038][ T29] usb 10-1: config 0 has no interfaces? [ 170.021633][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.021645][ T29] usb 10-1: Product: syz [ 170.021652][ T29] usb 10-1: Manufacturer: syz [ 170.021659][ T29] usb 10-1: SerialNumber: syz [ 170.023567][ T29] usb 10-1: config 0 descriptor?? [ 170.254680][ T8514] e1000e 0000:00:02.0 eth1: removed PHC [ 170.378128][ T8514] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 170.798939][ T5824] usb 10-1: USB disconnect, device number 4 [ 170.841855][ T8551] netlink: 40 bytes leftover after parsing attributes in process `syz.2.616'. [ 170.953402][ T8509] Set syz1 is full, maxelem 65536 reached [ 171.572494][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 171.572512][ T42] audit: type=1326 audit(1792411472.293:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.3.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 171.572684][ T42] audit: type=1326 audit(1792411472.293:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.3.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 171.575417][ T42] audit: type=1326 audit(1792411472.293:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.3.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 171.575465][ T42] audit: type=1326 audit(1792411472.293:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.3.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 171.575541][ T42] audit: type=1326 audit(1792411472.293:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.3.623" exe="/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 171.602102][ T42] audit: type=1326 audit(1792411472.323:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.3.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 171.602220][ T42] audit: type=1326 audit(1792411472.323:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.3.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 171.603998][ T42] audit: type=1326 audit(1792411472.323:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.3.623" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 171.605484][ T42] audit: type=1326 audit(1792411472.323:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.3.623" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f93fec code=0x7ffc0000 [ 171.605515][ T42] audit: type=1326 audit(1792411472.323:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.3.623" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71877eb code=0x7ffc0000 [ 171.727030][ T8600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.623'. [ 171.728487][ T8600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.623'. [ 172.469223][ T5742] Bluetooth: hci1: unexpected event for opcode 0x042e [ 174.868656][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.644'. [ 174.887396][ T8666] overlayfs: failed to clone upperpath [ 174.894209][ T8663] syz_tun (unregistering): left allmulticast mode [ 174.894220][ T8666] netlink: 72 bytes leftover after parsing attributes in process `syz.2.646'. [ 174.894234][ T8663] syz_tun (unregistering): left promiscuous mode [ 174.894308][ T8663] bridge0: port 3(syz_tun) entered disabled state [ 175.118293][ T8675] Invalid ELF header magic: != ELF [ 175.886050][ T8687] netlink: 26 bytes leftover after parsing attributes in process `syz.3.653'. [ 175.897711][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 175.910114][ T8687] team0: Port device team_slave_0 removed [ 176.458576][ T8696] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.460276][ T8696] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.583414][ T8700] qrtr: Invalid version 0 [ 176.599647][ T8696] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.599670][ T8696] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.617860][ T8700] syzkaller1: entered promiscuous mode [ 176.617880][ T8700] syzkaller1: entered allmulticast mode [ 177.107938][ T8721] netlink: 'syz.4.663': attribute type 4 has an invalid length. [ 177.356978][ T8724] Invalid ELF header magic: != ELF [ 177.426060][ T8696] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.426091][ T8696] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.514163][ T8696] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.514187][ T8696] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.564119][ T8726] overlayfs: failed to clone upperpath [ 177.569784][ T8726] netlink: 72 bytes leftover after parsing attributes in process `syz.2.665'. [ 177.618845][ T7516] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.618866][ T7516] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.622125][ T8728] overlayfs: failed to clone upperpath [ 177.629120][ T7516] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.629147][ T7516] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.629172][ T7516] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.629193][ T7516] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.629224][ T7516] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.629244][ T7516] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.700004][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'. [ 177.731891][ T8736] bridge_slave_0: left allmulticast mode [ 177.731914][ T8736] bridge_slave_0: left promiscuous mode [ 177.732052][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.734276][ T8736] bridge_slave_1: left promiscuous mode [ 177.734369][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.744252][ T8736] team0: Port device team_slave_1 removed [ 177.746251][ T8736] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 177.747750][ T5850] dummy0 speed is unknown, defaulting to 1000 [ 177.792698][ T8736] team0: Mode changed to "broadcast" [ 177.795833][ T8736] vlan0: entered promiscuous mode [ 177.801316][ T8736] team0: Port device vlan0 added [ 177.811731][ T8736] tipc: Started in network mode [ 177.811760][ T8736] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 177.813430][ T8736] tipc: Enabled bearer , priority 0 [ 177.921839][ T42] kauditd_printk_skb: 86 callbacks suppressed [ 177.921852][ T42] audit: type=1326 audit(1792411478.643:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 177.921975][ T42] audit: type=1326 audit(1792411478.643:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 177.923766][ T42] audit: type=1326 audit(1792411478.643:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.673" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf749efec code=0x7ffc0000 [ 177.923841][ T42] audit: type=1326 audit(1792411478.643:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 177.923939][ T42] audit: type=1326 audit(1792411478.643:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 177.924504][ T42] audit: type=1326 audit(1792411478.643:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.673" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf749efec code=0x7ffc0000 [ 177.924526][ T42] audit: type=1326 audit(1792411478.643:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 177.924544][ T42] audit: type=1326 audit(1792411478.643:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749efec code=0x7ffc0000 [ 177.924840][ T42] audit: type=1326 audit(1792411478.643:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.673" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf749efec code=0x7ffc0000 [ 177.924957][ T42] audit: type=1326 audit(1792411478.643:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.4.673" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf749efec code=0x7ffc0000 [ 178.233625][ T8753] netlink: 72 bytes leftover after parsing attributes in process `syz.5.675'. [ 178.821275][ T5850] tipc: Node number set to 11578026 [ 179.502970][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'. [ 179.739772][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.679'. [ 180.003872][ T8781] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 180.060923][ T8781] kvm: pic: level sensitive irq not supported [ 180.061335][ T8781] kvm: pic: non byte read [ 180.062628][ T8781] kvm: pic: level sensitive irq not supported [ 180.063171][ T8781] kvm: pic: non byte read [ 180.427724][ T8793] syzkaller0: entered promiscuous mode [ 180.427738][ T8793] syzkaller0: entered allmulticast mode [ 180.488723][ T5742] Bluetooth: hci3: command 0x0406 tx timeout [ 180.620046][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 181.413263][ T8801] netlink: 'syz.3.691': attribute type 4 has an invalid length. [ 181.425944][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 181.729625][ T8824] Invalid ELF header magic: != ELF [ 182.457898][ T8830] netlink: 72 bytes leftover after parsing attributes in process `syz.4.697'. [ 182.474638][ T8832] overlayfs: failed to clone upperpath [ 182.502064][ T8834] bridge_slave_0: left allmulticast mode [ 182.502083][ T8834] bridge_slave_0: left promiscuous mode [ 182.502198][ T8834] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.502549][ T8832] netlink: 72 bytes leftover after parsing attributes in process `syz.2.698'. [ 182.525021][ T8834] bridge_slave_1: left allmulticast mode [ 182.525141][ T8834] bridge_slave_1: left promiscuous mode [ 182.525960][ T8834] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.577134][ T8834] bond0: (slave bond_slave_0): Releasing backup interface [ 182.617468][ T8834] bond0: (slave bond_slave_1): Releasing backup interface [ 182.677793][ T8834] team0: Port device team_slave_0 removed [ 182.724253][ T8834] team0: Port device team_slave_1 removed [ 182.759227][ T8834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.759777][ T8834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.774776][ T8834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.774874][ T8834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.794781][ T8834] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.991152][ T8837] team0: Mode changed to "broadcast" [ 183.019919][ T8841] vlan0: entered promiscuous mode [ 183.031771][ T8841] team0: Port device vlan0 added [ 183.033348][ T8843] tipc: Started in network mode [ 183.033363][ T8843] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 183.033443][ T8843] tipc: Enabled bearer , priority 0 [ 183.065858][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.703'. [ 183.460712][ T8858] netlink: 'syz.5.707': attribute type 4 has an invalid length. [ 183.488108][ T8861] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 183.714265][ T8868] Invalid ELF header magic: != ELF [ 184.148692][ T5850] tipc: Node number set to 11578026 [ 184.533522][ T8876] netlink: 40 bytes leftover after parsing attributes in process `syz.5.713'. [ 184.535436][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 184.565188][ T8879] binder_alloc: 8878: binder_alloc_buf size 1024 failed, no address space [ 184.565249][ T8879] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 184.605735][ T8885] netlink: 72 bytes leftover after parsing attributes in process `syz.4.717'. [ 184.664337][ T8892] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 184.883468][ T8895] Invalid ELF header magic: != ELF [ 185.643169][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'. [ 185.758344][ T8911] netlink: 40 bytes leftover after parsing attributes in process `syz.5.725'. [ 185.845123][ T8913] binder: 8912:8913 ioctl c00c6211 0 returned -14 [ 185.976450][ T8902] netlink: 224 bytes leftover after parsing attributes in process `syz.3.722'. [ 186.529334][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 186.957958][ T8939] netlink: 40 bytes leftover after parsing attributes in process `syz.5.734'. [ 187.629680][ T8952] binder: 8944:8952 ioctl c018620c 80000200 returned -1 [ 187.796424][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.741'. [ 188.391143][ T8966] Invalid ELF header magic: != ELF [ 188.824548][ T8969] syzkaller0: entered promiscuous mode [ 188.824568][ T8969] syzkaller0: entered allmulticast mode [ 188.944455][ T8973] netlink: 64 bytes leftover after parsing attributes in process `syz.2.746'. [ 189.855079][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.751'. [ 190.292922][ T9001] Bluetooth: ISO socket layer initialized [ 190.648703][ T9007] syzkaller0: entered promiscuous mode [ 190.648726][ T9007] syzkaller0: entered allmulticast mode [ 191.029874][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'. [ 191.484401][ T9019] netlink: 72 bytes leftover after parsing attributes in process `syz.4.762'. [ 192.563462][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 192.583865][ T9041] syzkaller0: entered promiscuous mode [ 192.583879][ T9041] syzkaller0: entered allmulticast mode [ 192.640595][ T9047] netlink: 72 bytes leftover after parsing attributes in process `syz.4.772'. [ 192.694605][ T9051] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 192.707343][ T9051] rtrs_client L2101: : Failed to resolve address, err: -ENODEV [ 192.707860][ T9051] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 193.700739][ T9067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.779'. [ 193.736400][ T9067] bond1: option ad_select: invalid value (11) [ 193.753407][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.779'. [ 193.772611][ T9067] bond1 (unregistering): Released all slaves [ 193.782553][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.782592][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.177590][ T9091] netlink: 72 bytes leftover after parsing attributes in process `syz.3.783'. [ 194.338741][ T5850] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 194.519974][ T5850] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.520803][ T5850] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.520816][ T5850] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 194.520825][ T5850] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.520845][ T5850] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 194.520858][ T5850] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 194.522184][ T5850] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.522201][ T5850] usb 9-1: Product: syz [ 194.522208][ T5850] usb 9-1: Manufacturer: syz [ 194.525445][ T5850] cdc_wdm 9-1:1.0: skipping garbage [ 194.525453][ T5850] cdc_wdm 9-1:1.0: skipping garbage [ 194.527046][ T5850] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 194.527056][ T5850] cdc_wdm 9-1:1.0: Unknown control protocol [ 194.669877][ T9107] netlink: 28 bytes leftover after parsing attributes in process `syz.5.789'. [ 194.931458][ T5850] usb 9-1: USB disconnect, device number 7 [ 195.036509][ T5742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.040383][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.042305][ T5742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.045164][ T5742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.045701][ T5742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.240045][ T9110] rxe_eth0 speed is unknown, defaulting to 1000 [ 195.240827][ T9110] rxe_eth0 speed is unknown, defaulting to 1000 [ 195.241201][ T9110] rxe_eth0 speed is unknown, defaulting to 1000 [ 195.318424][ T9110] infiniband rxe0: set active [ 195.318464][ T5850] rxe_eth0 speed is unknown, defaulting to 1000 [ 195.319486][ T9110] infiniband rxe0: added rxe_eth0 [ 195.324483][ T9110] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 195.324502][ T9110] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 195.324526][ T9110] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 195.334484][ T9110] RDS/IB: rxe0: added [ 195.334514][ T9110] smc: adding ib device rxe0 with port count 1 [ 195.334525][ T9110] smc: ib device rxe0 port 1 has no pnetid [ 195.335030][ T9110] rxe_eth0 speed is unknown, defaulting to 1000 [ 195.336210][ T5850] rxe_eth0 speed is unknown, defaulting to 1000 [ 195.453891][ T9110] rxe_eth0 speed is unknown, defaulting to 1000 [ 195.490624][ T5736] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 195.542960][ T9110] rxe_eth0 speed is unknown, defaulting to 1000 [ 195.634859][ T9110] rxe_eth0 speed is unknown, defaulting to 1000 [ 195.719919][ T9110] rxe_eth0 speed is unknown, defaulting to 1000 [ 195.816879][ T9110] dummy0 speed is unknown, defaulting to 1000 [ 195.817617][ T9110] rxe_eth0 speed is unknown, defaulting to 1000 [ 196.138378][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.138466][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.138707][ T9110] bridge_slave_0: entered allmulticast mode [ 196.139436][ T9110] bridge_slave_0: entered promiscuous mode [ 196.142506][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.142607][ T9110] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.142684][ T9110] bridge_slave_1: entered allmulticast mode [ 196.143874][ T9110] bridge_slave_1: entered promiscuous mode [ 196.158362][ T9110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.161180][ T9110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.174035][ T9110] team0: Port device team_slave_0 added [ 196.175277][ T9110] team0: Port device team_slave_1 added [ 196.187864][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.187873][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.187886][ T9110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.189112][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.189120][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.189133][ T9110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.209248][ T9110] hsr_slave_0: entered promiscuous mode [ 196.209666][ T9110] hsr_slave_1: entered promiscuous mode [ 196.209950][ T9110] debugfs: 'hsr0' already exists in 'hsr' [ 196.209961][ T9110] Cannot create hsr debugfs directory [ 196.327096][ T9110] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.329615][ T9110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.330022][ T9110] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.333877][ T9110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.334609][ T9110] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 196.339588][ T9110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.340032][ T9110] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 196.344085][ T9110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.357127][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.357181][ T9110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.357301][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.357345][ T9110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.407560][ T9110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.414400][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.414844][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.421615][ T9110] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.427313][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.427387][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.439987][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.440038][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.703018][ T9110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.868478][ T9110] veth0_vlan: entered promiscuous mode [ 196.873766][ T9110] veth1_vlan: entered promiscuous mode [ 196.886662][ T9110] veth0_macvtap: entered promiscuous mode [ 196.889645][ T9110] veth1_macvtap: entered promiscuous mode [ 196.902124][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.906552][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.911411][ T7516] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.912845][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.912900][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.912975][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.954278][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.954298][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.967932][ T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.967951][ T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.049681][ T5736] Bluetooth: hci2: command tx timeout [ 198.035219][ T9186] trusted_key: encrypted_key: insufficient parameters specified [ 198.046146][ T9186] netlink: 'syz.3.802': attribute type 1 has an invalid length. [ 198.046166][ T9186] netlink: 224 bytes leftover after parsing attributes in process `syz.3.802'. [ 198.102591][ T9191] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 198.172176][ T9191] md: could not open device unknown-block(1,0). [ 198.683082][ T9212] netlink: 72 bytes leftover after parsing attributes in process `syz.4.818'. [ 199.139007][ T5736] Bluetooth: hci2: command tx timeout [ 199.791285][ T9247] overlayfs: failed to clone upperpath [ 199.792565][ T9247] netlink: 72 bytes leftover after parsing attributes in process `syz.2.823'. [ 199.885617][ T9256] netlink: 36 bytes leftover after parsing attributes in process `syz.2.824'. [ 199.963681][ T74] IPVS: starting estimator thread 0... [ 200.058777][ T9262] IPVS: using max 42 ests per chain, 100800 per kthread [ 200.292538][ T9268] ntfs3(nullb0): Primary boot signature is not NTFS. [ 200.292880][ T9268] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 200.337495][ T9269] bridge0: left allmulticast mode [ 200.541551][ T9273] overlayfs: failed to clone upperpath [ 201.208762][ T5736] Bluetooth: hci2: command tx timeout [ 201.352052][ T9288] netlink: 72 bytes leftover after parsing attributes in process `syz.3.833'. [ 202.339490][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.838'. [ 202.424442][ T9310] Console: switching to colour dummy device 80x25 [ 203.304453][ T5736] Bluetooth: hci2: command tx timeout [ 203.456342][ T9317] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 203.510332][ T9317] pci 0000:00:00.0: Adding to iommu group 0 [ 203.534109][ T9327] netlink: 72 bytes leftover after parsing attributes in process `syz.6.844'. [ 203.534810][ T9317] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 203.567530][ T9317] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 203.567644][ T9317] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 203.567819][ T9317] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 203.568233][ T9317] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 203.576725][ T9317] pci 0000:00:01.0: Adding to iommu group 1 [ 203.592226][ T9317] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 203.592246][ T9317] pci 0000:00:01.0: vgaarb: bridge control possible [ 203.592257][ T9317] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 203.611731][ T9317] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 203.625675][ T9317] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 203.625771][ T9317] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 203.625847][ T9317] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 203.625922][ T9317] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 203.626109][ T9317] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 203.626450][ T9317] pci 0000:00:02.0: enabling Extended Tags [ 203.644717][ T9317] pci 0000:00:02.0: Adding to iommu group 2 [ 203.668825][ T9317] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 203.682065][ T9317] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 203.682120][ T9317] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 203.683256][ T9317] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 203.687536][ T9317] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 203.693387][ T9317] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 203.694462][ T9317] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 203.717714][ T9317] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 203.828244][ T5736] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 203.922328][ T9317] [drm] Found bochs VGA, ID 0xb0c5. [ 203.922342][ T9317] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 203.924949][ T9317] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 203.969760][ T9317] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 204.084222][ T9317] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 204.220252][ T9317] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 204.220328][ T9317] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 204.220636][ T9317] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 204.644181][ T5449] 8021q: adding VLAN 0 to HW filter on device eth1 [ 204.779478][ T9368] netlink: 72 bytes leftover after parsing attributes in process `syz.4.855'. [ 204.880227][ T5736] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 205.117410][ T7505] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 206.346789][ T9407] netlink: 72 bytes leftover after parsing attributes in process `syz.6.865'. [ 207.485546][ T193] IPVS: starting estimator thread 0... [ 207.589433][ T9436] IPVS: using max 43 ests per chain, 103200 per kthread [ 208.037127][ T5736] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 208.258229][ T9464] netlink: 72 bytes leftover after parsing attributes in process `syz.3.880'. [ 208.727923][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.882'. [ 208.993397][ T9484] FAULT_INJECTION: forcing a failure. [ 208.993397][ T9484] name failslab, interval 1, probability 0, space 0, times 0 [ 208.993439][ T9484] CPU: 1 UID: 0 PID: 9484 Comm: syz.3.888 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.993469][ T9484] Tainted: [L]=SOFTLOCKUP [ 208.993476][ T9484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.993487][ T9484] Call Trace: [ 208.993495][ T9484] [ 208.993504][ T9484] dump_stack_lvl+0x100/0x190 [ 208.993673][ T9484] should_fail_ex.cold+0x5/0xa [ 208.993708][ T9484] should_failslab+0xc2/0x120 [ 208.993780][ T9484] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 208.993811][ T9484] ? __d_alloc+0x35/0xa50 [ 208.993845][ T9484] __d_alloc+0x35/0xa50 [ 208.993878][ T9484] d_alloc_pseudo+0x1c/0xc0 [ 208.993901][ T9484] alloc_file_pseudo+0x118/0x290 [ 208.993922][ T9484] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 208.993942][ T9484] ? mas_preallocate+0x528/0xee0 [ 208.994018][ T9484] __shmem_file_setup+0x205/0x460 [ 208.994050][ T9484] ? __pfx___shmem_file_setup+0x10/0x10 [ 208.994084][ T9484] ? vm_area_alloc+0x1f/0x160 [ 208.994108][ T9484] shmem_zero_setup+0x96/0x1b0 [ 208.994133][ T9484] __mmap_region+0x26b6/0x32e0 [ 208.994163][ T9484] ? __pfx___mmap_region+0x10/0x10 [ 208.994191][ T9484] ? __pfx_stack_trace_save+0x10/0x10 [ 208.994234][ T9484] ? kasan_save_stack+0x3f/0x50 [ 208.994261][ T9484] ? kasan_save_stack+0x30/0x50 [ 208.994287][ T9484] ? kasan_save_track+0x14/0x30 [ 208.994318][ T9484] ? __lock_acquire+0x5c0/0x1f40 [ 208.994348][ T9484] ? do_fast_syscall_32+0x32/0x70 [ 208.994368][ T9484] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.994392][ T9484] ? __css_rstat_updated+0x1ce/0x590 [ 208.994445][ T9484] ? lock_acquire+0x1d1/0x380 [ 208.994473][ T9484] ? finish_task_switch.isra.0+0x149/0x10d0 [ 208.994505][ T9484] ? find_held_lock+0x2b/0x80 [ 208.994573][ T9484] mmap_region+0x3db/0x6d0 [ 208.994600][ T9484] ? __pfx_mmap_region+0x10/0x10 [ 208.994624][ T9484] ? shmem_get_unmapped_area+0x141/0x960 [ 208.994655][ T9484] ? cap_mmap_addr+0x4b/0x120 [ 208.994685][ T9484] ? bpf_lsm_mmap_addr+0x9/0x30 [ 208.994704][ T9484] ? security_mmap_addr+0x71/0x1e0 [ 208.994729][ T9484] ? __get_unmapped_area+0x255/0x3e0 [ 208.994759][ T9484] do_mmap+0x12c7/0x1c30 [ 208.994792][ T9484] ? lock_acquire+0x1d1/0x380 [ 208.994820][ T9484] ? __pfx_do_mmap+0x10/0x10 [ 208.994849][ T9484] ? futex_wait+0x11e/0x370 [ 208.994881][ T9484] ? __pfx_down_write_killable+0x10/0x10 [ 208.994909][ T9484] vm_mmap_pgoff+0x28d/0x470 [ 208.994938][ T9484] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 208.994965][ T9484] ? __pfx_do_futex+0x10/0x10 [ 208.994989][ T9484] ? fput+0x7c/0x100 [ 208.995023][ T9484] ksys_mmap_pgoff+0xe4/0x610 [ 208.995052][ T9484] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 208.995078][ T9484] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 208.995112][ T9484] __do_fast_syscall_32+0x13a/0x8b0 [ 208.995132][ T9484] ? lockdep_hardirqs_on+0x7d/0x110 [ 208.995152][ T9484] do_fast_syscall_32+0x32/0x70 [ 208.995172][ T9484] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.995196][ T9484] RIP: 0023:0xf7f93fec [ 208.995229][ T9484] Code: Unable to access opcode bytes at 0xf7f93fc2. [ 208.995249][ T9484] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 208.995269][ T9484] RAX: ffffffffffffffda RBX: 000000000c230000 RCX: 0000000008000002 [ 208.995282][ T9484] RDX: 0000000002000007 RSI: 000000000401d031 RDI: 00000000ffffffff [ 208.995294][ T9484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.995306][ T9484] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 208.995317][ T9484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.995342][ T9484] [ 209.056191][ T9488] tc action pedit offset must be on 32 bit boundaries [ 209.178932][ T9493] netlink: 72 bytes leftover after parsing attributes in process `syz.4.892'. [ 212.726971][ T9520] 8021q: adding VLAN 0 to HW filter on device .` [ 212.747870][ T9520] vlan0: left promiscuous mode [ 213.240006][ T42] kauditd_printk_skb: 207 callbacks suppressed [ 213.240019][ T42] audit: type=1326 audit(1792411770.011:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.6.897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 213.240758][ T42] audit: type=1326 audit(1792411770.011:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.6.897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 213.243138][ T42] audit: type=1326 audit(1792411770.011:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.6.897" exe="/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf744efec code=0x7ffc0000 [ 213.247087][ T42] audit: type=1326 audit(1792411770.011:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.6.897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 213.262161][ T42] audit: type=1326 audit(1792411770.031:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.6.897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 213.264253][ T42] audit: type=1326 audit(1792411770.031:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.6.897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 213.304243][ T42] audit: type=1326 audit(1792411770.061:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.6.897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 213.315803][ T42] audit: type=1326 audit(1792411770.081:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.6.897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 213.316005][ T42] audit: type=1326 audit(1792411770.081:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.6.897" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf744efec code=0x7ffc0000 [ 213.316197][ T42] audit: type=1326 audit(1792411770.081:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.6.897" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71a77eb code=0x7ffc0000 [ 213.387226][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'. [ 214.135583][ T9538] netlink: 16 bytes leftover after parsing attributes in process `syz.6.897'. [ 214.141629][ T9538] netlink: 12 bytes leftover after parsing attributes in process `syz.6.897'. [ 215.576311][ T9599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.914'. [ 215.577295][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 215.701251][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.917'. [ 217.534149][ T5736] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 218.262700][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.935'. [ 218.449198][ T6215] e1000 0000:00:06.0 eth0: Reset adapter [ 220.651899][ T5815] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 236.226345][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.953'. [ 236.230242][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.953'. [ 236.289002][ T9810] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 237.442113][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.957'. [ 238.726487][ T9886] netlink: 'syz.2.962': attribute type 10 has an invalid length. [ 239.152547][ T9895] netlink: 'syz.2.965': attribute type 10 has an invalid length. [ 239.203370][ T9895] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 239.718704][ T9918] netlink: 72 bytes leftover after parsing attributes in process `syz.4.971'. [ 241.752268][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.6.980'. [ 242.009617][ T9968] overlayfs: failed to clone upperpath [ 242.039504][ T9968] netlink: 72 bytes leftover after parsing attributes in process `syz.2.982'. [ 243.587679][ T9992] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 243.700732][ T5736] Bluetooth: hci2: command 0x2016 tx timeout [ 245.734205][T10040] dlm: non-version read from control device 0 [ 245.735900][T10040] siw: device registration error -23 [ 245.737049][ T5742] Bluetooth: hci2: hcon ffff88804c970000 sent 1 < count 47384 [ 246.170589][T10049] ------------[ cut here ]------------ [ 246.170604][T10049] Device '0-0002' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst. [ 246.170618][T10049] WARNING: drivers/base/core.c:2642 at device_release+0x1da/0x270, CPU#2: syz.4.1005/10049 [ 246.185101][T10049] Modules linked in: [ 246.187763][T10049] CPU: 2 UID: 0 PID: 10049 Comm: syz.4.1005 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.192812][T10049] Tainted: [L]=SOFTLOCKUP [ 246.194825][T10049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.199385][T10049] RIP: 0010:device_release+0x1dd/0x270 [ 246.201846][T10049] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 9d 4c a1 fb 48 8d 3d 46 81 e7 0b 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 84 4c a1 fb 48 89 da 48 b8 00 00 [ 246.210072][T10049] RSP: 0018:ffffc90005f1fa20 EFLAGS: 00010283 [ 246.212688][T10049] RAX: 000000000000410b RBX: ffff888025dcd020 RCX: ffffc9002f96c000 [ 246.216087][T10049] RDX: 0000000000080000 RSI: ffff88806b081940 RDI: ffffffff9251e8c0 [ 246.219443][T10049] RBP: ffff88806b081940 R08: 0000000000000001 R09: 0000000000000000 [ 246.222826][T10049] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804cab9000 [ 246.226115][T10049] R13: dffffc0000000000 R14: ffff88806b081940 R15: 0000000000000000 [ 246.229381][T10049] FS: 0000000000000000(0000) GS:ffff88809594a000(0063) knlGS:00000000f54b6b40 [ 246.232471][T10049] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 246.234602][T10049] CR2: 00000000f7478154 CR3: 0000000052784000 CR4: 0000000000352ef0 [ 246.237077][T10049] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 246.239874][T10049] DR3: 00000000000f4606 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 246.242405][T10049] Call Trace: [ 246.243505][T10049] [ 246.244457][T10049] kobject_put+0x1f7/0x640 [ 246.246351][T10049] device_unregister+0x2f/0xe0 [ 246.248340][T10049] i2c_unregister_device+0xf5/0x270 [ 246.250780][T10049] i2c_deregister_clients+0x255/0x460 [ 246.263519][T10049] i2c_del_adapter+0x13a/0x2e0 [ 246.265221][T10049] i801_remove+0xa4/0x3d0 [ 246.266685][T10049] pci_device_remove+0xb2/0x1d0 [ 246.284095][T10049] ? __pfx_pci_device_remove+0x10/0x10 [ 246.286478][T10049] device_remove+0xcb/0x180 [ 246.297589][T10049] device_release_driver_internal+0x44e/0x620 [ 246.301079][T10049] unbind_store+0xf8/0x110 [ 246.302555][T10049] ? __pfx_unbind_store+0x10/0x10 [ 246.304212][T10049] drv_attr_store+0x74/0xb0 [ 246.305709][T10049] ? __pfx_drv_attr_store+0x10/0x10 [ 246.307426][T10049] sysfs_kf_write+0xf2/0x150 [ 246.309061][T10049] kernfs_fop_write_iter+0x3e0/0x5f0 [ 246.310860][T10049] ? __pfx_sysfs_kf_write+0x10/0x10 [ 246.312571][T10049] vfs_write+0x6af/0x1050 [ 246.314025][T10049] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 246.315902][T10049] ? __pfx_vfs_write+0x10/0x10 [ 246.317379][T10049] ? find_held_lock+0x2b/0x80 [ 246.319119][T10049] ksys_write+0x12a/0x250 [ 246.320614][T10049] ? __pfx_ksys_write+0x10/0x10 [ 246.322254][T10049] __do_fast_syscall_32+0x13a/0x8b0 [ 246.323925][T10049] do_fast_syscall_32+0x32/0x70 [ 246.325540][T10049] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.327580][T10049] RIP: 0023:0xf749efec [ 246.329096][T10049] Code: Unable to access opcode bytes at 0xf749efc2. [ 246.331892][T10049] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 246.334589][T10049] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800003c0 [ 246.336997][T10049] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 246.339873][T10049] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.342612][T10049] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 246.345184][T10049] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.347754][T10049] [ 246.348961][T10049] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 246.351910][T10049] CPU: 2 UID: 0 PID: 10049 Comm: syz.4.1005 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.356034][T10049] Tainted: [L]=SOFTLOCKUP [ 246.357409][T10049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.360910][T10049] Call Trace: [ 246.362107][T10049] [ 246.363183][T10049] dump_stack_lvl+0x100/0x190 [ 246.364853][T10049] vpanic+0x553/0x970 [ 246.366221][T10049] ? __pfx_vpanic+0x10/0x10 [ 246.367762][T10049] panic+0xd1/0xe0 [ 246.369044][T10049] ? __pfx_panic+0x10/0x10 [ 246.370518][T10049] check_panic_on_warn.cold+0x19/0x34 [ 246.372315][T10049] ? device_release+0x1da/0x270 [ 246.374127][T10049] __warn.cold+0x191/0x318 [ 246.375784][T10049] __report_bug+0x30f/0x440 [ 246.377374][T10049] ? device_release+0x1da/0x270 [ 246.379149][T10049] ? __pfx___report_bug+0x10/0x10 [ 246.380983][T10049] ? do_raw_spin_lock+0x128/0x260 [ 246.382746][T10049] ? find_held_lock+0x2b/0x80 [ 246.384390][T10049] ? kobj_kset_leave+0x160/0x210 [ 246.386115][T10049] report_bug_entry+0xe2/0x290 [ 246.387847][T10049] ? device_release+0x1dd/0x270 [ 246.389652][T10049] handle_bug+0x1cd/0x2a0 [ 246.391249][T10049] exc_invalid_op+0x17/0x50 [ 246.392917][T10049] asm_exc_invalid_op+0x1a/0x20 [ 246.394658][T10049] RIP: 0010:device_release+0x1dd/0x270 [ 246.396604][T10049] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 9d 4c a1 fb 48 8d 3d 46 81 e7 0b 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 84 4c a1 fb 48 89 da 48 b8 00 00 [ 246.403405][T10049] RSP: 0018:ffffc90005f1fa20 EFLAGS: 00010283 [ 246.405582][T10049] RAX: 000000000000410b RBX: ffff888025dcd020 RCX: ffffc9002f96c000 [ 246.408390][T10049] RDX: 0000000000080000 RSI: ffff88806b081940 RDI: ffffffff9251e8c0 [ 246.411270][T10049] RBP: ffff88806b081940 R08: 0000000000000001 R09: 0000000000000000 [ 246.414057][T10049] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804cab9000 [ 246.416823][T10049] R13: dffffc0000000000 R14: ffff88806b081940 R15: 0000000000000000 [ 246.419599][T10049] kobject_put+0x1f7/0x640 [ 246.421149][T10049] device_unregister+0x2f/0xe0 [ 246.422875][T10049] i2c_unregister_device+0xf5/0x270 [ 246.424790][T10049] i2c_deregister_clients+0x255/0x460 [ 246.426636][T10049] i2c_del_adapter+0x13a/0x2e0 [ 246.428302][T10049] i801_remove+0xa4/0x3d0 [ 246.429887][T10049] pci_device_remove+0xb2/0x1d0 [ 246.431640][T10049] ? __pfx_pci_device_remove+0x10/0x10 [ 246.433560][T10049] device_remove+0xcb/0x180 [ 246.435162][T10049] device_release_driver_internal+0x44e/0x620 [ 246.437231][T10049] unbind_store+0xf8/0x110 [ 246.438794][T10049] ? __pfx_unbind_store+0x10/0x10 [ 246.440517][T10049] drv_attr_store+0x74/0xb0 [ 246.442112][T10049] ? __pfx_drv_attr_store+0x10/0x10 [ 246.444008][T10049] sysfs_kf_write+0xf2/0x150 [ 246.445645][T10049] kernfs_fop_write_iter+0x3e0/0x5f0 [ 246.447430][T10049] ? __pfx_sysfs_kf_write+0x10/0x10 [ 246.449319][T10049] vfs_write+0x6af/0x1050 [ 246.450800][T10049] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 246.452800][T10049] ? __pfx_vfs_write+0x10/0x10 [ 246.454476][T10049] ? find_held_lock+0x2b/0x80 [ 246.456118][T10049] ksys_write+0x12a/0x250 [ 246.457623][T10049] ? __pfx_ksys_write+0x10/0x10 [ 246.459314][T10049] __do_fast_syscall_32+0x13a/0x8b0 [ 246.461168][T10049] do_fast_syscall_32+0x32/0x70 [ 246.462939][T10049] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.465099][T10049] RIP: 0023:0xf749efec [ 246.466553][T10049] Code: Unable to access opcode bytes at 0xf749efc2. [ 246.468881][T10049] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 246.471914][T10049] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800003c0 [ 246.474820][T10049] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 246.477743][T10049] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.480628][T10049] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 246.483522][T10049] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.486473][T10049] [ 246.488275][T10049] Kernel Offset: disabled [ 246.489695][T10049] Rebooting in 86400 seconds..