last executing test programs: 9.775705812s ago: executing program 3 (id=383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x20, 0x70bd2a, 0x2ddfdbfe, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xc4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1d1008126883f6f}, 0x4044041) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x4, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) 9.475821725s ago: executing program 3 (id=386): openat$sysctl(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x24) 8.859079057s ago: executing program 3 (id=388): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) (async) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x5, 0x2, 0x1000}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1fe) (async) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/tracing/events/sched/sched_switch/enable\x00', 0x82880, 0x0) read(r3, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x7927, 0x0, 0x3, 0xbd, 0x0, r11}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x40af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x48cd, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x24c}}], 0x1, &(0x7f0000000340)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc00c9207, &(0x7f00000002c0)={&(0x7f00000000c0)=[0x0], 0x1, 0x7}) (async) recvfrom$inet_nvme(r11, &(0x7f0000000500)=""/168, 0xa8, 0x40010100, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 7.633480387s ago: executing program 3 (id=392): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000063f472f12aa70c001e00b600fdff02ff000000000200000001009fd8df12c9d40bc80c40000100000000000008"], 0x30}, 0x1, 0x0, 0x0, 0x42812}, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000025c0)='map_files\x00') r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r3, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/72, 0x48}], 0x1) (async, rerun: 64) syz_usb_ep_write(r2, 0x81, 0x0, 0x0) (async, rerun: 64) r4 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x9, &(0x7f0000002580)) (async, rerun: 64) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000080)={0xa}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000002600)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004500005c000040020511907800000000000000004e24000000489078030000000400000096597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cbaf6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16ae74ef724e433c4091ac6f48fc5a6ec7e70ccda000924048eb69063551c3e989da21e724223427940875cea0ef7c2f0ec6d1d0821e81144bbd0e378c9f03ae55e494e63236e3d39defb5c1be63929a79d0506027581b72b7"], 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r6, 0xc138fd0f, &(0x7f0000000000)="04000000000000000000") madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) setitimer(0x2, 0x0, 0x0) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0x6000) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020}, 0x2020) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000002700)) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r9 = getuid() fsetxattr$security_capability(r8, &(0x7f0000000080), &(0x7f00000000c0)=@v3={0x3000000, [{0x20000000, 0x8}, {0xa4, 0x9}], r9}, 0x18, 0x2) (async) madvise(&(0x7f00007fc000/0x3000)=nil, 0x3000, 0x18) 5.669107663s ago: executing program 2 (id=400): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dmmidi(&(0x7f0000000000), 0x4, 0x14840) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07000000000000000400050000001c0003800800040000eb00000800020020000000080005007180bbda180001801400020073797a5f74756e000000000000000000080005"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 5.334317291s ago: executing program 2 (id=402): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) pwrite64(r1, &(0x7f0000000200), 0x0, 0x1000000) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) pwrite64(r2, &(0x7f0000000200), 0x0, 0x2000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd01, &(0x7f0000000000)) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f") r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dum\x00', 0x42, 0x1ff) write(r6, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0x35) ioctl(r5, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f") r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 4.848490797s ago: executing program 1 (id=404): mkdirat(0xffffffffffffff9c, 0x0, 0x108) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000150000009ddd59a400", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400dd05000008001b0000000000"], 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0108f8ffffffffffffff070000000900010073797a30000000004c000000090a01042fbc47e500000000000000001700000008000a4053c154210900020073797a31000000000900010073797a3000000000080005400000001708000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000028000379534380240000800c00054000000000000000080c0004400000000000000003040002800400018014000000100001000000000000000000"], 0xe8}}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002100)=@newtfilter={0x18fc, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18cc, 0x2, [@TCA_CGROUP_POLICE={0x45c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x181fe01a, 0x5, 0x5, 0xc, 0xe, 0x5, 0x1, 0x0, 0x81c, 0x6, 0x8, 0x5, 0x2d79, 0x8, 0x4, 0x7ff, 0x2, 0xfffffff9, 0xff, 0xc3, 0xee9a, 0x10001, 0xf, 0xba4e, 0x7fff, 0x2, 0x400000, 0x5, 0x10001, 0xf, 0x1, 0x80000000, 0x5, 0x0, 0x1, 0x8, 0x1, 0x1, 0x6, 0x9, 0x200, 0x7fff, 0xfffffffb, 0x4, 0x8, 0x6854, 0x2, 0xb, 0x80000001, 0x4, 0x3, 0xfffffffc, 0x9, 0x9, 0x8cb7, 0x1000, 0x4, 0xffff0001, 0xd, 0xd, 0x8, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0xf3b, 0x80, 0x5871, 0xffff4435, 0x4, 0x6, 0x4, 0xcc, 0x490aa10f, 0x8, 0x68, 0x9, 0x3, 0xfffffffe, 0x1, 0x6d, 0x8a, 0xfffffe01, 0x4, 0xe, 0x9, 0x1, 0x4322, 0x1, 0x2, 0x7, 0x0, 0x2, 0x9, 0x3, 0x8, 0xc6, 0x4, 0x6ea, 0x8, 0x0, 0x5, 0x6, 0xd, 0x8, 0x3, 0x4, 0x5, 0x6, 0x5, 0x7841, 0x4, 0x1, 0x56e000, 0x80, 0x4e, 0x4, 0x7, 0x9, 0x500, 0x9, 0x4, 0x2, 0x2, 0x4, 0xc9, 0x2, 0x1, 0x8, 0x8, 0xb5b, 0x8, 0xe56, 0xec05, 0x3, 0x359a3524, 0x4, 0xc, 0x1000, 0xe, 0xc, 0x4, 0x200, 0x99b, 0xd32b, 0x2, 0x62, 0x7, 0x4, 0x1, 0x8d8a, 0x1, 0x7fffffff, 0x4, 0x3, 0x5, 0x2, 0x0, 0x4, 0xfffffffc, 0x780, 0x3, 0x1ff, 0x1, 0x7f, 0x7, 0x7ff, 0x9, 0x4, 0x7, 0x6, 0x9, 0x2, 0xb, 0x5, 0x400, 0x101, 0x7fff, 0x7f, 0x8, 0x2, 0x3, 0xffffffc0, 0x6, 0x3, 0xd, 0x100, 0x80, 0xfffffff7, 0xd, 0x80000000, 0x9, 0x1, 0x1, 0x82, 0x3, 0x1ff, 0xfffffffb, 0x84, 0x1, 0x4, 0xff, 0x1ff, 0x7, 0x5, 0x10, 0x2b51, 0x8, 0x8, 0x5, 0xc, 0x6, 0x5, 0x39d0, 0x3, 0x0, 0x2, 0x2d37, 0x9, 0xf, 0x6f000000, 0x80000000, 0x8, 0x43be, 0x2, 0xfffffffb, 0x7, 0x6, 0x8, 0xfffffffe, 0xfff, 0x4, 0x1, 0x3, 0x8, 0x3ff, 0x200000, 0x4, 0x6, 0x10001, 0x2, 0xd, 0x4, 0xfc24, 0x3, 0xd, 0x3, 0xfffffeff, 0x7, 0x4, 0x20002000, 0xe, 0xc1f, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x1, 0x8, 0x8, 0x2, {0x0, 0x0, 0x0, 0x6, 0x4, 0x10}, {0xd7, 0x2, 0x7, 0x5, 0x1ff, 0x40}, 0x9, 0x7, 0x7f}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x682}]}, @TCA_CGROUP_POLICE={0x430, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x40, 0x1, 0x3, 0x38a3, 0x7, 0x1000, 0xa630, 0x8, 0x8, 0x5d, 0x1, 0xa, 0x4, 0x3, 0x1, 0x6, 0x8, 0x5, 0x5, 0x974f, 0x2, 0x4, 0x23, 0x8, 0x8, 0x8, 0x5, 0xfffffff8, 0x8, 0xf, 0xfffffc0f, 0xb4, 0x8, 0x4, 0x0, 0x1, 0x1ae, 0x1, 0x8000, 0x7, 0xfffffff9, 0x2, 0x2, 0x0, 0x7, 0x1, 0x0, 0x9, 0x2, 0x8, 0xf, 0x404, 0x7, 0x9, 0xfffffff6, 0x4, 0x5, 0x8, 0x2, 0x6, 0x1, 0x0, 0x0, 0xe, 0x8, 0x35ce, 0x2, 0x0, 0x0, 0x1, 0x8, 0x2, 0xfffffff2, 0x1000, 0x3, 0x8, 0x0, 0x1, 0x3, 0x8, 0xfed, 0x0, 0x800, 0x7, 0x6, 0x3, 0x2a, 0x3, 0x7, 0xe7, 0xfffffffb, 0x2, 0x8, 0x3ff, 0x1, 0x7d4b, 0x101, 0x10000, 0xffff4898, 0x6, 0xfffff001, 0xbf4c, 0x1, 0x1, 0x1b, 0x8, 0x3, 0xfe, 0x6e, 0x11c, 0x0, 0x3, 0xa, 0x97, 0xa6b9, 0x6, 0xc3ff, 0x9, 0x0, 0x40, 0x1, 0x21fa, 0x8000, 0x9, 0x80, 0x8, 0x7, 0x2, 0x40, 0xe8, 0xffff7d33, 0x800, 0x7e, 0x4, 0x3, 0x80, 0x8ff1, 0x6318, 0x2, 0x3, 0x9, 0xfffffffd, 0x9, 0x3ac, 0x7db9, 0x7fff, 0xfff, 0x8, 0x3, 0x1, 0x4, 0x5, 0x300e, 0x2, 0xff, 0x3ff, 0x2, 0xb4, 0xfffff001, 0x2, 0x5, 0x1, 0x8, 0x9, 0x9, 0x70, 0x6, 0x7, 0x6c, 0x1, 0xaf, 0xa, 0xfffffff8, 0x1, 0x7, 0x7f, 0x8, 0xfffffffb, 0xfffffff7, 0x95b0, 0x8, 0xffff, 0x9, 0x5, 0x101, 0x5, 0x8, 0x4, 0x9e70, 0x6, 0x3, 0xffffffff, 0x85, 0xe, 0x8, 0xc, 0x401, 0x7, 0x81, 0xfffffff5, 0x1, 0x80000000, 0x9cfb, 0x7fffffff, 0x10001, 0xe24d, 0x4, 0x5, 0x9, 0x6, 0xe7, 0x52, 0x80000001, 0x81, 0xce, 0xff, 0x1, 0x5, 0x1, 0x3, 0x4104, 0x1, 0x3, 0x4a, 0x0, 0x5, 0x8, 0x43f, 0x5, 0x2, 0x0, 0x9, 0x2, 0x4, 0x80000000, 0x2, 0x5, 0xffffffff, 0x9, 0x83, 0x4, 0x2d90, 0x9, 0x80, 0x10000, 0x2, 0x5c, 0xb2d, 0xc3b1, 0x401, 0x3, 0x9, 0x0, 0x8, 0xfffffff7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x18}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_CGROUP_POLICE={0xc10, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x2, 0x0, 0x6, 0xe83, 0x81, 0xa, 0x1, 0x8, 0x9, 0x4, 0x3, 0x8000, 0x7, 0x3, 0xffff0001, 0xe, 0x239, 0x8c3a, 0x1, 0xc, 0xd9ad, 0x101, 0x1, 0x1, 0x8000, 0x7fffffff, 0x4, 0x7, 0x1, 0x8001, 0x3, 0x5, 0x0, 0xffffffff, 0x8, 0x2, 0x1000, 0x4, 0x5, 0x8, 0x3, 0xc, 0x790, 0xea5c, 0x7fff, 0x9, 0x2, 0x6, 0x1, 0x54, 0x0, 0x6, 0x7ff, 0x3, 0x800, 0x800, 0x6, 0x1000, 0xffff, 0x3, 0x8, 0xe, 0x6800, 0x21ab, 0x3ff, 0x7fffffff, 0x1, 0x7, 0x6, 0x8bb7, 0x3, 0x8, 0x9, 0x8, 0x5, 0x7f, 0x6, 0x7fff, 0xfffffff9, 0xc60f, 0x6, 0x3, 0x0, 0x9, 0x71cb, 0x4, 0x6, 0x6, 0x8, 0x3, 0x800, 0x5, 0x9, 0x2, 0x7, 0x4, 0x3, 0xfff, 0x9, 0x1, 0x2e7b6e1a, 0x7, 0x80000001, 0x8, 0x400, 0x0, 0xcd, 0x7, 0x40, 0xf, 0x7, 0x4, 0x3, 0x1, 0x20d7, 0x4, 0x7, 0xa, 0x6, 0x2, 0xd6, 0x7, 0x5, 0x78a9fcc5, 0xf31, 0x8000, 0x1, 0x61f2, 0x5, 0x401, 0x0, 0xffff, 0x8, 0x1, 0x3000000, 0x0, 0xe, 0x6, 0x0, 0x148, 0x4, 0xfff, 0xfae, 0x6, 0x619e, 0x2, 0xd93, 0x3, 0x6, 0x1, 0x1, 0x7, 0x4, 0x0, 0x64e7aea3, 0x4, 0x5, 0x8, 0xf1, 0x3, 0x3, 0x6, 0x4, 0x7fffffff, 0x9, 0x6, 0x4, 0xfffffe01, 0x4, 0x101, 0x2, 0x7, 0xfffffff9, 0x1, 0x1, 0x958, 0xb8c, 0x0, 0x6, 0x6, 0x8, 0x4, 0xd, 0x2, 0x8, 0x1, 0x7, 0x10001, 0x75, 0xfffffff9, 0x101, 0x4, 0x5, 0x2bb, 0x2, 0xff, 0x9, 0x3, 0x9, 0x81, 0x3, 0x3, 0x8, 0xffff, 0x7ff, 0x5, 0x9, 0x6, 0x6, 0x2, 0x8, 0x5, 0x9, 0x9, 0x1, 0x8, 0x1, 0x9, 0x6, 0x2, 0x0, 0x1000, 0x8, 0x2, 0x5, 0x2283eab6, 0x7fff, 0x0, 0x2, 0x6, 0x9, 0x0, 0x5, 0x0, 0x10, 0x9ed, 0x2, 0x79d2, 0xc89, 0x1, 0x2, 0x4, 0x0, 0xfffffe01, 0xf49, 0x6, 0x7, 0xd, 0x4, 0xffffffff, 0x1, 0x6, 0x2, 0x400, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x8, 0x9, 0x9, 0xd920, 0x2, 0x9, 0x650, 0x6, 0xf9, 0x7, 0xb, 0x6, 0xcd, 0x2, 0x7ff, 0xe, 0xd6, 0x7, 0x200, 0x1, 0x9, 0x5f8, 0x0, 0x5, 0xd671, 0xfffffbff, 0x80000001, 0x4, 0x7, 0xb063, 0x9, 0x81, 0xf, 0x200, 0x7, 0x80000000, 0xc, 0x0, 0xfffffff8, 0x6, 0x40, 0x81, 0x5, 0xda, 0x2, 0x2, 0x5, 0x8, 0x7, 0x8000, 0x1, 0x5, 0xd, 0x7, 0x4, 0x1, 0x4, 0x3ebb, 0x6, 0x5, 0x0, 0x8, 0x0, 0x6, 0x8, 0x9, 0x800, 0x800, 0x81, 0x83, 0x80000000, 0x795, 0x80, 0x6, 0x9, 0x10001, 0x9, 0x1, 0x7, 0x1466, 0x0, 0x0, 0x7b, 0xfffffffb, 0x3ff, 0x2, 0x1, 0x5, 0xffff, 0x48, 0x2, 0x4, 0x80000000, 0x200, 0x1, 0x79a, 0x969b, 0x3, 0x0, 0x6ca, 0x5, 0x0, 0x8c, 0x702c, 0x1000, 0xfffffff7, 0x8001, 0xa2a6, 0x2, 0x401, 0x9, 0x0, 0xd, 0xfffffff8, 0xa72c, 0xffeffffb, 0x9, 0x8000, 0x2, 0x401, 0xd161, 0x8, 0x1, 0xfffffc00, 0x1, 0x12a9, 0x3, 0x4000000a, 0x1, 0x6, 0xffffffff, 0x2, 0x2ce, 0x0, 0xc, 0x1, 0x7, 0x4a60, 0x1, 0x81, 0xe9e6, 0x8, 0x3, 0x8ae, 0x4149, 0x3, 0x4b, 0xfffffbff, 0x0, 0x6, 0x1, 0x7, 0x9227, 0x9, 0x1000, 0x8a2, 0x8, 0x400, 0x7fffffff, 0x3, 0xcc97, 0x7, 0x1000, 0xffff, 0x3, 0x3ff, 0x7, 0x3, 0x5, 0xb, 0x0, 0x5, 0x7, 0x3, 0x5, 0x75fb02b5, 0xd834, 0x8, 0xffffff69, 0x9, 0x100, 0x1, 0x2, 0x100, 0xc1, 0x4, 0x8, 0x5, 0x5, 0x8, 0xc020, 0x400, 0x64, 0x2, 0x2c5, 0x4, 0x5, 0x3, 0xb, 0x6, 0x7, 0x5, 0x9, 0x4, 0x6, 0x1, 0x352e, 0x1, 0x6, 0x7ff, 0x3, 0x401, 0x8, 0x2, 0x3, 0xffffffff, 0x8, 0x42b, 0x148bb934, 0x3, 0x9, 0x8, 0x400, 0x5, 0x3ff, 0x5, 0x4, 0x4d75, 0x5, 0xf, 0x8, 0xffffffff, 0xffff3f57, 0x3, 0x5, 0x8b9, 0x0, 0x2, 0x6, 0x100, 0x7a, 0x5, 0x7ff, 0x7, 0x4, 0x5, 0xf47, 0x6, 0x1818, 0x80, 0x3, 0x4, 0x8, 0x1ff, 0x7ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x24fb, 0x1, 0x8cff, 0x3ff, 0x9, 0x9, 0x7, 0x192e, 0x29, 0x996, 0xc0, 0x2, 0x6, 0xe, 0x3d, 0x1, 0x8, 0x2, 0xa7c, 0x80, 0xffff7fff, 0x6, 0x9, 0x8, 0x7fff, 0x1ff, 0xa, 0x4, 0x0, 0x101, 0xc7b, 0x8c4, 0x6, 0x5, 0x8001, 0x0, 0x8, 0x3, 0xa92, 0x8, 0x60000, 0x2, 0x9, 0x81, 0x5, 0x30b6, 0x4cf, 0x200, 0x40, 0x3, 0x85bd, 0x8, 0x4, 0x6, 0x9, 0x6, 0x915, 0x3, 0x5, 0x2, 0x0, 0x1, 0x5, 0x8, 0xffff32e9, 0xa1, 0xa5, 0x80000000, 0x6, 0xe2, 0x80, 0xa94, 0x8, 0x8, 0x9, 0x10, 0x4000000, 0xff, 0x3, 0x6e2e, 0x8, 0x10001, 0xb5, 0x8, 0x9, 0x5, 0x5, 0x8, 0x6, 0x0, 0x401, 0x6, 0x5, 0x2, 0x7, 0x81, 0x4, 0x1, 0xd7b, 0x5, 0x9, 0x7, 0x4, 0x5992, 0x7fff, 0x7, 0x6, 0xffff, 0x0, 0x5, 0x0, 0x8000, 0x6dd, 0x3, 0x1, 0x8, 0x81, 0x4, 0x5, 0x3, 0x4, 0x100, 0x6, 0x5, 0x2, 0x20cb, 0xd, 0x72fa, 0xeeb, 0x0, 0x40, 0x3, 0xb4d8c7ff, 0x5, 0x9, 0x6, 0x6, 0x0, 0x8, 0x80000000, 0x4, 0x0, 0x7, 0xc0c, 0x1, 0x9, 0x6, 0x101, 0x2, 0x2, 0x5, 0x1, 0x7, 0xe, 0x9, 0x6, 0x3, 0x7fff, 0x2, 0x0, 0x1, 0x0, 0x6, 0x3, 0x9, 0x1ca, 0xffffffff, 0x287419fe, 0x328f, 0x7fff, 0x5, 0x9, 0xffffff80, 0x400, 0x4, 0xffffff50, 0x0, 0xfffffffe, 0x6, 0x5, 0x1, 0x3, 0x10001, 0x6, 0x9, 0x4, 0x8001, 0x9, 0x93e, 0x76, 0x6, 0x9, 0x81, 0xffe7, 0x1, 0x10001, 0x6, 0x80000000, 0x3, 0x0, 0xd66c5df0, 0x5, 0x8, 0x3, 0x2, 0x6, 0x7fffffff, 0x3, 0x3, 0x101, 0x1, 0x4, 0xfc14, 0x0, 0x401, 0x3, 0x6a, 0xe0000000, 0x100, 0x9, 0x3, 0x2, 0x10001, 0x5, 0x95cb, 0x2, 0x4, 0x1000, 0x0, 0x2, 0xba600000, 0xa4c, 0x101, 0x101, 0x6, 0x6, 0xffffffff, 0x6, 0x5, 0x6, 0x9, 0x6, 0x4c9e, 0x8, 0x3, 0xf0000000, 0x48a2, 0x7fff, 0x200, 0x9, 0xf593, 0x1, 0x5, 0x9, 0xa, 0x100]}]}, @TCA_CGROUP_ACT={0x42c, 0x1, [@m_mpls={0x94, 0x8, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x890d}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9200}]}, {0x56, 0x6, "7496c87bda5a8053f4308a21ba217874eae977830e61ae8d72c1817abbdea5de411bf962fcb6555dce557033ec268f2db4f93be3b9dac484d4ededc963a8f800d096bfb9a1e4a14fc67ce8741257b7551ed6"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x17c, 0xe, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x21c, 0xcdd, 0xffffffffffffffff, 0x10001, 0x4}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x20000000, 0xaed9, 0xffffffff}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xa, 0x8, 0x2, 0x7}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x5, 0x1, 0xfffffff9}, 0x39}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x0, 0x6, 0x5}, 0x1}}]}, {0xc3, 0x6, "970d8601906aa43345fc8edac43cebaf6c325d650dc66ccac1c80ad8375dd0fd37864a2c5432d9086e8b8666866df705763ebc368702d0b7bfb0b608c3f56d43751e93cd75284e1cc52d025e2513cb3f03b0ba590cf476c636b56a0704313161c42d44d9aae4659429b8638f02c5fa5a6046318ea15532db5103a66b6d5af084282073706e5d0b403f9b7f6be3c2582e687f87d052b720b8820ae57bf335b6530850f6b5a1b84d0ed869783f3a9ca0238b0d22bfe42f9e8db5a6675458b2c6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x100, 0x1e, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x4, 0x3, 0x3, 0x1000}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0xff9d, 0x3, 0x9, 0x6}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0xc, 0x5, 0x8, 0x1}, 0xede}}]}, {0x7c, 0x6, "4389181a4c1ad35616f55e3c085381376875fdf06cdc34140eec9c85d35f3884b7a906beb2446671d2a80d67fe34626fd726e662da5bc947cb4e5761b79e1cdcee75af5acf2228fe443658e5178e2039891af2f417e05fdf9e04f418e8b42c97f039349eecfbfa8c4daefa3f226e237571509c806af48415"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x118, 0x14, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xff, 0x3, 0x5, 0x3, 0x1}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x1}]}, {0xb0, 0x6, "8c27256f24c72c369ee3a794698e1686905723725eb344c0757b0f6247a14dac5e8480e4a28fc0783cdeb4b927f4de04ccce9c528d9754a6c82cc79a8c286cb58e97d50fc623472eaedbd6a0bce6503f0e0204c269bbcf4e3db3a3f4337a078d926eeebb7419531b93e9612482b83591baf0089b83560e1c1b195aa80f5a5906cc8c4a7aab05317ca4dad02351bdaca5ce24719a1a3eb6b5e5221f39e6f5bce4b4edc28dcfb9570bb5bbf370"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x18fc}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000829bd7000ffdbdf2501000000080002000100000014000c0020010000000000000000000000000001080008000400000008000700", @ANYRES32, @ANYBLOB="0c0003000400000000000000080002000100000008000500ffffffff08000100", @ANYRES32=r3, @ANYBLOB="08006df326840a6bc10400640101030500"], 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61128c00000000006113300000000000bf300000000000002500070007ffffffbd0201000000000095002000000000006916320000000000bf6700000000000007070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r8, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0xa}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f00000000c0)=@x86={0x0, 0x9, 0x7d, 0x0, 0x1, 0x9, 0x3, 0x8, 0x1, 0x2, 0x5, 0x40, 0x0, 0x1, 0x1, 0xc0, 0xfd, 0x9, 0x2, '\x00', 0x5, 0xffffffff}) 3.993279403s ago: executing program 2 (id=405): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000004c0)={r2, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)={r3}) (fail_nth: 1) 3.94743817s ago: executing program 1 (id=406): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r4 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070023012000342de39cb5a123bb84b85aee479c071de8020000030000001800018013000100"], 0x2c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r8, &(0x7f0000f62000/0x1000)=nil, 0x7000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6083, 0x3) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) write(r3, &(0x7f0000000280)="ffff0100ffff02000600000088ca", 0xe) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x1}, [{}], {0x4, 0x2}, [], {0x10, 0x1}, {0x20, 0x5}}, 0x2c, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000004c0)={r2, 0x0, 0x4, 0x0, 0x3, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) r11 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r11, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r12 = openat$dsp1(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r12, 0x40186e8d, &(0x7f0000000180)={&(0x7f0000000140)=[{0xd6a, 0x1, 0x0, {0xda5f, 0x10, 0x1}}, {0x5b, 0x1, 0x0, {0x3, 0x6, 0x1}}], 0x2, 0x20, 0xffee, 0x567d}) recvmsg$kcm(r11, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x102) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)={r10}) 3.878574206s ago: executing program 2 (id=407): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb0, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 3.647259959s ago: executing program 2 (id=408): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x40, 0x9, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0xe, "", {{{0x9, 0x5, 0x1, 0x2, 0x220, 0x3, 0x5c, 0x9}}}}}]}}]}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0xffffffffffffffda, 0x4000000000000, {0x0, 0x2, 0x20000000, 0x9, 0x6, 0x0, {0x0, 0x10041, 0xd8, 0xc, 0x2, 0x80000000002, 0x9, 0x0, 0x5, 0xa000, 0xfffffffc, r1, r2, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(0x0, 0x0, r2) syz_usb_connect(0x5, 0x0, 0x0, 0x0) 2.785898208s ago: executing program 1 (id=409): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000100)=@raw=[@ldst={0x3, 0x3, 0x6, 0xa, 0x2, 0xfff8, 0x110}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd27, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}]}, 0x3c}}, 0xc084) ioctl(r0, 0x19, &(0x7f0000000140)="9f5baf9ab4913e5e097b9ca22c1f9aea0d7e6b9a773188e81983763ce95b253a1632a8d4f56744556ee3e524da7fa7839ea4055ee1fc00237fc6b5b720cad80fdf151ffdfabbc2f099a33e5979fa3ac6a142bab0a88424325c3c275b7b1ff489096d0c7a4bfdd9be51c6fb10cc32aabd3de906bb") 2.520089752s ago: executing program 1 (id=411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[], 0x18}}, 0x90) io_setup(0x8, &(0x7f0000000600)) syz_emit_ethernet(0x82, 0x0, 0x0) (async) syz_emit_ethernet(0x82, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) (async) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1a8}}, 0x8000) (async) sendmsg$key(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1a8}}, 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) (async) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x2000000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) (async) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r9}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x440}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r5, @ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x20004001}, 0x200000d4) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r3, 0x0, 0xffffffff000) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000020a01012b656b9d0000030c0004400000000000000003140000001100010000000000000000000200000a00"/81], 0x48}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'dummy0\x00'}) 2.261925459s ago: executing program 0 (id=412): mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl$BLKCRYPTOIMPORTKEY(r0, 0xc0401289, &(0x7f0000000340)={&(0x7f00000002c0)="0daec8189b747a34a8a54931159510898c4b7a88efcc56d6f951c10285", 0x1d, &(0x7f00000015c0)=""/41, 0x29}) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./dev/mapper/control\x00', 0x42, 0x1ff) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") write(r0, &(0x7f0000001740)="00000000afa8f5baa30928acea7ed23a4d11bc00000000008000000000000000000000000000007468496e2d706f6f6c00000000000000373a3020373a31203132382030004054289cf153573e0822337f5a60dfb8e55dfa7c4a7247dfa5fef6e6b62ab4f7581bc7e3cd79fef775b7ceaf71756881080110999dcc89d11e57b2391d5988a88c60781e476a47d03ee6e7a5a9d1b6eb6ce809e512f19f75a810f8c4", 0xa1) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000") mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000001680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000120000luser_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRESOCT]) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000004c0)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r4, 0x7e7}}, 0x10) poll(&(0x7f0000000200)=[{r1, 0x6188}], 0x1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0xfffffffc, 0x0, 0xfffffff9, 0x15f, 0x1b, '\x00\x00\x00\x00\b\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r8, 0xc0406400, &(0x7f0000000080)={0x8, 0x0, 0xfffffffd, 0xc, 0x0, 0x1000, &(0x7f0000002240)=""/4096, 0x0, 0x0}) openat$fuse(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001640)=ANY=[@ANYRESOCT=r3, @ANYRES16=r6, @ANYRES16=r1, @ANYRES32=r7, @ANYBLOB="362f5a8d1ddf3d8a0d90bc4ae20a82765cd631"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008084) r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc044560f, &(0x7f00000001c0)=@mmap={0x2, 0x2, 0x4, 0xbcab6cea43ea3f8b, 0x0, {}, {0x2, 0x0, 0x2, 0x0, 0x0, 0x4, "2063569a"}, 0xffffffed, 0x1, {}, 0x6f0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1d9) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x20002, 0x0) 2.259494919s ago: executing program 3 (id=413): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) pwrite64(r1, &(0x7f0000000200)='\x00', 0x1, 0x1000000) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) pwrite64(r2, 0x0, 0x0, 0x2000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd01, &(0x7f0000000000)) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f") r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dum\x00', 0x42, 0x1ff) write(r6, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0x35) ioctl(r5, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f") r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 2.107903586s ago: executing program 0 (id=414): mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/config.gz\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000100)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) r3 = syz_open_pts(r2, 0x5099c1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r4, 0x8914, &(0x7f0000000400)="736c300000000000000000000000000001") ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000803)=0xc4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSKBLED(r6, 0x4b65, 0x79e) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x3, 0x3ff, 0x15, @empty, @ipv4={'\x00', '\xff\xff', @remote}, 0x61, 0x700, 0x8, 0x3}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x700, 0x7800, 0xfffffff7, 0x5, {{0x11, 0x4, 0x2, 0x37, 0x44, 0x64, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @loopback, {[@generic={0x86, 0x9, "aacdf667d49e84"}, @lsrr={0x83, 0xf, 0x7e, [@broadcast, @private=0xa010102, @local]}, @cipso={0x86, 0x15, 0x0, [{0x5, 0xf, "fa1e26753ebbeaf1f8b125b5e4"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x0, 0x40, 0x62, 0xd, 0x20, @rand_addr=' \x01\x00', @remote, 0x80, 0x40, 0x3, 0x8}}) getpeername$packet(r11, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0xfffffffffffffe39) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001c80)={&(0x7f0000000040), 0xc, &(0x7f0000001c40)={&(0x7f0000000840)=ANY=[@ANYBLOB="e4130000", @ANYRES16=r5, @ANYBLOB="000425bd7000fbdbdf250c00000070000180140002006970766c616e30000000000000000000140002006e65747063693000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="1400020070696d3672656700000000000000000008000300000000000800030002000000080003000100000008000300000000002c00018008000100", @ANYRES32=r13, @ANYBLOB="0800030002000000080003000100000008000100", @ANYRES32=r14, @ANYBLOB, @ANYRES32=r15, @ANYBLOB], 0x13e4}, 0x1, 0x0, 0x0, 0x20000810}, 0x4008040) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000006c0)={&(0x7f0000000600)="6bcb0e1110ff38e58d43bcef62ae0252ec6eb241fa8479be54aaa574e052e9b9c7aef7f67ee9165ee064c2c7d67880293c53a40c07ab250f3b5501dcf6ba769d3edd4fa8c9add5b66b545f257a6a601974f3e2d393fc4cd6a5276c22feb60971b8e325679e458fc7531768028504b5bf8a946ee2b768728f6f9949a998914adbc2de", 0x82, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000740)={&(0x7f0000000700)=[0x0, r16, r17, 0x0, 0x0], 0x5, 0x80000}) 1.358237829s ago: executing program 0 (id=415): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0xbcab6cea43ea3f8b, 0x1000000, {}, {0x2, 0x8, 0x2, 0x0, 0x0, 0x0, "2063569a"}, 0xffffffed, 0x1, {}, 0x6f0}) 1.251483767s ago: executing program 0 (id=416): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0xe000}, 0x1c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="862754104f255376a86303db64ff22212f7e"], 0x48) r4 = syz_clone(0x5101011, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x13) tkill(r4, 0x12) waitid(0x0, 0x0, 0x0, 0x100000e, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x40000000, 0x3, 0x3, 0x1}, 0x8) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000004c0)='./file1\x00', 0x0, 0x10}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40243, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000300"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x23, &(0x7f0000000840)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x9, 0x3a, &(0x7f00000009c0)=""/58, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x5, 0xc, 0x3, 0xfc000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r3, 0xffffffffffffffff, r9, 0xffffffffffffffff, r9, r5], 0x0, 0x10, 0x1}, 0x94) syz_open_dev$evdev(&(0x7f0000000280), 0x6, 0x600080) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f0000000740)={{r3, &(0x7f0000000300)='),.\']:::\x00', 0x0, &(0x7f0000000540)={@_ha_fsid={[0xa, 0x3]}, {0x6, 0x2, 0x1, 0x2}}, 0x4, &(0x7f00000002c0), 0x0}, {[0xfffffffa, 0x5, 0x1ff, 0x12]}, 0x4, 0xdf, &(0x7f0000000640)=""/223}) ioctl$EVIOCGEFFECTS(r10, 0x80044584, &(0x7f0000000780)=""/30) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{0x0}], 0x1) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r11, 0x1, &(0x7f0000001300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x7, r8, 0x0}]) write$tun(r7, &(0x7f0000003480)=ANY=[], 0x1116) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYRES8, @ANYRES8=r5, @ANYRESDEC], 0x18}, 0x1, 0x0, 0x0, 0x4000844}, 0x805) socket$nl_generic(0x10, 0x3, 0x10) 1.112595513s ago: executing program 2 (id=417): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0xfff, &(0x7f0000000200)=0x4) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x10, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/pci0000:00/0000:00:02.0/driver\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000180)='unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:02.0\x00', 0xd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x3c, r4, 0x731, 0x70bd2d, 0x25dfdbfe, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x4000000}, 0x0) close(r2) close(r1) 922.267857ms ago: executing program 3 (id=418): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x1000, 0x6, {{0xf, 0x4, 0x0, 0x8, 0x3c, 0x67, 0x0, 0x40, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, {[@generic={0x94, 0x11, "3f3787442adf6b685f72f084506013"}, @ssrr={0x89, 0xb, 0x34, [@empty, @loopback]}, @ssrr={0x89, 0xb, 0x91, [@loopback, @broadcast]}]}}}}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x44, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xfffff5d4}}, './file0\x00'}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() listns(&(0x7f0000000b80)={0x20, 0x0, 0x7, 0x4000000}, 0x0, 0xf4240, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='limits\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r3, r4+60000000}, &(0x7f0000000280)={0x0}) fsopen(0x0, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 921.655529ms ago: executing program 1 (id=419): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d000000e5110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x0, 0xff}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000180)={0x60, r3, 0x401, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xb}, @device_b, @device_a, @random="1aa865997bd3", {0x4, 0x7f}, @value=@ver_80211n={0x0, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0xa22e, 0x68, @default, @val, @val={0x2d, 0x1a, {0x8000, 0x3, 0x4, 0x0, {0xfff, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800, 0x6, 0x4}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 42.439146ms ago: executing program 0 (id=420): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_aout(r0, &(0x7f0000000440)={{0x10b, 0x9, 0x1, 0x360, 0x31d, 0xfffffffc, 0x164, 0x5}, "dff07d7663887083c787d619977694c6acecc1ef9165b3a7b16f30001b0bf6d8e747e9229f57ad91a8ea91e7288efa161adba63666ba5fad951241f78e3b719c06d57e6e12a8d3a93ebdd879ebd219cda0be59a96b65ecacaabde3ae9fab24c76713cc21e83fa92a26e0b59d8238b65ad01221799d52bc64f689a249d39b2c147462357f02d73644c4be0e9215d0fcc640289e3cb8d39f360046abca7675fa6d0fce981b172bf35b0dbc52a15bd426f3c343aded3a280672e872bec0c620f4e5171c719a68846c2eb222908c28c203638c45c97c208ec3f88db606c48e0c519f6fe1a2f338f39677af1a13929eec6958", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa10) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x4c002, 0x0) write(r4, &(0x7f0000000300)="8781126b97", 0xfffffd22) r5 = geteuid() statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x6000, 0x2, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x40800) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000001140)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe4) write$P9_RSTATu(r4, &(0x7f00000010c0)={0x4b, 0x7d, 0x1, {{0x0, 0x35, 0x7, 0x7, {0x2, 0x0, 0x5}, 0x40000, 0x4, 0xad2b, 0x1, 0x0, '', 0x1, '\x00', 0x0, '', 0x1, '}'}, 0x1, '&', r5, r6, r8}}, 0x4b) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) 41.357712ms ago: executing program 0 (id=421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000010101020000000000000000020000092000018006000340000400001400018008"], 0x58}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000000600010400"/20, @ANYRES32=r2], 0x78}}, 0x0) 0s ago: executing program 1 (id=422): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x10, 0x0, 0x8}]}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty=0x60}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0xfd33) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) kernel console output (not intermixed with test programs): Setting the MTU to 1532 would solve the problem. [ 103.506932][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.518915][ T5765] team0: Port device team_slave_1 added [ 103.525952][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.529863][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.529881][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.529904][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.710671][ T5759] hsr_slave_0: entered promiscuous mode [ 103.711518][ T5759] hsr_slave_1: entered promiscuous mode [ 103.715381][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.715396][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.715416][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.717604][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.717619][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.717639][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.781315][ T5762] hsr_slave_0: entered promiscuous mode [ 103.782599][ T5762] hsr_slave_1: entered promiscuous mode [ 103.783636][ T5762] debugfs: 'hsr0' already exists in 'hsr' [ 103.783709][ T5762] Cannot create hsr debugfs directory [ 103.832231][ T5767] team0: Port device team_slave_0 added [ 103.897327][ T5767] team0: Port device team_slave_1 added [ 103.984309][ T5765] hsr_slave_0: entered promiscuous mode [ 103.985566][ T5765] hsr_slave_1: entered promiscuous mode [ 103.986186][ T5765] debugfs: 'hsr0' already exists in 'hsr' [ 103.986246][ T5765] Cannot create hsr debugfs directory [ 104.058654][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.058670][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.058689][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.060738][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.060751][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.060769][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.165908][ T5767] hsr_slave_0: entered promiscuous mode [ 104.166988][ T5767] hsr_slave_1: entered promiscuous mode [ 104.167657][ T5767] debugfs: 'hsr0' already exists in 'hsr' [ 104.167676][ T5767] Cannot create hsr debugfs directory [ 104.771629][ T5759] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.801084][ T67] Bluetooth: hci0: command tx timeout [ 104.818998][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.822300][ T5759] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.839057][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.840048][ T5759] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.844806][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.845633][ T5759] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.855908][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.876948][ T67] Bluetooth: hci1: command tx timeout [ 104.941103][ T67] Bluetooth: hci2: command tx timeout [ 105.018864][ T5762] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.028181][ T67] Bluetooth: hci3: command tx timeout [ 105.032501][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.036411][ T5762] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.073013][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.092239][ T5762] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.137266][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.157262][ T5762] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.166769][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.343672][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.370363][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.371284][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.379924][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.408656][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.425819][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.426592][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.431969][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.587040][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.803274][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.932402][ T488] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.932534][ T488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.954154][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.955057][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.023255][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.024037][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.046649][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.106462][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.139541][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.141255][ T488] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.141338][ T488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.189893][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.203826][ T5765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.248820][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.267573][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.267657][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.333617][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.333703][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.560563][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.570615][ T5762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.657894][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.703799][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.703945][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.766012][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.766169][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.843372][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.888221][ T67] Bluetooth: hci0: command tx timeout [ 106.955384][ T67] Bluetooth: hci1: command tx timeout [ 106.992255][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.021000][ T67] Bluetooth: hci2: command tx timeout [ 107.036252][ T488] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.036352][ T488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.069385][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.069470][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.102484][ T67] Bluetooth: hci3: command tx timeout [ 107.897970][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.018867][ T5759] veth0_vlan: entered promiscuous mode [ 108.041676][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.072985][ T5759] veth1_vlan: entered promiscuous mode [ 108.129265][ T5762] veth0_vlan: entered promiscuous mode [ 108.189111][ T5762] veth1_vlan: entered promiscuous mode [ 108.192546][ T5759] veth0_macvtap: entered promiscuous mode [ 108.222252][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.258042][ T5759] veth1_macvtap: entered promiscuous mode [ 108.377968][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.382132][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.621121][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.622542][ T5762] veth0_macvtap: entered promiscuous mode [ 108.633192][ T5762] veth1_macvtap: entered promiscuous mode [ 108.691318][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.691632][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.691669][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.691703][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.693239][ T5767] veth0_vlan: entered promiscuous mode [ 108.713964][ T5767] veth1_vlan: entered promiscuous mode [ 108.750729][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.780364][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.842655][ T5598] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.842798][ T5598] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.842829][ T5598] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.842855][ T5598] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.936217][ T5767] veth0_macvtap: entered promiscuous mode [ 108.960472][ T67] Bluetooth: hci0: command tx timeout [ 108.975152][ T5767] veth1_macvtap: entered promiscuous mode [ 109.025999][ T5765] veth0_vlan: entered promiscuous mode [ 109.031685][ T67] Bluetooth: hci1: command tx timeout [ 109.051775][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.051809][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.117155][ T5765] veth1_vlan: entered promiscuous mode [ 109.122662][ T67] Bluetooth: hci2: command tx timeout [ 109.188213][ T67] Bluetooth: hci3: command tx timeout [ 109.278988][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.281053][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.281075][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.474512][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.474820][ T5765] veth0_macvtap: entered promiscuous mode [ 109.506153][ T348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.506201][ T348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.539910][ T5765] veth1_macvtap: entered promiscuous mode [ 109.638209][ T5759] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.647808][ T5759] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 109.665053][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.670477][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.670499][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.676141][ T5759] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 109.678260][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.682548][ T5759] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 109.776288][ T5759] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 110.050548][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.062701][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.062747][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.062785][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.062816][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.062847][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.062877][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.062907][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.090104][ T348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.090127][ T348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.305649][ T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.305674][ T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.438535][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.438557][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.830690][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.830713][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.280597][ T5912] Zero length message leads to an empty skb [ 112.560637][ T5904] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 112.754372][ T5904] usb 7-1: Using ep0 maxpacket: 8 [ 112.756762][ T5904] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.758787][ T5904] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 112.758901][ T5904] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.758917][ T5904] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.758933][ T5904] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.758947][ T5904] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.758979][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.378047][ T5904] usb 7-1: GET_CAPABILITIES returned 0 [ 113.378094][ T5904] usbtmc 7-1:16.0: can't read capabilities [ 113.645089][ T5904] usb 7-1: USB disconnect, device number 2 [ 113.951598][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 114.861543][ T5938] loop0: detected capacity change from 0 to 32768 [ 114.865072][ T5938] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 115.244969][ T5941] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 117.623111][ T5935] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 118.517811][ T5935] device-mapper: table: 248:0: thin-pool: Error creating pool's kcopyd client (-ENOMEM) [ 118.517991][ T5935] device-mapper: ioctl: error adding target to table [ 118.737279][ T5962] syzkaller1: entered promiscuous mode [ 118.737307][ T5962] syzkaller1: entered allmulticast mode [ 119.420832][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 119.738823][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 119.744523][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.745874][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 119.745912][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.745927][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.745947][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.745966][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.745998][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.301045][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 120.301084][ T9] usbtmc 8-1:16.0: can't read capabilities [ 120.724008][ T10] usb 8-1: USB disconnect, device number 2 [ 121.622593][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 122.563011][ T5986] FAULT_INJECTION: forcing a failure. [ 122.563011][ T5986] name failslab, interval 1, probability 0, space 0, times 1 [ 122.563045][ T5986] CPU: 1 UID: 0 PID: 5986 Comm: syz.3.19 Not tainted syzkaller #0 PREEMPT(full) [ 122.563064][ T5986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.563076][ T5986] Call Trace: [ 122.563084][ T5986] [ 122.563091][ T5986] dump_stack_lvl+0x100/0x190 [ 122.563119][ T5986] should_fail_ex.cold+0x5/0xa [ 122.563142][ T5986] should_failslab+0xc2/0x120 [ 122.563166][ T5986] __kmalloc_noprof+0xfc/0x840 [ 122.563185][ T5986] ? io_alloc_file_tables+0x60/0xb0 [ 122.563207][ T5986] io_alloc_file_tables+0x60/0xb0 [ 122.563227][ T5986] io_sqe_files_register+0x186/0x970 [ 122.563258][ T5986] ? __pfx_io_sqe_files_register+0x10/0x10 [ 122.563294][ T5986] __do_sys_io_uring_register+0xf69/0x1bc0 [ 122.563325][ T5986] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.563356][ T5986] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 122.563390][ T5986] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 122.563417][ T5986] ? xfd_validate_state+0x129/0x190 [ 122.563459][ T5986] __do_fast_syscall_32+0x13a/0x8b0 [ 122.563488][ T5986] ? lockdep_hardirqs_on+0x7d/0x110 [ 122.563517][ T5986] do_fast_syscall_32+0x32/0x70 [ 122.563546][ T5986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.563570][ T5986] RIP: 0023:0xf7fc3fec [ 122.563593][ T5986] Code: Unable to access opcode bytes at 0xf7fc3fc2. [ 122.563601][ T5986] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 00000000000001ab [ 122.563620][ T5986] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000002 [ 122.563631][ T5986] RDX: 0000000080002d40 RSI: 0000000000000020 RDI: 0000000000000000 [ 122.563642][ T5986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.563653][ T5986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.563663][ T5986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.563693][ T5986] [ 122.992246][ T5983] loop0: detected capacity change from 0 to 32768 [ 123.053052][ T5983] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 123.552669][ T5997] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 123.906858][ T6006] random: crng reseeded on system resumption [ 124.134058][ T6006] input: syz1 as /devices/virtual/input/input5 [ 124.219191][ T6012] netlink: 56 bytes leftover after parsing attributes in process `syz.1.24'. [ 124.491712][ T6016] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 125.147264][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 125.888896][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 126.037626][ T6032] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 126.665082][ T6040] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 126.916298][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 127.857977][ T6052] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 129.882111][ T6072] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 130.906187][ T6075] netlink: 40 bytes leftover after parsing attributes in process `syz.3.44'. [ 131.559496][ T6067] FAULT_INJECTION: forcing a failure. [ 131.559496][ T6067] name failslab, interval 1, probability 0, space 0, times 0 [ 131.559534][ T6067] CPU: 2 UID: 0 PID: 6067 Comm: syz.0.37 Not tainted syzkaller #0 PREEMPT(full) [ 131.559558][ T6067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.559571][ T6067] Call Trace: [ 131.559580][ T6067] [ 131.559588][ T6067] dump_stack_lvl+0x100/0x190 [ 131.559620][ T6067] should_fail_ex.cold+0x5/0xa [ 131.559647][ T6067] should_failslab+0xc2/0x120 [ 131.559671][ T6067] __kvmalloc_node_noprof+0x113/0x9b0 [ 131.559696][ T6067] ? trace_contention_end+0x126/0x160 [ 131.559725][ T6067] ? io_rsrc_data_alloc+0x2c/0xa0 [ 131.559760][ T6067] io_rsrc_data_alloc+0x2c/0xa0 [ 131.559798][ T6067] io_alloc_file_tables+0x27/0xb0 [ 131.559821][ T6067] io_sqe_files_register+0x186/0x970 [ 131.559855][ T6067] ? __pfx_io_sqe_files_register+0x10/0x10 [ 131.559894][ T6067] __do_sys_io_uring_register+0xf69/0x1bc0 [ 131.559929][ T6067] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.559959][ T6067] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 131.559991][ T6067] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 131.560018][ T6067] ? xfd_validate_state+0x129/0x190 [ 131.560059][ T6067] __do_fast_syscall_32+0x13a/0x8b0 [ 131.560088][ T6067] ? lockdep_hardirqs_on+0x7d/0x110 [ 131.560116][ T6067] do_fast_syscall_32+0x32/0x70 [ 131.560145][ T6067] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.560219][ T6067] RIP: 0023:0xf708efec [ 131.560245][ T6067] Code: Unable to access opcode bytes at 0xf708efc2. [ 131.560255][ T6067] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 00000000000001ab [ 131.560277][ T6067] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000002 [ 131.560289][ T6067] RDX: 0000000080002d40 RSI: 0000000000000020 RDI: 0000000000000000 [ 131.560302][ T6067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.560315][ T6067] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 131.560327][ T6067] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.560354][ T6067] [ 131.719490][ T6078] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.152315][ T6075] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 132.419294][ T6088] random: crng reseeded on system resumption [ 132.568229][ T6099] netlink: 56 bytes leftover after parsing attributes in process `syz.0.39'. [ 133.166344][ T6096] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 134.650752][ T6116] syz.0.42 uses obsolete (PF_INET,SOCK_PACKET) [ 134.840780][ T6129] raw_sendmsg: syz.3.43 forgot to set AF_INET. Fix it! [ 135.021047][ T6132] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 135.670126][ T6129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.821792][ T56] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 137.206294][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 137.207105][ T56] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.208370][ T56] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 137.208420][ T56] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.208442][ T56] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.208466][ T56] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.208487][ T56] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.208526][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.446766][ T6169] usb usb8: usbfs: process 6169 (syz.2.52) did not claim interface 0 before use [ 137.689374][ T6172] random: crng reseeded on system resumption [ 137.765891][ T6167] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 137.802571][ T6175] netlink: 56 bytes leftover after parsing attributes in process `syz.2.53'. [ 137.811087][ T6172] input: syz1 as /devices/virtual/input/input7 [ 138.365101][ T56] usb 6-1: GET_CAPABILITIES returned 0 [ 138.365140][ T56] usbtmc 6-1:16.0: can't read capabilities [ 138.389910][ T6180] usb usb8: usbfs: process 6180 (syz.3.54) did not claim interface 0 before use [ 138.567285][ T5904] usb 6-1: USB disconnect, device number 2 [ 138.588805][ T6185] warning: `syz.3.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 139.027969][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.028033][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.053446][ T6195] erspan0: entered promiscuous mode [ 139.878405][ T6209] 8021q: VLANs not supported on tunl0 [ 139.948048][ T6213] gfs2: error -5 reading superblock [ 140.602111][ T6242] FAULT_INJECTION: forcing a failure. [ 140.602111][ T6242] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 140.602144][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz.1.70 Not tainted syzkaller #0 PREEMPT(full) [ 140.602167][ T6242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.602180][ T6242] Call Trace: [ 140.602186][ T6242] [ 140.602195][ T6242] dump_stack_lvl+0x100/0x190 [ 140.602226][ T6242] should_fail_ex.cold+0x5/0xa [ 140.602252][ T6242] strncpy_from_user+0x3b/0x2d0 [ 140.602283][ T6242] do_getname+0x78/0x390 [ 140.602331][ T6242] do_sys_openat2+0xc7/0x1e0 [ 140.602359][ T6242] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.602385][ T6242] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.602420][ T6242] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 140.602447][ T6242] __ia32_compat_sys_openat+0x12d/0x210 [ 140.602478][ T6242] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 140.602517][ T6242] do_int80_emulation+0x166/0x650 [ 140.602550][ T6242] asm_int80_emulation+0x1a/0x20 [ 140.602569][ T6242] RIP: 0023:0xf71775ab [ 140.602585][ T6242] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 140.602602][ T6242] RSP: 002b:00000000f542d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 140.602622][ T6242] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f542d490 [ 140.602635][ T6242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.602645][ T6242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.602657][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.602667][ T6242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.602692][ T6242] [ 140.841001][ T6244] FAULT_INJECTION: forcing a failure. [ 140.841001][ T6244] name failslab, interval 1, probability 0, space 0, times 0 [ 140.841033][ T6244] CPU: 1 UID: 0 PID: 6244 Comm: syz.2.72 Not tainted syzkaller #0 PREEMPT(full) [ 140.841057][ T6244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.841070][ T6244] Call Trace: [ 140.841076][ T6244] [ 140.841084][ T6244] dump_stack_lvl+0x100/0x190 [ 140.841115][ T6244] should_fail_ex.cold+0x5/0xa [ 140.841139][ T6244] should_failslab+0xc2/0x120 [ 140.841166][ T6244] __kmalloc_cache_noprof+0x91/0x6d0 [ 140.841196][ T6244] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 140.841222][ T6244] ? snd_seq_timer_new+0x44/0x1a0 [ 140.841249][ T6244] snd_seq_timer_new+0x44/0x1a0 [ 140.841274][ T6244] snd_seq_queue_alloc+0x177/0x540 [ 140.841297][ T6244] snd_seq_ioctl_create_queue+0xa9/0x370 [ 140.841323][ T6244] call_seq_client_ctl+0xa3/0x130 [ 140.841351][ T6244] snd_seq_kernel_client_ctl+0x35/0x50 [ 140.841376][ T6244] alloc_seq_queue+0xdb/0x180 [ 140.841400][ T6244] ? __pfx_alloc_seq_queue+0x10/0x10 [ 140.841435][ T6244] ? find_held_lock+0x2b/0x80 [ 140.841457][ T6244] ? mark_held_locks+0x40/0x70 [ 140.841484][ T6244] snd_seq_oss_open+0x2b2/0xa10 [ 140.841513][ T6244] odev_open+0x6f/0x90 [ 140.841534][ T6244] ? __pfx_odev_open+0x10/0x10 [ 140.841555][ T6244] soundcore_open+0x2e3/0x5a0 [ 140.841581][ T6244] ? __pfx_soundcore_open+0x10/0x10 [ 140.841604][ T6244] chrdev_open+0x234/0x6a0 [ 140.841624][ T6244] ? __pfx_apparmor_file_open+0x10/0x10 [ 140.841652][ T6244] ? __pfx_chrdev_open+0x10/0x10 [ 140.841673][ T6244] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 140.841711][ T6244] do_dentry_open+0x6ab/0x14d0 [ 140.841730][ T6244] ? __pfx_chrdev_open+0x10/0x10 [ 140.841757][ T6244] vfs_open+0x82/0x3f0 [ 140.841786][ T6244] path_openat+0x19fa/0x2440 [ 140.841812][ T6244] ? __pfx_path_openat+0x10/0x10 [ 140.841843][ T6244] do_file_open+0x20e/0x430 [ 140.841868][ T6244] ? __pfx_do_file_open+0x10/0x10 [ 140.841908][ T6244] ? _raw_spin_unlock+0x28/0x50 [ 140.841930][ T6244] ? alloc_fd+0x471/0x7a0 [ 140.841956][ T6244] do_sys_openat2+0x10f/0x1e0 [ 140.841980][ T6244] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.842005][ T6244] ? __local_bh_enable_ip+0xa5/0x120 [ 140.842069][ T6244] __ia32_compat_sys_openat+0x12d/0x210 [ 140.842116][ T6244] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 140.842160][ T6244] __do_fast_syscall_32+0x13a/0x8b0 [ 140.842191][ T6244] do_fast_syscall_32+0x32/0x70 [ 140.842219][ T6244] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.842245][ T6244] RIP: 0023:0xf7f34fec [ 140.842268][ T6244] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 140.842276][ T6244] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 140.842296][ T6244] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 140.842308][ T6244] RDX: 0000000000080d02 RSI: 000000000000bf00 RDI: 0000000000000000 [ 140.842321][ T6244] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.842332][ T6244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.842344][ T6244] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.842374][ T6244] [ 141.692400][ T5859] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 141.888870][ T5859] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 141.890704][ T5859] usb 5-1: config 0 has no interfaces? [ 141.893365][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.893387][ T5859] usb 5-1: Product: syz [ 141.893398][ T5859] usb 5-1: Manufacturer: syz [ 141.893410][ T5859] usb 5-1: SerialNumber: syz [ 141.915836][ T5859] usb 5-1: config 0 descriptor?? [ 141.993698][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 142.156338][ T10] usb 5-1: USB disconnect, device number 2 [ 142.289412][ T6261] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 142.895853][ T6266] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 143.810624][ T6285] random: crng reseeded on system resumption [ 144.228765][ T6295] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 144.346952][ T6298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85'. [ 144.346974][ T6298] netlink: 48 bytes leftover after parsing attributes in process `syz.2.85'. [ 145.314548][ T6316] ======================================================= [ 145.314548][ T6316] WARNING: The mand mount option has been deprecated and [ 145.314548][ T6316] and is ignored by this kernel. Remove the mand [ 145.314548][ T6316] option from the mount to silence this warning. [ 145.314548][ T6316] ======================================================= [ 145.315745][ T6316] jffs2: notice: (6316) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 145.390418][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 145.540320][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 145.541096][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.542092][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 145.542133][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.542149][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.542167][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.542184][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.542214][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.845924][ T6319] binder: 6318:6319 ioctl 3ba0 80000040 returned -22 [ 145.915529][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 145.928631][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 145.928669][ T9] usbtmc 8-1:16.0: can't read capabilities [ 145.949309][ T10] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 145.982084][ T6321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.131970][ T5865] usb 8-1: USB disconnect, device number 3 [ 146.233496][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 146.321749][ T6330] FAULT_INJECTION: forcing a failure. [ 146.321749][ T6330] name failslab, interval 1, probability 0, space 0, times 0 [ 146.321780][ T6330] CPU: 0 UID: 0 PID: 6330 Comm: syz.1.93 Not tainted syzkaller #0 PREEMPT(full) [ 146.321802][ T6330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.321813][ T6330] Call Trace: [ 146.321819][ T6330] [ 146.321826][ T6330] dump_stack_lvl+0x100/0x190 [ 146.321854][ T6330] should_fail_ex.cold+0x5/0xa [ 146.321877][ T6330] should_failslab+0xc2/0x120 [ 146.321901][ T6330] __kmalloc_noprof+0xfc/0x840 [ 146.321920][ T6330] ? tomoyo_realpath_from_path+0x19c/0x690 [ 146.321941][ T6330] ? tomoyo_encode2+0xfb/0x3c0 [ 146.321962][ T6330] tomoyo_encode2+0xfb/0x3c0 [ 146.321984][ T6330] tomoyo_encode+0x29/0x50 [ 146.321999][ T6330] tomoyo_mount_acl+0x388/0x8b0 [ 146.322052][ T6330] ? is_bpf_text_address+0x8a/0x1a0 [ 146.322075][ T6330] ? is_bpf_text_address+0x8a/0x1a0 [ 146.322100][ T6330] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 146.322125][ T6330] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 146.322147][ T6330] ? kernel_text_address+0x8d/0x100 [ 146.322166][ T6330] ? unwind_get_return_address+0x59/0xa0 [ 146.322185][ T6330] ? arch_stack_walk+0xa6/0xf0 [ 146.322204][ T6330] ? __lock_acquire+0x5c0/0x1f40 [ 146.322238][ T6330] ? tomoyo_mount_permission+0x1f6/0x460 [ 146.322266][ T6330] ? tomoyo_domain+0xb2/0x150 [ 146.322285][ T6330] ? tomoyo_profile+0x47/0x60 [ 146.322307][ T6330] tomoyo_mount_permission+0x214/0x460 [ 146.322331][ T6330] ? tomoyo_mount_permission+0x1f6/0x460 [ 146.322357][ T6330] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 146.322398][ T6330] security_sb_mount+0xdd/0x270 [ 146.322424][ T6330] path_mount+0x158/0x24c0 [ 146.322453][ T6330] ? __pfx_path_mount+0x10/0x10 [ 146.322475][ T6330] ? lockdep_hardirqs_on+0x7d/0x110 [ 146.322505][ T6330] ? putname+0xb1/0x110 [ 146.322526][ T6330] ? kmem_cache_free+0x127/0x6c0 [ 146.322564][ T6330] ? __ia32_sys_mount+0x292/0x310 [ 146.322587][ T6330] __ia32_sys_mount+0x292/0x310 [ 146.322611][ T6330] ? __pfx___ia32_sys_mount+0x10/0x10 [ 146.322634][ T6330] ? ksys_write+0x1ac/0x250 [ 146.322653][ T6330] ? __pfx_ksys_write+0x10/0x10 [ 146.322676][ T6330] __do_fast_syscall_32+0x13a/0x8b0 [ 146.322709][ T6330] ? lockdep_hardirqs_on+0x7d/0x110 [ 146.322737][ T6330] do_fast_syscall_32+0x32/0x70 [ 146.322763][ T6330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.322785][ T6330] RIP: 0023:0xf703efec [ 146.322807][ T6330] Code: Unable to access opcode bytes at 0xf703efc2. [ 146.322816][ T6330] RSP: 002b:00000000f540c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 146.322836][ T6330] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000240 [ 146.322846][ T6330] RDX: 0000000000000000 RSI: 0000000002290034 RDI: 0000000000000000 [ 146.322855][ T6330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.322863][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.322872][ T6330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.322894][ T6330] [ 146.535336][ T6319] ceph: No mds server is up or the cluster is laggy [ 146.724322][ T6337] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 146.947024][ T6341] process 'syz.2.98' launched '/dev/fd/3' with NULL argv: empty string added [ 147.007476][ T6341] IPVS: set_ctl: invalid protocol: 85 224.0.0.2:20003 [ 147.421400][ T5865] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 147.567606][ T6354] netlink: 68 bytes leftover after parsing attributes in process `syz.0.102'. [ 147.600601][ T5865] usb 8-1: Using ep0 maxpacket: 8 [ 147.601468][ T5865] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 147.602848][ T5865] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.602869][ T5865] usb 8-1: config 0 has no interface number 0 [ 147.602931][ T5865] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.602965][ T5865] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.585008][ T5865] usb 8-1: config 0 descriptor?? [ 150.585697][ T5865] usb 8-1: can't set config #0, error -71 [ 150.623501][ T5865] usb 8-1: USB disconnect, device number 4 [ 151.346347][ T57] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 151.500037][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 151.506285][ T57] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 151.507243][ T57] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 151.507282][ T57] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.507299][ T57] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 151.507315][ T57] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.507334][ T57] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.507366][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.714800][ T6385] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 152.000484][ T56] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 152.130538][ T56] usb 8-1: device descriptor read/64, error -71 [ 152.256662][ T57] usb 7-1: usb_control_msg returned -71 [ 152.256711][ T57] usbtmc 7-1:16.0: can't read capabilities [ 152.272493][ T57] usb 7-1: USB disconnect, device number 3 [ 152.372124][ T56] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 152.502720][ T56] usb 8-1: device descriptor read/64, error -71 [ 152.620872][ T56] usb usb8-port1: attempt power cycle [ 152.966700][ T56] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 152.983194][ T56] usb 8-1: device descriptor read/8, error -71 [ 153.220272][ T56] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 153.245085][ T56] usb 8-1: device descriptor read/8, error -71 [ 153.356262][ T56] usb usb8-port1: unable to enumerate USB device [ 154.430302][ T3380] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 154.598040][ T3380] usb 5-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 154.599244][ T3380] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.599282][ T3380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.609346][ T3380] usb 5-1: config 0 descriptor?? [ 154.950371][ T5099] Bluetooth: hci2: command 0x0406 tx timeout [ 155.287736][ T6424] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 155.301480][ T3380] usbhid 5-1:0.0: can't add hid device: -71 [ 155.301615][ T3380] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 155.326860][ T3380] usb 5-1: USB disconnect, device number 3 [ 155.758250][ T5865] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 155.925483][ T5865] usb 7-1: Using ep0 maxpacket: 8 [ 155.931867][ T5865] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.933295][ T5865] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 155.933335][ T5865] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.933353][ T5865] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.933371][ T5865] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.933388][ T5865] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.933419][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.317311][ T5865] usb 7-1: GET_CAPABILITIES returned 0 [ 156.317355][ T5865] usbtmc 7-1:16.0: can't read capabilities [ 156.428961][ T6445] netlink: 54 bytes leftover after parsing attributes in process `syz.3.125'. [ 156.522854][ T5904] usb 7-1: USB disconnect, device number 4 [ 157.124739][ T6459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.128'. [ 157.328694][ T6465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.129'. [ 157.409585][ T6465] FAULT_INJECTION: forcing a failure. [ 157.409585][ T6465] name fail_futex, interval 1, probability 0, space 0, times 1 [ 157.409612][ T6465] CPU: 3 UID: 0 PID: 6465 Comm: syz.2.129 Not tainted syzkaller #0 PREEMPT(full) [ 157.409628][ T6465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.409636][ T6465] Call Trace: [ 157.409641][ T6465] [ 157.409647][ T6465] dump_stack_lvl+0x100/0x190 [ 157.409678][ T6465] should_fail_ex.cold+0x5/0xa [ 157.409697][ T6465] get_futex_key+0x1d0/0x14f0 [ 157.409723][ T6465] ? __pfx_get_futex_key+0x10/0x10 [ 157.409745][ T6465] ? __pfx_futex_hash+0x10/0x10 [ 157.409768][ T6465] ? get_pid_task+0xfc/0x250 [ 157.409785][ T6465] ? get_pid_task+0xfc/0x250 [ 157.409804][ T6465] futex_wake+0xf4/0x5e0 [ 157.409821][ T6465] ? futex_wait+0x11e/0x370 [ 157.409840][ T6465] ? find_held_lock+0x2b/0x80 [ 157.409856][ T6465] ? __pfx_futex_wake+0x10/0x10 [ 157.409877][ T6465] ? __lock_acquire+0x5c0/0x1f40 [ 157.409897][ T6465] do_futex+0x2b2/0x440 [ 157.409912][ T6465] ? __pfx_do_futex+0x10/0x10 [ 157.409927][ T6465] ? lock_acquire+0x1d1/0x380 [ 157.409948][ T6465] __ia32_sys_futex_time32+0x2f4/0x470 [ 157.409996][ T6465] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 157.410014][ T6465] ? __fget_files+0x21f/0x3d0 [ 157.410051][ T6465] __do_fast_syscall_32+0x13a/0x8b0 [ 157.410079][ T6465] do_fast_syscall_32+0x32/0x70 [ 157.410100][ T6465] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.410119][ T6465] RIP: 0023:0xf7f34fec [ 157.410136][ T6465] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 157.410143][ T6465] RSP: 002b:00000000f53f65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 157.410162][ T6465] RAX: ffffffffffffffda RBX: 00000000f73f4f8c RCX: 0000000000000081 [ 157.410173][ T6465] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 157.410184][ T6465] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 157.410194][ T6465] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 157.410208][ T6465] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.410229][ T6465] [ 157.640048][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.641357][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.926202][ T6468] FAULT_INJECTION: forcing a failure. [ 157.926202][ T6468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.926230][ T6468] CPU: 1 UID: 0 PID: 6468 Comm: syz.0.131 Not tainted syzkaller #0 PREEMPT(full) [ 157.926246][ T6468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.926255][ T6468] Call Trace: [ 157.926260][ T6468] [ 157.926266][ T6468] dump_stack_lvl+0x100/0x190 [ 157.926291][ T6468] should_fail_ex.cold+0x5/0xa [ 157.926311][ T6468] _copy_to_user+0x32/0xd0 [ 157.926331][ T6468] simple_read_from_buffer+0xcb/0x170 [ 157.926351][ T6468] proc_fail_nth_read+0x1af/0x230 [ 157.926367][ T6468] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.926385][ T6468] ? rw_verify_area+0xce/0x6d0 [ 157.926408][ T6468] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.926425][ T6468] vfs_read+0x1e4/0xb40 [ 157.926442][ T6468] ? lock_acquire+0x1d1/0x380 [ 157.926460][ T6468] ? __fget_files+0x34/0x3d0 [ 157.926475][ T6468] ? __pfx_vfs_read+0x10/0x10 [ 157.926487][ T6468] ? find_held_lock+0x2b/0x80 [ 157.926501][ T6468] ? __fget_files+0x215/0x3d0 [ 157.926518][ T6468] ? __fget_files+0x21f/0x3d0 [ 157.926538][ T6468] ksys_read+0x12a/0x250 [ 157.926573][ T6468] ? __pfx_ksys_read+0x10/0x10 [ 157.926592][ T6468] do_int80_emulation+0x166/0x650 [ 157.926616][ T6468] asm_int80_emulation+0x1a/0x20 [ 157.926630][ T6468] RIP: 0023:0xf71c75ab [ 157.926641][ T6468] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 157.926653][ T6468] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 157.926675][ T6468] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f547d5d0 [ 157.926686][ T6468] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 157.926694][ T6468] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.926701][ T6468] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 157.926709][ T6468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.926727][ T6468] [ 158.512926][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 158.557438][ T6459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.587982][ T6459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.979267][ T5832] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.014370][ T5832] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.014417][ T5832] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.014449][ T5832] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.160762][ T67] Bluetooth: hci3: hardware error 0x04 [ 159.920644][ T42] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 160.080440][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 160.081195][ T42] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.082186][ T42] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 160.082225][ T42] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.082242][ T42] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.082255][ T42] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.082266][ T42] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.082285][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.181844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 160.510916][ T42] usb 5-1: usb_control_msg returned -71 [ 160.510949][ T42] usbtmc 5-1:16.0: can't read capabilities [ 160.517442][ T42] usb 5-1: USB disconnect, device number 4 [ 160.868211][ T6498] FAULT_INJECTION: forcing a failure. [ 160.868211][ T6498] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 160.868241][ T6498] CPU: 2 UID: 0 PID: 6498 Comm: syz.1.140 Not tainted syzkaller #0 PREEMPT(full) [ 160.868259][ T6498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.868268][ T6498] Call Trace: [ 160.868274][ T6498] [ 160.868281][ T6498] dump_stack_lvl+0x100/0x190 [ 160.868308][ T6498] should_fail_ex.cold+0x5/0xa [ 160.868327][ T6498] ? prepare_alloc_pages+0x16d/0x5b0 [ 160.868350][ T6498] should_fail_alloc_page+0xeb/0x140 [ 160.868372][ T6498] prepare_alloc_pages+0x1f0/0x5b0 [ 160.868397][ T6498] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 160.868415][ T6498] ? __pfx_get_page_from_freelist+0x10/0x10 [ 160.868432][ T6498] ? prepare_alloc_pages+0x438/0x5b0 [ 160.868454][ T6498] ? rcu_is_watching+0x13/0xc0 [ 160.868472][ T6498] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 160.868491][ T6498] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 160.868510][ T6498] ? find_held_lock+0x2b/0x80 [ 160.868527][ T6498] ? is_bpf_text_address+0x8a/0x1a0 [ 160.868549][ T6498] ? is_bpf_text_address+0x8a/0x1a0 [ 160.868570][ T6498] ? bpf_ksym_find+0x124/0x1c0 [ 160.868594][ T6498] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 160.868614][ T6498] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 160.868630][ T6498] ? is_bpf_text_address+0x94/0x1a0 [ 160.868652][ T6498] ? __kernel_text_address+0xd/0x30 [ 160.868688][ T6498] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 160.868705][ T6498] ? is_bpf_text_address+0x25/0x1a0 [ 160.868730][ T6498] ? policy_nodemask+0xed/0x4f0 [ 160.868753][ T6498] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 160.868783][ T6498] __kasan_populate_vmalloc+0xf0/0x210 [ 160.868807][ T6498] alloc_vmap_area+0x95d/0x2bb0 [ 160.868835][ T6498] ? kasan_save_track+0x14/0x30 [ 160.868853][ T6498] ? __kasan_kmalloc+0xaa/0xb0 [ 160.868872][ T6498] ? __pfx_alloc_vmap_area+0x10/0x10 [ 160.868892][ T6498] ? __get_vm_area_node+0x124/0x350 [ 160.868915][ T6498] __get_vm_area_node+0x1ed/0x350 [ 160.868939][ T6498] __vmalloc_node_range_noprof+0x268/0x1420 [ 160.868961][ T6498] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 160.868980][ T6498] ? process_measurement+0x4c8/0x2350 [ 160.869001][ T6498] ? down_write+0x146/0x1f0 [ 160.869019][ T6498] ? up_write+0x2dc/0x5b0 [ 160.869044][ T6498] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 160.869069][ T6498] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 160.869090][ T6498] ? __lock_acquire+0x5c0/0x1f40 [ 160.869118][ T6498] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 160.869139][ T6498] __vmalloc_node_noprof+0xad/0xf0 [ 160.869160][ T6498] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 160.869183][ T6498] __vmalloc_noprof+0xa3/0x120 [ 160.869204][ T6498] ? __pfx___vmalloc_noprof+0x10/0x10 [ 160.869223][ T6498] ? lock_acquire+0x1d1/0x380 [ 160.869244][ T6498] ? is_bpf_text_address+0x25/0x1a0 [ 160.869265][ T6498] ? rcu_is_watching+0x13/0xc0 [ 160.869283][ T6498] ? apparmor_capable+0x1d7/0x4d0 [ 160.869306][ T6498] bpf_prog_alloc_no_stats+0x58/0x690 [ 160.869327][ T6498] ? security_capable+0x80/0x260 [ 160.869348][ T6498] bpf_prog_alloc+0x3b/0x200 [ 160.869368][ T6498] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 160.869411][ T6498] bpf_prog_load+0x49e/0x2a80 [ 160.869434][ T6498] ? __lock_acquire+0x5c0/0x1f40 [ 160.869458][ T6498] ? __pfx_bpf_prog_load+0x10/0x10 [ 160.869498][ T6498] __sys_bpf+0x1f46/0x4a30 [ 160.869521][ T6498] ? __pfx___sys_bpf+0x10/0x10 [ 160.869536][ T6498] ? lock_acquire+0x1d1/0x380 [ 160.869557][ T6498] ? get_pid_task+0x2a/0x250 [ 160.869574][ T6498] ? find_held_lock+0x2b/0x80 [ 160.869596][ T6498] ? get_pid_task+0xfc/0x250 [ 160.869612][ T6498] ? get_pid_task+0xfc/0x250 [ 160.869634][ T6498] ? proc_fail_nth_write+0x9f/0x220 [ 160.869653][ T6498] ? find_held_lock+0x2b/0x80 [ 160.869675][ T6498] ? rcu_read_lock_any_held+0x6a/0x90 [ 160.869693][ T6498] ? find_held_lock+0x2b/0x80 [ 160.869709][ T6498] ? ksys_write+0x190/0x250 [ 160.869727][ T6498] ? ksys_write+0x190/0x250 [ 160.869742][ T6498] ? lock_acquire+0x1d1/0x380 [ 160.869778][ T6498] ? fput+0x7c/0x100 [ 160.869801][ T6498] ? __ia32_sys_bpf+0xcc/0x170 [ 160.869816][ T6498] __ia32_sys_bpf+0xcc/0x170 [ 160.869834][ T6498] ? __do_fast_syscall_32+0xb3/0x8b0 [ 160.869860][ T6498] __do_fast_syscall_32+0x13a/0x8b0 [ 160.869884][ T6498] ? lockdep_hardirqs_on+0x7d/0x110 [ 160.869909][ T6498] do_fast_syscall_32+0x32/0x70 [ 160.869935][ T6498] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.869980][ T6498] RIP: 0023:0xf703efec [ 160.870000][ T6498] Code: Unable to access opcode bytes at 0xf703efc2. [ 160.870006][ T6498] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 160.870020][ T6498] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800027c0 [ 160.870029][ T6498] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.870036][ T6498] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.870044][ T6498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.870052][ T6498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.870069][ T6498] [ 160.870464][ T6498] syz.1.140: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 160.870557][ T6498] CPU: 2 UID: 0 PID: 6498 Comm: syz.1.140 Not tainted syzkaller #0 PREEMPT(full) [ 160.870573][ T6498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.870588][ T6498] Call Trace: [ 160.870593][ T6498] [ 160.870599][ T6498] dump_stack_lvl+0x100/0x190 [ 160.870620][ T6498] warn_alloc.cold+0x9e/0xb2 [ 160.870636][ T6498] ? __pfx_warn_alloc+0x10/0x10 [ 160.870648][ T6498] ? lockdep_hardirqs_on+0x7d/0x110 [ 160.870670][ T6498] ? __get_vm_area_node+0x2f0/0x350 [ 160.870692][ T6498] ? __get_vm_area_node+0x22b/0x350 [ 160.870713][ T6498] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 160.870731][ T6498] ? process_measurement+0x4c8/0x2350 [ 160.870748][ T6498] ? down_write+0x146/0x1f0 [ 160.870762][ T6498] ? up_write+0x2dc/0x5b0 [ 160.870783][ T6498] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 160.870806][ T6498] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 160.870824][ T6498] ? __lock_acquire+0x5c0/0x1f40 [ 160.870848][ T6498] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 160.870866][ T6498] __vmalloc_node_noprof+0xad/0xf0 [ 160.870884][ T6498] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 160.870905][ T6498] __vmalloc_noprof+0xa3/0x120 [ 160.870923][ T6498] ? __pfx___vmalloc_noprof+0x10/0x10 [ 160.870941][ T6498] ? lock_acquire+0x1d1/0x380 [ 160.870959][ T6498] ? is_bpf_text_address+0x25/0x1a0 [ 160.870979][ T6498] ? rcu_is_watching+0x13/0xc0 [ 160.870993][ T6498] ? apparmor_capable+0x1d7/0x4d0 [ 160.871015][ T6498] bpf_prog_alloc_no_stats+0x58/0x690 [ 160.871032][ T6498] ? security_capable+0x80/0x260 [ 160.871051][ T6498] bpf_prog_alloc+0x3b/0x200 [ 160.871068][ T6498] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 160.871089][ T6498] bpf_prog_load+0x49e/0x2a80 [ 160.871108][ T6498] ? __lock_acquire+0x5c0/0x1f40 [ 160.871130][ T6498] ? __pfx_bpf_prog_load+0x10/0x10 [ 160.871165][ T6498] __sys_bpf+0x1f46/0x4a30 [ 160.871184][ T6498] ? __pfx___sys_bpf+0x10/0x10 [ 160.871197][ T6498] ? lock_acquire+0x1d1/0x380 [ 160.871215][ T6498] ? get_pid_task+0x2a/0x250 [ 160.871230][ T6498] ? find_held_lock+0x2b/0x80 [ 160.871244][ T6498] ? get_pid_task+0xfc/0x250 [ 160.871257][ T6498] ? get_pid_task+0xfc/0x250 [ 160.871275][ T6498] ? proc_fail_nth_write+0x9f/0x220 [ 160.871314][ T6498] ? find_held_lock+0x2b/0x80 [ 160.871334][ T6498] ? rcu_read_lock_any_held+0x6a/0x90 [ 160.871349][ T6498] ? find_held_lock+0x2b/0x80 [ 160.871363][ T6498] ? ksys_write+0x190/0x250 [ 160.871377][ T6498] ? ksys_write+0x190/0x250 [ 160.871391][ T6498] ? lock_acquire+0x1d1/0x380 [ 160.871422][ T6498] ? fput+0x7c/0x100 [ 160.871441][ T6498] ? __ia32_sys_bpf+0xcc/0x170 [ 160.871455][ T6498] __ia32_sys_bpf+0xcc/0x170 [ 160.871471][ T6498] ? __do_fast_syscall_32+0xb3/0x8b0 [ 160.871494][ T6498] __do_fast_syscall_32+0x13a/0x8b0 [ 160.871515][ T6498] ? lockdep_hardirqs_on+0x7d/0x110 [ 160.871536][ T6498] do_fast_syscall_32+0x32/0x70 [ 160.871557][ T6498] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.871575][ T6498] RIP: 0023:0xf703efec [ 160.871596][ T6498] Code: Unable to access opcode bytes at 0xf703efc2. [ 160.871603][ T6498] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 160.871616][ T6498] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800027c0 [ 160.871625][ T6498] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.871633][ T6498] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.871641][ T6498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.871649][ T6498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.871667][ T6498] [ 160.871722][ T6498] Mem-Info: [ 160.871732][ T6498] active_anon:5835 inactive_anon:209 isolated_anon:0 [ 160.871732][ T6498] active_file:15 inactive_file:55679 isolated_file:0 [ 160.871732][ T6498] unevictable:1000 dirty:198 writeback:0 [ 160.871732][ T6498] slab_reclaimable:9901 slab_unreclaimable:51484 [ 160.871732][ T6498] mapped:24592 shmem:1500 pagetables:1043 [ 160.871732][ T6498] sec_pagetables:293 bounce:0 [ 160.871732][ T6498] kernel_misc_reclaimable:0 [ 160.871732][ T6498] free:34558 free_pcp:17415 free_cma:0 [ 160.871766][ T6498] Node 0 active_anon:48kB inactive_anon:152kB active_file:60kB inactive_file:728kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8864kB pagetables:1128kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 160.871802][ T6498] Node 1 active_anon:23292kB inactive_anon:684kB active_file:0kB inactive_file:221988kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:98276kB dirty:780kB writeback:0kB shmem:4000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4584kB pagetables:3044kB sec_pagetables:60kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 160.871837][ T6498] Node 0 DMA free:2044kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:400kB local_pcp:4kB free_cma:0kB [ 160.871875][ T6498] lowmem_reserve[]: 0 277 277 277 277 [ 160.871899][ T6498] Node 0 DMA32 free:15624kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:48kB inactive_anon:148kB active_file:4kB inactive_file:728kB unevictable:2000kB writepending:8kB zspages:0kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:11376kB local_pcp:3280kB free_cma:0kB [ 160.871938][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 160.871960][ T6498] Node 1 DMA32 free:120564kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23292kB inactive_anon:684kB active_file:0kB inactive_file:221988kB unevictable:2000kB writepending:780kB zspages:1868kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:57884kB local_pcp:17728kB free_cma:0kB [ 160.871999][ T6498] lowmem_reserve[]: 0 0 0 0 0 [ 160.872020][ T6498] Node 0 DMA: 41*4kB (UM) 5*8kB (UM) 1*16kB (U) 7*32kB (UM) 3*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2044kB [ 160.872116][ T6498] Node 0 DMA32: 0*4kB 11*8kB (UE) 11*16kB (UME) 14*32kB (UME) 33*64kB (UME) 14*128kB (UM) 9*256kB (UM) 9*512kB (UM) 2*1024kB (M) 1*2048kB (U) 0*4096kB = 15624kB [ 160.872214][ T6498] Node 1 DMA32: 659*4kB (UME) 123*8kB (UM) 51*16kB (UM) 72*32kB (UME) 19*64kB (UM) 7*128kB (UM) 4*256kB (UM) 6*512kB (UE) 1*1024kB (M) 4*2048kB (U) 24*4096kB (UM) = 120468kB [ 160.872321][ T6498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 160.872332][ T6498] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 160.872342][ T6498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 160.872353][ T6498] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 160.872363][ T6498] 57481 total pagecache pages [ 160.872368][ T6498] 291 pages in swap cache [ 160.872373][ T6498] Free swap = 121216kB [ 160.872378][ T6498] Total swap = 124996kB [ 160.872382][ T6498] 524155 pages RAM [ 160.872387][ T6498] 0 pages HighMem/MovableOnly [ 160.872391][ T6498] 212121 pages reserved [ 160.872396][ T6498] 0 pages cma reserved [ 161.113080][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 161.382775][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 161.394471][ T6509] FAULT_INJECTION: forcing a failure. [ 161.394471][ T6509] name failslab, interval 1, probability 0, space 0, times 0 [ 161.394503][ T6509] CPU: 0 UID: 0 PID: 6509 Comm: syz.0.144 Not tainted syzkaller #0 PREEMPT(full) [ 161.394524][ T6509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.394533][ T6509] Call Trace: [ 161.394539][ T6509] [ 161.394546][ T6509] dump_stack_lvl+0x100/0x190 [ 161.394575][ T6509] should_fail_ex.cold+0x5/0xa [ 161.394607][ T6509] should_failslab+0xc2/0x120 [ 161.394632][ T6509] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 161.394653][ T6509] ? __alloc_skb+0x5b7/0x710 [ 161.394674][ T6509] ? __alloc_skb+0x140/0x710 [ 161.394699][ T6509] __alloc_skb+0x140/0x710 [ 161.394718][ T6509] ? __alloc_skb+0x5b7/0x710 [ 161.394738][ T6509] ? __pfx___alloc_skb+0x10/0x10 [ 161.394761][ T6509] ? aa_sk_perm+0x389/0xab0 [ 161.394790][ T6509] netlink_alloc_large_skb+0x69/0x150 [ 161.394815][ T6509] netlink_sendmsg+0x680/0xda0 [ 161.394840][ T6509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.394864][ T6509] ? apparmor_socket_sendmsg+0x165/0x280 [ 161.394890][ T6509] ____sys_sendmsg+0xa4d/0xbe0 [ 161.394906][ T6509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.394926][ T6509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.394953][ T6509] ___sys_sendmsg+0x190/0x1e0 [ 161.394972][ T6509] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.395000][ T6509] ? find_held_lock+0x2b/0x80 [ 161.395035][ T6509] __sys_sendmsg+0x160/0x210 [ 161.395058][ T6509] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.395087][ T6509] ? __pfx_ksys_write+0x10/0x10 [ 161.395109][ T6509] __do_fast_syscall_32+0x13a/0x8b0 [ 161.395134][ T6509] ? lockdep_hardirqs_on+0x7d/0x110 [ 161.395160][ T6509] do_fast_syscall_32+0x32/0x70 [ 161.395186][ T6509] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.395208][ T6509] RIP: 0023:0xf708efec [ 161.395229][ T6509] Code: Unable to access opcode bytes at 0xf708efc2. [ 161.395237][ T6509] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 161.395254][ T6509] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 161.395265][ T6509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.395274][ T6509] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.395283][ T6509] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 161.395293][ T6509] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.395316][ T6509] [ 161.421739][ T67] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 161.775350][ T6514] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 162.148342][ T67] Bluetooth: hci0: hardware error 0x04 [ 162.149543][ T6521] FAULT_INJECTION: forcing a failure. [ 162.149543][ T6521] name failslab, interval 1, probability 0, space 0, times 0 [ 162.149573][ T6521] CPU: 3 UID: 0 PID: 6521 Comm: syz.1.147 Not tainted syzkaller #0 PREEMPT(full) [ 162.149594][ T6521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.149604][ T6521] Call Trace: [ 162.149611][ T6521] [ 162.149619][ T6521] dump_stack_lvl+0x100/0x190 [ 162.149647][ T6521] should_fail_ex.cold+0x5/0xa [ 162.149671][ T6521] should_failslab+0xc2/0x120 [ 162.149695][ T6521] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 162.149716][ T6521] ? __pfx___css_rstat_updated+0x10/0x10 [ 162.149740][ T6521] ? try_charge_memcg+0x366/0xf60 [ 162.149765][ T6521] ? shmem_alloc_inode+0x25/0x50 [ 162.149787][ T6521] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 162.149808][ T6521] shmem_alloc_inode+0x25/0x50 [ 162.149826][ T6521] alloc_inode+0x68/0x250 [ 162.149854][ T6521] new_inode+0x22/0x1c0 [ 162.149882][ T6521] shmem_get_inode+0x1e3/0xf70 [ 162.149905][ T6521] ? __pfx_shmem_get_inode+0x10/0x10 [ 162.149971][ T6521] __shmem_file_setup+0x382/0x460 [ 162.150386][ T6521] ? __pfx___shmem_file_setup+0x10/0x10 [ 162.150410][ T6521] ? vm_area_alloc+0x1f/0x160 [ 162.150439][ T6521] shmem_zero_setup+0x96/0x1b0 [ 162.150468][ T6521] __mmap_region+0x2692/0x32c0 [ 162.150501][ T6521] ? __pfx___mmap_region+0x10/0x10 [ 162.150545][ T6521] ? __pfx___might_resched+0x10/0x10 [ 162.150570][ T6521] ? find_held_lock+0x2b/0x80 [ 162.150589][ T6521] ? process_measurement+0x4c8/0x2350 [ 162.150612][ T6521] ? process_measurement+0x4c8/0x2350 [ 162.150634][ T6521] ? down_write+0x146/0x1f0 [ 162.150681][ T6521] ? lock_acquire+0x1d1/0x380 [ 162.150704][ T6521] ? unwind_next_frame+0xbd/0x2090 [ 162.150772][ T6521] mmap_region+0x3db/0x6d0 [ 162.150794][ T6521] ? __pfx_mmap_region+0x10/0x10 [ 162.150815][ T6521] ? shmem_get_unmapped_area+0x141/0x960 [ 162.150848][ T6521] ? cap_mmap_addr+0x4b/0x120 [ 162.150875][ T6521] ? bpf_lsm_mmap_addr+0x9/0x30 [ 162.150905][ T6521] ? security_mmap_addr+0x71/0x1e0 [ 162.150939][ T6521] ? __get_unmapped_area+0x255/0x3e0 [ 162.150972][ T6521] do_mmap+0x12c7/0x1c30 [ 162.151015][ T6521] ? lock_acquire+0x1d1/0x380 [ 162.151044][ T6521] ? __pfx_do_mmap+0x10/0x10 [ 162.151086][ T6521] ? __pfx_down_write_killable+0x10/0x10 [ 162.151115][ T6521] vm_mmap_pgoff+0x28d/0x470 [ 162.151148][ T6521] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 162.151175][ T6521] ? __mutex_unlock_slowpath+0x35d/0x930 [ 162.151212][ T6521] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 162.151253][ T6521] ksys_mmap_pgoff+0xe4/0x610 [ 162.151283][ T6521] ? fput+0x7c/0x100 [ 162.151312][ T6521] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 162.151336][ T6521] ? ksys_write+0x1ac/0x250 [ 162.151360][ T6521] ? __pfx_ksys_write+0x10/0x10 [ 162.151391][ T6521] __do_fast_syscall_32+0x13a/0x8b0 [ 162.151426][ T6521] ? lockdep_hardirqs_on+0x7d/0x110 [ 162.151462][ T6521] do_fast_syscall_32+0x32/0x70 [ 162.151496][ T6521] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.151525][ T6521] RIP: 0023:0xf703efec [ 162.151555][ T6521] Code: Unable to access opcode bytes at 0xf703efc2. [ 162.151566][ T6521] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 162.151589][ T6521] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 162.151604][ T6521] RDX: 0000000006ebbeee RSI: 0000000000008031 RDI: 00000000ffffffff [ 162.151618][ T6521] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.151631][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.151645][ T6521] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.151676][ T6521] [ 162.633705][ T6527] ip6t_srh: unknown srh match flags 4000 [ 163.347687][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 164.624308][ T67] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 165.964887][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 165.985853][ T6555] FAULT_INJECTION: forcing a failure. [ 165.985853][ T6555] name failslab, interval 1, probability 0, space 0, times 0 [ 165.985886][ T6555] CPU: 1 UID: 0 PID: 6555 Comm: syz.3.153 Not tainted syzkaller #0 PREEMPT(full) [ 165.985909][ T6555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.985951][ T6555] Call Trace: [ 165.985958][ T6555] [ 165.985982][ T6555] dump_stack_lvl+0x100/0x190 [ 165.986016][ T6555] should_fail_ex.cold+0x5/0xa [ 165.986043][ T6555] should_failslab+0xc2/0x120 [ 165.986071][ T6555] kmem_cache_alloc_noprof+0x92/0x6a0 [ 165.986105][ T6555] ? do_getname+0x35/0x390 [ 165.986139][ T6555] do_getname+0x35/0x390 [ 165.986169][ T6555] user_path_at+0x26/0x60 [ 165.986192][ T6555] __ia32_sys_mount+0x1fb/0x310 [ 165.986222][ T6555] ? __pfx___ia32_sys_mount+0x10/0x10 [ 165.986250][ T6555] ? ksys_write+0x1ac/0x250 [ 165.986273][ T6555] ? __pfx_ksys_write+0x10/0x10 [ 165.986300][ T6555] __do_fast_syscall_32+0x13a/0x8b0 [ 165.986333][ T6555] ? lockdep_hardirqs_on+0x7d/0x110 [ 165.986367][ T6555] do_fast_syscall_32+0x32/0x70 [ 165.986398][ T6555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.986424][ T6555] RIP: 0023:0xf7fc3fec [ 165.986449][ T6555] Code: Unable to access opcode bytes at 0xf7fc3fc2. [ 165.986459][ T6555] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 165.986481][ T6555] RAX: ffffffffffffffda RBX: 0000000080000600 RCX: 0000000080000500 [ 165.986495][ T6555] RDX: 0000000080000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.986507][ T6555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.986520][ T6555] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 165.986532][ T6555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.986561][ T6555] [ 166.387482][ T6550] hsr_slave_1 (unregistering): left promiscuous mode [ 166.444707][ T6562] /dev/loop1: Can't open blockdev [ 166.486716][ T6562] netlink: 'syz.1.155': attribute type 9 has an invalid length. [ 166.486737][ T6562] netlink: 'syz.1.155': attribute type 7 has an invalid length. [ 166.486748][ T6562] netlink: 'syz.1.155': attribute type 8 has an invalid length. [ 166.506335][ T6557] netlink: 'syz.3.154': attribute type 14 has an invalid length. [ 167.055728][ T6567] FAULT_INJECTION: forcing a failure. [ 167.055728][ T6567] name failslab, interval 1, probability 0, space 0, times 0 [ 167.055761][ T6567] CPU: 1 UID: 0 PID: 6567 Comm: syz.0.156 Not tainted syzkaller #0 PREEMPT(full) [ 167.055804][ T6567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.055815][ T6567] Call Trace: [ 167.055824][ T6567] [ 167.055832][ T6567] dump_stack_lvl+0x100/0x190 [ 167.055862][ T6567] should_fail_ex.cold+0x5/0xa [ 167.055886][ T6567] should_failslab+0xc2/0x120 [ 167.055910][ T6567] __kmalloc_noprof+0xfc/0x840 [ 167.055930][ T6567] ? rcu_is_watching+0x13/0xc0 [ 167.055947][ T6567] ? tomoyo_realpath_from_path+0xb6/0x690 [ 167.055972][ T6567] tomoyo_realpath_from_path+0xb6/0x690 [ 167.055997][ T6567] tomoyo_path_number_perm+0x23c/0x580 [ 167.056022][ T6567] ? tomoyo_path_number_perm+0x22e/0x580 [ 167.056047][ T6567] ? io_schedule_timeout+0xf1/0x110 [ 167.056071][ T6567] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 167.056105][ T6567] ? d_splice_alias_ops+0x626/0x15b0 [ 167.056122][ T6567] ? d_splice_alias_ops+0x626/0x15b0 [ 167.056153][ T6567] ? current_check_access_path+0x262/0x420 [ 167.056184][ T6567] ? __pfx_current_check_access_path+0x10/0x10 [ 167.056215][ T6567] ? kernfs_iop_lookup+0x247/0x2d0 [ 167.056240][ T6567] ? lookup_one_qstr_excl+0xaf/0x250 [ 167.056269][ T6567] tomoyo_path_mkdir+0x9b/0xe0 [ 167.056291][ T6567] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 167.056314][ T6567] ? lock_acquire+0x1d1/0x380 [ 167.056342][ T6567] security_path_mkdir+0x154/0x2e0 [ 167.056363][ T6567] filename_mkdirat+0x168/0x5e0 [ 167.056388][ T6567] ? __pfx_filename_mkdirat+0x10/0x10 [ 167.056410][ T6567] ? strncpy_from_user+0x19d/0x2d0 [ 167.056438][ T6567] ? do_getname+0x191/0x390 [ 167.056466][ T6567] __ia32_sys_mkdirat+0x88/0xc0 [ 167.056490][ T6567] __do_fast_syscall_32+0x13a/0x8b0 [ 167.056517][ T6567] ? lockdep_hardirqs_on+0x7d/0x110 [ 167.056558][ T6567] do_fast_syscall_32+0x32/0x70 [ 167.056591][ T6567] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.056614][ T6567] RIP: 0023:0xf708efec [ 167.056635][ T6567] Code: Unable to access opcode bytes at 0xf708efc2. [ 167.056643][ T6567] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 167.056661][ T6567] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 167.056672][ T6567] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 167.056683][ T6567] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.056693][ T6567] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 167.056703][ T6567] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.056727][ T6567] [ 167.260882][ T6567] ERROR: Out of memory at tomoyo_realpath_from_path. [ 168.011096][ T6575] FAULT_INJECTION: forcing a failure. [ 168.011096][ T6575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.011138][ T6575] CPU: 3 UID: 0 PID: 6575 Comm: syz.2.159 Not tainted syzkaller #0 PREEMPT(full) [ 168.011159][ T6575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.011170][ T6575] Call Trace: [ 168.011177][ T6575] [ 168.011185][ T6575] dump_stack_lvl+0x100/0x190 [ 168.011217][ T6575] should_fail_ex.cold+0x5/0xa [ 168.011275][ T6575] _copy_from_user+0x2e/0xd0 [ 168.011303][ T6575] snd_pcm_oss_write2+0x1c2/0x400 [ 168.011335][ T6575] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 168.011360][ T6575] ? snd_pcm_kernel_ioctl+0x12e/0x280 [ 168.011379][ T6575] ? snd_pcm_oss_prepare+0x11e/0x240 [ 168.011405][ T6575] snd_pcm_oss_write+0x729/0xa30 [ 168.011435][ T6575] ? security_file_permission+0x76/0x210 [ 168.011468][ T6575] vfs_write+0x2aa/0x1050 [ 168.011490][ T6575] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 168.011517][ T6575] ? lock_acquire+0x1d1/0x380 [ 168.011540][ T6575] ? __fget_files+0x34/0x3d0 [ 168.011559][ T6575] ? __pfx_vfs_write+0x10/0x10 [ 168.011575][ T6575] ? find_held_lock+0x2b/0x80 [ 168.011594][ T6575] ? __fget_files+0x215/0x3d0 [ 168.011612][ T6575] ? __fget_files+0x215/0x3d0 [ 168.011658][ T6575] ? __fget_files+0x21f/0x3d0 [ 168.011687][ T6575] ksys_write+0x12a/0x250 [ 168.011706][ T6575] ? __pfx_ksys_write+0x10/0x10 [ 168.011725][ T6575] ? ksys_write+0x1ac/0x250 [ 168.011744][ T6575] ? __pfx_ksys_write+0x10/0x10 [ 168.011769][ T6575] __do_fast_syscall_32+0x13a/0x8b0 [ 168.011797][ T6575] ? lockdep_hardirqs_on+0x7d/0x110 [ 168.011827][ T6575] do_fast_syscall_32+0x32/0x70 [ 168.011855][ T6575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.011879][ T6575] RIP: 0023:0xf7f34fec [ 168.011904][ T6575] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 168.011913][ T6575] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 168.011932][ T6575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 168.011944][ T6575] RDX: 000000000000fc36 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.011955][ T6575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.011966][ T6575] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 168.011977][ T6575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.012004][ T6575] [ 168.030328][ T5873] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 168.194104][ T5873] usb 5-1: device descriptor read/64, error -71 [ 168.430366][ T5873] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 168.571104][ T5873] usb 5-1: device descriptor read/64, error -71 [ 168.680938][ T5873] usb usb5-port1: attempt power cycle [ 168.816072][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 169.050421][ T5873] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 169.054126][ T6589] FAULT_INJECTION: forcing a failure. [ 169.054126][ T6589] name failslab, interval 1, probability 0, space 0, times 0 [ 169.054157][ T6589] CPU: 2 UID: 0 PID: 6589 Comm: syz.2.164 Not tainted syzkaller #0 PREEMPT(full) [ 169.054178][ T6589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.054188][ T6589] Call Trace: [ 169.054193][ T6589] [ 169.054200][ T6589] dump_stack_lvl+0x100/0x190 [ 169.054229][ T6589] should_fail_ex.cold+0x5/0xa [ 169.054254][ T6589] should_failslab+0xc2/0x120 [ 169.054281][ T6589] __kmalloc_noprof+0xfc/0x840 [ 169.054301][ T6589] ? lsm_blob_alloc+0x68/0x90 [ 169.054327][ T6589] lsm_blob_alloc+0x68/0x90 [ 169.054345][ T6589] security_sb_alloc+0x25/0x240 [ 169.054368][ T6589] sget_fc+0x3ca/0x1f20 [ 169.054392][ T6589] ? __pfx_set_anon_super_fc+0x10/0x10 [ 169.054420][ T6589] ? __pfx_sget_fc+0x10/0x10 [ 169.054434][ T6589] ? refcount_dec_not_one+0x136/0x1c0 [ 169.054458][ T6589] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 169.054476][ T6589] ? __kasan_kmalloc+0xaa/0xb0 [ 169.054512][ T6589] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 169.054541][ T6589] ? __kasan_kmalloc+0xaa/0xb0 [ 169.054572][ T6589] ? __pfx_mqueue_fill_super+0x10/0x10 [ 169.054589][ T6589] get_tree_nodev+0x28/0x190 [ 169.054605][ T6589] mqueue_get_tree+0xf1/0x130 [ 169.054624][ T6589] vfs_get_tree+0x92/0x320 [ 169.054651][ T6589] fc_mount_longterm+0x1a/0x270 [ 169.054671][ T6589] mq_init_ns+0x482/0x820 [ 169.054696][ T6589] copy_ipcs+0x3dd/0x7e0 [ 169.054722][ T6589] create_new_namespaces+0x20a/0xac0 [ 169.054748][ T6589] ? security_capable+0x80/0x260 [ 169.054772][ T6589] unshare_nsproxy_namespaces+0xf2/0x220 [ 169.054799][ T6589] ksys_unshare+0x4a2/0xa70 [ 169.054819][ T6589] ? __pfx_ksys_unshare+0x10/0x10 [ 169.054837][ T6589] ? fput+0x7c/0x100 [ 169.054854][ T6589] ? ksys_write+0x1ac/0x250 [ 169.054868][ T6589] ? __pfx_ksys_write+0x10/0x10 [ 169.054885][ T6589] __ia32_sys_unshare+0x30/0x40 [ 169.054899][ T6589] __do_fast_syscall_32+0x13a/0x8b0 [ 169.054921][ T6589] ? lockdep_hardirqs_on+0x7d/0x110 [ 169.054943][ T6589] do_fast_syscall_32+0x32/0x70 [ 169.054965][ T6589] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.054982][ T6589] RIP: 0023:0xf7f34fec [ 169.055001][ T6589] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 169.055007][ T6589] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 169.055021][ T6589] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 169.055030][ T6589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.055038][ T6589] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.055046][ T6589] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 169.055054][ T6589] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.055073][ T6589] [ 169.070991][ T5873] usb 5-1: device descriptor read/8, error -71 [ 169.340353][ T5873] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 169.371039][ T5873] usb 5-1: device descriptor read/8, error -71 [ 169.490604][ T5873] usb usb5-port1: unable to enumerate USB device [ 170.122563][ C2] hpet: Lost 1 RTC interrupts [ 170.169083][ C2] hpet: Lost 1 RTC interrupts [ 170.247151][ C2] hpet: Lost 1 RTC interrupts [ 170.337883][ C2] hpet: Lost 1 RTC interrupts [ 170.703357][ C2] hpet: Lost 1 RTC interrupts [ 170.806211][ C2] hpet: Lost 1 RTC interrupts [ 171.169366][ T6608] netlink: 'syz.3.171': attribute type 1 has an invalid length. [ 171.203527][ T6608] bond1: entered promiscuous mode [ 171.204181][ T6608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.292111][ T6609] bond1: (slave bridge1): making interface the new active one [ 171.292139][ T6609] bridge1: entered promiscuous mode [ 171.299513][ T6609] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 171.618405][ C2] hpet: Lost 1 RTC interrupts [ 171.670404][ C2] hpet: Lost 1 RTC interrupts [ 172.002362][ C2] hpet: Lost 1 RTC interrupts [ 172.118531][ C2] hpet: Lost 2 RTC interrupts [ 173.031050][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 173.065786][ T57] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 173.263394][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 173.267360][ T57] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 173.303211][ T57] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 173.303269][ T57] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.303292][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.303317][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.303342][ T57] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.303382][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.747079][ T57] usb 5-1: usb_control_msg returned -71 [ 173.747114][ T57] usbtmc 5-1:16.0: can't read capabilities [ 174.011583][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 174.061056][ T6639] netlink: 'syz.3.178': attribute type 5 has an invalid length. [ 174.061223][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 174.122941][ T57] usb 5-1: USB disconnect, device number 9 [ 174.315129][ T6642] binder: 6641:6642 ioctl c0306201 80000680 returned -14 [ 174.924731][ T6660] netlink: 44 bytes leftover after parsing attributes in process `syz.0.181'. [ 174.964333][ T6660] netlink: 48 bytes leftover after parsing attributes in process `syz.0.181'. [ 175.558246][ C2] hpet_rtc_timer_reinit: 14 callbacks suppressed [ 175.558270][ C2] hpet: Lost 1 RTC interrupts [ 175.654402][ C2] hpet: Lost 1 RTC interrupts [ 175.761368][ C2] hpet: Lost 1 RTC interrupts [ 175.826063][ C2] hpet: Lost 3 RTC interrupts [ 176.090284][ C2] hpet: Lost 1 RTC interrupts [ 176.095895][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 176.172962][ C2] hpet: Lost 3 RTC interrupts [ 176.218021][ C2] hpet: Lost 1 RTC interrupts [ 176.251199][ T6678] netlink: 32 bytes leftover after parsing attributes in process `syz.1.183'. [ 176.338243][ C2] hpet: Lost 2 RTC interrupts [ 176.551830][ C2] hpet: Lost 2 RTC interrupts [ 176.653569][ C2] hpet: Lost 1 RTC interrupts [ 176.965187][ T6679] netlink: 88 bytes leftover after parsing attributes in process `syz.2.185'. [ 179.441703][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.189'. [ 179.575042][ T6698] erofs (device loop2): cannot find valid erofs superblock [ 180.582193][ T6715] netlink: 32 bytes leftover after parsing attributes in process `syz.1.191'. [ 180.850251][ C2] hpet_rtc_timer_reinit: 32 callbacks suppressed [ 180.850273][ C2] hpet: Lost 1 RTC interrupts [ 181.160260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 181.186099][ C2] hpet: Lost 1 RTC interrupts [ 181.371882][ T43] audit: type=1800 audit(1789601432.755:2): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.193" name="file0" dev="overlay" ino=293 res=0 errno=0 [ 181.446972][ C2] hpet: Lost 2 RTC interrupts [ 181.818081][ C2] hpet: Lost 1 RTC interrupts [ 181.907962][ C2] hpet: Lost 1 RTC interrupts [ 182.013136][ C2] hpet: Lost 1 RTC interrupts [ 182.122224][ C2] hpet: Lost 1 RTC interrupts [ 182.421585][ T6733] netlink: 'syz.3.195': attribute type 1 has an invalid length. [ 182.451244][ C2] hpet: Lost 1 RTC interrupts [ 182.481196][ C2] hpet: Lost 1 RTC interrupts [ 183.409924][ T6743] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 183.409946][ T6743] CPU: 1 UID: 0 PID: 6743 Comm: syz.0.197 Not tainted syzkaller #0 PREEMPT(full) [ 183.409969][ T6743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.409980][ T6743] Call Trace: [ 183.409987][ T6743] [ 183.409994][ T6743] dump_stack_lvl+0x100/0x190 [ 183.410025][ T6743] sysfs_warn_dup.cold+0x1c/0x28 [ 183.410052][ T6743] sysfs_create_dir_ns+0x24b/0x2b0 [ 183.410075][ T6743] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 183.410094][ T6743] ? find_held_lock+0x2b/0x80 [ 183.410116][ T6743] ? kobject_add_internal+0x25f/0x930 [ 183.410137][ T6743] ? kobject_add_internal+0x25f/0x930 [ 183.410203][ T6743] ? class_dir_child_ns_type+0xd/0x60 [ 183.410233][ T6743] kobject_add_internal+0x2c8/0x930 [ 183.410258][ T6743] kobject_add+0x16a/0x1e0 [ 183.410299][ T6743] ? __pfx_kobject_add+0x10/0x10 [ 183.410319][ T6743] ? get_device_parent+0x1b3/0x4c0 [ 183.410343][ T6743] ? kobject_put+0xb9/0x640 [ 183.410367][ T6743] device_add+0x294/0x1970 [ 183.410393][ T6743] ? lockdep_init_map_type+0x5c/0x250 [ 183.410419][ T6743] ? __pfx_device_add+0x10/0x10 [ 183.410445][ T6743] ? lockdep_init_map_type+0x5c/0x250 [ 183.410476][ T6743] ? __init_waitqueue_head+0xca/0x150 [ 183.410507][ T6743] tty_register_device_attr+0x388/0x7f0 [ 183.410531][ T6743] ? lockdep_init_map_type+0x5c/0x250 [ 183.410556][ T6743] ? __pfx_tty_register_device_attr+0x10/0x10 [ 183.410585][ T6743] ? tty_port_init+0x156/0x1c0 [ 183.410613][ T6743] gsm_activate_mux+0x155/0x2a0 [ 183.410640][ T6743] gsmld_ioctl+0xbbc/0x15c0 [ 183.410676][ T6743] ? __pfx_gsmld_ioctl+0x10/0x10 [ 183.410724][ T6743] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.410757][ T6743] ? __pfx_gsmld_ioctl+0x10/0x10 [ 183.410781][ T6743] tty_compat_ioctl+0x396/0x420 [ 183.410806][ T6743] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 183.410832][ T6743] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 183.410864][ T6743] __do_fast_syscall_32+0x13a/0x8b0 [ 183.410894][ T6743] do_fast_syscall_32+0x32/0x70 [ 183.410923][ T6743] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.410946][ T6743] RIP: 0023:0xf708efec [ 183.410968][ T6743] Code: Unable to access opcode bytes at 0xf708efc2. [ 183.410976][ T6743] RSP: 002b:00000000f543b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 183.410995][ T6743] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000404c4701 [ 183.411007][ T6743] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.411019][ T6743] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.411031][ T6743] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 183.411043][ T6743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.411068][ T6743] [ 183.411212][ T6743] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 185.669322][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 185.962291][ C2] hpet_rtc_timer_reinit: 21 callbacks suppressed [ 185.962311][ C2] hpet: Lost 1 RTC interrupts [ 185.990895][ T42] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 186.137309][ T6764] netlink: Conntrack attr has 12 unknown bytes [ 186.137346][ T6764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.152319][ T42] usb 8-1: Using ep0 maxpacket: 16 [ 186.158235][ T42] usb 8-1: New USB device found, idVendor=0582, idProduct=0048, bcdDevice= 0.40 [ 186.159249][ T42] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 186.174736][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.174761][ T42] usb 8-1: Product: 돢횠規㵽㦊秀剄⟚駡䯁ʖ놦樂ᢗ䃋飡駌 [ 186.174776][ T42] usb 8-1: Manufacturer: Т [ 186.174788][ T42] usb 8-1: SerialNumber: ဇ [ 186.177630][ C2] hpet: Lost 1 RTC interrupts [ 186.200210][ C2] hpet: Lost 1 RTC interrupts [ 186.295299][ T6766] netlink: 96 bytes leftover after parsing attributes in process `syz.1.206'. [ 186.611690][ T42] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.613683][ T42] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 186.687948][ C2] hpet: Lost 1 RTC interrupts [ 186.850318][ T6777] FAULT_INJECTION: forcing a failure. [ 186.850318][ T6777] name failslab, interval 1, probability 0, space 0, times 0 [ 186.850349][ T6777] CPU: 3 UID: 0 PID: 6777 Comm: syz.2.207 Not tainted syzkaller #0 PREEMPT(full) [ 186.850369][ T6777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.850380][ T6777] Call Trace: [ 186.850387][ T6777] [ 186.850394][ T6777] dump_stack_lvl+0x100/0x190 [ 186.850423][ T6777] should_fail_ex.cold+0x5/0xa [ 186.850447][ T6777] should_failslab+0xc2/0x120 [ 186.850471][ T6777] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 186.850492][ T6777] ? __d_alloc+0x35/0xa50 [ 186.850518][ T6777] __d_alloc+0x35/0xa50 [ 186.850540][ T6777] d_alloc_parallel+0x105/0x14c0 [ 186.850558][ T6777] ? lock_acquire+0x1d1/0x380 [ 186.850580][ T6777] ? __d_lookup+0x73/0x4a0 [ 186.850597][ T6777] ? __pfx_d_alloc_parallel+0x10/0x10 [ 186.850613][ T6777] ? __d_lookup+0x25c/0x4a0 [ 186.850634][ T6777] ? __d_lookup+0x266/0x4a0 [ 186.850657][ T6777] lookup_open+0x6bb/0x1990 [ 186.850695][ T6777] path_openat+0xa2c/0x2440 [ 186.850721][ T6777] ? __pfx_path_openat+0x10/0x10 [ 186.850748][ T6777] do_file_open+0x20e/0x430 [ 186.850786][ T6777] ? __pfx_do_file_open+0x10/0x10 [ 186.850815][ T6777] ? __pfx_kfree_link+0x10/0x10 [ 186.850841][ T6777] ? _raw_spin_unlock+0x28/0x50 [ 186.850864][ T6777] ? alloc_fd+0x471/0x7a0 [ 186.850891][ T6777] do_sys_openat2+0x10f/0x1e0 [ 186.850915][ T6777] ? __pfx_do_sys_openat2+0x10/0x10 [ 186.850936][ T6777] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 186.850965][ T6777] __ia32_compat_sys_openat+0x12d/0x210 [ 186.850998][ T6777] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 186.851032][ T6777] do_int80_emulation+0x166/0x650 [ 186.851061][ T6777] asm_int80_emulation+0x1a/0x20 [ 186.851078][ T6777] RIP: 0023:0xf71375ab [ 186.852158][ T6777] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 186.852174][ T6777] RSP: 002b:00000000f53b43cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 186.852192][ T6777] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53b4490 [ 186.852203][ T6777] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.852213][ T6777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.852224][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.852234][ T6777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.852258][ T6777] [ 186.966827][ C2] hpet: Lost 2 RTC interrupts [ 187.039870][ C2] hpet: Lost 1 RTC interrupts [ 187.079240][ C2] hpet: Lost 1 RTC interrupts [ 187.158859][ C2] hpet: Lost 1 RTC interrupts [ 187.203013][ C2] hpet: Lost 1 RTC interrupts [ 188.025322][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 188.082084][ C2] hpet: Lost 1 RTC interrupts [ 188.677712][ T35] usb 8-1: USB disconnect, device number 9 [ 189.595058][ T6820] FAULT_INJECTION: forcing a failure. [ 189.595058][ T6820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.595090][ T6820] CPU: 1 UID: 0 PID: 6820 Comm: syz.0.218 Not tainted syzkaller #0 PREEMPT(full) [ 189.595110][ T6820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.595121][ T6820] Call Trace: [ 189.595127][ T6820] [ 189.595135][ T6820] dump_stack_lvl+0x100/0x190 [ 189.595164][ T6820] should_fail_ex.cold+0x5/0xa [ 189.595189][ T6820] _copy_from_user+0x2e/0xd0 [ 189.595214][ T6820] memdup_user+0x6b/0xe0 [ 189.595231][ T6820] strndup_user+0x78/0xe0 [ 189.595250][ T6820] __ia32_sys_mount+0x136/0x310 [ 189.595275][ T6820] ? __pfx___ia32_sys_mount+0x10/0x10 [ 189.595299][ T6820] ? ksys_write+0x1ac/0x250 [ 189.595317][ T6820] ? __pfx_ksys_write+0x10/0x10 [ 189.595340][ T6820] __do_fast_syscall_32+0x13a/0x8b0 [ 189.595366][ T6820] ? lockdep_hardirqs_on+0x7d/0x110 [ 189.595394][ T6820] do_fast_syscall_32+0x32/0x70 [ 189.595422][ T6820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.595444][ T6820] RIP: 0023:0xf708efec [ 189.595465][ T6820] Code: Unable to access opcode bytes at 0xf708efc2. [ 189.595480][ T6820] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 189.595498][ T6820] RAX: ffffffffffffffda RBX: 0000000080000300 RCX: 0000000080000200 [ 189.595511][ T6820] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.595523][ T6820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.595533][ T6820] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 189.595542][ T6820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.595566][ T6820] [ 190.411408][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 191.266387][ C2] hpet_rtc_timer_reinit: 17 callbacks suppressed [ 191.266407][ C2] hpet: Lost 1 RTC interrupts [ 191.283572][ T6856] WARNING! power/level is deprecated; use power/control instead [ 191.286438][ T6856] netlink: zone id is out of range [ 191.286451][ T6856] netlink: zone id is out of range [ 191.286458][ T6856] netlink: zone id is out of range [ 191.286465][ T6856] netlink: zone id is out of range [ 191.286472][ T6856] netlink: zone id is out of range [ 191.286478][ T6856] netlink: zone id is out of range [ 191.286484][ T6856] netlink: zone id is out of range [ 191.286490][ T6856] netlink: zone id is out of range [ 191.286496][ T6856] netlink: zone id is out of range [ 191.286501][ T6856] netlink: zone id is out of range [ 191.442850][ C2] hpet: Lost 1 RTC interrupts [ 191.474437][ C2] hpet: Lost 1 RTC interrupts [ 191.606159][ C2] hpet: Lost 1 RTC interrupts [ 191.686075][ C2] hpet: Lost 1 RTC interrupts [ 191.742385][ C2] hpet: Lost 1 RTC interrupts [ 191.778337][ C2] hpet: Lost 1 RTC interrupts [ 191.830018][ C2] hpet: Lost 1 RTC interrupts [ 191.864490][ C2] hpet: Lost 1 RTC interrupts [ 191.902886][ C2] hpet: Lost 1 RTC interrupts [ 191.970795][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 192.720416][ T6885] tipc: Started in network mode [ 192.720444][ T6885] tipc: Node identity 5e14c5a0e133, cluster identity 4711 [ 192.720616][ T6885] tipc: Enabled bearer , priority 0 [ 192.721340][ T6885] syzkaller0: entered promiscuous mode [ 192.721357][ T6885] syzkaller0: entered allmulticast mode [ 192.734665][ T6885] netlink: 'syz.3.238': attribute type 4 has an invalid length. [ 192.799396][ T6886] netlink: 'syz.3.238': attribute type 4 has an invalid length. [ 193.050578][ T6884] tipc: Resetting bearer [ 193.081541][ T6870] netlink: 44 bytes leftover after parsing attributes in process `syz.2.230'. [ 193.363884][ T6884] tipc: Disabling bearer [ 193.992142][ T6906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.242'. [ 193.994790][ T6906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.242'. [ 193.996190][ T6906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.242'. [ 194.030458][ T6906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.242'. [ 194.030490][ T6906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.242'. [ 194.037476][ T6906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.242'. [ 194.037502][ T6906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.242'. [ 194.076720][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 194.292767][ T6906] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.294655][ T6906] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.524412][ T6906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.529924][ T6906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.488146][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.488188][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.488218][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.488246][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.496423][ C2] hpet_rtc_timer_reinit: 19 callbacks suppressed [ 196.496444][ C2] hpet: Lost 1 RTC interrupts [ 196.774165][ T5859] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 196.989335][ T5859] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 196.990599][ T5859] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 196.990634][ T5859] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 149, changing to 7 [ 196.992838][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.992860][ T5859] usb 7-1: Product: 裸칋鹣両쾿踙㶖릭빺⮗䣀躮葦熢ꑛꎊ縳祜㠼⸩惍⠜㮇Ᾰ㒼ᷘ廀턩͚짰槏틜垷⛉糬ꋶ셊爪뢾㌹㨱侁ॖ죍㑫琲芯൨ㅃꞝ㦩郪踾፾롺ằ쵁⒣芣↰쒋䮫倅Ꮩᷮ岅Ꭳⱽ゜尾髇㽔⋕ᴢ⦲諟逫ꉬӅﰀԠ괙廐ދ朆쏌 [ 196.992886][ T5859] usb 7-1: Manufacturer: 莃䟾∉燽蒙㚮赩汍劲ⶖ뜟⮇詑ﶁ᧠ۯ⭼᝺㬉๐로﫢➦㖙찛ൻ㔳᷋གྷⰕ솸稏苟堉럨枔麛Ṛㅟ췏얓輎쫷愈숭孱矴䌪ഭ袺臎蟈堄鍽洜㊻䤺갴䥄췹첝ⴄᐌ꣆袢䏝ᵷ틛䜆ࢳ䠯⳱郎ᩞ뺎붞៕⋁ꯛ燯豔 [ 196.992910][ T5859] usb 7-1: SerialNumber: Љ [ 197.027997][ C2] hpet: Lost 1 RTC interrupts [ 197.187691][ C2] hpet: Lost 2 RTC interrupts [ 197.266023][ C2] hpet: Lost 1 RTC interrupts [ 197.658187][ C2] hpet: Lost 1 RTC interrupts [ 197.739214][ T6952] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 197.739234][ T6952] PKCS7: Only support pkcs7_signedData type [ 197.753654][ T6952] netlink: 'syz.3.256': attribute type 2 has an invalid length. [ 197.765477][ T6952] fuseblk: Unknown parameter '' [ 198.798356][ C2] hpet: Lost 2 RTC interrupts [ 199.002158][ C2] hpet: Lost 2 RTC interrupts [ 199.060872][ C2] hpet: Lost 1 RTC interrupts [ 199.271025][ T6961] bonding: no command found in bonding_masters - use +ifname or -ifname [ 199.352386][ T6964] __nla_validate_parse: 140 callbacks suppressed [ 199.352410][ T6964] netlink: 48 bytes leftover after parsing attributes in process `syz.3.259'. [ 199.352427][ T6964] net_ratelimit: 2 callbacks suppressed [ 199.352440][ T6964] openvswitch: netlink: Flow key attr not present in new flow. [ 199.430014][ C2] hpet: Lost 1 RTC interrupts [ 199.622229][ C2] hpet: Lost 3 RTC interrupts [ 199.772731][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 200.487620][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.487677][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.951302][ T6981] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 201.152821][ T38] IPVS: starting estimator thread 0... [ 201.191858][ T6984] ip6tnl1: entered allmulticast mode [ 201.345978][ T6986] IPVS: using max 28 ests per chain, 67200 per kthread [ 201.429887][ T6992] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 201.455579][ T38] IPVS: starting estimator thread 0... [ 201.580419][ T6993] IPVS: using max 28 ests per chain, 67200 per kthread [ 201.674764][ T6997] usb usb8: usbfs: process 6997 (syz.3.266) did not claim interface 0 before use [ 202.066407][ C2] hpet_rtc_timer_reinit: 8 callbacks suppressed [ 202.066428][ C2] hpet: Lost 1 RTC interrupts [ 202.250702][ T5859] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 202.266512][ C2] hpet: Lost 2 RTC interrupts [ 202.574104][ C2] hpet: Lost 1 RTC interrupts [ 202.694119][ C2] hpet: Lost 1 RTC interrupts [ 202.746231][ C2] hpet: Lost 1 RTC interrupts [ 202.767432][ T5859] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 202.869417][ T6748] udevd[6748]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.445164][ T7009] netlink: 56 bytes leftover after parsing attributes in process `syz.3.271'. [ 203.469601][ C2] hpet: Lost 1 RTC interrupts [ 203.552081][ T7012] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 203.587326][ C2] hpet: Lost 1 RTC interrupts [ 203.637906][ C2] hpet: Lost 1 RTC interrupts [ 203.706115][ C2] hpet: Lost 1 RTC interrupts [ 203.766068][ C2] hpet: Lost 1 RTC interrupts [ 203.803537][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 203.846740][ T6934] Set syz1 is full, maxelem 65536 reached [ 203.905137][ T25] usb 7-1: USB disconnect, device number 5 [ 203.940371][ T5865] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 204.110515][ T5865] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 204.112980][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.113026][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.115420][ T5865] usb 5-1: config 0 descriptor?? [ 204.192906][ T7020] netlink: 32 bytes leftover after parsing attributes in process `syz.1.275'. [ 204.352766][ T7012] trusted_key: encrypted_key: insufficient parameters specified [ 204.466665][ T7012] bond1: Removing last ns target with arp_interval on [ 204.484943][ T5865] ath6kl: Failed to submit usb control message: -71 [ 204.484985][ T5865] ath6kl: unable to send the bmi data to the device: -71 [ 204.485004][ T5865] ath6kl: Unable to send get target info: -71 [ 204.488736][ T5865] ath6kl: Failed to init ath6kl core: -71 [ 204.489476][ T5865] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 204.585362][ T5865] usb 5-1: USB disconnect, device number 10 [ 206.727114][ T7010] syz.3.271 (7010) used greatest stack depth: 19112 bytes left [ 207.263680][ C2] hpet_rtc_timer_reinit: 30 callbacks suppressed [ 207.263701][ C2] hpet: Lost 1 RTC interrupts [ 207.323182][ T7038] : entered promiscuous mode [ 207.582226][ C2] hpet: Lost 1 RTC interrupts [ 207.780619][ C2] hpet: Lost 1 RTC interrupts [ 208.218115][ C2] hpet: Lost 1 RTC interrupts [ 208.258072][ C2] hpet: Lost 1 RTC interrupts [ 208.387761][ C2] hpet: Lost 1 RTC interrupts [ 208.423336][ T7053] fuse: fd is not a fuse device [ 208.796723][ C2] hpet: Lost 1 RTC interrupts [ 208.876113][ C2] hpet: Lost 1 RTC interrupts [ 209.323799][ C2] hpet: Lost 1 RTC interrupts [ 209.360756][ C2] hpet: Lost 1 RTC interrupts [ 210.923450][ T7053] IPVS: Error connecting to the multicast addr [ 211.331889][ T7094] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 211.331921][ T7094] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 211.373926][ T7094] vhci_hcd vhci_hcd.0: Device attached [ 211.698327][ T10] usb 38-1: SetAddress Request (2) to port 0 [ 211.698416][ T10] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 212.294133][ T7095] vhci_hcd: connection reset by peer [ 212.309771][ T5598] vhci_hcd vhci_hcd.0: stop threads [ 212.310619][ T5598] vhci_hcd vhci_hcd.0: release socket [ 212.319157][ T5598] vhci_hcd vhci_hcd.0: disconnect device [ 212.417731][ C2] hpet_rtc_timer_reinit: 17 callbacks suppressed [ 212.417748][ C2] hpet: Lost 1 RTC interrupts [ 212.750106][ C2] hpet: Lost 1 RTC interrupts [ 213.106016][ C2] hpet: Lost 1 RTC interrupts [ 213.140737][ C2] hpet: Lost 1 RTC interrupts [ 213.417802][ C2] hpet: Lost 1 RTC interrupts [ 213.968102][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 213.971144][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 213.971839][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 213.972772][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 214.043046][ C2] hpet: Lost 3 RTC interrupts [ 214.256123][ C2] hpet: Lost 1 RTC interrupts [ 214.262310][ T7145] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 214.406161][ C2] hpet: Lost 1 RTC interrupts [ 214.638251][ C2] hpet: Lost 1 RTC interrupts [ 214.808177][ C2] hpet: Lost 1 RTC interrupts [ 215.218183][ T7152] tmpfs: Unknown parameter '' [ 215.822248][ T35] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 215.971008][ T35] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 215.971046][ T35] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 215.971997][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.972039][ T35] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.972062][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 215.973132][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.973176][ T35] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.973200][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 215.974327][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.974369][ T35] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.974398][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 215.975658][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.975697][ T35] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.975718][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 215.976621][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.976656][ T35] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.976679][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 215.984631][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.984673][ T35] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.984693][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 215.985708][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.985745][ T35] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.985764][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 215.990041][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.990085][ T35] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 215.990107][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 216.000020][ T35] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 216.000045][ T35] usb 8-1: Product: syz [ 216.000056][ T35] usb 8-1: Manufacturer: syz [ 216.000067][ T35] usb 8-1: SerialNumber: syz [ 216.002189][ T35] usb 8-1: config 0 descriptor?? [ 216.061591][ T57] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 216.081616][ T35] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 216.219000][ T5904] usb 8-1: USB disconnect, device number 10 [ 216.220347][ T57] usb 5-1: device descriptor read/64, error -71 [ 216.344516][ T5904] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 216.470512][ T57] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 216.611314][ T57] usb 5-1: device descriptor read/64, error -71 [ 216.708272][ T7185] overlayfs: failed to clone upperpath [ 216.744771][ T57] usb usb5-port1: attempt power cycle [ 216.772338][ T7186] netlink: 'syz.1.312': attribute type 1 has an invalid length. [ 216.791370][ T10] usb 38-1: device descriptor read/8, error -110 [ 216.914620][ T7188] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 217.086647][ T57] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 217.128794][ T57] usb 5-1: device descriptor read/8, error -71 [ 217.192202][ T10] usb usb38-port1: attempt power cycle [ 217.297520][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'. [ 217.357306][ T7199] netlink: 'syz.2.315': attribute type 1 has an invalid length. [ 217.359005][ T7199] netlink: 'syz.2.315': attribute type 1 has an invalid length. [ 217.394672][ T57] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 217.431787][ T57] usb 5-1: device descriptor read/8, error -71 [ 217.453214][ C2] hpet_rtc_timer_reinit: 8 callbacks suppressed [ 217.453234][ C2] hpet: Lost 1 RTC interrupts [ 217.529773][ T7199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.552608][ T57] usb usb5-port1: unable to enumerate USB device [ 217.620040][ T7194] bond1: (slave geneve2): making interface the new active one [ 217.633138][ T7194] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 217.651331][ T5598] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 217.651372][ T5598] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 217.651400][ T5598] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 217.651426][ T5598] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 217.702769][ C2] hpet: Lost 1 RTC interrupts [ 217.772217][ T10] usb usb38-port1: unable to enumerate USB device [ 217.778011][ T43] audit: type=1326 audit(1789601469.255:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.3.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 217.778057][ T43] audit: type=1326 audit(1789601469.255:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.3.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 217.810516][ C2] hpet: Lost 1 RTC interrupts [ 217.846248][ C2] hpet: Lost 1 RTC interrupts [ 218.039151][ C2] hpet: Lost 1 RTC interrupts [ 218.189852][ T7208] XFS (mtdblock0): Invalid superblock magic number [ 218.217907][ C2] hpet: Lost 1 RTC interrupts [ 218.255392][ C2] hpet: Lost 1 RTC interrupts [ 218.858791][ C2] hpet: Lost 1 RTC interrupts [ 219.039930][ T7229] input: syz1 as /devices/virtual/input/input8 [ 219.463793][ T7233] overlayfs: failed to clone upperpath [ 220.117234][ T7240] netlink: 256 bytes leftover after parsing attributes in process `syz.0.323'. [ 220.164906][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 220.257241][ T5873] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 220.430285][ T5873] usb 7-1: Using ep0 maxpacket: 8 [ 220.430928][ T5873] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 220.431993][ T5873] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.432011][ T5873] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 220.432042][ T5873] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 220.432064][ T5873] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 220.432095][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.436988][ T5873] hub 7-1:1.0: bad descriptor, ignoring hub [ 220.437004][ T5873] hub 7-1:1.0: probe with driver hub failed with error -5 [ 220.437356][ T5873] cdc_wdm 7-1:1.0: skipping garbage [ 220.437365][ T5873] cdc_wdm 7-1:1.0: skipping garbage [ 220.536162][ T5873] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 220.536182][ T5873] cdc_wdm 7-1:1.0: Unknown control protocol [ 220.542343][ T7246] syzkaller0: entered promiscuous mode [ 220.542368][ T7246] syzkaller0: entered allmulticast mode [ 220.661510][ T7246] tipc: Started in network mode [ 220.661535][ T7246] tipc: Node identity 9eab17ae683d, cluster identity 4711 [ 220.662634][ T7246] tipc: Enabled bearer , priority 0 [ 220.713070][ T7245] tipc: Resetting bearer [ 220.902647][ T7245] tipc: Disabling bearer [ 220.928120][ T7252] syz.1.330(7252): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 222.234414][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 222.647332][ C2] hpet_rtc_timer_reinit: 26 callbacks suppressed [ 222.647353][ C2] hpet: Lost 1 RTC interrupts [ 222.966080][ C2] hpet: Lost 1 RTC interrupts [ 223.023430][ T67] Bluetooth: hci1: command 0x0406 tx timeout [ 223.051590][ T57] usb 7-1: USB disconnect, device number 6 [ 223.622481][ C2] hpet: Lost 1 RTC interrupts [ 223.724397][ T7301] veth0_to_bond: entered allmulticast mode [ 223.745285][ T43] audit: type=1326 audit(1789601475.245:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7302 comm="syz.3.344" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x0 [ 223.767909][ T43] audit: type=1800 audit(1789601475.265:27): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.345" name="file1" dev="tmpfs" ino=483 res=0 errno=0 [ 223.889338][ T43] audit: type=1326 audit(1789601475.385:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7302 comm="syz.3.344" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc3fec code=0x0 [ 224.152344][ C2] hpet: Lost 1 RTC interrupts [ 224.531794][ C2] hpet: Lost 1 RTC interrupts [ 224.668194][ C2] hpet: Lost 1 RTC interrupts [ 224.905907][ C2] hpet: Lost 1 RTC interrupts [ 224.911510][ T7317] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 225.721784][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'. [ 225.721809][ T7325] netlink: 'syz.1.352': attribute type 1 has an invalid length. [ 226.253605][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 226.254658][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 226.255547][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 226.257987][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 226.281139][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 226.399035][ T7338] FAULT_INJECTION: forcing a failure. [ 226.399035][ T7338] name failslab, interval 1, probability 0, space 0, times 0 [ 226.399070][ T7338] CPU: 2 UID: 0 PID: 7338 Comm: syz.3.356 Not tainted syzkaller #0 PREEMPT(full) [ 226.399091][ T7338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.399103][ T7338] Call Trace: [ 226.399109][ T7338] [ 226.399117][ T7338] dump_stack_lvl+0x100/0x190 [ 226.399148][ T7338] should_fail_ex.cold+0x5/0xa [ 226.399174][ T7338] should_failslab+0xc2/0x120 [ 226.399201][ T7338] __kmalloc_cache_noprof+0x91/0x6d0 [ 226.399234][ T7338] ? subflow_create_ctx+0x9b/0x2e0 [ 226.399257][ T7338] subflow_create_ctx+0x9b/0x2e0 [ 226.399279][ T7338] subflow_ulp_init+0xc3/0x4f0 [ 226.399300][ T7338] tcp_set_ulp+0x32e/0x7f0 [ 226.399330][ T7338] mptcp_subflow_create_socket+0x385/0xa30 [ 226.399355][ T7338] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 226.399380][ T7338] ? lock_acquire+0x1d1/0x380 [ 226.399409][ T7338] __mptcp_nmpc_sk+0x17f/0x880 [ 226.399432][ T7338] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 226.399460][ T7338] ? __local_bh_enable_ip+0xa5/0x120 [ 226.399492][ T7338] mptcp_getsockopt+0xce7/0xe50 [ 226.399515][ T7338] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 226.399538][ T7338] ? __pfx_futex_hash+0x10/0x10 [ 226.399570][ T7338] ? aa_sock_opt_perm+0x114/0x1e0 [ 226.399594][ T7338] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 226.399628][ T7338] do_sock_getsockopt+0x50a/0x6e0 [ 226.399665][ T7338] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 226.399697][ T7338] ? __fget_files+0x34/0x3d0 [ 226.399718][ T7338] ? find_held_lock+0x2b/0x80 [ 226.399742][ T7338] ? __fget_files+0x21f/0x3d0 [ 226.399769][ T7338] __sys_getsockopt+0x133/0x1d0 [ 226.399799][ T7338] ? __ia32_sys_getsockopt+0xbc/0x160 [ 226.399820][ T7338] __ia32_sys_getsockopt+0xbc/0x160 [ 226.399843][ T7338] ? __do_fast_syscall_32+0xb3/0x8b0 [ 226.399879][ T7338] ? lockdep_hardirqs_on+0x7d/0x110 [ 226.399905][ T7338] __do_fast_syscall_32+0x13a/0x8b0 [ 226.399931][ T7338] ? lockdep_hardirqs_on+0x7d/0x110 [ 226.399956][ T7338] do_fast_syscall_32+0x32/0x70 [ 226.399983][ T7338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.400006][ T7338] RIP: 0023:0xf7fc3fec [ 226.400027][ T7338] Code: Unable to access opcode bytes at 0xf7fc3fc2. [ 226.400036][ T7338] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 226.400057][ T7338] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000006 [ 226.400069][ T7338] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 226.400079][ T7338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.400088][ T7338] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 226.400099][ T7338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.400124][ T7338] [ 226.430208][ T7338] capability: warning: `syz.3.356' uses deprecated v2 capabilities in a way that may be insecure [ 227.006122][ T7350] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 227.730135][ C2] hpet_rtc_timer_reinit: 13 callbacks suppressed [ 227.740316][ C2] hpet: Lost 1 RTC interrupts [ 227.873285][ C2] hpet: Lost 1 RTC interrupts [ 228.095197][ C2] hpet: Lost 4 RTC interrupts [ 228.483577][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'. [ 228.535359][ C2] hpet: Lost 1 RTC interrupts [ 228.593694][ C2] hpet: Lost 1 RTC interrupts [ 228.718046][ C2] hpet: Lost 1 RTC interrupts [ 228.750050][ C2] hpet: Lost 1 RTC interrupts [ 229.073736][ C2] hpet: Lost 1 RTC interrupts [ 229.145836][ C2] hpet: Lost 1 RTC interrupts [ 229.199563][ C2] hpet: Lost 1 RTC interrupts [ 229.377018][ T7401] netlink: Failed to add helper -22 [ 229.377068][ T7401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.834880][ T7415] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 230.768398][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'. [ 231.328863][ T7444] netlink: 892 bytes leftover after parsing attributes in process `syz.1.385'. [ 231.328959][ T7448] netlink: 892 bytes leftover after parsing attributes in process `syz.1.385'. [ 231.526830][ T7451] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 231.755726][ T7451] gadgetfs: bound to dummy_udc driver [ 232.095657][ T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 232.104929][ C0] gadgetfs: connected [ 232.105230][ T10] gadgetfs: disconnected [ 232.203107][ T7449] gadgetfs: suspended from state 2 [ 232.450686][ T10] usb 5-1: device not accepting address 15, error -71 [ 232.706648][ T7461] netlink: 52 bytes leftover after parsing attributes in process `syz.1.389'. [ 232.843172][ C2] hpet_rtc_timer_reinit: 14 callbacks suppressed [ 232.843194][ C2] hpet: Lost 1 RTC interrupts [ 232.871600][ C2] hpet: Lost 1 RTC interrupts [ 233.061920][ C2] hpet: Lost 1 RTC interrupts [ 233.109980][ T7468] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1 [ 233.110000][ T7468] Unsupported pkey algo: 106 [ 233.298157][ C2] hpet: Lost 1 RTC interrupts [ 233.358859][ T5859] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 233.519526][ T5859] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 233.562026][ C2] hpet: Lost 1 RTC interrupts [ 233.661975][ C2] hpet: Lost 1 RTC interrupts [ 233.771350][ T7483] pim6reg: entered allmulticast mode [ 233.860538][ T7483] pim6reg: left allmulticast mode [ 233.865930][ T5859] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.865973][ T5859] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.946056][ C2] hpet: Lost 1 RTC interrupts [ 234.039188][ T5859] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.039216][ T5859] usb 8-1: Product: syz [ 234.039231][ T5859] usb 8-1: Manufacturer: syz [ 234.039245][ T5859] usb 8-1: SerialNumber: syz [ 234.439482][ T7493] syz.3.392 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 234.574033][ C2] hpet: Lost 1 RTC interrupts [ 235.137906][ C2] hpet: Lost 1 RTC interrupts [ 235.363095][ T7510] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 235.468772][ C2] hpet: Lost 1 RTC interrupts [ 236.064188][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 236.650719][ T7521] FAULT_INJECTION: forcing a failure. [ 236.650719][ T7521] name failslab, interval 1, probability 0, space 0, times 0 [ 236.650751][ T7521] CPU: 1 UID: 0 PID: 7521 Comm: syz.2.405 Not tainted syzkaller #0 PREEMPT(full) [ 236.650771][ T7521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.650780][ T7521] Call Trace: [ 236.650787][ T7521] [ 236.650794][ T7521] dump_stack_lvl+0x100/0x190 [ 236.650821][ T7521] should_fail_ex.cold+0x5/0xa [ 236.650843][ T7521] should_failslab+0xc2/0x120 [ 236.650868][ T7521] __kmalloc_noprof+0xfc/0x840 [ 236.650883][ T7521] ? rcu_is_watching+0x13/0xc0 [ 236.650901][ T7521] ? tomoyo_realpath_from_path+0xb6/0x690 [ 236.650926][ T7521] tomoyo_realpath_from_path+0xb6/0x690 [ 236.650949][ T7521] tomoyo_path_number_perm+0x23c/0x580 [ 236.650973][ T7521] ? tomoyo_path_number_perm+0x22e/0x580 [ 236.650999][ T7521] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 236.651024][ T7521] ? get_pid_task+0x106/0x250 [ 236.651049][ T7521] ? __lock_acquire+0x5c0/0x1f40 [ 236.651084][ T7521] ? __fget_files+0x34/0x3d0 [ 236.651105][ T7521] ? find_held_lock+0x2b/0x80 [ 236.651122][ T7521] ? __fget_files+0x215/0x3d0 [ 236.651139][ T7521] ? hook_file_ioctl_common+0x140/0x440 [ 236.651162][ T7521] ? __fget_files+0x215/0x3d0 [ 236.651183][ T7521] ? __fget_files+0x21f/0x3d0 [ 236.651203][ T7521] security_file_ioctl_compat+0xd3/0x230 [ 236.651230][ T7521] __ia32_compat_sys_ioctl+0xc2/0x360 [ 236.651258][ T7521] __do_fast_syscall_32+0x13a/0x8b0 [ 236.651283][ T7521] ? lockdep_hardirqs_on+0x7d/0x110 [ 236.651309][ T7521] do_fast_syscall_32+0x32/0x70 [ 236.651342][ T7521] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.651364][ T7521] RIP: 0023:0xf7f34fec [ 236.651383][ T7521] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 236.651391][ T7521] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 236.651409][ T7521] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008640a [ 236.651419][ T7521] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.651428][ T7521] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.651438][ T7521] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 236.651447][ T7521] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.651469][ T7521] [ 236.651476][ T7521] ERROR: Out of memory at tomoyo_realpath_from_path. [ 237.031931][ T7522] fuse: fd is not a fuse device [ 237.270446][ T56] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 237.438738][ T56] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 237.439916][ T56] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.439938][ T56] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 237.439954][ T56] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.451412][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.451433][ T56] usb 7-1: Product: syz [ 237.451443][ T56] usb 7-1: Manufacturer: syz [ 237.451453][ T56] usb 7-1: SerialNumber: syz [ 237.519324][ T56] hub 7-1:1.0: bad descriptor, ignoring hub [ 237.519351][ T56] hub 7-1:1.0: probe with driver hub failed with error -5 [ 237.925647][ C2] hpet_rtc_timer_reinit: 12 callbacks suppressed [ 237.925669][ C2] hpet: Lost 1 RTC interrupts [ 237.957945][ C2] hpet: Lost 1 RTC interrupts [ 238.001500][ T56] usblp 7-1:1.0: usblp1: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 238.054580][ C2] hpet: Lost 1 RTC interrupts [ 238.059483][ T56] usb 7-1: USB disconnect, device number 7 [ 238.063991][ T56] usblp1: removed [ 238.277865][ C2] hpet: Lost 1 RTC interrupts [ 238.288069][ T10] usb 8-1: USB disconnect, device number 11 [ 238.402794][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 238.423754][ T7543] fuse: Bad value for 'rootmode' [ 238.501484][ T56] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 238.536576][ T7546] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 238.713912][ T56] usb 7-1: unable to get BOS descriptor or descriptor too short [ 238.713983][ T56] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 238.722832][ T56] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 238.722856][ T56] usb 7-1: can't read configurations, error -71 [ 238.791795][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.414'. [ 239.038804][ C2] hpet: Lost 1 RTC interrupts [ 239.168381][ C2] hpet: Lost 1 RTC interrupts [ 239.214090][ C2] hpet: Lost 1 RTC interrupts [ 239.466502][ C2] hpet: Lost 1 RTC interrupts [ 239.497891][ C2] hpet: Lost 1 RTC interrupts [ 239.566418][ C2] hpet: Lost 1 RTC interrupts [ 239.806303][ T7561] e1000e 0000:00:02.0 eth1: removed PHC [ 240.609124][ T7561] ------------[ cut here ]------------ [ 240.609139][ T7561] remove_proc_entry: removing non-empty directory 'irq/32', leaking at least 'pcmmio' [ 240.609153][ T7561] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#1: syz.2.417/7561 [ 240.650144][ T7561] Modules linked in: [ 240.672792][ T7561] CPU: 1 UID: 0 PID: 7561 Comm: syz.2.417 Not tainted syzkaller #0 PREEMPT(full) [ 240.679771][ T7561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.701694][ T7561] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 240.706581][ T7561] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 29 1f 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 66 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 cc ed 4a ff 48 8d 7d 18 48 b8 00 [ 240.731419][ T7561] RSP: 0018:ffffc90022a8f678 EFLAGS: 00010246 [ 240.742307][ T7561] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88804a2f975c [ 240.755344][ T7561] RDX: ffff88801d3a05dc RSI: ffffffff8c0b6640 RDI: ffffffff914b9310 [ 240.763029][ T7561] RBP: ffff88804a2f9738 R08: ffff88805c7fa99c R09: ffffed100945f2d3 [ 240.768921][ T7561] R10: ffff88804a2f969b R11: 0000000000000000 R12: ffff88804a2f9680 [ 240.775339][ T7561] R13: ffff88801d3a0500 R14: ffff88805c7fa978 R15: dffffc0000000000 [ 240.780989][ T7561] FS: 0000000000000000(0000) GS:ffff888096a60000(0063) knlGS:00000000f53f6b40 [ 240.786203][ T7561] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 240.791288][ T7561] CR2: 00005612f0327950 CR3: 000000004bb14000 CR4: 0000000000352ef0 [ 240.797764][ T7561] Call Trace: [ 240.824797][ T7561] [ 240.826443][ T7561] ? __pfx_remove_proc_entry+0x10/0x10 [ 240.829849][ T7561] ? mtree_load+0x3a4/0xb50 [ 240.832093][ T7561] ? __pfx_mtree_load+0x10/0x10 [ 240.834229][ T7561] unregister_irq_proc+0x206/0x2a0 [ 240.849110][ T7561] ? __pfx_unregister_irq_proc+0x10/0x10 [ 240.852823][ T7561] free_desc+0x89/0x330 [ 240.858716][ T7561] ? __pfx_free_desc+0x10/0x10 [ 240.876043][ T7561] ? kasan_quarantine_put+0x104/0x240 [ 240.879373][ T7561] ? lockdep_hardirqs_on+0x7d/0x110 [ 240.882372][ T7561] irq_free_descs+0x84/0xc0 [ 240.884283][ T7561] irq_domain_free_irqs+0x46a/0x5c0 [ 240.888297][ T7561] msi_domain_free_locked.part.0+0x524/0x6b0 [ 240.902076][ T7561] ? __pfx_msi_domain_free_locked.part.0+0x10/0x10 [ 240.908884][ T7561] ? msi_get_device_domain+0x115/0x1f0 [ 240.930459][ T7561] msi_domain_free_irqs_all_locked+0x11d/0x170 [ 240.936272][ T7561] ? __pfx_msi_domain_free_irqs_all_locked+0x10/0x10 [ 240.943422][ T7561] ? pci_msix_shutdown+0x3a3/0x500 [ 240.947832][ T7561] ? __pfx_pci_msix_shutdown+0x10/0x10 [ 240.954895][ T7561] pci_msi_teardown_msi_irqs+0xb3/0xd0 [ 240.959825][ T7561] pci_free_msi_irqs+0x1f/0xa0 [ 240.965091][ T7561] pci_disable_msix+0xcf/0x100 [ 240.970092][ T7561] e1000_remove+0x1a3/0x560 [ 240.976497][ T7561] pci_device_remove+0xb2/0x1d0 [ 240.979528][ T7561] ? __pfx_pci_device_remove+0x10/0x10 [ 240.999341][ T7561] device_remove+0xcb/0x180 [ 241.001341][ T7561] device_release_driver_internal+0x44e/0x620 [ 241.042017][ T7561] unbind_store+0xf8/0x110 [ 241.044217][ T7561] ? __pfx_unbind_store+0x10/0x10 [ 241.046805][ T7561] drv_attr_store+0x74/0xb0 [ 241.068263][ T7561] ? __pfx_drv_attr_store+0x10/0x10 [ 241.072585][ T7561] sysfs_kf_write+0xf2/0x150 [ 241.078240][ T7561] kernfs_fop_write_iter+0x3e0/0x5f0 [ 241.089930][ T7561] ? __pfx_sysfs_kf_write+0x10/0x10 [ 241.092437][ T7561] vfs_write+0x6af/0x1050 [ 241.094387][ T7561] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 241.097138][ T7561] ? __pfx_vfs_write+0x10/0x10 [ 241.121758][ T7561] ? find_held_lock+0x2b/0x80 [ 241.124483][ T7561] ksys_write+0x12a/0x250 [ 241.126702][ T7561] ? __pfx_ksys_write+0x10/0x10 [ 241.129317][ T7561] __do_fast_syscall_32+0x13a/0x8b0 [ 241.134860][ T7561] ? lockdep_hardirqs_on+0x7d/0x110 [ 241.138725][ T7561] do_fast_syscall_32+0x32/0x70 [ 241.142461][ T7561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 241.145501][ T7561] RIP: 0023:0xf7f34fec [ 241.174221][ T7561] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 241.177099][ T7561] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 241.181285][ T7561] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 241.185042][ T7561] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 241.208599][ T7561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.213734][ T7561] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 241.220585][ T7561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.248512][ T7561] [ 241.251833][ T7561] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 241.255095][ T7561] CPU: 1 UID: 0 PID: 7561 Comm: syz.2.417 Not tainted syzkaller #0 PREEMPT(full) [ 241.258953][ T7561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.263575][ T7561] Call Trace: [ 241.265877][ T7561] [ 241.267154][ T7561] dump_stack_lvl+0x100/0x190 [ 241.275035][ T7561] vpanic+0x553/0x970 [ 241.277751][ T7561] ? __pfx_vpanic+0x10/0x10 [ 241.279752][ T7561] panic+0xd1/0xe0 [ 241.281973][ T7561] ? __pfx_panic+0x10/0x10 [ 241.293753][ T7561] check_panic_on_warn.cold+0x19/0x34 [ 241.296150][ T7561] ? remove_proc_entry+0x4e7/0x610 [ 241.302745][ T7561] __warn.cold+0x191/0x318 [ 241.304756][ T7561] __report_bug+0x30f/0x440 [ 241.308092][ T7561] ? remove_proc_entry+0x4e7/0x610 [ 241.314733][ T7561] ? __pfx___report_bug+0x10/0x10 [ 241.327183][ T7561] ? do_raw_spin_lock+0x128/0x260 [ 241.329497][ T7561] ? find_held_lock+0x2b/0x80 [ 241.331422][ T7561] ? proc_entry_rundown+0x158/0x1e0 [ 241.338639][ T7561] ? proc_entry_rundown+0x158/0x1e0 [ 241.341769][ T7561] report_bug_entry+0xe2/0x290 [ 241.357035][ T7561] ? remove_proc_entry+0x4f5/0x610 [ 241.365865][ T7561] handle_bug+0x1cd/0x2a0 [ 241.372012][ T7561] exc_invalid_op+0x17/0x50 [ 241.379471][ T7561] asm_exc_invalid_op+0x1a/0x20 [ 241.382329][ T7561] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 241.389346][ T7561] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 29 1f 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 66 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 cc ed 4a ff 48 8d 7d 18 48 b8 00 [ 241.411279][ T7561] RSP: 0018:ffffc90022a8f678 EFLAGS: 00010246 [ 241.419466][ T7561] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88804a2f975c [ 241.429008][ T7561] RDX: ffff88801d3a05dc RSI: ffffffff8c0b6640 RDI: ffffffff914b9310 [ 241.443361][ T7561] RBP: ffff88804a2f9738 R08: ffff88805c7fa99c R09: ffffed100945f2d3 [ 241.446897][ T7561] R10: ffff88804a2f969b R11: 0000000000000000 R12: ffff88804a2f9680 [ 241.449966][ T7561] R13: ffff88801d3a0500 R14: ffff88805c7fa978 R15: dffffc0000000000 [ 241.453071][ T7561] ? remove_proc_entry+0x478/0x610 [ 241.455595][ T7561] ? __pfx_remove_proc_entry+0x10/0x10 [ 241.458066][ T7561] ? mtree_load+0x3a4/0xb50 [ 241.459917][ T7561] ? __pfx_mtree_load+0x10/0x10 [ 241.461802][ T7561] unregister_irq_proc+0x206/0x2a0 [ 241.463733][ T7561] ? __pfx_unregister_irq_proc+0x10/0x10 [ 241.466395][ T7561] free_desc+0x89/0x330 [ 241.468272][ T7561] ? __pfx_free_desc+0x10/0x10 [ 241.470448][ T7561] ? kasan_quarantine_put+0x104/0x240 [ 241.473270][ T7561] ? lockdep_hardirqs_on+0x7d/0x110 [ 241.475882][ T7561] irq_free_descs+0x84/0xc0 [ 241.477697][ T7561] irq_domain_free_irqs+0x46a/0x5c0 [ 241.479843][ T7561] msi_domain_free_locked.part.0+0x524/0x6b0 [ 241.482104][ T7561] ? __pfx_msi_domain_free_locked.part.0+0x10/0x10 [ 241.484714][ T7561] ? msi_get_device_domain+0x115/0x1f0 [ 241.487720][ T7561] msi_domain_free_irqs_all_locked+0x11d/0x170 [ 241.491253][ T7561] ? __pfx_msi_domain_free_irqs_all_locked+0x10/0x10 [ 241.495038][ T7561] ? pci_msix_shutdown+0x3a3/0x500 [ 241.497619][ T7561] ? __pfx_pci_msix_shutdown+0x10/0x10 [ 241.500490][ T7561] pci_msi_teardown_msi_irqs+0xb3/0xd0 [ 241.503450][ T7561] pci_free_msi_irqs+0x1f/0xa0 [ 241.505687][ T7561] pci_disable_msix+0xcf/0x100 [ 241.507702][ T7561] e1000_remove+0x1a3/0x560 [ 241.509535][ T7561] pci_device_remove+0xb2/0x1d0 [ 241.511995][ T7561] ? __pfx_pci_device_remove+0x10/0x10 [ 241.515234][ T7561] device_remove+0xcb/0x180 [ 241.517803][ T7561] device_release_driver_internal+0x44e/0x620 [ 241.520514][ T7561] unbind_store+0xf8/0x110 [ 241.522159][ T7561] ? __pfx_unbind_store+0x10/0x10 [ 241.534749][ T7561] drv_attr_store+0x74/0xb0 [ 241.536814][ T7561] ? __pfx_drv_attr_store+0x10/0x10 [ 241.545905][ T7561] sysfs_kf_write+0xf2/0x150 [ 241.548417][ T7561] kernfs_fop_write_iter+0x3e0/0x5f0 [ 241.550759][ T7561] ? __pfx_sysfs_kf_write+0x10/0x10 [ 241.562749][ T7561] vfs_write+0x6af/0x1050 [ 241.564819][ T7561] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 241.567388][ T7561] ? __pfx_vfs_write+0x10/0x10 [ 241.569443][ T7561] ? find_held_lock+0x2b/0x80 [ 241.571470][ T7561] ksys_write+0x12a/0x250 [ 241.576214][ T7561] ? __pfx_ksys_write+0x10/0x10 [ 241.579288][ T7561] __do_fast_syscall_32+0x13a/0x8b0 [ 241.582666][ T7561] ? lockdep_hardirqs_on+0x7d/0x110 [ 241.595215][ T7561] do_fast_syscall_32+0x32/0x70 [ 241.598902][ T7561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 241.604143][ T7561] RIP: 0023:0xf7f34fec [ 241.608122][ T7561] Code: Unable to access opcode bytes at 0xf7f34fc2. [ 241.613300][ T7561] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 241.618958][ T7561] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 241.625898][ T7561] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 241.630997][ T7561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.636649][ T7561] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 241.642969][ T7561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.648752][ T7561] [ 241.670886][ T7561] Kernel Offset: disabled [ 241.674000][ T7561] Rebooting in 86400 seconds..