last executing test programs: 2m18.53628293s ago: executing program 3 (id=340): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x3d810686a7d95765, 0x70bd2d, 0x25dfdb79}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) (fail_nth: 8) 2m18.431862048s ago: executing program 3 (id=341): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$getown(r0, 0x9) (async) r1 = fcntl$getown(r0, 0x9) prlimit64(r1, 0xe, &(0x7f0000000380)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="58180000e32dc95b68"], 0x2c}, 0x1, 0x0, 0x0, 0x440c1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_clone(0x44200100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x44200100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) rt_sigsuspend(&(0x7f0000000000)={[0xec, 0x7f]}, 0x8) 2m18.29178747s ago: executing program 3 (id=342): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0xfffffdef}], 0x4000095, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2m17.402069592s ago: executing program 3 (id=351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x180, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x541b, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000f2473d2cef9c53f42bcd977a450ac81181c35f85770145f6011f4f5926d43062aebb99d3e960a30ebf42e7a493c27b36e7", @ANYRES16=r3, @ANYBLOB="010000000000fcdbdf254400000008000300", @ANYRES32=r6, @ANYBLOB="0c00238008000b00ffffff7f"], 0x28}}, 0x4) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x5e}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xb}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x2400c8c0) 2m17.401313249s ago: executing program 3 (id=353): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8821}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x40}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000380)={0x3, 0x9}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) poll(&(0x7f00000000c0)=[{r1, 0x2006}], 0x1, 0x7ff) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "491e8f6fda908499", "d656798feb353f99cb53000fac69957c56001000000000000020000000001200", "94444681", '\x00\t\x00\x00\x00YZ;'}, 0x38) shutdown(r1, 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000104000080000014001280090001007665746800000000040002800800030000fcffff090001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) mmap(&(0x7f0000361000/0x2000)=nil, 0x2000, 0x0, 0x769f00b363884738, 0xffffffffffffffff, 0x0) close(0x3) openat(0xffffffffffffffff, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200002, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x5, 0x4, 0x8, 0xff, 0x100}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="7eaadcc9958be06efaeffe00000000000061e600"/33], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2, @ANYRES32=r6, @ANYRESOCT=r2], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7}, 0xc) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x450c03, 0x0) 2m16.011929668s ago: executing program 3 (id=356): syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000906050000000000000000000100003e3219050900020073797a30000000000500010007000000080009400000000114e70780100007800a001100aaaaaaaaaa8e0000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x4}], 0x1c) r4 = dup(r3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000240)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_clone3(&(0x7f000000dd80)={0x80000000, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x4004550a, 0x0) setxattr$incfs_size(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=0x9, 0x8, 0x2) ioctl$PPPIOCGIDLE(r4, 0x8008743f, &(0x7f00000002c0)) 2m0.981720926s ago: executing program 32 (id=356): syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000906050000000000000000000100003e3219050900020073797a30000000000500010007000000080009400000000114e70780100007800a001100aaaaaaaaaa8e0000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x4}], 0x1c) r4 = dup(r3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000240)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_clone3(&(0x7f000000dd80)={0x80000000, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x4004550a, 0x0) setxattr$incfs_size(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=0x9, 0x8, 0x2) ioctl$PPPIOCGIDLE(r4, 0x8008743f, &(0x7f00000002c0)) 21.791690646s ago: executing program 1 (id=780): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) splice(r0, &(0x7f00000000c0)=0x7, r0, &(0x7f0000000140)=0xffffffffffffffff, 0x0, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c000280050001000000000008000740000000010b001640"], 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000080)={0x8, 0x100, 0x7ff, 0xffffffff, 0x1, "a697bcaf2d294867461f365df6e9202d80fde8", 0x6, 0x2}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x214002, 0x20) openat$cgroup_ro(r6, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) 21.031549676s ago: executing program 1 (id=783): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) r0 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = fsmount(r0, 0x0, 0x0) setreuid(0x0, 0xee00) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) write$UHID_INPUT(r1, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={r3, 0x0, 0x1, "ff"}, 0x9) syz_clone3(&(0x7f0000000340)={0x201900400, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@verity_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x31, 0x0, 0x37, 0x62, 0x35, 0x61], 0x2d, [0x33, 0x65, 0x33, 0x37], 0x2d, [0x39, 0x63, 0x31, 0x36], 0x2d, [0x65, 0x66, 0x37, 0x39], 0x2d, [0x64, 0x37, 0x0, 0x35, 0x0, 0x35, 0x34, 0x32]}}}, {@subj_user={'subj_user', 0x3d, 'workdir'}}, {@hash}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_eq}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) write$UHID_INPUT(r6, &(0x7f00000006c0)={0x8, {"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", 0x1000}}, 0x1006) r7 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r7, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000005, 0x4002011, r6, 0x40000000) mmap$IORING_OFF_SQES(&(0x7f0000058000/0x3000)=nil, 0x3000, 0x1000004, 0x80010, r1, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x51, r1, {0x1}}, './file0\x00'}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00', r8}, 0x14) 15.171385448s ago: executing program 1 (id=788): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000300)=""/135, 0x87}], 0x3}, 0x0) 14.91944555s ago: executing program 1 (id=789): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002100)={0xc, {"a2e3ad21ed9b52f91b5d370987f70e06d038e7ff7fc6e5539b3247298b089b07083530090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c300003e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76e0e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9e1ed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c01607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acabdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d73cddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff17705037eefcff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b4b3f0432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf5cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00080000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc15251432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f0da8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d6641d2b84fbf10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eef05ebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2f01f00e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 14.789366401s ago: executing program 0 (id=790): r0 = socket(0x10, 0x3, 0x0) open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) (async) r1 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r1, 0x402, 0x5) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0xc) write(r0, &(0x7f00000000c0)="240000001e005ff813ffffffffe2fff80700000001000000000000000600050002600000", 0x24) 14.598890086s ago: executing program 0 (id=791): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x400}, 0x14}, 0x1, 0x0, 0x0, 0x40804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10010, 0xffffffffffffffff, 0xffffc000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000009e47c3afb5076f2e763c838fbd9d61ea57dc49a6208c3266dd8b7bf7dc5d17061ce6976c3163ec87ef0c0784c7a780613f7721a013b32674ba237d3c312dd3a0e0cead580b0e483f9c8381236b4494e4cc3c4d7f8bec511e781da7c599260be2a5e652d7f8a0fb195406a8e3e2", @ANYRES32, @ANYRES32, @ANYRES32], 0xa8, 0x40}}], 0x1, 0x280408e5) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3d, 0x140, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000004900)=""/4068, 0xfe4}], 0x1) openat$ttynull(0xffffff9c, 0x0, 0x20c00, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, &(0x7f0000000340), 0x4003) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0xfffffe91) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(0xffffffffffffffff, 0x800a6f2f, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800c200040000000200000c0000000c020000000000000300005f000000000000000000"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 14.398261903s ago: executing program 2 (id=792): mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x142351da4b672b6f, &(0x7f0000000580)=@nfc={0x27, 0x0, 0x0, 0x4}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20044040) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = socket(0x10, 0x3, 0x0) nanosleep(&(0x7f0000000400), &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}}, 0x24}}, 0x44080) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00400000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f14010000000000000000000c002e0072646d615f"], 0x1c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c0, 0x800, 0x1000, 0x5cc}, &(0x7f0000000140), &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000300)=r0, 0x4) 12.608590934s ago: executing program 1 (id=793): openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bind$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x3b, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x28, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x4000004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e000f3c002400000000001100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket(0x2, 0x80805, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) 12.201130182s ago: executing program 4 (id=794): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)='\x00', 0x1}], 0x1}}], 0x2, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x28008, 0x0) chdir(&(0x7f0000000300)='./file0\x00') rename(0x0, &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x31, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x1, 0x0, [0x6e, 0x7]}}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) mkdir(0x0, 0x54) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400cb52afc1f2e375f210000000", @ANYBLOB="401000008909040014001280090001007866726d00000000040002"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80) 12.200916947s ago: executing program 2 (id=795): socket$inet_udp(0x2, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="250a000000000000b53e7c611160000000000018000000000000000000000000000000950000000000000021fadda6a83483a5bdb3a9367e3cf79a31c9c83e7c00ce933e3175575c2e62cfa6fb8139418da9772f4840d9c02b3e4fd15f92019ef7da4ab16f11dade6df54666b54e20bf39c6821cdd19536300"/133], &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x20003, 0x1, 0x3, 0x31f}, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socket(0xa, 0x5, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 12.197581644s ago: executing program 0 (id=802): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0xd1, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 11.609599607s ago: executing program 1 (id=796): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x3, 0x0, &(0x7f0000001080)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x27) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000240)={'lo\x00', 0x400}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000280)={'wg0\x00', 0x200}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000080)="09000300010001", 0x7) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000800)={'vcan0\x00'}) dup3(r3, r2, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000080)=""/77, 0x4d}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 11.609374934s ago: executing program 2 (id=797): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x6000}}], 0x1, 0x0) 11.388309905s ago: executing program 0 (id=805): socket$inet_udp(0x2, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="250a000000000000b53e7c611160000000000018000000000000000000000000000000950000000000000021fadda6a83483a5bdb3a9367e3cf79a31c9c83e7c00ce933e3175575c2e62cfa6fb8139418da9772f4840d9c02b3e4fd15f92019ef7da4ab16f11dade6df54666b54e20bf39c6821cdd19536300"/133], &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x20003, 0x1, 0x3, 0x31f}, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socket(0xa, 0x5, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 11.208766153s ago: executing program 2 (id=798): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000300)=""/135, 0x87}], 0x3}, 0x0) 11.070921548s ago: executing program 0 (id=799): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 10.31413535s ago: executing program 2 (id=800): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$CDROM_NEXT_WRITABLE(r2, 0x40041271, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = syz_create_resource$binfmt(0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0xffffffffffffffff, &(0x7f00000003c0)) openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x80) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0xfe, 0x0, 0x0, 0x1, 0x4020000000000ffd, 0x0, 0x0, 0x13, 0xc, "faf98317e5a1149989fc67be62ea6acc96e3a2503dc31c97214d9ceb9af33509a63e201198c8b534464c516bdd8a0faf0a49000000000300", "32d8cc26f7061a74df2c1b062186cee7a908cd4a5d7d99da810047f8990c7f3f800b2f7b6b7e4cc50a1fcaed1e831fa79a00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61319f33", [0x2]}}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x8000, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000) 5.620416653s ago: executing program 4 (id=801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0x43, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000001480)="fff5fffb000000008fd864e888a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0x43, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000001480)="fff5fffb000000008fd864e888a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 5.401061279s ago: executing program 4 (id=803): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000100)=ANY=[@ANYBLOB="8a72616e733d6664cc3fb174f6ffffffff6e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 5.275909835s ago: executing program 4 (id=804): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000640)={{0xd, 0x5, 0x81, 0x53, 'syz1\x00', 0x9}, 0x0, [0x380, 0xb, 0x0, 0xcc1, 0x80, 0x101, 0x80000001, 0xa6d8, 0x2, 0x1, 0x9, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x5, 0x4, 0x2ff, 0x80, 0x962, 0x0, 0x1, 0x4, 0x7fffffff, 0xc360, 0x80000001, 0x6, 0x60e3, 0x6, 0x0, 0x10000, 0x7, 0x1000009, 0x107430, 0x2, 0x5, 0x609, 0x1, 0x3, 0x8, 0x5, 0x9, 0x8, 0x9, 0x1, 0x8, 0x0, 0x1, 0x2, 0x0, 0x6, 0x9000, 0xe93, 0x4, 0x800, 0x7, 0x3, 0x50b, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0x7, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x6, 0x7, 0x1000ac, 0x7, 0x7, 0x4, 0x8000, 0x5, 0x4, 0x7, 0xd, 0x7, 0x5, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x3, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x800005, 0x4, 0x11, 0x1, 0x7, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3ce, 0xa, 0x8, 0x9, 0x0, 0x6, 0xffffdff7, 0xffffbf90, 0xfffffffd, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xbfffffff, 0x73938332, 0x7763]}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x40000, 0x10, 0x4000}, 0x82, 0x0, 0x1, 0x0, 0x4, 0xf, 0x2, 0x0, 0x5, 0x0, {0x4, 0x0, 0x3, 0x0, 0xfffffffd}}}}]}, 0x78}}, 0x0) 211.640727ms ago: executing program 4 (id=806): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x48) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="7eba00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000000000000000000000000050"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r1, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) r5 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344}, 0x7, 0x7) syz_extract_tcp_res(&(0x7f0000000300)={0x41424344, 0x41424344}, 0x1, 0x1) syz_emit_ethernet(0x1186, &(0x7f00000032c0)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="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"], 0x0) ptrace(0x10, r5) ptrace$peekuser(0x3, r5, 0x3f) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) r9 = socket(0x1e, 0x1, 0x0) listen(r9, 0x0) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4(r9, 0x0, 0x0, 0x80000) sendfile(r8, r8, 0x0, 0x23) syz_fuse_handle_req(r8, &(0x7f0000000c40)="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", 0x2000, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 80.576138ms ago: executing program 2 (id=807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x13, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) (fail_nth: 25) 361.21µs ago: executing program 4 (id=808): socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x1a1802, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x1, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x5750c0, 0x11}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0xd8, 0x11, 0x148, 0xd8, 0x0, 0x31c, 0x2a8, 0x2a8, 0x31c, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x24}, {{0x0, 0x5, 0x7}}}, @inet=@rpfilter={{0x24}, {0x2}}]}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1, 0x7a}, 0x0, 0x1e4, 0x244, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'team_slave_1\x00', {0x5, 0xa, 0x2, 0xffffd5ee, 0x5, 0x1ff, 0xb, 0x18, 0x40}, {0x8}}}, @inet=@rpfilter={{0x24}, {0x18}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x6, 0x1], 0xfd, 0x1}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x40c) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000140000000000000095de000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000300)={0x5, 0x9, {0xffffffffffffffff}, {0xee00}, 0xff, 0xa}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, 0x0, 0x2d, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=[0x3513, 0x3, 0x4, 0x200], 0x0, 0x0, 0x4, 0x0, r6}}, 0x3c) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xffff0000) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) 0s ago: executing program 0 (id=809): close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40040, 0x6ab858183a7ef6ba) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x89) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x38, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="3d07cee5f40200f4e50d73eb64b04e73"]}]}, 0x38}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 102.093982][ T6830] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.094002][ T6830] RIP: 0023:0xf706ef6c [ 102.094012][ T6830] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 102.094021][ T6830] RSP: 002b:00000000f543c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 102.094031][ T6830] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c020aa04 [ 102.094037][ T6830] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.094043][ T6830] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.094049][ T6830] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 102.094054][ T6830] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.094067][ T6830] [ 102.094071][ T6830] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.245045][ T6833] bond1: Removing last arp target with arp_interval on [ 102.281959][ T6833] nbd: couldn't find device at index -2145452028 [ 103.156376][ T24] usb 42-1: device descriptor read/8, error -110 [ 103.195802][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 103.357503][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 103.378557][ T6875] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 103.380710][ T6875] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 103.389724][ T6872] IPVS: length: 218 != 24 [ 103.392485][ T6872] syz_tun: entered allmulticast mode [ 103.394437][ T6875] vhci_hcd vhci_hcd.0: Device attached [ 103.399295][ T6871] syz_tun: left allmulticast mode [ 103.570698][ T6899] netlink: 'syz.3.233': attribute type 2 has an invalid length. [ 103.573721][ T6899] netlink: 'syz.3.233': attribute type 11 has an invalid length. [ 103.577009][ T6899] netlink: 112 bytes leftover after parsing attributes in process `syz.3.233'. [ 103.617722][ T24] usb 42-1: SetAddress Request (3) to port 0 [ 103.621084][ T6875] netlink: 56 bytes leftover after parsing attributes in process `syz.2.228'. [ 103.621358][ T24] usb 42-1: new SuperSpeed USB device number 3 using vhci_hcd [ 104.006198][ T6876] vhci_hcd: connection reset by peer [ 104.009722][ T13] vhci_hcd vhci_hcd.2: stop threads [ 104.011441][ T13] vhci_hcd vhci_hcd.2: release socket [ 104.015592][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 104.690960][ T6913] 9p: Bad value for 'wfdno' [ 104.902622][ T6929] binder: 6927:6929 ioctl 4018620d 0 returned -22 [ 106.904980][ T6960] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 106.907229][ T6960] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 106.910894][ T6960] vhci_hcd vhci_hcd.0: Device attached [ 107.086248][ T5343] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 107.096565][ T5982] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 107.174261][ T5982] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 107.234878][ T6961] vhci_hcd: connection reset by peer [ 107.240095][ T1196] vhci_hcd vhci_hcd.0: stop threads [ 107.243343][ T1196] vhci_hcd vhci_hcd.0: release socket [ 107.245990][ T1196] vhci_hcd vhci_hcd.0: disconnect device [ 107.267713][ T5343] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.272717][ T5343] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.278497][ T5343] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 107.282666][ T5343] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.288354][ T5343] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.292313][ T5343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.297682][ T5343] usb 6-1: config 0 descriptor?? [ 107.400011][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 107.400023][ T40] audit: type=1326 audit(1772901902.628:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 107.416149][ T40] audit: type=1326 audit(1772901902.628:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.250" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 107.454857][ T40] audit: type=1326 audit(1772901902.628:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 107.466634][ T40] audit: type=1326 audit(1772901902.628:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.250" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 107.477360][ T40] audit: type=1326 audit(1772901902.628:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 107.489202][ T40] audit: type=1326 audit(1772901902.628:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.250" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 107.501599][ T40] audit: type=1326 audit(1772901902.628:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 107.518034][ T40] audit: type=1326 audit(1772901902.628:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6965 comm="syz.2.250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 107.720346][ T5343] hid_parser_main: 4086 callbacks suppressed [ 107.720364][ T5343] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 107.726275][ T5343] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 107.729628][ T5343] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 107.733179][ T5343] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 107.735698][ T5343] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 107.739189][ T5343] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 107.742200][ T5343] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 107.745275][ T5343] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 107.748193][ T5343] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 107.751426][ T5343] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 107.760343][ T5343] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 107.766501][ T6964] syz.0.249 (6964) used greatest stack depth: 16760 bytes left [ 107.856262][ T6988] binder: 6983:6988 ioctl 4018620d 0 returned -22 [ 108.006956][ T6989] binder: 6984:6989 ioctl c0306201 80000040 returned -22 [ 108.061238][ T6020] usb 6-1: USB disconnect, device number 10 [ 108.141067][ T6996] bond1: entered promiscuous mode [ 108.596589][ T29] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 108.666218][ T24] usb 42-1: device descriptor read/8, error -110 [ 108.746218][ T29] usb 7-1: device descriptor read/64, error -71 [ 108.780718][ T24] usb usb42-port1: attempt power cycle [ 109.000759][ T7017] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 109.003662][ T7017] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 109.007695][ T29] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 109.014355][ T7017] vhci_hcd vhci_hcd.0: Device attached [ 109.078078][ T7017] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 109.156607][ T29] usb 7-1: device descriptor read/64, error -71 [ 109.276442][ T29] usb usb7-port1: attempt power cycle [ 109.336722][ T24] usb usb42-port1: unable to enumerate USB device [ 109.665907][ T7018] vhci_hcd: connection closed [ 109.666492][ T46] vhci_hcd vhci_hcd.0: stop threads [ 109.670005][ T46] vhci_hcd vhci_hcd.0: release socket [ 109.671838][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 109.696225][ T29] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 109.718665][ T29] usb 7-1: device descriptor read/8, error -71 [ 109.966152][ T29] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 109.987065][ T29] usb 7-1: device descriptor read/8, error -71 [ 110.097417][ T29] usb usb7-port1: unable to enumerate USB device [ 110.468892][ T7042] FAULT_INJECTION: forcing a failure. [ 110.468892][ T7042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.474086][ T7042] CPU: 2 UID: 0 PID: 7042 Comm: syz.0.268 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.474110][ T7042] Tainted: [L]=SOFTLOCKUP [ 110.474115][ T7042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.474123][ T7042] Call Trace: [ 110.474129][ T7042] [ 110.474135][ T7042] dump_stack_lvl+0x100/0x190 [ 110.474160][ T7042] should_fail_ex.cold+0x5/0xa [ 110.474177][ T7042] _copy_from_user+0x2e/0xd0 [ 110.474192][ T7042] move_addr_to_kernel+0x65/0x170 [ 110.474216][ T7042] __sys_sendto+0x1c9/0x4b0 [ 110.474232][ T7042] ? __pfx___sys_sendto+0x10/0x10 [ 110.474246][ T7042] ? __lock_acquire+0x4a5/0x2630 [ 110.474284][ T7042] __ia32_compat_sys_socketcall+0x59a/0x770 [ 110.474305][ T7042] ? __fget_files+0x21f/0x3d0 [ 110.474318][ T7042] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 110.474339][ T7042] ? fput+0x79/0x100 [ 110.474363][ T7042] do_int80_emulation+0x141/0x6b0 [ 110.474384][ T7042] asm_int80_emulation+0x1a/0x20 [ 110.474399][ T7042] RIP: 0023:0xf7195cab [ 110.474411][ T7042] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 110.474424][ T7042] RSP: 002b:00000000f544c34c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 110.474438][ T7042] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f544c3f4 [ 110.474447][ T7042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.474455][ T7042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.474462][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.474470][ T7042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.474488][ T7042] [ 110.648902][ T7048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.338137][ T5982] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 112.485332][ T7077] warning: `syz.0.278' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.682545][ T7086] binder: 7082:7086 ioctl 4018620d 0 returned -22 [ 113.355250][ T9] kernel write not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 113.398192][ T7101] syz.3.286: vmalloc error: size 1986356271, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 113.404262][ T7101] CPU: 3 UID: 0 PID: 7101 Comm: syz.3.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.404291][ T7101] Tainted: [L]=SOFTLOCKUP [ 113.404297][ T7101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.404306][ T7101] Call Trace: [ 113.404314][ T7101] [ 113.404319][ T7101] dump_stack_lvl+0x100/0x190 [ 113.404340][ T7101] warn_alloc.cold+0x95/0x1c1 [ 113.404359][ T7101] ? __pfx_warn_alloc+0x10/0x10 [ 113.404375][ T7101] ? finish_task_switch.isra.0+0x2c6/0xb80 [ 113.404388][ T7101] ? rcu_is_watching+0x12/0xc0 [ 113.404404][ T7101] ? trace_sched_exit_tp+0x13a/0x180 [ 113.404424][ T7101] __vmalloc_node_range_noprof+0x1252/0x1530 [ 113.404439][ T7101] ? __pfx___schedule+0x10/0x10 [ 113.404451][ T7101] ? lock_acquire+0x1cf/0x380 [ 113.404467][ T7101] ? ip_set_sockfn_get+0x18e/0xd20 [ 113.404478][ T7101] ? irqentry_exit+0x180/0x670 [ 113.404491][ T7101] ? lockdep_hardirqs_on+0x78/0x100 [ 113.404503][ T7101] ? irqentry_exit+0x180/0x670 [ 113.404516][ T7101] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 113.404533][ T7101] ? rcu_is_watching+0x12/0xc0 [ 113.404552][ T7101] ? ip_set_sockfn_get+0x18e/0xd20 [ 113.404562][ T7101] __vmalloc_node_noprof+0xad/0xf0 [ 113.404575][ T7101] ? ip_set_sockfn_get+0x18e/0xd20 [ 113.404587][ T7101] ip_set_sockfn_get+0x18e/0xd20 [ 113.404598][ T7101] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 113.404611][ T7101] ? nf_sockopt_find.isra.0+0x222/0x290 [ 113.404628][ T7101] nf_getsockopt+0x7c/0xe0 [ 113.404643][ T7101] ip_getsockopt+0x192/0x1e0 [ 113.404660][ T7101] ? __pfx_ip_getsockopt+0x10/0x10 [ 113.404680][ T7101] raw_getsockopt+0x4d/0x1f0 [ 113.404696][ T7101] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 113.404711][ T7101] do_sock_getsockopt+0x259/0x3d0 [ 113.404727][ T7101] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 113.404749][ T7101] __sys_getsockopt+0x133/0x1d0 [ 113.404766][ T7101] ? __ia32_sys_getsockopt+0xbc/0x160 [ 113.404777][ T7101] __ia32_sys_getsockopt+0xbc/0x160 [ 113.404789][ T7101] ? __do_fast_syscall_32+0x94/0x8c0 [ 113.404802][ T7101] ? lockdep_hardirqs_on+0x78/0x100 [ 113.404815][ T7101] __do_fast_syscall_32+0xe3/0x8c0 [ 113.404830][ T7101] do_fast_syscall_32+0x32/0x70 [ 113.404844][ T7101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.404872][ T7101] RIP: 0023:0xf7f97f6c [ 113.404884][ T7101] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 113.404896][ T7101] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 113.404907][ T7101] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 113.404915][ T7101] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000080000040 [ 113.404921][ T7101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.404928][ T7101] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 113.404934][ T7101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.404948][ T7101] [ 113.405051][ T7101] Mem-Info: [ 113.499345][ T7096] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 113.506359][ T7101] active_anon:9032 inactive_anon:1 isolated_anon:0 [ 113.506359][ T7101] active_file:20666 inactive_file:36095 isolated_file:0 [ 113.506359][ T7101] unevictable:1768 dirty:566 writeback:0 [ 113.506359][ T7101] slab_reclaimable:10316 slab_unreclaimable:54471 [ 113.506359][ T7101] mapped:28012 shmem:5157 pagetables:1177 [ 113.506359][ T7101] sec_pagetables:291 bounce:0 [ 113.506359][ T7101] kernel_misc_reclaimable:0 [ 113.506359][ T7101] free:28239 free_pcp:15717 free_cma:0 [ 113.530476][ T7096] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 113.530621][ T7101] Node 0 active_anon:824kB inactive_anon:0kB active_file:1216kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:56kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8748kB pagetables:1368kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB [ 113.545747][ T7101] Node 1 active_anon:35304kB inactive_anon:4kB active_file:81448kB inactive_file:144380kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:111952kB dirty:2208kB writeback:0kB shmem:17092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4596kB pagetables:3340kB sec_pagetables:24kB all_unreclaimable? no Balloon:0kB [ 113.559140][ T7096] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 113.559559][ T7101] Node 0 DMA free:2084kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:340kB local_pcp:12kB free_cma:0kB [ 113.574501][ T7096] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 113.574524][ T7101] lowmem_reserve[]: 0 285 285 285 285 [ 113.579623][ T7101] Node 0 DMA32 free:18124kB boost:2048kB min:15120kB low:18388kB high:21656kB reserved_highatomic:0KB free_highatomic:0KB active_anon:824kB inactive_anon:0kB active_file:1216kB inactive_file:0kB unevictable:3536kB writepending:56kB zspages:0kB present:1032196kB managed:292624kB mlocked:0kB bounce:0kB free_pcp:12472kB local_pcp:3020kB free_cma:0kB [ 113.592788][ T7101] lowmem_reserve[]: 0 0 0 0 0 [ 113.595027][ T7096] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 113.595061][ T7101] Node 1 DMA32 free:92748kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35304kB inactive_anon:4kB active_file:81448kB inactive_file:144380kB unevictable:3536kB writepending:2208kB zspages:2136kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:50304kB local_pcp:14416kB free_cma:0kB [ 113.611730][ T7096] kvm: requested 31847 ns i8254 timer period limited to 200000 ns [ 113.611780][ T7101] lowmem_reserve[]: 0 0 0 0 0 [ 113.616767][ T7096] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 113.616771][ T7101] Node 0 [ 113.620067][ T7096] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 113.620091][ T7101] DMA: [ 113.624533][ T7096] kvm: requested 11733 ns i8254 timer period limited to 200000 ns [ 113.624542][ T7101] 119*4kB (UM) [ 113.629246][ T7096] kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 113.629273][ T7101] 3*8kB (M) 5*16kB (UM) 7*32kB (UM) 2*64kB (UM) 3*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2084kB [ 113.638985][ T7101] Node 0 DMA32: 319*4kB (UE) 24*8kB (UME) 19*16kB (UM) 91*32kB (UME) 36*64kB (UME) 21*128kB (UME) 15*256kB (UME) 7*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 18124kB [ 113.646159][ T7101] Node 1 DMA32: 525*4kB (UM) 571*8kB (UME) 338*16kB (UME) 59*32kB (UME) 28*64kB (UME) 75*128kB (UME) 38*256kB (UME) 19*512kB (UME) 7*1024kB (UM) 2*2048kB (UE) 9*4096kB (M) = 92940kB [ 113.654810][ T7101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.658980][ T7101] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 113.662528][ T7101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.666716][ T7101] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 113.670707][ T7101] 62782 total pagecache pages [ 113.672828][ T7101] 867 pages in swap cache [ 113.674785][ T7101] Free swap = 117280kB [ 113.676866][ T7101] Total swap = 124996kB [ 113.678410][ T7101] 524155 pages RAM [ 113.680094][ T7101] 0 pages HighMem/MovableOnly [ 113.682177][ T7101] 210106 pages reserved [ 113.684019][ T7101] 0 pages cma reserved [ 113.987846][ T841] usb usb38-port1: attempt power cycle [ 114.015038][ T7117] netlink: 136 bytes leftover after parsing attributes in process `syz.2.292'. [ 114.020152][ T7117] netlink: 188 bytes leftover after parsing attributes in process `syz.2.292'. [ 114.552498][ T7128] binder: 7126:7128 ioctl 4018620d 0 returned -22 [ 114.972413][ T841] usb usb38-port1: unable to enumerate USB device [ 115.262519][ T7149] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 115.264626][ T7149] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 115.302517][ T7149] vhci_hcd vhci_hcd.0: Device attached [ 115.578697][ T828] usb 38-1: SetAddress Request (6) to port 0 [ 115.581250][ T828] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 115.912690][ T7150] vhci_hcd: connection reset by peer [ 115.915293][ T1140] vhci_hcd vhci_hcd.0: stop threads [ 115.918987][ T1140] vhci_hcd vhci_hcd.0: release socket [ 115.926935][ T1140] vhci_hcd vhci_hcd.0: disconnect device [ 116.318806][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'. [ 116.324678][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'. [ 116.675163][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 116.679221][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 116.790998][ T7179] binder: 7177:7179 ioctl 4018620d 0 returned -22 [ 118.775345][ T7206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.320'. [ 118.848200][ T7213] syz_tun: entered allmulticast mode [ 118.868115][ T7215] binder: 7208:7215 ioctl 4018620d 0 returned -22 [ 119.071895][ T6457] udevd[6457]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 119.079305][ T40] audit: type=1326 audit(1772901914.308:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.325" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f97f6c code=0x0 [ 119.197293][ T7227] ceph: No source [ 120.666261][ T828] usb 38-1: device descriptor read/8, error -110 [ 120.700777][ T40] audit: type=1326 audit(1772901915.928:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.2.329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7fc00000 [ 120.716353][ T40] audit: type=1326 audit(1772901915.928:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.2.329" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706ef6c code=0x7fc00000 [ 120.823195][ T7258] binder: 7254:7258 ioctl 4018620d 0 returned -22 [ 121.363864][ T828] usb usb38-port1: attempt power cycle [ 121.718945][ T7276] syz.0.338 (7276): /proc/7264/oom_adj is deprecated, please use /proc/7264/oom_score_adj instead. [ 122.876870][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.347'. [ 123.197662][ T828] usb usb38-port1: unable to enumerate USB device [ 123.212123][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 123.217133][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 123.324319][ T7324] binder: 7317:7324 ioctl 4018620d 0 returned -22 [ 123.503368][ T7327] overlay: Unknown parameter '/' [ 124.668636][ T7333] syzkaller0: entered promiscuous mode [ 124.673722][ T7333] syzkaller0: entered allmulticast mode [ 124.725989][ T7336] netlink: 48 bytes leftover after parsing attributes in process `syz.3.356'. [ 124.851557][ T7343] binder: 7342:7343 ioctl c0306201 80000080 returned -14 [ 125.365618][ T7347] binder: 7346:7347 ioctl c00c620f 800003c0 returned -22 [ 125.366285][ T7348] binder: 7346:7348 ioctl c00c620f 800003c0 returned -22 [ 125.524197][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.361'. [ 125.739155][ T7357] binder: 7355:7357 ioctl 4018620d 0 returned -22 [ 125.912786][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 126.225089][ T7364] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 126.227249][ T7364] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 126.230309][ T7364] vhci_hcd vhci_hcd.0: Device attached [ 126.238125][ T7364] random: crng reseeded on system resumption [ 126.288572][ T7364] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 126.308330][ T7364] trusted_key: syz.0.365 sent an empty control message without MSG_MORE. [ 126.496198][ T50] usb 38-1: SetAddress Request (10) to port 0 [ 126.498238][ T50] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 126.667652][ T29] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 126.670438][ T29] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 126.673688][ T29] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 126.677955][ T29] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 126.680757][ T29] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 126.683580][ T29] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 126.687067][ T29] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 126.689758][ T29] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 126.692661][ T29] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 126.696182][ T29] hid-generic 0103:0004:0000.0008: unknown main item tag 0x0 [ 126.708431][ T29] hid-generic 0103:0004:0000.0008: hidraw1: HID v0.02 Device [syz0] on syz1 [ 126.767947][ T7376] fido_id[7376]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.800744][ T7365] vhci_hcd: connection reset by peer [ 126.804570][ T1140] vhci_hcd vhci_hcd.0: stop threads [ 126.807641][ T1140] vhci_hcd vhci_hcd.0: release socket [ 126.811608][ T1140] vhci_hcd vhci_hcd.0: disconnect device [ 127.119707][ T7384] batman_adv: batadv0: Adding interface: gretap1 [ 127.122530][ T7384] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.131715][ T7384] batman_adv: batadv0: Interface activated: gretap1 [ 127.644877][ T7397] binder: 7393:7397 ioctl 4018620d 0 returned -22 [ 128.080906][ T7405] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.378'. [ 128.457573][ T7411] netlink: 228 bytes leftover after parsing attributes in process `syz.1.380'. [ 128.512409][ T7415] netlink: 88 bytes leftover after parsing attributes in process `syz.2.382'. [ 128.533629][ T7420] dlm: no locking on control device [ 129.246182][ T1331] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 129.478272][ T1331] usb 7-1: Using ep0 maxpacket: 32 [ 129.481164][ T1331] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 129.484124][ T1331] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 129.489351][ T1331] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 129.492250][ T1331] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.495332][ T1331] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.506264][ T1331] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.510445][ T1331] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 129.513331][ T1331] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.527500][ T1331] usb 7-1: config 0 descriptor?? [ 129.539730][ T7437] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.572639][ T7440] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.391'. [ 129.576852][ T7440] openvswitch: netlink: EtherType 0 is less than min 600 [ 129.660956][ T7443] binder: 7441:7443 ioctl 4018620d 0 returned -22 [ 129.772077][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 129.779259][ T7451] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.786833][ T1331] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 129.924355][ T1331] usb 7-1: USB disconnect, device number 9 [ 129.968353][ T1331] usblp0: removed [ 130.406845][ T1331] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 130.616201][ T1331] usb 7-1: Using ep0 maxpacket: 32 [ 130.638353][ T1331] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 130.645340][ T1331] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 130.648260][ T1331] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 130.651349][ T1331] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.655371][ T1331] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 130.659307][ T1331] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 130.664344][ T1331] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 130.668368][ T1331] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.681244][ T1331] usb 7-1: config 0 descriptor?? [ 131.002374][ T1331] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 131.053107][ T1331] usb 7-1: USB disconnect, device number 10 [ 131.064381][ T1331] usblp0: removed [ 131.342168][ T7465] syzkaller0: entered promiscuous mode [ 131.344357][ T7465] syzkaller0: entered allmulticast mode [ 131.547355][ T50] usb 38-1: device descriptor read/8, error -110 [ 131.937215][ T50] usb usb38-port1: attempt power cycle [ 131.983945][ T7478] FAULT_INJECTION: forcing a failure. [ 131.983945][ T7478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.996205][ T7478] CPU: 3 UID: 0 PID: 7478 Comm: syz.0.402 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.996236][ T7478] Tainted: [L]=SOFTLOCKUP [ 131.996240][ T7478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.996247][ T7478] Call Trace: [ 131.996251][ T7478] [ 131.996255][ T7478] dump_stack_lvl+0x100/0x190 [ 131.996274][ T7478] should_fail_ex.cold+0x5/0xa [ 131.996288][ T7478] _copy_to_user+0x32/0xd0 [ 131.996300][ T7478] simple_read_from_buffer+0xcb/0x170 [ 131.996318][ T7478] proc_fail_nth_read+0x1af/0x230 [ 131.996331][ T7478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.996345][ T7478] ? rw_verify_area+0xce/0x6d0 [ 131.996359][ T7478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.996372][ T7478] vfs_read+0x1e4/0xb30 [ 131.996390][ T7478] ? __pfx_vfs_read+0x10/0x10 [ 131.996404][ T7478] ? find_held_lock+0x2b/0x80 [ 131.996415][ T7478] ? __fget_files+0x215/0x3d0 [ 131.996427][ T7478] ? __fget_files+0x21f/0x3d0 [ 131.996441][ T7478] ksys_read+0x12a/0x250 [ 131.996456][ T7478] ? __pfx_ksys_read+0x10/0x10 [ 131.996477][ T7478] do_int80_emulation+0x141/0x6b0 [ 131.996492][ T7478] asm_int80_emulation+0x1a/0x20 [ 131.996503][ T7478] RIP: 0023:0xf7195cab [ 131.996512][ T7478] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 131.996522][ T7478] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 131.996533][ T7478] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f544d5d0 [ 131.996540][ T7478] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 131.996546][ T7478] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.996551][ T7478] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 131.996557][ T7478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.996571][ T7478] [ 132.618108][ T50] usb usb38-port1: unable to enumerate USB device [ 132.697454][ T7492] binder: 7489:7492 ioctl 4018620d 0 returned -22 [ 133.369684][ T7501] netlink: 60 bytes leftover after parsing attributes in process `syz.0.411'. [ 133.375127][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 133.623543][ T7508] syzkaller0: entered promiscuous mode [ 133.625372][ T7508] syzkaller0: entered allmulticast mode [ 133.628960][ T7508] 0: reclassify loop, rule prio 0, protocol 800 [ 133.747009][ T7528] FAULT_INJECTION: forcing a failure. [ 133.747009][ T7528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.752809][ T7528] CPU: 2 UID: 0 PID: 7528 Comm: syz.1.421 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.752828][ T7528] Tainted: [L]=SOFTLOCKUP [ 133.752832][ T7528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.752848][ T7528] Call Trace: [ 133.752852][ T7528] [ 133.752857][ T7528] dump_stack_lvl+0x100/0x190 [ 133.752876][ T7528] should_fail_ex.cold+0x5/0xa [ 133.752889][ T7528] _copy_to_user+0x32/0xd0 [ 133.752901][ T7528] bpf_test_finish.isra.0+0x452/0x660 [ 133.752915][ T7528] ? __might_fault+0xc5/0x140 [ 133.752930][ T7528] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 133.752945][ T7528] ? _copy_from_user+0x59/0xd0 [ 133.752957][ T7528] bpf_prog_test_run_xdp+0xa70/0x1670 [ 133.752976][ T7528] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.752993][ T7528] ? fput+0x79/0x100 [ 133.753005][ T7528] ? __bpf_prog_get+0x97/0x2a0 [ 133.753019][ T7528] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.753033][ T7528] __sys_bpf+0x1725/0x4b90 [ 133.753046][ T7528] ? __pfx___sys_bpf+0x10/0x10 [ 133.753058][ T7528] ? proc_fail_nth_write+0x9f/0x220 [ 133.753070][ T7528] ? find_held_lock+0x2b/0x80 [ 133.753084][ T7528] ? find_held_lock+0x2b/0x80 [ 133.753093][ T7528] ? ksys_write+0x190/0x250 [ 133.753104][ T7528] ? __mutex_unlock_slowpath+0x15c/0x790 [ 133.753126][ T7528] ? fput+0x79/0x100 [ 133.753137][ T7528] ? ksys_write+0x1ac/0x250 [ 133.753148][ T7528] __ia32_sys_bpf+0x79/0xf0 [ 133.753160][ T7528] ? lockdep_hardirqs_on+0x78/0x100 [ 133.753172][ T7528] __do_fast_syscall_32+0xe3/0x8c0 [ 133.753187][ T7528] do_fast_syscall_32+0x32/0x70 [ 133.753201][ T7528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.753214][ T7528] RIP: 0023:0xf702ef6c [ 133.753223][ T7528] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 133.753233][ T7528] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 133.753244][ T7528] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000380 [ 133.753250][ T7528] RDX: 0000000000000016 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.753256][ T7528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.753262][ T7528] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 133.753267][ T7528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.753280][ T7528] [ 133.763534][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 133.851835][ T7536] binder: 7532:7536 ioctl 4018620d 0 returned -22 [ 134.095326][ T7539] 9pnet_fd: p9_fd_create_tcp (7539): problem binding to privport [ 134.507591][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 134.829699][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 134.927908][ T7554] input: syz1 as /devices/virtual/input/input10 [ 134.976260][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 134.979936][ T10] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 134.982559][ T10] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 134.985389][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 134.990422][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.993491][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 134.997586][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 135.002962][ T10] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 135.006635][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.010369][ T10] usb 7-1: config 0 descriptor?? [ 135.441905][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 135.909908][ T7556] bond1: left promiscuous mode [ 135.911792][ T7556] batman_adv: batadv0: Interface deactivated: gretap1 [ 135.915515][ T80] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.919390][ T80] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.923213][ T80] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.927055][ T80] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.997553][ T7564] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 136.006569][ T7564] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 136.009427][ T7564] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 136.012330][ T7564] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 136.015197][ T7564] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 136.018133][ T7564] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 136.020975][ T7564] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 136.023812][ T7564] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 136.026745][ T7564] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 136.029563][ T7564] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 136.068476][ T7566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.434'. [ 136.071518][ T7566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.434'. [ 136.275395][ T2161] hid_parser_main: 2 callbacks suppressed [ 136.275407][ T2161] hid-generic 0005:1000:0006.0009: unknown main item tag 0x0 [ 136.280199][ T2161] hid-generic 0005:1000:0006.0009: unknown main item tag 0x0 [ 136.282648][ T2161] hid-generic 0005:1000:0006.0009: unknown main item tag 0x0 [ 136.285677][ T2161] hid-generic 0005:1000:0006.0009: unknown main item tag 0x0 [ 136.288491][ T2161] hid-generic 0005:1000:0006.0009: unknown main item tag 0x0 [ 136.290946][ T2161] hid-generic 0005:1000:0006.0009: unknown main item tag 0x0 [ 136.293428][ T2161] hid-generic 0005:1000:0006.0009: unknown main item tag 0x0 [ 136.295963][ T2161] hid-generic 0005:1000:0006.0009: unknown main item tag 0x0 [ 136.299106][ T2161] hid-generic 0005:1000:0006.0009: unknown main item tag 0x0 [ 136.301587][ T2161] hid-generic 0005:1000:0006.0009: unknown main item tag 0x0 [ 136.329211][ T2161] hid-generic 0005:1000:0006.0009: hidraw1: BLUETOOTH HID v1ade12.f1 Device [syz0] on syz0 [ 137.120573][ T7582] binder: 7580:7582 ioctl 4018620d 0 returned -22 [ 137.398179][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.763206][ T10] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 137.973719][ T7586] FAULT_INJECTION: forcing a failure. [ 137.973719][ T7586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.978199][ T7586] CPU: 3 UID: 0 PID: 7586 Comm: syz.2.439 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.978215][ T7586] Tainted: [L]=SOFTLOCKUP [ 137.978219][ T7586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.978225][ T7586] Call Trace: [ 137.978228][ T7586] [ 137.978232][ T7586] dump_stack_lvl+0x100/0x190 [ 137.978264][ T7586] should_fail_ex.cold+0x5/0xa [ 137.978276][ T7586] __kvm_read_guest_page+0x186/0x250 [ 137.978292][ T7586] kvm_fetch_guest_virt+0x128/0x1a0 [ 137.978307][ T7586] __do_insn_fetch_bytes+0x5ef/0x7c0 [ 137.978318][ T7586] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 137.978329][ T7586] ? folio_mark_accessed+0xf3/0x1040 [ 137.978347][ T7586] ? __pfx_folio_mark_accessed+0x10/0x10 [ 137.978366][ T7586] x86_decode_insn+0x3ca/0x6d80 [ 137.978380][ T7586] ? kvm_tdp_page_fault+0x295/0x3d0 [ 137.978399][ T7586] ? __pfx_x86_decode_insn+0x10/0x10 [ 137.978412][ T7586] ? vmx_cache_reg+0x54f/0x7b0 [ 137.978426][ T7586] ? init_decode_cache+0xd/0x2a0 [ 137.978439][ T7586] ? init_emulate_ctxt+0x415/0x6d0 [ 137.978452][ T7586] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 137.978465][ T7586] ? __pfx_kvm_set_msr_common+0x10/0x10 [ 137.978481][ T7586] x86_emulate_instruction+0x1dcc/0x1f80 [ 137.978493][ T7586] ? is_bpf_text_address+0x94/0x1a0 [ 137.978509][ T7586] ? kernel_text_address+0x8d/0x100 [ 137.978526][ T7586] handle_ud+0x103/0x5a0 [ 137.978535][ T7586] ? __pfx_handle_ud+0x10/0x10 [ 137.978546][ T7586] ? vmx_vcpu_enter_exit+0x136/0x1e0 [ 137.978565][ T7586] ? rcu_is_watching+0x12/0xc0 [ 137.978580][ T7586] ? __vmx_complete_interrupts+0x129/0x570 [ 137.978592][ T7586] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.978612][ T7586] handle_exception_nmi+0xd0c/0x1bb0 [ 137.978624][ T7586] ? __pfx_handle_exception_nmi+0x10/0x10 [ 137.978634][ T7586] vmx_handle_exit+0x84d/0x1f40 [ 137.978647][ T7586] vcpu_run+0x34cf/0x5ca0 [ 137.978659][ T7586] ? __lock_acquire+0x4a5/0x2630 [ 137.978675][ T7586] ? __pfx_vcpu_run+0x10/0x10 [ 137.978690][ T7586] ? rcu_is_watching+0x12/0xc0 [ 137.978707][ T7586] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 137.978718][ T7586] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 137.978732][ T7586] kvm_vcpu_ioctl+0x730/0x1730 [ 137.978747][ T7586] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 137.978762][ T7586] ? tomoyo_path_number_perm+0x188/0x580 [ 137.978784][ T7586] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 137.978805][ T7586] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.978823][ T7586] ? do_vfs_ioctl+0x226/0x13e0 [ 137.978838][ T7586] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 137.978859][ T7586] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 137.978873][ T7586] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 137.978888][ T7586] ? __fget_files+0x21f/0x3d0 [ 137.978900][ T7586] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 137.978915][ T7586] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 137.978932][ T7586] __do_fast_syscall_32+0xe3/0x8c0 [ 137.978947][ T7586] do_fast_syscall_32+0x32/0x70 [ 137.978960][ T7586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.978973][ T7586] RIP: 0023:0xf706ef6c [ 137.978982][ T7586] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 137.978992][ T7586] RSP: 002b:00000000f543c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 137.979003][ T7586] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 137.979009][ T7586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.979015][ T7586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.979020][ T7586] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 137.979026][ T7586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.979039][ T7586] [ 138.150468][ T10] usb 7-1: USB disconnect, device number 11 [ 138.154123][ T10] usblp0: removed [ 138.510500][ T7604] FAULT_INJECTION: forcing a failure. [ 138.510500][ T7604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.514878][ T7604] CPU: 3 UID: 0 PID: 7604 Comm: syz.0.445 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.514896][ T7604] Tainted: [L]=SOFTLOCKUP [ 138.514900][ T7604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.514906][ T7604] Call Trace: [ 138.514910][ T7604] [ 138.514915][ T7604] dump_stack_lvl+0x100/0x190 [ 138.514935][ T7604] should_fail_ex.cold+0x5/0xa [ 138.514948][ T7604] _copy_to_user+0x32/0xd0 [ 138.514960][ T7604] simple_read_from_buffer+0xcb/0x170 [ 138.514978][ T7604] proc_fail_nth_read+0x1af/0x230 [ 138.514992][ T7604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.515005][ T7604] ? rw_verify_area+0xce/0x6d0 [ 138.515020][ T7604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.515032][ T7604] vfs_read+0x1e4/0xb30 [ 138.515050][ T7604] ? __pfx_vfs_read+0x10/0x10 [ 138.515065][ T7604] ? find_held_lock+0x2b/0x80 [ 138.515075][ T7604] ? __fget_files+0x215/0x3d0 [ 138.515087][ T7604] ? __fget_files+0x21f/0x3d0 [ 138.515101][ T7604] ksys_read+0x12a/0x250 [ 138.515117][ T7604] ? __pfx_ksys_read+0x10/0x10 [ 138.515136][ T7604] do_int80_emulation+0x141/0x6b0 [ 138.515152][ T7604] asm_int80_emulation+0x1a/0x20 [ 138.515164][ T7604] RIP: 0023:0xf7195cab [ 138.515183][ T7604] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 138.515199][ T7604] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 138.515216][ T7604] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f544d5d0 [ 138.515227][ T7604] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 138.515236][ T7604] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.515244][ T7604] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 138.515250][ T7604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.515263][ T7604] [ 139.117568][ T7614] binder: 7612:7614 ioctl 4018620d 0 returned -22 [ 139.719302][ T5295] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.725165][ T5295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.736524][ T5295] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.744742][ T5295] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.750488][ T5295] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.855756][ T7617] chnl_net:caif_netlink_parms(): no params data found [ 140.006173][ T841] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 140.153766][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.156183][ T841] usb 7-1: Using ep0 maxpacket: 8 [ 140.157940][ T7617] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.160314][ T7617] bridge_slave_0: entered allmulticast mode [ 140.163233][ T841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.167145][ T7617] bridge_slave_0: entered promiscuous mode [ 140.169703][ T841] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 140.173085][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.175552][ T7617] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.177949][ T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.183162][ T7617] bridge_slave_1: entered allmulticast mode [ 140.185870][ T7617] bridge_slave_1: entered promiscuous mode [ 140.188748][ T841] usb 7-1: config 0 descriptor?? [ 140.210017][ T7617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.215088][ T7617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.237123][ T7617] team0: Port device team_slave_0 added [ 140.240889][ T7617] team0: Port device team_slave_1 added [ 140.258598][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.260936][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.276174][ T7617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.283327][ T7617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.285612][ T7617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.298130][ T7617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.327858][ T7617] hsr_slave_0: entered promiscuous mode [ 140.330394][ T7617] hsr_slave_1: entered promiscuous mode [ 140.332741][ T7617] debugfs: 'hsr0' already exists in 'hsr' [ 140.334676][ T7617] Cannot create hsr debugfs directory [ 140.509017][ T7617] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 140.530634][ T7617] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 140.555406][ T7617] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 140.565510][ T7617] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 140.598903][ T841] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 140.607697][ T841] usb 7-1: USB disconnect, device number 12 [ 140.660159][ T7617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.770854][ T7617] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.812636][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.814967][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.855082][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.857409][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.149113][ T7651] CIFS: Unable to determine destination address [ 141.162288][ T7617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.188877][ T7654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.456'. [ 141.374395][ T7617] veth0_vlan: entered promiscuous mode [ 141.390324][ T7617] veth1_vlan: entered promiscuous mode [ 141.421171][ T7617] veth0_macvtap: entered promiscuous mode [ 141.429968][ T7617] veth1_macvtap: entered promiscuous mode [ 141.461025][ T7617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.485211][ T7617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.497462][ T80] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.500988][ T80] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.505749][ T80] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.524916][ T80] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.528746][ T7672] binder: 7670:7672 ioctl 4018620d 0 returned -22 [ 141.596396][ T218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.599672][ T218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.618811][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.622215][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.708724][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.450'. [ 141.787006][ T5935] Bluetooth: hci4: command tx timeout [ 142.405337][ T7686] program syz.4.464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.217620][ T40] audit: type=1804 audit(1772901938.228:58): pid=7689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.465" name="file0" dev="ramfs" ino=18986 res=1 errno=0 [ 143.286852][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 143.438594][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 143.441957][ T10] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.444731][ T10] usb 9-1: config 0 has no interface number 0 [ 143.450553][ T10] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 143.455655][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.461400][ T10] usb 9-1: Product: syz [ 143.464748][ T10] usb 9-1: Manufacturer: syz [ 143.467023][ T10] usb 9-1: SerialNumber: syz [ 143.476705][ T10] usb 9-1: config 0 descriptor?? [ 143.486498][ T10] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 143.491400][ T10] usb 9-1: selecting invalid altsetting 1 [ 143.493261][ T10] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 143.509782][ T10] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 143.518298][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 143.521918][ T10] usb 9-1: media controller created [ 143.535024][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.776755][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.465'. [ 143.866240][ T5935] Bluetooth: hci4: command tx timeout [ 144.978338][ T10] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 144.981207][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 144.985037][ T10] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 145.011733][ T10] usb 9-1: USB disconnect, device number 2 [ 145.195613][ T7714] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.201441][ T7714] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 145.392629][ T60] libceph: connect (1)[c::]:6789 error -101 [ 145.394906][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 145.439717][ T7724] ceph: No mds server is up or the cluster is laggy [ 145.457638][ T7727] binder: 7722:7727 ioctl 4018620d 0 returned -22 [ 146.299295][ T10] hid_parser_main: 4086 callbacks suppressed [ 146.299314][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 146.311208][ T10] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz0] on syz0 [ 146.488063][ T5935] Bluetooth: hci4: command tx timeout [ 146.706643][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 146.756907][ T7752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.484'. [ 146.763738][ T7752] geneve2: entered promiscuous mode [ 146.765598][ T7752] geneve2: entered allmulticast mode [ 147.725075][ T7782] binder: 7780:7782 ioctl 4018620d 0 returned -22 [ 148.233431][ T7790] netlink: 48 bytes leftover after parsing attributes in process `syz.2.494'. [ 148.347495][ T60] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 148.360001][ T60] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz0] on syz0 [ 148.516380][ T5935] Bluetooth: hci4: command tx timeout [ 149.044521][ T7817] FAULT_INJECTION: forcing a failure. [ 149.044521][ T7817] name failslab, interval 1, probability 0, space 0, times 0 [ 149.050546][ T7817] CPU: 2 UID: 0 PID: 7817 Comm: syz.4.502 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.050563][ T7817] Tainted: [L]=SOFTLOCKUP [ 149.050566][ T7817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.050573][ T7817] Call Trace: [ 149.050577][ T7817] [ 149.050581][ T7817] dump_stack_lvl+0x100/0x190 [ 149.050601][ T7817] should_fail_ex.cold+0x5/0xa [ 149.050614][ T7817] should_failslab+0xc2/0x120 [ 149.050625][ T7817] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 149.050642][ T7817] ? __alloc_skb+0x140/0x710 [ 149.050656][ T7817] __alloc_skb+0x140/0x710 [ 149.050668][ T7817] ? __pfx___alloc_skb+0x10/0x10 [ 149.050680][ T7817] ? __lock_acquire+0x4a5/0x2630 [ 149.050696][ T7817] tipc_buf_acquire+0x26/0xe0 [ 149.050707][ T7817] tipc_msg_build+0x112/0x1100 [ 149.050719][ T7817] ? do_raw_spin_lock+0x128/0x260 [ 149.050735][ T7817] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 149.050750][ T7817] ? __pfx_tipc_msg_build+0x10/0x10 [ 149.050763][ T7817] ? mark_held_locks+0x40/0x70 [ 149.050776][ T7817] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 149.050796][ T7817] tipc_send_group_bcast+0x736/0xa20 [ 149.050816][ T7817] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 149.050832][ T7817] ? __pfx_woken_wake_function+0x10/0x10 [ 149.050849][ T7817] ? aa_label_sk_perm+0x194/0x5f0 [ 149.050868][ T7817] __tipc_sendmsg+0x4a3/0x1ae0 [ 149.050905][ T7817] ? __pfx___tipc_sendmsg+0x10/0x10 [ 149.050921][ T7817] ? __lock_acquire+0x4a5/0x2630 [ 149.050934][ T7817] ? __lock_acquire+0x4a5/0x2630 [ 149.050958][ T7817] ? __local_bh_enable_ip+0x9e/0x120 [ 149.050970][ T7817] tipc_sendmsg+0x4f/0x70 [ 149.050987][ T7817] ____sys_sendmsg+0x9e1/0xb70 [ 149.051001][ T7817] ? __pfx_tipc_sendmsg+0x10/0x10 [ 149.051018][ T7817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.051040][ T7817] ___sys_sendmsg+0x190/0x1e0 [ 149.051057][ T7817] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.051090][ T7817] __sys_sendmsg+0x170/0x220 [ 149.051103][ T7817] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.051121][ T7817] ? __pfx_ksys_write+0x10/0x10 [ 149.051134][ T7817] __do_fast_syscall_32+0xe3/0x8c0 [ 149.051150][ T7817] do_fast_syscall_32+0x32/0x70 [ 149.051163][ T7817] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.051177][ T7817] RIP: 0023:0xf6feef6c [ 149.051186][ T7817] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 149.051196][ T7817] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 149.051207][ T7817] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 149.051213][ T7817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.051219][ T7817] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.051225][ T7817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.051231][ T7817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.051244][ T7817] [ 149.343442][ T7825] mkiss: ax0: crc mode is auto. [ 150.477301][ T7832] FAULT_INJECTION: forcing a failure. [ 150.477301][ T7832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.482333][ T7832] CPU: 1 UID: 0 PID: 7832 Comm: syz.4.507 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.482362][ T7832] Tainted: [L]=SOFTLOCKUP [ 150.482365][ T7832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.482371][ T7832] Call Trace: [ 150.482376][ T7832] [ 150.482381][ T7832] dump_stack_lvl+0x100/0x190 [ 150.482401][ T7832] should_fail_ex.cold+0x5/0xa [ 150.482414][ T7832] _copy_to_user+0x32/0xd0 [ 150.482426][ T7832] simple_read_from_buffer+0xcb/0x170 [ 150.482444][ T7832] proc_fail_nth_read+0x1af/0x230 [ 150.482457][ T7832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.482471][ T7832] ? rw_verify_area+0xce/0x6d0 [ 150.482486][ T7832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.482498][ T7832] vfs_read+0x1e4/0xb30 [ 150.482516][ T7832] ? __pfx_vfs_read+0x10/0x10 [ 150.482531][ T7832] ? find_held_lock+0x2b/0x80 [ 150.482541][ T7832] ? __fget_files+0x215/0x3d0 [ 150.482554][ T7832] ? __fget_files+0x21f/0x3d0 [ 150.482567][ T7832] ksys_read+0x12a/0x250 [ 150.482583][ T7832] ? __pfx_ksys_read+0x10/0x10 [ 150.482603][ T7832] do_int80_emulation+0x141/0x6b0 [ 150.482619][ T7832] asm_int80_emulation+0x1a/0x20 [ 150.482629][ T7832] RIP: 0023:0xf7125cab [ 150.482639][ T7832] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 150.482648][ T7832] RSP: 002b:00000000f539b4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 150.482659][ T7832] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f539b5d0 [ 150.482666][ T7832] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 150.482671][ T7832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.482677][ T7832] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 150.482683][ T7832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.482700][ T7832] [ 151.192784][ T7844] binder: 7842:7844 ioctl 4018620d 0 returned -22 [ 151.240951][ T841] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 151.345773][ T50] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 151.350332][ T50] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz0] on syz0 [ 151.386146][ T841] usb 6-1: Using ep0 maxpacket: 32 [ 151.389464][ T841] usb 6-1: config 9 has an invalid interface number: 61 but max is 0 [ 151.392607][ T841] usb 6-1: config 9 has no interface number 0 [ 151.394659][ T841] usb 6-1: config 9 interface 61 has no altsetting 0 [ 151.398715][ T841] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0000, bcdDevice=ba.e3 [ 151.401658][ T841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.404128][ T841] usb 6-1: Product: syz [ 151.405435][ T841] usb 6-1: Manufacturer: syz [ 151.407285][ T841] usb 6-1: SerialNumber: syz [ 152.164044][ T40] audit: type=1326 audit(1772901947.388:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.0.518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 152.179123][ T40] audit: type=1326 audit(1772901947.388:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.0.518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 152.305814][ T841] usb 6-1: USB disconnect, device number 11 [ 152.468245][ T7883] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 3944. macoff=96 [ 152.681764][ T7893] binder: 7891:7893 ioctl 4018620d 0 returned -22 [ 152.692524][ T7895] pim6reg: entered allmulticast mode [ 152.695712][ T7895] pim6reg: left allmulticast mode [ 152.930762][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.529'. [ 153.199034][ T7903] ieee802154 phy1 wpan1: encryption failed: -22 [ 153.357685][ T7905] FAULT_INJECTION: forcing a failure. [ 153.357685][ T7905] name failslab, interval 1, probability 0, space 0, times 0 [ 153.362512][ T7905] CPU: 3 UID: 0 PID: 7905 Comm: syz.1.531 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.362530][ T7905] Tainted: [L]=SOFTLOCKUP [ 153.362534][ T7905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.362540][ T7905] Call Trace: [ 153.362547][ T7905] [ 153.362552][ T7905] dump_stack_lvl+0x100/0x190 [ 153.362572][ T7905] should_fail_ex.cold+0x5/0xa [ 153.362584][ T7905] ? tomoyo_encode2+0xfb/0x3c0 [ 153.362595][ T7905] should_failslab+0xc2/0x120 [ 153.362607][ T7905] __kmalloc_noprof+0xe0/0x850 [ 153.362621][ T7905] ? d_absolute_path+0x136/0x1b0 [ 153.362638][ T7905] tomoyo_encode2+0xfb/0x3c0 [ 153.362651][ T7905] tomoyo_encode+0x29/0x50 [ 153.362662][ T7905] tomoyo_realpath_from_path+0x18c/0x690 [ 153.362678][ T7905] tomoyo_path_number_perm+0x23c/0x580 [ 153.362694][ T7905] ? tomoyo_path_number_perm+0x22e/0x580 [ 153.362711][ T7905] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 153.362744][ T7905] ? find_held_lock+0x2b/0x80 [ 153.362754][ T7905] ? hook_file_ioctl_common+0x146/0x410 [ 153.362771][ T7905] ? __fget_files+0x215/0x3d0 [ 153.362783][ T7905] ? __fget_files+0x21f/0x3d0 [ 153.362794][ T7905] security_file_ioctl_compat+0xd3/0x230 [ 153.362813][ T7905] __ia32_compat_sys_ioctl+0xc2/0x360 [ 153.362830][ T7905] __do_fast_syscall_32+0xe3/0x8c0 [ 153.362846][ T7905] do_fast_syscall_32+0x32/0x70 [ 153.362860][ T7905] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.362873][ T7905] RIP: 0023:0xf702ef6c [ 153.362882][ T7905] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 153.362892][ T7905] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 153.362903][ T7905] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000227d [ 153.362909][ T7905] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.362915][ T7905] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.362921][ T7905] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 153.362927][ T7905] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.362940][ T7905] [ 153.362949][ T7905] ERROR: Out of memory at tomoyo_realpath_from_path. [ 153.529264][ T7913] netlink: 'syz.2.533': attribute type 11 has an invalid length. [ 155.221566][ T7938] 9p: Bad value for 'rfdno' [ 156.107290][ T7954] binder: 7952:7954 ioctl 4018620d 0 returned -22 [ 158.290114][ T7997] binder: 7995:7997 ioctl 4018620d 0 returned -22 [ 161.275608][ T8032] binder: 8028:8032 ioctl 4018620d 0 returned -22 [ 161.984229][ T8038] gfs2: error -5 reading superblock [ 162.380267][ T8045] binder: 8039:8045 ioctl 4018620d 0 returned -22 [ 163.589975][ T8063] binder: 8059:8063 ioctl 4018620d 0 returned -22 [ 163.854027][ T8073] gfs2: error -5 reading superblock [ 164.779322][ T8077] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.784838][ T8077] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.789059][ T8077] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.791288][ T8077] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.793721][ T8077] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 164.798209][ T8077] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 164.806852][ T8077] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 166.163614][ T8093] gfs2: error -5 reading superblock [ 166.596132][ T5935] Bluetooth: hci0: command 0x0419 tx timeout [ 166.706212][ T8117] binder: 8112:8117 ioctl 4018620d 0 returned -22 [ 166.763378][ T8116] binder: 8113:8116 ioctl 4018620d 0 returned -22 [ 166.829302][ T5935] Bluetooth: hci4: command 0x0c1a tx timeout [ 166.831379][ T5935] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.834859][ T5935] Bluetooth: hci2: command 0x0419 tx timeout [ 166.836964][ T5935] Bluetooth: hci1: command 0x0419 tx timeout [ 168.193923][ T8128] binder: 8125:8128 ioctl 4018620d 0 returned -22 [ 168.956179][ T5295] Bluetooth: hci4: command 0x0c1a tx timeout [ 169.143993][ T8140] gfs2: error -5 reading superblock [ 169.797061][ T8145] gfs2: error -5 reading superblock [ 170.173156][ T8151] binder: 8149:8151 ioctl 4018620d 0 returned -22 [ 170.892740][ T8155] gfs2: error -5 reading superblock [ 170.986336][ T5295] Bluetooth: hci4: command 0x0c1a tx timeout [ 171.373604][ T8165] binder: 8161:8165 ioctl 4018620d 0 returned -22 [ 172.377461][ T8177] binder: 8174:8177 ioctl 4018620d 0 returned -22 [ 173.240727][ T8182] binder: 8180:8182 ioctl 4018620d 0 returned -22 [ 174.243522][ T8205] binder: 8200:8205 ioctl 4018620d 0 returned -22 [ 175.479867][ T8228] binder: 8226:8228 ioctl 4018620d 0 returned -22 [ 175.654246][ T8217] gfs2: error -5 reading superblock [ 175.837137][ T6004] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 176.687923][ T6004] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 176.690333][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 176.693984][ T6004] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.697912][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 176.701477][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 176.706482][ T6004] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 176.708831][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 176.712287][ T6004] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.716380][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 176.719834][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 176.724214][ T6004] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 176.726726][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 176.730060][ T6004] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.734094][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 176.737714][ T6004] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 176.743287][ T6004] usb 7-1: string descriptor 0 read error: -22 [ 176.745312][ T6004] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 176.748308][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.757626][ T6004] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 176.959700][ T6004] usb 7-1: USB disconnect, device number 13 [ 177.390410][ T8243] binder: 8240:8243 ioctl 4018620d 0 returned -22 [ 177.587259][ T8248] binder: 8244:8248 ioctl 4018620d 0 returned -22 [ 177.675701][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 177.870335][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 177.892988][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.898171][ T10] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.907206][ T10] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 177.914685][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.919912][ T10] usb 9-1: Product: syz [ 177.925737][ T10] usb 9-1: Manufacturer: syz [ 177.931438][ T10] usb 9-1: SerialNumber: syz [ 178.344549][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.347285][ T10] usb 9-1: MIDIStreaming interface descriptor not found [ 178.522650][ T10] usb 9-1: USB disconnect, device number 3 [ 178.609368][ T6458] udevd[6458]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.714178][ T8256] netlink: 44 bytes leftover after parsing attributes in process `syz.0.624'. [ 178.925947][ T8275] binder: 8269:8275 ioctl 4018620d 0 returned -22 [ 179.111122][ T40] audit: type=1326 audit(1772901974.338:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.2.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 179.122213][ T40] audit: type=1326 audit(1772901974.338:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.2.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 179.131135][ T40] audit: type=1326 audit(1772901974.348:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.2.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 179.140966][ T40] audit: type=1326 audit(1772901974.348:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.2.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 179.148867][ T40] audit: type=1326 audit(1772901974.348:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.2.629" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 179.155570][ T40] audit: type=1326 audit(1772901974.348:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.2.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 179.162614][ T40] audit: type=1326 audit(1772901974.348:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.2.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 179.169678][ T40] audit: type=1326 audit(1772901974.348:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.2.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 179.176707][ T40] audit: type=1326 audit(1772901974.348:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.2.629" exe="/syz-executor" sig=0 arch=40000003 syscall=96 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 179.183352][ T40] audit: type=1326 audit(1772901974.348:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.2.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 179.201499][ T8282] pim6reg: entered allmulticast mode [ 179.208683][ T8282] pim6reg: left allmulticast mode [ 179.478512][ T8286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.631'. [ 179.538001][ T8293] bridge0: port 3(veth0_to_bridge) entered blocking state [ 179.540531][ T8293] bridge0: port 3(veth0_to_bridge) entered disabled state [ 179.543956][ T8293] veth0_to_bridge: entered allmulticast mode [ 179.547374][ T8293] veth0_to_bridge: entered promiscuous mode [ 179.549382][ T8293] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.553692][ T8293] bridge0: port 3(veth0_to_bridge) entered blocking state [ 179.556223][ T8293] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 179.710046][ T8299] netlink: 'syz.0.636': attribute type 29 has an invalid length. [ 179.742120][ T8299] kvm: pic: single mode not supported [ 179.743688][ T8299] kvm: pic: single mode not supported [ 179.746264][ T8299] kvm: pic: single mode not supported [ 179.750118][ T8299] kvm: pic: single mode not supported [ 179.751996][ T8299] kvm: pic: level sensitive irq not supported [ 179.754312][ T8299] kvm: pic: level sensitive irq not supported [ 179.762570][ T8299] kvm: pic: single mode not supported [ 179.765436][ T8299] kvm: pic: single mode not supported [ 179.835219][ T8307] binder: 8304:8307 ioctl 4018620d 0 returned -22 [ 180.988531][ T8335] netlink: 'syz.2.648': attribute type 1 has an invalid length. [ 181.000763][ T8335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.044100][ T8335] bond2: (slave veth5): Enslaving as an active interface with a down link [ 181.064200][ T8335] vlan2: entered allmulticast mode [ 181.066908][ T8335] veth0_to_bond: entered allmulticast mode [ 181.071160][ T8335] bond2: (slave vlan2): Opening slave failed [ 181.193140][ T8342] binder: 8340:8342 ioctl 4018620d 0 returned -22 [ 181.304216][ T8345] FAULT_INJECTION: forcing a failure. [ 181.304216][ T8345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.308999][ T8345] CPU: 1 UID: 0 PID: 8345 Comm: syz.2.651 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.309016][ T8345] Tainted: [L]=SOFTLOCKUP [ 181.309020][ T8345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.309026][ T8345] Call Trace: [ 181.309030][ T8345] [ 181.309034][ T8345] dump_stack_lvl+0x100/0x190 [ 181.309053][ T8345] should_fail_ex.cold+0x5/0xa [ 181.309072][ T8345] _copy_from_user+0x2e/0xd0 [ 181.309083][ T8345] get_compat_msghdr+0xb3/0x4b0 [ 181.309096][ T8345] ? __pfx_get_compat_msghdr+0x10/0x10 [ 181.309109][ T8345] ? ___sys_recvmsg+0x177/0x1a0 [ 181.309125][ T8345] ? kfree+0x2ec/0x6b0 [ 181.309141][ T8345] ___sys_recvmsg+0x193/0x1a0 [ 181.309158][ T8345] ? __pfx____sys_recvmsg+0x10/0x10 [ 181.309175][ T8345] ? find_held_lock+0x2b/0x80 [ 181.309190][ T8345] ? __pfx___might_resched+0x10/0x10 [ 181.309208][ T8345] do_recvmmsg+0x563/0x760 [ 181.309226][ T8345] ? __pfx_do_recvmmsg+0x10/0x10 [ 181.309244][ T8345] ? ksys_write+0x190/0x250 [ 181.309253][ T8345] ? ksys_write+0x190/0x250 [ 181.309267][ T8345] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 181.309285][ T8345] __sys_recvmmsg+0x21f/0x270 [ 181.309298][ T8345] ? __pfx___sys_recvmmsg+0x10/0x10 [ 181.309312][ T8345] ? ksys_write+0x1ac/0x250 [ 181.309323][ T8345] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 181.309336][ T8345] ? __do_fast_syscall_32+0x94/0x8c0 [ 181.309350][ T8345] ? lockdep_hardirqs_on+0x78/0x100 [ 181.309362][ T8345] __do_fast_syscall_32+0xe3/0x8c0 [ 181.309377][ T8345] do_fast_syscall_32+0x32/0x70 [ 181.309391][ T8345] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.309404][ T8345] RIP: 0023:0xf706ef6c [ 181.309414][ T8345] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 181.309428][ T8345] RSP: 002b:00000000f543c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 181.309443][ T8345] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080002440 [ 181.309453][ T8345] RDX: 00000000ffffff67 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.309462][ T8345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.309470][ T8345] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 181.309482][ T8345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.309504][ T8345] [ 181.787389][ T8353] netlink: 'syz.2.655': attribute type 10 has an invalid length. [ 182.250725][ T8363] netlink: 'syz.2.657': attribute type 6 has an invalid length. [ 182.253365][ T8363] netlink: 232 bytes leftover after parsing attributes in process `syz.2.657'. [ 182.324330][ T8367] binder: 8360:8367 ioctl 4018620d 0 returned -22 [ 183.010539][ T8366] netlink: 5252 bytes leftover after parsing attributes in process `syz.2.657'. [ 183.382184][ T8385] netlink: 'syz.4.661': attribute type 1 has an invalid length. [ 183.384820][ T8385] net_ratelimit: 12 callbacks suppressed [ 183.384830][ T8385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.689830][ T8389] netlink: 47 bytes leftover after parsing attributes in process `syz.4.663'. [ 184.034876][ T8396] binder: 8393:8396 ioctl 4018620d 0 returned -22 [ 184.392683][ T8402] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.667'. [ 184.507266][ T8404] nfs4: Unknown parameter '軫UV&tޏ[+`พ  "' [ 184.523745][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 184.523756][ T40] audit: type=1326 audit(1772901979.748:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8403 comm="syz.2.668" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706ef6c code=0x0 [ 184.629322][ T8405] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 184.643889][ T8405] overlayfs: failed to set xattr on upper [ 184.655577][ T8405] overlayfs: ...falling back to redirect_dir=nofollow. [ 184.681350][ T8405] overlayfs: ...falling back to metacopy=off. [ 184.697079][ T8405] overlayfs: ...falling back to index=off. [ 184.711322][ T8405] overlayfs: ...falling back to uuid=null. [ 184.773854][ T8409] binder: 8407:8409 ioctl 4018620d 0 returned -22 [ 185.124652][ T8415] binder: 8413:8415 ioctl 4018620d 0 returned -22 [ 185.186762][ T8416] binder: 8411:8416 ioctl 4018620d 0 returned -22 [ 185.929848][ T8427] binder: 8425:8427 ioctl 4018620d 0 returned -22 [ 186.382337][ T8436] binder: 8433:8436 ioctl 4018620d 0 returned -22 [ 187.781103][ T8441] binder: 8435:8441 ioctl 4018620d 0 returned -22 [ 188.737510][ T8459] netlink: 'syz.4.682': attribute type 2 has an invalid length. [ 188.745257][ T8459] netlink: 48 bytes leftover after parsing attributes in process `syz.4.682'. [ 188.818423][ T8463] netlink: 10 bytes leftover after parsing attributes in process `syz.4.685'. [ 189.770481][ T8471] binder: 8467:8471 ioctl 4018620d 0 returned -22 [ 190.714098][ T8487] binder: 8484:8487 ioctl 4018620d 0 returned -22 [ 190.831662][ T5295] Bluetooth: hci2: unexpected event for opcode 0x080c [ 192.178193][ T8501] binder: 8495:8501 ioctl 4018620d 0 returned -22 [ 194.106193][ T5295] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 194.106215][ T5935] Bluetooth: hci5: command 0x1003 tx timeout [ 194.426631][ T8522] FAULT_INJECTION: forcing a failure. [ 194.426631][ T8522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.431642][ T8522] CPU: 3 UID: 0 PID: 8522 Comm: syz.0.703 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.431660][ T8522] Tainted: [L]=SOFTLOCKUP [ 194.431664][ T8522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.431670][ T8522] Call Trace: [ 194.431674][ T8522] [ 194.431678][ T8522] dump_stack_lvl+0x100/0x190 [ 194.431698][ T8522] should_fail_ex.cold+0x5/0xa [ 194.431710][ T8522] _copy_from_user+0x2e/0xd0 [ 194.431722][ T8522] get_compat_msghdr+0xb3/0x4b0 [ 194.431735][ T8522] ? __pfx_get_compat_msghdr+0x10/0x10 [ 194.431752][ T8522] ___sys_sendmsg+0x1b6/0x1e0 [ 194.431770][ T8522] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.431814][ T8522] __sys_sendmsg+0x170/0x220 [ 194.431830][ T8522] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.431847][ T8522] ? __pfx_ksys_write+0x10/0x10 [ 194.431861][ T8522] __do_fast_syscall_32+0xe3/0x8c0 [ 194.431876][ T8522] do_fast_syscall_32+0x32/0x70 [ 194.431889][ T8522] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.431903][ T8522] RIP: 0023:0xf705ef6c [ 194.431912][ T8522] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 194.431922][ T8522] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 194.431932][ T8522] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000680 [ 194.431939][ T8522] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.431945][ T8522] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.431951][ T8522] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 194.431956][ T8522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.431970][ T8522] [ 194.442851][ T8515] sctp: [Deprecated]: syz.2.699 (pid 8515) Use of int in maxseg socket option. [ 194.442851][ T8515] Use struct sctp_assoc_value instead [ 194.661154][ T8530] serio: Serial port ptm0 [ 194.839815][ T8535] serio: Serial port ptm0 [ 194.870898][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 194.884673][ T8539] all: renamed from bridge_slave_1 (while UP) [ 194.896824][ T8541] FAULT_INJECTION: forcing a failure. [ 194.896824][ T8541] name failslab, interval 1, probability 0, space 0, times 0 [ 194.900962][ T8541] CPU: 1 UID: 0 PID: 8541 Comm: syz.2.707 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.900978][ T8541] Tainted: [L]=SOFTLOCKUP [ 194.900982][ T8541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.900993][ T8541] Call Trace: [ 194.900997][ T8541] [ 194.901001][ T8541] dump_stack_lvl+0x100/0x190 [ 194.901021][ T8541] should_fail_ex.cold+0x5/0xa [ 194.901033][ T8541] ? tomoyo_realpath_from_path+0xb6/0x690 [ 194.901046][ T8541] should_failslab+0xc2/0x120 [ 194.901057][ T8541] __kmalloc_noprof+0xe0/0x850 [ 194.901075][ T8541] tomoyo_realpath_from_path+0xb6/0x690 [ 194.901091][ T8541] tomoyo_path_number_perm+0x23c/0x580 [ 194.901107][ T8541] ? tomoyo_path_number_perm+0x22e/0x580 [ 194.901124][ T8541] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 194.901154][ T8541] ? find_held_lock+0x2b/0x80 [ 194.901164][ T8541] ? hook_file_ioctl_common+0x146/0x410 [ 194.901180][ T8541] ? __fget_files+0x215/0x3d0 [ 194.901193][ T8541] ? __fget_files+0x21f/0x3d0 [ 194.901204][ T8541] security_file_ioctl_compat+0xd3/0x230 [ 194.901222][ T8541] __ia32_compat_sys_ioctl+0xc2/0x360 [ 194.901240][ T8541] __do_fast_syscall_32+0xe3/0x8c0 [ 194.901256][ T8541] do_fast_syscall_32+0x32/0x70 [ 194.901269][ T8541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.901283][ T8541] RIP: 0023:0xf706ef6c [ 194.901292][ T8541] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 194.901302][ T8541] RSP: 002b:00000000f53ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 194.901313][ T8541] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005437 [ 194.901319][ T8541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.901325][ T8541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.901331][ T8541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.901337][ T8541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.901350][ T8541] [ 194.901354][ T8541] ERROR: Out of memory at tomoyo_realpath_from_path. [ 195.102640][ T8554] serio: Serial port ptm1 [ 195.516130][ T8561] cgroup: fork rejected by pids controller in /syz2 [ 195.738880][ T8605] FAULT_INJECTION: forcing a failure. [ 195.738880][ T8605] name failslab, interval 1, probability 0, space 0, times 0 [ 195.746460][ T8605] CPU: 3 UID: 0 PID: 8605 Comm: syz.0.713 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.746479][ T8605] Tainted: [L]=SOFTLOCKUP [ 195.746483][ T8605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.746490][ T8605] Call Trace: [ 195.746493][ T8605] [ 195.746498][ T8605] dump_stack_lvl+0x100/0x190 [ 195.746517][ T8605] should_fail_ex.cold+0x5/0xa [ 195.746532][ T8605] should_failslab+0xc2/0x120 [ 195.746544][ T8605] __kmalloc_cache_noprof+0x7a/0x6f0 [ 195.746557][ T8605] ? v9fs_init_fs_context+0x47/0x590 [ 195.746572][ T8605] ? lockdep_init_map_type+0x5c/0x250 [ 195.746589][ T8605] v9fs_init_fs_context+0x47/0x590 [ 195.746604][ T8605] alloc_fs_context+0x60c/0xf40 [ 195.746619][ T8605] path_mount+0xdbd/0x23d0 [ 195.746648][ T8605] ? __pfx_path_mount+0x10/0x10 [ 195.746660][ T8605] ? lockdep_hardirqs_on+0x78/0x100 [ 195.746674][ T8605] ? putname+0xb1/0x110 [ 195.746684][ T8605] ? kmem_cache_free+0x124/0x6a0 [ 195.746702][ T8605] ? __ia32_sys_mount+0x292/0x310 [ 195.746713][ T8605] __ia32_sys_mount+0x292/0x310 [ 195.746725][ T8605] ? __pfx___ia32_sys_mount+0x10/0x10 [ 195.746742][ T8605] __do_fast_syscall_32+0xe3/0x8c0 [ 195.746757][ T8605] do_fast_syscall_32+0x32/0x70 [ 195.746770][ T8605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.746784][ T8605] RIP: 0023:0xf705ef6c [ 195.746793][ T8605] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 195.746803][ T8605] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 195.746813][ T8605] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 195.746819][ T8605] RDX: 0000000080000080 RSI: 000000000000008c RDI: 0000000080001480 [ 195.746825][ T8605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.746831][ T8605] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 195.746837][ T8605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.746850][ T8605] [ 198.831025][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.226445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.230447][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.234523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.238579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.242721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.246702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.250694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.254645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.258641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.262615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.770845][ T8633] binder: 8628:8633 ioctl 4018620d 0 returned -22 [ 208.917241][ T40] audit: type=1326 audit(1772902004.128:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 208.929752][ T40] audit: type=1326 audit(1772902004.148:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 208.964179][ T40] audit: type=1326 audit(1772902004.168:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 209.006378][ T40] audit: type=1326 audit(1772902004.178:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 209.015881][ T40] audit: type=1326 audit(1772902004.178:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 209.062025][ T40] audit: type=1326 audit(1772902004.188:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 209.069809][ T40] audit: type=1326 audit(1772902004.188:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 209.076664][ T40] audit: type=1326 audit(1772902004.208:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 209.083603][ T40] audit: type=1326 audit(1772902004.208:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 209.130573][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 210.128507][ T40] audit: type=1326 audit(1772902005.358:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.4.718" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef6c code=0x7ffc0000 [ 210.236230][ C0] net_ratelimit: 74436 callbacks suppressed [ 210.236244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.236259][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.236342][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 210.236814][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 210.237299][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 210.237787][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 210.238261][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 210.238434][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.238595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.238754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.470396][ T8647] netlink: 'syz.0.720': attribute type 1 has an invalid length. [ 211.563607][ T8648] bond2: (slave geneve2): making interface the new active one [ 211.600535][ T8648] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 211.630725][ T8656] FAULT_INJECTION: forcing a failure. [ 211.630725][ T8656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.635939][ T8656] CPU: 1 UID: 0 PID: 8656 Comm: syz.1.725 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.635965][ T8656] Tainted: [L]=SOFTLOCKUP [ 211.635970][ T8656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.635980][ T8656] Call Trace: [ 211.635986][ T8656] [ 211.635992][ T8656] dump_stack_lvl+0x100/0x190 [ 211.636016][ T8656] should_fail_ex.cold+0x5/0xa [ 211.636035][ T8656] _copy_to_user+0x32/0xd0 [ 211.636053][ T8656] simple_read_from_buffer+0xcb/0x170 [ 211.636096][ T8656] proc_fail_nth_read+0x1af/0x230 [ 211.636113][ T8656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.636134][ T8656] ? rw_verify_area+0xce/0x6d0 [ 211.636156][ T8656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.636175][ T8656] vfs_read+0x1e4/0xb30 [ 211.636199][ T8656] ? __pfx_vfs_read+0x10/0x10 [ 211.636219][ T8656] ? find_held_lock+0x2b/0x80 [ 211.636236][ T8656] ? __fget_files+0x215/0x3d0 [ 211.636256][ T8656] ? __fget_files+0x21f/0x3d0 [ 211.636282][ T8656] ksys_read+0x12a/0x250 [ 211.636302][ T8656] ? __pfx_ksys_read+0x10/0x10 [ 211.636332][ T8656] do_int80_emulation+0x141/0x6b0 [ 211.636357][ T8656] asm_int80_emulation+0x1a/0x20 [ 211.636373][ T8656] RIP: 0023:0xf7165cab [ 211.636383][ T8656] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 211.636397][ T8656] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 211.636412][ T8656] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541d5d0 [ 211.636423][ T8656] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 211.636432][ T8656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.636442][ T8656] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 211.636451][ T8656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.636471][ T8656] [ 211.792580][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 211.808146][ T59] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 211.811142][ T59] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 211.814270][ T59] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 211.979378][ T8662] binder: 8660:8662 ioctl 4018620d 0 returned -22 [ 212.581127][ T8663] FAULT_INJECTION: forcing a failure. [ 212.581127][ T8663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.775385][ T8663] CPU: 1 UID: 0 PID: 8663 Comm: syz.2.724 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.775405][ T8663] Tainted: [L]=SOFTLOCKUP [ 212.775409][ T8663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 212.775415][ T8663] Call Trace: [ 212.775420][ T8663] [ 212.775424][ T8663] dump_stack_lvl+0x100/0x190 [ 212.775444][ T8663] should_fail_ex.cold+0x5/0xa [ 212.775456][ T8663] _copy_from_user+0x2e/0xd0 [ 212.775468][ T8663] kstrtouint_from_user+0xd6/0x1d0 [ 212.775493][ T8663] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 212.775506][ T8663] ? __lock_acquire+0x4a5/0x2630 [ 212.775521][ T8663] ? lock_acquire+0x1cf/0x380 [ 212.775537][ T8663] proc_fail_nth_write+0x83/0x220 [ 212.775550][ T8663] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 212.775567][ T8663] vfs_write+0x2aa/0x1070 [ 212.775584][ T8663] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 212.775598][ T8663] ? __pfx_vfs_write+0x10/0x10 [ 212.775613][ T8663] ? find_held_lock+0x2b/0x80 [ 212.775622][ T8663] ? __fget_files+0x215/0x3d0 [ 212.775636][ T8663] ? __fget_files+0x21f/0x3d0 [ 212.775649][ T8663] ksys_write+0x12a/0x250 [ 212.775658][ T8663] ? __pfx_ksys_write+0x10/0x10 [ 212.775676][ T8663] do_int80_emulation+0x141/0x6b0 [ 212.775692][ T8663] asm_int80_emulation+0x1a/0x20 [ 212.775703][ T8663] RIP: 0023:0xf71a5cab [ 212.775712][ T8663] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 212.775722][ T8663] RSP: 002b:00000000f545d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 212.775732][ T8663] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545d5d0 [ 212.775739][ T8663] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.775745][ T8663] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.775750][ T8663] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 212.775756][ T8663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.775770][ T8663] [ 213.339428][ T8668] kAFS: No cell specified [ 215.246114][ C0] net_ratelimit: 74854 callbacks suppressed [ 215.246126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.246150][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.246542][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 215.247048][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 215.247552][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 215.248043][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 215.248253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.248678][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 215.249195][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 215.249726][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 215.557923][ T8676] binder: 8672:8676 ioctl 4018620d 0 returned -22 [ 216.850692][ T8684] binder: 8675:8684 ioctl 4018620d 0 returned -22 [ 220.256136][ C0] net_ratelimit: 68606 callbacks suppressed [ 220.256149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.256153][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.256600][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 220.257113][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 220.257637][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 220.258150][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 220.261901][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.266169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.266197][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 220.266700][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 220.843787][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 220.843800][ T40] audit: type=1326 audit(1772902015.938:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 220.886146][ T40] audit: type=1326 audit(1772902015.938:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.738" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 220.893925][ T40] audit: type=1326 audit(1772902015.938:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 220.926907][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 220.939690][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 221.257741][ T40] audit: type=1326 audit(1772902015.948:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.738" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 221.281618][ T40] audit: type=1326 audit(1772902015.948:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 221.307874][ T40] audit: type=1326 audit(1772902015.988:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.738" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 221.317649][ T8704] FAULT_INJECTION: forcing a failure. [ 221.317649][ T8704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.328184][ T8704] CPU: 1 UID: 0 PID: 8704 Comm: syz.2.739 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.328211][ T8704] Tainted: [L]=SOFTLOCKUP [ 221.328216][ T8704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.328227][ T8704] Call Trace: [ 221.328233][ T8704] [ 221.328240][ T8704] dump_stack_lvl+0x100/0x190 [ 221.328270][ T8704] should_fail_ex.cold+0x5/0xa [ 221.328291][ T8704] _copy_from_user+0x2e/0xd0 [ 221.328309][ T8704] get_old_timespec32+0x82/0x130 [ 221.328330][ T8704] ? __pfx_get_old_timespec32+0x10/0x10 [ 221.328355][ T8704] __sys_recvmmsg+0xdf/0x270 [ 221.328379][ T8704] ? __pfx___sys_recvmmsg+0x10/0x10 [ 221.328403][ T8704] ? ksys_write+0x1ac/0x250 [ 221.328423][ T8704] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 221.328445][ T8704] ? __do_fast_syscall_32+0x94/0x8c0 [ 221.328469][ T8704] ? lockdep_hardirqs_on+0x78/0x100 [ 221.328489][ T8704] __do_fast_syscall_32+0xe3/0x8c0 [ 221.328515][ T8704] do_fast_syscall_32+0x32/0x70 [ 221.328538][ T8704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.328560][ T8704] RIP: 0023:0xf706ef6c [ 221.328574][ T8704] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 221.328590][ T8704] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 221.328607][ T8704] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 221.328618][ T8704] RDX: 00000000000006f5 RSI: 0000000000000022 RDI: 0000000080000480 [ 221.328628][ T8704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 221.328638][ T8704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.328648][ T8704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.328671][ T8704] [ 221.329172][ T40] audit: type=1326 audit(1772902016.028:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 221.415613][ T40] audit: type=1326 audit(1772902016.028:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 221.423274][ T40] audit: type=1326 audit(1772902016.038:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.738" exe="/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 221.627561][ T40] audit: type=1326 audit(1772902016.038:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.1.738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 222.116173][ T29] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 222.288152][ T29] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 222.291436][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 222.744418][ T29] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 222.748310][ T29] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 222.751709][ T29] usb 7-1: Product: syz [ 222.753297][ T29] usb 7-1: Manufacturer: syz [ 222.755227][ T29] usb 7-1: SerialNumber: syz [ 222.789440][ T29] usb 7-1: config 0 descriptor?? [ 224.888904][ T29] usb 7-1: selecting invalid altsetting 0 [ 225.266226][ C2] net_ratelimit: 70556 callbacks suppressed [ 225.266240][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.266243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.266421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.266441][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 225.266916][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 225.267391][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 225.267886][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 225.268350][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.268361][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 225.268851][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 226.460007][ T6004] usb 7-1: USB disconnect, device number 14 [ 226.939358][ T8754] binder: 8751:8754 ioctl 4018620d 0 returned -22 [ 229.997764][ T8748] binder: 8744:8748 ioctl 4018620d 0 returned -22 [ 230.276224][ C0] net_ratelimit: 59580 callbacks suppressed [ 230.276239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.276327][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.276545][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 230.277122][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 230.277736][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 230.278282][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 230.278350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.278487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.278621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.278757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.079530][ T8768] netlink: 'syz.0.749': attribute type 3 has an invalid length. [ 233.086492][ T8769] netlink: 'syz.0.749': attribute type 3 has an invalid length. [ 234.265467][ T8791] loop8: detected capacity change from 0 to 8 [ 234.298256][ T8791] Dev loop8: unable to read RDB block 8 [ 234.300485][ T8791] loop8: unable to read partition table [ 234.303113][ T8791] loop8: partition table beyond EOD, truncated [ 234.564686][ T8791] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 234.724100][ T8794] loop8: detected capacity change from 0 to 8 [ 234.743925][ T8794] FAULT_INJECTION: forcing a failure. [ 234.743925][ T8794] name failslab, interval 1, probability 0, space 0, times 0 [ 234.763559][ T8794] CPU: 1 UID: 0 PID: 8794 Comm: syz.2.759 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.763578][ T8794] Tainted: [L]=SOFTLOCKUP [ 234.763582][ T8794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.763588][ T8794] Call Trace: [ 234.763592][ T8794] [ 234.763597][ T8794] dump_stack_lvl+0x100/0x190 [ 234.763616][ T8794] should_fail_ex.cold+0x5/0xa [ 234.763629][ T8794] should_failslab+0xc2/0x120 [ 234.763641][ T8794] __kmalloc_cache_noprof+0x7a/0x6f0 [ 234.763655][ T8794] ? bdev_disk_changed+0x430/0xc80 [ 234.763669][ T8794] bdev_disk_changed+0x430/0xc80 [ 234.763685][ T8794] ? __pfx_bdev_disk_changed+0x10/0x10 [ 234.763695][ T8794] ? kobject_uevent_env+0x2e7/0x18b0 [ 234.763715][ T8794] loop_reread_partitions+0x68/0xe0 [ 234.763728][ T8794] loop_configure+0x1120/0x15b0 [ 234.763750][ T8794] ? __pfx_loop_configure+0x10/0x10 [ 234.763761][ T8794] ? __lock_acquire+0x4a5/0x2630 [ 234.763786][ T8794] lo_ioctl+0xcf3/0x1bc0 [ 234.763800][ T8794] ? __pfx_lo_ioctl+0x10/0x10 [ 234.763817][ T8794] ? tomoyo_path_number_perm+0x46d/0x580 [ 234.763849][ T8794] ? kasan_quarantine_put+0x104/0x240 [ 234.763865][ T8794] ? blk_get_meta_cap+0xd4/0x6c0 [ 234.763878][ T8794] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 234.763890][ T8794] ? find_held_lock+0x2b/0x80 [ 234.763899][ T8794] ? tomoyo_path_number_perm+0x28f/0x580 [ 234.763935][ T8794] lo_compat_ioctl+0xf3/0x160 [ 234.763949][ T8794] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 234.763960][ T8794] compat_blkdev_ioctl+0x682/0x7b0 [ 234.763974][ T8794] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 234.763990][ T8794] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 234.764028][ T8794] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 234.764045][ T8794] __do_fast_syscall_32+0xe3/0x8c0 [ 234.764060][ T8794] do_fast_syscall_32+0x32/0x70 [ 234.764074][ T8794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.764088][ T8794] RIP: 0023:0xf706ef6c [ 234.764098][ T8794] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 234.764108][ T8794] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 234.764118][ T8794] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c0a [ 234.764125][ T8794] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.764131][ T8794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 234.764137][ T8794] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 234.764143][ T8794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.764156][ T8794] [ 235.126206][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 235.286128][ C0] net_ratelimit: 63739 callbacks suppressed [ 235.286141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.286238][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.286542][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 235.287389][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 235.287873][ T29] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 235.287899][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 235.288192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.288235][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 235.289102][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 235.289635][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 235.289651][ T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 235.289663][ T29] usb 5-1: Product: syz [ 235.289671][ T29] usb 5-1: Manufacturer: syz [ 235.289680][ T29] usb 5-1: SerialNumber: syz [ 235.289976][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 235.290815][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 235.291348][ T29] usb 5-1: config 0 descriptor?? [ 235.291666][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 235.297674][ T29] usb 5-1: selecting invalid altsetting 0 [ 235.433193][ T8802] ref_ctr increment failed for inode: 0x423 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888020fa3d40 [ 235.438677][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 235.438692][ T40] audit: type=1804 audit(1772902030.658:203): pid=8802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.760" name="/newroot/191/file0" dev="tmpfs" ino=1059 res=1 errno=0 [ 235.710865][ T29] usb 5-1: USB disconnect, device number 4 [ 235.755880][ T8797] uprobe: syz.2.760:8797 failed to unregister, leaking uprobe [ 235.933348][ T8796] ceph: No source [ 236.226823][ T8819] dvmrp0: left allmulticast mode [ 237.191641][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 237.441841][ T8834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.779'. [ 238.706757][ T8837] binder: 8835:8837 ioctl 4018620d 0 returned -22 [ 238.868640][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'. [ 240.089460][ T8862] overlay: Unknown parameter 'fsuuid' [ 240.296134][ C2] net_ratelimit: 69671 callbacks suppressed [ 240.296147][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.296217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.296615][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 240.297127][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 240.297663][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 240.298162][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 240.298235][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.298426][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.298567][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.298759][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.306202][ C2] net_ratelimit: 76284 callbacks suppressed [ 245.306217][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.306373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.306379][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 245.306580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.306735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.306885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.307035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.307191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.307346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.307496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.450555][ T8882] netlink: 'syz.2.792': attribute type 1 has an invalid length. [ 246.600821][ T8885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.792'. [ 247.901960][ T8884] 8021q: adding VLAN 0 to HW filter on device bond4 [ 247.917426][ T8884] bond3: (slave bond4): making interface the new active one [ 247.917695][ T8884] bond3: (slave bond4): Enslaving as an active interface with an up link [ 247.918809][ T8885] 8021q: adding VLAN 0 to HW filter on device bond3 [ 248.233428][ T8892] syzkaller0: entered promiscuous mode [ 248.235340][ T8892] syzkaller0: entered allmulticast mode [ 249.750877][ T8914] binder: 8910:8914 ioctl 4018620d 0 returned -22 [ 250.316119][ C0] net_ratelimit: 72695 callbacks suppressed [ 250.316132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.316454][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.316535][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 250.317029][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 250.317540][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 250.318004][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 250.318396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.318468][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 250.318939][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 250.319403][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 250.749980][ T8922] loop5: detected capacity change from 0 to 7 [ 251.654596][ T8922] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 251.657148][ T8922] loop5: partition table partially beyond EOD, truncated [ 251.660562][ T8922] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 252.708873][ T8874] udevd[8874]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 255.071280][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.801'. [ 255.074243][ T8925] netlink: 31 bytes leftover after parsing attributes in process `syz.4.801'. [ 255.080853][ T8925] netlink: 'syz.4.801': attribute type 3 has an invalid length. [ 255.083405][ T8925] netlink: 'syz.4.801': attribute type 2 has an invalid length. [ 255.090352][ T8925] netlink: 31 bytes leftover after parsing attributes in process `syz.4.801'. [ 255.326120][ C2] net_ratelimit: 66696 callbacks suppressed [ 255.326133][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.326154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.326252][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 255.327054][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 255.327847][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 255.328127][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.328634][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 255.329455][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 255.330244][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 255.331031][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 260.336159][ C0] net_ratelimit: 73678 callbacks suppressed [ 260.336173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.336283][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.336538][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 260.337013][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 260.337499][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 260.337978][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 260.338235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.338440][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 260.338921][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 260.339399][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:26:ec:cf:a1:df:95, vlan:0) [ 260.453381][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.715779][ T8938] FAULT_INJECTION: forcing a failure. [ 260.715779][ T8938] name failslab, interval 1, probability 0, space 0, times 0 [ 260.720068][ T8938] CPU: 1 UID: 0 PID: 8938 Comm: syz.2.807 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.720085][ T8938] Tainted: [L]=SOFTLOCKUP [ 260.720088][ T8938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.720095][ T8938] Call Trace: [ 260.720099][ T8938] [ 260.720103][ T8938] dump_stack_lvl+0x100/0x190 [ 260.720122][ T8938] should_fail_ex.cold+0x5/0xa [ 260.720135][ T8938] should_failslab+0xc2/0x120 [ 260.720147][ T8938] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 260.720163][ T8938] ? nf_ct_ext_add+0x1b2/0x410 [ 260.720178][ T8938] ? trace_kmem_cache_alloc+0xf3/0x120 [ 260.720189][ T8938] ? __kasan_slab_alloc+0x89/0x90 [ 260.720200][ T8938] krealloc_node_align_noprof+0x30a/0x3e0 [ 260.720219][ T8938] nf_ct_ext_add+0x1b2/0x410 [ 260.720236][ T8938] init_conntrack.isra.0+0x5c3/0x10d0 [ 260.720253][ T8938] ? __pfx_init_conntrack.isra.0+0x10/0x10 [ 260.720272][ T8938] ? ipt_do_table+0xd4f/0x1b00 [ 260.720287][ T8938] ? __local_bh_enable_ip+0x9e/0x120 [ 260.720300][ T8938] nf_conntrack_in+0xf2e/0x17a0 [ 260.720320][ T8938] ? __lock_acquire+0x442/0x2630 [ 260.720333][ T8938] ? __pfx_nf_conntrack_in+0x10/0x10 [ 260.720353][ T8938] ? lock_acquire+0x1cf/0x380 [ 260.720368][ T8938] nf_hook_slow+0xbf/0x220 [ 260.720382][ T8938] nf_hook.constprop.0+0x2a6/0x750 [ 260.720393][ T8938] ? __pfx_ip_rcv_finish+0x10/0x10 [ 260.720404][ T8938] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 260.720415][ T8938] ? sock_wfree+0x12e/0x830 [ 260.720427][ T8938] ? __pfx_ip_rcv_finish+0x10/0x10 [ 260.720438][ T8938] ? ip_rcv_core+0x934/0xe80 [ 260.720450][ T8938] ? __pfx_ip_rcv+0x10/0x10 [ 260.720460][ T8938] ip_rcv+0x7d/0x3c0 [ 260.720471][ T8938] ? __pfx_ip_rcv+0x10/0x10 [ 260.720480][ T8938] __netif_receive_skb_one_core+0x197/0x1e0 [ 260.720492][ T8938] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 260.720503][ T8938] ? lock_acquire+0x1cf/0x380 [ 260.720519][ T8938] __netif_receive_skb+0x1f/0x120 [ 260.720530][ T8938] netif_receive_skb+0x139/0x820 [ 260.720540][ T8938] ? __pfx_netif_receive_skb+0x10/0x10 [ 260.720551][ T8938] ? _copy_from_iter+0x270/0x1690 [ 260.720563][ T8938] ? skb_partial_csum_set+0x202/0x2a0 [ 260.720580][ T8938] tun_rx_batched.isra.0+0x3f6/0x750 [ 260.720597][ T8938] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 260.720615][ T8938] ? tun_get_user+0x1c7e/0x3e10 [ 260.720637][ T8938] tun_get_user+0x1e2e/0x3e10 [ 260.720658][ T8938] ? __pfx_tun_get_user+0x10/0x10 [ 260.720674][ T8938] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 260.720690][ T8938] ? find_held_lock+0x2b/0x80 [ 260.720699][ T8938] ? tun_get+0x191/0x370 [ 260.720713][ T8938] ? tun_get+0x191/0x370 [ 260.720730][ T8938] tun_chr_write_iter+0xdc/0x200 [ 260.720746][ T8938] vfs_write+0x6ac/0x1070 [ 260.720763][ T8938] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 260.720780][ T8938] ? __pfx_vfs_write+0x10/0x10 [ 260.720808][ T8938] ? find_held_lock+0x2b/0x80 [ 260.720826][ T8938] ksys_write+0x12a/0x250 [ 260.720835][ T8938] ? __pfx_ksys_write+0x10/0x10 [ 260.720844][ T8938] ? __pfx_ksys_write+0x10/0x10 [ 260.720856][ T8938] __do_fast_syscall_32+0xe3/0x8c0 [ 260.720872][ T8938] do_fast_syscall_32+0x32/0x70 [ 260.720885][ T8938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.720899][ T8938] RIP: 0023:0xf706ef6c [ 260.720909][ T8938] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 260.720919][ T8938] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 260.720929][ T8938] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 260.720936][ T8938] RDX: 000000000000fd6c RSI: 0000000000000000 RDI: 0000000000000000 [ 260.720941][ T8938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.720947][ T8938] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 260.720953][ T8938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.720966][ T8938] [ 260.846301][ T6019] ------------[ cut here ]------------ [ 260.856257][ T6019] [CRTC:35:crtc-0] vblank wait timed out [ 260.858110][ T6019] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1921 at drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0, CPU#0: kworker/0:3/6019 [ 260.862507][ T6019] Modules linked in: [ 260.864032][ T6019] CPU: 0 UID: 0 PID: 6019 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.873080][ T6019] Tainted: [L]=SOFTLOCKUP [ 260.874518][ T6019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.883263][ T6019] Workqueue: events drm_fb_helper_damage_work [ 260.885220][ T6019] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 260.893327][ T6019] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d b8 4f 44 0b 8b b3 d8 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 f3 66 67 fc e9 7c fe ff ff e8 99 [ 260.905150][ T6019] RSP: 0000:ffffc9000626f6f0 EFLAGS: 00010246 [ 260.913008][ T6019] RAX: 0000000000000000 RBX: ffff8880417b5320 RCX: 1ffff110082f6a7f [ 260.915628][ T6019] RDX: ffff88802590ab40 RSI: 0000000000000023 RDI: ffffffff90e4f850 [ 260.924030][ T6019] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 260.932107][ T6019] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 260.934677][ T6019] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888024099900 [ 260.942767][ T6019] FS: 0000000000000000(0000) GS:ffff88809714b000(0000) knlGS:0000000000000000 [ 260.945618][ T6019] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.953329][ T6019] CR2: 00000000f543bff4 CR3: 0000000054c7b000 CR4: 0000000000352ef0 [ 260.955954][ T6019] Call Trace: [ 260.962645][ T6019] [ 260.963609][ T6019] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 260.966012][ T6019] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 260.973343][ T6019] ? lockdep_hardirqs_on+0x78/0x100 [ 260.975018][ T6019] ? __pfx_autoremove_wake_function+0x10/0x10 [ 260.982419][ T6019] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 260.984496][ T6019] drm_atomic_helper_commit_tail+0xff/0x130 [ 260.991841][ T6019] commit_tail+0x338/0x430 [ 260.993339][ T6019] drm_atomic_helper_commit+0x303/0x380 [ 260.995114][ T6019] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 261.002533][ T6019] drm_atomic_commit+0x230/0x300 [ 261.004146][ T6019] ? __pfx_drm_atomic_commit+0x10/0x10 [ 261.005914][ T6019] ? __pfx___drm_printfn_info+0x10/0x10 [ 261.013443][ T6019] ? drm_mode_object_get+0x108/0x170 [ 261.015184][ T6019] drm_atomic_helper_dirtyfb+0x603/0x790 [ 261.022711][ T6019] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 261.024690][ T6019] ? do_raw_spin_lock+0x128/0x260 [ 261.031773][ T6019] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 261.033790][ T6019] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x310 [ 261.035823][ T6019] drm_fb_helper_damage_work+0x348/0x640 [ 261.043154][ T6019] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 261.045198][ T6019] ? rcu_is_watching+0x12/0xc0 [ 261.052234][ T6019] process_one_work+0x9d7/0x1920 [ 261.053871][ T6019] ? __pfx_process_one_work+0x10/0x10 [ 261.055608][ T6019] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 261.063032][ T6019] worker_thread+0x5da/0xe40 [ 261.064598][ T6019] ? kthread+0x13a/0x450 [ 261.065992][ T6019] ? __pfx_worker_thread+0x10/0x10 [ 261.073224][ T6019] kthread+0x370/0x450 [ 261.074581][ T6019] ? __pfx_kthread+0x10/0x10 [ 261.081772][ T6019] ret_from_fork+0x754/0xd80 [ 261.083358][ T6019] ? __pfx_ret_from_fork+0x10/0x10 [ 261.084967][ T6019] ? __switch_to+0x7b4/0x1120 [ 261.092013][ T6019] ? __pfx_kthread+0x10/0x10 [ 261.093544][ T6019] ret_from_fork_asm+0x1a/0x30 [ 261.095116][ T6019] [ 261.101738][ T6019] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 261.104077][ T6019] CPU: 0 UID: 0 PID: 6019 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.107490][ T6019] Tainted: [L]=SOFTLOCKUP [ 261.108889][ T6019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.112056][ T6019] Workqueue: events drm_fb_helper_damage_work [ 261.114038][ T6019] Call Trace: [ 261.115120][ T6019] [ 261.116099][ T6019] dump_stack_lvl+0x100/0x190 [ 261.117619][ T6019] vpanic+0x552/0x970 [ 261.118909][ T6019] ? __pfx_vpanic+0x10/0x10 [ 261.120390][ T6019] panic+0xd1/0xe0 [ 261.121635][ T6019] ? __pfx_panic+0x10/0x10 [ 261.123107][ T6019] ? check_panic_on_warn+0x1f/0x90 [ 261.124800][ T6019] check_panic_on_warn.cold+0x19/0x34 [ 261.126555][ T6019] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 261.128879][ T6019] __warn.cold+0x191/0x348 [ 261.130393][ T6019] __report_bug+0x296/0x3d0 [ 261.131916][ T6019] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 261.134287][ T6019] ? __pfx___report_bug+0x10/0x10 [ 261.135907][ T6019] ? lockdep_hardirqs_on+0x78/0x100 [ 261.137603][ T6019] report_bug_entry+0xe1/0x290 [ 261.139143][ T6019] ? drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 261.141404][ T6019] handle_bug+0x1cd/0x2a0 [ 261.142806][ T6019] exc_invalid_op+0x17/0x50 [ 261.144299][ T6019] asm_exc_invalid_op+0x1a/0x20 [ 261.145867][ T6019] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 261.148333][ T6019] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d b8 4f 44 0b 8b b3 d8 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 f3 66 67 fc e9 7c fe ff ff e8 99 [ 261.154357][ T6019] RSP: 0000:ffffc9000626f6f0 EFLAGS: 00010246 [ 261.156303][ T6019] RAX: 0000000000000000 RBX: ffff8880417b5320 RCX: 1ffff110082f6a7f [ 261.158782][ T6019] RDX: ffff88802590ab40 RSI: 0000000000000023 RDI: ffffffff90e4f850 [ 261.161297][ T6019] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 261.163750][ T6019] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 261.166305][ T6019] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888024099900 [ 261.168834][ T6019] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 261.171204][ T6019] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 261.173063][ T6019] ? lockdep_hardirqs_on+0x78/0x100 [ 261.174762][ T6019] ? __pfx_autoremove_wake_function+0x10/0x10 [ 261.176703][ T6019] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 261.178759][ T6019] drm_atomic_helper_commit_tail+0xff/0x130 [ 261.180653][ T6019] commit_tail+0x338/0x430 [ 261.182109][ T6019] drm_atomic_helper_commit+0x303/0x380 [ 261.183839][ T6019] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 261.185802][ T6019] drm_atomic_commit+0x230/0x300 [ 261.187387][ T6019] ? __pfx_drm_atomic_commit+0x10/0x10 [ 261.189104][ T6019] ? __pfx___drm_printfn_info+0x10/0x10 [ 261.190839][ T6019] ? drm_mode_object_get+0x108/0x170 [ 261.192548][ T6019] drm_atomic_helper_dirtyfb+0x603/0x790 [ 261.194391][ T6019] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 261.196363][ T6019] ? do_raw_spin_lock+0x128/0x260 [ 261.198018][ T6019] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 261.199944][ T6019] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x310 [ 261.201924][ T6019] drm_fb_helper_damage_work+0x348/0x640 [ 261.203735][ T6019] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 261.205779][ T6019] ? rcu_is_watching+0x12/0xc0 [ 261.207361][ T6019] process_one_work+0x9d7/0x1920 [ 261.208973][ T6019] ? __pfx_process_one_work+0x10/0x10 [ 261.210752][ T6019] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 261.212735][ T6019] worker_thread+0x5da/0xe40 [ 261.214299][ T6019] ? kthread+0x13a/0x450 [ 261.215703][ T6019] ? __pfx_worker_thread+0x10/0x10 [ 261.217386][ T6019] kthread+0x370/0x450 [ 261.218741][ T6019] ? __pfx_kthread+0x10/0x10 [ 261.220239][ T6019] ret_from_fork+0x754/0xd80 [ 261.221760][ T6019] ? __pfx_ret_from_fork+0x10/0x10 [ 261.223388][ T6019] ? __switch_to+0x7b4/0x1120 [ 261.224940][ T6019] ? __pfx_kthread+0x10/0x10 [ 261.226456][ T6019] ret_from_fork_asm+0x1a/0x30 [ 261.228005][ T6019] [ 261.229704][ T6019] Kernel Offset: disabled [ 261.231122][ T6019] Rebooting in 86400 seconds..