last executing test programs: 2m35.08957844s ago: executing program 3 (id=612): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0x7f7) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2000000000000002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xbea6, 0x100, 0xfffffffe, 0xfffffffd}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r9, 0x2) syz_ublk_setup_queues(r12, r11, &(0x7f00000009c0)={0x0, 0x3e0e, 0x1, 0x9, 0x28a, 0x0, r5}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x23f, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x20, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r12, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r10, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, &(0x7f0000000280)) r13 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r13, 0x0, 0x0) listen(r13, 0x1) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x21, &(0x7f0000000680)=ANY=[@ANYBLOB="620af0ff7f000001620af4ff7f000001620af8ff30394e20bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000630000001500150000000000bf06000000000000620ad8ff45002800620adcff00000000620ae0ff40060000620ae4ff7f000001620ae8ff7f000001620ac0ff30394e20620ac4ff01000000620ac8ff00000000620accff50020010620ad0ff00000000bf61000000000000bfa200000000000007020000d8ffffffb703000014000000bfa400000000000007040000c0ffffffb705000014000000850000006e000000bf610000000000008500000056000000b7000000000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r14, 0x0, 0x1c, 0x0, &(0x7f0000000980)="000000000000000000000000083345000028000000004006dfff7e00", 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 2m33.295114267s ago: executing program 2 (id=615): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0x7f7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa0242, 0x8) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2000000000000002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xbea6, 0x100, 0xfffffffe, 0xfffffffd}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r9, 0x2) syz_ublk_setup_queues(r12, r11, &(0x7f00000009c0)={0x0, 0x3e0e, 0x1, 0x9, 0x28a, 0x0, r5}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x23f, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x20, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r12, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r10, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, &(0x7f0000000280)) r13 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r13, 0x0, 0x0) listen(r13, 0x1) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x21, &(0x7f0000000680)=ANY=[@ANYBLOB="620af0ff7f000001620af4ff7f000001620af8ff30394e20bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000630000001500150000000000bf06000000000000620ad8ff45002800620adcff00000000620ae0ff40060000620ae4ff7f000001620ae8ff7f000001620ac0ff30394e20620ac4ff01000000620ac8ff00000000620accff50020010620ad0ff00000000bf61000000000000bfa200000000000007020000d8ffffffb703000014000000bfa400000000000007040000c0ffffffb705000014000000850000006e000000bf610000000000008500000056000000b7000000000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r14, 0x0, 0xf, 0x0, &(0x7f0000000980)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b3E', 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 2m33.279508144s ago: executing program 3 (id=616): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02100000040000000800000064ea170180000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 2m30.737903399s ago: executing program 2 (id=619): fsopen(0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000440)=0xce0, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42004}, 0x80000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x3c, r5, 0x1, 0x70ad2c, 0x3, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0) listen(r0, 0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 2m30.585185476s ago: executing program 2 (id=620): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='mountinfo\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 2m30.580725472s ago: executing program 2 (id=621): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='mountinfo\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 2m30.137283589s ago: executing program 2 (id=622): r0 = syz_open_dev$dri(&(0x7f00000005c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000600)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000700)={r2, 0x0, 0x5, 0x0, 0x1, [], [0x8001, 0x0, 0x400, 0x10000], [0x7ff, 0x1, 0xfffffffb], [0x6, 0xa, 0xa]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000780)={r2}) 2m29.663903378s ago: executing program 3 (id=625): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='mountinfo\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 2m29.573194841s ago: executing program 3 (id=626): r0 = syz_open_dev$dri(&(0x7f00000005c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000600)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000700)={r2, 0x0, 0x5, 0x0, 0x1, [], [0x8001, 0x0, 0x400, 0x10000], [0x7ff, 0x1, 0xfffffffb], [0x6, 0xa, 0xa]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000780)={r2}) 2m29.471147372s ago: executing program 3 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='mountinfo\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 2m29.396141891s ago: executing program 2 (id=629): fanotify_mark(0xffffffffffffffff, 0x201, 0x20, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000016c0)={0x8, 0x0, &(0x7f0000001700)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001840)={0x10, 0x0, &(0x7f0000000780)=[@request_death={0x400c630e, 0x0, 0x1}], 0x0, 0x0, 0x0}) 2m29.291570996s ago: executing program 32 (id=629): fanotify_mark(0xffffffffffffffff, 0x201, 0x20, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000016c0)={0x8, 0x0, &(0x7f0000001700)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001840)={0x10, 0x0, &(0x7f0000000780)=[@request_death={0x400c630e, 0x0, 0x1}], 0x0, 0x0, 0x0}) 2m29.243835838s ago: executing program 3 (id=631): r0 = syz_open_dev$dri(&(0x7f00000005c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000600)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000700)={r2, 0x0, 0x5, 0x0, 0x1, [], [0x8001, 0x0, 0x400, 0x10000], [0x7ff, 0x1, 0xfffffffb], [0x6, 0xa, 0xa]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000780)={r2}) 2m29.215433509s ago: executing program 33 (id=631): r0 = syz_open_dev$dri(&(0x7f00000005c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000600)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000700)={r2, 0x0, 0x5, 0x0, 0x1, [], [0x8001, 0x0, 0x400, 0x10000], [0x7ff, 0x1, 0xfffffffb], [0x6, 0xa, 0xa]}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000780)={r2}) 2m25.052735177s ago: executing program 4 (id=659): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0x7f7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa0242, 0x8) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2000000000000002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xbea6, 0x100, 0xfffffffe, 0xfffffffd}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r9, 0x2) syz_ublk_setup_queues(r12, r11, &(0x7f00000009c0)={0x0, 0x3e0e, 0x1, 0x9, 0x28a, 0x0, r5}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x23f, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x20, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r12, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r10, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, &(0x7f0000000280)) r13 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r13, 0x0, 0x0) listen(r13, 0x1) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x21, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r14, 0x0, 0x1c, 0x0, &(0x7f0000000980)="000000000000000000000000083345000028000000004006dfff7e00", 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 2m23.347519973s ago: executing program 4 (id=663): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x21, &(0x7f0000000680)=ANY=[@ANYBLOB="620af0ff7f000001620af4ff7f000001620af8ff30394e20bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000630000001500150000000000bf06000000000000620ad8ff45002800620adcff00000000620ae0ff40060000620ae4ff7f000001620ae8ff7f000001620ac0ff30394e20620ac4ff01000000620ac8ff00000000620accff50020010620ad0ff00000000bf61000000000000bfa200000000000007020000d8ffffffb70300001400"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m23.211107665s ago: executing program 4 (id=665): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0x7f7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa0242, 0x8) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2000000000000002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xbea6, 0x100, 0xfffffffe, 0xfffffffd}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r9, 0x2) syz_ublk_setup_queues(r12, r11, &(0x7f00000009c0)={0x0, 0x3e0e, 0x1, 0x9, 0x28a, 0x0, r5}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x23f, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x20, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r12, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r10, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, &(0x7f0000000280)) r13 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r13, 0x0, 0x0) listen(r13, 0x1) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x21, &(0x7f0000000680)=ANY=[@ANYBLOB="620af0ff7f000001620af4ff7f000001620af8ff30394e20bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000630000001500150000000000bf06000000000000620ad8ff45002800620adcff00000000620ae0ff40060000620ae4ff7f000001620ae8ff7f000001620ac0ff30394e20620ac4ff01000000620ac8ff00000000620accff50020010620ad0ff00000000bf61000000000000bfa200000000000007020000d8ffffffb703000014000000bfa400000000000007040000c0ffffffb705000014000000850000006e000000bf610000000000008500000056000000b7000000000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r14, 0x0, 0x16, 0x0, &(0x7f0000000980)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b3E\x00\x00(\x00\x00\x00\x00', 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 2m22.110133917s ago: executing program 4 (id=681): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) write(r0, &(0x7f0000001640)="8b", 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m22.076885688s ago: executing program 4 (id=684): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x180) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m22.010597778s ago: executing program 4 (id=689): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) write(r2, &(0x7f0000001640)="8b", 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m14.644580615s ago: executing program 1 (id=825): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000140)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000280)=[r2], &(0x7f00000002c0)=[0x3], &(0x7f0000000300)=[r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 2m14.644058938s ago: executing program 1 (id=827): syz_emit_ethernet(0x9f, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x91, 0x0, 0x0, 0x40, 0x32, 0x0, @remote, @local}, {0x4d2, 0x1, @cc={0x1, 0x0, 0x0, 0x3, 0x4, 0x1, 0x1, [@ipv4=@gre={{0x5, 0x4, 0x0, 0x2e, 0x5b, 0x67, 0x0, 0x40, 0x2f, 0x0, @private=0xa010100, @remote}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x9, 0x1, 0x55, 0x1, 0x1, 0x2, 0x4, 0x8}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0xd, 0x2, 0x2, 0x2, 0x1, 0x0, 0x5, 0xf7}, 0x2, {0xd36c, 0x5, 0x3, 0x1f, 0x1, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x2, 'mJ|'}}}]}}}}}}, 0x0) 2m14.566026974s ago: executing program 1 (id=829): mount(0x0, &(0x7f00000001c0)='./sec\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 2m14.565926901s ago: executing program 1 (id=830): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) ftruncate(r0, 0x4a8e) 2m14.55003828s ago: executing program 1 (id=833): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x180) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x8400, 0x0) r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d) mount(0x0, 0x0, &(0x7f0000000580)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m14.516138462s ago: executing program 1 (id=834): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000ffdbdf253b00000008000300", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) 2m7.099431939s ago: executing program 34 (id=689): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) write(r2, &(0x7f0000001640)="8b", 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1m59.608152453s ago: executing program 35 (id=834): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000ffdbdf253b00000008000300", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) 4.457045778s ago: executing program 6 (id=1733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000400)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000540)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb6ad67d196186e061f7092e2fe1ef9a0d699e9d080edab4bfdf0700000000000033b67507b05c35577587287c161a312d2351cf0f9c19d2f0d2b52ace0218941304c45c9b529492322ecf2cf8c68a126cb82558982cdcd02dba2f605704bcafe6da433b11d59d071d79e32748a1317a1d68c1be05f1f584dde4be8c1262a925fbabe0af8c00a5181f9c85b647ed0e5f", 0xb5}, {&(0x7f0000000600)="8caed476f6bcc737902ee6863118a0f660978f27dfa8e77e65d30f0c994994af1fb65ee49983e655d3f7be317d2380b0ed8e916769d5f1b8dc7a927e6401a10223ad90d5dc45614dec7e4c2f19d2b70807aaef8fc9e45c7a65583d15a94480840f4e4fc9ee8e3b7f8fd1aaf800d9176af51346ea81ee48fdc01f072780ff849a4fe9197b8926a16412b4da7b627e43d71ec1b367bbd9454ab97566775449de0c9e1b429acb005171cfd0b37d5e807f54ece988ae6a50773488ded126b8fc9559f66619d6002a53923e4e93bf09354a28cdd2c6a0653731e3ff0fac", 0xdb}, {&(0x7f0000000700)="99dcbf373748a116444c10801b7c8f48ff3cc4222eaa9a8ecd976fe5c2b153b8012daa0155cbb1", 0x27}, {0x0}], 0x4}, 0x0) 3.70228366s ago: executing program 0 (id=1738): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608000000d44a6b8500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.965817605s ago: executing program 7 (id=1739): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608000000d44a6b8500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.889192831s ago: executing program 7 (id=1740): socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x800040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r1, &(0x7f0000000600)='off', 0x3) write(r1, &(0x7f0000000640)='on', 0x2) 2.885895653s ago: executing program 0 (id=1748): socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x800040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r0, &(0x7f0000000600)='off', 0x3) write(r0, &(0x7f0000000640)='on', 0x2) 2.759010213s ago: executing program 0 (id=1741): fsopen(0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000400), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000440)=0xce0, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42004}, 0x80000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x3c, r5, 0x1, 0x70ad2c, 0x3, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0) listen(r0, 0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 2.718372906s ago: executing program 7 (id=1742): syz_emit_ethernet(0x42, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00A'], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200fbdbdf2539000000", @ANYRES32=r2, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.565161299s ago: executing program 7 (id=1744): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c80010000c0001000302080040"], 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.469180859s ago: executing program 6 (id=1752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001400)={'#! ', './cgroup', [{0x20, '/dev/kvm\x00'}, {0x20, '[*'}, {0x20, '/dev/nullb0\x00'}, {}, {0x20, 'discard'}, {}], 0xa, "ca2648eb59bc79d8567f85be25743e1642dabba71f4416e1089f5a581c4f1804ac944e5a20c193380fe8b423c30d63164bfd54761088bd852a07b2de7fc9f5efd7a398cfa8e128ac77f8418ecb5e8b0348c1bee358d289751f7d21a1d314b81a6e6c26019998a2fcb46df512607df773c72b18b03692062f1641972b6d162990257fbc5810d8d276b90539b55813b275d582c190636d4f263a05a67d5d469a0d27238f00db4f8b9117e1eb1d48809885e01a6884977fd55cba861faed322575bda2b3f20f041a3d505e05029abea95d5d7"}, 0x101) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.828605863s ago: executing program 0 (id=1745): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x5e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x40000000000007c, 0x2000c044) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100000000000000", @ANYRES32=r9], 0x20}}, 0x0) socket$unix(0x1, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) r11 = socket(0x2b, 0x1, 0x1) listen(r11, 0x5) accept4$inet6(r10, 0x0, 0x0, 0x800) setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f0000000080)=0x101, 0x4) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) 1.828453827s ago: executing program 6 (id=1746): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000240), 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r5, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000002c0)) 1.599689825s ago: executing program 5 (id=1747): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000240), 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000002c0)) 1.24171408s ago: executing program 5 (id=1749): socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x800040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r0, &(0x7f0000000600)='off', 0x3) write(r0, &(0x7f0000000640)='on', 0x2) 1.241411044s ago: executing program 5 (id=1750): socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x800040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r0, &(0x7f0000000600)='off', 0x3) write(r0, &(0x7f0000000640)='on', 0x2) 1.139253009s ago: executing program 5 (id=1751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20a201, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001e40)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001f00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000001f40), 0x56) sendmsg$kcm(r4, &(0x7f0000001f80)={&(0x7f0000001fc0)=@xdp={0x2c, 0x0, r6, 0x36}, 0x80, &(0x7f0000002040)=[{&(0x7f0000002080)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000020c0)="442ea407603a16ff", 0x8}], 0x2}, 0x20048085) 1.010048795s ago: executing program 5 (id=1753): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='yeah', 0x4c) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffffffffffff59}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000005c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000640)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000680)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 963.080597ms ago: executing program 0 (id=1754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000400)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000540)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb6ad67d196186e061f7092e2fe1ef9a0d699e9d080edab4bfdf0700000000000033b67507b05c35577587287c161a312d2351cf0f9c19d2f0d2b52ace0218941304c45c9b529492322ecf2cf8c68a126cb82558982cdcd02dba2f605704bcafe6da433b11d59d071d79e32748a1317a1d68c1be05f1f584dde4be8c1262a925fbabe0af8c00a5181f9c85b647ed0e5f", 0xb5}, {&(0x7f0000000600)="8caed476f6bcc737902ee6863118a0f660978f27dfa8e77e65d30f0c994994af1fb65ee49983e655d3f7be317d2380b0ed8e916769d5f1b8dc7a927e6401a10223ad90d5dc45614dec7e4c2f19d2b70807aaef8fc9e45c7a65583d15a94480840f4e4fc9ee8e3b7f8fd1aaf800d9176af51346ea81ee48fdc01f072780ff849a4fe9197b8926a16412b4da7b627e43d71ec1b367bbd9454ab97566775449de0c9e1b429acb005171cfd0b37d5e807f54ece988ae6a50773488ded126b8fc9559f66619d6002a53923e4e93bf09354a28cdd2c6a0653731e3ff0fac", 0xdb}, {&(0x7f0000000700)="99dcbf373748a116444c10801b7c8f48ff3cc4222eaa9a8ecd976fe5c2b153b8012daa0155cbb1", 0x27}, {&(0x7f0000000840)}], 0x4}, 0x0) 838.422039ms ago: executing program 6 (id=1755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d40), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000e40)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x8810) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000fc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f00000011c0)={'syzkaller0\x00', @random="2b0100004ec6"}) 798.426299ms ago: executing program 0 (id=1756): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='yeah', 0x4c) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffffffffffff59}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000005c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000640)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000680)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 629.914358ms ago: executing program 6 (id=1757): syz_emit_vhci(&(0x7f0000000f40)=ANY=[@ANYBLOB="02c82028002400010007d304"], 0x2d) syz_emit_vhci(&(0x7f00000067c0)=ANY=[@ANYBLOB="02c82028002400010007d3040007c4faff020c04000300"], 0x2d) 450.275732ms ago: executing program 7 (id=1758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001400)={'#! ', './cgroup', [{0x20, '/dev/kvm\x00'}, {0x20, '[*'}, {0x20, '/dev/nullb0\x00'}, {}, {0x20, 'discard'}, {}], 0xa, "ca2648eb59bc79d8567f85be25743e1642dabba71f4416e1089f5a581c4f1804ac944e5a20c193380fe8b423c30d63164bfd54761088bd852a07b2de7fc9f5efd7a398cfa8e128ac77f8418ecb5e8b0348c1bee358d289751f7d21a1d314b81a6e6c26019998a2fcb46df512607df773c72b18b03692062f1641972b6d162990257fbc5810d8d276b90539b55813b275d582c190636d4f263a05a67d5d469a0d27238f00db4f8b9117e1eb1d48809885e01a6884977fd55cba861faed322575bda2b3f20f041a3d505e05029abea95d5d7"}, 0x101) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 369.969972ms ago: executing program 7 (id=1759): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000240), 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r5, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 30.099492ms ago: executing program 6 (id=1760): socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x800040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r0, &(0x7f0000000600)='off', 0x3) write(r0, &(0x7f0000000640)='on', 0x2) 0s ago: executing program 5 (id=1768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d40), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000e40)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000fc0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f00000011c0)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): 636] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.789399][ T8636] bridge_slave_1: entered allmulticast mode [ 290.790102][ T8636] bridge_slave_1: entered promiscuous mode [ 290.826942][ T8636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.829469][ T8636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.849439][ T5812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.882591][ T8636] team0: Port device team_slave_0 added [ 290.888662][ T8636] team0: Port device team_slave_1 added [ 290.919610][ T8636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.919626][ T8636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.919647][ T8636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.922591][ T8636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.922605][ T8636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.922625][ T8636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.956861][ T8636] hsr_slave_0: entered promiscuous mode [ 290.957625][ T8636] hsr_slave_1: entered promiscuous mode [ 290.958135][ T8636] debugfs: 'hsr0' already exists in 'hsr' [ 290.958150][ T8636] Cannot create hsr debugfs directory [ 291.118403][ T8695] FAULT_INJECTION: forcing a failure. [ 291.118403][ T8695] name failslab, interval 1, probability 0, space 0, times 1 [ 291.118423][ T8695] CPU: 2 UID: 0 PID: 8695 Comm: syz.1.644 Not tainted syzkaller #0 PREEMPT(full) [ 291.118436][ T8695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 291.118442][ T8695] Call Trace: [ 291.118447][ T8695] [ 291.118452][ T8695] dump_stack_lvl+0x100/0x190 [ 291.118473][ T8695] should_fail_ex.cold+0x5/0xa [ 291.118488][ T8695] should_failslab+0xc2/0x120 [ 291.118507][ T8695] __kmalloc_noprof+0xfc/0x840 [ 291.118524][ T8695] ? asymmetric_key_generate_id+0x7e/0x180 [ 291.118542][ T8695] asymmetric_key_generate_id+0x7e/0x180 [ 291.118560][ T8695] x509_akid_note_kid+0x100/0x260 [ 291.118579][ T8695] asn1_ber_decoder+0x12b3/0x2170 [ 291.118600][ T8695] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 291.118619][ T8695] ? kasan_save_track+0x14/0x30 [ 291.118635][ T8695] ? __kasan_kmalloc+0xaa/0xb0 [ 291.118651][ T8695] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 291.118664][ T8695] ? x509_cert_parse+0x162/0x910 [ 291.118691][ T8695] x509_cert_parse+0x24b/0x910 [ 291.118710][ T8695] x509_key_preparse+0x65/0x9c0 [ 291.118731][ T8695] asymmetric_key_preparse+0xce/0x1d0 [ 291.118746][ T8695] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 291.118762][ T8695] __key_create_or_update+0x413/0xe30 [ 291.118780][ T8695] ? __pfx___key_create_or_update+0x10/0x10 [ 291.118797][ T8695] ? lookup_user_key+0x3f3/0x1300 [ 291.118817][ T8695] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 291.118835][ T8695] key_create_or_update+0x42/0x60 [ 291.118852][ T8695] __do_sys_add_key+0x2e8/0x460 [ 291.118870][ T8695] ? __pfx___do_sys_add_key+0x10/0x10 [ 291.118893][ T8695] __do_fast_syscall_32+0x13a/0x8b0 [ 291.118907][ T8695] do_fast_syscall_32+0x32/0x70 [ 291.118919][ T8695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.118933][ T8695] RIP: 0023:0xf742efec [ 291.118946][ T8695] Code: Unable to access opcode bytes at 0xf742efc2. [ 291.118952][ T8695] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 291.118964][ T8695] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 291.118971][ T8695] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 291.118978][ T8695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.118985][ T8695] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 291.118992][ T8695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.119006][ T8695] [ 291.119011][ T8695] X.509: Couldn't decode AuthKeyIdentifier [ 291.167641][ T8639] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.167733][ T8639] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.167794][ T8639] bridge_slave_0: entered allmulticast mode [ 291.168580][ T8639] bridge_slave_0: entered promiscuous mode [ 291.174809][ T8699] binder: 8698:8699 ioctl 4018620d 0 returned -22 [ 291.177912][ T8639] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.177978][ T8639] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.178040][ T8639] bridge_slave_1: entered allmulticast mode [ 291.178792][ T8639] bridge_slave_1: entered promiscuous mode [ 291.208929][ T5812] bridge_slave_1: left allmulticast mode [ 291.208959][ T5812] bridge_slave_1: left promiscuous mode [ 291.209550][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.224903][ T5812] bridge_slave_0: left allmulticast mode [ 291.224925][ T5812] bridge_slave_0: left promiscuous mode [ 291.225208][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.363154][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.374698][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.379756][ T5812] bond0 (unregistering): Released all slaves [ 291.393121][ T8639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.394620][ T8639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.453674][ T8710] FAULT_INJECTION: forcing a failure. [ 291.453674][ T8710] name failslab, interval 1, probability 0, space 0, times 0 [ 291.453705][ T8710] CPU: 3 UID: 0 PID: 8710 Comm: syz.0.651 Not tainted syzkaller #0 PREEMPT(full) [ 291.453727][ T8710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 291.453739][ T8710] Call Trace: [ 291.453747][ T8710] [ 291.453755][ T8710] dump_stack_lvl+0x100/0x190 [ 291.453788][ T8710] should_fail_ex.cold+0x5/0xa [ 291.453816][ T8710] should_failslab+0xc2/0x120 [ 291.453848][ T8710] __kmalloc_node_noprof+0xff/0x880 [ 291.453877][ T8710] ? crypto_create_tfm_node+0x8d/0x3b0 [ 291.453908][ T8710] crypto_create_tfm_node+0x8d/0x3b0 [ 291.453959][ T8710] crypto_alloc_tfm_node+0x102/0x260 [ 291.453991][ T8710] x509_get_sig_params+0x2bb/0x6c0 [ 291.454022][ T8710] ? __asan_memcpy+0x3c/0x60 [ 291.454049][ T8710] x509_cert_parse+0x4e9/0x910 [ 291.454081][ T8710] x509_key_preparse+0x65/0x9c0 [ 291.454116][ T8710] asymmetric_key_preparse+0xce/0x1d0 [ 291.454141][ T8710] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 291.454165][ T8710] __key_create_or_update+0x413/0xe30 [ 291.454195][ T8710] ? __pfx___key_create_or_update+0x10/0x10 [ 291.454222][ T8710] ? lookup_user_key+0x3f3/0x1300 [ 291.454257][ T8710] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 291.454286][ T8710] key_create_or_update+0x42/0x60 [ 291.454313][ T8710] __do_sys_add_key+0x2e8/0x460 [ 291.454342][ T8710] ? __pfx___do_sys_add_key+0x10/0x10 [ 291.454378][ T8710] __do_fast_syscall_32+0x13a/0x8b0 [ 291.454403][ T8710] do_fast_syscall_32+0x32/0x70 [ 291.454425][ T8710] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.454451][ T8710] RIP: 0023:0xf7f55fec [ 291.454472][ T8710] Code: Unable to access opcode bytes at 0xf7f55fc2. [ 291.454480][ T8710] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 291.454499][ T8710] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 291.454511][ T8710] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 291.454523][ T8710] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.454534][ T8710] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 291.454545][ T8710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.454572][ T8710] [ 291.487745][ T8639] team0: Port device team_slave_0 added [ 291.538460][ T8639] team0: Port device team_slave_1 added [ 291.570210][ T8714] binder_alloc: 8713: binder_alloc_buf, no vma [ 291.603757][ T8639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.603769][ T8639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.603782][ T8639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.643706][ T8639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.643721][ T8639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.643742][ T8639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.769734][ T8639] hsr_slave_0: entered promiscuous mode [ 291.770611][ T8639] hsr_slave_1: entered promiscuous mode [ 291.771182][ T8639] debugfs: 'hsr0' already exists in 'hsr' [ 291.771200][ T8639] Cannot create hsr debugfs directory [ 291.793973][ T8636] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 291.805342][ T8636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 291.806031][ T8636] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 291.812734][ T8636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 291.816744][ T8636] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 291.839814][ T8636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 291.840562][ T8636] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 291.853636][ T8636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 291.903298][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 292.093876][ T5812] hsr_slave_0: left promiscuous mode [ 292.094991][ T5812] hsr_slave_1: left promiscuous mode [ 292.095469][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.095487][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.096541][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.096551][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.122442][ T5812] veth1_macvtap: left promiscuous mode [ 292.122528][ T5812] veth0_macvtap: left promiscuous mode [ 292.122670][ T5812] veth1_vlan: left promiscuous mode [ 292.123667][ T5812] veth0_vlan: left promiscuous mode [ 292.331864][ T5740] Bluetooth: hci0: command tx timeout [ 292.363152][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 292.384673][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 292.409483][ T5740] Bluetooth: hci3: command tx timeout [ 292.481151][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3 [ 292.542175][ T8639] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 292.547341][ T8639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 292.550113][ T8636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.550296][ T8639] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 292.552635][ T8639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 292.560929][ T8639] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 292.567291][ T8639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 292.571869][ T8639] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 292.577278][ T8639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 292.600655][ T8636] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.612262][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.612307][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.654401][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.654490][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.790423][ T8639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.795841][ T5454] 8021q: adding VLAN 0 to HW filter on device eth4 [ 292.807099][ T8639] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.812860][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.812946][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.822895][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.822940][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.935423][ T5812] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.032368][ T5454] 8021q: adding VLAN 0 to HW filter on device eth5 [ 293.100141][ T5812] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.205852][ T5812] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.232667][ T8636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.286273][ T5812] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.372094][ T8639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.437002][ T5812] bridge_slave_1: left allmulticast mode [ 293.437019][ T5812] bridge_slave_1: left promiscuous mode [ 293.437125][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.454748][ T5812] bridge_slave_0: left allmulticast mode [ 293.454765][ T5812] bridge_slave_0: left promiscuous mode [ 293.455815][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.654331][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.658671][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.662454][ T5812] bond0 (unregistering): Released all slaves [ 293.677943][ T5454] 8021q: adding VLAN 0 to HW filter on device eth6 [ 293.726865][ T8636] veth0_vlan: entered promiscuous mode [ 293.757423][ T8636] veth1_vlan: entered promiscuous mode [ 293.813482][ T8636] veth0_macvtap: entered promiscuous mode [ 293.834038][ T8636] veth1_macvtap: entered promiscuous mode [ 293.862954][ T8639] veth0_vlan: entered promiscuous mode [ 293.873577][ T8639] veth1_vlan: entered promiscuous mode [ 293.899716][ T8636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.913797][ T8636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.962305][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.962342][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.962360][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.962386][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.993855][ T8639] veth0_macvtap: entered promiscuous mode [ 294.017158][ T8639] veth1_macvtap: entered promiscuous mode [ 294.035559][ T554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.035578][ T554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.078782][ T8639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.132633][ T8639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.142780][ T5454] 8021q: adding VLAN 0 to HW filter on device eth7 [ 294.145572][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.145587][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.167179][ T5827] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.167540][ T5827] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.167569][ T5827] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.167596][ T5827] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.300816][ T5812] hsr_slave_0: left promiscuous mode [ 294.301497][ T5812] hsr_slave_1: left promiscuous mode [ 294.302201][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.302217][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.305968][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.305984][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.332773][ T5812] veth1_macvtap: left promiscuous mode [ 294.332841][ T5812] veth0_macvtap: left promiscuous mode [ 294.332983][ T5812] veth1_vlan: left promiscuous mode [ 294.333078][ T5812] veth0_vlan: left promiscuous mode [ 294.351516][ T5740] Bluetooth: hci0: command tx timeout [ 294.429580][ T5740] Bluetooth: hci3: command tx timeout [ 294.640566][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 294.650048][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 294.720756][ T554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.720776][ T554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.722475][ T5454] 8021q: adding VLAN 0 to HW filter on device eth8 [ 294.788201][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.788219][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.052514][ T5454] 8021q: adding VLAN 0 to HW filter on device eth9 [ 296.377945][ T5740] Bluetooth: hci0: command tx timeout [ 296.444209][ T8862] binder: 8861:8862 ioctl c0306201 0 returned -14 [ 296.456658][ T5740] Bluetooth: hci3: command tx timeout [ 297.082388][ T8883] syz.0.676: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 297.082586][ T8883] CPU: 3 UID: 0 PID: 8883 Comm: syz.0.676 Not tainted syzkaller #0 PREEMPT(full) [ 297.082609][ T8883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.082621][ T8883] Call Trace: [ 297.082628][ T8883] [ 297.082636][ T8883] dump_stack_lvl+0x100/0x190 [ 297.082720][ T8883] warn_alloc.cold+0x9e/0xb2 [ 297.082743][ T8883] ? __pfx_warn_alloc+0x10/0x10 [ 297.082799][ T8883] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 297.082846][ T8883] ? __pfx_get_page_from_freelist+0x10/0x10 [ 297.082879][ T8883] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 297.082934][ T8883] ? do_raw_spin_lock+0x128/0x260 [ 297.082960][ T8883] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 297.082989][ T8883] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 297.083022][ T8883] ? lockdep_hardirqs_on+0x7d/0x110 [ 297.083051][ T8883] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 297.083082][ T8883] ? stack_depot_save_flags+0x49a/0x9f0 [ 297.083115][ T8883] ? comedi_isadma_alloc+0xc6/0x620 [ 297.083163][ T8883] ? pcl816_attach+0x909/0xb30 [ 297.083192][ T8883] ? comedi_device_attach+0x40e/0x6b0 [ 297.083220][ T8883] ? do_devconfig_ioctl+0x1b3/0x6d0 [ 297.083239][ T8883] ? comedi_unlocked_ioctl+0x860/0x3310 [ 297.083278][ T8883] alloc_pages_node_noprof+0x93/0x200 [ 297.083303][ T8883] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 297.083336][ T8883] __dma_direct_alloc_pages.isra.0+0x35e/0x540 [ 297.083367][ T8883] dma_direct_alloc+0x104/0x8a0 [ 297.083395][ T8883] dma_alloc_attrs+0x1b9/0x3e0 [ 297.083419][ T8883] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 297.083441][ T8883] ? __kmalloc_noprof+0x350/0x840 [ 297.083466][ T8883] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 297.083492][ T8883] ? dma_direct_supported+0xca/0x220 [ 297.083523][ T8883] comedi_isadma_alloc+0x331/0x620 [ 297.083550][ T8883] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 297.083574][ T8883] ? request_threaded_irq+0x27b/0x3e0 [ 297.083608][ T8883] pcl816_attach+0x909/0xb30 [ 297.083641][ T8883] comedi_device_attach+0x40e/0x6b0 [ 297.083677][ T8883] do_devconfig_ioctl+0x1b3/0x6d0 [ 297.083694][ T8883] ? comedi_unlocked_ioctl+0x180/0x3310 [ 297.083719][ T8883] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 297.083752][ T8883] ? tomoyo_path_number_perm+0x46d/0x580 [ 297.083775][ T8883] ? kasan_save_stack+0x3f/0x50 [ 297.083799][ T8883] ? kasan_save_stack+0x30/0x50 [ 297.083822][ T8883] ? kasan_save_track+0x14/0x30 [ 297.083846][ T8883] ? kasan_save_free_info+0x3b/0x70 [ 297.083867][ T8883] comedi_unlocked_ioctl+0x860/0x3310 [ 297.083886][ T8883] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 297.083912][ T8883] ? kasan_quarantine_put+0x104/0x240 [ 297.083927][ T8883] ? lockdep_hardirqs_on+0x7d/0x110 [ 297.083951][ T8883] ? find_held_lock+0x2b/0x80 [ 297.083972][ T8883] ? tomoyo_path_number_perm+0x28f/0x580 [ 297.084001][ T8883] ? tomoyo_path_number_perm+0x28f/0x580 [ 297.084028][ T8883] ? tomoyo_path_number_perm+0x188/0x580 [ 297.084049][ T8883] comedi_compat_ioctl+0x438/0xe20 [ 297.084065][ T8883] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 297.084081][ T8883] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.084100][ T8883] ? do_vfs_ioctl+0x226/0x13e0 [ 297.084115][ T8883] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 297.084131][ T8883] ? __fget_files+0x34/0x3d0 [ 297.084148][ T8883] ? find_held_lock+0x2b/0x80 [ 297.084161][ T8883] ? __fget_files+0x215/0x3d0 [ 297.084175][ T8883] ? hook_file_ioctl_common+0x140/0x440 [ 297.084192][ T8883] ? __fget_files+0x21f/0x3d0 [ 297.084210][ T8883] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 297.084225][ T8883] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 297.084240][ T8883] __do_fast_syscall_32+0x13a/0x8b0 [ 297.084254][ T8883] do_fast_syscall_32+0x32/0x70 [ 297.084266][ T8883] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.084281][ T8883] RIP: 0023:0xf7f55fec [ 297.084295][ T8883] Code: Unable to access opcode bytes at 0xf7f55fc2. [ 297.084300][ T8883] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 297.084311][ T8883] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 297.084319][ T8883] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.084326][ T8883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.084333][ T8883] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 297.084340][ T8883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.084355][ T8883] [ 297.084475][ T8883] Mem-Info: [ 297.084484][ T8883] active_anon:4431 inactive_anon:404 isolated_anon:0 [ 297.084484][ T8883] active_file:2221 inactive_file:12892 isolated_file:0 [ 297.084484][ T8883] unevictable:1000 dirty:317 writeback:0 [ 297.084484][ T8883] slab_reclaimable:6771 slab_unreclaimable:83679 [ 297.084484][ T8883] mapped:26397 shmem:3898 pagetables:1372 [ 297.084484][ T8883] sec_pagetables:299 bounce:0 [ 297.084484][ T8883] kernel_misc_reclaimable:0 [ 297.084484][ T8883] free:25857 free_pcp:0 free_cma:0 [ 297.084531][ T8883] Node 0 active_anon:12kB inactive_anon:0kB active_file:76kB inactive_file:4904kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:4kB writeback:0kB shmem:2012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8352kB pagetables:1456kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 297.084573][ T8883] Node 0 DMA free:2516kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:120kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 297.084623][ T8883] lowmem_reserve[]: 0 259 259 259 259 [ 297.084656][ T8883] Node 0 DMA: 161*4kB (UE) 11*8kB (UE) 5*16kB (UE) 26*32kB (UE) 8*64kB (UE) 3*128kB (UE) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2540kB [ 297.084774][ T8883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.084787][ T8883] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 297.084800][ T8883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.084813][ T8883] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 297.084827][ T8883] 19353 total pagecache pages [ 297.084833][ T8883] 343 pages in swap cache [ 297.084839][ T8883] Free swap = 105332kB [ 297.084846][ T8883] Total swap = 124996kB [ 297.084853][ T8883] 524155 pages RAM [ 297.084859][ T8883] 0 pages HighMem/MovableOnly [ 297.084865][ T8883] 216924 pages reserved [ 297.084871][ T8883] 0 pages cma reserved [ 297.371906][ T8893] binder: 8892:8893 ioctl c0306201 0 returned -14 [ 297.595895][ T8917] overlayfs: failed to resolve './file0': -2 [ 298.410733][ T5740] Bluetooth: hci0: command tx timeout [ 298.488989][ T5740] Bluetooth: hci3: command tx timeout [ 298.792443][ T8963] FAULT_INJECTION: forcing a failure. [ 298.792443][ T8963] name failslab, interval 1, probability 0, space 0, times 0 [ 298.792477][ T8963] CPU: 0 UID: 0 PID: 8963 Comm: syz.0.713 Not tainted syzkaller #0 PREEMPT(full) [ 298.792500][ T8963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.792512][ T8963] Call Trace: [ 298.792519][ T8963] [ 298.792528][ T8963] dump_stack_lvl+0x100/0x190 [ 298.792561][ T8963] should_fail_ex.cold+0x5/0xa [ 298.792589][ T8963] should_failslab+0xc2/0x120 [ 298.792622][ T8963] kmem_cache_alloc_noprof+0x92/0x6a0 [ 298.792652][ T8963] ? do_getname+0x35/0x390 [ 298.792676][ T8963] do_getname+0x35/0x390 [ 298.792698][ T8963] do_sys_openat2+0xc7/0x1e0 [ 298.792718][ T8963] ? __pfx_do_sys_openat2+0x10/0x10 [ 298.792739][ T8963] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 298.792767][ T8963] __ia32_compat_sys_openat+0x12d/0x210 [ 298.792790][ T8963] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 298.792823][ T8963] __do_fast_syscall_32+0x13a/0x8b0 [ 298.792847][ T8963] do_fast_syscall_32+0x32/0x70 [ 298.792868][ T8963] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.792892][ T8963] RIP: 0023:0xf7f55fec [ 298.792913][ T8963] Code: Unable to access opcode bytes at 0xf7f55fc2. [ 298.792921][ T8963] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 298.792941][ T8963] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 298.792954][ T8963] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.792965][ T8963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.792976][ T8963] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 298.792987][ T8963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.793013][ T8963] [ 299.414975][ T8998] FAULT_INJECTION: forcing a failure. [ 299.414975][ T8998] name failslab, interval 1, probability 0, space 0, times 0 [ 299.414995][ T8998] CPU: 1 UID: 0 PID: 8998 Comm: syz.5.727 Not tainted syzkaller #0 PREEMPT(full) [ 299.415014][ T8998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.415024][ T8998] Call Trace: [ 299.415029][ T8998] [ 299.415036][ T8998] dump_stack_lvl+0x100/0x190 [ 299.415067][ T8998] should_fail_ex.cold+0x5/0xa [ 299.415094][ T8998] should_failslab+0xc2/0x120 [ 299.415117][ T8998] kmem_cache_alloc_noprof+0x92/0x6a0 [ 299.415134][ T8998] ? do_getname+0x35/0x390 [ 299.415148][ T8998] do_getname+0x35/0x390 [ 299.415162][ T8998] do_sys_openat2+0xc7/0x1e0 [ 299.415174][ T8998] ? __pfx_do_sys_openat2+0x10/0x10 [ 299.415188][ T8998] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 299.415203][ T8998] __ia32_compat_sys_openat+0x12d/0x210 [ 299.415216][ T8998] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 299.415228][ T8998] ? ksys_write+0x1ac/0x250 [ 299.415247][ T8998] __do_fast_syscall_32+0x13a/0x8b0 [ 299.415260][ T8998] do_fast_syscall_32+0x32/0x70 [ 299.415272][ T8998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.415287][ T8998] RIP: 0023:0xf744efec [ 299.415300][ T8998] Code: Unable to access opcode bytes at 0xf744efc2. [ 299.415305][ T8998] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 299.415316][ T8998] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 299.415324][ T8998] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.415330][ T8998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.415336][ T8998] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 299.415342][ T8998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.415356][ T8998] [ 299.822996][ T9011] FAULT_INJECTION: forcing a failure. [ 299.822996][ T9011] name failslab, interval 1, probability 0, space 0, times 0 [ 299.823017][ T9011] CPU: 0 UID: 0 PID: 9011 Comm: syz.0.733 Not tainted syzkaller #0 PREEMPT(full) [ 299.823030][ T9011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.823036][ T9011] Call Trace: [ 299.823041][ T9011] [ 299.823045][ T9011] dump_stack_lvl+0x100/0x190 [ 299.823065][ T9011] should_fail_ex.cold+0x5/0xa [ 299.823081][ T9011] should_failslab+0xc2/0x120 [ 299.823101][ T9011] kmem_cache_alloc_noprof+0x92/0x6a0 [ 299.823117][ T9011] ? do_getname+0x35/0x390 [ 299.823131][ T9011] do_getname+0x35/0x390 [ 299.823149][ T9011] do_sys_openat2+0xc7/0x1e0 [ 299.823161][ T9011] ? __pfx_do_sys_openat2+0x10/0x10 [ 299.823173][ T9011] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 299.823190][ T9011] __ia32_compat_sys_openat+0x12d/0x210 [ 299.823203][ T9011] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 299.823216][ T9011] ? ksys_write+0x1ac/0x250 [ 299.823235][ T9011] __do_fast_syscall_32+0x13a/0x8b0 [ 299.823250][ T9011] do_fast_syscall_32+0x32/0x70 [ 299.823262][ T9011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.823276][ T9011] RIP: 0023:0xf7f55fec [ 299.823289][ T9011] Code: Unable to access opcode bytes at 0xf7f55fc2. [ 299.823295][ T9011] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 299.823306][ T9011] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 299.823313][ T9011] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.823320][ T9011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.823326][ T9011] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 299.823333][ T9011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.823346][ T9011] [ 300.115438][ T9020] overlayfs: missing 'lowerdir' [ 300.328002][ T9027] jffs2: notice: (9027) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 300.849872][ T9052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.751'. [ 300.849911][ T9052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.751'. [ 300.849919][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 300.871934][ T9056] FAULT_INJECTION: forcing a failure. [ 300.871934][ T9056] name failslab, interval 1, probability 0, space 0, times 0 [ 300.871965][ T9056] CPU: 0 UID: 0 PID: 9056 Comm: syz.0.752 Not tainted syzkaller #0 PREEMPT(full) [ 300.871990][ T9056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 300.872001][ T9056] Call Trace: [ 300.872008][ T9056] [ 300.872016][ T9056] dump_stack_lvl+0x100/0x190 [ 300.872049][ T9056] should_fail_ex.cold+0x5/0xa [ 300.872085][ T9056] should_failslab+0xc2/0x120 [ 300.872118][ T9056] __kmalloc_cache_noprof+0x91/0x6d0 [ 300.872142][ T9056] ? alloc_netdev_mqs+0xea8/0x15c0 [ 300.872172][ T9056] alloc_netdev_mqs+0xea8/0x15c0 [ 300.872202][ T9056] __tun_chr_ioctl+0x197b/0x4880 [ 300.872223][ T9056] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 300.872250][ T9056] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 300.872270][ T9056] ? __fget_files+0x34/0x3d0 [ 300.872298][ T9056] ? hook_file_ioctl_common+0x140/0x440 [ 300.872329][ T9056] ? __fget_files+0x21f/0x3d0 [ 300.872359][ T9056] ? __pfx_tun_chr_compat_ioctl+0x10/0x10 [ 300.872383][ T9056] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 300.872442][ T9056] __do_fast_syscall_32+0x13a/0x8b0 [ 300.872467][ T9056] do_fast_syscall_32+0x32/0x70 [ 300.872489][ T9056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.872512][ T9056] RIP: 0023:0xf7f55fec [ 300.872534][ T9056] Code: Unable to access opcode bytes at 0xf7f55fc2. [ 300.872543][ T9056] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 300.872564][ T9056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400454ca [ 300.872577][ T9056] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 300.872588][ T9056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 300.872599][ T9056] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 300.872610][ T9056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 300.872635][ T9056] [ 301.315588][ T9083] syzkaller0: entered promiscuous mode [ 301.315603][ T9083] syzkaller0: entered allmulticast mode [ 301.710063][ T9094] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 301.710080][ T9094] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 301.710094][ T9094] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 301.907817][ T9111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.774'. [ 301.907844][ T9111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.774'. [ 301.907902][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.774'. [ 302.690895][ T9130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.782'. [ 302.690919][ T9130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.782'. [ 302.690932][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 303.676323][ T9221] kvm: pic: non byte read [ 303.677257][ T9221] kvm: pic: non byte read [ 303.678603][ T9221] kvm: pic: non byte read [ 303.679501][ T9221] kvm: pic: non byte read [ 303.680662][ T9221] kvm: pic: non byte read [ 303.681778][ T9221] kvm: pic: non byte read [ 303.682858][ T9221] kvm: pic: non byte read [ 303.685585][ T9221] kvm: pic: non byte read [ 303.686806][ T9221] kvm: pic: non byte read [ 303.687997][ T9221] kvm: pic: non byte read [ 303.734627][ T9227] syzkaller0: entered promiscuous mode [ 303.734649][ T9227] syzkaller0: entered allmulticast mode [ 304.773933][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802582f400: rx timeout, send abort [ 304.775541][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88802582f400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 304.890402][ T9259] jffs2: notice: (9259) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 305.380580][ T9297] syzkaller0: entered promiscuous mode [ 305.380593][ T9297] syzkaller0: entered allmulticast mode [ 306.053528][ T5740] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 306.053544][ T5740] CPU: 1 UID: 0 PID: 5740 Comm: kworker/u34:3 Not tainted syzkaller #0 PREEMPT(full) [ 306.053558][ T5740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 306.053566][ T5740] Workqueue: hci1 hci_rx_work [ 306.053587][ T5740] Call Trace: [ 306.053591][ T5740] [ 306.053596][ T5740] dump_stack_lvl+0x100/0x190 [ 306.053614][ T5740] sysfs_warn_dup.cold+0x1c/0x28 [ 306.053633][ T5740] sysfs_create_dir_ns+0x24b/0x2b0 [ 306.053650][ T5740] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 306.053666][ T5740] ? find_held_lock+0x2b/0x80 [ 306.053680][ T5740] ? kobject_add_internal+0x25f/0x930 [ 306.053700][ T5740] ? kobject_add_internal+0x25f/0x930 [ 306.053724][ T5740] ? do_raw_spin_unlock+0x145/0x1e0 [ 306.053748][ T5740] kobject_add_internal+0x2c8/0x930 [ 306.053776][ T5740] kobject_add+0x16a/0x1e0 [ 306.053801][ T5740] ? __pfx_kobject_add+0x10/0x10 [ 306.053823][ T5740] ? class_to_subsys+0x10f/0x150 [ 306.053845][ T5740] ? kobject_put+0xb9/0x640 [ 306.053858][ T5740] ? _raw_spin_unlock+0x28/0x50 [ 306.053879][ T5740] device_add+0x294/0x1970 [ 306.053894][ T5740] ? __pfx_dev_set_name+0x10/0x10 [ 306.053912][ T5740] ? __pfx_device_add+0x10/0x10 [ 306.053929][ T5740] ? mgmt_send_event_skb+0x2fb/0x460 [ 306.053949][ T5740] hci_conn_add_sysfs+0x1a3/0x260 [ 306.053967][ T5740] le_conn_complete_evt+0x122f/0x2130 [ 306.053985][ T5740] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 306.053999][ T5740] ? hci_event_packet+0x186/0xcd0 [ 306.054017][ T5740] hci_le_conn_complete_evt+0x23c/0x3a0 [ 306.054033][ T5740] ? skb_pull_data+0x15f/0x1e0 [ 306.054051][ T5740] hci_le_meta_evt+0x34a/0x5f0 [ 306.054074][ T5740] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 306.054093][ T5740] hci_event_packet+0x51c/0xcd0 [ 306.054108][ T5740] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 306.054125][ T5740] ? __pfx_hci_event_packet+0x10/0x10 [ 306.054144][ T5740] ? lockdep_hardirqs_on+0x7d/0x110 [ 306.054165][ T5740] hci_rx_work+0x451/0xfc0 [ 306.054182][ T5740] process_one_work+0xac7/0x1b10 [ 306.054205][ T5740] ? __pfx_process_one_work+0x10/0x10 [ 306.054222][ T5740] ? lock_acquire+0x1d1/0x380 [ 306.054243][ T5740] ? __pfx_hci_rx_work+0x10/0x10 [ 306.054258][ T5740] worker_thread+0x5ef/0xe50 [ 306.054278][ T5740] ? kthread+0x13a/0x450 [ 306.054289][ T5740] ? __pfx_worker_thread+0x10/0x10 [ 306.054303][ T5740] kthread+0x373/0x450 [ 306.054315][ T5740] ? __pfx_kthread+0x10/0x10 [ 306.054329][ T5740] ret_from_fork+0x730/0xd60 [ 306.054341][ T5740] ? __pfx_ret_from_fork+0x10/0x10 [ 306.054352][ T5740] ? native_load_gs_index+0x1e/0xc0 [ 306.054366][ T5740] ? __switch_to+0x800/0x10f0 [ 306.054381][ T5740] ? __pfx_kthread+0x10/0x10 [ 306.054395][ T5740] ret_from_fork_asm+0x1a/0x30 [ 306.054414][ T5740] [ 306.054427][ T5740] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 306.054446][ T5740] Bluetooth: hci1: failed to register connection device [ 306.594626][ T9322] syzkaller0: entered promiscuous mode [ 306.594641][ T9322] syzkaller0: entered allmulticast mode [ 307.757072][ T57] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 307.905528][ T57] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.906338][ T57] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.906359][ T57] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 307.907880][ T57] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.907903][ T57] usb 10-1: Product: syz [ 307.907910][ T57] usb 10-1: Manufacturer: syz [ 307.907917][ T57] usb 10-1: SerialNumber: syz [ 307.914176][ T57] cdc_mbim 10-1:1.0: skipping garbage [ 308.117228][ T9348] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 308.653288][ T9362] syzkaller0: entered promiscuous mode [ 308.653304][ T9362] syzkaller0: entered allmulticast mode [ 308.726998][ T9348] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 308.727290][ T57] cdc_mbim 10-1:1.0: setting tx_max = 16384 [ 308.748456][ T57] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device [ 308.764782][ T57] wwan wwan0: port wwan0mbim0 attached [ 309.500788][ T57] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, ca:95:3c:ea:75:14 [ 309.507231][ T57] usb 10-1: USB disconnect, device number 2 [ 309.509366][ T57] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 309.570175][ T57] wwan wwan0: port wwan0mbim0 disconnected [ 309.589256][ T9367] syzkaller0: entered promiscuous mode [ 309.589269][ T9367] syzkaller0: entered allmulticast mode [ 309.683168][ T554] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 309.688680][ T554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.688692][ T554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.751279][ T5740] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 309.751295][ T5740] CPU: 1 UID: 0 PID: 5740 Comm: kworker/u34:3 Not tainted syzkaller #0 PREEMPT(full) [ 309.751309][ T5740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 309.751317][ T5740] Workqueue: hci1 hci_rx_work [ 309.751336][ T5740] Call Trace: [ 309.751340][ T5740] [ 309.751345][ T5740] dump_stack_lvl+0x100/0x190 [ 309.751363][ T5740] sysfs_warn_dup.cold+0x1c/0x28 [ 309.751382][ T5740] sysfs_create_dir_ns+0x24b/0x2b0 [ 309.751399][ T5740] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 309.751416][ T5740] ? find_held_lock+0x2b/0x80 [ 309.751429][ T5740] ? kobject_add_internal+0x25f/0x930 [ 309.751444][ T5740] ? kobject_add_internal+0x25f/0x930 [ 309.751459][ T5740] ? do_raw_spin_unlock+0x145/0x1e0 [ 309.751472][ T5740] kobject_add_internal+0x2c8/0x930 [ 309.751489][ T5740] kobject_add+0x16a/0x1e0 [ 309.751503][ T5740] ? __pfx_kobject_add+0x10/0x10 [ 309.751517][ T5740] ? class_to_subsys+0x10f/0x150 [ 309.751535][ T5740] ? kobject_put+0xb9/0x640 [ 309.751546][ T5740] ? _raw_spin_unlock+0x28/0x50 [ 309.751568][ T5740] device_add+0x294/0x1970 [ 309.751583][ T5740] ? __pfx_dev_set_name+0x10/0x10 [ 309.751599][ T5740] ? __pfx_device_add+0x10/0x10 [ 309.751615][ T5740] ? mgmt_send_event_skb+0x2fb/0x460 [ 309.751635][ T5740] hci_conn_add_sysfs+0x1a3/0x260 [ 309.751652][ T5740] le_conn_complete_evt+0x122f/0x2130 [ 309.751671][ T5740] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 309.751686][ T5740] ? hci_event_packet+0x186/0xcd0 [ 309.751703][ T5740] hci_le_conn_complete_evt+0x23c/0x3a0 [ 309.751719][ T5740] ? skb_pull_data+0x15f/0x1e0 [ 309.751738][ T5740] hci_le_meta_evt+0x34a/0x5f0 [ 309.751754][ T5740] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 309.751771][ T5740] hci_event_packet+0x51c/0xcd0 [ 309.751786][ T5740] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 309.751802][ T5740] ? __pfx_hci_event_packet+0x10/0x10 [ 309.751819][ T5740] ? lockdep_hardirqs_on+0x7d/0x110 [ 309.751840][ T5740] hci_rx_work+0x451/0xfc0 [ 309.751856][ T5740] process_one_work+0xac7/0x1b10 [ 309.751878][ T5740] ? __pfx_process_one_work+0x10/0x10 [ 309.751893][ T5740] ? lock_acquire+0x1d1/0x380 [ 309.751913][ T5740] ? __pfx_hci_rx_work+0x10/0x10 [ 309.751929][ T5740] worker_thread+0x5ef/0xe50 [ 309.751949][ T5740] ? kthread+0x13a/0x450 [ 309.751960][ T5740] ? __pfx_worker_thread+0x10/0x10 [ 309.751974][ T5740] kthread+0x373/0x450 [ 309.751986][ T5740] ? __pfx_kthread+0x10/0x10 [ 309.752000][ T5740] ret_from_fork+0x730/0xd60 [ 309.752013][ T5740] ? __pfx_ret_from_fork+0x10/0x10 [ 309.752024][ T5740] ? native_load_gs_index+0x1e/0xc0 [ 309.752038][ T5740] ? __switch_to+0x800/0x10f0 [ 309.752053][ T5740] ? __pfx_kthread+0x10/0x10 [ 309.752074][ T5740] ret_from_fork_asm+0x1a/0x30 [ 309.752093][ T5740] [ 309.752106][ T5740] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 309.752124][ T5740] Bluetooth: hci1: failed to register connection device [ 310.095703][ T9388] syz.5.874 uses obsolete (PF_INET,SOCK_PACKET) [ 310.296297][ T9401] syzkaller0: entered promiscuous mode [ 310.296312][ T9401] syzkaller0: entered allmulticast mode [ 310.318673][ T9404] syzkaller0: entered promiscuous mode [ 310.318687][ T9404] syzkaller0: entered allmulticast mode [ 310.733873][ T57] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 310.882862][ T57] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.883764][ T57] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.883786][ T57] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 310.885504][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.885517][ T57] usb 5-1: Product: syz [ 310.885526][ T57] usb 5-1: Manufacturer: syz [ 310.885534][ T57] usb 5-1: SerialNumber: syz [ 310.890599][ T57] cdc_mbim 5-1:1.0: skipping garbage [ 311.093701][ T9422] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 311.694765][ T9422] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 311.695037][ T57] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 311.696618][ T57] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 311.699389][ T57] wwan wwan0: port wwan0mbim0 attached [ 311.705771][ T57] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 8e:19:5f:6b:6c:a7 [ 311.744129][ T5740] Bluetooth: hci1: command 0x0406 tx timeout [ 311.897073][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 311.897121][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 311.898303][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 311.898322][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 311.898432][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 311.898442][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 311.898610][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 311.898619][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 311.899243][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 311.899262][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 311.899466][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 311.899476][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 311.899651][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 311.899661][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 311.900385][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 311.900396][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 311.900574][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 311.900587][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 311.900763][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 311.900773][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 311.906650][ T5454] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 312.100116][ T909] usb 5-1: USB disconnect, device number 3 [ 312.105490][ T909] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 312.175690][ T909] wwan wwan0: port wwan0mbim0 disconnected [ 312.443322][ T5099] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 312.443338][ T5099] CPU: 1 UID: 0 PID: 5099 Comm: kworker/u34:1 Not tainted syzkaller #0 PREEMPT(full) [ 312.443353][ T5099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 312.443361][ T5099] Workqueue: hci3 hci_rx_work [ 312.443380][ T5099] Call Trace: [ 312.443384][ T5099] [ 312.443389][ T5099] dump_stack_lvl+0x100/0x190 [ 312.443408][ T5099] sysfs_warn_dup.cold+0x1c/0x28 [ 312.443426][ T5099] sysfs_create_dir_ns+0x24b/0x2b0 [ 312.443443][ T5099] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 312.443459][ T5099] ? find_held_lock+0x2b/0x80 [ 312.443473][ T5099] ? kobject_add_internal+0x25f/0x930 [ 312.443488][ T5099] ? kobject_add_internal+0x25f/0x930 [ 312.443503][ T5099] ? do_raw_spin_unlock+0x145/0x1e0 [ 312.443516][ T5099] kobject_add_internal+0x2c8/0x930 [ 312.443533][ T5099] kobject_add+0x16a/0x1e0 [ 312.443554][ T5099] ? __pfx_kobject_add+0x10/0x10 [ 312.443569][ T5099] ? class_to_subsys+0x10f/0x150 [ 312.443588][ T5099] ? kobject_put+0xb9/0x640 [ 312.443601][ T5099] ? _raw_spin_unlock+0x28/0x50 [ 312.443622][ T5099] device_add+0x294/0x1970 [ 312.443638][ T5099] ? __pfx_dev_set_name+0x10/0x10 [ 312.443655][ T5099] ? __pfx_device_add+0x10/0x10 [ 312.443670][ T5099] ? mgmt_send_event_skb+0x2fb/0x460 [ 312.443690][ T5099] hci_conn_add_sysfs+0x1a3/0x260 [ 312.443709][ T5099] le_conn_complete_evt+0x122f/0x2130 [ 312.443728][ T5099] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 312.443742][ T5099] ? hci_event_packet+0x186/0xcd0 [ 312.443759][ T5099] hci_le_conn_complete_evt+0x23c/0x3a0 [ 312.443774][ T5099] ? skb_pull_data+0x15f/0x1e0 [ 312.443793][ T5099] hci_le_meta_evt+0x34a/0x5f0 [ 312.443809][ T5099] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 312.443826][ T5099] hci_event_packet+0x51c/0xcd0 [ 312.443841][ T5099] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 312.443857][ T5099] ? __pfx_hci_event_packet+0x10/0x10 [ 312.443874][ T5099] ? lockdep_hardirqs_on+0x7d/0x110 [ 312.443895][ T5099] hci_rx_work+0x451/0xfc0 [ 312.443911][ T5099] process_one_work+0xac7/0x1b10 [ 312.443932][ T5099] ? __pfx_process_one_work+0x10/0x10 [ 312.443947][ T5099] ? lock_acquire+0x1d1/0x380 [ 312.443967][ T5099] ? __pfx_hci_rx_work+0x10/0x10 [ 312.443982][ T5099] worker_thread+0x5ef/0xe50 [ 312.444001][ T5099] ? __pfx_worker_thread+0x10/0x10 [ 312.444015][ T5099] ? kthread+0x13a/0x450 [ 312.444028][ T5099] ? __pfx_worker_thread+0x10/0x10 [ 312.444041][ T5099] kthread+0x373/0x450 [ 312.444053][ T5099] ? __pfx_kthread+0x10/0x10 [ 312.444067][ T5099] ret_from_fork+0x730/0xd60 [ 312.444079][ T5099] ? __pfx_ret_from_fork+0x10/0x10 [ 312.444091][ T5099] ? __switch_to+0x800/0x10f0 [ 312.444110][ T5099] ? __pfx_kthread+0x10/0x10 [ 312.444124][ T5099] ret_from_fork_asm+0x1a/0x30 [ 312.444142][ T5099] [ 312.444155][ T5099] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 312.444172][ T5099] Bluetooth: hci3: failed to register connection device [ 312.485107][ T66] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 312.490373][ T66] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 312.495330][ T66] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.496171][ T66] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 312.499808][ T66] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.730630][ T5827] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.813913][ T5827] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.875636][ T5827] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.906350][ T9470] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.906429][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.906484][ T9470] bridge_slave_0: entered allmulticast mode [ 312.907175][ T9470] bridge_slave_0: entered promiscuous mode [ 312.909840][ T9470] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.909901][ T9470] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.909953][ T9470] bridge_slave_1: entered allmulticast mode [ 312.910684][ T9470] bridge_slave_1: entered promiscuous mode [ 312.929695][ T9470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.945214][ T5827] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.952186][ T9470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.979036][ T9470] team0: Port device team_slave_0 added [ 312.981494][ T9470] team0: Port device team_slave_1 added [ 313.006523][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.006539][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.006559][ T9470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.009934][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.009950][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.009971][ T9470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.056110][ T9470] hsr_slave_0: entered promiscuous mode [ 313.056939][ T9470] hsr_slave_1: entered promiscuous mode [ 313.057539][ T9470] debugfs: 'hsr0' already exists in 'hsr' [ 313.057557][ T9470] Cannot create hsr debugfs directory [ 313.229900][ T5827] bridge_slave_1: left allmulticast mode [ 313.229917][ T5827] bridge_slave_1: left promiscuous mode [ 313.230022][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.241218][ T5827] bridge_slave_0: left allmulticast mode [ 313.241243][ T5827] bridge_slave_0: left promiscuous mode [ 313.241430][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.308519][ T9511] evm: overlay not supported [ 313.317927][ T9511] overlay: filesystem on ./file0 not supported as upperdir [ 313.378013][ T5827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.382719][ T5827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.383941][ T5827] bond0 (unregistering): Released all slaves [ 313.520787][ T9470] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 313.526323][ T9470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 313.571613][ T9470] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 313.575374][ T9470] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.577322][ T9470] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 313.588171][ T9470] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.588784][ T9470] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 313.593140][ T9470] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 313.683758][ T5827] hsr_slave_0: left promiscuous mode [ 313.687278][ T5827] hsr_slave_1: left promiscuous mode [ 313.687668][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.687679][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.701506][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.701520][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.715637][ T5827] veth1_macvtap: left promiscuous mode [ 313.715677][ T5827] veth0_macvtap: left promiscuous mode [ 313.715741][ T5827] veth1_vlan: left promiscuous mode [ 313.715771][ T5827] veth0_vlan: left promiscuous mode [ 313.795796][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 313.915059][ T5827] team0 (unregistering): Port device team_slave_1 removed [ 313.923908][ T5827] team0 (unregistering): Port device team_slave_0 removed [ 314.052860][ T5454] 8021q: adding VLAN 0 to HW filter on device eth10 [ 314.121432][ T9470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.135657][ T9470] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.138760][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.138841][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.144526][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.144604][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.327503][ T5454] 8021q: adding VLAN 0 to HW filter on device eth11 [ 314.430550][ T5740] Bluetooth: hci3: command 0x2016 tx timeout [ 314.464682][ T9470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.495851][ T5454] 8021q: adding VLAN 0 to HW filter on device eth12 [ 314.510084][ T5743] Bluetooth: hci4: command tx timeout [ 314.606843][ T9470] veth0_vlan: entered promiscuous mode [ 314.618183][ T9470] veth1_vlan: entered promiscuous mode [ 314.638898][ T5922] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 314.647316][ T9470] veth0_macvtap: entered promiscuous mode [ 314.653097][ T9470] veth1_macvtap: entered promiscuous mode [ 314.674340][ T9470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.679580][ T9470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.704647][ T5454] 8021q: adding VLAN 0 to HW filter on device eth13 [ 314.711867][ T5827] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.712321][ T5827] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.712385][ T5827] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.712413][ T5827] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.741795][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.741814][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.756483][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.756495][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.787667][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 314.788131][ T5922] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 314.788943][ T5922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.788955][ T5922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 314.788974][ T5922] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 314.788987][ T5922] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 314.789006][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.797403][ T5922] hub 5-1:1.0: bad descriptor, ignoring hub [ 314.797418][ T5922] hub 5-1:1.0: probe with driver hub failed with error -5 [ 314.802918][ T5922] cdc_wdm 5-1:1.0: skipping garbage [ 314.802928][ T5922] cdc_wdm 5-1:1.0: skipping garbage [ 314.808030][ T5922] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 314.808040][ T5922] cdc_wdm 5-1:1.0: Unknown control protocol [ 314.836889][ T9600] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.062603][ T9609] syzkaller0: entered promiscuous mode [ 315.062621][ T9609] syzkaller0: entered allmulticast mode [ 315.188514][ T5922] usb 5-1: USB disconnect, device number 4 [ 315.935143][ T9623] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.116022][ T9631] overlay: filesystem on ./file0 not supported as upperdir [ 316.180086][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.180117][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.335256][ T9649] syzkaller0: entered promiscuous mode [ 316.335272][ T9649] syzkaller0: entered allmulticast mode [ 316.495859][ T5743] Bluetooth: hci3: command 0x2016 tx timeout [ 316.577936][ T5740] Bluetooth: hci4: command tx timeout [ 316.884799][ T57] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 317.031221][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 317.032577][ T57] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 317.033377][ T57] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.033389][ T57] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 317.033408][ T57] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.033427][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.067257][ T57] hub 5-1:1.0: bad descriptor, ignoring hub [ 317.067278][ T57] hub 5-1:1.0: probe with driver hub failed with error -5 [ 317.077836][ T57] cdc_wdm 5-1:1.0: skipping garbage [ 317.077848][ T57] cdc_wdm 5-1:1.0: skipping garbage [ 317.090366][ T57] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 317.090385][ T57] cdc_wdm 5-1:1.0: Unknown control protocol [ 317.965406][ T5922] usb 5-1: USB disconnect, device number 5 [ 317.974988][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 318.114254][ T5922] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 318.148590][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.149626][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.149661][ T10] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 318.151579][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.151597][ T10] usb 10-1: Product: syz [ 318.151609][ T10] usb 10-1: Manufacturer: syz [ 318.151622][ T10] usb 10-1: SerialNumber: syz [ 318.156932][ T10] cdc_mbim 10-1:1.0: skipping garbage [ 318.263432][ T5922] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 318.264331][ T5922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.264343][ T5922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 318.264363][ T5922] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 318.264376][ T5922] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 318.264396][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.266373][ T9669] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 318.270215][ T5922] hub 5-1:1.0: bad descriptor, ignoring hub [ 318.270228][ T5922] hub 5-1:1.0: probe with driver hub failed with error -5 [ 318.270497][ T5922] cdc_wdm 5-1:1.0: skipping garbage [ 318.270505][ T5922] cdc_wdm 5-1:1.0: skipping garbage [ 318.274821][ T5922] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 318.274832][ T5922] cdc_wdm 5-1:1.0: Unknown control protocol [ 318.360591][ T9679] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 318.581070][ T5922] usb 5-1: USB disconnect, device number 6 [ 318.641227][ T5740] Bluetooth: hci4: command tx timeout [ 318.729411][ T9689] overlayfs: failed to resolve './bus': -2 [ 318.961573][ T9679] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 318.962156][ T10] cdc_mbim 10-1:1.0: setting tx_max = 16384 [ 318.963773][ T10] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device [ 318.966270][ T10] wwan wwan0: port wwan0mbim0 attached [ 318.970116][ T10] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 02:e4:64:15:79:2b [ 319.032670][ T9698] netlink: 'syz.0.952': attribute type 10 has an invalid length. [ 319.050533][ T9698] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 319.053084][ T9698] team0: Port device netdevsim1 added [ 319.163219][ C0] wdm_int_callback: 1180 callbacks suppressed [ 319.163236][ C0] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 319.163244][ C0] wdm_int_callback: 1180 callbacks suppressed [ 319.163251][ C0] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 319.163426][ C0] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 319.163435][ C0] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 319.163606][ C0] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 319.163615][ C0] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 319.163788][ C0] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 319.163797][ C0] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 319.163971][ C0] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 319.163980][ C0] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 319.164157][ C0] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 319.164166][ C0] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 319.164353][ C0] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 319.164362][ C0] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 319.164571][ C0] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 319.164580][ C0] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 319.164750][ C0] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 319.164759][ C0] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 319.164927][ C0] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 319.164936][ C0] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 319.210371][ T5454] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 319.366147][ T5819] usb 10-1: USB disconnect, device number 3 [ 319.366778][ T5819] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 319.459752][ T5819] wwan wwan0: port wwan0mbim0 disconnected [ 320.115824][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.125652][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.129044][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.131038][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.131382][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.274464][ T5827] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.492200][ T5827] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.610244][ T5827] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.708669][ T5740] Bluetooth: hci4: command tx timeout [ 320.708818][ T5827] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.966661][ T5827] bridge_slave_1: left allmulticast mode [ 320.966678][ T5827] bridge_slave_1: left promiscuous mode [ 320.966787][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.975644][ T5827] bridge_slave_0: left allmulticast mode [ 320.975659][ T5827] bridge_slave_0: left promiscuous mode [ 320.975792][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.289916][ T5827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.302989][ T5827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.304858][ T5827] bond0 (unregistering): Released all slaves [ 321.376288][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.376392][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.376457][ T9742] bridge_slave_0: entered allmulticast mode [ 321.377273][ T9742] bridge_slave_0: entered promiscuous mode [ 321.378739][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.378809][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.378869][ T9742] bridge_slave_1: entered allmulticast mode [ 321.379666][ T9742] bridge_slave_1: entered promiscuous mode [ 321.399904][ T9742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.401895][ T9742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.417969][ T9742] team0: Port device team_slave_0 added [ 321.419310][ T9742] team0: Port device team_slave_1 added [ 321.430689][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.430774][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.430787][ T9742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.432230][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.432239][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.432251][ T9742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.479417][ T9742] hsr_slave_0: entered promiscuous mode [ 321.480183][ T9742] hsr_slave_1: entered promiscuous mode [ 321.480609][ T9742] debugfs: 'hsr0' already exists in 'hsr' [ 321.480623][ T9742] Cannot create hsr debugfs directory [ 321.634098][ T5454] 8021q: adding VLAN 0 to HW filter on device eth14 [ 321.662607][ T9792] syzkaller0: entered promiscuous mode [ 321.662622][ T9792] syzkaller0: entered allmulticast mode [ 321.772674][ T9742] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 321.775273][ T8813] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 321.779861][ T9742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.784840][ T9742] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 321.795759][ T9742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.796185][ T9742] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 321.797973][ T9742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.798623][ T9742] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 321.800382][ T9742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.867349][ T5454] 8021q: adding VLAN 0 to HW filter on device eth15 [ 321.879481][ T9742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.932095][ T8813] usb 11-1: Using ep0 maxpacket: 8 [ 321.932157][ T9742] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.933361][ T8813] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 321.934669][ T8813] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.934688][ T8813] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 321.934722][ T8813] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 321.934744][ T8813] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 321.934775][ T8813] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.937456][ T554] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.937501][ T554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.941219][ T8813] hub 11-1:1.0: bad descriptor, ignoring hub [ 321.941239][ T8813] hub 11-1:1.0: probe with driver hub failed with error -5 [ 321.951017][ T554] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.951062][ T554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.005674][ T8813] cdc_wdm 11-1:1.0: skipping garbage [ 322.005692][ T8813] cdc_wdm 11-1:1.0: skipping garbage [ 322.008276][ T8813] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 322.008316][ T8813] cdc_wdm 11-1:1.0: Unknown control protocol [ 322.085532][ T9815] syzkaller0: entered promiscuous mode [ 322.085558][ T9815] syzkaller0: entered allmulticast mode [ 322.141055][ T5740] Bluetooth: hci0: command tx timeout [ 322.151470][ T5827] hsr_slave_0: left promiscuous mode [ 322.153613][ T5827] hsr_slave_1: left promiscuous mode [ 322.154019][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.154030][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.167097][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.167116][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.189013][ T5827] veth1_macvtap: left promiscuous mode [ 322.189052][ T5827] veth0_macvtap: left promiscuous mode [ 322.189616][ T5827] veth1_vlan: left promiscuous mode [ 322.189673][ T5827] veth0_vlan: left promiscuous mode [ 322.448432][ T5827] team0 (unregistering): Port device team_slave_1 removed [ 322.463276][ T5827] team0 (unregistering): Port device team_slave_0 removed [ 322.594038][ T5454] 8021q: adding VLAN 0 to HW filter on device eth16 [ 322.895640][ T5454] 8021q: adding VLAN 0 to HW filter on device eth17 [ 322.941779][ T9742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.218633][ T9742] veth0_vlan: entered promiscuous mode [ 323.224652][ T9742] veth1_vlan: entered promiscuous mode [ 323.244696][ T9742] veth0_macvtap: entered promiscuous mode [ 323.250138][ T9742] veth1_macvtap: entered promiscuous mode [ 323.260247][ T9742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.267710][ T9742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.294911][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.980'. [ 323.333673][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.333694][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.350563][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.350583][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.365329][ T5812] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.365368][ T5812] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.365394][ T5812] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.365419][ T5812] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.712267][ T42] audit: type=1804 audit(1792743735.233:2): pid=9880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.982" name="/newroot/115/tracing/events/msr/read_msr/enable" dev="tracefs" ino=19680823 res=1 errno=0 [ 323.848108][ T9883] bridge_slave_0: left allmulticast mode [ 323.848126][ T9883] bridge_slave_0: left promiscuous mode [ 323.849008][ T9883] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.852061][ T9883] bridge_slave_1: left allmulticast mode [ 323.852075][ T9883] bridge_slave_1: left promiscuous mode [ 323.852168][ T9883] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.866362][ T9883] bond0: (slave bond_slave_0): Releasing backup interface [ 323.869105][ T9883] bond0: (slave bond_slave_1): Releasing backup interface [ 323.878814][ T9883] team0: Port device team_slave_0 removed [ 323.881128][ T9883] team0: Port device team_slave_1 removed [ 323.881519][ T9883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.881531][ T9883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.886760][ T9883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.886775][ T9883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.891546][ T9883] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 323.952723][ T9883] netlink: 'syz.5.983': attribute type 10 has an invalid length. [ 323.965969][ T9883] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.966939][ T9883] team0: Port device netdevsim1 added [ 324.008332][ T9889] bridge_slave_0: left allmulticast mode [ 324.008351][ T9889] bridge_slave_0: left promiscuous mode [ 324.010368][ T9889] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.019852][ T9889] bridge_slave_1: left allmulticast mode [ 324.019868][ T9889] bridge_slave_1: left promiscuous mode [ 324.020014][ T9889] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.037584][ T9889] bond0: (slave bond_slave_0): Releasing backup interface [ 324.041424][ T9889] bond0: (slave bond_slave_1): Releasing backup interface [ 324.050962][ T9889] team0: Port device team_slave_0 removed [ 324.058098][ T9889] team0: Port device team_slave_1 removed [ 324.058793][ T9889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.058809][ T9889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.060239][ T9889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.060255][ T9889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.062260][ T9889] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 324.211411][ T5740] Bluetooth: hci0: command tx timeout [ 324.250965][ T5826] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 324.302979][ T5740] Bluetooth: hci4: command 0x0406 tx timeout [ 324.400089][ T5826] usb 12-1: Using ep0 maxpacket: 8 [ 324.400839][ T5826] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 324.401787][ T5826] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.401805][ T5826] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 324.401845][ T5826] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 324.401867][ T5826] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 324.401900][ T5826] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.409409][ T5826] hub 12-1:1.0: bad descriptor, ignoring hub [ 324.409423][ T5826] hub 12-1:1.0: probe with driver hub failed with error -5 [ 324.409693][ T5826] cdc_wdm 12-1:1.0: skipping garbage [ 324.409701][ T5826] cdc_wdm 12-1:1.0: skipping garbage [ 325.559132][ T9787] cdc_wdm 11-1:1.0: Error autopm - -16 [ 325.559436][ T1497] usb 11-1: USB disconnect, device number 2 [ 325.578984][ T5826] cdc_wdm 12-1:1.0: cdc-wdm1: USB WDM device [ 325.579001][ T5826] cdc_wdm 12-1:1.0: Unknown control protocol [ 325.583851][ T9891] cdc_wdm 11-1:1.0: Error autopm - -16 [ 325.801081][ T5826] usb 12-1: reset high-speed USB device number 2 using dummy_hcd [ 326.282078][ T5743] Bluetooth: hci0: command tx timeout [ 326.302033][ T4000] usb 12-1: USB disconnect, device number 2 [ 326.635063][ T9977] overlayfs: failed to clone upperpath [ 326.638482][ T9977] overlayfs: missing 'lowerdir' [ 326.680055][ T9981] overlayfs: failed to clone upperpath [ 327.011052][ T9996] syzkaller0: entered allmulticast mode [ 327.149659][ T5743] Bluetooth: hci1: unexpected cc 0x080e length: 5 > 3 [ 327.149689][ T5743] Bluetooth: hci1: unexpected event for opcode 0x080e [ 327.659013][ T5740] Bluetooth: hci4: unexpected cc 0x080e length: 5 > 3 [ 327.659046][ T5740] Bluetooth: hci4: unexpected event for opcode 0x080e [ 327.781229][ T5740] Bluetooth: hci3: unexpected cc 0x080e length: 5 > 3 [ 327.781260][ T5740] Bluetooth: hci3: unexpected event for opcode 0x080e [ 328.355845][ T66] Bluetooth: hci0: command tx timeout [ 328.607306][ T66] Bluetooth: hci3: unexpected cc 0x080e length: 5 > 3 [ 328.607335][ T66] Bluetooth: hci3: unexpected event for opcode 0x080e [ 328.689121][ T66] Bluetooth: hci0: unexpected cc 0x080e length: 5 > 3 [ 328.689143][ T66] Bluetooth: hci0: unexpected event for opcode 0x080e [ 328.801020][ T66] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 328.827425][ T66] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200' [ 328.827441][ T66] CPU: 2 UID: 0 PID: 66 Comm: kworker/u34:0 Not tainted syzkaller #0 PREEMPT(full) [ 328.827456][ T66] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 328.827464][ T66] Workqueue: hci4 hci_rx_work [ 328.827482][ T66] Call Trace: [ 328.827486][ T66] [ 328.827491][ T66] dump_stack_lvl+0x100/0x190 [ 328.827515][ T66] sysfs_warn_dup.cold+0x1c/0x28 [ 328.827535][ T66] sysfs_create_dir_ns+0x24b/0x2b0 [ 328.827553][ T66] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 328.827569][ T66] ? find_held_lock+0x2b/0x80 [ 328.827584][ T66] ? kobject_add_internal+0x25f/0x930 [ 328.827598][ T66] ? kobject_add_internal+0x25f/0x930 [ 328.827613][ T66] ? do_raw_spin_unlock+0x145/0x1e0 [ 328.827627][ T66] kobject_add_internal+0x2c8/0x930 [ 328.827645][ T66] kobject_add+0x16a/0x1e0 [ 328.827658][ T66] ? __pfx_kobject_add+0x10/0x10 [ 328.827672][ T66] ? class_to_subsys+0x10f/0x150 [ 328.827690][ T66] ? kobject_put+0xb9/0x640 [ 328.827701][ T66] ? _raw_spin_unlock+0x28/0x50 [ 328.827721][ T66] device_add+0x294/0x1970 [ 328.827736][ T66] ? __pfx_dev_set_name+0x10/0x10 [ 328.827753][ T66] ? __pfx_device_add+0x10/0x10 [ 328.827767][ T66] ? find_held_lock+0x2b/0x80 [ 328.827780][ T66] ? hci_find_link_key+0x1a4/0x3c0 [ 328.827806][ T66] ? hci_find_link_key+0x1a4/0x3c0 [ 328.827826][ T66] hci_conn_add_sysfs+0x1a3/0x260 [ 328.827845][ T66] hci_conn_complete_evt+0x5bb/0x13f0 [ 328.827863][ T66] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 328.827878][ T66] ? __skb_clone+0x570/0x760 [ 328.827892][ T66] ? skb_pull_data+0x15f/0x1e0 [ 328.827910][ T66] hci_event_packet+0x8e9/0xcd0 [ 328.827925][ T66] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 328.827939][ T66] ? __pfx_hci_event_packet+0x10/0x10 [ 328.827956][ T66] ? lockdep_hardirqs_on+0x7d/0x110 [ 328.827977][ T66] hci_rx_work+0x451/0xfc0 [ 328.827994][ T66] process_one_work+0xac7/0x1b10 [ 328.828014][ T66] ? __pfx_process_one_work+0x10/0x10 [ 328.828030][ T66] ? lock_acquire+0x1d1/0x380 [ 328.828050][ T66] ? __pfx_hci_rx_work+0x10/0x10 [ 328.828065][ T66] worker_thread+0x5ef/0xe50 [ 328.828085][ T66] ? kthread+0x13a/0x450 [ 328.828097][ T66] ? __pfx_worker_thread+0x10/0x10 [ 328.828111][ T66] kthread+0x373/0x450 [ 328.828123][ T66] ? __pfx_kthread+0x10/0x10 [ 328.828137][ T66] ret_from_fork+0x730/0xd60 [ 328.828148][ T66] ? __pfx_ret_from_fork+0x10/0x10 [ 328.828160][ T66] ? __switch_to+0x800/0x10f0 [ 328.828175][ T66] ? __pfx_kthread+0x10/0x10 [ 328.828189][ T66] ret_from_fork_asm+0x1a/0x30 [ 328.828207][ T66] [ 328.828220][ T66] kobject: kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 328.828239][ T66] Bluetooth: hci4: failed to register connection device [ 328.841271][T10042] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1034'. [ 328.843023][T10042] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1034'. [ 328.843040][T10042] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1034'. [ 328.844668][T10042] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1034'. [ 328.844682][T10042] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1034'. [ 328.848744][T10042] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1034'. [ 328.848760][T10042] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1034'. [ 328.945721][T10042] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1034'. [ 328.945746][T10042] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1034'. [ 328.960789][T10042] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1034'. [ 329.201330][ T5812] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.201372][ T5812] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.201402][ T5812] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.201431][ T5812] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.685107][ T5743] Bluetooth: hci3: unexpected cc 0x080e length: 5 > 3 [ 329.685139][ T5743] Bluetooth: hci3: unexpected event for opcode 0x080e [ 330.258186][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.258214][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.258231][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.258248][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.347977][ T5743] Bluetooth: hci1: command 0x0406 tx timeout [ 330.448229][ T5740] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 330.459772][ T5740] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 330.545236][T10084] syzkaller0: entered allmulticast mode [ 330.828597][ T5740] Bluetooth: hci4: command 0x0406 tx timeout [ 330.996645][ T5740] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 330.998898][ T5740] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 331.682396][T10107] syzkaller0: entered promiscuous mode [ 331.682413][T10107] syzkaller0: entered allmulticast mode [ 331.689790][T10114] bridge_slave_0: left allmulticast mode [ 331.689808][T10114] bridge_slave_0: left promiscuous mode [ 331.689960][T10114] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.692148][T10114] bridge_slave_1: left allmulticast mode [ 331.692162][T10114] bridge_slave_1: left promiscuous mode [ 331.692292][T10114] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.706014][T10114] bond0: (slave bond_slave_0): Releasing backup interface [ 331.722260][T10114] bond0: (slave bond_slave_1): Releasing backup interface [ 331.732903][T10114] team0: Port device team_slave_0 removed [ 331.738043][T10114] team0: Port device team_slave_1 removed [ 331.738655][T10114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.738671][T10114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.740048][T10114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.740062][T10114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.742516][T10114] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 331.974069][ T5740] Bluetooth: hci3: unexpected cc 0x080e length: 5 > 3 [ 331.974090][ T5740] Bluetooth: hci3: unexpected event for opcode 0x080e [ 332.909769][ T5740] Bluetooth: hci4: command 0x0406 tx timeout [ 333.204007][T10150] smpboot: CPU 1 is now offline [ 334.284877][T10185] Bluetooth: MGMT ver 1.23 [ 334.384883][T10192] __nla_validate_parse: 558 callbacks suppressed [ 334.384897][T10192] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1076'. [ 334.387175][T10192] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1076'. [ 334.387198][T10192] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1076'. [ 334.388735][T10192] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1076'. [ 334.388756][T10192] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1076'. [ 334.393850][T10192] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1076'. [ 334.393870][T10192] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1076'. [ 334.432588][T10192] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1076'. [ 334.432608][T10192] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1076'. [ 334.434559][T10192] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1076'. [ 334.478778][T10192] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.479058][T10192] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.548727][T10192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.552009][T10192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.651968][T10193] tipc: Started in network mode [ 334.651996][T10193] tipc: Node identity aaaaaaaaaa24, cluster identity 4711 [ 334.652156][T10193] tipc: Enabled bearer , priority 10 [ 334.665232][ T5812] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.665270][ T5812] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.665298][ T5812] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.665334][ T5812] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.974591][ T5743] Bluetooth: hci4: command 0x0406 tx timeout [ 335.770727][ T8813] tipc: Node number set to 9349802 [ 336.330983][ T5743] Bluetooth: hci0: command 0x0406 tx timeout [ 336.333925][ T5740] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 336.413124][T10338] bridge0: port 1(wlan1) entered blocking state [ 336.413229][T10338] bridge0: port 1(wlan1) entered disabled state [ 336.413450][T10338] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 336.414618][T10338] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 337.049433][ T5740] Bluetooth: hci4: command 0x0406 tx timeout [ 338.115863][ T5454] 8021q: adding VLAN 0 to HW filter on device eth18 [ 338.193910][T10409] hsr_slave_0: left promiscuous mode [ 338.195943][T10409] hsr_slave_1: left promiscuous mode [ 338.242498][T10409] bond0: entered promiscuous mode [ 338.242513][T10409] bond_slave_0: entered promiscuous mode [ 338.242609][T10409] bond_slave_1: entered promiscuous mode [ 338.244136][T10409] gretap0: entered promiscuous mode [ 338.244655][T10409] dummy0: entered promiscuous mode [ 338.244999][T10409] debugfs: 'hsr0' already exists in 'hsr' [ 338.245011][T10409] Cannot create hsr debugfs directory [ 338.299743][T10406] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 338.299768][T10406] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 338.299794][T10406] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 338.301813][T10406] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 338.306194][T10406] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 338.481572][ T5454] 8021q: adding VLAN 0 to HW filter on device eth19 [ 338.707950][ T5454] 8021q: adding VLAN 0 to HW filter on device eth20 [ 338.710302][T10455] openvswitch: netlink: Flow actions attr not present in new flow. [ 338.772683][T10459] siw: device registration error -23 [ 338.800351][T10459] smbdirect: ib_dev[syz1] removed [ 339.007320][ T5454] 8021q: adding VLAN 0 to HW filter on device eth21 [ 339.013924][T10484] hsr_slave_0: left promiscuous mode [ 339.014566][T10484] hsr_slave_1: left promiscuous mode [ 339.062805][T10489] bond0: left promiscuous mode [ 339.062823][T10489] bond_slave_0: left promiscuous mode [ 339.062977][T10489] bond_slave_1: left promiscuous mode [ 339.063809][T10489] gretap0: left promiscuous mode [ 339.064629][T10489] dummy0: left promiscuous mode [ 339.091885][T10484] lo: entered promiscuous mode [ 339.091983][T10484] tunl0: entered promiscuous mode [ 339.092068][T10484] gre0: entered promiscuous mode [ 339.092124][T10484] gretap0: entered promiscuous mode [ 339.092177][T10484] erspan0: entered promiscuous mode [ 339.092251][T10484] ip_vti0: entered promiscuous mode [ 339.092333][T10484] ip6_vti0: entered promiscuous mode [ 339.092388][T10484] sit0: entered promiscuous mode [ 339.092442][T10484] ip6tnl0: entered promiscuous mode [ 339.092496][T10484] ip6gre0: entered promiscuous mode [ 339.092563][T10484] syz_tun: entered promiscuous mode [ 339.092634][T10484] ip6gretap0: entered promiscuous mode [ 339.092689][T10484] bridge0: entered promiscuous mode [ 339.092751][T10484] vcan0: entered promiscuous mode [ 339.092824][T10484] bond0: entered promiscuous mode [ 339.092888][T10484] team0: entered promiscuous mode [ 339.092901][T10484] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 339.093034][T10484] dummy0: entered promiscuous mode [ 339.093115][T10484] nlmon0: entered promiscuous mode [ 339.093180][T10484] batadv0: entered promiscuous mode [ 339.093244][T10484] vxcan0: entered promiscuous mode [ 339.093308][T10484] vxcan1: entered promiscuous mode [ 339.093381][T10484] veth0: entered promiscuous mode [ 339.093447][T10484] veth1: entered promiscuous mode [ 339.093509][T10484] wg0: entered promiscuous mode [ 339.093572][T10484] wg1: entered promiscuous mode [ 339.093644][T10484] wg2: entered promiscuous mode [ 339.093707][T10484] veth0_to_bridge: entered promiscuous mode [ 339.093771][T10484] bridge_slave_0: entered promiscuous mode [ 339.093833][T10484] veth1_to_bridge: entered promiscuous mode [ 339.093914][T10484] bridge_slave_1: entered promiscuous mode [ 339.093979][T10484] veth0_to_bond: entered promiscuous mode [ 339.100331][T10484] bond_slave_0: entered promiscuous mode [ 339.100439][T10484] veth1_to_bond: entered promiscuous mode [ 339.100507][T10484] bond_slave_1: entered promiscuous mode [ 339.100575][T10484] veth0_to_team: entered promiscuous mode [ 339.100657][T10484] team_slave_0: entered promiscuous mode [ 339.100725][T10484] veth1_to_team: entered promiscuous mode [ 339.100790][T10484] team_slave_1: entered promiscuous mode [ 339.100856][T10484] veth0_to_batadv: entered promiscuous mode [ 339.100941][T10484] batadv_slave_0: entered promiscuous mode [ 339.101006][T10484] veth1_to_batadv: entered promiscuous mode [ 339.101071][T10484] batadv_slave_1: entered promiscuous mode [ 339.101139][T10484] xfrm0: entered promiscuous mode [ 339.101220][T10484] veth0_to_hsr: entered promiscuous mode [ 339.101287][T10484] hsr_slave_0: entered promiscuous mode [ 339.101353][T10484] veth1_to_hsr: entered promiscuous mode [ 339.101421][T10484] hsr_slave_1: entered promiscuous mode [ 339.101540][T10484] veth1_virt_wifi: entered promiscuous mode [ 339.101611][T10484] veth0_virt_wifi: entered promiscuous mode [ 339.101678][T10484] virt_wifi0: entered promiscuous mode [ 339.101880][T10484] vlan0: entered promiscuous mode [ 339.102017][T10484] vlan1: entered promiscuous mode [ 339.102164][T10484] macvlan0: entered promiscuous mode [ 339.102232][T10484] macvlan1: entered promiscuous mode [ 339.102300][T10484] ipvlan0: entered promiscuous mode [ 339.102379][T10484] ipvlan1: entered promiscuous mode [ 339.107180][T10484] macvtap0: entered promiscuous mode [ 339.107286][T10484] macsec0: entered promiscuous mode [ 339.107346][T10484] geneve0: entered promiscuous mode [ 339.107415][T10484] geneve1: entered promiscuous mode [ 339.107487][T10484] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 339.107601][T10484] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 339.107659][T10484] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 339.107762][T10484] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 339.124622][T10489] lo: entered promiscuous mode [ 339.124720][T10489] tunl0: entered promiscuous mode [ 339.126113][ T5740] Bluetooth: hci4: command 0x0406 tx timeout [ 339.134113][T10489] gre0: entered promiscuous mode [ 339.134220][T10489] gretap0: entered promiscuous mode [ 339.134278][T10489] erspan0: entered promiscuous mode [ 339.134349][T10489] ip_vti0: entered promiscuous mode [ 339.134415][T10489] ip6_vti0: entered promiscuous mode [ 339.134469][T10489] sit0: entered promiscuous mode [ 339.134524][T10489] ip6tnl0: entered promiscuous mode [ 339.134620][T10489] ip6gre0: entered promiscuous mode [ 339.134676][T10489] syz_tun: entered promiscuous mode [ 339.134741][T10489] ip6gretap0: entered promiscuous mode [ 339.137494][T10489] bridge0: entered promiscuous mode [ 339.137582][T10489] vcan0: entered promiscuous mode [ 339.137651][T10489] bond0: entered promiscuous mode [ 339.137659][T10489] bond_slave_0: entered promiscuous mode [ 339.137785][T10489] bond_slave_1: entered promiscuous mode [ 339.137933][T10489] team0: entered promiscuous mode [ 339.137942][T10489] team_slave_0: entered promiscuous mode [ 339.138018][T10489] team_slave_1: entered promiscuous mode [ 339.138146][T10489] dummy0: entered promiscuous mode [ 339.138226][T10489] nlmon0: entered promiscuous mode [ 339.138291][T10489] batadv0: entered promiscuous mode [ 339.138402][T10489] vxcan0: entered promiscuous mode [ 339.143632][T10489] vxcan1: entered promiscuous mode [ 339.143708][T10489] veth0: entered promiscuous mode [ 339.143776][T10489] veth1: entered promiscuous mode [ 339.143842][T10489] wg0: entered promiscuous mode [ 339.143918][T10489] wg1: entered promiscuous mode [ 339.143983][T10489] wg2: entered promiscuous mode [ 339.144044][T10489] veth0_to_bridge: entered promiscuous mode [ 339.144163][T10489] veth1_to_bridge: entered promiscuous mode [ 339.144304][T10489] veth0_to_bond: entered promiscuous mode [ 339.144442][T10489] veth1_to_bond: entered promiscuous mode [ 339.144562][T10489] veth0_to_team: entered promiscuous mode [ 339.144684][T10489] veth1_to_team: entered promiscuous mode [ 339.144902][T10489] veth0_to_batadv: entered promiscuous mode [ 339.144972][T10489] batadv_slave_0: entered promiscuous mode [ 339.145051][T10489] veth1_to_batadv: entered promiscuous mode [ 339.145116][T10489] batadv_slave_1: entered promiscuous mode [ 339.145181][T10489] xfrm0: entered promiscuous mode [ 339.145245][T10489] veth0_to_hsr: entered promiscuous mode [ 339.145321][T10489] hsr_slave_0: entered promiscuous mode [ 339.145384][T10489] veth1_to_hsr: entered promiscuous mode [ 339.145449][T10489] hsr_slave_1: entered promiscuous mode [ 339.145512][T10489] veth1_virt_wifi: entered promiscuous mode [ 339.145587][T10489] veth0_virt_wifi: entered promiscuous mode [ 339.145650][T10489] virt_wifi0: entered promiscuous mode [ 339.150006][T10489] vlan0: entered promiscuous mode [ 339.150138][T10489] vlan1: entered promiscuous mode [ 339.150303][T10489] macvlan0: entered promiscuous mode [ 339.150371][T10489] macvlan1: entered promiscuous mode [ 339.150437][T10489] ipvlan0: entered promiscuous mode [ 339.150508][T10489] ipvlan1: entered promiscuous mode [ 339.150700][T10489] macvtap0: entered promiscuous mode [ 339.150809][T10489] macsec0: entered promiscuous mode [ 339.150880][T10489] geneve0: entered promiscuous mode [ 339.150949][T10489] geneve1: entered promiscuous mode [ 339.151019][T10489] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 339.151090][T10489] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 339.391854][T10515] lo: entered promiscuous mode [ 339.394174][T10515] tunl0: entered promiscuous mode [ 339.396869][T10515] gre0: entered promiscuous mode [ 339.411248][T10515] gretap0: entered promiscuous mode [ 339.422925][T10515] erspan0: entered promiscuous mode [ 339.429596][T10515] ip_vti0: entered promiscuous mode [ 339.432881][T10515] ip6_vti0: entered promiscuous mode [ 339.436267][T10515] sit0: entered promiscuous mode [ 339.439989][T10515] ip6tnl0: entered promiscuous mode [ 339.441195][T10515] ip6gre0: entered promiscuous mode [ 339.449358][T10515] syz_tun: entered promiscuous mode [ 339.458502][T10515] ip6gretap0: entered promiscuous mode [ 339.463753][T10515] bridge0: entered promiscuous mode [ 339.466738][T10515] vcan0: entered promiscuous mode [ 339.470881][T10515] bond0: entered promiscuous mode [ 339.478645][T10515] team0: entered promiscuous mode [ 339.481418][T10515] dummy0: entered promiscuous mode [ 339.483978][T10515] nlmon0: entered promiscuous mode [ 339.485386][T10515] batadv0: entered promiscuous mode [ 339.487145][T10515] vxcan0: entered promiscuous mode [ 339.487533][T10515] vxcan1: entered promiscuous mode [ 339.487947][T10515] veth0: entered promiscuous mode [ 339.489539][T10515] veth1: entered promiscuous mode [ 339.496794][T10515] wg0: entered promiscuous mode [ 339.505492][T10515] wg1: entered promiscuous mode [ 339.509086][T10515] wg2: entered promiscuous mode [ 339.509936][T10515] veth0_to_bridge: entered promiscuous mode [ 339.513649][T10515] bridge_slave_0: entered promiscuous mode [ 339.516574][T10515] veth1_to_bridge: entered promiscuous mode [ 339.518315][T10515] bridge_slave_1: entered promiscuous mode [ 339.523616][T10515] veth0_to_bond: entered promiscuous mode [ 339.527924][T10515] bond_slave_0: entered promiscuous mode [ 339.529813][T10515] veth1_to_bond: entered promiscuous mode [ 339.531133][T10515] bond_slave_1: entered promiscuous mode [ 339.533429][T10515] veth0_to_team: entered promiscuous mode [ 339.536645][T10515] team_slave_0: entered promiscuous mode [ 339.539701][T10515] veth1_to_team: entered promiscuous mode [ 339.541945][T10515] team_slave_1: entered promiscuous mode [ 339.542161][T10515] veth0_to_batadv: entered promiscuous mode [ 339.546277][T10515] batadv_slave_0: entered promiscuous mode [ 339.550107][T10515] veth1_to_batadv: entered promiscuous mode [ 339.552817][T10515] batadv_slave_1: entered promiscuous mode [ 339.557123][T10515] xfrm0: entered promiscuous mode [ 339.560715][T10515] veth0_to_hsr: entered promiscuous mode [ 339.564768][T10515] veth1_to_hsr: entered promiscuous mode [ 339.572234][T10515] hsr0: entered promiscuous mode [ 339.576404][T10515] veth1_virt_wifi: entered promiscuous mode [ 339.578931][T10515] veth0_virt_wifi: entered promiscuous mode [ 339.581267][T10515] virt_wifi0: entered promiscuous mode [ 339.587035][T10515] vlan0: entered promiscuous mode [ 339.590232][T10515] vlan1: entered promiscuous mode [ 339.593030][T10515] macvlan0: entered promiscuous mode [ 339.603282][T10515] macvlan1: entered promiscuous mode [ 339.609854][T10515] ipvlan0: entered promiscuous mode [ 339.610003][T10515] ipvlan1: entered promiscuous mode [ 339.618506][T10515] macvtap0: entered promiscuous mode [ 339.621220][T10515] macsec0: entered promiscuous mode [ 339.626563][T10515] geneve0: entered promiscuous mode [ 339.631553][T10515] geneve1: entered promiscuous mode [ 339.636963][T10515] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 339.640072][T10515] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 339.642260][T10515] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 339.649698][T10515] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 339.660655][T10515] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 339.670391][T10515] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode [ 339.672099][T10515] mac80211_hwsim hwsim29 wlan2: entered promiscuous mode [ 339.672243][T10515] mac80211_hwsim hwsim30 wlan3: entered promiscuous mode [ 339.693815][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.693854][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.693881][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.693907][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.142490][T10547] dummy0 speed is unknown, defaulting to 1000 [ 340.142552][T10547] dummy0 speed is unknown, defaulting to 1000 [ 340.149651][T10547] dummy0 speed is unknown, defaulting to 1000 [ 340.150597][T10547] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 340.150630][T10547] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 340.150669][T10547] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 340.180030][T10547] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 340.217140][T10547] dummy0 speed is unknown, defaulting to 1000 [ 340.219344][T10547] dummy0 speed is unknown, defaulting to 1000 [ 340.220315][T10547] dummy0 speed is unknown, defaulting to 1000 [ 340.222252][T10547] dummy0 speed is unknown, defaulting to 1000 [ 340.427693][T10560] lo: entered promiscuous mode [ 340.427810][T10560] tunl0: entered promiscuous mode [ 340.427885][T10560] gre0: entered promiscuous mode [ 340.427941][T10560] gretap0: entered promiscuous mode [ 340.427996][T10560] erspan0: entered promiscuous mode [ 340.428051][T10560] ip_vti0: entered promiscuous mode [ 340.428117][T10560] ip6_vti0: entered promiscuous mode [ 340.428172][T10560] sit0: entered promiscuous mode [ 340.428252][T10560] ip6tnl0: entered promiscuous mode [ 340.428311][T10560] ip6gre0: entered promiscuous mode [ 340.428364][T10560] ip6gretap0: entered promiscuous mode [ 340.428421][T10560] bridge0: entered promiscuous mode [ 340.428482][T10560] vcan0: entered promiscuous mode [ 340.428628][T10560] bond0: entered promiscuous mode [ 340.428787][T10560] team0: entered promiscuous mode [ 340.428800][T10560] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 340.428931][T10560] dummy0: entered promiscuous mode [ 340.428999][T10560] nlmon0: entered promiscuous mode [ 340.429062][T10560] batadv0: entered promiscuous mode [ 340.429133][T10560] vxcan0: entered promiscuous mode [ 340.429197][T10560] vxcan1: entered promiscuous mode [ 340.429263][T10560] veth0: entered promiscuous mode [ 340.429331][T10560] veth1: entered promiscuous mode [ 340.429398][T10560] wg0: entered promiscuous mode [ 340.429462][T10560] wg1: entered promiscuous mode [ 340.429528][T10560] wg2: entered promiscuous mode [ 340.429592][T10560] veth0_to_bridge: entered promiscuous mode [ 340.429747][T10560] bridge_slave_0: entered promiscuous mode [ 340.429821][T10560] veth1_to_bridge: entered promiscuous mode [ 340.429891][T10560] bridge_slave_1: entered promiscuous mode [ 340.429954][T10560] veth0_to_bond: entered promiscuous mode [ 340.430022][T10560] bond_slave_0: entered promiscuous mode [ 340.430086][T10560] veth1_to_bond: entered promiscuous mode [ 340.430154][T10560] bond_slave_1: entered promiscuous mode [ 340.430219][T10560] veth0_to_team: entered promiscuous mode [ 340.430289][T10560] team_slave_0: entered promiscuous mode [ 340.430354][T10560] veth1_to_team: entered promiscuous mode [ 340.430421][T10560] team_slave_1: entered promiscuous mode [ 340.430482][T10560] veth0_to_batadv: entered promiscuous mode [ 340.430548][T10560] batadv_slave_0: entered promiscuous mode [ 340.430611][T10560] veth1_to_batadv: entered promiscuous mode [ 340.430678][T10560] batadv_slave_1: entered promiscuous mode [ 340.430837][T10560] xfrm0: entered promiscuous mode [ 340.430908][T10560] veth0_to_hsr: entered promiscuous mode [ 340.431038][T10560] veth1_to_hsr: entered promiscuous mode [ 340.431161][T10560] hsr0: entered promiscuous mode [ 340.431226][T10560] veth1_virt_wifi: entered promiscuous mode [ 340.431299][T10560] veth0_virt_wifi: entered promiscuous mode [ 340.431364][T10560] virt_wifi0: entered promiscuous mode [ 340.431541][T10560] vlan0: entered promiscuous mode [ 340.431670][T10560] vlan1: entered promiscuous mode [ 340.431802][T10560] macvlan0: entered promiscuous mode [ 340.431995][T10560] macvlan1: entered promiscuous mode [ 340.432064][T10560] ipvlan0: entered promiscuous mode [ 340.432130][T10560] ipvlan1: entered promiscuous mode [ 340.433951][T10560] macvtap0: entered promiscuous mode [ 340.434068][T10560] macsec0: entered promiscuous mode [ 340.434223][T10560] geneve0: entered promiscuous mode [ 340.434339][T10560] geneve1: entered promiscuous mode [ 340.434463][T10560] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 340.435925][T10560] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 340.436026][T10560] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 340.436155][T10560] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 340.436298][T10560] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 340.436439][T10560] mac80211_hwsim hwsim15 wlan2: entered promiscuous mode [ 340.776322][T10567] Invalid ELF header magic: != ELF [ 341.682195][T10580] __nla_validate_parse: 138 callbacks suppressed [ 341.682210][T10580] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1214'. [ 341.682223][T10580] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1214'. [ 341.682235][T10580] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1214'. [ 341.682245][T10580] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1214'. [ 341.682254][T10580] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1214'. [ 341.682264][T10580] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1214'. [ 341.682274][T10580] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1214'. [ 341.682284][T10580] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1214'. [ 341.682293][T10580] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1214'. [ 341.682302][T10580] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1214'. [ 343.731889][T10656] siw: device registration error -23 [ 343.733866][T10656] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 343.733888][T10656] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 343.733911][T10656] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 343.741254][T10656] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 343.811228][ T5740] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 343.949657][T10667] Invalid ELF header magic: != ELF [ 345.072987][T10703] siw: device registration error -23 [ 345.305355][T10711] Invalid ELF header magic: != ELF [ 345.764532][ T5740] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 345.833195][ T5740] Bluetooth: hci4: command 0x0406 tx timeout [ 346.047647][T10727] syzkaller0: entered promiscuous mode [ 346.047669][T10727] syzkaller0: entered allmulticast mode [ 347.315092][ T5740] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 347.844924][T10749] netdevsim netdevsim6 eth0: entered promiscuous mode [ 347.845029][T10749] netdevsim netdevsim6 eth1: entered promiscuous mode [ 347.845103][T10749] netdevsim netdevsim6 eth2: entered promiscuous mode [ 347.845175][T10749] netdevsim netdevsim6 eth3: entered promiscuous mode [ 348.026835][T10760] syzkaller0: entered promiscuous mode [ 348.026865][T10760] syzkaller0: entered allmulticast mode [ 349.349661][ T5740] Bluetooth: hci4: command 0x0406 tx timeout [ 349.441695][ T5740] Bluetooth: hci1: connection err: -111 [ 349.480520][T10804] Invalid ELF header magic: != ELF [ 349.691157][T10807] __nla_validate_parse: 402 callbacks suppressed [ 349.691191][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1296'. [ 349.707540][T10807] debugfs: 'hsr0' already exists in 'hsr' [ 349.707555][T10807] Cannot create hsr debugfs directory [ 349.714753][T10807] hsr0: entered promiscuous mode [ 350.345451][T10822] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1302'. [ 350.377813][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1303'. [ 350.380907][T10824] mac80211_hwsim hwsim31 wlan2: entered promiscuous mode [ 350.515161][ T5740] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 350.521658][ T5740] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 351.316960][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1310'. [ 351.318766][T10850] mac80211_hwsim hwsim33 wlan3: entered promiscuous mode [ 351.962598][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 352.431609][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1325'. [ 352.492137][T10897] mac80211_hwsim hwsim32 wlan2: entered promiscuous mode [ 352.492257][T10897] mac80211_hwsim hwsim34 wlan3: entered promiscuous mode [ 352.492327][T10897] mac80211_hwsim hwsim35 wlan4: entered promiscuous mode [ 352.503615][ T37] smbdirect: ib_dev[syz1] removed [ 352.584415][T10901] syzkaller0: entered promiscuous mode [ 352.584433][T10901] syzkaller0: entered allmulticast mode [ 354.143138][T10952] Invalid ELF header magic: != ELF [ 354.675946][T10954] syzkaller0: entered promiscuous mode [ 354.675964][T10954] syzkaller0: entered allmulticast mode [ 355.817223][ T5740] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 355.850963][ T5740] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 356.394472][T10991] Invalid ELF header magic: != ELF [ 356.979915][T11004] syzkaller0: entered promiscuous mode [ 356.979937][T11004] syzkaller0: entered allmulticast mode [ 359.188948][T11039] Invalid ELF header magic: != ELF [ 362.219587][T11041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.588066][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 362.667223][T11100] Invalid ELF header magic: != ELF [ 365.454152][T11085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.753966][T11134] Invalid ELF header magic: != ELF [ 365.798273][T11136] Invalid ELF header magic: != ELF [ 365.971603][T11140] Invalid ELF header magic: != ELF [ 366.357085][T11143] Invalid ELF header magic: != ELF [ 368.895799][T11157] Invalid ELF header magic: != ELF [ 369.742437][T11172] Invalid ELF header magic: != ELF [ 370.637343][T11180] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1405'. [ 370.673767][T11181] Invalid ELF header magic: != ELF [ 370.773348][T11180] erspan0.1: entered promiscuous mode [ 371.972025][T11192] Invalid ELF header magic: != ELF [ 372.061332][T11193] Invalid ELF header magic: != ELF [ 372.825509][T11199] Invalid ELF header magic: != ELF [ 373.694384][T11204] Invalid ELF header magic: != ELF [ 375.052187][T11210] Invalid ELF header magic: != ELF [ 376.652980][T11222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1416'. [ 376.653001][T11222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1416'. [ 376.653012][T11222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1416'. [ 376.653022][T11222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1416'. [ 376.653031][T11222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1416'. [ 376.653041][T11222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1416'. [ 376.653050][T11222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1416'. [ 376.653060][T11222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1416'. [ 376.653069][T11222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1416'. [ 376.653078][T11222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1416'. [ 376.986238][T11235] Invalid ELF header magic: != ELF [ 377.014465][T11236] Invalid ELF header magic: != ELF [ 377.488478][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.488509][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.619003][T11242] Invalid ELF header magic: != ELF [ 379.041669][T11248] Bluetooth: MGMT ver 1.23 [ 380.000549][T11266] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 381.359518][T11295] Invalid ELF header magic: != ELF [ 381.638385][T11300] Invalid ELF header magic: != ELF [ 382.056387][T11303] Invalid ELF header magic: != ELF [ 382.788070][T11307] Invalid ELF header magic: != ELF [ 384.792529][T11328] syzkaller0: entered promiscuous mode [ 384.792569][T11328] syzkaller0: entered allmulticast mode [ 386.220231][T11342] __nla_validate_parse: 138 callbacks suppressed [ 386.220251][T11342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1448'. [ 386.220274][T11342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1448'. [ 386.220293][T11342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1448'. [ 386.220310][T11342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1448'. [ 386.220326][T11342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1448'. [ 386.220341][T11342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1448'. [ 386.220357][T11342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1448'. [ 386.220372][T11342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1448'. [ 386.220388][T11342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1448'. [ 386.220403][T11342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1448'. [ 386.700247][T11352] Invalid ELF header magic: != ELF [ 386.954526][T11355] Invalid ELF header magic: != ELF [ 386.971696][T11359] Invalid ELF header magic: != ELF [ 388.292167][T11370] Invalid ELF header magic: != ELF [ 389.558936][ T5743] Bluetooth: hci0: command 0x0406 tx timeout [ 389.560795][ T5740] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 390.310287][T11395] Invalid ELF header magic: != ELF [ 390.835382][ T5740] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 391.711922][T11409] Invalid ELF header magic: != ELF [ 393.384191][T11425] __nla_validate_parse: 137 callbacks suppressed [ 393.384204][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1475'. [ 393.406918][ T5740] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 393.473695][ T5740] Bluetooth: hci3: link tx timeout [ 393.473712][ T5740] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 393.477443][ T5740] Bluetooth: hci3: link tx timeout [ 393.477459][ T5740] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 393.765089][T11434] Invalid ELF header magic: != ELF [ 394.893648][T11447] Invalid ELF header magic: != ELF [ 395.129021][T11453] Invalid ELF header magic: != ELF [ 395.462517][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 395.473658][ T5740] Bluetooth: hci4: command 0x0406 tx timeout [ 395.553657][ T5740] Bluetooth: hci3: command 0x2016 tx timeout [ 396.853366][T11479] Invalid ELF header magic: != ELF [ 397.421198][T11484] Invalid ELF header magic: != ELF [ 397.632670][ T5743] Bluetooth: hci3: command 0x2016 tx timeout [ 398.758218][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1495'. [ 398.882612][ T5743] Bluetooth: hci4: unexpected cc 0x080e length: 5 > 3 [ 398.882641][ T5743] Bluetooth: hci4: unexpected event for opcode 0x080e [ 399.904859][T11519] Invalid ELF header magic: != ELF [ 400.248376][T11521] bridge0: port 3(wlan1) entered blocking state [ 400.252522][T11521] bridge0: port 3(wlan1) entered disabled state [ 400.252619][T11521] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 400.641746][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'. [ 401.587769][T11542] syzkaller0: entered promiscuous mode [ 401.587787][T11542] syzkaller0: entered allmulticast mode [ 401.837006][T11549] Invalid ELF header magic: != ELF [ 402.225187][T11554] Invalid ELF header magic: != ELF [ 402.995800][T11560] Invalid ELF header magic: != ELF [ 404.720608][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1521'. [ 404.780904][ T5743] Bluetooth: Wrong link type (-71) [ 405.338721][T11591] Invalid ELF header magic: != ELF [ 406.172676][T11602] Invalid ELF header magic: != ELF [ 406.210814][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1531'. [ 406.672810][T11615] Invalid ELF header magic: != ELF [ 407.289735][T11620] Invalid ELF header magic: != ELF [ 408.302088][ T75] IPVS: starting estimator thread 0... [ 408.396928][T11625] IPVS: using max 42 ests per chain, 100800 per kthread [ 409.202963][ T5743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 409.814187][T11657] Invalid ELF header magic: != ELF [ 410.414358][ T75] IPVS: starting estimator thread 0... [ 410.535664][T11678] IPVS: using max 26 ests per chain, 62400 per kthread [ 410.822678][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1561'. [ 411.293929][ T1171] IPVS: starting estimator thread 0... [ 411.344800][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1571'. [ 411.353879][T11723] erspan0.1: entered promiscuous mode [ 411.354157][T11723] mac80211_hwsim hwsim42 wlan3: entered promiscuous mode [ 411.354288][T11723] mac80211_hwsim hwsim47 wlan4: entered promiscuous mode [ 411.354438][T11723] mac80211_hwsim hwsim49 wlan5: entered promiscuous mode [ 411.375275][T11717] IPVS: using max 43 ests per chain, 103200 per kthread [ 411.404494][ T5743] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 412.043789][T11741] siw: device registration error -23 [ 412.331581][T11750] syzkaller0: entered promiscuous mode [ 412.331605][T11750] syzkaller0: entered allmulticast mode [ 413.443946][T11767] siw: device registration error -23 [ 413.661259][T11774] syzkaller0: entered promiscuous mode [ 413.661282][T11774] syzkaller0: entered allmulticast mode [ 414.116537][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1594'. [ 415.242393][ T5743] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 416.633809][T11821] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.1605'. [ 416.750421][T11834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1617'. [ 416.750442][T11834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1617'. [ 416.750453][T11834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1617'. [ 416.750462][T11834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1617'. [ 416.750472][T11834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1617'. [ 416.750481][T11834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1617'. [ 416.750490][T11834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1617'. [ 416.750501][T11834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1617'. [ 416.750510][T11834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1617'. [ 416.774933][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb0 [ 417.072556][T11840] Invalid ELF header magic: != ELF [ 417.107527][T11841] Invalid ELF header magic: != ELF [ 419.701204][T11827] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.631705][ T1137] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 420.791308][ T1137] usb 11-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 420.792326][ T1137] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.792341][ T1137] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 420.792359][ T1137] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.812100][ T1137] idmouse 11-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 421.008256][ T1137] usb 11-1: USB disconnect, device number 3 [ 421.017567][ T1137] idmouse 11-1:1.0: disconnected [ 421.096892][T11873] Invalid ELF header magic: != ELF [ 421.691160][T11877] __nla_validate_parse: 143 callbacks suppressed [ 421.691178][T11877] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1625'. [ 422.213809][T11889] siw: device registration error -23 [ 422.579990][T11898] Invalid ELF header magic: != ELF [ 422.804935][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1633'. [ 422.967522][T11909] tipc: Enabling of bearer rejected, failed to enable media [ 423.992120][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1642'. [ 424.510699][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1653'. [ 424.602127][T11958] syzkaller0: entered promiscuous mode [ 424.602143][T11958] syzkaller0: entered allmulticast mode [ 425.084064][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1662'. [ 426.488350][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1672'. [ 426.508850][T12010] debugfs: 'hsr0' already exists in 'hsr' [ 426.508867][T12010] Cannot create hsr debugfs directory [ 426.593871][T12010] mac80211_hwsim hwsim38 wlan4: entered promiscuous mode [ 426.593974][T12010] mac80211_hwsim hwsim39 wlan5: entered promiscuous mode [ 426.594048][T12010] mac80211_hwsim hwsim40 wlan6: entered promiscuous mode [ 426.594114][T12010] mac80211_hwsim hwsim41 wlan7: entered promiscuous mode [ 426.594182][T12010] mac80211_hwsim hwsim43 wlan8: entered promiscuous mode [ 426.594251][T12010] mac80211_hwsim hwsim46 wlan9: entered promiscuous mode [ 426.594317][T12010] mac80211_hwsim hwsim51 wlan10: entered promiscuous mode [ 426.594383][T12010] mac80211_hwsim hwsim52 wlan11: entered promiscuous mode [ 426.594450][T12010] mac80211_hwsim hwsim55 wlan12: entered promiscuous mode [ 426.594525][T12010] mac80211_hwsim hwsim56 wlan13: entered promiscuous mode [ 426.594591][T12010] hsr0: entered promiscuous mode [ 426.816144][ T5740] Bluetooth: hci3: connection err: -111 [ 427.199981][T12030] tipc: Enabling of bearer rejected, failed to enable media [ 427.201201][T12030] syzkaller0: entered promiscuous mode [ 427.201217][T12030] syzkaller0: entered allmulticast mode [ 427.425391][T12040] syzkaller0: entered promiscuous mode [ 427.425407][T12040] syzkaller0: entered allmulticast mode [ 427.556689][ T5740] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.587967][ T5740] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 427.786893][ T5743] Bluetooth: hci0: command 0x0406 tx timeout [ 430.487744][T12095] syzkaller0: entered promiscuous mode [ 430.487770][T12095] syzkaller0: entered allmulticast mode [ 431.813914][T12107] Invalid ELF header magic: != ELF [ 432.390999][T12111] smpboot: CPU 3 is now offline [ 432.525181][T12113] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 432.572620][T12113] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 432.660725][T12116] smpboot: CPU 1 is now offline [ 432.698332][T12116] smpboot: CPU 3 is now offline [ 432.764916][T12118] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 432.779761][T12118] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 434.182865][T12152] smpboot: CPU 1 is now offline [ 434.231181][T12152] smpboot: CPU 3 is now offline [ 434.241933][T12157] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 434.304341][T12157] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 435.058503][T12196] syzkaller0: entered promiscuous mode [ 435.058519][T12196] syzkaller0: entered allmulticast mode [ 435.649306][T12203] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.1736'. [ 436.589730][T12212] smpboot: CPU 1 is now offline [ 436.625955][T12212] smpboot: CPU 3 is now offline [ 436.629343][T12215] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 436.669939][T12215] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 436.791752][T12221] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1742'. [ 437.004689][T12228] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.1752'. [ 437.023096][ T5740] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 437.613886][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.613916][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.677750][T12262] tipc: Started in network mode [ 438.677768][T12262] tipc: Node identity 86310881884d, cluster identity 4711 [ 438.677890][T12262] tipc: Enabled bearer , priority 0 [ 438.678662][T12262] syzkaller0: entered promiscuous mode [ 438.678674][T12262] syzkaller0: entered allmulticast mode [ 438.680574][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1753'. [ 438.686887][T12262] tipc: Resetting bearer [ 438.691643][T12261] tipc: Resetting bearer [ 438.702899][T12261] tipc: Disabling bearer [ 438.741955][T12271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1756'. [ 438.839108][ T5740] Bluetooth: hci4: link tx timeout [ 438.839126][ T5740] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 438.851022][ T66] Bluetooth: hci4: link tx timeout [ 438.851034][ T66] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 439.454214][T12285] smpboot: CPU 1 is now offline [ 439.521164][T12288] tipc: Enabling of bearer rejected, failed to enable media [ 439.540102][T12285] smpboot: CPU 3 is now offline [ 439.607472][T12287] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 439.610728][ T0] numa_add_cpu cpu 1 node 0: mask now 0-2 [ 439.610748][ T0] numa_add_cpu cpu 1 node 1: mask now 0-2 [ 439.610782][T12282] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI [ 439.620136][T12282] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 439.622790][T12282] CPU: 0 UID: 0 PID: 12282 Comm: syz.7.1759 Not tainted syzkaller #0 PREEMPT(full) [ 439.625673][T12282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 439.628812][T12282] RIP: 0010:__schedule+0x2083/0x6920 [ 439.630479][T12282] Code: 0f 85 70 3c 00 00 4d 8b ac 24 d0 0e 00 00 48 c7 c0 40 20 8f 95 48 ba 00 00 00 00 00 fc ff df 49 8d 7d 14 48 89 f9 48 c1 e9 03 <0f> b6 0c 11 48 89 fa 83 e2 07 83 c2 03 38 ca 7c 08 84 c9 0f 85 32 [ 439.636464][T12282] RSP: 0000:ffffc900073cf890 EFLAGS: 00010003 [ 439.638361][T12282] RAX: ffffffff958f2040 RBX: 0000000000000001 RCX: 0000000000000002 [ 439.640840][T12282] RDX: dffffc0000000000 RSI: 1ffffffff1cd5324 RDI: 0000000000000014 [ 439.643319][T12282] RBP: ffffc900073cf9e0 R08: 0000000000000001 R09: 0000000000000000 [ 439.645642][T12282] R10: ffff88802b03cbd8 R11: 0000000000000000 R12: ffff88802b13c040 [ 439.648139][T12282] R13: 0000000000000000 R14: ffff88802b03c040 R15: 0000000000000000 [ 439.650612][T12282] FS: 0000000000000000(0000) GS:ffff88809574a000(0063) knlGS:00000000f5456b40 [ 439.653417][T12282] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 439.655475][T12282] CR2: 00000000f71c6400 CR3: 000000004fb11000 CR4: 0000000000352ef0 [ 439.657934][T12282] Call Trace: [ 439.658996][T12282] [ 439.659954][T12282] ? __lock_acquire+0x5c0/0x1f40 [ 439.661518][T12282] ? __pfx___schedule+0x10/0x10 [ 439.663119][T12282] ? find_held_lock+0x2b/0x80 [ 439.664607][T12282] ? schedule+0x225/0x2c0 [ 439.665972][T12282] schedule+0xdd/0x2c0 [ 439.667261][T12282] schedule_timeout+0x127/0x280 [ 439.668828][T12282] ? __pfx_schedule_timeout+0x10/0x10 [ 439.670512][T12282] ? __pfx_process_timeout+0x10/0x10 [ 439.672170][T12282] ? snd_rawmidi_write+0x488/0xc60 [ 439.673783][T12282] ? rcu_is_watching+0x13/0xc0 [ 439.675293][T12282] ? snd_rawmidi_write+0x44d/0xc60 [ 439.676912][T12282] snd_rawmidi_write+0x492/0xc60 [ 439.678485][T12282] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 439.680214][T12282] ? common_file_perm+0x266/0x500 [ 439.681811][T12282] ? __pfx_default_wake_function+0x10/0x10 [ 439.683678][T12282] ? bpf_lsm_file_permission+0x9/0x10 [ 439.685390][T12282] ? security_file_permission+0x76/0x210 [ 439.687147][T12282] ? rw_verify_area+0xce/0x6d0 [ 439.688677][T12282] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 439.690382][T12282] vfs_writev+0x5ed/0xdd0 [ 439.691768][T12282] ? __pfx_vfs_writev+0x10/0x10 [ 439.693350][T12282] ? lock_acquire+0x1d1/0x380 [ 439.694797][T12282] ? __fget_files+0x34/0x3d0 [ 439.696226][T12282] ? __fget_files+0x21f/0x3d0 [ 439.697672][T12282] ? do_writev+0x28a/0x340 [ 439.699072][T12282] do_writev+0x28a/0x340 [ 439.700426][T12282] ? __pfx_do_writev+0x10/0x10 [ 439.701926][T12282] __do_fast_syscall_32+0x13a/0x8b0 [ 439.703575][T12282] ? lockdep_hardirqs_on+0x7d/0x110 [ 439.705228][T12282] do_fast_syscall_32+0x32/0x70 [ 439.706811][T12282] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.708822][T12282] RIP: 0023:0xf743efec [ 439.710117][T12282] Code: Unable to access opcode bytes at 0xf743efc2. [ 439.712207][T12282] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 439.714819][T12282] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000840 [ 439.717290][T12282] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 439.719735][T12282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 439.722209][T12282] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 439.724693][T12282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 439.727143][T12282] [ 439.728159][T12282] Modules linked in: [ 439.729399][T12282] ---[ end trace 0000000000000000 ]--- [ 439.731104][T12282] RIP: 0010:__schedule+0x2083/0x6920 [ 439.731124][T12282] Code: 0f 85 70 3c 00 00 4d 8b ac 24 d0 0e 00 00 48 c7 c0 40 20 8f 95 48 ba 00 00 00 00 00 fc ff df 49 8d 7d 14 48 89 f9 48 c1 e9 03 <0f> b6 0c 11 48 89 fa 83 e2 07 83 c2 03 38 ca 7c 08 84 c9 0f 85 32 [ 439.731136][T12282] RSP: 0000:ffffc900073cf890 EFLAGS: 00010003 [ 439.731144][T12282] RAX: ffffffff958f2040 RBX: 0000000000000001 RCX: 0000000000000002 [ 439.731151][T12282] RDX: dffffc0000000000 RSI: 1ffffffff1cd5324 RDI: 0000000000000014 [ 439.731158][T12282] RBP: ffffc900073cf9e0 R08: 0000000000000001 R09: 0000000000000000 [ 439.731165][T12282] R10: ffff88802b03cbd8 R11: 0000000000000000 R12: ffff88802b13c040 [ 439.731171][T12282] R13: 0000000000000000 R14: ffff88802b03c040 R15: 0000000000000000 [ 439.731181][T12282] FS: 0000000000000000(0000) GS:ffff88809574a000(0063) knlGS:00000000f5456b40 [ 439.731203][T12282] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 439.731212][T12282] CR2: 00000000f743f000 CR3: 000000004fb11000 CR4: 0000000000352ef0 [ 439.731221][T12282] Kernel panic - not syncing: Fatal exception [ 440.825744][T12282] Shutting down cpus with NMI [ 440.827834][T12282] Kernel Offset: disabled [ 440.829234][T12282] Rebooting in 86400 seconds..