last executing test programs: 24m23.934227603s ago: executing program 2 (id=782): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x80000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$mtd(&(0x7f00000002c0), 0x48a99fbe, 0x10b241) ioctl$MEMLOCK(r1, 0x40084d05, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x1, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create1(0x80000) r4 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delchain={0x2c, 0x65, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x8, 0xfff3}, {0x1, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}]}, 0x2c}}, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) 24m22.539282716s ago: executing program 2 (id=788): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) readv(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000100)=""/57, 0x39}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100039}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), &(0x7f00000004c0)=0x4) add_key$user(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), 0xc9, 0xfffffffffffffffd) open(&(0x7f0000000700)='./mnt\x00', 0x8000, 0x129) write(r4, &(0x7f0000000340)='connect 11:aa:aa:aa:aa:aa 1', 0x1b) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000580), 0x80001, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) 24m21.659717753s ago: executing program 2 (id=791): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000200)={0x2, 0x4, 0x1, 0x82, 0x0, [@mcast2, @empty]}, 0x28) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001480)='cpu.pressure\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001500), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x30, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$inet(r6, 0x0, &(0x7f0000000240)) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000002c0)={0x0, {0x10, 0x9, 0xffff, 0x3, 0x7}}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x180000000) 24m21.277905293s ago: executing program 2 (id=794): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) tkill(r1, 0x12) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_GET_MPATH(r3, 0x0, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) sendfile(r4, r4, 0x0, 0x8000000f3aa6ea) 24m20.640060327s ago: executing program 2 (id=797): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0, &(0x7f00000003c0)='acl') syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ec, 0x8000, 0x2, 0x50}, &(0x7f0000000040), &(0x7f0000000080), 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x148) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x5) epoll_create1(0x0) syz_open_dev$media(&(0x7f0000000180), 0x3e, 0x40) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) 24m19.718833633s ago: executing program 2 (id=798): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb080045000014000000000000000000000000ffffff"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000100)='net/packet\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x40f4, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x100, 0xfffffff5) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000600), 0x0, 0x0, 0x0, &(0x7f0000000640)) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 24m4.13604868s ago: executing program 32 (id=798): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb080045000014000000000000000000000000ffffff"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000100)='net/packet\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x40f4, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x100, 0xfffffff5) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000600), 0x0, 0x0, 0x0, &(0x7f0000000640)) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 16m7.863574218s ago: executing program 1 (id=2054): r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x7f) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)='A', 0x1}], 0x1}}, {{&(0x7f0000000780)={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000800)="3d3ae39933472ecf3569f3c68e1b015e03c87b67", 0x14}, {0x0}], 0x2}}], 0x2, 0x4000801) syz_usb_connect(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) writev(r3, &(0x7f0000003800)=[{&(0x7f0000000380)='X', 0x1}], 0x1) 16m4.811737159s ago: executing program 1 (id=2059): socket(0xa, 0x800, 0x10000) syz_open_dev$radio(&(0x7f0000000640), 0x1, 0x2) inotify_init1(0x80000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="670004000a5b8e9e2ecdd3ec98fe000000000000e226", @ANYRES16=r4, @ANYBLOB="0500000000000000000001010000540001"], 0x68}}, 0x40) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000480)="03000000", 0x4}], 0x2}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000500)={0x1f, 0x0, @any, 0x8, 0x2}, 0xe) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000540)={0x3, 0x3}, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r9, &(0x7f00000005c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fd", 0x42, 0x0, &(0x7f0000000680)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = socket$packet(0x11, 0x3, 0x300) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a00040076647079300019cc88bc7a85e014", 0x36}], 0x1}, 0x0) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000780)={0x3, 0x3}, 0x4) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000000)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0x4f, &(0x7f0000000840)={&(0x7f0000000880)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbf8, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4) 16m3.753104162s ago: executing program 1 (id=2063): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f0000000080)='dctcp', 0x1000, &(0x7f00000001c0)={@align=0xe21, {0xfc, 0x40, 0x7, 0x7fffffff}}, 0xa948, 0x0, &(0x7f0000000240)=0x39fb}, {[0x152, 0x8, 0xffffffff, 0x4]}, 0x3, 0x9e, &(0x7f00000002c0)=""/158}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x40100) read(r2, &(0x7f0000000040)=""/21, 0x15) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0xff03, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000900)="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", 0x181, 0x12, 0x0, 0x0) 16m0.633660837s ago: executing program 1 (id=2066): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f00000003c0), 0xa, 0x1a0881) r2 = landlock_create_ruleset(&(0x7f0000000ac0)={0x8, 0xe219c6a10ddf6700, 0x3, 0x2000, 0x1, 0x1}, 0x30, 0x2) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000b80)={0x8, 0x9}, 0x1) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000500)={0xa, @meta={0x48435655, 0x6b539c7b, 0x2660, 0x6419, 0x12fd61a0}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e0000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e105000a00000200000000", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'veth0_macvtap\x00', 0x0}) socket(0x10, 0x6, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0xfffc, 0x4, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x181000, 0x0) read$snddsp(r6, &(0x7f0000000200)=""/203, 0xcb) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x115) readv(r7, &(0x7f0000000340)=[{&(0x7f0000000400)=""/225, 0xe1}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000600)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000640)) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000680)={@multicast2, @loopback}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000006c0)=[{&(0x7f0000000700)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r9, &(0x7f0000000740)=[{&(0x7f0000000a40)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000bc0)={'lo\x00'}) 16m0.410194839s ago: executing program 1 (id=2067): r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x7f) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)='A', 0x1}], 0x1}}, {{&(0x7f0000000780)={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000800)="3d3ae39933472ecf3569f3c68e1b015e03c87b67", 0x14}, {0x0}], 0x2}}], 0x2, 0x4000801) syz_usb_connect(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) writev(r3, &(0x7f0000003800)=[{&(0x7f0000000380)='X', 0x1}], 0x1) 16m0.116300599s ago: executing program 1 (id=2069): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0\x00'}) r2 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x82) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000001c0)=""/182, 0x74) lseek(r4, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00'}) r5 = syz_io_uring_setup(0x320, &(0x7f0000000280)={0x0, 0xb70f, 0x800, 0x0, 0x1}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x3100) socket$xdp(0x2c, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)={0x38, r8, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(&(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000001640)='1', 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r11, &(0x7f00000016c0)='0', 0x1) writev(r10, &(0x7f0000001700), 0x0) pipe(0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) 15m59.957239699s ago: executing program 33 (id=2069): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0\x00'}) r2 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x82) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000001c0)=""/182, 0x74) lseek(r4, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00'}) r5 = syz_io_uring_setup(0x320, &(0x7f0000000280)={0x0, 0xb70f, 0x800, 0x0, 0x1}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x3100) socket$xdp(0x2c, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)={0x38, r8, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(&(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000001640)='1', 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r11, &(0x7f00000016c0)='0', 0x1) writev(r10, &(0x7f0000001700), 0x0) pipe(0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) 13m19.981953023s ago: executing program 5 (id=3221): r0 = socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) openat$cdrom(0xffffff9c, 0x0, 0x400, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) write$tun(r1, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000540000000000000000000000bbfe8000"/51, @ANYRES8], 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900110200000001000000ffdbdf25"], 0x10}}, 0x0) 13m19.871556996s ago: executing program 5 (id=3223): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000380)=@filename='mtd0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000440)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0xb66f) 13m19.754765053s ago: executing program 5 (id=3224): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_snmp6\x00') read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setreuid(0x0, 0x0) setreuid(0x0, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r5, r5, 0x0, 0x23) 13m18.882366304s ago: executing program 5 (id=3227): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x2d) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 13m18.765318566s ago: executing program 5 (id=3229): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f0000000a40), 0x0, 0xbb42) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/104, 0x68}], 0x1) 13m18.428339431s ago: executing program 5 (id=3231): r0 = socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) openat$cdrom(0xffffff9c, 0x0, 0x400, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) write$tun(r1, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000540000000000000000000000bbfe8000"/51, @ANYRES8], 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900110200000001000000ffdbdf25"], 0x10}}, 0x0) 13m18.30900401s ago: executing program 34 (id=3231): r0 = socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) openat$cdrom(0xffffff9c, 0x0, 0x400, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) write$tun(r1, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000540000000000000000000000bbfe8000"/51, @ANYRES8], 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900110200000001000000ffdbdf25"], 0x10}}, 0x0) 5m6.871701636s ago: executing program 0 (id=5384): r0 = io_uring_setup(0x1684, &(0x7f0000000000)={0x0, 0x3a2b, 0x8, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000100)={0xc0000000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xc0000000, &(0x7f0000001000/0x1000)=nil, 0x0, r3}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8010) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x0, 0x1}, 0x20) 5m6.0447667s ago: executing program 0 (id=5391): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_snmp6\x00') read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r4, 0x0) setreuid(0x0, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa0000000000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r6, r6, 0x0, 0x23) 5m5.525555198s ago: executing program 0 (id=5394): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000100)={0xc0000000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xc0000000, &(0x7f0000001000/0x1000)=nil, 0x0, r2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8010) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x0, 0x1}, 0x20) 5m5.246407692s ago: executing program 6 (id=5396): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000100)={0xc0000000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xc0000000, &(0x7f0000001000/0x1000)=nil, 0x0, r2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8010) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x0, 0x1}, 0x20) 5m4.501152955s ago: executing program 6 (id=5400): mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 5m4.40207574s ago: executing program 6 (id=5401): r0 = io_uring_setup(0x1684, &(0x7f0000000000)={0x0, 0x3a2b, 0x8, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000100)={0xc0000000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xc0000000, &(0x7f0000001000/0x1000)=nil, 0x0, r3}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8010) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x0, 0x1}, 0x20) 5m4.282358859s ago: executing program 0 (id=5402): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_snmp6\x00') read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r4, 0x0) setreuid(0x0, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa0000000000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r6, r6, 0x0, 0x23) 5m3.316078255s ago: executing program 0 (id=5407): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_snmp6\x00') read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r4, 0x0) setreuid(0x0, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, 0x0) sendfile(r6, r6, 0x0, 0x23) 5m2.687982273s ago: executing program 6 (id=5409): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) timer_gettime(r0, 0x0) r3 = dup(r2) read(r3, 0x0, 0x0) 5m2.391167854s ago: executing program 6 (id=5410): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) timer_gettime(r0, 0x0) r3 = dup(r2) read(r3, 0x0, 0x0) 5m2.327151967s ago: executing program 0 (id=5412): r0 = io_uring_setup(0x1684, &(0x7f0000000000)={0x0, 0x3a2b, 0x8, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000100)={0xc0000000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xc0000000, &(0x7f0000001000/0x1000)=nil, 0x0, r3}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8010) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x0, 0x1}, 0x20) 5m2.317030734s ago: executing program 6 (id=5413): r0 = io_uring_setup(0x1684, &(0x7f0000000000)={0x0, 0x3a2b, 0x8, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000100)={0xc0000000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xc0000000, &(0x7f0000001000/0x1000)=nil, 0x0, r3}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8010) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x0, 0x1}, 0x20) 4m46.974041679s ago: executing program 35 (id=5412): r0 = io_uring_setup(0x1684, &(0x7f0000000000)={0x0, 0x3a2b, 0x8, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000100)={0xc0000000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xc0000000, &(0x7f0000001000/0x1000)=nil, 0x0, r3}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8010) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x0, 0x1}, 0x20) 4m46.786595116s ago: executing program 36 (id=5413): r0 = io_uring_setup(0x1684, &(0x7f0000000000)={0x0, 0x3a2b, 0x8, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000100)={0xc0000000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xc0000000, &(0x7f0000001000/0x1000)=nil, 0x0, r3}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8010) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x0, 0x1}, 0x20) 7.087048066s ago: executing program 3 (id=6410): syz_clone(0x48000080, &(0x7f00000044c0)="3d3e489f992200ce3e000000006d14", 0xf, 0x0, &(0x7f0000000140), 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = userfaultfd(0x801) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0xfffffec1) read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0xfffffce2) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x12, r0, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/21], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x69c000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000180)={0x1d, r3}, 0x10) 6.857259489s ago: executing program 7 (id=6411): syz_clone(0x48000080, &(0x7f00000044c0)="3d3e489f992200ce3e000000006d14", 0xf, 0x0, &(0x7f0000000140), 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = userfaultfd(0x801) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0xfffffec1) read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0xfffffce2) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x12, r0, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/21], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x69c000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000180)={0x1d, r3}, 0x10) 5.804997857s ago: executing program 3 (id=6414): syz_clone(0x48000080, &(0x7f00000044c0)="3d3e489f992200ce3e000000006d14", 0xf, 0x0, &(0x7f0000000140), 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = userfaultfd(0x801) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0xfffffec1) read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0xfffffce2) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x12, r0, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/21], 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x69c000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000180)={0x1d, r4}, 0x10) 5.366975567s ago: executing program 7 (id=6417): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) 5.312024508s ago: executing program 4 (id=6418): r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x40000000) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 4.692337984s ago: executing program 8 (id=6421): socket$kcm(0xa, 0x6, 0x0) 4.630485569s ago: executing program 3 (id=6422): bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 4.475612498s ago: executing program 8 (id=6423): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getcwd(0x0, 0x0) 698.288976ms ago: executing program 4 (id=6424): sched_setaffinity(0x0, 0xfffffffffffffe59, 0x0) 504.957787ms ago: executing program 7 (id=6425): mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fallocate(r2, 0x0, 0x2, 0x5) 414.857444ms ago: executing program 8 (id=6426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x8, 0x40, 0xc0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000640), 0x1103, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x19, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) 354.24572ms ago: executing program 3 (id=6427): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0xffffffffffffffff, 0x3, 0x0) 354.133256ms ago: executing program 4 (id=6428): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x2]}, 0x8}) 270.229734ms ago: executing program 4 (id=6429): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x40, 0x0) 237.164092ms ago: executing program 8 (id=6430): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) wait4(0x0, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x42, 0x0) 237.088215ms ago: executing program 4 (id=6431): r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000001c0)) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000004600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x72) fchdir(r3) rmdir(&(0x7f0000000080)='./file0\x00') 142.422189ms ago: executing program 7 (id=6432): pipe2(0x0, 0x11080) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f00000001c0)=0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='27', 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x60000000}) 138.199949ms ago: executing program 3 (id=6433): setuid(0xee01) timer_create(0xc, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capget(0x0, 0x0) r0 = semget(0x0, 0x3, 0x240) semctl$GETZCNT(r0, 0x1, 0xf, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x200002, 0x200003, 0x801, 0x4, 0x7}) 56.120924ms ago: executing program 3 (id=6434): mlockall(0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000340)={0x0, @in={{0xa, 0x804, @multicast1}}, 0x5, 0x6d0}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) sendto$inet6(r1, &(0x7f0000000440)='0', 0x1, 0x4000854, &(0x7f0000000480)={0xa, 0x4e21, 0xbe7, @loopback, 0xce2}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) pselect6(0x40, &(0x7f0000000240)={0xf, 0x10000000000001, 0x0, 0x8000, 0x800, 0x9}, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socketpair(0xa, 0x3, 0xff, &(0x7f0000000180)) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x37, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 49.148518ms ago: executing program 7 (id=6435): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x2, @local}, 0x10) 43.138055ms ago: executing program 8 (id=6436): r0 = openat$macvtap(0xffffffffffffff9c, &(0x7f0000000080), 0x8101, 0x0) write$tun(r0, 0x0, 0x0) 8.073046ms ago: executing program 4 (id=6437): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000004700), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000004740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0xad41, 0x0) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000004bc0)={0x4, 0x0, 0x0, 0x1f8, 0x138, 0x1, 0x0, 0x25411, 0x0, 0x0, @by_dev={r1}, [@multipath={0x0, 0x400, 0x0, 0xc0, 'multipath\x00', {'2 queue_mode bio', 0x20, '0', 0x20, 0x1, 0x20, 0x1, [{0x20, 'service-time 0', 0x20, 0x2, 0x20, '1', [{0x20, @ram_num={'1:', 0x1}, ' 1000'}, {0x20, @ram_num={'1:', 0x1}, ' 1'}]}]}}]}) 7.345855ms ago: executing program 8 (id=6438): mknodat$md(0xffffffffffffff9c, &(0x7f0000000100)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x2, 0x0) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000001540)={0x4006, {0x1, 0x0}, 0x8000000, 0x4040e}) 0s ago: executing program 7 (id=6439): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x11d) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fsync(r0) kernel console output (not intermixed with test programs): nterface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.783072][T14611] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.783107][T14611] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1220.783142][T14611] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.078671][T14611] usb 8-1: config 0 descriptor?? [ 1223.600315][ C3] net_ratelimit: 169 callbacks suppressed [ 1224.112773][T14611] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1224.219632][T14611] usb 8-1: USB disconnect, device number 87 [ 1224.335915][T23535] FAULT_INJECTION: forcing a failure. [ 1224.335915][T23535] name failslab, interval 1, probability 5, space 0, times 9991 [ 1224.335946][T23535] CPU: 3 UID: 0 PID: 23535 Comm: syz.4.4895 Tainted: G L syzkaller #0 PREEMPT(full) [ 1224.335975][T23535] Tainted: [L]=SOFTLOCKUP [ 1224.335983][T23535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1224.335996][T23535] Call Trace: [ 1224.336004][T23535] [ 1224.336014][T23535] dump_stack_lvl+0x100/0x190 [ 1224.336050][T23535] should_fail_ex.cold+0x5/0xa [ 1224.336081][T23535] should_failslab+0xc2/0x120 [ 1224.336109][T23535] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1224.336133][T23535] ? __anon_vma_prepare+0x55c/0x870 [ 1224.336186][T23535] __anon_vma_prepare+0x55c/0x870 [ 1224.336220][T23535] __vmf_anon_prepare+0x31a/0x4b0 [ 1224.336245][T23535] do_wp_page+0xd1a/0x46c0 [ 1224.336274][T23535] ? __pfx___pte_offset_map+0x10/0x10 [ 1224.336295][T23535] ? __pfx_do_wp_page+0x10/0x10 [ 1224.336320][T23535] ? do_raw_spin_lock+0x128/0x260 [ 1224.336347][T23535] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1224.336373][T23535] ? __pfx_pgd_none+0x10/0x10 [ 1224.336404][T23535] __handle_mm_fault+0x1d72/0x2f40 [ 1224.336438][T23535] ? __pfx___handle_mm_fault+0x10/0x10 [ 1224.336464][T23535] ? __pfx_follow_page_pte+0x10/0x10 [ 1224.336541][T23535] handle_mm_fault+0x363/0xa30 [ 1224.336577][T23535] __get_user_pages+0x7ca/0x1d50 [ 1224.336621][T23535] ? __pfx___get_user_pages+0x10/0x10 [ 1224.336654][T23535] ? __pfx_down_read_killable+0x10/0x10 [ 1224.336678][T23535] ? lock_acquire+0x1d1/0x380 [ 1224.336700][T23535] ? __pte_offset_map+0x9a/0x470 [ 1224.336725][T23535] __gup_longterm_locked+0x87d/0x16f0 [ 1224.336763][T23535] ? __pte_offset_map+0x1e9/0x470 [ 1224.336784][T23535] ? __pfx___pte_offset_map+0x10/0x10 [ 1224.336806][T23535] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1224.336838][T23535] ? lock_acquire+0x1d1/0x380 [ 1224.336859][T23535] ? gup_fast_fallback+0x515/0x2a70 [ 1224.336892][T23535] ? find_held_lock+0x2b/0x80 [ 1224.336921][T23535] ? gup_fast_fallback+0xbc3/0x2a70 [ 1224.336960][T23535] gup_fast_fallback+0x78a/0x2a70 [ 1224.336995][T23535] ? do_raw_spin_unlock+0x53/0x1e0 [ 1224.337044][T23535] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1224.337088][T23535] get_user_pages_fast+0xa7/0xf0 [ 1224.337120][T23535] ? __pfx_get_user_pages_fast+0x10/0x10 [ 1224.337167][T23535] get_futex_key+0x2bf/0x13e0 [ 1224.337201][T23535] ? __pfx_get_futex_key+0x10/0x10 [ 1224.337240][T23535] futex_lock_pi+0x1eb/0x7e0 [ 1224.337283][T23535] ? __pfx_futex_lock_pi+0x10/0x10 [ 1224.337308][T23535] ? __pfx___futex_wait+0x10/0x10 [ 1224.337329][T23535] ? __pfx_try_to_wake_up+0x10/0x10 [ 1224.337380][T23535] ? __pfx_futex_wake_mark+0x10/0x10 [ 1224.337413][T23535] ? rcu_read_lock_any_held+0x6a/0x90 [ 1224.337445][T23535] ? find_held_lock+0x2b/0x80 [ 1224.337476][T23535] ? ksys_write+0x190/0x250 [ 1224.337502][T23535] do_futex+0x371/0x440 [ 1224.337533][T23535] ? __pfx_do_futex+0x10/0x10 [ 1224.337565][T23535] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1224.337601][T23535] __ia32_sys_futex_time32+0x2f4/0x470 [ 1224.337639][T23535] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 1224.337671][T23535] ? __might_fault+0xc5/0x140 [ 1224.337706][T23535] __do_fast_syscall_32+0x14d/0x8e0 [ 1224.337738][T23535] ? lockdep_hardirqs_on+0x7d/0x110 [ 1224.337771][T23535] do_fast_syscall_32+0x32/0x70 [ 1224.337803][T23535] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1224.337830][T23535] RIP: 0023:0xf7f47fbc [ 1224.337847][T23535] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1224.337867][T23535] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1224.337888][T23535] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000000000d [ 1224.337901][T23535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1224.337914][T23535] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1224.337927][T23535] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1224.337939][T23535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1224.337968][T23535] [ 1224.389115][T23537] fido_id[23537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/8-1/report_descriptor': No such file or directory [ 1224.647981][T23545] __nla_validate_parse: 16 callbacks suppressed [ 1224.647998][T23545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4898'. [ 1224.731631][T11087] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1224.771692][T23549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4897'. [ 1224.913445][T23557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4901'. [ 1224.914008][T23557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4901'. [ 1224.914186][T23557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4901'. [ 1224.914347][T23557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4901'. [ 1224.914416][T23557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4901'. [ 1225.988751][T23566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4903'. [ 1225.991293][T23566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4903'. [ 1225.991565][T23566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4903'. [ 1226.140603][ T59] usb 11-1: new low-speed USB device number 28 using dummy_hcd [ 1226.305863][ T59] usb 11-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1226.313006][ T59] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 1226.313598][ T59] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1226.314006][ T59] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1226.314638][ T59] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1226.319669][ T59] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1226.351092][ T59] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 1226.353638][ T59] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1226.354406][ T59] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1226.354790][ T59] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1226.356103][ T59] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1226.389451][ T59] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 1226.392300][ T59] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1226.393680][ T59] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1226.397124][ T59] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1226.398681][ T59] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1226.587566][ T59] usb 11-1: string descriptor 0 read error: -22 [ 1226.587846][ T59] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.869022][ T59] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1227.013162][T14611] usb 11-1: USB disconnect, device number 28 [ 1228.721167][T22582] net_ratelimit: 127 callbacks suppressed [ 1230.224222][T23581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1230.500550][T14611] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 1230.651592][T14611] usb 11-1: Using ep0 maxpacket: 8 [ 1230.711056][T23632] __nla_validate_parse: 12 callbacks suppressed [ 1230.711067][T23632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4920'. [ 1230.712763][T14611] usb 11-1: unable to get BOS descriptor or descriptor too short [ 1230.713053][T14611] usb 11-1: New USB device found: idVendor=06f8, idProduct=b000, bcdDevice=0.40 [ 1230.713445][T23632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4920'. [ 1230.713654][T23632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4920'. [ 1230.713800][T23632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4920'. [ 1230.713896][T23632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4920'. [ 1230.720839][T14611] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 1230.720967][T14611] usb 11-1: can't read configurations, error -71 [ 1231.617410][T23645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4924'. [ 1231.619830][T23645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4924'. [ 1231.620097][T23645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4924'. [ 1231.632561][T23645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4924'. [ 1231.638390][T23645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4924'. [ 1232.966685][T23664] syz_tun: entered allmulticast mode [ 1232.978567][T23660] syz_tun: left allmulticast mode [ 1232.979038][T23663] FAULT_INJECTION: forcing a failure. [ 1232.979038][T23663] name failslab, interval 1, probability 5, space 0, times 9990 [ 1232.979060][T23663] CPU: 1 UID: 0 PID: 23663 Comm: syz.3.4929 Tainted: G L syzkaller #0 PREEMPT(full) [ 1232.979079][T23663] Tainted: [L]=SOFTLOCKUP [ 1232.979083][T23663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1232.979091][T23663] Call Trace: [ 1232.979098][T23663] [ 1232.979103][T23663] dump_stack_lvl+0x100/0x190 [ 1232.979126][T23663] should_fail_ex.cold+0x5/0xa [ 1232.979146][T23663] should_failslab+0xc2/0x120 [ 1232.979162][T23663] __kmalloc_cache_noprof+0x91/0x6d0 [ 1232.979182][T23663] ? create_filter_start.constprop.0+0x1c4/0x310 [ 1232.979202][T23663] create_filter_start.constprop.0+0x1c4/0x310 [ 1232.979226][T23663] apply_subsystem_event_filter+0x188/0x17a0 [ 1232.979243][T23663] ? __might_fault+0xc5/0x140 [ 1232.979261][T23663] ? __might_fault+0xc5/0x140 [ 1232.979280][T23663] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1232.979301][T23663] ? _copy_from_user+0x59/0xd0 [ 1232.979338][T23663] subsystem_filter_write+0x95/0x120 [ 1232.979357][T23663] vfs_write+0x2aa/0x1040 [ 1232.979372][T23663] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1232.979389][T23663] ? lock_acquire+0x1d1/0x380 [ 1232.979402][T23663] ? __fget_files+0x34/0x3d0 [ 1232.979419][T23663] ? __pfx_vfs_write+0x10/0x10 [ 1232.979431][T23663] ? find_held_lock+0x2b/0x80 [ 1232.979449][T23663] ? __fget_files+0x215/0x3d0 [ 1232.979466][T23663] ? __fget_files+0x21f/0x3d0 [ 1232.979485][T23663] ksys_write+0x12a/0x250 [ 1232.979499][T23663] ? __pfx_ksys_write+0x10/0x10 [ 1232.979517][T23663] __do_fast_syscall_32+0x14d/0x8e0 [ 1232.979539][T23663] do_fast_syscall_32+0x32/0x70 [ 1232.979558][T23663] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1232.979578][T23663] RIP: 0023:0xf744efbc [ 1232.979593][T23663] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1232.979608][T23663] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1232.979627][T23663] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1232.979640][T23663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1232.979651][T23663] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1232.979663][T23663] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1232.979676][T23663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1232.979702][T23663] [ 1233.920318][ C3] net_ratelimit: 149 callbacks suppressed [ 1234.060383][T23680] ptp ptp0: new virtual clock ptp2 [ 1234.274974][T23680] ptp ptp0: new virtual clock ptp3 [ 1234.499143][T23680] ptp ptp0: new virtual clock ptp4 [ 1234.516878][T23680] ptp ptp0: new virtual clock ptp5 [ 1234.802613][T23680] ptp ptp0: new virtual clock ptp6 [ 1234.802768][T23680] ptp ptp0: guarantee physical clock free running [ 1235.857077][T21965] usb 5-1: new low-speed USB device number 105 using dummy_hcd [ 1235.944818][T23657] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1236.011775][T21965] usb 5-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1236.012772][T21965] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1236.012796][T21965] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1236.012812][T21965] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1236.013672][T21965] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1236.013694][T21965] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1236.013709][T21965] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1236.014507][T21965] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1236.014527][T21965] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1236.014542][T21965] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1236.016999][T21965] usb 5-1: string descriptor 0 read error: -22 [ 1236.017069][T21965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.029865][T21965] adutux 5-1:168.0: interrupt endpoints not found [ 1236.295317][T23732] __nla_validate_parse: 18 callbacks suppressed [ 1236.295328][T23732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4946'. [ 1236.296258][T23732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4946'. [ 1236.296992][T23732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4946'. [ 1236.297665][T23732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4946'. [ 1236.297985][T23732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4946'. [ 1238.282150][T14611] usb 5-1: USB disconnect, device number 105 [ 1238.600427][ T59] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 1238.629123][T23756] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4955'. [ 1238.751052][ T59] usb 8-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1238.751098][ T59] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1238.752045][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1238.752074][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1238.752105][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1238.753012][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1238.753035][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1238.753049][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1238.753918][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1238.753946][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1238.753960][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1238.754802][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1238.754834][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1238.754857][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1238.755694][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1238.755716][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1238.755730][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1238.756549][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1238.756571][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1238.756587][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1238.757576][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1238.757601][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1238.757615][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1238.758471][ T59] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1238.758493][ T59] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1238.758507][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1238.760526][ T59] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1238.760544][ T59] usb 8-1: Product: syz [ 1238.760557][ T59] usb 8-1: Manufacturer: syz [ 1238.760570][ T59] usb 8-1: SerialNumber: syz [ 1238.762779][ T59] usb 8-1: config 0 descriptor?? [ 1238.766615][ T59] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 1239.040428][T22582] net_ratelimit: 170 callbacks suppressed [ 1239.072666][ C1] usb 8-1: yurex_control_callback - control failed: -2 [ 1239.085320][ T59] usb 8-1: USB disconnect, device number 88 [ 1239.089726][ T59] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 1239.194270][T23724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1239.551883][T23763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4957'. [ 1239.552429][T23763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4957'. [ 1239.552864][T23763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4957'. [ 1239.553095][T23763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4957'. [ 1239.741279][T23766] FAULT_INJECTION: forcing a failure. [ 1239.741279][T23766] name failslab, interval 1, probability 5, space 0, times 9989 [ 1239.741449][T23766] CPU: 2 UID: 0 PID: 23766 Comm: syz.3.4958 Tainted: G L syzkaller #0 PREEMPT(full) [ 1239.741480][T23766] Tainted: [L]=SOFTLOCKUP [ 1239.741486][T23766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1239.741495][T23766] Call Trace: [ 1239.741500][T23766] [ 1239.741506][T23766] dump_stack_lvl+0x100/0x190 [ 1239.741530][T23766] should_fail_ex.cold+0x5/0xa [ 1239.741548][T23766] should_failslab+0xc2/0x120 [ 1239.741565][T23766] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1239.741578][T23766] ? __pfx___alloc_skb+0x10/0x10 [ 1239.741598][T23766] ? __skb_ext_alloc+0x1a/0x80 [ 1239.741616][T23766] __skb_ext_alloc+0x1a/0x80 [ 1239.741631][T23766] mptcp_sendmsg_frag+0x7f3/0x3000 [ 1239.741650][T23766] ? up_write+0x508/0x5b0 [ 1239.741672][T23766] ? __pfx_mptcp_sendmsg_frag+0x10/0x10 [ 1239.741689][T23766] ? lock_acquire+0x1d1/0x380 [ 1239.741703][T23766] __subflow_push_pending+0x34b/0xbb0 [ 1239.741727][T23766] __mptcp_push_pending+0x2cc/0x540 [ 1239.741748][T23766] ? __pfx___mptcp_push_pending+0x10/0x10 [ 1239.741772][T23766] mptcp_sendmsg+0xe35/0x21e0 [ 1239.741799][T23766] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1239.741818][T23766] ? aa_sock_msg_perm+0x11e/0x200 [ 1239.741836][T23766] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1239.741855][T23766] inet_sendmsg+0x11c/0x140 [ 1239.741868][T23766] __sys_sendto+0x470/0x4e0 [ 1239.741885][T23766] ? __pfx_inet_sendmsg+0x10/0x10 [ 1239.741897][T23766] ? __pfx___sys_sendto+0x10/0x10 [ 1239.741919][T23766] ? __sys_connect+0xe4/0x170 [ 1239.741942][T23766] ? find_held_lock+0x2b/0x80 [ 1239.741960][T23766] ? __might_fault+0xc5/0x140 [ 1239.741976][T23766] ? __might_fault+0xc5/0x140 [ 1239.741993][T23766] __ia32_sys_sendto+0xdd/0x1b0 [ 1239.742010][T23766] ? __might_fault+0x111/0x140 [ 1239.742026][T23766] __do_fast_syscall_32+0x14d/0x8e0 [ 1239.742048][T23766] do_fast_syscall_32+0x32/0x70 [ 1239.742073][T23766] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1239.742089][T23766] RIP: 0023:0xf744efbc [ 1239.742100][T23766] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1239.742114][T23766] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 1239.742127][T23766] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000740 [ 1239.742136][T23766] RDX: 00000000fffffdb0 RSI: 0000000004040004 RDI: 0000000000000000 [ 1239.742143][T23766] RBP: 00000000fffffffb R08: 0000000000000000 R09: 0000000000000000 [ 1239.742151][T23766] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1239.742158][T23766] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1239.742175][T23766] [ 1240.650775][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061207800: rx timeout, send abort [ 1240.653341][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061207800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1240.672273][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804fb25400: rx timeout, send abort [ 1240.672423][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804fb25400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1241.391069][T23796] overlayfs: failed to clone lowerpath [ 1241.561598][T23807] __nla_validate_parse: 2 callbacks suppressed [ 1241.561609][T23807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4969'. [ 1241.562089][T23807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4969'. [ 1241.562424][T23807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4969'. [ 1241.562590][T23807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4969'. [ 1241.562663][T23807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4969'. [ 1242.479426][T23844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4974'. [ 1242.482396][T23844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4974'. [ 1242.483652][T23844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4974'. [ 1242.485414][T23844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4974'. [ 1242.486589][T23844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4974'. [ 1243.359404][T23880] overlayfs: failed to clone lowerpath [ 1243.541097][T23892] lo: entered promiscuous mode [ 1243.554611][T23892] tunl0: entered promiscuous mode [ 1243.561863][T23892] gre0: entered promiscuous mode [ 1243.566428][T23892] gretap0: entered promiscuous mode [ 1243.568907][T23892] erspan0: entered promiscuous mode [ 1243.571681][T23892] ip_vti0: entered promiscuous mode [ 1243.572959][T23892] ip6_vti0: entered promiscuous mode [ 1243.574586][T23892] sit0: entered promiscuous mode [ 1243.579055][T23892] ip6tnl0: entered promiscuous mode [ 1243.581531][T23892] ip6gre0: entered promiscuous mode [ 1243.584355][T23892] syz_tun: entered promiscuous mode [ 1243.590080][T23892] ip6gretap0: entered promiscuous mode [ 1243.595337][T23892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.595971][T23892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.596964][T23892] bridge0: entered promiscuous mode [ 1243.601791][T23892] vcan0: entered promiscuous mode [ 1243.605141][T23892] bond0: entered promiscuous mode [ 1243.605157][T23892] bond_slave_0: entered promiscuous mode [ 1243.605345][T23892] bond_slave_1: entered promiscuous mode [ 1243.612538][T23892] team0: entered promiscuous mode [ 1243.612546][T23892] team_slave_0: entered promiscuous mode [ 1243.612641][T23892] team_slave_1: entered promiscuous mode [ 1243.614564][T23892] dummy0: entered promiscuous mode [ 1243.621196][T23892] nlmon0: entered promiscuous mode [ 1243.622817][T23892] batadv0: entered promiscuous mode [ 1243.625499][T23892] vxcan0: entered promiscuous mode [ 1243.626108][T23892] vxcan1: entered promiscuous mode [ 1243.626831][T23892] veth0: entered promiscuous mode [ 1243.628693][T23892] veth1: entered promiscuous mode [ 1243.633850][T23892] wg0: entered promiscuous mode [ 1243.635428][T23892] wg1: entered promiscuous mode [ 1243.637724][T23892] wg2: entered promiscuous mode [ 1243.638936][T23892] veth0_to_bridge: entered promiscuous mode [ 1243.642368][T23892] veth1_to_bridge: entered promiscuous mode [ 1243.645574][T23892] veth0_to_bond: entered promiscuous mode [ 1243.647912][T23892] veth1_to_bond: entered promiscuous mode [ 1243.651678][T23892] veth0_to_team: entered promiscuous mode [ 1243.655039][T23892] veth1_to_team: entered promiscuous mode [ 1243.658158][T23892] veth0_to_batadv: entered promiscuous mode [ 1243.660583][T23892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1243.660610][T23892] batadv_slave_0: entered promiscuous mode [ 1243.662481][T23892] veth1_to_batadv: entered promiscuous mode [ 1243.664633][T23892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1243.664664][T23892] batadv_slave_1: entered promiscuous mode [ 1243.667166][T23892] xfrm0: entered promiscuous mode [ 1243.669015][T23892] veth0_to_hsr: entered promiscuous mode [ 1243.678534][T23892] veth1_to_hsr: entered promiscuous mode [ 1243.683933][T23892] hsr0: entered promiscuous mode [ 1243.686540][T23892] veth1_virt_wifi: entered promiscuous mode [ 1243.688505][T23892] veth0_virt_wifi: entered promiscuous mode [ 1243.702515][T23892] virt_wifi0: entered promiscuous mode [ 1243.708475][T23892] batman_adv: batadv0: Interface deactivated: vlan0 [ 1243.708523][T23892] vlan0: entered promiscuous mode [ 1243.712610][T23892] vlan1: entered promiscuous mode [ 1243.715884][T23892] macvlan0: entered promiscuous mode [ 1243.719573][T23892] macvlan1: entered promiscuous mode [ 1243.725888][T23892] ipvtap0: entered promiscuous mode [ 1243.728272][T23892] ipvlan0: entered promiscuous mode [ 1243.732197][T23892] ipvlan1: entered promiscuous mode [ 1243.749714][T23892] macvtap0: entered promiscuous mode [ 1243.751549][T23892] macsec0: entered promiscuous mode [ 1243.754864][T23892] geneve0: entered promiscuous mode [ 1243.757190][T23892] geneve1: entered promiscuous mode [ 1243.761971][T23892] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1243.771290][T23892] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1243.782848][T23892] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 1243.785217][T23892] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 1243.789645][T23892] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 1243.805820][T23892] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode [ 1243.830328][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.830364][T20667] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.830390][T20667] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.830408][T20667] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.013063][T23899] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1244.066111][ T43] audit: type=1326 audit(1794302043.305:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23903 comm="syz.4.4987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 1244.066298][ T43] audit: type=1326 audit(1794302043.305:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23903 comm="syz.4.4987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 1244.067723][ T43] audit: type=1326 audit(1794302043.305:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23903 comm="syz.4.4987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 1244.067931][ T43] audit: type=1326 audit(1794302043.305:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23903 comm="syz.4.4987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 1244.068189][ T43] audit: type=1326 audit(1794302043.305:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23903 comm="syz.4.4987" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 1244.069036][ T43] audit: type=1326 audit(1794302043.305:6558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23903 comm="syz.4.4987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 1244.069230][ T43] audit: type=1326 audit(1794302043.305:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23903 comm="syz.4.4987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 1244.069815][ T43] audit: type=1326 audit(1794302043.305:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23903 comm="syz.4.4987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 1244.070126][ T43] audit: type=1326 audit(1794302043.305:6561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23903 comm="syz.4.4987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 1244.072952][ T43] audit: type=1326 audit(1794302043.305:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23903 comm="syz.4.4987" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f47fbc code=0x7ffc0000 [ 1244.173771][ T1182] net_ratelimit: 176 callbacks suppressed [ 1245.225267][T23918] syzkaller0: entered promiscuous mode [ 1245.225282][T23918] syzkaller0: entered allmulticast mode [ 1245.430427][T17985] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1245.590953][T17985] usb 9-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 1245.591433][T17985] usb 9-1: config 0 has no interfaces? [ 1245.591885][T17985] usb 9-1: config 0 has no interfaces? [ 1245.593689][T17985] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.593700][T17985] usb 9-1: Product: syz [ 1245.593708][T17985] usb 9-1: Manufacturer: syz [ 1245.593716][T17985] usb 9-1: SerialNumber: syz [ 1245.597849][T17985] usb 9-1: config 0 descriptor?? [ 1245.812338][T23925] FAULT_INJECTION: forcing a failure. [ 1245.812338][T23925] name failslab, interval 1, probability 5, space 0, times 9987 [ 1245.812366][T23925] CPU: 0 UID: 0 PID: 23925 Comm: syz.4.4995 Tainted: G L syzkaller #0 PREEMPT(full) [ 1245.812383][T23925] Tainted: [L]=SOFTLOCKUP [ 1245.812387][T23925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1245.812395][T23925] Call Trace: [ 1245.812400][T23925] [ 1245.812405][T23925] dump_stack_lvl+0x100/0x190 [ 1245.812469][T23925] should_fail_ex.cold+0x5/0xa [ 1245.812496][T23925] should_failslab+0xc2/0x120 [ 1245.812521][T23925] __kmalloc_noprof+0xfc/0x840 [ 1245.812535][T23925] ? raw_event_queue_add+0x82/0x220 [ 1245.812564][T23925] raw_event_queue_add+0x82/0x220 [ 1245.812580][T23925] gadget_disconnect+0x58/0xd0 [ 1245.812597][T23925] usb_gadget_disconnect_locked+0x20d/0x4e0 [ 1245.812614][T23925] gadget_unbind_driver+0xd8/0x4f0 [ 1245.812633][T23925] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1245.812652][T23925] device_remove+0xcb/0x180 [ 1245.812685][T23925] device_release_driver_internal+0x441/0x610 [ 1245.812703][T23925] driver_detach+0xd8/0x1b0 [ 1245.812717][T23925] bus_remove_driver+0x13b/0x2e0 [ 1245.812736][T23925] driver_unregister+0x76/0xb0 [ 1245.812751][T23925] usb_gadget_unregister_driver+0x49/0x70 [ 1245.812768][T23925] raw_release+0x19b/0x260 [ 1245.812784][T23925] ? __pfx_raw_release+0x10/0x10 [ 1245.812800][T23925] __fput+0x3fb/0xb50 [ 1245.812820][T23925] fput_close_sync+0x118/0x250 [ 1245.812839][T23925] ? __pfx_fput_close_sync+0x10/0x10 [ 1245.812861][T23925] filp_close_sync+0x75/0xa0 [ 1245.812880][T23925] __range_close+0x4a6/0x8b0 [ 1245.812901][T23925] __ia32_sys_close_range+0x1f8/0x430 [ 1245.812918][T23925] ? __pfx___ia32_sys_close_range+0x10/0x10 [ 1245.812940][T23925] __do_fast_syscall_32+0x14d/0x8e0 [ 1245.812960][T23925] ? lockdep_hardirqs_on+0x7d/0x110 [ 1245.812979][T23925] do_fast_syscall_32+0x32/0x70 [ 1245.812998][T23925] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1245.813014][T23925] RIP: 0023:0xf7f47fbc [ 1245.813024][T23925] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1245.813037][T23925] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 1245.813059][T23925] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000ffffffff [ 1245.813068][T23925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1245.813075][T23925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1245.813083][T23925] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1245.813091][T23925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1245.813107][T23925] [ 1245.813158][T23925] raw-gadget.0 gadget.4: failed to queue disconnect event [ 1245.815126][T17985] usb 9-1: USB disconnect, device number 76 [ 1245.906710][T23945] netlink: 'syz.0.5001': attribute type 4 has an invalid length. [ 1245.946468][T23945] netlink: 'syz.0.5001': attribute type 4 has an invalid length. [ 1246.339334][T23952] netlink: 'syz.0.5004': attribute type 4 has an invalid length. [ 1246.641965][T14874] svc: failed to register nfsdv3 RPC service (errno 5). [ 1246.641986][T14874] failed to unregister tcp with rpcbind [ 1247.283564][T23967] __nla_validate_parse: 15 callbacks suppressed [ 1247.283617][T23967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5008'. [ 1247.288858][T23967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5008'. [ 1247.293397][T23967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5008'. [ 1247.294289][T23967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5008'. [ 1247.294543][T23967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5008'. ** 9011 printk messages dropped ** [ 1248.288616][T23993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5015'. [ 1248.289387][T23993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5015'. [ 1248.289653][T23993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5015'. [ 1248.289869][T23993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5015'. [ 1248.289994][T23993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5015'. [ 1249.285158][ T1182] net_ratelimit: 152 callbacks suppressed [ 1249.927691][T24011] loop6: detected capacity change from 0 to 8 [ 1249.975782][T24011] loop6: detected capacity change from 8 to 7 [ 1249.979943][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1249.979996][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1249.981152][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1249.981187][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1249.981728][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1249.981760][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1249.981871][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1249.981900][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1249.981970][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1249.981999][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1249.982073][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1249.982102][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1249.982162][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1249.982234][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1249.982259][T24011] ldm_validate_partition_table(): Disk read failed. [ 1249.982349][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1249.982379][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1249.982442][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1249.982470][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1249.982530][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1249.982558][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1249.982694][T24011] Dev loop6: unable to read RDB block 0 [ 1249.983942][T24011] loop6: unable to read partition table [ 1249.984054][T24011] loop6: partition table beyond EOD, truncated [ 1249.984064][T24011] loop_reread_partitions: partition scan of loop6 (°´[{BÑ·¶žMܾ`*ÎîZ´Ç5¡]z(¿Ťî4+hGËpX„Ïgm [ 1249.984064][T24011] ü òæôØ.BÊL_seÔ) failed (rc=-5) [ 1250.591720][T24057] syzkaller0: entered promiscuous mode [ 1250.591730][T24057] syzkaller0: entered allmulticast mode [ 1252.349378][T24070] vxcan1: entered promiscuous mode [ 1254.401755][T24039] net_ratelimit: 211 callbacks suppressed [ 1256.381338][T24088] __nla_validate_parse: 7 callbacks suppressed [ 1256.381350][T24088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5040'. [ 1256.384396][T24088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5040'. [ 1256.384638][T24088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5040'. [ 1256.384869][T24088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5040'. [ 1256.384956][T24088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5040'. [ 1259.520423][ C3] net_ratelimit: 157 callbacks suppressed [ 1260.045760][T24098] device-mapper: table: 248:9: striped: Couldn't parse stripe destination (-EBUSY) [ 1260.045784][T24098] device-mapper: ioctl: error adding target to table [ 1260.467390][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5043'. [ 1260.471920][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5043'. [ 1260.472205][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5043'. [ 1260.472439][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5043'. [ 1260.472591][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5043'. [ 1261.760544][T17985] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1261.842303][T24124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5048'. [ 1261.910279][T17985] usb 9-1: Using ep0 maxpacket: 8 [ 1261.910925][T17985] usb 9-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1261.911817][T17985] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1261.911836][T17985] usb 9-1: config 0 has no interface number 0 [ 1261.911856][T17985] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1261.911868][T17985] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1261.911890][T17985] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1261.911904][T17985] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1261.911936][T17985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.913284][T17985] usb 9-1: config 0 descriptor?? [ 1261.983805][T17985] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1262.423265][T17985] usb 9-1: USB disconnect, device number 77 [ 1262.425704][T17985] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1264.440055][T24123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5048'. [ 1264.440436][T24123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5048'. [ 1264.440774][T24123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5048'. [ 1264.440893][T24123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5048'. [ 1264.640453][T24039] net_ratelimit: 164 callbacks suppressed [ 1264.710360][T24135] syzkaller0: entered promiscuous mode [ 1264.710369][T24135] syzkaller0: entered allmulticast mode [ 1264.963893][T24147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5054'. [ 1264.966962][T24147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5054'. [ 1264.968539][T24147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5054'. [ 1264.971739][T24147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5054'. [ 1264.972475][T24147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5054'. [ 1266.580309][ T6491] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 1266.753470][ T6491] usb 11-1: Using ep0 maxpacket: 16 [ 1266.756573][ T6491] usb 11-1: New USB device found: idVendor=046d, idProduct=c215, bcdDevice=0.00 [ 1266.759878][ T6491] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.760027][ T6491] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.760169][ T6491] usb 11-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1266.777276][T24180] netlink: 'syz.4.5064': attribute type 4 has an invalid length. [ 1266.784082][ T6491] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1266.788942][ T6491] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.818265][ T6491] usb 11-1: config 0 descriptor?? [ 1267.084119][T24184] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1267.135104][T24184] md: could not open device unknown-block(1,1). [ 1267.540667][ T6491] input: HID 046d:c215 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:046D:C215.001B/input/input72 [ 1267.784675][ T6491] logitech 0003:046D:C215.001B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.6-1/input0 [ 1268.284851][T24195] __nla_validate_parse: 5 callbacks suppressed [ 1268.284897][T24195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5066'. [ 1268.288377][T24195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5066'. [ 1268.289910][T24195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5066'. [ 1268.290922][T24195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5066'. [ 1268.291733][T24195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5066'. [ 1268.763480][T24199] syzkaller0: entered promiscuous mode [ 1268.763494][T24199] syzkaller0: entered allmulticast mode [ 1269.760301][ C2] net_ratelimit: 198 callbacks suppressed [ 1269.770603][T21950] svc: failed to register nfsdv3 RPC service (errno 5). [ 1269.770653][T21950] failed to unregister tcp with rpcbind [ 1269.944738][ T59] usb 11-1: USB disconnect, device number 31 [ 1271.188768][T24227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5075'. [ 1271.196721][T24227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5075'. [ 1271.197194][T24228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5074'. [ 1271.206783][T24228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5074'. [ 1271.207557][T24228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5074'. [ 1271.800553][ T5969] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 1271.958363][ T5969] usb 11-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 1272.129428][ T5969] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.129469][ T5969] usb 11-1: Product: syz [ 1272.129504][ T5969] usb 11-1: Manufacturer: syz [ 1272.129680][ T5969] usb 11-1: SerialNumber: syz [ 1272.645130][ T5969] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1273.099101][T24246] netlink: 'syz.3.5079': attribute type 1 has an invalid length. [ 1273.099146][T24246] netlink: 'syz.3.5079': attribute type 2 has an invalid length. [ 1273.815509][ T5969] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1273.816116][ T5969] lan78xx 11-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1273.858595][ T5969] lan78xx 11-1:1.0: probe with driver lan78xx failed with error -71 [ 1273.888415][ T5969] usb 11-1: USB disconnect, device number 32 [ 1274.040048][T24254] __nla_validate_parse: 2 callbacks suppressed [ 1274.040066][T24254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5083'. [ 1274.041077][T24254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5083'. [ 1274.179734][T24256] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1274.213328][ T13] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 1274.293775][T24256] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 1274.353512][ T6491] usb 8-1: new low-speed USB device number 89 using dummy_hcd [ 1274.481954][T24264] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1274.513634][ T6491] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1274.519650][ T6491] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1274.519691][ T6491] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1274.519716][ T6491] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1274.519739][ T6491] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1274.519763][ T6491] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1274.545375][ T6491] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1274.545946][ T6491] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1274.546130][ T6491] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1274.546260][ T6491] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1274.546371][ T6491] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1274.553054][ T6491] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1274.553391][ T6491] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1274.553448][ T6491] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1274.553472][ T6491] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1274.553579][ T6491] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1274.569121][ T6491] usb 8-1: string descriptor 0 read error: -22 [ 1274.576560][ T6491] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.683216][ T6491] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1274.720401][T11723] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 1274.747657][T24264] md/raid1:md4: active with 2 out of 2 mirrors [ 1274.749228][T24264] md4: detected capacity change from 0 to 4096 [ 1274.800345][ C1] net_ratelimit: 132 callbacks suppressed [ 1274.839744][T24270] md4: detected capacity change from 4096 to 0 [ 1274.839756][T24270] md: md4 stopped. [ 1274.882457][T11723] usb 11-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1274.883407][T11723] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.883465][T11723] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.897402][T11723] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 1274.897600][T11723] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 81 [ 1274.897664][T11723] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1 [ 1274.900021][T11723] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 1274.901852][T11723] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 1274.902841][T11723] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1274.904015][T11723] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88 [ 1274.904056][T11723] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 1274.906639][T11723] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1276.169364][T24284] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1276.169536][T24284] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1276.621956][T24292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5093'. [ 1276.622947][T24292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5093'. [ 1277.570617][ T59] usb 11-1: USB disconnect, device number 33 [ 1277.577432][ T59] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1277.582208][ T59] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1277.583431][ T59] keyspan 11-1:1.0: device disconnected [ 1279.041647][ T6491] usb 8-1: USB disconnect, device number 89 [ 1279.850414][ C0] net_ratelimit: 170 callbacks suppressed [ 1282.326177][T24333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5106'. [ 1282.327367][T24333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5106'. [ 1282.327588][T24333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5106'. [ 1282.327762][T24333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5106'. [ 1282.327921][T24333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5106'. [ 1283.572731][T24342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5109'. [ 1283.573644][T24342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5109'. [ 1283.678850][T24345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5110'. [ 1283.679546][T24345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5110'. [ 1283.860393][T11723] usb 8-1: new low-speed USB device number 90 using dummy_hcd [ 1283.949213][T14611] usb 9-1: new low-speed USB device number 78 using dummy_hcd [ 1284.011137][T11723] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1284.012372][T11723] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1284.012411][T11723] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1284.012435][T11723] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1284.012457][T11723] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1284.012476][T11723] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1284.013825][T11723] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1284.013861][T11723] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1284.013884][T11723] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1284.013907][T11723] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1284.013935][T11723] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1284.015140][T11723] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1284.015173][T11723] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1284.015196][T11723] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1284.015219][T11723] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1284.015241][T11723] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1284.018373][T11723] usb 8-1: string descriptor 0 read error: -22 [ 1284.018486][T11723] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.104135][T11723] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1284.154881][T14611] usb 9-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1284.156662][T14611] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1284.156676][T14611] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1284.158133][T14611] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1284.158145][T14611] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1284.170080][T14611] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1284.170103][T14611] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1284.187084][T14611] usb 9-1: string descriptor 0 read error: -22 [ 1284.187205][T14611] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.189750][T14611] usb 9-1: rejected 3 configurations due to insufficient available bus power [ 1284.189766][T14611] usb 9-1: no configuration chosen from 3 choices [ 1284.880392][ C1] net_ratelimit: 304 callbacks suppressed [ 1285.588103][T24362] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1285.621239][T24362] md: could not open device unknown-block(1,1). [ 1286.182568][T24365] 9pnet_virtio: no channels available for device //127.0.0.1/test [ 1286.532112][T11723] usb 8-1: USB disconnect, device number 90 [ 1286.695416][ T5969] usb 9-1: USB disconnect, device number 78 [ 1287.649737][T24380] device-mapper: table: 248:19: raid: 'raid10_format' is an invalid parameter for this RAID type (-EINVAL) [ 1287.649765][T24380] device-mapper: ioctl: error adding target to table [ 1287.729495][T24382] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5120'. [ 1289.710030][T24401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5126'. [ 1289.711667][T24401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5126'. [ 1289.960342][T21965] usb 9-1: new low-speed USB device number 79 using dummy_hcd [ 1290.000463][ C2] net_ratelimit: 168 callbacks suppressed [ 1290.131131][T21965] usb 9-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1290.132445][T21965] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1290.132470][T21965] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1290.132485][T21965] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1290.132498][T21965] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1290.132512][T21965] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1290.170693][T21965] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1290.170724][T21965] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1290.170739][T21965] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1290.170752][T21965] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1290.170766][T21965] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1290.177073][T21965] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1290.177100][T21965] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1290.177114][T21965] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1290.177129][T21965] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1290.177143][T21965] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1290.179513][T21965] usb 9-1: string descriptor 0 read error: -22 [ 1290.179585][T21965] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.188111][T21965] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1290.450102][T24412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5129'. [ 1290.454983][T24412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5129'. [ 1290.455564][T24412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5129'. [ 1290.456129][T24412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5129'. [ 1290.456586][T24412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5129'. [ 1290.499001][T24413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5131'. [ 1290.504924][T24413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5131'. [ 1293.444465][ T42] usb 9-1: USB disconnect, device number 79 [ 1295.120276][ C0] net_ratelimit: 262 callbacks suppressed [ 1300.330313][ C1] net_ratelimit: 155 callbacks suppressed [ 1302.433272][T24465] syzkaller0: entered promiscuous mode [ 1302.433288][T24465] syzkaller0: entered allmulticast mode [ 1302.599186][T24469] __nla_validate_parse: 3 callbacks suppressed [ 1302.599197][T24469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5148'. [ 1302.600980][T24469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5148'. [ 1302.601189][T24469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5148'. [ 1302.601341][T24469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5148'. [ 1302.601532][T24469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5148'. [ 1305.115125][T24488] syzkaller0: entered promiscuous mode [ 1305.115142][T24488] syzkaller0: entered allmulticast mode [ 1305.520344][ C1] net_ratelimit: 170 callbacks suppressed [ 1309.980455][T17985] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1310.152636][T17985] usb 9-1: Using ep0 maxpacket: 8 [ 1310.156205][T17985] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1310.159320][T17985] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1310.159380][T17985] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1310.159399][T17985] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1310.159419][T17985] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1310.159439][T17985] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1310.159489][T17985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.373454][T17985] usb 9-1: usb_control_msg returned -32 [ 1310.373475][T17985] usbtmc 9-1:16.0: can't read capabilities [ 1310.584534][T14611] usb 9-1: USB disconnect, device number 80 [ 1310.720421][ C1] net_ratelimit: 134 callbacks suppressed [ 1311.083117][T24535] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1311.083192][T24535] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1313.124356][T24569] syzkaller0: entered promiscuous mode [ 1313.124370][T24569] syzkaller0: entered allmulticast mode [ 1315.760573][ C3] net_ratelimit: 163 callbacks suppressed [ 1316.343763][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1316.401252][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1316.401564][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1316.401864][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1316.402015][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1318.683178][T24633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5202'. [ 1318.909342][T24633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5202'. [ 1318.911525][T24633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5202'. [ 1318.914509][T24633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5202'. [ 1318.915512][T24633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5202'. [ 1320.960393][T24039] net_ratelimit: 165 callbacks suppressed [ 1326.000409][ C1] net_ratelimit: 137 callbacks suppressed [ 1331.200548][T24038] net_ratelimit: 154 callbacks suppressed [ 1336.241323][T24034] net_ratelimit: 149 callbacks suppressed [ 1341.440751][T24038] net_ratelimit: 154 callbacks suppressed [ 1346.203011][ T14] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 1346.263821][ T14] bond0 (unregistering): left promiscuous mode [ 1346.263838][ T14] bond_slave_0: left promiscuous mode [ 1346.264036][ T14] bond_slave_1: left promiscuous mode [ 1346.267243][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1346.284481][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1346.287812][ T14] bond0 (unregistering): Released all slaves [ 1346.296697][ T14] bond1 (unregistering): Released all slaves [ 1346.316787][ T14] bond2 (unregistering): Released all slaves [ 1346.423074][ T14] tipc: Disabling bearer [ 1346.423800][ T14] tipc: Left network mode [ 1346.443500][ T14] IPVS: stopping master sync thread 11173 ... [ 1346.560499][T24023] net_ratelimit: 152 callbacks suppressed [ 1346.856250][T24800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5266'. [ 1346.857075][T24800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5266'. [ 1347.076965][ T14] batadv0: left promiscuous mode [ 1347.090294][ T5969] usb 9-1: new low-speed USB device number 81 using dummy_hcd [ 1347.106276][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1347.106294][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.107256][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1347.107270][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.115840][ T14] veth1_macvtap: left promiscuous mode [ 1347.115918][ T14] veth0_macvtap: left promiscuous mode [ 1347.130984][ T14] veth1_vlan: left promiscuous mode [ 1347.131030][ T14] veth0_vlan: left promiscuous mode [ 1347.220390][ T5969] usb 9-1: device descriptor read/64, error -71 [ 1347.597764][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1347.621910][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1348.068053][ T14] IPVS: stop unused estimator thread 0... [ 1348.340401][ T5969] usb 9-1: new low-speed USB device number 82 using dummy_hcd [ 1348.490370][ T5969] usb 9-1: device descriptor read/64, error -71 [ 1348.601100][ T5969] usb usb9-port1: attempt power cycle [ 1348.940527][ T5969] usb 9-1: new low-speed USB device number 83 using dummy_hcd [ 1348.961367][ T5969] usb 9-1: device descriptor read/8, error -71 [ 1349.210403][ T5969] usb 9-1: new low-speed USB device number 84 using dummy_hcd [ 1349.231172][ T5969] usb 9-1: device descriptor read/8, error -71 [ 1349.340697][ T5969] usb usb9-port1: unable to enumerate USB device [ 1352.320708][T24034] net_ratelimit: 116 callbacks suppressed [ 1357.441063][T24040] net_ratelimit: 108 callbacks suppressed [ 1362.571508][T24023] net_ratelimit: 112 callbacks suppressed [ 1364.773268][T24974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5329'. [ 1364.774079][T24974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5329'. [ 1365.010738][ T5969] usb 9-1: new low-speed USB device number 85 using dummy_hcd [ 1365.161580][ T5969] usb 9-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1365.162816][ T5969] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1365.162853][ T5969] usb 9-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1365.166524][ T5969] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1365.166606][ T5969] usb 9-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1365.167938][ T5969] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1365.167973][ T5969] usb 9-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1365.172763][ T5969] usb 9-1: string descriptor 0 read error: -22 [ 1365.172869][ T5969] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.180543][ T5969] adutux 9-1:168.0: interrupt endpoints not found [ 1365.392248][ T5969] usb 9-1: USB disconnect, device number 85 [ 1365.916409][T25014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5344'. [ 1365.927922][T25014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5344'. [ 1365.928741][T25014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5344'. [ 1365.929507][T25014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5344'. [ 1365.936278][T25014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5344'. [ 1366.768742][T25022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5345'. [ 1366.769324][T25022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5345'. [ 1367.042217][T11723] usb 9-1: new low-speed USB device number 86 using dummy_hcd [ 1367.263307][T11723] usb 9-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1367.266089][T11723] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1367.266134][T11723] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1367.268727][T11723] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1367.268770][T11723] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1367.272029][T11723] usb 9-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1367.272073][T11723] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1367.279686][T11723] usb 9-1: string descriptor 0 read error: -22 [ 1367.280285][T11723] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.290697][T11723] usb 9-1: rejected 3 configurations due to insufficient available bus power [ 1367.290710][T11723] usb 9-1: no configuration chosen from 3 choices [ 1367.600332][ C3] net_ratelimit: 107 callbacks suppressed [ 1368.210605][T25046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5354'. [ 1369.783064][T11723] usb 9-1: USB disconnect, device number 86 [ 1370.057151][T25095] __nla_validate_parse: 4 callbacks suppressed [ 1370.057218][T25095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5371'. [ 1370.071042][T25095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5371'. [ 1370.071331][T25095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5371'. [ 1370.071596][T25095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5371'. [ 1370.071714][T25095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5371'. [ 1371.811024][T25126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5382'. [ 1371.815423][T25126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5382'. [ 1371.816174][T25126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5382'. [ 1371.817111][T25126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5382'. [ 1371.817840][T25126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5382'. [ 1372.800908][T24023] net_ratelimit: 119 callbacks suppressed [ 1375.473785][T25187] __nla_validate_parse: 10 callbacks suppressed [ 1375.473855][T25187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5402'. [ 1375.632734][T25187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5402'. [ 1375.634100][T25187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5402'. [ 1375.635319][T25187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5402'. [ 1375.635848][T25187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5402'. [ 1375.888054][T25198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5406'. [ 1375.895533][T25198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5406'. [ 1375.900607][T25198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5406'. [ 1375.902157][T25198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5406'. [ 1375.907161][T25198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5406'. [ 1377.850842][T24040] net_ratelimit: 95 callbacks suppressed [ 1383.040442][T24040] net_ratelimit: 108 callbacks suppressed [ 1388.080555][T24040] net_ratelimit: 95 callbacks suppressed [ 1392.994635][T20810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1392.997242][T20810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1393.008521][T20810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1393.015144][T20810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1393.016275][T20810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1393.120325][ C1] net_ratelimit: 93 callbacks suppressed [ 1393.188845][T20810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1393.219142][T20810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1393.226984][T20810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1393.228181][T20810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1393.229098][T20810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1393.414378][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.567316][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.626310][T25238] rxe_eth0 speed is unknown, defaulting to 1000 [ 1393.691767][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.721221][T25267] __nla_validate_parse: 10 callbacks suppressed [ 1393.721236][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5421'. [ 1393.724025][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5421'. [ 1393.724188][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5421'. [ 1393.724326][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5421'. [ 1393.724429][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5421'. [ 1393.824036][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.828251][T25244] rxe_eth0 speed is unknown, defaulting to 1000 [ 1395.204730][T20810] Bluetooth: hci4: command tx timeout [ 1395.280533][T20810] Bluetooth: hci5: command tx timeout [ 1395.779793][ T13] bond0 (unregistering): Released all slaves [ 1395.854140][T25238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.854182][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.854269][T25238] bridge_slave_0: entered allmulticast mode [ 1395.855099][T25238] bridge_slave_0: entered promiscuous mode [ 1395.868428][T25238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.868620][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.868702][T25238] bridge_slave_1: entered allmulticast mode [ 1395.869467][T25238] bridge_slave_1: entered promiscuous mode [ 1396.004065][T25238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1396.057405][T25238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1396.219998][T25238] team0: Port device team_slave_0 added [ 1396.228877][T25238] team0: Port device team_slave_1 added [ 1396.335534][T25238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.335543][T25238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.335564][T25238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.336713][T25238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.336719][T25238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.336733][T25238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.525850][T25238] hsr_slave_0: entered promiscuous mode [ 1396.536672][T25238] hsr_slave_1: entered promiscuous mode [ 1396.537052][T25238] debugfs: 'hsr0' already exists in 'hsr' [ 1396.537060][T25238] Cannot create hsr debugfs directory [ 1396.539030][ T5502] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1396.540687][T25244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.540728][T25244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.540816][T25244] bridge_slave_0: entered allmulticast mode [ 1396.541713][T25244] bridge_slave_0: entered promiscuous mode [ 1396.597156][T25244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.597225][T25244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.597308][T25244] bridge_slave_1: entered allmulticast mode [ 1396.598057][T25244] bridge_slave_1: entered promiscuous mode [ 1396.661785][ T13] hsr_slave_0: left promiscuous mode [ 1396.662602][ T13] hsr_slave_1: left promiscuous mode [ 1396.667536][ T13] veth1_macvtap: left promiscuous mode [ 1396.667575][ T13] veth0_macvtap: left promiscuous mode [ 1396.667697][ T13] veth1_vlan: left promiscuous mode [ 1396.667795][ T13] veth0_vlan: left promiscuous mode [ 1396.789884][T25316] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1397.177896][T25244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1397.236572][T25244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1397.272405][T25244] team0: Port device team_slave_0 added [ 1397.274890][T25244] team0: Port device team_slave_1 added [ 1397.280382][T20810] Bluetooth: hci4: command tx timeout [ 1397.341658][T25244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.341664][T25244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.341678][T25244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.343060][T25244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.343070][T25244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.343092][T25244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.370427][T20810] Bluetooth: hci5: command tx timeout [ 1397.553205][T25244] hsr_slave_0: entered promiscuous mode [ 1397.555195][T25244] hsr_slave_1: entered promiscuous mode [ 1397.555903][T25244] debugfs: 'hsr0' already exists in 'hsr' [ 1397.555915][T25244] Cannot create hsr debugfs directory [ 1397.730026][ T13] IPVS: stop unused estimator thread 0... [ 1397.855876][ T5502] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1397.922577][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.053264][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.075344][T25238] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1398.095529][T25238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1398.105147][T25238] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1398.131413][T25238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1398.131977][T25238] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1398.152816][T25238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1398.219976][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.234736][T25238] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1398.248006][T25238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1398.400751][T24023] net_ratelimit: 166 callbacks suppressed [ 1399.360466][T20810] Bluetooth: hci4: command tx timeout [ 1399.440435][T20810] Bluetooth: hci5: command tx timeout [ 1400.179981][T25238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1400.224380][T25238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1400.237734][T24040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.237784][T24040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1400.255037][ T13] vlan2: left promiscuous mode [ 1400.255052][ T13] bond0: left promiscuous mode [ 1400.265586][ T13] bridge0: port 3(vlan2) entered disabled state [ 1400.483753][ T13] team0: Port device sit1 removed [ 1400.616992][ T13] bond0 (unregistering): Released all slaves [ 1400.624549][T24036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.624595][T24036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1400.646189][ T5502] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1400.744116][ T13] tipc: Disabling bearer [ 1400.745808][ T13] tipc: Left network mode [ 1400.785738][T25244] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1400.804686][T25244] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1400.805351][T25244] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1400.818175][T25244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1400.823772][T25244] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1400.840343][T25244] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1400.856894][T25244] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1400.863336][T25244] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1400.956038][T25244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1400.967314][T25244] 8021q: adding VLAN 0 to HW filter on device team0 [ 1400.975003][T24031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.975064][T24031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1400.979090][T24031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.979132][T24031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1401.015322][ T5502] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1401.174121][T25238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.194763][ T13] hsr_slave_0: left promiscuous mode [ 1401.195485][ T13] hsr_slave_1: left promiscuous mode [ 1401.198598][ T13] veth1_macvtap: left promiscuous mode [ 1401.198634][ T13] veth0_macvtap: left promiscuous mode [ 1401.440772][T20810] Bluetooth: hci4: command tx timeout [ 1401.530918][T20810] Bluetooth: hci5: command tx timeout [ 1401.781142][T25244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.816479][T25238] veth0_vlan: entered promiscuous mode [ 1401.835673][T25238] veth1_vlan: entered promiscuous mode [ 1401.869521][T25238] veth0_macvtap: entered promiscuous mode [ 1401.872162][T25238] veth1_macvtap: entered promiscuous mode [ 1401.879837][T25238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1401.884333][T25238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1401.941003][T20667] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.991613][T10632] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.991659][T10632] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.991688][T10632] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.068731][T24040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.068746][T24040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.075117][ T13] IPVS: stop unused estimator thread 0... [ 1402.125125][T24031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.125140][T24031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.245103][ T5502] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1402.327005][T25244] veth0_vlan: entered promiscuous mode [ 1402.346438][T25244] veth1_vlan: entered promiscuous mode [ 1402.430087][T25244] veth0_macvtap: entered promiscuous mode [ 1402.452783][T25244] veth1_macvtap: entered promiscuous mode [ 1402.493916][T25244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.521997][T25244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1402.650425][T10551] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.650467][T10551] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.650496][T10551] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.650525][T10551] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.777273][ T5502] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1402.792652][T24031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.792660][T24031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.845626][T24023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.845643][T24023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.131249][ T5502] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1403.521551][T24023] net_ratelimit: 389 callbacks suppressed [ 1404.671287][ T5502] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1406.050653][T25544] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1406.806230][T25568] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1408.560367][ C3] net_ratelimit: 233 callbacks suppressed [ 1411.807678][T25676] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1412.836850][T25702] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1413.758124][ T5502] net_ratelimit: 119 callbacks suppressed [ 1413.760365][ C2] ipvlan_process_outbound: 3 callbacks suppressed [ 1414.889756][T25737] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1418.880914][T24036] net_ratelimit: 162 callbacks suppressed [ 1423.920296][ C1] net_ratelimit: 127 callbacks suppressed [ 1429.120385][T24023] net_ratelimit: 97 callbacks suppressed [ 1434.170463][T24031] net_ratelimit: 154 callbacks suppressed [ 1439.200604][T24036] net_ratelimit: 94 callbacks suppressed [ 1444.240520][T24039] net_ratelimit: 118 callbacks suppressed [ 1449.530338][ C3] net_ratelimit: 89 callbacks suppressed [ 1454.720399][ C3] net_ratelimit: 94 callbacks suppressed [ 1459.920374][ C3] net_ratelimit: 115 callbacks suppressed [ 1464.963623][T24031] net_ratelimit: 130 callbacks suppressed [ 1470.080410][T24023] net_ratelimit: 100 callbacks suppressed [ 1475.200363][ C3] net_ratelimit: 98 callbacks suppressed [ 1476.102240][T26343] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1476.837527][T26355] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1477.864391][T26375] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1478.252977][T26383] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5701'. [ 1478.253789][T26383] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5701'. [ 1478.500785][T22137] usb 12-1: new low-speed USB device number 2 using dummy_hcd [ 1478.671078][T22137] usb 12-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1478.671964][T22137] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 1478.671988][T22137] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1478.672002][T22137] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1478.672015][T22137] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1478.672117][T22137] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1478.674352][T22137] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 1478.674390][T22137] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1478.674414][T22137] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1478.674437][T22137] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1478.674458][T22137] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1478.677813][T22137] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 1478.677837][T22137] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1478.677852][T22137] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1478.677866][T22137] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1478.677881][T22137] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1478.680989][T22137] usb 12-1: string descriptor 0 read error: -22 [ 1478.681060][T22137] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.691706][T22137] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1478.791205][T26390] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1478.913763][T23895] usb 12-1: USB disconnect, device number 2 [ 1480.240694][T24023] net_ratelimit: 101 callbacks suppressed [ 1483.142518][T26431] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5718'. [ 1483.429409][T26439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5722'. [ 1483.478101][T26441] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5723'. [ 1484.309475][T26482] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5741'. [ 1484.825363][T26501] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5748'. [ 1485.280301][ C1] net_ratelimit: 100 callbacks suppressed [ 1485.473910][T26525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5755'. [ 1487.069756][T26581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5773'. [ 1487.326153][T26587] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5776'. [ 1487.735518][T26605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5783'. [ 1489.927979][T26633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5792'. [ 1489.965076][T26636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5793'. [ 1490.480279][ C1] net_ratelimit: 99 callbacks suppressed [ 1491.144035][T26659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5801'. [ 1491.199124][T26661] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5802'. [ 1491.575176][T26682] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5808'. [ 1491.833533][T26692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5812'. [ 1492.204077][T26708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5817'. [ 1492.289057][T26711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5818'. [ 1492.663715][T26722] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5823'. [ 1492.665996][T26724] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5824'. [ 1495.157224][T26754] __nla_validate_parse: 2 callbacks suppressed [ 1495.157245][T26754] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5835'. [ 1495.680559][T24038] net_ratelimit: 96 callbacks suppressed [ 1499.807162][T26861] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5870'. [ 1500.721822][T24039] net_ratelimit: 100 callbacks suppressed [ 1504.619915][T26963] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5899'. [ 1505.388990][T26990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5907'. [ 1505.528012][T26998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5909'. [ 1505.920857][T24023] net_ratelimit: 102 callbacks suppressed [ 1506.349083][T27015] rxe_eth0 speed is unknown, defaulting to 1000 [ 1507.997949][T27047] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5923'. [ 1508.226099][T27058] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5926'. [ 1508.536115][T27063] rxe_eth0 speed is unknown, defaulting to 1000 [ 1508.553262][T27064] Console: switching to colour dummy device 80x25 [ 1509.119749][T27070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5930'. [ 1509.824868][T27081] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5933'. [ 1509.937987][T27086] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5935'. [ 1510.858824][T27113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5943'. [ 1510.960314][ C0] net_ratelimit: 126 callbacks suppressed [ 1512.109971][T27128] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5947'. [ 1513.301630][T27134] rxe_eth0 speed is unknown, defaulting to 1000 [ 1513.654357][T27139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5951'. [ 1516.080277][ C3] net_ratelimit: 118 callbacks suppressed [ 1516.970296][T11087] Bluetooth: hci4: command 0x0406 tx timeout [ 1516.970419][T11087] Bluetooth: hci5: command 0x0406 tx timeout [ 1517.497716][T27235] rxe_eth0 speed is unknown, defaulting to 1000 [ 1518.376730][T27263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5986'. [ 1518.388964][T27259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5984'. [ 1518.712153][T27263] rxe_eth0 speed is unknown, defaulting to 1000 [ 1519.878585][T27279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5990'. [ 1520.300680][T27283] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5992'. [ 1521.120023][T27310] net_ratelimit: 168 callbacks suppressed [ 1521.145753][T27310] rxe_eth0 speed is unknown, defaulting to 1000 [ 1523.684187][T27378] FAULT_INJECTION: forcing a failure. [ 1523.684187][T27378] name failslab, interval 1, probability 5, space 0, times 9985 [ 1523.684217][T27378] CPU: 3 UID: 0 PID: 27378 Comm: syz.7.6019 Tainted: G L syzkaller #0 PREEMPT(full) [ 1523.684234][T27378] Tainted: [L]=SOFTLOCKUP [ 1523.684239][T27378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1523.684246][T27378] Call Trace: [ 1523.684251][T27378] [ 1523.684256][T27378] dump_stack_lvl+0x100/0x190 [ 1523.684291][T27378] should_fail_ex.cold+0x5/0xa [ 1523.684317][T27378] should_failslab+0xc2/0x120 [ 1523.684343][T27378] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1523.684358][T27378] ? __kasan_kmalloc+0xaa/0xb0 [ 1523.684373][T27378] ? trace_probe_init+0x2e6/0x560 [ 1523.684393][T27378] kstrdup+0x51/0xe0 [ 1523.684410][T27378] trace_probe_init+0x2e6/0x560 [ 1523.684430][T27378] alloc_trace_uprobe+0xf8/0x370 [ 1523.684450][T27378] __trace_uprobe_create+0x673/0x2310 [ 1523.684473][T27378] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1523.684491][T27378] ? trace_kmalloc+0xeb/0x110 [ 1523.684505][T27378] ? __kasan_kmalloc+0xaa/0xb0 [ 1523.684519][T27378] ? __kmalloc_noprof+0x350/0x840 [ 1523.684531][T27378] ? argv_split+0x176/0x430 [ 1523.684552][T27378] ? argv_split+0x35c/0x430 [ 1523.684570][T27378] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1523.684589][T27378] trace_probe_create+0xef/0x100 [ 1523.684606][T27378] ? __pfx_trace_probe_create+0x10/0x10 [ 1523.684634][T27378] dyn_event_create+0x50/0x90 [ 1523.684652][T27378] create_or_delete_trace_uprobe+0x5a/0xb0 [ 1523.684676][T27378] trace_parse_run_command+0x1ab/0x3b0 [ 1523.684700][T27378] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 1523.684723][T27378] vfs_write+0x2aa/0x1040 [ 1523.684737][T27378] ? __pfx_probes_write+0x10/0x10 [ 1523.684754][T27378] ? lock_acquire+0x1d1/0x380 [ 1523.684788][T27378] ? __fget_files+0x34/0x3d0 [ 1523.684804][T27378] ? __pfx_vfs_write+0x10/0x10 [ 1523.684817][T27378] ? find_held_lock+0x2b/0x80 [ 1523.684840][T27378] ? __fget_files+0x215/0x3d0 [ 1523.684857][T27378] ? __fget_files+0x21f/0x3d0 [ 1523.684876][T27378] ksys_write+0x12a/0x250 [ 1523.684889][T27378] ? __pfx_ksys_write+0x10/0x10 [ 1523.684908][T27378] __do_fast_syscall_32+0x14d/0x8e0 [ 1523.684931][T27378] do_fast_syscall_32+0x32/0x70 [ 1523.684950][T27378] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1523.684966][T27378] RIP: 0023:0xf7f33fbc [ 1523.684978][T27378] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1523.684990][T27378] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1523.685013][T27378] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001d80 [ 1523.685022][T27378] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1523.685030][T27378] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1523.685037][T27378] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1523.685045][T27378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1523.685061][T27378] [ 1524.184946][T27396] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6024'. [ 1524.397829][T27396] rxe_eth0 speed is unknown, defaulting to 1000 [ 1525.507616][T27408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6027'. [ 1525.758608][T27408] rxe_eth0 speed is unknown, defaulting to 1000 [ 1526.410405][ C3] net_ratelimit: 209 callbacks suppressed [ 1527.117362][T27442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6036'. [ 1528.646650][T27468] FAULT_INJECTION: forcing a failure. [ 1528.646650][T27468] name failslab, interval 1, probability 5, space 0, times 9984 [ 1528.646680][T27468] CPU: 2 UID: 0 PID: 27468 Comm: syz.4.6043 Tainted: G L syzkaller #0 PREEMPT(full) [ 1528.646704][T27468] Tainted: [L]=SOFTLOCKUP [ 1528.646711][T27468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1528.646723][T27468] Call Trace: [ 1528.646731][T27468] [ 1528.646741][T27468] dump_stack_lvl+0x100/0x190 [ 1528.646776][T27468] should_fail_ex.cold+0x5/0xa [ 1528.646806][T27468] should_failslab+0xc2/0x120 [ 1528.646834][T27468] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1528.646863][T27468] ? trace_probe_init+0x344/0x560 [ 1528.646896][T27468] kstrdup+0x51/0xe0 [ 1528.646923][T27468] trace_probe_init+0x344/0x560 [ 1528.646955][T27468] alloc_trace_uprobe+0xf8/0x370 [ 1528.646990][T27468] __trace_uprobe_create+0x673/0x2310 [ 1528.647033][T27468] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1528.647064][T27468] ? trace_kmalloc+0xeb/0x110 [ 1528.647089][T27468] ? __kasan_kmalloc+0xaa/0xb0 [ 1528.647139][T27468] ? __kmalloc_noprof+0x350/0x840 [ 1528.647163][T27468] ? argv_split+0x176/0x430 [ 1528.647201][T27468] ? argv_split+0x35c/0x430 [ 1528.647231][T27468] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1528.647262][T27468] trace_probe_create+0xef/0x100 [ 1528.647288][T27468] ? __pfx_trace_probe_create+0x10/0x10 [ 1528.647328][T27468] dyn_event_create+0x50/0x90 [ 1528.647351][T27468] create_or_delete_trace_uprobe+0x5a/0xb0 [ 1528.647385][T27468] trace_parse_run_command+0x1ab/0x3b0 [ 1528.647414][T27468] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 1528.647449][T27468] vfs_write+0x2aa/0x1040 [ 1528.647475][T27468] ? __pfx_probes_write+0x10/0x10 [ 1528.647505][T27468] ? lock_acquire+0x1d1/0x380 [ 1528.647528][T27468] ? __fget_files+0x34/0x3d0 [ 1528.647554][T27468] ? __pfx_vfs_write+0x10/0x10 [ 1528.647576][T27468] ? find_held_lock+0x2b/0x80 [ 1528.647607][T27468] ? __fget_files+0x215/0x3d0 [ 1528.647637][T27468] ? __fget_files+0x21f/0x3d0 [ 1528.647671][T27468] ksys_write+0x12a/0x250 [ 1528.647696][T27468] ? __pfx_ksys_write+0x10/0x10 [ 1528.647728][T27468] __do_fast_syscall_32+0x14d/0x8e0 [ 1528.647766][T27468] do_fast_syscall_32+0x32/0x70 [ 1528.647798][T27468] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1528.647824][T27468] RIP: 0023:0xf7f47fbc [ 1528.647843][T27468] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1528.647865][T27468] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1528.647885][T27468] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001d80 [ 1528.647897][T27468] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1528.647910][T27468] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1528.647923][T27468] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1528.647938][T27468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1528.647967][T27468] [ 1528.759379][T27470] FAULT_INJECTION: forcing a failure. [ 1528.759379][T27470] name failslab, interval 1, probability 5, space 0, times 9983 [ 1528.759400][T27470] CPU: 2 UID: 0 PID: 27470 Comm: syz.4.6044 Tainted: G L syzkaller #0 PREEMPT(full) [ 1528.759424][T27470] Tainted: [L]=SOFTLOCKUP [ 1528.759431][T27470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1528.759443][T27470] Call Trace: [ 1528.759451][T27470] [ 1528.759460][T27470] dump_stack_lvl+0x100/0x190 [ 1528.759498][T27470] should_fail_ex.cold+0x5/0xa [ 1528.759529][T27470] should_failslab+0xc2/0x120 [ 1528.759557][T27470] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1528.759583][T27470] ? trace_probe_init+0x344/0x560 [ 1528.759614][T27470] kstrdup+0x51/0xe0 [ 1528.759639][T27470] trace_probe_init+0x344/0x560 [ 1528.759668][T27470] alloc_trace_uprobe+0xf8/0x370 [ 1528.759701][T27470] __trace_uprobe_create+0x673/0x2310 [ 1528.759744][T27470] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1528.759777][T27470] ? trace_kmalloc+0xeb/0x110 [ 1528.759800][T27470] ? __kasan_kmalloc+0xaa/0xb0 [ 1528.759822][T27470] ? __kmalloc_noprof+0x350/0x840 [ 1528.759842][T27470] ? argv_split+0x176/0x430 [ 1528.759877][T27470] ? argv_split+0x35c/0x430 [ 1528.759908][T27470] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1528.759941][T27470] trace_probe_create+0xef/0x100 [ 1528.759971][T27470] ? __pfx_trace_probe_create+0x10/0x10 [ 1528.760007][T27470] dyn_event_create+0x50/0x90 [ 1528.760030][T27470] create_or_delete_trace_uprobe+0x5a/0xb0 [ 1528.760062][T27470] trace_parse_run_command+0x1ab/0x3b0 [ 1528.760089][T27470] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 1528.760125][T27470] vfs_write+0x2aa/0x1040 [ 1528.760150][T27470] ? __pfx_probes_write+0x10/0x10 [ 1528.760201][T27470] ? lock_acquire+0x1d1/0x380 [ 1528.760226][T27470] ? __fget_files+0x34/0x3d0 [ 1528.760253][T27470] ? __pfx_vfs_write+0x10/0x10 [ 1528.760274][T27470] ? find_held_lock+0x2b/0x80 [ 1528.760311][T27470] ? __fget_files+0x215/0x3d0 [ 1528.760344][T27470] ? __fget_files+0x21f/0x3d0 [ 1528.760380][T27470] ksys_write+0x12a/0x250 [ 1528.760407][T27470] ? __pfx_ksys_write+0x10/0x10 [ 1528.760441][T27470] __do_fast_syscall_32+0x14d/0x8e0 [ 1528.760478][T27470] do_fast_syscall_32+0x32/0x70 [ 1528.760510][T27470] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1528.760533][T27470] RIP: 0023:0xf7f47fbc [ 1528.760549][T27470] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1528.760567][T27470] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1528.760586][T27470] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001d80 [ 1528.760601][T27470] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1528.760616][T27470] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1528.760630][T27470] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1528.760645][T27470] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1528.760674][T27470] [ 1528.931947][T27474] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6045'. [ 1529.090782][T27474] rxe_eth0 speed is unknown, defaulting to 1000 [ 1529.191656][T27483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6048'. [ 1529.385606][T27489] FAULT_INJECTION: forcing a failure. [ 1529.385606][T27489] name failslab, interval 1, probability 5, space 0, times 9982 [ 1529.385639][T27489] CPU: 2 UID: 0 PID: 27489 Comm: syz.3.6051 Tainted: G L syzkaller #0 PREEMPT(full) [ 1529.385667][T27489] Tainted: [L]=SOFTLOCKUP [ 1529.385674][T27489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1529.385687][T27489] Call Trace: [ 1529.385694][T27489] [ 1529.385702][T27489] dump_stack_lvl+0x100/0x190 [ 1529.385732][T27489] should_fail_ex.cold+0x5/0xa [ 1529.385750][T27489] should_failslab+0xc2/0x120 [ 1529.385766][T27489] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1529.385782][T27489] ? trace_probe_init+0x344/0x560 [ 1529.385803][T27489] kstrdup+0x51/0xe0 [ 1529.385819][T27489] trace_probe_init+0x344/0x560 [ 1529.385838][T27489] alloc_trace_uprobe+0xf8/0x370 [ 1529.385858][T27489] __trace_uprobe_create+0x673/0x2310 [ 1529.385882][T27489] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1529.385900][T27489] ? trace_kmalloc+0xeb/0x110 [ 1529.385914][T27489] ? __kasan_kmalloc+0xaa/0xb0 [ 1529.385928][T27489] ? __kmalloc_noprof+0x350/0x840 [ 1529.385941][T27489] ? argv_split+0x176/0x430 [ 1529.385965][T27489] ? argv_split+0x35c/0x430 [ 1529.385992][T27489] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1529.386019][T27489] trace_probe_create+0xef/0x100 [ 1529.386042][T27489] ? __pfx_trace_probe_create+0x10/0x10 [ 1529.386074][T27489] dyn_event_create+0x50/0x90 [ 1529.386094][T27489] create_or_delete_trace_uprobe+0x5a/0xb0 [ 1529.386113][T27489] trace_parse_run_command+0x1ab/0x3b0 [ 1529.386128][T27489] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 1529.386149][T27489] vfs_write+0x2aa/0x1040 [ 1529.386163][T27489] ? __pfx_probes_write+0x10/0x10 [ 1529.386180][T27489] ? lock_acquire+0x1d1/0x380 [ 1529.386193][T27489] ? __fget_files+0x34/0x3d0 [ 1529.386208][T27489] ? __pfx_vfs_write+0x10/0x10 [ 1529.386220][T27489] ? find_held_lock+0x2b/0x80 [ 1529.386238][T27489] ? __fget_files+0x215/0x3d0 [ 1529.386255][T27489] ? __fget_files+0x21f/0x3d0 [ 1529.386274][T27489] ksys_write+0x12a/0x250 [ 1529.386293][T27489] ? __pfx_ksys_write+0x10/0x10 [ 1529.386312][T27489] __do_fast_syscall_32+0x14d/0x8e0 [ 1529.386334][T27489] do_fast_syscall_32+0x32/0x70 [ 1529.386355][T27489] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1529.386398][T27489] RIP: 0023:0xf744efbc [ 1529.386417][T27489] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1529.386438][T27489] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1529.386461][T27489] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001d80 [ 1529.386477][T27489] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1529.386490][T27489] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1529.386502][T27489] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1529.386514][T27489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1529.386539][T27489] [ 1529.653525][T27492] FAULT_INJECTION: forcing a failure. [ 1529.653525][T27492] name failslab, interval 1, probability 5, space 0, times 9981 [ 1529.653544][T27492] CPU: 1 UID: 0 PID: 27492 Comm: syz.3.6052 Tainted: G L syzkaller #0 PREEMPT(full) [ 1529.653560][T27492] Tainted: [L]=SOFTLOCKUP [ 1529.653565][T27492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1529.653573][T27492] Call Trace: [ 1529.653577][T27492] [ 1529.653583][T27492] dump_stack_lvl+0x100/0x190 [ 1529.653605][T27492] should_fail_ex.cold+0x5/0xa [ 1529.653624][T27492] should_failslab+0xc2/0x120 [ 1529.653640][T27492] __kmalloc_cache_noprof+0x91/0x6d0 [ 1529.653658][T27492] ? __rwlock_init+0x37/0x150 [ 1529.653680][T27492] ? __trace_uprobe_create+0x798/0x2310 [ 1529.653704][T27492] __trace_uprobe_create+0x798/0x2310 [ 1529.653728][T27492] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1529.653747][T27492] ? trace_kmalloc+0xeb/0x110 [ 1529.653762][T27492] ? __kasan_kmalloc+0xaa/0xb0 [ 1529.653777][T27492] ? __kmalloc_noprof+0x350/0x840 [ 1529.653791][T27492] ? argv_split+0x176/0x430 [ 1529.653812][T27492] ? argv_split+0x35c/0x430 [ 1529.653830][T27492] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1529.653849][T27492] trace_probe_create+0xef/0x100 [ 1529.653866][T27492] ? __pfx_trace_probe_create+0x10/0x10 [ 1529.653886][T27492] dyn_event_create+0x50/0x90 [ 1529.653899][T27492] create_or_delete_trace_uprobe+0x5a/0xb0 [ 1529.653918][T27492] trace_parse_run_command+0x1ab/0x3b0 [ 1529.653934][T27492] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 1529.653956][T27492] vfs_write+0x2aa/0x1040 [ 1529.653972][T27492] ? __pfx_probes_write+0x10/0x10 [ 1529.653996][T27492] ? lock_acquire+0x1d1/0x380 [ 1529.654016][T27492] ? __fget_files+0x34/0x3d0 [ 1529.654039][T27492] ? __pfx_vfs_write+0x10/0x10 [ 1529.654056][T27492] ? find_held_lock+0x2b/0x80 [ 1529.654081][T27492] ? __fget_files+0x215/0x3d0 [ 1529.654110][T27492] ? __fget_files+0x21f/0x3d0 [ 1529.654139][T27492] ksys_write+0x12a/0x250 [ 1529.654156][T27492] ? __pfx_ksys_write+0x10/0x10 [ 1529.654186][T27492] __do_fast_syscall_32+0x14d/0x8e0 [ 1529.654219][T27492] do_fast_syscall_32+0x32/0x70 [ 1529.654244][T27492] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1529.654268][T27492] RIP: 0023:0xf744efbc [ 1529.654285][T27492] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1529.654306][T27492] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1529.654329][T27492] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001d80 [ 1529.654339][T27492] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1529.654350][T27492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1529.654362][T27492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1529.654374][T27492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1529.654400][T27492] [ 1529.824263][T27494] FAULT_INJECTION: forcing a failure. [ 1529.824263][T27494] name failslab, interval 1, probability 5, space 0, times 9980 [ 1529.824283][T27494] CPU: 1 UID: 0 PID: 27494 Comm: syz.3.6053 Tainted: G L syzkaller #0 PREEMPT(full) [ 1529.824300][T27494] Tainted: [L]=SOFTLOCKUP [ 1529.824304][T27494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1529.824312][T27494] Call Trace: [ 1529.824317][T27494] [ 1529.824322][T27494] dump_stack_lvl+0x100/0x190 [ 1529.824345][T27494] should_fail_ex.cold+0x5/0xa [ 1529.824364][T27494] should_failslab+0xc2/0x120 [ 1529.824380][T27494] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1529.824394][T27494] ? __kasan_kmalloc+0xaa/0xb0 [ 1529.824408][T27494] ? trace_probe_init+0x2e6/0x560 [ 1529.824426][T27494] kstrdup+0x51/0xe0 [ 1529.824442][T27494] trace_probe_init+0x2e6/0x560 [ 1529.824461][T27494] alloc_trace_uprobe+0xf8/0x370 [ 1529.824481][T27494] __trace_uprobe_create+0x673/0x2310 [ 1529.824509][T27494] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1529.824527][T27494] ? trace_kmalloc+0xeb/0x110 [ 1529.824541][T27494] ? __kasan_kmalloc+0xaa/0xb0 [ 1529.824555][T27494] ? __kmalloc_noprof+0x350/0x840 [ 1529.824568][T27494] ? argv_split+0x176/0x430 [ 1529.824588][T27494] ? argv_split+0x35c/0x430 [ 1529.824606][T27494] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1529.824625][T27494] trace_probe_create+0xef/0x100 [ 1529.824641][T27494] ? __pfx_trace_probe_create+0x10/0x10 [ 1529.824668][T27494] dyn_event_create+0x50/0x90 [ 1529.824682][T27494] create_or_delete_trace_uprobe+0x5a/0xb0 [ 1529.824702][T27494] trace_parse_run_command+0x1ab/0x3b0 [ 1529.824719][T27494] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 1529.824741][T27494] vfs_write+0x2aa/0x1040 [ 1529.824757][T27494] ? __pfx_probes_write+0x10/0x10 [ 1529.824774][T27494] ? lock_acquire+0x1d1/0x380 [ 1529.824788][T27494] ? __fget_files+0x34/0x3d0 [ 1529.824803][T27494] ? __pfx_vfs_write+0x10/0x10 [ 1529.824816][T27494] ? find_held_lock+0x2b/0x80 [ 1529.824834][T27494] ? __fget_files+0x215/0x3d0 [ 1529.824851][T27494] ? __fget_files+0x21f/0x3d0 [ 1529.824869][T27494] ksys_write+0x12a/0x250 [ 1529.824883][T27494] ? __pfx_ksys_write+0x10/0x10 [ 1529.824901][T27494] __do_fast_syscall_32+0x14d/0x8e0 [ 1529.824922][T27494] do_fast_syscall_32+0x32/0x70 [ 1529.824941][T27494] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1529.824956][T27494] RIP: 0023:0xf744efbc [ 1529.824967][T27494] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1529.824979][T27494] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1529.824991][T27494] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001d80 [ 1529.824999][T27494] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1529.825007][T27494] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1529.825014][T27494] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1529.825021][T27494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1529.825037][T27494] [ 1530.538879][T27504] FAULT_INJECTION: forcing a failure. [ 1530.538879][T27504] name failslab, interval 1, probability 5, space 0, times 9979 [ 1530.538908][T27504] CPU: 1 UID: 0 PID: 27504 Comm: syz.7.6056 Tainted: G L syzkaller #0 PREEMPT(full) [ 1530.538934][T27504] Tainted: [L]=SOFTLOCKUP [ 1530.538941][T27504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1530.538952][T27504] Call Trace: [ 1530.538959][T27504] [ 1530.538968][T27504] dump_stack_lvl+0x100/0x190 [ 1530.539002][T27504] should_fail_ex.cold+0x5/0xa [ 1530.539029][T27504] should_failslab+0xc2/0x120 [ 1530.539053][T27504] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1530.539076][T27504] ? trace_probe_init+0x344/0x560 [ 1530.539131][T27504] kstrdup+0x51/0xe0 [ 1530.539154][T27504] trace_probe_init+0x344/0x560 [ 1530.539179][T27504] alloc_trace_uprobe+0xf8/0x370 [ 1530.539206][T27504] __trace_uprobe_create+0x673/0x2310 [ 1530.539237][T27504] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1530.539260][T27504] ? trace_kmalloc+0xeb/0x110 [ 1530.539278][T27504] ? __kasan_kmalloc+0xaa/0xb0 [ 1530.539296][T27504] ? __kmalloc_noprof+0x350/0x840 [ 1530.539312][T27504] ? argv_split+0x176/0x430 [ 1530.539340][T27504] ? argv_split+0x35c/0x430 [ 1530.539365][T27504] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1530.539390][T27504] trace_probe_create+0xef/0x100 [ 1530.539411][T27504] ? __pfx_trace_probe_create+0x10/0x10 [ 1530.539437][T27504] dyn_event_create+0x50/0x90 [ 1530.539453][T27504] create_or_delete_trace_uprobe+0x5a/0xb0 [ 1530.539477][T27504] trace_parse_run_command+0x1ab/0x3b0 [ 1530.539497][T27504] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 1530.539523][T27504] vfs_write+0x2aa/0x1040 [ 1530.539542][T27504] ? __pfx_probes_write+0x10/0x10 [ 1530.539563][T27504] ? lock_acquire+0x1d1/0x380 [ 1530.539579][T27504] ? __fget_files+0x34/0x3d0 [ 1530.539598][T27504] ? __pfx_vfs_write+0x10/0x10 [ 1530.539614][T27504] ? find_held_lock+0x2b/0x80 [ 1530.539636][T27504] ? __fget_files+0x215/0x3d0 [ 1530.539658][T27504] ? __fget_files+0x21f/0x3d0 [ 1530.539683][T27504] ksys_write+0x12a/0x250 [ 1530.539708][T27504] ? __pfx_ksys_write+0x10/0x10 [ 1530.539733][T27504] __do_fast_syscall_32+0x14d/0x8e0 [ 1530.539762][T27504] do_fast_syscall_32+0x32/0x70 [ 1530.539786][T27504] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1530.539806][T27504] RIP: 0023:0xf7f33fbc [ 1530.539819][T27504] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1530.539835][T27504] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1530.539852][T27504] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001d80 [ 1530.539864][T27504] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1530.539873][T27504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1530.539882][T27504] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1530.539892][T27504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1530.539913][T27504] [ 1530.677637][T27506] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6057'. [ 1530.823381][T27506] rxe_eth0 speed is unknown, defaulting to 1000 [ 1531.441066][T24038] net_ratelimit: 181 callbacks suppressed [ 1531.482258][T27513] rxe_eth0 speed is unknown, defaulting to 1000 [ 1532.159936][T27517] rxe_eth0 speed is unknown, defaulting to 1000 [ 1535.556463][T27550] rxe_eth0 speed is unknown, defaulting to 1000 [ 1536.480429][T24038] net_ratelimit: 161 callbacks suppressed [ 1536.746400][T27569] rxe_eth0 speed is unknown, defaulting to 1000 [ 1537.321050][T27572] rxe_eth0 speed is unknown, defaulting to 1000 [ 1537.771753][T27577] rxe_eth0 speed is unknown, defaulting to 1000 [ 1538.138927][T27581] rxe_eth0 speed is unknown, defaulting to 1000 [ 1539.135896][T27586] rxe_eth0 speed is unknown, defaulting to 1000 [ 1539.784496][T27591] rxe_eth0 speed is unknown, defaulting to 1000 [ 1540.206011][T27600] rxe_eth0 speed is unknown, defaulting to 1000 [ 1541.669328][T27618] net_ratelimit: 332 callbacks suppressed [ 1541.752053][T27618] rxe_eth0 speed is unknown, defaulting to 1000 [ 1542.167090][T27624] rxe_eth0 speed is unknown, defaulting to 1000 [ 1542.521837][T27626] rxe_eth0 speed is unknown, defaulting to 1000 [ 1542.786947][T27630] rxe_eth0 speed is unknown, defaulting to 1000 [ 1544.223260][T27644] rxe_eth0 speed is unknown, defaulting to 1000 [ 1544.750076][T27654] rxe_eth0 speed is unknown, defaulting to 1000 [ 1545.334834][T27659] rxe_eth0 speed is unknown, defaulting to 1000 [ 1546.683072][T27687] net_ratelimit: 324 callbacks suppressed [ 1546.739347][T27687] rxe_eth0 speed is unknown, defaulting to 1000 [ 1546.917933][T27694] snd_dummy snd_dummy.0: control 4:7:2:syz0:2097152 is already present [ 1546.980755][T27689] rxe_eth0 speed is unknown, defaulting to 1000 [ 1547.071884][T27698] snd_dummy snd_dummy.0: control 4:7:2:syz0:2097152 is already present [ 1547.608352][T27702] rxe_eth0 speed is unknown, defaulting to 1000 [ 1547.707234][T27713] snd_dummy snd_dummy.0: control 4:7:2:syz0:2097152 is already present [ 1547.957079][T27717] rxe_eth0 speed is unknown, defaulting to 1000 [ 1548.278839][T27726] snd_dummy snd_dummy.0: control 4:7:2:syz0:2097152 is already present [ 1549.054184][T27741] snd_dummy snd_dummy.0: control 4:7:2:syz0:2097152 is already present [ 1549.296302][T27744] rxe_eth0 speed is unknown, defaulting to 1000 [ 1549.462231][T27755] FAULT_INJECTION: forcing a failure. [ 1549.462231][T27755] name failslab, interval 1, probability 5, space 0, times 9978 [ 1549.462261][T27755] CPU: 1 UID: 0 PID: 27755 Comm: syz.3.6129 Tainted: G L syzkaller #0 PREEMPT(full) [ 1549.462289][T27755] Tainted: [L]=SOFTLOCKUP [ 1549.462296][T27755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1549.462309][T27755] Call Trace: [ 1549.462316][T27755] [ 1549.462326][T27755] dump_stack_lvl+0x100/0x190 [ 1549.462361][T27755] should_fail_ex.cold+0x5/0xa [ 1549.462389][T27755] should_failslab+0xc2/0x120 [ 1549.462415][T27755] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1549.462442][T27755] ? trace_probe_init+0x344/0x560 [ 1549.462472][T27755] kstrdup+0x51/0xe0 [ 1549.462498][T27755] trace_probe_init+0x344/0x560 [ 1549.462527][T27755] alloc_trace_uprobe+0xf8/0x370 [ 1549.462559][T27755] __trace_uprobe_create+0x673/0x2310 [ 1549.462598][T27755] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1549.462628][T27755] ? trace_kmalloc+0xeb/0x110 [ 1549.462652][T27755] ? __kasan_kmalloc+0xaa/0xb0 [ 1549.462677][T27755] ? __kmalloc_noprof+0x350/0x840 [ 1549.462697][T27755] ? argv_split+0x176/0x430 [ 1549.462732][T27755] ? argv_split+0x35c/0x430 [ 1549.462764][T27755] ? __pfx___trace_uprobe_create+0x10/0x10 [ 1549.462797][T27755] trace_probe_create+0xef/0x100 [ 1549.462826][T27755] ? __pfx_trace_probe_create+0x10/0x10 [ 1549.462862][T27755] dyn_event_create+0x50/0x90 [ 1549.462885][T27755] create_or_delete_trace_uprobe+0x5a/0xb0 [ 1549.462916][T27755] trace_parse_run_command+0x1ab/0x3b0 [ 1549.462942][T27755] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 1549.462978][T27755] vfs_write+0x2aa/0x1040 [ 1549.463002][T27755] ? __pfx_probes_write+0x10/0x10 [ 1549.463057][T27755] ? lock_acquire+0x1d1/0x380 [ 1549.463080][T27755] ? __fget_files+0x34/0x3d0 [ 1549.463106][T27755] ? __pfx_vfs_write+0x10/0x10 [ 1549.463127][T27755] ? find_held_lock+0x2b/0x80 [ 1549.463159][T27755] ? __fget_files+0x215/0x3d0 [ 1549.463189][T27755] ? __fget_files+0x21f/0x3d0 [ 1549.463228][T27755] ksys_write+0x12a/0x250 [ 1549.463252][T27755] ? __pfx_ksys_write+0x10/0x10 [ 1549.463286][T27755] __do_fast_syscall_32+0x14d/0x8e0 [ 1549.463325][T27755] do_fast_syscall_32+0x32/0x70 [ 1549.463358][T27755] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1549.463385][T27755] RIP: 0023:0xf744efbc [ 1549.463402][T27755] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1549.463423][T27755] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1549.463443][T27755] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001d80 [ 1549.463456][T27755] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1549.463468][T27755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1549.463480][T27755] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1549.463492][T27755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1549.463519][T27755] [ 1549.679404][T27759] snd_dummy snd_dummy.0: control 4:7:2:syz0:2097152 is already present [ 1550.052768][T27770] FAULT_INJECTION: forcing a failure. [ 1550.052768][T27770] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1550.052788][T27770] CPU: 1 UID: 0 PID: 27770 Comm: syz.3.6134 Tainted: G L syzkaller #0 PREEMPT(full) [ 1550.052805][T27770] Tainted: [L]=SOFTLOCKUP [ 1550.052809][T27770] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1550.052817][T27770] Call Trace: [ 1550.052821][T27770] [ 1550.052826][T27770] dump_stack_lvl+0x100/0x190 [ 1550.052849][T27770] should_fail_ex.cold+0x5/0xa [ 1550.052866][T27770] get_futex_key+0x1c9/0x13e0 [ 1550.052886][T27770] ? __pfx_get_futex_key+0x10/0x10 [ 1550.052903][T27770] ? enqueue_task+0x1dc/0x4f0 [ 1550.052921][T27770] futex_wait_setup+0x91/0x540 [ 1550.052940][T27770] __futex_wait+0x19f/0x360 [ 1550.052955][T27770] ? __pfx___futex_wait+0x10/0x10 [ 1550.052967][T27770] ? __pfx_try_to_wake_up+0x10/0x10 [ 1550.052981][T27770] ? futex_hash+0x311/0x400 [ 1550.053000][T27770] ? __pfx_futex_wake_mark+0x10/0x10 [ 1550.053016][T27770] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 1550.053038][T27770] futex_wait+0xe6/0x370 [ 1550.053052][T27770] ? __pfx_futex_wait+0x10/0x10 [ 1550.053069][T27770] ? rcu_read_lock_any_held+0x6a/0x90 [ 1550.053088][T27770] ? find_held_lock+0x2b/0x80 [ 1550.053104][T27770] ? ksys_write+0x190/0x250 [ 1550.053117][T27770] ? ksys_write+0x190/0x250 [ 1550.053132][T27770] do_futex+0x265/0x440 [ 1550.053150][T27770] ? __pfx_do_futex+0x10/0x10 [ 1550.053169][T27770] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1550.053191][T27770] __ia32_sys_futex_time32+0x2f4/0x470 [ 1550.053213][T27770] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 1550.053234][T27770] ? __might_fault+0xc5/0x140 [ 1550.053254][T27770] __do_fast_syscall_32+0x14d/0x8e0 [ 1550.053275][T27770] do_fast_syscall_32+0x32/0x70 [ 1550.053294][T27770] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1550.053310][T27770] RIP: 0023:0xf744efbc [ 1550.053321][T27770] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1550.053333][T27770] RSP: 002b:00000000f54665bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1550.053346][T27770] RAX: ffffffffffffffda RBX: 00000000f7474f88 RCX: 0000000000000080 [ 1550.053354][T27770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7474f8c [ 1550.053361][T27770] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 1550.053368][T27770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1550.053375][T27770] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1550.053390][T27770] [ 1550.580677][T27774] rxe_eth0 speed is unknown, defaulting to 1000 [ 1551.432416][T27772] rxe_eth0 speed is unknown, defaulting to 1000 [ 1551.852870][ C1] net_ratelimit: 361 callbacks suppressed [ 1552.020474][T27774] openvswitch: failed to init nf_conncount -12 [ 1552.278586][T27794] rxe_eth0 speed is unknown, defaulting to 1000 [ 1552.944644][T27800] rxe_eth0 speed is unknown, defaulting to 1000 [ 1554.154605][T27804] rxe_eth0 speed is unknown, defaulting to 1000 [ 1557.040336][ C1] net_ratelimit: 142 callbacks suppressed [ 1557.729107][T27810] snd_dummy snd_dummy.0: control 4:7:2:syz0:2097152 is already present [ 1557.972773][T27822] snd_dummy snd_dummy.0: control 4:7:2:syz0:2097152 is already present [ 1558.909235][T27842] rxe_eth0 speed is unknown, defaulting to 1000 [ 1559.844334][T27878] rxe_eth0 speed is unknown, defaulting to 1000 [ 1562.320299][ C1] net_ratelimit: 153 callbacks suppressed [ 1567.360848][T24034] net_ratelimit: 102 callbacks suppressed [ 1571.082695][T27997] rxe_eth0 speed is unknown, defaulting to 1000 [ 1572.400274][ C3] net_ratelimit: 100 callbacks suppressed [ 1573.116891][T28005] snd_dummy snd_dummy.0: control 4:7:2:syz0:2097152 is already present [ 1577.440274][ C1] net_ratelimit: 105 callbacks suppressed [ 1582.723035][ T1165] net_ratelimit: 111 callbacks suppressed [ 1587.760258][ C3] net_ratelimit: 89 callbacks suppressed [ 1592.880438][T24036] net_ratelimit: 98 callbacks suppressed [ 1595.863501][T28226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6252'. [ 1595.871498][T28226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6252'. [ 1597.920271][ C3] net_ratelimit: 92 callbacks suppressed [ 1603.120323][ C3] net_ratelimit: 99 callbacks suppressed [ 1608.321963][T24039] net_ratelimit: 90 callbacks suppressed [ 1613.370383][T27957] net_ratelimit: 101 callbacks suppressed [ 1618.561184][T24036] net_ratelimit: 93 callbacks suppressed [ 1623.601061][T27957] net_ratelimit: 101 callbacks suppressed [ 1628.800801][T27957] net_ratelimit: 96 callbacks suppressed [ 1633.921490][T24023] net_ratelimit: 99 callbacks suppressed [ 1638.960278][ C3] net_ratelimit: 61 callbacks suppressed [ 1644.000272][ C3] net_ratelimit: 116 callbacks suppressed [ 1649.120266][ C1] net_ratelimit: 99 callbacks suppressed [ 1654.320282][ C3] net_ratelimit: 93 callbacks suppressed [ 1659.520578][T27957] net_ratelimit: 94 callbacks suppressed [ 1664.640458][T24023] net_ratelimit: 88 callbacks suppressed [ 1669.762591][ T1165] net_ratelimit: 110 callbacks suppressed [ 1674.189774][T28931] netlink: 206292 bytes leftover after parsing attributes in process `syz.8.6416'. [ 1674.880576][T24023] net_ratelimit: 102 callbacks suppressed [ 1679.519336][T28988] veth0: entered promiscuous mode [ 1679.519882][T28987] veth0: left promiscuous mode [ 1679.570369][T28993] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1679.570386][T28993] block device autoloading is deprecated and will be removed. [ 1679.623137][T28993] [ 1679.624238][T28993] ====================================================== [ 1679.627219][T28993] WARNING: possible circular locking dependency detected [ 1679.630774][T28993] syzkaller #0 Tainted: G L [ 1679.633417][T28993] ------------------------------------------------------ [ 1679.636710][T28993] syz.8.6438/28993 is trying to acquire lock: [ 1679.636950][T28998] kcov: kcov_start: t = ffff8880597bcb00, size = 524288, area = ffffc90029e21000 [ 1679.646002][T28993] ffffffff90be7e80 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 1679.646449][T14611] vmpressure_calc_level: 4 (s: 4034 r: 3866) [ 1679.652952][T28993] [ 1679.652952][T28993] but task is already holding lock: [ 1679.656208][T28993] ffff888041ba4358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111b/0x3700 [ 1679.660440][T28993] [ 1679.660440][T28993] which lock already depends on the new lock. [ 1679.660440][T28993] [ 1679.664964][T28993] [ 1679.664964][T28993] the existing dependency chain (in reverse order) is: [ 1679.668869][T28993] [ 1679.668869][T28993] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 1679.672659][T28993] lock_acquire+0x1d1/0x380 [ 1679.674929][T28993] __mutex_lock+0x19f/0x1c10 [ 1679.677232][T28993] md_alloc+0x3d0/0x10c0 [ 1679.679417][T28993] md_probe+0x73/0xf0 [ 1679.681517][T28993] blk_probe_dev+0x149/0x1e0 [ 1679.683802][T28993] blk_request_module+0x16/0xc0 [ 1679.686116][T28993] blkdev_get_no_open+0x9b/0xf0 [ 1679.688611][T28993] blkdev_open+0x141/0x4f0 [ 1679.690893][T28993] do_dentry_open+0x674/0x1470 [ 1679.693278][T28993] vfs_open_consume+0xcc/0x460 [ 1679.695771][T28993] path_openat+0x1547/0x23f0 [ 1679.698128][T28993] do_file_open+0x20e/0x430 [ 1679.700343][T28993] do_sys_openat2+0x163/0x1d0 [ 1679.702618][T28993] __ia32_compat_sys_openat+0x12d/0x210 [ 1679.705292][T28993] __do_fast_syscall_32+0x14d/0x8e0 [ 1679.706128][T29001] kcov: kcov_start: t = ffff888059b6cb00, size = 524288, area = ffffc9002e84e000 [ 1679.711709][T28993] do_fast_syscall_32+0x32/0x70 [ 1679.714096][T28993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1679.717073][T28993] [ 1679.717073][T28993] -> #1 (disks_mutex){+.+.}-{4:4}: [ 1679.720072][T28993] lock_acquire+0x1d1/0x380 [ 1679.722102][T28993] __mutex_lock+0x19f/0x1c10 [ 1679.724234][T28993] md_alloc+0x3e/0x10c0 [ 1679.726238][T28993] md_probe+0x73/0xf0 [ 1679.728287][T28993] blk_probe_dev+0x149/0x1e0 [ 1679.730453][T28993] blk_request_module+0x16/0xc0 [ 1679.732890][T28993] blkdev_get_no_open+0x9b/0xf0 [ 1679.735300][T28993] blkdev_open+0x141/0x4f0 [ 1679.737498][T28993] do_dentry_open+0x674/0x1470 [ 1679.739825][T28993] vfs_open_consume+0xcc/0x460 [ 1679.742110][T28993] path_openat+0x1547/0x23f0 [ 1679.744531][T28993] do_file_open+0x20e/0x430 [ 1679.746685][T28993] do_sys_openat2+0x163/0x1d0 [ 1679.748958][T28993] __ia32_compat_sys_openat+0x12d/0x210 [ 1679.751453][T28993] __do_fast_syscall_32+0x14d/0x8e0 [ 1679.753867][T28993] do_fast_syscall_32+0x32/0x70 [ 1679.756085][T28993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1679.758814][T28993] [ 1679.758814][T28993] -> #0 (major_names_lock){+.+.}-{4:4}: [ 1679.761957][T28993] check_prev_add+0xeb/0xe60 [ 1679.764150][T28993] __lock_acquire+0x1528/0x1f40 [ 1679.766321][T14611] vmpressure_calc_level: 9 (s: 600 r: 545) [ 1679.768989][T28993] lock_acquire+0x1d1/0x380 [ 1679.770988][T28993] __mutex_lock+0x19f/0x1c10 [ 1679.773268][T28993] blk_probe_dev+0x28/0x1e0 [ 1679.775478][T28993] blk_request_module+0x16/0xc0 [ 1679.777835][T28993] blkdev_get_no_open+0x9b/0xf0 [ 1679.780233][T28993] bdev_file_open_by_dev+0x70/0x210 [ 1679.781788][T14611] vmpressure_calc_level: 5 (s: 614 r: 578) [ 1679.785183][T28993] md_import_device+0x120/0x360 [ 1679.785456][T29000] kcov: kcov_start: t = ffff8880593ea580, size = 524288, area = ffffc9000cfbf000 [ 1679.791232][T28993] md_add_new_disk+0x4b6/0x1820 [ 1679.793344][T28993] md_ioctl+0x2c1d/0x3700 [ 1679.795342][T28993] compat_blkdev_ioctl+0x633/0x750 [ 1679.797175][T28993] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1679.799068][T28993] __do_fast_syscall_32+0x14d/0x8e0 [ 1679.801114][T28993] do_fast_syscall_32+0x32/0x70 [ 1679.803397][T28993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1679.806267][T28993] [ 1679.806267][T28993] other info that might help us debug this: [ 1679.806267][T28993] [ 1679.810367][T28993] Chain exists of: [ 1679.810367][T28993] major_names_lock --> disks_mutex --> &mddev->reconfig_mutex [ 1679.810367][T28993] [ 1679.812111][T14611] vmpressure_calc_level: 0 (s: 1292 r: 1288) [ 1679.817758][T28993] Possible unsafe locking scenario: [ 1679.817758][T28993] [ 1679.820947][T28993] CPU0 CPU1 [ 1679.823426][T28993] ---- ---- [ 1679.825623][T28993] lock(&mddev->reconfig_mutex); [ 1679.827615][T28993] lock(disks_mutex); [ 1679.829980][T28993] lock(&mddev->reconfig_mutex); [ 1679.832851][T28993] lock(major_names_lock); [ 1679.834236][T28993] [ 1679.834236][T28993] *** DEADLOCK *** [ 1679.834236][T28993] [ 1679.836554][T28993] locks held by syz.8.6438/28993: 1, on CPU#2: [ 1679.838433][T28993] #0: ffff888041ba4358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111b/0x3700 [ 1679.841508][T28993] [ 1679.841508][T28993] stack backtrace: [ 1679.843320][T28993] CPU: 2 UID: 0 PID: 28993 Comm: syz.8.6438 Tainted: G L syzkaller #0 PREEMPT(full) [ 1679.843434][T14611] vmpressure_calc_level: 0 (s: 2477 r: 2461) [ 1679.848250][T14611] vmpressure_calc_level: 0 (s: 622 r: 622) [ 1679.850331][T28993] Tainted: [L]=SOFTLOCKUP [ 1679.851647][T28993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1679.852870][T14611] vmpressure_calc_level: 0 (s: 540 r: 539) [ 1679.856417][T28993] Call Trace: [ 1679.857465][T28993] [ 1679.857838][T14611] vmpressure_calc_level: 0 (s: 812 r: 812) [ 1679.860259][T28993] dump_stack_lvl+0x100/0x190 [ 1679.861758][T28993] print_circular_bug.cold+0x178/0x1be [ 1679.863487][T28993] check_noncircular+0x146/0x160 [ 1679.865060][T28993] check_prev_add+0xeb/0xe60 [ 1679.866555][T28993] ? trace_mm_page_alloc+0x164/0x1c0 [ 1679.868183][T28993] __lock_acquire+0x1528/0x1f40 [ 1679.869710][T28993] lock_acquire+0x1d1/0x380 [ 1679.871170][T28993] ? blk_probe_dev+0x28/0x1e0 [ 1679.872649][T28993] ? __pfx___might_resched+0x10/0x10 [ 1679.874335][T28993] ? do_fast_syscall_32+0x32/0x70 [ 1679.875934][T28993] __mutex_lock+0x19f/0x1c10 [ 1679.877372][T28993] ? blk_probe_dev+0x28/0x1e0 [ 1679.878877][T28993] ? blk_probe_dev+0x28/0x1e0 [ 1679.880366][T28993] ? lock_acquire+0x1d1/0x380 [ 1679.881834][T28993] ? find_inode_fast+0xa5/0xa30 [ 1679.883389][T28993] ? find_held_lock+0x2b/0x80 [ 1679.884928][T28993] ? __pfx___mutex_lock+0x10/0x10 [ 1679.886547][T28993] ? find_inode_fast+0x1fa/0xa30 [ 1679.888107][T28993] ? blk_probe_dev+0x28/0x1e0 [ 1679.889547][T28993] blk_probe_dev+0x28/0x1e0 [ 1679.890953][T28993] blk_request_module+0x16/0xc0 [ 1679.892436][T28993] blkdev_get_no_open+0x9b/0xf0 [ 1679.893933][T28993] bdev_file_open_by_dev+0x70/0x210 [ 1679.895528][T28993] md_import_device+0x120/0x360 [ 1679.897063][T28993] md_add_new_disk+0x4b6/0x1820 [ 1679.898676][T28993] md_ioctl+0x2c1d/0x3700 [ 1679.900250][T28993] ? __pfx_md_ioctl+0x10/0x10 [ 1679.901690][T28993] ? do_vfs_ioctl+0x226/0x13e0 [ 1679.903209][T28993] ? __fget_files+0x34/0x3d0 [ 1679.904790][T28993] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1679.906702][T28993] ? __pfx_md_compat_ioctl+0x10/0x10 [ 1679.908352][T28993] compat_blkdev_ioctl+0x633/0x750 [ 1679.909955][T28993] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1679.911732][T28993] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1679.913510][T28993] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1679.915278][T28993] __do_fast_syscall_32+0x14d/0x8e0 [ 1679.916890][T28993] do_fast_syscall_32+0x32/0x70 [ 1679.918452][T28993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1679.920271][ C3] net_ratelimit: 84 callbacks suppressed [ 1679.920283][ C3] wireguard: wg0: Sending keepalive packet to peer 67 ([::1]:20002/0%0) [ 1679.920327][ C3] wireguard: wg0: Handshake for peer 13 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1679.920439][T24031] wireguard: wg0: Sending handshake initiation to peer 13 ([::1]:20002/0%0) [ 1679.920591][T24031] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=8) => 00000000 [ 1679.920610][T24031] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:14aa, type=128, ifindex=8) => 00000003 [ 1679.920622][T24031] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140b, type=128, ifindex=8) => 00000003 [ 1679.920636][T24031] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140a, type=128, ifindex=8) => 00000003 [ 1679.920651][T24031] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:7f00:0001, type=128, ifindex=8) => 00000003 [ 1679.947755][T28993] RIP: 0023:0xf7fc3fbc [ 1679.949039][T28993] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1679.955066][T28993] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1679.957979][T28993] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040140921 [ 1679.960473][T28993] RDX: 0000000080001540 RSI: 0000000000000000 RDI: 0000000000000000 [ 1679.962958][T28993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1679.965449][T28993] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1679.968101][T28993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1679.970545][T28993] [ 1679.972085][T28993] debugfs: creating file 'ram16' [ 1679.972288][T28993] device: 'ram16': device_add [ 1679.972302][T28993] kobject: 'ram16' (ffff8880534074e0): kobject_add_internal: parent: 'block', set: 'devices' [ 1679.972595][T28993] PM: Adding info for No Bus:ram16 [ 1679.972711][T28993] kobject: 'ram16' (ffff8880534074e0): kobject_uevent_env [ 1679.972722][T28993] kobject: 'ram16' (ffff8880534074e0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 1679.972755][T28993] kobject: 'holders' (ffff888023287180): kobject_add_internal: parent: 'ram16', set: '' [ 1679.972778][T28993] kobject: 'slaves' (ffff888025ee0800): kobject_add_internal: parent: 'ram16', set: '' [ 1679.972796][T28993] kobject: 'queue' (ffff8880616e7388): kobject_add_internal: parent: 'ram16', set: '' [ 1679.973080][T28993] debugfs: creating file 'ram16' [ 1679.973108][T28993] debugfs: creating file 'error_injection' [ 1679.973134][T28993] kobject: 'queue' (ffff8880616e7388): kobject_uevent_env [ 1679.973144][T28993] kobject: 'queue' (ffff8880616e7388): kobject_uevent_env: filter function caused the event to drop! [ 1679.973173][T28993] device: '1:16': device_add [ 1679.973181][T28993] kobject: '1:16' (ffff8880540d5000): kobject_add_internal: parent: 'bdi', set: 'devices' [ 1679.973338][T28993] PM: Adding info for No Bus:1:16 [ 1679.973347][T28993] kobject: '1:16' (ffff8880540d5000): kobject_uevent_env [ 1679.973365][T28993] kobject: '1:16' (ffff8880540d5000): fill_kobj_path: path = '/devices/virtual/bdi/1:16' [ 1679.974776][T28993] debugfs: creating file '1:16' [ 1679.974811][T28993] debugfs: creating file 'stats' [ 1679.974838][T28993] debugfs: creating file 'wb_stats' [ 1679.975300][T28993] kobject: 'ram16' (ffff8880534074e0): kobject_uevent_env [ 1679.975322][T28993] kobject: 'ram16' (ffff8880534074e0): fill_kobj_path: path = '/devices/virtual/block/ram16' [ 1679.975386][T28993] block device autoloading is deprecated and will be removed. [ 1679.976788][T28993] md: invalid raid superblock magic on ram16 [ 1679.976796][T28993] md: ram16 does not have a valid v0.0 superblock, not importing! [ 1679.976821][T28993] md: md_import_device returned -22 [ 1679.988783][T29000] kcov: kcov_task_exit: t = ffff8880593ea580, kcov->t = ffff8880593ea580 [ 1679.990442][ C3] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 1680.000234][ C1] wireguard: wg1: Handshake for peer 52 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 17) [ 1680.000282][ C1] wireguard: wg0: Handshake for peer 7 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1680.000310][ C1] wireguard: wg2: Handshake for peer 17 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 3) [ 1680.000394][T24031] wireguard: wg0: Sending handshake initiation to peer 7 ([::1]:20002/0%0) [ 1680.000568][T24031] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=8) => 00000000 [ 1680.000587][T24031] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:14aa, type=128, ifindex=8) => 00000003 [ 1680.011952][T28993] kcov: kcov_task_exit: t = ffff88805ba82580, kcov->t = ffff88805ba82580 [ 1680.030637][T14611] vmpressure_calc_level: 42 (s: 577 r: 332) [ 1680.035393][T14611] vmpressure_calc_level: 99 (s: 746 r: 7) [ 1680.040929][T14611] vmpressure_calc_level: 97 (s: 954 r: 29) [ 1680.047488][T14611] vmpressure_calc_level: 97 (s: 1765 r: 50) [ 1680.058876][T14611] vmpressure_calc_level: 95 (s: 2881 r: 139) [ 1680.067274][T14611] vmpressure_calc_level: 91 (s: 814 r: 71) [ 1680.078197][ T5883] vmpressure_calc_level: 93 (s: 766 r: 51) [ 1680.082616][T20667] bond1: (slave dummy0): Send learning packet: mac 00:11:22:33:44:55 vlan 0 [ 1680.092121][T14611] vmpressure_calc_level: 96 (s: 1313 r: 50) [ 1680.103397][ T50] vmpressure_calc_level: 84 (s: 807 r: 126) [ 1680.128845][T22137] vmpressure_calc_level: 97 (s: 739 r: 16) [ 1680.133459][T14611] vmpressure_calc_level: 97 (s: 1555 r: 47) [ 1680.141146][T22137] vmpressure_calc_level: 95 (s: 1030 r: 49) [ 1680.141837][T22137] vmpressure_calc_level: 96 (s: 1019 r: 39) [ 1680.144495][T22137] vmpressure_calc_level: 97 (s: 740 r: 16) [ 1680.145181][T22137] vmpressure_calc_level: 98 (s: 670 r: 11) [ 1680.155311][T14611] vmpressure_calc_level: 90 (s: 552 r: 55) [ 1680.167727][T22137] vmpressure_calc_level: 92 (s: 923 r: 70) [ 1680.187583][T14611] vmpressure_calc_level: 26 (s: 1232 r: 911) [ 1680.202701][T14611] vmpressure_calc_level: 1 (s: 675 r: 663) [ 1680.217634][T14611] vmpressure_calc_level: 1 (s: 715 r: 703) [ 1680.248822][ T5883] vmpressure_calc_level: 0 (s: 1648 r: 1643) [ 1680.266536][ T5883] vmpressure_calc_level: 14 (s: 960 r: 823) [ 1680.282623][ T5883] vmpressure_calc_level: 14 (s: 1035 r: 890) [ 1680.313104][ T5883] vmpressure_calc_level: 31 (s: 2153 r: 1474) [ 1680.324806][ T5883] vmpressure_calc_level: 39 (s: 552 r: 334) [ 1680.333660][ T5883] vmpressure_calc_level: 39 (s: 573 r: 349) [ 1680.354863][T14611] vmpressure_calc_level: 30 (s: 1144 r: 798) [ 1680.399267][T14611] vmpressure_calc_level: 30 (s: 2882 r: 2002) [ 1680.413549][T14611] vmpressure_calc_level: 42 (s: 662 r: 380) [ 1680.423758][T14611] vmpressure_calc_level: 45 (s: 756 r: 412) [ 1680.433872][T28984] sctp: sctp_close: sk:ffff8880266d0940, timeout:0 [ 1680.433901][T28984] sctp: sctp_do_sm[pre-fn]: ep:ffff88804f0b9800, EVENT_T_PRIMITIVE, PRIMITIVE_SHUTDOWN, asoc:ffff88802770e000[STATE_COOKIE_WAIT], sctp_sf_cookie_wait_prm_shutdown [ 1680.433926][T28984] sctp: sctp_do_sm[post-fn]: asoc:ffff88802770e000, status:DISPOSITION_DELETE_TCB [ 1680.433947][T28984] sctp: sctp_cmd_new_state: asoc:ffff88802770e000[STATE_CLOSED] [ 1680.434053][T28984] sctp: sctp_packet_free: packet:ffff8880263a4b08 [ 1680.434085][T28984] sctp: sctp_do_sm[post-sfx]: error:0, asoc:0000000000000000[STATE_CLOSED] [ 1680.434103][T28984] sctp: sctp_destroy_sock: sk:ffff8880266d0940 [ 1680.434489][T28986] kcov: kcov_task_exit: t = ffff888076762580, kcov->t = ffff888076762580 [ 1680.434626][T28995] kcov: kcov_task_exit: t = ffff888078278000, kcov->t = ffff888078278000 [ 1680.440510][ T5883] vmpressure_calc_level: 53 (s: 1393 r: 644) [ 1680.466681][ T5883] vmpressure_calc_level: 51 (s: 2564 r: 1256) [ 1680.480125][ T5883] vmpressure_calc_level: 1 (s: 760 r: 752) [ 1680.495267][ T5883] vmpressure_calc_level: 1 (s: 814 r: 799) [ 1680.522225][ T5883] vmpressure_calc_level: 7 (s: 1729 r: 1597) [ 1680.588794][T29001] kcov: kcov_task_exit: t = ffff888059b6cb00, kcov->t = ffff888059b6cb00 [ 1680.589071][T28998] kcov: kcov_task_exit: t = ffff8880597bcb00, kcov->t = ffff8880597bcb00 [ 1680.640230][ C1] wireguard: wg2: Handshake for peer 65 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6) [ 1680.650267][ C3] wireguard: wg0: Handshake for peer 61 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1680.650352][ C3] wireguard: wg2: Handshake for peer 11 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6) [ 1680.880568][T20667] bond3: (slave team0): Send learning packet: mac aa:aa:aa:aa:aa:1a vlan 0 [ 1681.220411][ T14] bond1: (slave dummy0): Send learning packet: mac 00:11:22:33:44:55 vlan 0 [ 1681.290253][ C3] wireguard: wg1: Handshake for peer 16 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 8) [ 1681.290323][ C3] wireguard: wg2: Handshake for peer 53 ([::1]:20001/0%0) did not complete after 20 attempts, giving up [ 1681.920270][ C1] wireguard: wg0: Handshake for peer 8 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1682.020425][T20667] bond3: (slave team0): Send learning packet: mac aa:aa:aa:aa:aa:1a vlan 0 [ 1682.350431][ T14] bond1: (slave dummy0): Send learning packet: mac 00:11:22:33:44:55 vlan 0 [ 1682.480223][ C2] wireguard: wg1: Handshake for peer 63 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 9) [ 1682.560303][ C1] wireguard: wg0: Handshake for peer 50 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1683.120395][T20667] bond3: (slave team0): Send learning packet: mac aa:aa:aa:aa:aa:1a vlan 0 [ 1683.460377][ T14] bond1: (slave dummy0): Send learning packet: mac 00:11:22:33:44:55 vlan 0 [ 1683.760285][ C1] wireguard: wg1: Handshake for peer 51 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6) [ 1683.840558][ C1] Dropped {multi|broad}cast of type=[86dd] [ 1684.240572][ T14] bond3: (slave team0): Send learning packet: mac aa:aa:aa:aa:aa:1a vlan 0 [ 1684.480262][ C1] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1684.480353][ C1] wireguard: wg2: Handshake for peer 18 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 7) [ 1684.480396][ C1] wireguard: wg0: Handshake for peer 62 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1684.580427][ T14] bond1: (slave dummy0): Send learning packet: mac 00:11:22:33:44:55 vlan 0 [ 1684.706223][T14611] vmpressure_calc_level: 1 (s: 737 r: 726) [ 1684.716738][T14611] vmpressure_calc_level: 2 (s: 683 r: 667) [ 1684.960369][ C1] wireguard: wg0: Handshake for peer 13 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1684.960540][T24034] net_ratelimit: 91 callbacks suppressed [ 1684.960554][T24034] wireguard: wg0: Sending handshake initiation to peer 13 ([::1]:20002/0%0) [ 1684.960773][T24034] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=8) => 00000000 [ 1684.960801][T24034] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:14aa, type=128, ifindex=8) => 00000003 [ 1684.960821][T24034] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140b, type=128, ifindex=8) => 00000003 [ 1684.960841][T24034] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140a, type=128, ifindex=8) => 00000003 [ 1684.960863][T24034] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:7f00:0001, type=128, ifindex=8) => 00000003 [ 1685.120221][ C2] wireguard: wg1: Handshake for peer 15 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 2) [ 1685.120234][ C3] wireguard: wg0: Handshake for peer 49 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1685.120230][ C1] wireguard: wg0: Handshake for peer 7 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1685.120536][T24034] wireguard: wg0: Sending handshake initiation to peer 7 ([::1]:20002/0%0) [ 1685.120580][T27957] wireguard: wg0: Sending handshake initiation to peer 49 ([::1]:20002/0%0) [ 1685.120690][T24034] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=8) => 00000000 [ 1685.120708][T24034] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:14aa, type=128, ifindex=8) => 00000003 [ 1685.350458][T28271] bond3: (slave team0): Send learning packet: mac aa:aa:aa:aa:aa:1a vlan 0 [ 1685.680354][ C1] wireguard: wg0: Handshake for peer 61 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1685.690456][ T14] bond1: (slave dummy0): Send learning packet: mac 00:11:22:33:44:55 vlan 0 [ 1685.760277][ C3] wireguard: wg1: Handshake for peer 52 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 18) [ 1685.760362][ C3] wireguard: wg2: Handshake for peer 17 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 4) [ 1686.400230][ C1] wireguard: wg2: Handshake for peer 65 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 7) [ 1686.400254][ C0] wireguard: wg2: Handshake for peer 11 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 7) [ 1686.460478][ T14] bond3: (slave team0): Send learning packet: mac aa:aa:aa:aa:aa:1a vlan 0 [ 1686.790502][T28271] bond1: (slave dummy0): Send learning packet: mac 00:11:22:33:44:55 vlan 0 [ 1686.960240][ C1] wireguard: wg0: Handshake for peer 8 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1687.040351][ C1] wireguard: wg1: Handshake for peer 16 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 9) [ 1687.580349][ T14] bond3: (slave team0): Send learning packet: mac aa:aa:aa:aa:aa:1a vlan 0 [ 1687.680243][ C2] wireguard: wg1: Handshake for peer 63 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 10) [ 1687.930404][ T14] bond1: (slave dummy0): Send learning packet: mac 00:11:22:33:44:55 vlan 0 [ 1688.320255][ C1] wireguard: wg0: Handshake for peer 50 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 1688.710475][T20667] bond3: (slave team0): Send learning packet: mac aa:aa:aa:aa:aa:1a vlan 0 [ 1688.960304][ C1] Dropped {multi|broad}cast of type=[86dd] [ 1688.960389][ C0] wireguard: wg1: Handshake for peer 51 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 7) [ 1689.040506][T28271] bond1: (slave dummy0): Send learning packet: mac 00:11:22:33:44:55 vlan 0 [ 1689.600265][ C1] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2)