last executing test programs: 2m31.785254435s ago: executing program 32 (id=35): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f000000e400)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) 2m29.608237789s ago: executing program 33 (id=65): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1, 0x1, 0x8) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000080)={0x2, 0x1, 0x1, 0x6, 0x4}) 2m11.773204109s ago: executing program 3 (id=300): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x1, "45501821"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x1, 0x4}, {0x1001, 0x40}}]}}, 0x11) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xe}, @l2cap_cid_signaling={{0xa}, [@l2cap_conf_rsp={{0x5, 0x2, 0x6}, {0x40, 0x4, 0xe}}]}}, 0x13) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000040)=0x3) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0x3, 0x200, 0x9, 0x9, 0x2, 0x1}) 2m9.219783798s ago: executing program 5 (id=330): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/file0\x00', 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0xb7b, &(0x7f0000000000)={0x0, 0x5884, 0x10000, 0x0, 0x1c4}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0x3ff, 0x16, 0x20010, r2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}]}, 0x34}}, 0x24008080) 2m8.844737804s ago: executing program 5 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./exp\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='localhost ./exp 2147483647 0\n\x00', 0x1d) close(r1) 2m8.798305779s ago: executing program 5 (id=332): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000000000000000000000014f194e20002b"], 0x65) 2m8.681995801s ago: executing program 3 (id=333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x3f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) 2m8.643636327s ago: executing program 5 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 2m8.379084193s ago: executing program 5 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x21dfdbfe, {0x0, 0x0, 0x0, r2, {0x4, 0xfffa}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048091}, 0x0) 2m8.150795741s ago: executing program 3 (id=337): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2000, @remote}}}, 0x108) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0x0, @loopback}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) 2m7.983358437s ago: executing program 3 (id=338): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x46) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0xb46) write(r0, &(0x7f0000000280)='md0', 0x3) 2m7.835803856s ago: executing program 5 (id=339): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x2) close_range(r1, r2, 0x0) 2m7.567487918s ago: executing program 34 (id=339): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x2) close_range(r1, r2, 0x0) 2m7.501328802s ago: executing program 3 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000003"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2m7.380266426s ago: executing program 3 (id=344): mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x20}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40246608, 0x0) 1m52.369221131s ago: executing program 35 (id=344): mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x20}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40246608, 0x0) 1m37.140252764s ago: executing program 4 (id=510): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) 1m36.088128048s ago: executing program 4 (id=516): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f00000002c0)=[{}], 0x1, 0x4d0f) 1m35.09651465s ago: executing program 4 (id=521): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x91e, 0x800, 0x103, 0x3a7}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) pause() r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) 1m34.044937712s ago: executing program 4 (id=525): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 1m33.961279576s ago: executing program 4 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x800) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) 1m33.762309314s ago: executing program 4 (id=528): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x80000000, 0x4) 1m33.594459021s ago: executing program 36 (id=528): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x80000000, 0x4) 1m7.974430225s ago: executing program 7 (id=735): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1005}, {0x1004}}}]}}]}]}]}}]}, 0x5c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0x20) 1m7.864793377s ago: executing program 7 (id=737): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xa0) listns(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000010500010001"], 0x1c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x0) read(r1, &(0x7f0000000700), 0x1000) 1m7.782668082s ago: executing program 7 (id=739): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90012000e00050016ea0a"], 0x17) pipe2$9p(0x0, 0x880) openat$tun(0xffffffffffffff9c, 0x0, 0x200c00, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m7.220876262s ago: executing program 7 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000180)={0x2, 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xfffffffffffffce5}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r1, 0x2811, 0xffffffdc, 0x17, 0x0, 0x0) 1m7.097527961s ago: executing program 7 (id=752): r0 = syz_open_dev$usbfs(0x0, 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) sendfile(r1, r1, 0x0, 0xe) 1m6.830479692s ago: executing program 7 (id=756): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x803, 0x255, 0x0, r0}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000001}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x20000, 0x2, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x401f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ff0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xd) 1m6.808956003s ago: executing program 37 (id=756): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x803, 0x255, 0x0, r0}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000001}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x20000, 0x2, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x401f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ff0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xd) 49.783449789s ago: executing program 8 (id=996): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30004506, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x12d) close(r0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x842, 0x4) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101, r2}) 49.604386419s ago: executing program 8 (id=1000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 49.404683332s ago: executing program 8 (id=1001): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0) 49.254452539s ago: executing program 8 (id=1005): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) open(0x0, 0x108843, 0x190) pipe(0x0) pipe(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 49.082152081s ago: executing program 8 (id=1008): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xc, 0x4, 0x4, 0x100, 0x0, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r3}, 0xc) 48.76223358s ago: executing program 8 (id=1011): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) nanosleep(&(0x7f00000000c0)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) r1 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x3e8}, 0x10) bind(r1, &(0x7f0000000140)=@generic={0x1f}, 0x80) connect(r1, &(0x7f0000000180)=@generic={0x1f, "01020304050600"}, 0x80) 48.721444886s ago: executing program 38 (id=1011): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) nanosleep(&(0x7f00000000c0)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) r1 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x3e8}, 0x10) bind(r1, &(0x7f0000000140)=@generic={0x1f}, 0x80) connect(r1, &(0x7f0000000180)=@generic={0x1f, "01020304050600"}, 0x80) 16.821574083s ago: executing program 6 (id=1255): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db643", @ANYRES8=r0], 0x97) 16.783662118s ago: executing program 6 (id=1256): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) landlock_restrict_self(r1, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 16.686293849s ago: executing program 6 (id=1258): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x14, 0x30, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="5fad", 0x2}], 0x1) 15.335854457s ago: executing program 6 (id=1272): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) 15.23121687s ago: executing program 6 (id=1273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) 15.032621361s ago: executing program 6 (id=1277): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) socket$inet(0x2, 0xa, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write(r1, &(0x7f0000000140)="000008004500001c123400004011e5c8ac141401ac14140204d204d200080000", 0x20) 14.942237293s ago: executing program 39 (id=1277): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) socket$inet(0x2, 0xa, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write(r1, &(0x7f0000000140)="000008004500001c123400004011e5c8ac141401ac14140204d204d200080000", 0x20) 3.679121709s ago: executing program 0 (id=1406): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0x1a}]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x8103, 0x0, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 3.666844007s ago: executing program 0 (id=1407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0x7}, {0x2, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.521061056s ago: executing program 0 (id=1408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) 3.36186299s ago: executing program 0 (id=1409): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000060034503003000640000ac019078ffffffff0a0101020c"], 0x34) 3.251471751s ago: executing program 0 (id=1410): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f00)=""/53, 0x35}, {0x0, 0x35}, {&(0x7f0000000fc0)=""/103, 0x67}], 0x3}, 0x6}], 0x1, 0x40010080, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b39859afd5b042c0", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.850939256s ago: executing program 0 (id=1413): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.6110587s ago: executing program 2 (id=1421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xd, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x2, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3fb, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x6, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x7, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x8, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x1, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x6, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x140, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0xb, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x5, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0xc, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x1000040, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x8, 0x8, 0xbb99, 0xff, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x6, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0x624, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.531721154s ago: executing program 2 (id=1423): sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 1.370707905s ago: executing program 9 (id=1433): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) 1.25764712s ago: executing program 9 (id=1434): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x31, 0x4, 0xffffffffffffffff, 0x6, 0x8e335, 0x9}) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) 1.257454901s ago: executing program 2 (id=1435): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000100)='reno\x00', 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400e8ff04080102"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.257310915s ago: executing program 1 (id=1436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x1}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x6, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x81, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x3, 0x8, 0x3, 0x2, 0x9, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x9, 0x7, 0x3, 0x80, 0x68}, {0x6000, 0x8000}, {0xe9eb89d253be8b8b, 0x9}, 0x50000, 0x0, 0x200000, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc3}, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0xb, 0x2, '\x00', 0x6}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdb}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0xd, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0xe3}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.191813962s ago: executing program 9 (id=1437): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x4008, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@sack_perm, @window={0x3, 0x7, 0x7}, @mss={0x2, 0x8}, @mss, @sack_perm, @mss={0x2, 0x5}, @mss={0x2, 0x94}, @sack_perm], 0x8) sendmsg(r0, &(0x7f0000008500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="c8986d", 0x3}], 0x1}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) 1.19166674s ago: executing program 1 (id=1438): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0xfffffffe, @loopback, 0x7}, 0x1c) socket$inet(0x2, 0x4000000000000001, 0x0) shutdown(r0, 0x1) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7f}, 0x1c) sendto(r1, &(0x7f00000000c0)="1e1a02f8045f40dec1eee1eda0a1358fc61764f0678eb2354b1b5f7972d8d8a583060b008d5676a814b496b5598751acd495188d3526e054fe90538588262f1e704b8a262cfa495499471986ca25e6c90ccdd6d2464dab555f566ac4f2eacb636c4b439b4a7ddc6e07fb12322dc050230ef3cc1b464316e3585fb35f", 0xfffffffffffffec5, 0x4048096, 0x0, 0x0) 665.404728ms ago: executing program 2 (id=1439): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x8, 0x1, 0x0, 0x0, 0x1000008) sync() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 361.442436ms ago: executing program 2 (id=1440): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) 360.349091ms ago: executing program 9 (id=1441): timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000001c0)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000300)={0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000008c0), 0x1, 0x400) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001cc0)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffdef}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000cc0)="dc72f8de4b78bed6ea6b6458560a35f44b9b0bb19af2d73797431a130ebb12a252c52230313096027d3bbfae32dcd28fe65df525f0180f05cf6d8ac38b5d640dfd508b6684483cdc79a6ff473d4ac5691271941450317969097583043d38c9f81736b4a3c228007e4c5dfc5b3acacaec203d4b91096db99c8383e0f77cf0ebc3ced4e777e71f5fbc6dfa6b0e11b8ca97362dec991a9c7cb857a38901748642caf5aac29390399a39e8702fabd3fee6d8fbc03c1ee52e20652ede30729368968cf2d946b8bb15091a499f52b55e7631fda560f1cc04debde69bef87c5fa588ecd15cb25acd2516a4770b40a9de6361f134bff97f249c736d914ea526b279c32c4613286dcf490289e4dbf42cc7f194b9cf71e49d7b72ebaa4b6e090487cb3a12def9f560650151e3269e7ed09ebd4f237099b7a984d8be112e66cd8f40057ba2f7c29946fb852f14cd8e27365dd3680871344d55190d3a68894171ed723a5969f320430a9d06e0c21053bfe0c7b19798c21448e2bff89a608105ce22900505b6e94e2c4def13af7e3b164dc107c267f647cf1e5482e9500aa8c7f4550c3c695b861ae48e8ce6860788b0ce533cff6cdde9268455c82ada6a2401015b9e107cfdf6b4972dc8b35e07ae7d62f41e91240c8a8a6ebad70074c6a0b7545d76a40254ec861bc0feef77774ccbedc70e1c058f630f4ceddf45769f73deda458a36c439128d9c612d592a393149301fb5ac07363347d52b37b2aa522d6f35c1c92f7eb427c57e1dc73130aba115c6ec0b5578070d4cd9b424f7ae6cab8a56875369d8f4686cb2650e2a03069957fe811452ce6730248c7c495764a3b29282cee50b3c75dfa0b2221c94eaa91f4f86f75e15999e23a3db6ca9ba8a6a3651f4f0dc88dbbcb524374c05b968c2443d00a1506d3df42cc8a08b4f60040c7503b28676de1347db4085869916a7279508bc7829a882fa729f5c3991a47d269ed0f10226b99eee515470b0785832cf3ff3d6b4f83abf4ef1db7db7c4a44d264fec7cdab32d5d60e9c8f1dd2cdcfc3ba657783568f34d85b7cb4fad6ac6aafce1855c051f7248a4da0f2885e178e9052686d9877578a453f5265f7ab40f6f7d17145069563f14d653c7a360ec88444eec129a8ba93c4f491a36e23e5bb31faa5aa982268184325953bfa796d93bac2577ec3434eab55b1da451dbe7017187a4553e7ea0fae77f047a68824bc54bd1598fa6bf4ab079b4fbf7b43e3d94f84f261728540eb2983868881904407e0badb108a52293ae1bac4c567cddcc14c3da972901cc50b6cc1025c6b61fac006e84d18a9c3a1069eed6847c18a59e93d37f306916f63ea27312761ac599f94082669d7a5ec1b8c3ce5261029a4730b912b8b3c4fe2666b9fdf1a89d2e195cdb7422784c8dad749d1b239530081d74c68ce7a4f39aac7461d25ec3909c59dc83f0ce33bdbfd889047c4021db5e64f0a0bbd31d1637d27797f276ab088c54183e12071dea8a187f0a7a4b9f50b2828a61515ef5063070012fab813bcf25f7d12dd32a6c664870903287139558a0ad76dc5fdb2ff44221ce6bbefe7d9b40c2f9402bbac8fd955e245d021db25c5f93ca0e7fadfeb8b578887a3f3decc175c2057ed5a3e04bee045f643a9f45b561cd39382c68593b6f2c75fd871004a908e1dbe627da63ef1782e0a38523505a433258f3751237640d6b2f1b9664a6353e3ac2338e7c8e7ff00e54443c013629f62233b3dafcacef6f4f9e419f7b178539d64cfa11d4fcf0d5af76d3f7f21e613da968ccef70977bff142452a0630ee5b59ea68b6db48cbdb012c61cf4ccd152fcd5eb8101275d14aec20f42936aa1865c0eed48d38b0310ececdaa257317876764428cc8b4846fa6754cb9c57db3558529fbf676d9cf54c7e75e9046d3138f71ed36297d8c01be1c24d80027b3beda471268eefc56501a6ddc9a7371002e3a3eacb76f8afa8c1ed4dfea46371d87189ffb0705252be9a11434111b4c9784823a3b42dc88e7ffe99ce0495e3a683f2f55d08a674e441d0356f94173b5894b46674efe35d7dcc2f926dc88dd82289adb8ec9ef7a4d4cea1ee23582ba8d0926c6a636bdfba82a493b6d40ec0fc8ca4995f2e46903f618bf55201f2fdb9edebd1845305fb00c4b90e0ebd265632e41db8c480e9b9c741b0fb23b61f7e032934df179b54227a0aae1d93b3eeb5393f7ae796fcf6167df79e91bbe66785cd94f46d3bcd8cb7f0018740013753a6d893ffce969fd31f9cef0384d497ebf1e6bffd1b4d75d7563c4f12809fe8f2e7bb5330d1d550fb6753560c7dcbca5b41fc52ad173c1971d74ac2d27b3989456199bdbb1b7ff802f998ffbd935bf5bcf92ebf1139240c8a21c1a147c4ca815460cd45f5477e1b84d1f0f2fae6470a6e371cf74bdca3a2d3e4f640044612672e0fd639c63005296e301f0836b9b4e082258fe5e4e5fd4ca69d6742d3876756bbd25ad6cd53d23c78eaa55e72f071bb2372fb8bc259fb2c678ebca7bab7648e87e084c9f294da663eec12eb28982591add9eb6634780bf6d9dd2ee98925088ed53b1477df7a1d525d97a0f6992e1d921832f14a6594edc930b9e17a948e010b84a92548ac89a7021a76d9d4fe7825a0ae279edaa2610c3ff8900f0d768f83e8bc3ea249bed2c0dc2c62c3e0cbc040a2bf1fec882493ceab4c7c787ab3211c9dc99de556f423634af6baaad5d5e3682653f7c8db262191c410df84d146a7faa0b1495109e4798bc3bbe19f6ea68443406a58ddfe8efc66518e2caac10edca8848a60b258d4e05dda31c3ba6b51bb13ec0e651fe91d7a2ac0a066dfb7da1407a394f5a758676ee5adccf8e025dce4daa878709bd32ee107966a3179155d0cce764117197f8ec7b703c2dc630e77e026f895c339198e5909ca499c59ef0acb05fe1f760c7513fd549afe8eb1fd8b674860aa7e0ba6d449dd8922181a559a4ff22c5304bf95d3b4c32469701b6d7ff69003f93e87111a20ecad0d2b4b92d30d355c06e11bbc8376e1e5e9cfe1b008aa359356cf67d728d66e250ea66d720e5f842f67f84f576fbb80c4b1ba64171c7f0774139732d9b42ff0e002f6bc2225d72abbcd3c8bc899bcc164e3bdbe88561b4fe6a2a8094e1531ef6329f820a1ff466d363825bc0ed0544d61c8e182b73eda96f3d676b36f6010f9cfa18c869cd68b34695da812daf49d623dca49669d5b2609b4acb3a4b8918b7b6fdf9e9a27eaa7662f1935b6912aad0c8c686b24640b94072cbd6e0e555c326a8ae8c92c77449a4755087bfd0f59838277fa689490a8bfbb8823af6be15b0149fb3855c18574e2cdf4330554d90ab6865663d7668d460c0b159f5e9071efded12aa32617d624d47527f47e0879a5f4971b992006643b089ed325e25750249f7dcbc318a96ad501291ace6b3747413638cbbcbf9d06902bf19c625932a4fc5d74c17ea32508952d7a8c2d48efef535b320b66eccbbaaa4b77c8e36c073e39a5fcb9f4e2bb3507da03fc1544f1c810e60e0bc5edd8fc723fe92c4614add0a29eff89ee415c35d85b686091bbdda782c35bf08a4c525c703ea198511673390c8651830d4f1aad4545d6cb0e0dbd99222d5f27516efd40bc3df7d087f734359d910e9aa9133c2330a428818d7fb6e345aa0c9c5ea3247e22687655ba28551a79744432eeda207ea4a063408dcb07c34030bf06f4187bae7a4f9b3674dee883ca124cf087dcfcc38a14824c2ca8ce1f49a6e2a40716249fc64bdd1aeb3d9786d2bfced0a7e30f013f30f6be5922576b5d892a6c5a850634d22d71d398da120b912ecf6ad3c71537568248549111ef1669cf71de319a0094ff353163caa45a0a1030083f26b27faeb7df977eaa0f289ab52b9bd689e692c3df4d7d5abb8d2c1aae8f0b1ca2336fe75bf66f5114857c0d9c2363b144425878b4efdf8bf7d48581d783b36ee7467e78239afa7ec4ecdf1cf5cdfb3540cbc770c8853c7973175bc2cb1180791f8200ec8729742ff634060499daf2d77c2bda6b0dd7a7fef830df26f44f79be18d5300b0966c1c3fddcf359b7ebb20e7c45777ba4be5510043283995ebb908ea59e406655d07eb47c2b600320d69eb55bac30f86781313fba3b0e1a41a431db6d238d692a1da0d586e84cf10a6527c9494c83a7c0eac92a6dc503a27ca77452c22c0a7b279021a4e8edb31cb2177523324a546b4351a7d7a32193def54afa250449603579645d25e1c32dfffea75b915f2d26aaa756b2cd61015f4d2a22f75eef234177d508584bc5e2d46d50d75ac7cc4f49f0034d82c1aa473a686b10e4d254795afda62f7bfcc4e7b3e8ed098f2a4ba30128b3ab63ddeacc2b08b2e287f0180bf0cf5acc7141be64ef7cb8d91d5666f87e731c7045ca449414a8a38964d118d861b2c6663839aad5e861fa503ff40a7b31a039baff22da61160fe0097ebf4d96f2bcc17b89632db1cba5b6bde2e1fd92df0ca44db106aba060fd943f6147c887df719c8012beaf711e43c45e40807e91a1bfc190635b0dec02c6655e98069369cb2858343b46e5659853d32bae687b4dca74cab2d69673c1617d2f0f080d002f0dee7fc59dd4707140dd85d7eef13b28e92681468f48638959f0afbd8803845e3e55dbae051befb86cacd6449f41e3e56813a546ebe125d7fe659c20422e9ed17690825ba213d3996da427dcff267c651e4a22d79336a12ee1c428f538b5dcbb51b8f85b2a1ddd0356d0344ec901d6bacfd00cc8273cdeea8f8dfbb3e5cf99c6efca798bc15a5fb0a1b0dc074ab92361411692a5e2300e3057bfe5bdbf274a78e3554b3429c41fb97e0bcddb4ecf8b1517bb31fdf4fc7a798496c74726f263fe7f5626186db73aa1a4fad89706dd73a2f2dd49447f1aff8e9812933e0c6955ae9cab16936451280135bab2276d145c1ad56fd6bd443f79690ef70f73ba4406cba41055396742c1e3c49243cdb463b93117656fa105481f8e8b8281b7a35c24c8820334222c0630a07a5455d776c1500805ff3094c862d0f36ad9445aa7516dee608fb3c6fbc4ded8f4b07d11437468e33cb9e22a234535777852ef1201f37fdc9a87be8ffd8509cf2ee07b848687e2f366091fab188b1f3c5081032bada835183294d86513ed2fa347e065468bb21ed3c6f317fc4d7ba19a290cc1c0e99f227e6ef7460ea2b717c22944b974d80ada4b91a700bf0204803ac230ee55cb66cb7be46287b34fb35169e63d7fe49d9dfae2719bd67be2b24b5f5a58743d781fa5e555c943817e29e0e7e08272d33206d4875ec65615c64ec23e0125b420d6aaab4ec796db501071e1451eb5a4f265a7e6d5c8586e163012e322d168d1b5158ceb88a2b3f5825fb4b92dd24fe0c24811fdc67853a3978d29f23366efb2fdee1a2b1b305e336bebbdd869474e04f2c312af38632b428a6d6f86404623bf851e43a366c1ac8f800ea3b68644fe2ade133d1c59032bde3dc8510e53cfce9df3981ae6115931b724c708438be926d5a26d819d9d3bd7ebb44639b52e08e400a7751a938564494eca1021050f3e50e9c0e7560440c881ced94543d609965239f22ab4c62c0499f22accef07e71af67fa757a2218b4bf13aaee01e9dd0e7e1f155a43754eabcfb2797c63262fd00265fcef69b80f70be86f25b18c6a4897c630320a7c8fb7eca9fa8fd9d5f84049def102f061cfb30a0994c05c9aeb75ebe60ccbf4c9a6663bee70cbcd7ab4981daa0fd882992fee65fbf8749d5f335140657ded2b9db08a719ef707f8a52b27ee1907100"}], 0x9, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000009c0)=0x8) msgrcv(0x0, &(0x7f0000000a40)={0x0, ""/147}, 0x97, 0x5082726ddfd0ef84, 0x2000) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000b00), &(0x7f0000000b40)=0x8) 272.993749ms ago: executing program 1 (id=1442): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000240)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fec0ffff000000"], 0x40}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 272.198724ms ago: executing program 2 (id=1443): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x1e) 191.971594ms ago: executing program 1 (id=1444): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 191.748373ms ago: executing program 9 (id=1445): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 100.627428ms ago: executing program 1 (id=1446): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7fff, 0x8}}}}]}, 0x44}}, 0x20004000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000040) openat$udambuf(0xffffff9c, 0x0, 0x2) 100.437288ms ago: executing program 9 (id=1447): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/devices/LNXCPU:01/eject\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) close(r1) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 0s ago: executing program 1 (id=1448): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_emit_ethernet(0x7e, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000002dc0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r1, 0xc0086448, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x1}]}}]}, 0x40}}, 0x4890) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x2}, 0x50) kernel console output (not intermixed with test programs): 280] ? lockdep_hardirqs_on+0x7d/0x110 [ 116.631523][ T8280] ? putname+0xb1/0x110 [ 116.631549][ T8280] ? kmem_cache_free+0x127/0x6c0 [ 116.631577][ T8280] ? __ia32_sys_mount+0x292/0x310 [ 116.631592][ T8280] __ia32_sys_mount+0x292/0x310 [ 116.631609][ T8280] ? __pfx___ia32_sys_mount+0x10/0x10 [ 116.631632][ T8280] __do_fast_syscall_32+0x13a/0x8b0 [ 116.631652][ T8280] do_fast_syscall_32+0x32/0x70 [ 116.631670][ T8280] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.631691][ T8280] RIP: 0023:0xf742efec [ 116.631709][ T8280] Code: Unable to access opcode bytes at 0xf742efc2. [ 116.631717][ T8280] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 116.631735][ T8280] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 116.631746][ T8280] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 00000000800000c0 [ 116.631756][ T8280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.631766][ T8280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.631776][ T8280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.631799][ T8280] [ 116.870463][ T8290] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.944405][ T44] audit: type=1326 audit(1791601097.921:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 116.944517][ T44] audit: type=1326 audit(1791601097.921:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 116.945563][ T44] audit: type=1326 audit(1791601097.931:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 116.945779][ T44] audit: type=1326 audit(1791601097.931:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 116.945873][ T44] audit: type=1326 audit(1791601097.931:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 116.946051][ T44] audit: type=1326 audit(1791601097.931:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 116.946654][ T44] audit: type=1326 audit(1791601097.931:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 116.946815][ T44] audit: type=1326 audit(1791601097.931:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 116.947016][ T44] audit: type=1326 audit(1791601097.931:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 116.947107][ T44] audit: type=1326 audit(1791601097.931:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.655" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 117.067476][ T8298] FAULT_INJECTION: forcing a failure. [ 117.067476][ T8298] name failslab, interval 1, probability 0, space 0, times 0 [ 117.067510][ T8298] CPU: 0 UID: 0 PID: 8298 Comm: syz.7.657 Not tainted syzkaller #0 PREEMPT(full) [ 117.067533][ T8298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.067545][ T8298] Call Trace: [ 117.067552][ T8298] [ 117.067561][ T8298] dump_stack_lvl+0x100/0x190 [ 117.067593][ T8298] should_fail_ex.cold+0x5/0xa [ 117.067636][ T8298] should_failslab+0xc2/0x120 [ 117.067668][ T8298] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 117.067697][ T8298] ? __lock_acquire+0x5c0/0x1f40 [ 117.067726][ T8298] ? __alloc_skb+0x140/0x710 [ 117.067764][ T8298] __alloc_skb+0x140/0x710 [ 117.067788][ T8298] ? __pfx___alloc_skb+0x10/0x10 [ 117.067815][ T8298] ? lock_acquire+0x1d1/0x380 [ 117.067844][ T8298] ? do_raw_write_lock+0x11e/0x260 [ 117.067870][ T8298] tipc_buf_acquire+0x26/0xe0 [ 117.067900][ T8298] named_prepare_buf+0x29/0x170 [ 117.067933][ T8298] tipc_named_publish+0x1f2/0x760 [ 117.067969][ T8298] tipc_nametbl_publish+0x1d5/0x300 [ 117.067995][ T8298] tipc_sk_publish+0x1d8/0x430 [ 117.068020][ T8298] ? __pfx_tipc_sk_publish+0x10/0x10 [ 117.068046][ T8298] ? tipc_group_create+0x4c0/0x660 [ 117.068069][ T8298] tipc_setsockopt+0x7af/0xe30 [ 117.068094][ T8298] ? __pfx_tipc_setsockopt+0x10/0x10 [ 117.068116][ T8298] ? lock_acquire+0x1d1/0x380 [ 117.068144][ T8298] ? __fget_files+0x34/0x3d0 [ 117.068181][ T8298] ? __pfx_tipc_setsockopt+0x10/0x10 [ 117.068206][ T8298] do_sock_setsockopt+0xf3/0x1d0 [ 117.068238][ T8298] __sys_setsockopt+0x119/0x190 [ 117.068267][ T8298] __ia32_sys_setsockopt+0xbc/0x160 [ 117.068289][ T8298] ? __do_fast_syscall_32+0xb3/0x8b0 [ 117.068310][ T8298] ? lockdep_hardirqs_on+0x7d/0x110 [ 117.068342][ T8298] __do_fast_syscall_32+0x13a/0x8b0 [ 117.068368][ T8298] do_fast_syscall_32+0x32/0x70 [ 117.068390][ T8298] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.068415][ T8298] RIP: 0023:0xf742efec [ 117.068437][ T8298] Code: Unable to access opcode bytes at 0xf742efc2. [ 117.068446][ T8298] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 117.068465][ T8298] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000010f [ 117.068478][ T8298] RDX: 0000000000000087 RSI: 0000000080000140 RDI: 000000000000001c [ 117.068491][ T8298] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.068504][ T8298] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 117.068517][ T8298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.068545][ T8298] [ 117.068608][ T8298] tipc: Publication distribution failure [ 117.185681][ T8306] netlink: 'syz.7.661': attribute type 1 has an invalid length. [ 117.277499][ T8311] fuse: fd is not a fuse device [ 117.385226][ T8322] netlink: 'syz.6.668': attribute type 1 has an invalid length. [ 117.404120][ T8322] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.467305][ T8322] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 117.482330][ T8327] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 117.505573][ T7924] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 117.617118][ T7924] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 118.266184][ T8344] kvm: user requested TSC rate below hardware speed [ 118.266615][ T8344] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 118.266736][ T8344] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 119.685175][ T8363] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 119.709083][ T8367] netlink: 'syz.7.678': attribute type 16 has an invalid length. [ 119.709115][ T8367] netlink: 'syz.7.678': attribute type 17 has an invalid length. [ 119.887395][ T8367] bridge0: port 3(vlan2) entered blocking state [ 119.888255][ T8367] bridge0: port 3(vlan2) entered forwarding state [ 120.124762][ T7330] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 120.285608][ T7330] usb 13-1: Using ep0 maxpacket: 16 [ 120.286933][ T7330] usb 13-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 120.287942][ T7330] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.287969][ T7330] usb 13-1: config 0 interface 0 has no altsetting 0 [ 120.290003][ T7330] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.290023][ T7330] usb 13-1: Product: syz [ 120.290037][ T7330] usb 13-1: Manufacturer: syz [ 120.290051][ T7330] usb 13-1: SerialNumber: syz [ 120.306972][ T7330] usb 13-1: config 0 descriptor?? [ 120.621250][ C3] imon 13-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 120.662623][ T7330] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input9 [ 120.687498][ T7330] imon:send_packet: packet tx failed (-71) [ 120.704651][ T7330] imon 13-1:0.0: panel buttons/knobs setup failed [ 121.267387][ T8389] netlink: 28 bytes leftover after parsing attributes in process `syz.6.690'. [ 121.267407][ T8389] netlink: 28 bytes leftover after parsing attributes in process `syz.6.690'. [ 121.267416][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.690'. [ 121.334679][ T7330] rc_core: IR keymap rc-imon-pad not found [ 121.334692][ T7330] Registered IR keymap rc-empty [ 121.335829][ T7330] imon 13-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 121.335844][ T7330] imon 13-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 121.339090][ T7330] imon:send_packet: packet tx failed (-71) [ 121.356411][ T7330] imon 13-1:0.0: remote input dev register failed [ 121.356480][ T7330] imon 13-1:0.0: imon_init_intf0: rc device setup failed [ 121.385827][ T7330] imon 13-1:0.0: unable to initialize intf0, err 0 [ 121.385841][ T7330] imon:imon_probe: failed to initialize context! [ 121.385847][ T7330] imon 13-1:0.0: unable to register, err -19 [ 121.390109][ T7330] usb 13-1: USB disconnect, device number 2 [ 121.734709][ T7330] usb 13-1: new full-speed USB device number 3 using dummy_hcd [ 121.905823][ T7330] usb 13-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 121.906674][ T7330] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 121.906690][ T7330] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 121.906704][ T7330] usb 13-1: config 0 interface 0 has no altsetting 0 [ 121.908214][ T7330] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.908226][ T7330] usb 13-1: Product: syz [ 121.908233][ T7330] usb 13-1: Manufacturer: syz [ 121.908241][ T7330] usb 13-1: SerialNumber: syz [ 121.911334][ T7330] usb 13-1: config 0 descriptor?? [ 121.911841][ T8370] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 122.114036][ T8294] syz.1.655 (8294) used greatest stack depth: 17704 bytes left [ 122.120910][ C3] imon 13-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 122.121711][ T7330] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input11 [ 122.406693][ T7330] rc_core: IR keymap rc-imon-pad not found [ 122.406711][ T7330] Registered IR keymap rc-empty [ 122.406781][ T7330] imon 13-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 122.406796][ T7330] imon 13-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 122.547019][ T7330] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 122.552401][ T7330] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input12 [ 122.556237][ T7330] imon 13-1:0.0: iMON device (15c2:0045, intf0) on usb<13:3> initialized [ 122.777612][ T8370] imon:send_packet: packet tx failed (-71) [ 122.778876][ T6139] usb 13-1: USB disconnect, device number 3 [ 122.804897][ T8370] imon:lcd_write: send packet failed! [ 123.589675][ T8413] netlink: 64 bytes leftover after parsing attributes in process `syz.6.700'. [ 123.600392][ T8413] syzkaller1: entered promiscuous mode [ 123.600404][ T8413] syzkaller1: entered allmulticast mode [ 123.645543][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'. [ 123.688491][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.701'. [ 123.808813][ T8430] FAULT_INJECTION: forcing a failure. [ 123.808813][ T8430] name failslab, interval 1, probability 0, space 0, times 0 [ 123.808834][ T8430] CPU: 0 UID: 0 PID: 8430 Comm: syz.7.707 Not tainted syzkaller #0 PREEMPT(full) [ 123.808847][ T8430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.808855][ T8430] Call Trace: [ 123.808859][ T8430] [ 123.808864][ T8430] dump_stack_lvl+0x100/0x190 [ 123.808884][ T8430] should_fail_ex.cold+0x5/0xa [ 123.808899][ T8430] ? __pfx_devpts_fill_super+0x10/0x10 [ 123.808916][ T8430] should_failslab+0xc2/0x120 [ 123.808934][ T8430] ? __pfx_devpts_fill_super+0x10/0x10 [ 123.808949][ T8430] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 123.808966][ T8430] ? alloc_inode+0x183/0x250 [ 123.808980][ T8430] ? __pfx_devpts_fill_super+0x10/0x10 [ 123.808996][ T8430] alloc_inode+0x183/0x250 [ 123.809008][ T8430] new_inode+0x22/0x1c0 [ 123.809019][ T8430] ? rcu_is_watching+0x13/0xc0 [ 123.809033][ T8430] ? __pfx_devpts_fill_super+0x10/0x10 [ 123.809048][ T8430] devpts_fill_super+0x197/0x610 [ 123.809064][ T8430] ? __pfx_devpts_fill_super+0x10/0x10 [ 123.809093][ T8430] get_tree_nodev+0xdd/0x190 [ 123.809109][ T8430] vfs_get_tree+0x92/0x320 [ 123.809121][ T8430] path_mount+0x7d0/0x2850 [ 123.809134][ T8430] ? __pfx_path_mount+0x10/0x10 [ 123.809144][ T8430] ? lockdep_hardirqs_on+0x7d/0x110 [ 123.809165][ T8430] ? putname+0xb1/0x110 [ 123.809181][ T8430] ? kmem_cache_free+0x127/0x6c0 [ 123.809199][ T8430] ? __ia32_sys_mount+0x292/0x310 [ 123.809210][ T8430] __ia32_sys_mount+0x292/0x310 [ 123.809221][ T8430] ? __pfx___ia32_sys_mount+0x10/0x10 [ 123.809237][ T8430] __do_fast_syscall_32+0x13a/0x8b0 [ 123.809250][ T8430] do_fast_syscall_32+0x32/0x70 [ 123.809263][ T8430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.809277][ T8430] RIP: 0023:0xf742efec [ 123.809294][ T8430] Code: Unable to access opcode bytes at 0xf742efc2. [ 123.809299][ T8430] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 123.809311][ T8430] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 123.809319][ T8430] RDX: 0000000080000040 RSI: 0000000000000001 RDI: 0000000000000000 [ 123.809326][ T8430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.809333][ T8430] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 123.809341][ T8430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.809356][ T8430] [ 123.871464][ T44] kauditd_printk_skb: 15 callbacks suppressed [ 123.871475][ T44] audit: type=1326 audit(1791601104.851:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.7.708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 123.871599][ T44] audit: type=1326 audit(1791601104.851:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.7.708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 123.872414][ T44] audit: type=1326 audit(1791601104.851:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.7.708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 123.872520][ T44] audit: type=1326 audit(1791601104.851:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.7.708" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf742efec code=0x7ffc0000 [ 123.872728][ T44] audit: type=1326 audit(1791601104.851:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.7.708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 123.872839][ T44] audit: type=1326 audit(1791601104.851:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.7.708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 123.872932][ T44] audit: type=1326 audit(1791601104.851:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.7.708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 123.873746][ T44] audit: type=1326 audit(1791601104.851:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.7.708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 123.873853][ T44] audit: type=1326 audit(1791601104.851:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.7.708" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf742efec code=0x7ffc0000 [ 123.873980][ T44] audit: type=1326 audit(1791601104.851:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.7.708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 124.451140][ T8442] jffs2: notice: (8442) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 124.518813][ T8447] fuse: fd is not a fuse device [ 124.560410][ T8451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.715'. [ 124.560427][ T8451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.715'. [ 124.560435][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.715'. [ 124.764854][ T5835] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 124.924835][ T5835] usb 11-1: Using ep0 maxpacket: 32 [ 124.926911][ T5835] usb 11-1: unable to get BOS descriptor or descriptor too short [ 124.926947][ T5835] usb 11-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 124.928045][ T5835] usb 11-1: config 14 has an invalid interface number: 57 but max is 1 [ 124.928063][ T5835] usb 11-1: config 14 has an invalid interface number: 81 but max is 1 [ 124.928079][ T5835] usb 11-1: config 14 has no interface number 0 [ 124.928092][ T5835] usb 11-1: config 14 has no interface number 1 [ 124.928227][ T5835] usb 11-1: config 14 interface 81 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 124.928247][ T5835] usb 11-1: config 14 interface 81 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 124.928271][ T5835] usb 11-1: config 14 interface 81 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 124.928291][ T5835] usb 11-1: config 14 interface 81 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 124.928311][ T5835] usb 11-1: config 14 interface 81 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 124.928330][ T5835] usb 11-1: config 14 interface 81 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 124.928347][ T5835] usb 11-1: config 14 interface 81 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.928367][ T5835] usb 11-1: config 14 interface 57 has no altsetting 0 [ 124.928381][ T5835] usb 11-1: config 14 interface 81 has no altsetting 0 [ 124.931874][ T5835] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.931892][ T5835] usb 11-1: Product: syz [ 124.931904][ T5835] usb 11-1: Manufacturer: syz [ 124.931915][ T5835] usb 11-1: SerialNumber: syz [ 125.355645][ T5835] legousbtower 11-1:14.57: interrupt endpoints not found [ 125.760021][ T5835] legousbtower 11-1:14.81: LEGO USB Tower firmware version is 0.0 build 0 [ 125.777187][ T5835] legousbtower 11-1:14.81: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 126.423194][ C3] usb 11-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 126.423947][ T7018] usb 11-1: USB disconnect, device number 5 [ 126.444884][ T7018] legousbtower 11-1:14.81: LEGO USB Tower #-160 now disconnected [ 127.172248][ T5099] Bluetooth: Wrong link type (-71) [ 127.384860][ T5641] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 127.536146][ T5641] usb 11-1: Using ep0 maxpacket: 32 [ 127.536604][ T5641] usb 11-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 127.537010][ T5641] usb 11-1: config 0 has no interfaces? [ 127.538595][ T5641] usb 11-1: New USB device strings: Mfr=1, Product=69, SerialNumber=3 [ 127.538608][ T5641] usb 11-1: Product: syz [ 127.538615][ T5641] usb 11-1: Manufacturer: syz [ 127.538622][ T5641] usb 11-1: SerialNumber: syz [ 127.542497][ T5641] usb 11-1: config 0 descriptor?? [ 128.141895][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.212468][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.273791][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.280794][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.282088][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.290175][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.295886][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.296932][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.344497][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.512094][ T13] vlan2: left allmulticast mode [ 128.512109][ T13] bridge_slave_0: left allmulticast mode [ 128.516140][ T13] vlan2: left promiscuous mode [ 128.516153][ T13] bridge_slave_0: left promiscuous mode [ 128.516422][ T13] bridge0: port 3(vlan2) entered disabled state [ 128.638810][ T13] bond0 (unregistering): Released all slaves [ 129.022594][ T5451] 8021q: adding VLAN 0 to HW filter on device eth18 [ 129.031353][ T13] hsr_slave_0: left promiscuous mode [ 129.032279][ T13] hsr_slave_1: left promiscuous mode [ 129.040405][ T13] veth1_macvtap: left promiscuous mode [ 129.040443][ T13] veth0_macvtap: left promiscuous mode [ 129.040560][ T13] veth1_vlan: left promiscuous mode [ 129.040598][ T13] veth0_vlan: left promiscuous mode [ 129.352961][ T8560] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.353057][ T8560] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.353113][ T8560] bridge_slave_0: entered allmulticast mode [ 129.353955][ T8560] bridge_slave_0: entered promiscuous mode [ 129.355834][ T8560] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.355901][ T8560] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.355955][ T8560] bridge_slave_1: entered allmulticast mode [ 129.356655][ T8560] bridge_slave_1: entered promiscuous mode [ 129.401164][ T8560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.407462][ T8560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.437988][ T8606] fuse: fd is not a fuse device [ 129.440187][ T8560] team0: Port device team_slave_0 added [ 129.443313][ T8560] team0: Port device team_slave_1 added [ 129.467530][ T8560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.467546][ T8560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.467567][ T8560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.479791][ T8560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.479807][ T8560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.479829][ T8560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.530066][ T8560] hsr_slave_0: entered promiscuous mode [ 129.531380][ T8560] hsr_slave_1: entered promiscuous mode [ 129.531916][ T8560] debugfs: 'hsr0' already exists in 'hsr' [ 129.531934][ T8560] Cannot create hsr debugfs directory [ 129.899954][ T8560] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 129.914355][ T8560] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 129.918821][ T8560] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 129.931065][ T8560] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.934118][ T8560] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 129.947448][ T8560] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.948562][ T8560] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 129.953342][ T8560] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.968219][ T5451] 8021q: adding VLAN 0 to HW filter on device eth19 [ 129.998078][ T8560] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.998169][ T8560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.077347][ T8560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.095517][ T219] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.114333][ T8560] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.124377][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.124465][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.139927][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.140015][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.178483][ T8644] netlink: 'syz.8.781': attribute type 1 has an invalid length. [ 130.184949][ T7330] usb 11-1: USB disconnect, device number 6 [ 130.233825][ T8644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.252431][ T8649] bond1: (slave dummy0): making interface the new active one [ 130.252897][ T8649] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 130.281759][ T8644] netlink: 'syz.8.781': attribute type 10 has an invalid length. [ 130.281779][ T8644] netlink: 40 bytes leftover after parsing attributes in process `syz.8.781'. [ 130.282684][ T8644] dummy0: entered promiscuous mode [ 130.294561][ T8644] bond1: (slave dummy0): Releasing active interface [ 130.321082][ T8651] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 130.349675][ T5750] Bluetooth: hci0: command tx timeout [ 130.366277][ T5451] 8021q: adding VLAN 0 to HW filter on device eth20 [ 130.586215][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.8.787'. [ 130.836525][ T5451] 8021q: adding VLAN 0 to HW filter on device eth21 [ 130.962054][ T8560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.228672][ T8560] veth0_vlan: entered promiscuous mode [ 131.249833][ T8560] veth1_vlan: entered promiscuous mode [ 131.286176][ T8560] veth0_macvtap: entered promiscuous mode [ 131.289455][ T8560] veth1_macvtap: entered promiscuous mode [ 131.306886][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.310117][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.316890][ T8715] CIFS: bad ip= option (127®0.0.1) [ 131.319516][ T8715] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 131.319827][ T8715] CIFS: Attempting to mount (null) [ 131.320002][ T8715] FAULT_INJECTION: forcing a failure. [ 131.320002][ T8715] name failslab, interval 1, probability 0, space 0, times 0 [ 131.320020][ T8715] CPU: 2 UID: 0 PID: 8715 Comm: syz.8.794 Not tainted syzkaller #0 PREEMPT(full) [ 131.320034][ T8715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.320042][ T8715] Call Trace: [ 131.320047][ T8715] [ 131.320052][ T8715] dump_stack_lvl+0x100/0x190 [ 131.320078][ T8715] should_fail_ex.cold+0x5/0xa [ 131.320095][ T8715] should_failslab+0xc2/0x120 [ 131.320113][ T8715] __kmalloc_cache_noprof+0x91/0x6d0 [ 131.320128][ T8715] ? cifs_smb3_do_mount+0x107/0x1b10 [ 131.320144][ T8715] cifs_smb3_do_mount+0x107/0x1b10 [ 131.320160][ T8715] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 131.320176][ T8715] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.320196][ T8715] smb3_get_tree+0x1fd/0x440 [ 131.320215][ T8715] vfs_get_tree+0x92/0x320 [ 131.320227][ T8715] vfs_cmd_create+0xd7/0x2a0 [ 131.320241][ T8715] __do_sys_fsconfig+0x55a/0xcb0 [ 131.320255][ T8715] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 131.320267][ T8715] ? xfd_validate_state+0x129/0x190 [ 131.320294][ T8715] __do_fast_syscall_32+0x13a/0x8b0 [ 131.320316][ T8715] do_fast_syscall_32+0x32/0x70 [ 131.320334][ T8715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.320355][ T8715] RIP: 0023:0xf7f95fec [ 131.320374][ T8715] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 131.320382][ T8715] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 131.320400][ T8715] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000006 [ 131.320412][ T8715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.320424][ T8715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.320436][ T8715] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 131.320448][ T8715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.320477][ T8715] [ 131.398924][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.398974][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.399003][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.399031][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.712711][ T8723] netlink: 'syz.8.798': attribute type 1 has an invalid length. [ 131.754330][ T8723] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.775929][ T8723] netlink: 'syz.8.798': attribute type 1 has an invalid length. [ 131.804508][ T8723] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 131.833229][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.833243][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.896235][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.896249][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.102298][ T8745] kvm: emulating exchange as write [ 132.102683][ T8745] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.134249][ T8759] fuse: fd is not a fuse device [ 132.140938][ T8756] FAULT_INJECTION: forcing a failure. [ 132.140938][ T8756] name failslab, interval 1, probability 0, space 0, times 0 [ 132.140957][ T8756] CPU: 2 UID: 0 PID: 8756 Comm: syz.6.809 Not tainted syzkaller #0 PREEMPT(full) [ 132.140970][ T8756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.140977][ T8756] Call Trace: [ 132.140981][ T8756] [ 132.140986][ T8756] dump_stack_lvl+0x100/0x190 [ 132.141005][ T8756] should_fail_ex.cold+0x5/0xa [ 132.141020][ T8756] should_failslab+0xc2/0x120 [ 132.141038][ T8756] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 132.141054][ T8756] ? lockdep_hardirqs_on+0x7d/0x110 [ 132.141072][ T8756] ? __d_alloc+0x35/0xa50 [ 132.141099][ T8756] __d_alloc+0x35/0xa50 [ 132.141115][ T8756] ? inode_set_ctime_current+0x283/0x850 [ 132.141134][ T8756] d_alloc_pseudo+0x1c/0xc0 [ 132.141148][ T8756] alloc_file_pseudo+0x118/0x290 [ 132.141160][ T8756] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 132.141175][ T8756] dma_buf_export+0x326/0xc60 [ 132.141187][ T8756] ? sg_alloc_table+0x4c/0x1c0 [ 132.141204][ T8756] system_heap_allocate+0xbb1/0x11f0 [ 132.141220][ T8756] ? __pfx_system_heap_allocate+0x10/0x10 [ 132.141233][ T8756] ? __might_fault+0xc5/0x140 [ 132.141252][ T8756] dma_heap_ioctl+0x3a0/0x6d0 [ 132.141265][ T8756] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 132.141276][ T8756] ? find_held_lock+0x2b/0x80 [ 132.141298][ T8756] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 132.141309][ T8756] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 132.141325][ T8756] __do_fast_syscall_32+0x13a/0x8b0 [ 132.141338][ T8756] do_fast_syscall_32+0x32/0x70 [ 132.141350][ T8756] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.141365][ T8756] RIP: 0023:0xf73fefec [ 132.141378][ T8756] Code: Unable to access opcode bytes at 0xf73fefc2. [ 132.141383][ T8756] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 132.141395][ T8756] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0184800 [ 132.141402][ T8756] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.141409][ T8756] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.141415][ T8756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.141422][ T8756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.141436][ T8756] [ 132.273209][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.273239][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.424909][ T5750] Bluetooth: hci0: command tx timeout [ 134.442028][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.838'. [ 134.443508][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.838'. [ 134.445431][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.838'. [ 134.447519][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.838'. [ 134.515867][ T5750] Bluetooth: hci0: command tx timeout [ 135.043319][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.848'. [ 135.111108][ T8876] netlink: 64 bytes leftover after parsing attributes in process `syz.8.849'. [ 135.118193][ T8876] syzkaller1: entered promiscuous mode [ 135.118206][ T8876] syzkaller1: entered allmulticast mode [ 135.506956][ T8897] FAULT_INJECTION: forcing a failure. [ 135.506956][ T8897] name failslab, interval 1, probability 0, space 0, times 0 [ 135.506988][ T8897] CPU: 0 UID: 0 PID: 8897 Comm: syz.6.858 Not tainted syzkaller #0 PREEMPT(full) [ 135.507010][ T8897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.507022][ T8897] Call Trace: [ 135.507029][ T8897] [ 135.507037][ T8897] dump_stack_lvl+0x100/0x190 [ 135.507069][ T8897] should_fail_ex.cold+0x5/0xa [ 135.507095][ T8897] should_failslab+0xc2/0x120 [ 135.507126][ T8897] __kmalloc_cache_noprof+0x91/0x6d0 [ 135.507150][ T8897] ? refill_pi_state_cache+0x91/0x260 [ 135.507182][ T8897] refill_pi_state_cache+0x91/0x260 [ 135.507208][ T8897] futex_lock_pi+0x17d/0x7e0 [ 135.507239][ T8897] ? __pfx_futex_lock_pi+0x10/0x10 [ 135.507267][ T8897] ? __pfx___futex_wait+0x10/0x10 [ 135.507291][ T8897] ? __pfx_try_to_wake_up+0x10/0x10 [ 135.507346][ T8897] ? __pfx_futex_wake_mark+0x10/0x10 [ 135.507376][ T8897] ? rcu_read_lock_any_held+0x6a/0x90 [ 135.507400][ T8897] ? find_held_lock+0x2b/0x80 [ 135.507422][ T8897] ? ksys_write+0x190/0x250 [ 135.507451][ T8897] do_futex+0x371/0x440 [ 135.507474][ T8897] ? __pfx_do_futex+0x10/0x10 [ 135.507498][ T8897] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 135.507524][ T8897] __ia32_sys_futex_time32+0x2f4/0x470 [ 135.507551][ T8897] ? xfd_validate_state+0x129/0x190 [ 135.507589][ T8897] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 135.507626][ T8897] __do_fast_syscall_32+0x13a/0x8b0 [ 135.507650][ T8897] do_fast_syscall_32+0x32/0x70 [ 135.507669][ T8897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.507693][ T8897] RIP: 0023:0xf73fefec [ 135.507714][ T8897] Code: Unable to access opcode bytes at 0xf73fefc2. [ 135.507723][ T8897] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 135.507742][ T8897] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000006 [ 135.507755][ T8897] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.507767][ T8897] RBP: 00000000ffffffec R08: 0000000000000000 R09: 0000000000000000 [ 135.507780][ T8897] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 135.507792][ T8897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.507818][ T8897] [ 136.560125][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.8.874'. [ 136.560148][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.8.874'. [ 136.569891][ T8937] input: syz0 as /devices/virtual/input/input13 [ 136.594696][ T5750] Bluetooth: hci0: command tx timeout [ 136.675122][ T8941] TC_ACT_REPEAT abuse ? [ 136.716764][ T8952] FAULT_INJECTION: forcing a failure. [ 136.716764][ T8952] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 136.716798][ T8952] CPU: 0 UID: 0 PID: 8952 Comm: syz.6.880 Not tainted syzkaller #0 PREEMPT(full) [ 136.716820][ T8952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.716831][ T8952] Call Trace: [ 136.716838][ T8952] [ 136.716846][ T8952] dump_stack_lvl+0x100/0x190 [ 136.716878][ T8952] should_fail_ex.cold+0x5/0xa [ 136.716899][ T8952] ? prepare_alloc_pages+0x16d/0x5b0 [ 136.716933][ T8952] should_fail_alloc_page+0xeb/0x140 [ 136.716968][ T8952] prepare_alloc_pages+0x1f0/0x5b0 [ 136.716998][ T8952] ? is_bpf_text_address+0x94/0x1a0 [ 136.717040][ T8952] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 136.717071][ T8952] ? do_raw_spin_lock+0x128/0x260 [ 136.717095][ T8952] ? find_held_lock+0x2b/0x80 [ 136.717123][ T8952] ? mark_held_locks+0x40/0x70 [ 136.717185][ T8952] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 136.717215][ T8952] ? lockdep_hardirqs_on+0x7d/0x110 [ 136.717243][ T8952] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 136.717270][ T8952] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 136.717300][ T8952] ? kasan_save_stack+0x3f/0x50 [ 136.717325][ T8952] ? kasan_save_stack+0x30/0x50 [ 136.717349][ T8952] ? kasan_save_track+0x14/0x30 [ 136.717375][ T8952] ? __kasan_slab_alloc+0x89/0x90 [ 136.717401][ T8952] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 136.717425][ T8952] ? alloc_vmap_area+0x1814/0x2bb0 [ 136.717451][ T8952] ? __get_vm_area_node+0x1ed/0x350 [ 136.717478][ T8952] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 136.717534][ T8952] ? __vmalloc_node_noprof+0xad/0xf0 [ 136.717563][ T8952] ? xt_compat_init_offsets+0xe2/0x1f0 [ 136.717589][ T8952] ? translate_compat_table+0x20b/0x17e0 [ 136.717612][ T8952] ? compat_do_replace+0x279/0x500 [ 136.717634][ T8952] ? do_ip6t_set_ctl+0x2cb/0xbe0 [ 136.717671][ T8952] ? nf_setsockopt+0x8d/0xf0 [ 136.717694][ T8952] ? ipv6_setsockopt+0x135/0x170 [ 136.717716][ T8952] ? tcp_setsockopt+0xa7/0x100 [ 136.717735][ T8952] ? do_sock_setsockopt+0xf3/0x1d0 [ 136.717772][ T8952] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.717803][ T8952] ? policy_nodemask+0xed/0x4f0 [ 136.717825][ T8952] alloc_pages_mpol+0x201/0x550 [ 136.717846][ T8952] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 136.717878][ T8952] alloc_pages_noprof+0x1a/0x160 [ 136.717901][ T8952] get_free_pages_noprof+0x10/0xb0 [ 136.717928][ T8952] __kasan_populate_vmalloc+0xa0/0x210 [ 136.717963][ T8952] alloc_vmap_area+0x95d/0x2bb0 [ 136.717997][ T8952] ? kasan_save_track+0x14/0x30 [ 136.718031][ T8952] ? __kasan_kmalloc+0xaa/0xb0 [ 136.718060][ T8952] ? __pfx_alloc_vmap_area+0x10/0x10 [ 136.718091][ T8952] ? __get_vm_area_node+0x124/0x350 [ 136.718126][ T8952] __get_vm_area_node+0x1ed/0x350 [ 136.718163][ T8952] __vmalloc_node_range_noprof+0x268/0x1420 [ 136.718195][ T8952] ? xt_compat_init_offsets+0xe2/0x1f0 [ 136.718225][ T8952] ? rcu_is_watching+0x13/0xc0 [ 136.718247][ T8952] ? trace_contention_end+0x126/0x160 [ 136.718275][ T8952] ? xt_compat_init_offsets+0xe2/0x1f0 [ 136.718298][ T8952] ? kasan_save_stack+0x30/0x50 [ 136.718322][ T8952] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 136.718352][ T8952] ? __pfx___mutex_lock+0x10/0x10 [ 136.718369][ T8952] ? do_ip6t_set_ctl+0x2cb/0xbe0 [ 136.718390][ T8952] ? nf_setsockopt+0x8d/0xf0 [ 136.718409][ T8952] ? ipv6_setsockopt+0x135/0x170 [ 136.718430][ T8952] ? do_sock_setsockopt+0xf3/0x1d0 [ 136.718453][ T8952] ? __sys_setsockopt+0x119/0x190 [ 136.718473][ T8952] ? __ia32_sys_setsockopt+0xbc/0x160 [ 136.718495][ T8952] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.718521][ T8952] ? xt_compat_init_offsets+0xe2/0x1f0 [ 136.718545][ T8952] __vmalloc_node_noprof+0xad/0xf0 [ 136.718577][ T8952] ? xt_compat_init_offsets+0xe2/0x1f0 [ 136.718606][ T8952] xt_compat_init_offsets+0xe2/0x1f0 [ 136.718633][ T8952] translate_compat_table+0x20b/0x17e0 [ 136.718660][ T8952] ? __lock_acquire+0x5c0/0x1f40 [ 136.718697][ T8952] ? __pfx_translate_compat_table+0x10/0x10 [ 136.718723][ T8952] ? lock_acquire+0x1d1/0x380 [ 136.718751][ T8952] ? __might_fault+0xc5/0x140 [ 136.718790][ T8952] compat_do_replace+0x279/0x500 [ 136.718815][ T8952] ? print_kernel_ident+0x10/0x40 [ 136.718839][ T8952] ? __pfx_compat_do_replace+0x10/0x10 [ 136.718864][ T8952] ? __local_bh_enable_ip+0xa5/0x120 [ 136.718898][ T8952] ? lock_acquire+0x1d1/0x380 [ 136.718935][ T8952] ? bpf_lsm_capable+0x9/0x10 [ 136.718955][ T8952] ? security_capable+0x80/0x260 [ 136.718991][ T8952] do_ip6t_set_ctl+0x2cb/0xbe0 [ 136.719015][ T8952] ? nf_sockopt_find.isra.0+0x222/0x290 [ 136.719074][ T8952] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 136.719100][ T8952] ? __mutex_unlock_slowpath+0x35d/0x930 [ 136.719123][ T8952] ? futex_wait+0x11e/0x370 [ 136.719151][ T8952] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.719173][ T8952] ? __lock_acquire+0x5c0/0x1f40 [ 136.719210][ T8952] ? nf_sockopt_find.isra.0+0x222/0x290 [ 136.719238][ T8952] nf_setsockopt+0x8d/0xf0 [ 136.719265][ T8952] ipv6_setsockopt+0x135/0x170 [ 136.719293][ T8952] tcp_setsockopt+0xa7/0x100 [ 136.719316][ T8952] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 136.719346][ T8952] do_sock_setsockopt+0xf3/0x1d0 [ 136.719377][ T8952] __sys_setsockopt+0x119/0x190 [ 136.719406][ T8952] __ia32_sys_setsockopt+0xbc/0x160 [ 136.719427][ T8952] ? __do_fast_syscall_32+0xb3/0x8b0 [ 136.719447][ T8952] ? lockdep_hardirqs_on+0x7d/0x110 [ 136.719477][ T8952] __do_fast_syscall_32+0x13a/0x8b0 [ 136.719502][ T8952] do_fast_syscall_32+0x32/0x70 [ 136.719523][ T8952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.719547][ T8952] RIP: 0023:0xf73fefec [ 136.719568][ T8952] Code: Unable to access opcode bytes at 0xf73fefc2. [ 136.719577][ T8952] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 136.719598][ T8952] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000029 [ 136.719611][ T8952] RDX: 0000000000000040 RSI: 0000000080000000 RDI: 0000000000000558 [ 136.719625][ T8952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.719638][ T8952] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 136.719652][ T8952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.719678][ T8952] [ 136.722261][ T8952] syz.6.880: vmalloc error: size 48, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 136.722333][ T8952] CPU: 0 UID: 0 PID: 8952 Comm: syz.6.880 Not tainted syzkaller #0 PREEMPT(full) [ 136.722354][ T8952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.722366][ T8952] Call Trace: [ 136.722372][ T8952] [ 136.722380][ T8952] dump_stack_lvl+0x100/0x190 [ 136.722409][ T8952] warn_alloc.cold+0x9e/0xb2 [ 136.722431][ T8952] ? __pfx_warn_alloc+0x10/0x10 [ 136.722453][ T8952] ? lockdep_hardirqs_on+0x7d/0x110 [ 136.722484][ T8952] ? __get_vm_area_node+0x2f0/0x350 [ 136.722523][ T8952] ? __get_vm_area_node+0x22b/0x350 [ 136.722559][ T8952] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 136.722593][ T8952] ? rcu_is_watching+0x13/0xc0 [ 136.722611][ T8952] ? trace_contention_end+0x126/0x160 [ 136.722642][ T8952] ? xt_compat_init_offsets+0xe2/0x1f0 [ 136.722669][ T8952] ? kasan_save_stack+0x30/0x50 [ 136.722695][ T8952] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 136.722723][ T8952] ? __pfx___mutex_lock+0x10/0x10 [ 136.722738][ T8952] ? do_ip6t_set_ctl+0x2cb/0xbe0 [ 136.722759][ T8952] ? nf_setsockopt+0x8d/0xf0 [ 136.722779][ T8952] ? ipv6_setsockopt+0x135/0x170 [ 136.722802][ T8952] ? do_sock_setsockopt+0xf3/0x1d0 [ 136.722849][ T8952] ? __sys_setsockopt+0x119/0x190 [ 136.722872][ T8952] ? __ia32_sys_setsockopt+0xbc/0x160 [ 136.722895][ T8952] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.722921][ T8952] ? xt_compat_init_offsets+0xe2/0x1f0 [ 136.722945][ T8952] __vmalloc_node_noprof+0xad/0xf0 [ 136.722974][ T8952] ? xt_compat_init_offsets+0xe2/0x1f0 [ 136.723000][ T8952] xt_compat_init_offsets+0xe2/0x1f0 [ 136.723036][ T8952] translate_compat_table+0x20b/0x17e0 [ 136.723064][ T8952] ? __lock_acquire+0x5c0/0x1f40 [ 136.723102][ T8952] ? __pfx_translate_compat_table+0x10/0x10 [ 136.723128][ T8952] ? lock_acquire+0x1d1/0x380 [ 136.723155][ T8952] ? __might_fault+0xc5/0x140 [ 136.723192][ T8952] compat_do_replace+0x279/0x500 [ 136.723215][ T8952] ? print_kernel_ident+0x10/0x40 [ 136.723239][ T8952] ? __pfx_compat_do_replace+0x10/0x10 [ 136.723264][ T8952] ? __local_bh_enable_ip+0xa5/0x120 [ 136.723295][ T8952] ? lock_acquire+0x1d1/0x380 [ 136.723329][ T8952] ? bpf_lsm_capable+0x9/0x10 [ 136.723349][ T8952] ? security_capable+0x80/0x260 [ 136.723381][ T8952] do_ip6t_set_ctl+0x2cb/0xbe0 [ 136.723404][ T8952] ? nf_sockopt_find.isra.0+0x222/0x290 [ 136.723433][ T8952] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 136.723457][ T8952] ? __mutex_unlock_slowpath+0x35d/0x930 [ 136.723476][ T8952] ? futex_wait+0x11e/0x370 [ 136.723501][ T8952] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.723522][ T8952] ? __lock_acquire+0x5c0/0x1f40 [ 136.723555][ T8952] ? nf_sockopt_find.isra.0+0x222/0x290 [ 136.723582][ T8952] nf_setsockopt+0x8d/0xf0 [ 136.723607][ T8952] ipv6_setsockopt+0x135/0x170 [ 136.723635][ T8952] tcp_setsockopt+0xa7/0x100 [ 136.723660][ T8952] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 136.723689][ T8952] do_sock_setsockopt+0xf3/0x1d0 [ 136.723719][ T8952] __sys_setsockopt+0x119/0x190 [ 136.723744][ T8952] __ia32_sys_setsockopt+0xbc/0x160 [ 136.723766][ T8952] ? __do_fast_syscall_32+0xb3/0x8b0 [ 136.723783][ T8952] ? lockdep_hardirqs_on+0x7d/0x110 [ 136.723810][ T8952] __do_fast_syscall_32+0x13a/0x8b0 [ 136.723831][ T8952] do_fast_syscall_32+0x32/0x70 [ 136.723851][ T8952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.723875][ T8952] RIP: 0023:0xf73fefec [ 136.723894][ T8952] Code: Unable to access opcode bytes at 0xf73fefc2. [ 136.723903][ T8952] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 136.723920][ T8952] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000029 [ 136.723932][ T8952] RDX: 0000000000000040 RSI: 0000000080000000 RDI: 0000000000000558 [ 136.723945][ T8952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.723957][ T8952] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 136.723969][ T8952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.723995][ T8952] [ 136.724029][ T8952] Mem-Info: [ 136.724039][ T8952] active_anon:2402 inactive_anon:537 isolated_anon:0 [ 136.724039][ T8952] active_file:2124 inactive_file:17812 isolated_file:0 [ 136.724039][ T8952] unevictable:1000 dirty:446 writeback:0 [ 136.724039][ T8952] slab_reclaimable:7082 slab_unreclaimable:59656 [ 136.724039][ T8952] mapped:22860 shmem:1100 pagetables:1768 [ 136.724039][ T8952] sec_pagetables:307 bounce:0 [ 136.724039][ T8952] kernel_misc_reclaimable:0 [ 136.724039][ T8952] free:60782 free_pcp:2581 free_cma:0 [ 136.724120][ T8952] Node 0 active_anon:20kB inactive_anon:428kB active_file:208kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:436kB dirty:28kB writeback:0kB shmem:2024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8096kB pagetables:1024kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 136.724200][ T8952] Node 1 active_anon:9588kB inactive_anon:1720kB active_file:8288kB inactive_file:71248kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:91004kB dirty:1756kB writeback:0kB shmem:2376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7700kB pagetables:6048kB sec_pagetables:96kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 136.725121][ T8952] Node 0 DMA free:3464kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.725179][ T8952] lowmem_reserve[]: 0 259 259 259 259 [ 136.725212][ T8952] Node 0 DMA32 free:21216kB boost:6144kB min:17848kB low:20772kB high:23696kB reserved_highatomic:2048kB free_highatomic:576kB active_anon:20kB inactive_anon:428kB active_file:208kB inactive_file:0kB unevictable:2000kB writepending:28kB zspages:2316kB present:1032196kB managed:265356kB mlocked:0kB bounce:0kB free_pcp:196kB local_pcp:0kB free_cma:0kB [ 136.725265][ T8952] lowmem_reserve[]: 0 0 0 0 0 [ 136.725295][ T8952] Node 1 DMA32 free:218448kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:9588kB inactive_anon:1720kB active_file:8288kB inactive_file:71248kB unevictable:2000kB writepending:1756kB zspages:4760kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:10128kB local_pcp:1844kB free_cma:0kB [ 136.725348][ T8952] lowmem_reserve[]: 0 0 0 0 0 [ 136.725380][ T8952] Node 0 DMA: 190*4kB (U) 46*8kB (UE) 12*16kB (UE) 25*32kB (UE) 9*64kB (UE) 2*128kB (UE) 2*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3464kB [ 136.725560][ T8952] Node 0 DMA32: 654*4kB (UMEH) 198*8kB (UMEH) 139*16kB (UMH) 156*32kB (UMEH) 33*64kB (UMEH) 12*128kB (UME) 8*256kB (UM) 2*512kB (U) 3*1024kB (UM) 0*2048kB 0*4096kB = 21208kB [ 136.725700][ T8952] Node 1 DMA32: 3630*4kB (UME) 2419*8kB (UME) 737*16kB (UME) 555*32kB (UME) 421*64kB (UME) 244*128kB (UME) 144*256kB (UME) 55*512kB (UME) 19*1024kB (UM) 2*2048kB (UM) 2*4096kB (U) = 218368kB [ 136.725845][ T8952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.725860][ T8952] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.725874][ T8952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.725888][ T8952] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.725901][ T8952] 21767 total pagecache pages [ 136.725908][ T8952] 733 pages in swap cache [ 136.725915][ T8952] Free swap = 91152kB [ 136.725922][ T8952] Total swap = 124996kB [ 136.725929][ T8952] 524155 pages RAM [ 136.725935][ T8952] 0 pages HighMem/MovableOnly [ 136.725941][ T8952] 216924 pages reserved [ 136.725947][ T8952] 0 pages cma reserved [ 136.873049][ T8959] batman_adv: batadv0: Adding interface: syzkaller0 [ 136.873282][ T8959] batman_adv: batadv0: Interface activated: syzkaller0 [ 137.137628][ T8974] netlink: 164 bytes leftover after parsing attributes in process `syz.1.885'. [ 137.212916][ T8979] FAULT_INJECTION: forcing a failure. [ 137.212916][ T8979] name failslab, interval 1, probability 0, space 0, times 0 [ 137.212947][ T8979] CPU: 0 UID: 0 PID: 8979 Comm: syz.9.890 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.212971][ T8979] Tainted: [L]=SOFTLOCKUP [ 137.212978][ T8979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.212989][ T8979] Call Trace: [ 137.212995][ T8979] [ 137.213003][ T8979] dump_stack_lvl+0x100/0x190 [ 137.213031][ T8979] should_fail_ex.cold+0x5/0xa [ 137.213056][ T8979] should_failslab+0xc2/0x120 [ 137.213084][ T8979] kmem_cache_alloc_noprof+0x92/0x6a0 [ 137.213109][ T8979] ? mas_preallocate+0xc22/0xee0 [ 137.213132][ T8979] mas_preallocate+0xc22/0xee0 [ 137.213156][ T8979] ? __pfx_mas_preallocate+0x10/0x10 [ 137.213175][ T8979] ? mt_find+0x136/0x9b0 [ 137.213202][ T8979] ? mt_find+0x4d5/0x9b0 [ 137.213222][ T8979] vma_link+0x14a/0x8c0 [ 137.213246][ T8979] ? __pfx_vma_link+0x10/0x10 [ 137.213274][ T8979] ? rcu_is_watching+0x13/0xc0 [ 137.213294][ T8979] ? percpu_counter_add_batch+0xb9/0x230 [ 137.213324][ T8979] insert_vm_struct+0x1f7/0x890 [ 137.213352][ T8979] create_init_stack_vma+0x830/0xcf0 [ 137.213381][ T8979] ? __pfx_create_init_stack_vma+0x10/0x10 [ 137.213408][ T8979] ? lock_acquire+0x1d1/0x380 [ 137.213434][ T8979] ? do_raw_spin_lock+0x128/0x260 [ 137.213454][ T8979] ? alloc_bprm+0x54e/0x9e0 [ 137.213475][ T8979] ? alloc_bprm+0x54e/0x9e0 [ 137.213528][ T8979] alloc_bprm+0x57b/0x9e0 [ 137.213556][ T8979] do_execveat_common.isra.0+0x19c/0x580 [ 137.213581][ T8979] ? do_getname+0x191/0x390 [ 137.213601][ T8979] __ia32_compat_sys_execveat+0xe4/0x130 [ 137.213628][ T8979] __do_fast_syscall_32+0x13a/0x8b0 [ 137.213650][ T8979] do_fast_syscall_32+0x32/0x70 [ 137.213669][ T8979] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.213691][ T8979] RIP: 0023:0xf73befec [ 137.213711][ T8979] Code: Unable to access opcode bytes at 0xf73befc2. [ 137.213725][ T8979] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000166 [ 137.213744][ T8979] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 137.213757][ T8979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 137.213769][ T8979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.213780][ T8979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.213792][ T8979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.213817][ T8979] [ 137.234053][ T44] kauditd_printk_skb: 56 callbacks suppressed [ 137.234068][ T44] audit: type=1326 audit(1791601118.211:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 137.234106][ T44] audit: type=1326 audit(1791601118.211:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 137.253702][ T44] audit: type=1326 audit(1791601118.231:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.891" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf714762b code=0x7ffc0000 [ 137.253752][ T44] audit: type=1326 audit(1791601118.231:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 137.253786][ T44] audit: type=1326 audit(1791601118.231:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 137.260468][ T44] audit: type=1326 audit(1791601118.241:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.891" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 137.260509][ T44] audit: type=1326 audit(1791601118.241:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 137.260541][ T44] audit: type=1326 audit(1791601118.241:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 137.261310][ T44] audit: type=1326 audit(1791601118.241:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.891" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 137.261345][ T44] audit: type=1326 audit(1791601118.241:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.1.891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 137.274366][ T5750] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 137.274389][ T5750] CPU: 0 UID: 0 PID: 5750 Comm: kworker/u34:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.274413][ T5750] Tainted: [L]=SOFTLOCKUP [ 137.274421][ T5750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.274432][ T5750] Workqueue: hci3 hci_rx_work [ 137.274458][ T5750] Call Trace: [ 137.274464][ T5750] [ 137.274472][ T5750] dump_stack_lvl+0x100/0x190 [ 137.274497][ T5750] sysfs_warn_dup.cold+0x1c/0x28 [ 137.274526][ T5750] sysfs_create_dir_ns+0x24b/0x2b0 [ 137.274552][ T5750] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 137.274597][ T5750] ? find_held_lock+0x2b/0x80 [ 137.274621][ T5750] ? kobject_add_internal+0x25f/0x930 [ 137.274642][ T5750] ? kobject_add_internal+0x25f/0x930 [ 137.274666][ T5750] ? do_raw_spin_unlock+0x145/0x1e0 [ 137.274687][ T5750] kobject_add_internal+0x2c8/0x930 [ 137.274714][ T5750] kobject_add+0x16a/0x1e0 [ 137.274741][ T5750] ? __pfx_kobject_add+0x10/0x10 [ 137.274763][ T5750] ? class_to_subsys+0x10f/0x150 [ 137.274793][ T5750] ? kobject_put+0xb9/0x640 [ 137.274811][ T5750] ? _raw_spin_unlock+0x28/0x50 [ 137.274842][ T5750] device_add+0x294/0x1970 [ 137.274866][ T5750] ? __pfx_dev_set_name+0x10/0x10 [ 137.274892][ T5750] ? __pfx_device_add+0x10/0x10 [ 137.274914][ T5750] ? mgmt_send_event_skb+0x2fb/0x460 [ 137.274946][ T5750] hci_conn_add_sysfs+0x1a3/0x260 [ 137.274972][ T5750] le_conn_complete_evt+0x122f/0x2130 [ 137.275002][ T5750] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 137.275023][ T5750] ? hci_event_packet+0x186/0xcd0 [ 137.275044][ T5750] ? hci_event_packet+0x186/0xcd0 [ 137.275072][ T5750] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 137.275097][ T5750] ? skb_pull_data+0x15f/0x1e0 [ 137.275126][ T5750] hci_le_meta_evt+0x34a/0x5f0 [ 137.275150][ T5750] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 137.275178][ T5750] hci_event_packet+0x51c/0xcd0 [ 137.275201][ T5750] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 137.275225][ T5750] ? __pfx_hci_event_packet+0x10/0x10 [ 137.275254][ T5750] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.275286][ T5750] hci_rx_work+0x451/0xfc0 [ 137.275313][ T5750] process_one_work+0xac7/0x1b10 [ 137.275348][ T5750] ? __pfx_process_one_work+0x10/0x10 [ 137.275371][ T5750] ? lock_acquire+0x1d1/0x380 [ 137.275404][ T5750] ? __pfx_hci_rx_work+0x10/0x10 [ 137.275428][ T5750] worker_thread+0x5ef/0xe50 [ 137.275456][ T5750] ? __pfx_worker_thread+0x10/0x10 [ 137.275479][ T5750] ? kthread+0x13a/0x450 [ 137.275498][ T5750] ? __pfx_worker_thread+0x10/0x10 [ 137.275519][ T5750] kthread+0x373/0x450 [ 137.275538][ T5750] ? __pfx_kthread+0x10/0x10 [ 137.275561][ T5750] ret_from_fork+0x730/0xd60 [ 137.275580][ T5750] ? __pfx_ret_from_fork+0x10/0x10 [ 137.275597][ T5750] ? rcu_is_watching+0x13/0xc0 [ 137.275618][ T5750] ? __switch_to+0x800/0x10f0 [ 137.275641][ T5750] ? __pfx_kthread+0x10/0x10 [ 137.275662][ T5750] ret_from_fork_asm+0x1a/0x30 [ 137.275693][ T5750] [ 137.278929][ T5750] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 137.278954][ T5750] Bluetooth: hci3: failed to register connection device [ 138.514338][ T9084] 0: reclassify loop, rule prio 0, protocol 03 [ 138.690596][ T9099] FAULT_INJECTION: forcing a failure. [ 138.690596][ T9099] name failslab, interval 1, probability 0, space 0, times 0 [ 138.690628][ T9099] CPU: 2 UID: 0 PID: 9099 Comm: syz.9.917 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.690658][ T9099] Tainted: [L]=SOFTLOCKUP [ 138.690665][ T9099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.690676][ T9099] Call Trace: [ 138.690682][ T9099] [ 138.690690][ T9099] dump_stack_lvl+0x100/0x190 [ 138.690723][ T9099] should_fail_ex.cold+0x5/0xa [ 138.690749][ T9099] should_failslab+0xc2/0x120 [ 138.690778][ T9099] __kmalloc_cache_noprof+0x91/0x6d0 [ 138.690800][ T9099] ? tls_set_sw_offload+0xe92/0x1670 [ 138.690829][ T9099] tls_set_sw_offload+0xe92/0x1670 [ 138.690852][ T9099] ? __pfx_tls_set_device_offload+0x10/0x10 [ 138.690880][ T9099] tls_setsockopt+0x1231/0x21e0 [ 138.690904][ T9099] ? __pfx_tls_setsockopt+0x10/0x10 [ 138.690923][ T9099] ? lock_acquire+0x1d1/0x380 [ 138.690947][ T9099] ? __fget_files+0x34/0x3d0 [ 138.690976][ T9099] ? aa_sock_opt_perm+0x114/0x1e0 [ 138.691005][ T9099] ? sock_common_setsockopt+0x2e/0xf0 [ 138.691029][ T9099] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 138.691054][ T9099] do_sock_setsockopt+0xf3/0x1d0 [ 138.691081][ T9099] __sys_setsockopt+0x119/0x190 [ 138.691106][ T9099] __ia32_sys_setsockopt+0xbc/0x160 [ 138.691146][ T9099] ? __do_fast_syscall_32+0xb3/0x8b0 [ 138.691165][ T9099] ? lockdep_hardirqs_on+0x7d/0x110 [ 138.691194][ T9099] __do_fast_syscall_32+0x13a/0x8b0 [ 138.691217][ T9099] do_fast_syscall_32+0x32/0x70 [ 138.691238][ T9099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.691262][ T9099] RIP: 0023:0xf73befec [ 138.691282][ T9099] Code: Unable to access opcode bytes at 0xf73befc2. [ 138.691291][ T9099] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 138.691309][ T9099] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011a [ 138.691322][ T9099] RDX: 0000000000000001 RSI: 0000000080000340 RDI: 0000000000000038 [ 138.691333][ T9099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.691345][ T9099] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 138.691356][ T9099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.691382][ T9099] [ 138.855385][ T9108] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 138.857039][ T9108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.874884][ T3268] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 139.054819][ T3268] usb 11-1: Using ep0 maxpacket: 32 [ 139.055384][ T3268] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 139.056400][ T3268] usb 11-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 139.056438][ T3268] usb 11-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 139.056459][ T3268] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.056479][ T3268] usb 11-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 139.059639][ T3268] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.059664][ T3268] usb 11-1: Product: syz [ 139.059677][ T3268] usb 11-1: Manufacturer: syz [ 139.059689][ T3268] usb 11-1: SerialNumber: syz [ 139.073866][ C2] imon 11-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 139.084292][ T3268] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/input/input14 [ 139.306316][ T3268] imon 11-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 139.306329][ T3268] (id 0x00) [ 139.374761][ T3268] rc_core: IR keymap rc-imon-pad not found [ 139.374777][ T3268] Registered IR keymap rc-empty [ 139.374831][ T3268] imon 11-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 139.374846][ T3268] imon 11-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 139.496840][ T3268] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0 [ 139.501849][ T3268] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0/input15 [ 139.505249][ T3268] imon 11-1:155.0: iMON device (15c2:ffdc, intf0) on usb<11:7> initialized [ 139.801756][ T9120] netlink: 44 bytes leftover after parsing attributes in process `syz.1.929'. [ 139.838415][ T9126] fuse: fd is not a fuse device [ 140.412741][ T9175] FAULT_INJECTION: forcing a failure. [ 140.412741][ T9175] name failslab, interval 1, probability 0, space 0, times 0 [ 140.412765][ T9175] CPU: 0 UID: 0 PID: 9175 Comm: syz.9.945 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.412782][ T9175] Tainted: [L]=SOFTLOCKUP [ 140.412786][ T9175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.412793][ T9175] Call Trace: [ 140.412797][ T9175] [ 140.412801][ T9175] dump_stack_lvl+0x100/0x190 [ 140.412821][ T9175] should_fail_ex.cold+0x5/0xa [ 140.412836][ T9175] should_failslab+0xc2/0x120 [ 140.412855][ T9175] __kmalloc_cache_noprof+0x91/0x6d0 [ 140.412868][ T9175] ? __xa_alloc_cyclic+0x1f2/0x330 [ 140.412881][ T9175] ? __xdp_reg_mem_model+0x134/0x6a0 [ 140.412901][ T9175] __xdp_reg_mem_model+0x134/0x6a0 [ 140.412919][ T9175] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 140.412936][ T9175] ? page_pool_list+0x223/0x2a0 [ 140.412953][ T9175] xdp_reg_mem_model+0x22/0x70 [ 140.412970][ T9175] bpf_test_run_xdp_live+0x1cb/0x760 [ 140.412990][ T9175] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 140.413007][ T9175] ? __mutex_unlock_slowpath+0x35d/0x930 [ 140.413021][ T9175] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.413032][ T9175] ? find_held_lock+0x2b/0x80 [ 140.413060][ T9175] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 140.413080][ T9175] ? bpf_dispatcher_change_prog+0x6c3/0xa50 [ 140.413103][ T9175] ? 0xffffffffa0405300 [ 140.413115][ T9175] ? 0xffffffffa0405300 [ 140.413124][ T9175] ? 0xffffffffa0405300 [ 140.413133][ T9175] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 140.413149][ T9175] bpf_prog_test_run_xdp+0xd86/0x1670 [ 140.413167][ T9175] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 140.413185][ T9175] ? fput+0x7c/0x100 [ 140.413202][ T9175] ? __bpf_prog_get+0x97/0x290 [ 140.413220][ T9175] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 140.413231][ T9175] __sys_bpf+0x2265/0x4a30 [ 140.413248][ T9175] ? __pfx___sys_bpf+0x10/0x10 [ 140.413261][ T9175] ? find_held_lock+0x2b/0x80 [ 140.413274][ T9175] ? futex_wake+0x4ea/0x5e0 [ 140.413299][ T9175] ? find_held_lock+0x2b/0x80 [ 140.413322][ T9175] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 140.413338][ T9175] ? xfd_validate_state+0x129/0x190 [ 140.413359][ T9175] ? __ia32_sys_bpf+0xcc/0x170 [ 140.413372][ T9175] __ia32_sys_bpf+0xcc/0x170 [ 140.413387][ T9175] ? __do_fast_syscall_32+0xb3/0x8b0 [ 140.413399][ T9175] __do_fast_syscall_32+0x13a/0x8b0 [ 140.413413][ T9175] do_fast_syscall_32+0x32/0x70 [ 140.413425][ T9175] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.413439][ T9175] RIP: 0023:0xf73befec [ 140.413452][ T9175] Code: Unable to access opcode bytes at 0xf73befc2. [ 140.413457][ T9175] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 140.413469][ T9175] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 140.413496][ T9175] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.413505][ T9175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.413511][ T9175] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 140.413518][ T9175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.413540][ T9175] [ 140.683046][ T9197] netlink: 'syz.9.951': attribute type 12 has an invalid length. [ 140.803428][ T9201] imon:send_packet: packet tx failed (-71) [ 140.804400][ T1938] usb 11-1: USB disconnect, device number 7 [ 140.824988][ T9201] imon:vfd_write: send packet #3 failed [ 141.965830][ T9246] FAULT_INJECTION: forcing a failure. [ 141.965830][ T9246] name failslab, interval 1, probability 0, space 0, times 0 [ 141.965861][ T9246] CPU: 0 UID: 0 PID: 9246 Comm: syz.9.962 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.965886][ T9246] Tainted: [L]=SOFTLOCKUP [ 141.965893][ T9246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.965903][ T9246] Call Trace: [ 141.965910][ T9246] [ 141.965917][ T9246] dump_stack_lvl+0x100/0x190 [ 141.965947][ T9246] should_fail_ex.cold+0x5/0xa [ 141.965973][ T9246] should_failslab+0xc2/0x120 [ 141.966003][ T9246] __kmalloc_noprof+0xfc/0x840 [ 141.966028][ T9246] ? __reuseport_alloc+0x1d/0x90 [ 141.966058][ T9246] __reuseport_alloc+0x1d/0x90 [ 141.966082][ T9246] reuseport_alloc+0x1ed/0x420 [ 141.966106][ T9246] udp_lib_get_port+0xbd5/0x1b50 [ 141.966143][ T9246] ? __pfx_udp_lib_get_port+0x10/0x10 [ 141.966166][ T9246] ? do_raw_spin_lock+0x128/0x260 [ 141.966187][ T9246] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 141.966211][ T9246] ? __local_bh_enable_ip+0xa5/0x120 [ 141.966243][ T9246] __inet_bind+0x598/0xc60 [ 141.966265][ T9246] inet_bind+0xdb/0x120 [ 141.966284][ T9246] __sys_bind+0x1a9/0x260 [ 141.966319][ T9246] ? __pfx___sys_bind+0x10/0x10 [ 141.966356][ T9246] __ia32_sys_bind+0x71/0xb0 [ 141.966373][ T9246] ? lockdep_hardirqs_on+0x7d/0x110 [ 141.966405][ T9246] __do_fast_syscall_32+0x13a/0x8b0 [ 141.966430][ T9246] do_fast_syscall_32+0x32/0x70 [ 141.966448][ T9246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.966472][ T9246] RIP: 0023:0xf73befec [ 141.966493][ T9246] Code: Unable to access opcode bytes at 0xf73befc2. [ 141.966500][ T9246] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000169 [ 141.966519][ T9246] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 141.966530][ T9246] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.966540][ T9246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.966552][ T9246] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 141.966562][ T9246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.966588][ T9246] [ 144.262726][ T9329] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 144.296348][ T9333] FAULT_INJECTION: forcing a failure. [ 144.296348][ T9333] name failslab, interval 1, probability 0, space 0, times 0 [ 144.296371][ T9333] CPU: 2 UID: 0 PID: 9333 Comm: syz.8.977 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.296388][ T9333] Tainted: [L]=SOFTLOCKUP [ 144.296392][ T9333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.296398][ T9333] Call Trace: [ 144.296402][ T9333] [ 144.296408][ T9333] dump_stack_lvl+0x100/0x190 [ 144.296429][ T9333] should_fail_ex.cold+0x5/0xa [ 144.296445][ T9333] should_failslab+0xc2/0x120 [ 144.296464][ T9333] kmem_cache_alloc_noprof+0x92/0x6a0 [ 144.296479][ T9333] ? do_raw_spin_unlock+0x145/0x1e0 [ 144.296492][ T9333] ? alloc_empty_file+0x5b/0x1c0 [ 144.296506][ T9333] alloc_empty_file+0x5b/0x1c0 [ 144.296517][ T9333] dentry_open+0x46/0xd0 [ 144.296527][ T9333] __do_sys_fsmount+0x981/0xec0 [ 144.296554][ T9333] ? __pfx___do_sys_fsmount+0x10/0x10 [ 144.296578][ T9333] __do_fast_syscall_32+0x13a/0x8b0 [ 144.296594][ T9333] do_fast_syscall_32+0x32/0x70 [ 144.296607][ T9333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.296621][ T9333] RIP: 0023:0xf7f95fec [ 144.296635][ T9333] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 144.296640][ T9333] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b0 [ 144.296652][ T9333] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 144.296660][ T9333] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.296666][ T9333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.296672][ T9333] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 144.296679][ T9333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.296693][ T9333] [ 144.682765][ T9243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.686007][ T9238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.787681][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.982'. [ 144.788445][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.982'. [ 144.793711][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.8.983'. [ 145.086834][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.990'. [ 145.207112][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.9.994'. [ 145.208192][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.9.994'. [ 145.351384][ T9394] netlink: 'syz.1.999': attribute type 12 has an invalid length. [ 145.556483][ T9400] netlink: 'syz.8.1001': attribute type 1 has an invalid length. [ 145.579843][ T9400] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.600684][ T9405] bond7 (unregistering): Released all slaves [ 145.644218][ T9400] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 145.673773][ T9400] dummy0: left promiscuous mode [ 145.676976][ T9400] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 145.684713][ T5787] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 145.750095][ T9414] fuse: fd is not a fuse device [ 145.784375][ T9416] netlink: 'syz.1.1015': attribute type 1 has an invalid length. [ 145.796676][ T5815] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 145.805707][ T9416] 8021q: adding VLAN 0 to HW filter on device bond7 [ 145.853707][ T9416] bond7: (slave veth3): Enslaving as a backup interface with a down link [ 145.899883][ T9416] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 145.909783][ T5815] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 145.927035][ T9128] tipc: Resetting bearer [ 145.942740][ T9128] tipc: Disabling bearer [ 146.025231][ T5787] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 146.196523][ T5815] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.279040][ T5815] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.315473][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.319729][ T5099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.322944][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.323547][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.323997][ T5099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.351649][ T5815] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.425901][ T9440] fuse: fd is not a fuse device [ 146.520911][ T5815] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.814508][ T5815] bridge_slave_1: left allmulticast mode [ 146.814532][ T5815] bridge_slave_1: left promiscuous mode [ 146.824753][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.842185][ T5815] bridge_slave_0: left allmulticast mode [ 146.842206][ T5815] bridge_slave_0: left promiscuous mode [ 146.844790][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.000715][ T5815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.003279][ T5815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.004411][ T5815] bond0 (unregistering): Released all slaves [ 147.007806][ T5815] bond1 (unregistering): Released all slaves [ 147.017149][ T5815] bond2 (unregistering): (slave veth3): Releasing backup interface [ 147.037822][ T5815] bond2 (unregistering): (slave dummy0): Removing an active aggregator [ 147.039918][ T5815] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 147.061494][ T5815] bond2 (unregistering): Released all slaves [ 147.153533][ T5815] tipc: Left network mode [ 147.204532][ T9475] netlink: 'syz.9.1019': attribute type 1 has an invalid length. [ 147.259585][ T9475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.304156][ T9475] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 147.313288][ T5750] Bluetooth: hci1: link tx timeout [ 147.313305][ T5750] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.383365][ T9475] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 147.431544][ T5451] 8021q: adding VLAN 0 to HW filter on device eth22 [ 147.447221][ T5815] hsr_slave_0: left promiscuous mode [ 147.450399][ T5815] hsr_slave_1: left promiscuous mode [ 147.450987][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.450999][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.452138][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.452148][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.459107][ T5815] veth1_macvtap: left promiscuous mode [ 147.459147][ T5815] veth0_macvtap: left promiscuous mode [ 147.459250][ T5815] veth1_vlan: left promiscuous mode [ 147.459301][ T5815] veth0_vlan: left promiscuous mode [ 147.475691][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 147.594788][ T7924] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 147.646918][ T5815] team0 (unregistering): Port device team_slave_1 removed [ 147.662000][ T5815] team0 (unregistering): Port device team_slave_0 removed [ 147.873874][ T9434] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.873956][ T9434] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.874018][ T9434] bridge_slave_0: entered allmulticast mode [ 147.876307][ T9434] bridge_slave_0: entered promiscuous mode [ 147.877565][ T9434] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.877631][ T9434] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.877683][ T9434] bridge_slave_1: entered allmulticast mode [ 147.878388][ T9434] bridge_slave_1: entered promiscuous mode [ 147.891993][ T9434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.893323][ T9434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.904888][ T9434] team0: Port device team_slave_0 added [ 147.906153][ T9434] team0: Port device team_slave_1 added [ 147.918464][ T9434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.918473][ T9434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.918487][ T9434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.922165][ T9434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.922174][ T9434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.922187][ T9434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.945655][ T9434] hsr_slave_0: entered promiscuous mode [ 147.946062][ T9434] hsr_slave_1: entered promiscuous mode [ 147.975138][ T9514] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 148.006057][ T5451] 8021q: adding VLAN 0 to HW filter on device eth23 [ 148.305919][ T5451] 8021q: adding VLAN 0 to HW filter on device eth24 [ 148.428005][ T5099] Bluetooth: hci2: command tx timeout [ 148.550071][ T5451] 8021q: adding VLAN 0 to HW filter on device eth25 [ 149.234218][ T9434] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.240677][ T9434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 149.241536][ T9434] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.247527][ T9434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 149.248250][ T9434] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.256708][ T9434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 149.257325][ T9434] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.261409][ T9434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 149.320360][ T9434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.330473][ T9434] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.335615][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.335660][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.344537][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.344699][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.389570][ T5099] Bluetooth: hci1: command 0x0406 tx timeout [ 149.790702][ T9434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.811206][ T9434] veth0_vlan: entered promiscuous mode [ 149.816395][ T9434] veth1_vlan: entered promiscuous mode [ 149.840259][ T9434] veth0_macvtap: entered promiscuous mode [ 149.849074][ T9434] veth1_macvtap: entered promiscuous mode [ 149.866428][ T9434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.878302][ T9434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.985024][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.214843][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.215005][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.215025][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.249836][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.249855][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.269298][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.269317][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.324372][ T9619] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 150.410499][ T9629] netlink: 'syz.1.1049': attribute type 1 has an invalid length. [ 150.441070][ T9629] 8021q: adding VLAN 0 to HW filter on device bond8 [ 150.487823][ T9629] bond8: (slave veth5): Enslaving as an active interface with a down link [ 150.505109][ T5750] Bluetooth: hci2: command tx timeout [ 150.515856][ T9629] bond7: (slave dummy0): Removing an active aggregator [ 150.531968][ T9629] bond7: (slave dummy0): Releasing backup interface [ 150.549003][ T9629] bond8: (slave dummy0): making interface the new active one [ 150.551454][ T9629] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 150.566849][ T9629] netlink: 'syz.1.1049': attribute type 10 has an invalid length. [ 150.566869][ T9629] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1049'. [ 150.566961][ T9629] dummy0: entered promiscuous mode [ 150.568273][ T9629] bond8: (slave dummy0): Releasing active interface [ 150.667447][ T9640] fuse: fd is not a fuse device [ 150.717403][ T9645] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 151.190589][ T9670] netlink: 'syz.6.1053': attribute type 1 has an invalid length. [ 151.210846][ T9670] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.245652][ T9670] bond4: (slave veth5): Enslaving as an active interface with a down link [ 151.272883][ T9670] bond3: (slave dummy0): Removing an active aggregator [ 151.273328][ T9670] bond3: (slave dummy0): Releasing backup interface [ 151.279580][ T9670] bond4: (slave dummy0): making interface the new active one [ 151.282118][ T9670] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 151.300843][ T9670] netlink: 'syz.6.1053': attribute type 10 has an invalid length. [ 151.300858][ T9670] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1053'. [ 151.300912][ T9670] dummy0: entered promiscuous mode [ 151.301978][ T9670] bond4: (slave dummy0): Releasing active interface [ 151.536779][ T44] kauditd_printk_skb: 19 callbacks suppressed [ 151.536791][ T44] audit: type=1800 audit(1791601132.521:135): pid=9675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1057" name=03 dev="sda1" ino=2040 res=0 errno=0 [ 151.574452][ T9677] FAULT_INJECTION: forcing a failure. [ 151.574452][ T9677] name failslab, interval 1, probability 0, space 0, times 0 [ 151.574477][ T9677] CPU: 2 UID: 0 PID: 9677 Comm: syz.6.1056 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.574494][ T9677] Tainted: [L]=SOFTLOCKUP [ 151.574498][ T9677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.574505][ T9677] Call Trace: [ 151.574510][ T9677] [ 151.574515][ T9677] dump_stack_lvl+0x100/0x190 [ 151.574535][ T9677] should_fail_ex.cold+0x5/0xa [ 151.574550][ T9677] should_failslab+0xc2/0x120 [ 151.574586][ T9677] __kmalloc_cache_node_noprof+0x94/0x720 [ 151.574607][ T9677] ? sbitmap_queue_init_node+0x291/0x4a0 [ 151.574629][ T9677] sbitmap_queue_init_node+0x291/0x4a0 [ 151.574649][ T9677] blk_mq_init_tags+0x1ba/0x300 [ 151.574670][ T9677] blk_mq_alloc_map_and_rqs+0x244/0xe30 [ 151.574690][ T9677] blk_mq_alloc_sched_tags+0x1de/0x350 [ 151.574705][ T9677] blk_mq_alloc_sched_res+0x8e/0x250 [ 151.574718][ T9677] elevator_change+0x136/0x530 [ 151.574738][ T9677] elv_iosched_store+0x3be/0x460 [ 151.574756][ T9677] ? __pfx_elv_iosched_store+0x10/0x10 [ 151.574778][ T9677] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 151.574793][ T9677] ? __pfx_elv_iosched_store+0x10/0x10 [ 151.574811][ T9677] queue_attr_store+0x25f/0x2f0 [ 151.574827][ T9677] ? __pfx_queue_attr_store+0x10/0x10 [ 151.574842][ T9677] ? __lock_acquire+0x5c0/0x1f40 [ 151.574864][ T9677] ? lock_acquire+0x1d1/0x380 [ 151.574880][ T9677] ? sysfs_file_kobj+0x21/0x290 [ 151.574895][ T9677] ? find_held_lock+0x2b/0x80 [ 151.574908][ T9677] ? sysfs_file_kobj+0xe4/0x290 [ 151.574922][ T9677] ? sysfs_file_kobj+0xe4/0x290 [ 151.574939][ T9677] ? __pfx_queue_attr_store+0x10/0x10 [ 151.574954][ T9677] sysfs_kf_write+0xf2/0x150 [ 151.574970][ T9677] kernfs_fop_write_iter+0x3e0/0x5f0 [ 151.574985][ T9677] ? __pfx_sysfs_kf_write+0x10/0x10 [ 151.575009][ T9677] vfs_write+0x6af/0x1050 [ 151.575032][ T9677] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 151.575056][ T9677] ? __pfx_vfs_write+0x10/0x10 [ 151.575074][ T9677] ? find_held_lock+0x2b/0x80 [ 151.575098][ T9677] ksys_write+0x12a/0x250 [ 151.575112][ T9677] ? __pfx_ksys_write+0x10/0x10 [ 151.575133][ T9677] __do_fast_syscall_32+0x13a/0x8b0 [ 151.575156][ T9677] do_fast_syscall_32+0x32/0x70 [ 151.575182][ T9677] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.575205][ T9677] RIP: 0023:0xf73fefec [ 151.575221][ T9677] Code: Unable to access opcode bytes at 0xf73fefc2. [ 151.575227][ T9677] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 151.575245][ T9677] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 151.575256][ T9677] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.575265][ T9677] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.575275][ T9677] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 151.575286][ T9677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.575312][ T9677] [ 151.869504][ T9695] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 152.514299][ T9699] netlink: 'syz.0.1071': attribute type 1 has an invalid length. [ 152.536679][ T9699] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 152.577741][ T9699] netlink: 'syz.0.1071': attribute type 1 has an invalid length. [ 152.585757][ T5099] Bluetooth: hci2: command tx timeout [ 152.609798][ T9699] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 152.730501][ T9707] netlink: 'syz.0.1065': attribute type 1 has an invalid length. [ 152.818826][ T9709] netlink: 'syz.0.1065': attribute type 10 has an invalid length. [ 152.818841][ T9709] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1065'. [ 152.818928][ T9709] dummy0: entered promiscuous mode [ 153.635030][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 154.444929][ T7103] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 154.594761][ T7103] usb 14-1: Using ep0 maxpacket: 32 [ 154.595555][ T7103] usb 14-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 154.596259][ T7103] usb 14-1: config 0 has no interfaces? [ 154.598196][ T7103] usb 14-1: New USB device strings: Mfr=1, Product=69, SerialNumber=3 [ 154.598216][ T7103] usb 14-1: Product: syz [ 154.598228][ T7103] usb 14-1: Manufacturer: syz [ 154.598242][ T7103] usb 14-1: SerialNumber: syz [ 154.600399][ T7103] usb 14-1: config 0 descriptor?? [ 154.672862][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1084'. [ 154.678528][ T5750] Bluetooth: hci2: command tx timeout [ 154.685047][ T9780] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 154.699702][ T9780] batman_adv: batadv0: Removing interface: syzkaller0 [ 155.373357][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 156.410822][ T9821] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 156.586623][ T9825] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.669521][ T9825] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.738473][ T9825] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.829727][ T9825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.905515][ T5750] Bluetooth: hci0: command 0x0406 tx timeout [ 157.018943][ T9832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1101'. [ 157.019680][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'. [ 157.065377][ T9834] Console: switching to colour dummy device 80x25 [ 157.233255][ T43] usb 14-1: USB disconnect, device number 2 [ 157.263913][ T9840] netlink: 'syz.9.1103': attribute type 1 has an invalid length. [ 157.281843][ T9840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.319343][ T9840] bond2: (slave veth5): Enslaving as an active interface with a down link [ 157.351381][ T9840] bond1: (slave dummy0): Removing an active aggregator [ 157.352193][ T9840] bond1: (slave dummy0): Releasing backup interface [ 157.361084][ T9840] bond2: (slave dummy0): making interface the new active one [ 157.364208][ T9840] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 157.377686][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1105'. [ 157.421307][ T9840] netlink: 'syz.9.1103': attribute type 10 has an invalid length. [ 157.421323][ T9840] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1103'. [ 157.421384][ T9840] dummy0: entered promiscuous mode [ 157.422427][ T9840] bond2: (slave dummy0): Releasing active interface [ 157.553665][ T9855] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 157.714893][ T9871] fuse: fd is not a fuse device [ 157.893697][ T9881] lo: entered allmulticast mode [ 157.896611][ T9884] netlink: 'syz.1.1119': attribute type 1 has an invalid length. [ 157.915217][ T9884] 8021q: adding VLAN 0 to HW filter on device bond9 [ 157.951545][ T9884] bond9: (slave veth7): Enslaving as an active interface with a down link [ 157.951710][ T9880] lo: left allmulticast mode [ 157.976258][ T9884] dummy0: left promiscuous mode [ 157.978027][ T9884] bond9: (slave dummy0): making interface the new active one [ 157.978415][ T9884] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 157.983067][ T9884] netlink: 'syz.1.1119': attribute type 10 has an invalid length. [ 157.983078][ T9884] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1119'. [ 157.983131][ T9884] dummy0: entered promiscuous mode [ 157.985528][ T9884] bond9: (slave dummy0): Releasing active interface [ 158.092434][ T9901] netlink: 'syz.1.1133': attribute type 1 has an invalid length. [ 158.102891][ T9901] 8021q: adding VLAN 0 to HW filter on device bond10 [ 158.139136][ T9901] bond10: (slave veth9): Enslaving as an active interface with a down link [ 158.144717][ T7018] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 158.161929][ T9901] dummy0: left promiscuous mode [ 158.163623][ T9901] bond10: (slave dummy0): making interface the new active one [ 158.164057][ T9901] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 158.171054][ T9901] netlink: 'syz.1.1133': attribute type 10 has an invalid length. [ 158.171066][ T9901] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1133'. [ 158.171119][ T9901] dummy0: entered promiscuous mode [ 158.178776][ T9901] bond10: (slave dummy0): Releasing active interface [ 158.240815][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'. [ 158.296021][ T7018] usb 14-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 158.296925][ T7018] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 158.297723][ T7018] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 158.299535][ T7018] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.299548][ T7018] usb 14-1: Product: syz [ 158.299555][ T7018] usb 14-1: Manufacturer: syz [ 158.299562][ T7018] usb 14-1: SerialNumber: syz [ 158.310787][ T7018] ti_usb_3410_5052 14-1:2.0: TI USB 5052 2 port adapter converter detected [ 158.324396][ T7018] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 158.327622][ T7018] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 159.946780][ T5750] Bluetooth: hci3: command 0x0406 tx timeout [ 160.025070][ T9885] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 160.030072][ T7008] usb 14-1: USB disconnect, device number 3 [ 160.033880][ T7008] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 160.035663][ T7008] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 160.036653][ T7008] ti_usb_3410_5052 14-1:2.0: device disconnected [ 160.577408][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 160.637707][ T9945] netlink: 'syz.1.1137': attribute type 12 has an invalid length. [ 160.886352][ T9956] netlink: 'syz.6.1139': attribute type 1 has an invalid length. [ 160.914763][ T9956] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 160.948998][ T9956] netlink: 'syz.6.1139': attribute type 1 has an invalid length. [ 160.992322][ T9956] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 162.173932][T10019] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.307856][ T44] audit: type=1326 audit(1791601143.291:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.6.1155" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 162.308344][ T44] audit: type=1326 audit(1791601143.291:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.6.1155" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 162.309947][ T44] audit: type=1326 audit(1791601143.291:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.6.1155" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 162.310125][ T44] audit: type=1326 audit(1791601143.291:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.6.1155" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 162.311282][ T44] audit: type=1326 audit(1791601143.291:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.6.1155" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 162.311378][ T44] audit: type=1326 audit(1791601143.291:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.6.1155" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 162.311558][ T44] audit: type=1326 audit(1791601143.291:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.6.1155" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 162.311672][ T44] audit: type=1326 audit(1791601143.291:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.6.1155" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 162.311909][ T44] audit: type=1326 audit(1791601143.291:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.6.1155" exe="/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 162.312014][ T44] audit: type=1326 audit(1791601143.291:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10026 comm="syz.6.1155" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000 [ 162.444810][ T9986] ceph: No mds server is up or the cluster is laggy [ 162.664254][T10041] fuse: fd is not a fuse device [ 164.219614][T10076] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 164.254341][T10081] fuse: fd is not a fuse device [ 165.508652][T10118] picdev_read: 4 callbacks suppressed [ 165.508666][T10118] kvm: pic: non byte read [ 165.514954][T10118] kvm: pic: non byte read [ 165.525161][T10118] kvm: pic: level sensitive irq not supported [ 165.525496][T10118] kvm: pic: non byte read [ 165.549250][T10118] kvm: pic: non byte read [ 165.555109][T10118] kvm: pic: non byte read [ 165.560708][T10118] kvm: pic: non byte read [ 165.569383][T10118] kvm: pic: level sensitive irq not supported [ 165.569682][T10118] kvm: pic: non byte read [ 166.788217][T10174] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 167.195358][T10202] fuse: fd is not a fuse device [ 167.277267][T10209] nvmet: adding nsid 1 to subsystem testsubsys [ 167.290962][T10209] nvmet: failed to open block device ./file0: (-2) [ 168.407019][ T44] kauditd_printk_skb: 21 callbacks suppressed [ 168.407032][ T44] audit: type=1326 audit(1791601149.391:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10233 comm="syz.1.1205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 168.407059][ T44] audit: type=1326 audit(1791601149.391:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10233 comm="syz.1.1205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 168.408477][ T44] audit: type=1326 audit(1791601149.391:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10233 comm="syz.1.1205" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 168.408561][ T44] audit: type=1326 audit(1791601149.391:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10233 comm="syz.1.1205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 168.408639][ T44] audit: type=1326 audit(1791601149.391:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10233 comm="syz.1.1205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 168.408822][ T44] audit: type=1326 audit(1791601149.391:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10233 comm="syz.1.1205" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 168.409469][ T44] audit: type=1326 audit(1791601149.391:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10233 comm="syz.1.1205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 168.410221][ T44] audit: type=1326 audit(1791601149.391:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10233 comm="syz.1.1205" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 168.410497][ T44] audit: type=1326 audit(1791601149.391:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10233 comm="syz.1.1205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 168.410572][ T44] audit: type=1326 audit(1791601149.391:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10233 comm="syz.1.1205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 168.421530][T10240] binder: 10236:10240 ioctl c0306201 800003c0 returned -14 [ 168.497950][T10243] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 168.626183][T10243] md/raid10:md0: not clean -- starting background reconstruction [ 168.626196][T10243] md/raid10:md0: active with 1 out of 2 devices [ 168.626812][T10243] md0: detected capacity change from 0 to 2048 [ 168.640427][T10256] md: resync of RAID array md0 [ 168.660795][T10256] md: md0: resync done. [ 168.674400][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 169.829223][ T7104] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 170.039705][T10322] fuse: fd is not a fuse device [ 176.610433][T10380] fuse: fd is not a fuse device [ 176.865699][T10396] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1245'. [ 178.076540][T10415] EXT4-fs warning (device sda1): __ext4_ioctl:1563: Setting inode version is not supported with metadata_csum enabled. [ 178.116560][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1254'. [ 178.289692][ T44] kauditd_printk_skb: 20 callbacks suppressed [ 178.289705][ T44] audit: type=1804 audit(1791601159.271:197): pid=10426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1257" name="/newroot/111/file0" dev="tmpfs" ino=633 res=1 errno=0 [ 178.462059][T10441] smc: net device lo applied user defined pnetid SYZ0 [ 178.462194][T10441] smc: smcd device lo applied user defined pnetid SYZ0 [ 178.577249][T10452] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1263'. [ 178.988659][T10473] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 178.988685][T10473] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 178.988710][T10473] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 178.991289][T10473] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.999984][T10473] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 179.691280][ T6928] overlayfs: failed lookup in lower (newroot/216, name='bus', err=-40): overlapping layers [ 179.691363][ T6928] overlayfs: failed lookup in lower (newroot/216, name='bus', err=-40): overlapping layers [ 179.822136][T10487] FAULT_INJECTION: forcing a failure. [ 179.822136][T10487] name failslab, interval 1, probability 0, space 0, times 0 [ 179.822157][T10487] CPU: 3 UID: 0 PID: 10487 Comm: syz.0.1275 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.822173][T10487] Tainted: [L]=SOFTLOCKUP [ 179.822177][T10487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.822184][T10487] Call Trace: [ 179.822189][T10487] [ 179.822194][T10487] dump_stack_lvl+0x100/0x190 [ 179.822214][T10487] should_fail_ex.cold+0x5/0xa [ 179.822231][T10487] should_failslab+0xc2/0x120 [ 179.822250][T10487] kmem_cache_alloc_noprof+0x92/0x6a0 [ 179.822266][T10487] ? sctp_get_port_local+0x828/0x1630 [ 179.822281][T10487] sctp_get_port_local+0x828/0x1630 [ 179.822297][T10487] ? __pfx_sctp_get_port_local+0x10/0x10 [ 179.822312][T10487] ? sctp_bind_addr_match+0x19d/0x300 [ 179.822332][T10487] sctp_do_bind+0x2b9/0x760 [ 179.822350][T10487] sctp_inet_listen+0x69b/0x7f0 [ 179.822364][T10487] ? __pfx_sctp_inet_listen+0x10/0x10 [ 179.822381][T10487] ? apparmor_socket_listen+0x149/0x1e0 [ 179.822402][T10487] __sys_listen_socket+0x108/0x150 [ 179.822415][T10487] __sys_listen+0xa7/0x130 [ 179.822426][T10487] __ia32_sys_listen+0x53/0x80 [ 179.822438][T10487] __do_fast_syscall_32+0x13a/0x8b0 [ 179.822452][T10487] do_fast_syscall_32+0x32/0x70 [ 179.822474][T10487] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.822490][T10487] RIP: 0023:0xf7fc8fec [ 179.822505][T10487] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 179.822510][T10487] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 000000000000016b [ 179.822523][T10487] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 179.822531][T10487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.822539][T10487] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.822546][T10487] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 179.822570][T10487] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.822587][T10487] [ 180.091635][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.096029][ T5750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.097734][ T5750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.107197][ T5750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.107568][ T5750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.108813][ T7008] libceph: connect (1)[c::]:6789 error -101 [ 180.108902][ T7008] libceph: mon0 (1)[c::]:6789 connect error [ 180.111559][T10492] ceph: No mds server is up or the cluster is laggy [ 180.174223][T10507] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 180.227995][T10511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.482064][T10533] fuse: fd is not a fuse device [ 180.491035][T10497] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.493342][T10497] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.493407][T10497] bridge_slave_0: entered allmulticast mode [ 180.494085][T10497] bridge_slave_0: entered promiscuous mode [ 180.495333][T10497] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.495407][T10497] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.495490][T10497] bridge_slave_1: entered allmulticast mode [ 180.498411][T10497] bridge_slave_1: entered promiscuous mode [ 180.515858][T10497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.518091][T10497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.529141][T10497] team0: Port device team_slave_0 added [ 180.530366][T10497] team0: Port device team_slave_1 added [ 180.544106][T10497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.544121][T10497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.544134][T10497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.547747][T10497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.547756][T10497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.547769][T10497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.562292][T10537] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 180.582244][T10497] hsr_slave_0: entered promiscuous mode [ 180.582953][T10497] hsr_slave_1: entered promiscuous mode [ 180.583244][T10497] debugfs: 'hsr0' already exists in 'hsr' [ 180.583256][T10497] Cannot create hsr debugfs directory [ 180.774526][T10554] warning: `syz.1.1296' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 181.120117][T10497] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 181.125050][T10497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.126818][T10497] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 181.133988][T10497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.135094][T10497] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 181.141452][T10582] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1301'. [ 181.143783][T10497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.144186][T10497] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.147157][T10497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 181.216477][T10497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.229464][T10497] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.233871][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.233915][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.242074][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.242116][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.618688][T10497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.668601][T10497] veth0_vlan: entered promiscuous mode [ 181.674413][T10497] veth1_vlan: entered promiscuous mode [ 181.704830][T10497] veth0_macvtap: entered promiscuous mode [ 181.710923][T10497] veth1_macvtap: entered promiscuous mode [ 181.711841][ T44] audit: type=1800 audit(1791601162.691:198): pid=10568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1298" name="/" dev="fuse" ino=4 res=0 errno=0 [ 181.728835][T10497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.737514][T10497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.808083][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.808110][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.808128][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.808146][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.844486][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.844499][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.883942][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.883955][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.960960][T10634] tipc: Failed to remove unknown binding: 66,0,0/4:97162662/97162663 [ 181.961317][T10634] tipc: Failed to remove unknown binding: 66,0,0/4:97162662/97162663 [ 182.189272][ T5099] Bluetooth: hci1: command tx timeout [ 183.098105][T10680] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 183.167486][T10680] smpboot: CPU 1 is now offline [ 183.212250][T10680] smpboot: CPU 3 is now offline [ 183.253162][T10687] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 183.287590][T10687] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 183.574705][ T1938] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 183.725736][ T1938] usb 7-1: Using ep0 maxpacket: 8 [ 183.732814][ T1938] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 183.733731][ T1938] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 183.733759][ T1938] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 183.733786][ T1938] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 183.733806][ T1938] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.733825][ T1938] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 183.733843][ T1938] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 183.733862][ T1938] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 183.733882][ T1938] usb 7-1: config 168 interface 0 has no altsetting 0 [ 183.735317][ T1938] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 183.735343][ T1938] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 183.735370][ T1938] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 183.735390][ T1938] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.735408][ T1938] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 183.735426][ T1938] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 183.735452][ T1938] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 183.735471][ T1938] usb 7-1: config 168 interface 0 has no altsetting 0 [ 183.736793][ T1938] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 183.736818][ T1938] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 183.736848][ T1938] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 183.736868][ T1938] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.736886][ T1938] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 183.736905][ T1938] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 183.736924][ T1938] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 183.736944][ T1938] usb 7-1: config 168 interface 0 has no altsetting 0 [ 183.739560][ T1938] usb 7-1: string descriptor 0 read error: -22 [ 183.739646][ T1938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.754944][ T1938] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 183.836750][ T5750] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 183.964176][T10728] netlink: 'syz.0.1329': attribute type 1 has an invalid length. [ 183.973144][T10728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.988992][T10728] bond1: (slave veth0_to_bond): making interface the new active one [ 183.990143][T10728] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 183.997224][T10728] macvlan2: entered promiscuous mode [ 183.997237][T10728] macvlan2: entered allmulticast mode [ 183.997546][T10728] bond1: entered promiscuous mode [ 183.997555][T10728] veth0_to_bond: entered promiscuous mode [ 184.002957][T10728] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 184.003263][T10728] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 184.003374][T10728] bond1: left promiscuous mode [ 184.003383][T10728] veth0_to_bond: left promiscuous mode [ 184.053600][ T7018] usb 7-1: USB disconnect, device number 2 [ 184.264834][ T5750] Bluetooth: hci1: command tx timeout [ 185.181002][T10755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1335'. [ 185.181019][T10755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1335'. [ 185.181027][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 185.799241][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1341'. [ 186.268877][T10787] binder: 10786:10787 ioctl c0306201 80000080 returned -14 [ 186.270784][T10787] binder: 10786:10787 ioctl c0306201 800003c0 returned -14 [ 186.345025][ T5750] Bluetooth: hci1: command tx timeout [ 188.424717][ T5750] Bluetooth: hci1: command tx timeout [ 188.685934][T10820] fuse: fd is not a fuse device [ 188.713544][T10822] fuse: fd is not a fuse device [ 188.916177][T10772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.016706][T10830] overlayfs: failed to resolve './cgroup': -2 [ 189.060163][T10836] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1363'. [ 189.060474][T10836] bridge0: port 3(vlan1) entered disabled state [ 189.070611][T10836] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1363'. [ 189.070740][T10836] bridge0: port 3(vlan1) entered blocking state [ 189.070823][T10836] bridge0: port 3(vlan1) entered forwarding state [ 189.093064][T10835] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 189.754901][ T5835] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 189.904885][ T5835] usb 14-1: Using ep0 maxpacket: 8 [ 189.905361][ T5835] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 189.906135][ T5835] usb 14-1: config 0 has an invalid interface number: 55 but max is 0 [ 189.906148][ T5835] usb 14-1: config 0 has no interface number 0 [ 189.906166][ T5835] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 189.906177][ T5835] usb 14-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 189.906189][ T5835] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 189.906201][ T5835] usb 14-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 189.906220][ T5835] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.907649][ T5835] usb 14-1: config 0 descriptor?? [ 189.926391][ T5835] ldusb 14-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 189.960197][ T44] audit: type=1804 audit(1791601170.941:199): pid=10849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1370" name="/newroot/8/file0" dev="tmpfs" ino=62 res=1 errno=0 [ 189.960708][T10849] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -780, delta: 1 [ 189.960720][T10849] ref_ctr increment failed for inode: 0x3e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ac7ee40 [ 189.961224][T10848] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -780, delta: -1 [ 189.961234][T10848] ref_ctr decrement failed for inode: 0x3e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ac7ee40 [ 189.961272][T10848] uprobe: syz.2.1370:10848 failed to unregister, leaking uprobe [ 190.656374][ T5528] usb 14-1: USB disconnect, device number 4 [ 190.660819][ T5528] ldusb 14-1:0.55: LD USB Device #0 now disconnected [ 190.700575][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 190.700598][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 190.794197][T10896] netlink: 'syz.9.1388': attribute type 4 has an invalid length. [ 190.801346][T10896] netlink: 'syz.9.1388': attribute type 4 has an invalid length. [ 191.050434][T10922] fuse: fd is not a fuse device [ 191.102206][T10925] FAULT_INJECTION: forcing a failure. [ 191.102206][T10925] name failslab, interval 1, probability 0, space 0, times 0 [ 191.102229][T10925] CPU: 0 UID: 0 PID: 10925 Comm: syz.2.1400 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.102246][T10925] Tainted: [L]=SOFTLOCKUP [ 191.102251][T10925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.102258][T10925] Call Trace: [ 191.102262][T10925] [ 191.102267][T10925] dump_stack_lvl+0x100/0x190 [ 191.102299][T10925] should_fail_ex.cold+0x5/0xa [ 191.102316][T10925] should_failslab+0xc2/0x120 [ 191.102354][T10925] __kmalloc_noprof+0xfc/0x840 [ 191.102373][T10925] ? sock_kmalloc+0x111/0x170 [ 191.102397][T10925] sock_kmalloc+0x111/0x170 [ 191.102414][T10925] skcipher_accept_parent_nokey+0x29/0x2f0 [ 191.102437][T10925] af_alg_accept+0x34a/0x610 [ 191.102450][T10925] ? __pfx_skcipher_accept_parent_nokey+0x10/0x10 [ 191.102468][T10925] do_accept+0x340/0x530 [ 191.102481][T10925] ? __pfx_do_accept+0x10/0x10 [ 191.102504][T10925] __sys_accept4+0x108/0x200 [ 191.102517][T10925] ? __pfx___sys_accept4+0x10/0x10 [ 191.102534][T10925] __ia32_sys_accept4+0x94/0x100 [ 191.102546][T10925] ? lockdep_hardirqs_on+0x7d/0x110 [ 191.102569][T10925] __do_fast_syscall_32+0x13a/0x8b0 [ 191.102583][T10925] do_fast_syscall_32+0x32/0x70 [ 191.102594][T10925] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.102609][T10925] RIP: 0023:0xf740efec [ 191.102624][T10925] Code: Unable to access opcode bytes at 0xf740efc2. [ 191.102631][T10925] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 191.102647][T10925] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 191.102659][T10925] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 191.102669][T10925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.102679][T10925] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 191.102689][T10925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.102706][T10925] [ 191.201948][T10932] ref_ctr increment failed for inode: 0x9fd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880443e8000 [ 191.202261][ T44] audit: type=1804 audit(1791601172.181:200): pid=10932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1403" name="file0" dev="tmpfs" ino=2557 res=1 errno=0 [ 191.206861][T10930] uprobe: syz.1.1403:10930 failed to unregister, leaking uprobe [ 191.265870][T10939] syz_tun: entered allmulticast mode [ 191.723209][ T44] audit: type=1800 audit(1791601172.701:201): pid=10912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1391" name="/" dev="fuse" ino=4 res=0 errno=0 [ 192.232236][T10970] vlan3: entered promiscuous mode [ 192.232251][T10970] hsr0: entered promiscuous mode [ 192.234214][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1419'. [ 192.234429][T10970] hsr_slave_0: left promiscuous mode [ 192.243059][T10970] hsr_slave_1: left promiscuous mode [ 192.329823][T10975] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1421'. [ 192.351923][T10978] Bluetooth: MGMT ver 1.23 [ 192.364753][ T5835] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 192.426249][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.426279][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.545609][ T5835] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 192.546482][ T5835] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 192.547454][ T5835] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 192.548934][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.548946][ T5835] usb 5-1: Product: syz [ 192.548953][ T5835] usb 5-1: Manufacturer: syz [ 192.548961][ T5835] usb 5-1: SerialNumber: syz [ 192.555962][ T5835] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 192.559764][ T5835] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 192.562563][ T5835] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 192.654766][ T7103] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 192.675001][ T5099] Bluetooth: hci3: unexpected event for opcode 0x080d [ 192.815113][ T7103] usb 7-1: Using ep0 maxpacket: 16 [ 192.815797][ T7103] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 192.817278][ T7103] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.817317][ T7103] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.821568][ T7103] usb 7-1: config 0 descriptor?? [ 192.838704][ T7103] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input16 [ 193.076780][ T5134] bcm5974 7-1:0.0: could not read from device [ 193.078917][ T5134] bcm5974 7-1:0.0: could not read from device [ 193.090059][ T5134] bcm5974 7-1:0.0: could not read from device [ 193.091251][ T7103] usb 7-1: USB disconnect, device number 3 [ 193.109278][T10981] bcm5974 7-1:0.0: could not read from device [ 193.228277][T10999] netlink: 'syz.1.1427': attribute type 39 has an invalid length. [ 193.399575][T11004] fuse: fd is not a fuse device [ 193.738500][ T5099] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 194.426784][ T5750] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 194.427746][ T5750] Bluetooth: hci0: command 0x0406 tx timeout [ 194.676839][T11036] netlink: 'syz.1.1442': attribute type 4 has an invalid length. [ 194.701992][ T1177] Bluetooth: hci4: Frame reassembly failed (-90) [ 194.704101][T11038] Bluetooth: hci4: Frame reassembly failed (-84) [ 194.711201][T11036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1442'. [ 194.711802][T11036] netlink: 'syz.1.1442': attribute type 17 has an invalid length. [ 194.826049][T10958] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 194.826314][T10958] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 194.826333][T10958] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 194.826485][T10958] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 194.828057][ T8811] usb 5-1: USB disconnect, device number 5 [ 194.836351][ T8811] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 194.838325][ T8811] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 194.838716][ T8811] ti_usb_3410_5052 5-1:2.0: device disconnected [ 194.933518][ T6027] smpboot: CPU 1 is now offline [ 194.977358][ T6027] [ 194.978140][ T6027] ====================================================== [ 194.980231][ T6027] WARNING: possible circular locking dependency detected [ 194.982296][ T6027] syzkaller #0 Tainted: G L [ 194.984436][ T6027] ------------------------------------------------------ [ 194.986490][ T6027] kworker/u32:4/6027 is trying to acquire lock: [ 194.988481][ T6027] ffff88801e771f08 (kn->active#68){++++}-{0:0}, at: __kernfs_remove+0x34c/0xb80 [ 194.991129][ T6027] [ 194.991129][ T6027] but task is already holding lock: [ 194.993247][ T6027] ffffffff8fc7ca10 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 194.996220][ T6027] [ 194.996220][ T6027] which lock already depends on the new lock. [ 194.996220][ T6027] [ 194.999194][ T6027] [ 194.999194][ T6027] the existing dependency chain (in reverse order) is: [ 195.001843][ T6027] [ 195.001843][ T6027] -> #1 (cpu_hotplug_lock){++++}-{0:0}: [ 195.004070][ T6027] lock_acquire+0x1d1/0x380 [ 195.005569][ T6027] cpus_read_lock+0x42/0x170 [ 195.007165][ T6027] try_online_node+0x11/0x50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 195.008680][ T6027] cpu_up+0x7f/0x230 [ 195.010143][ T6027] cpu_subsys_online+0x84/0x190 [ 195.011738][ T6027] device_online+0x15b/0x200 [ 195.013292][ T6027] online_store+0x145/0x180 [ 195.014758][ T6027] dev_attr_store+0x58/0x80 [ 195.016237][ T6027] sysfs_kf_write+0xf2/0x150 [ 195.017758][ T6027] kernfs_fop_write_iter+0x3e0/0x5f0 [ 195.019615][ T6027] vfs_write+0x6af/0x1050 [ 195.021071][ T6027] ksys_write+0x12a/0x250 [ 195.022499][ T6027] __do_fast_syscall_32+0x13a/0x8b0 [ 195.024157][ T6027] do_fast_syscall_32+0x32/0x70 [ 195.025763][ T6027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.027712][ T6027] [ 195.027712][ T6027] -> #0 (kn->active#68){++++}-{0:0}: [ 195.029913][ T6027] check_prev_add+0xeb/0xe60 [ 195.031430][ T6027] __lock_acquire+0x1528/0x1f40 [ 195.032982][ T6027] lock_acquire+0x1d1/0x380 [ 195.034442][ T6027] kernfs_drain+0x4f0/0x600 [ 195.035914][ T6027] __kernfs_remove+0x34c/0xb80 [ 195.037443][ T6027] kernfs_remove_by_name_ns+0x7c/0x120 [ 195.039184][ T6027] device_remove_attrs+0x15c/0x290 [ 195.040821][ T6027] device_del+0x36e/0x9b0 [ 195.042247][ T6027] device_unregister+0x1d/0xe0 [ 195.043766][ T6027] unregister_cpu+0xa0/0x140 [ 195.045255][ T6027] acpi_processor_post_eject+0x16f/0x390 [ 195.047066][ T6027] acpi_device_hotplug+0xa33/0xc40 [ 195.048693][ T6027] acpi_hotplug_work_fn+0x5e/0x90 [ 195.050341][ T6027] process_one_work+0xac7/0x1b10 [ 195.051920][ T6027] worker_thread+0x5ef/0xe50 [ 195.053419][ T6027] kthread+0x373/0x450 [ 195.054759][ T6027] ret_from_fork+0x730/0xd60 [ 195.056253][ T6027] ret_from_fork_asm+0x1a/0x30 [ 195.057790][ T6027] [ 195.057790][ T6027] other info that might help us debug this: [ 195.057790][ T6027] [ 195.060682][ T6027] Possible unsafe locking scenario: [ 195.060682][ T6027] [ 195.062830][ T6027] CPU0 CPU1 [ 195.064386][ T6027] ---- ---- [ 195.065958][ T6027] lock(cpu_hotplug_lock); [ 195.067286][ T6027] lock(kn->active#68); [ 195.069258][ T6027] lock(cpu_hotplug_lock); [ 195.071262][ T6027] lock(kn->active#68); [ 195.072500][ T6027] [ 195.072500][ T6027] *** DEADLOCK *** [ 195.072500][ T6027] [ 195.074853][ T6027] locks held by kworker/u32:4/6027: 6, last CPU#3: [ 195.076712][ T6027] #0: ffff88801ef9f140 ((wq_completion)kacpi_hotplug){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 195.079897][ T6027] #1: ffffc90004e5fd08 ((work_completion)(&hpw->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 195.083060][ T6027] #2: ffffffff90e21f60 (device_hotplug_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x82/0xc40 [ 195.085989][ T6027] #3: ffffffff90af60e0 (acpi_scan_lock){+.+.}-{4:4}, at: acpi_device_hotplug+0x90/0xc40 [ 195.088763][ T6027] #4: ffffffff8fc7cac0 (cpu_add_remove_lock){+.+.}-{4:4}, at: acpi_processor_post_eject+0x141/0x390 [ 195.091875][ T6027] #5: ffffffff8fc7ca10 (cpu_hotplug_lock){++++}-{0:0}, at: acpi_processor_post_eject+0x146/0x390 [ 195.094920][ T6027] [ 195.094920][ T6027] stack backtrace: [ 195.096624][ T6027] CPU: 3 UID: 0 PID: 6027 Comm: kworker/u32:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.099787][ T6027] Tainted: [L]=SOFTLOCKUP [ 195.101055][ T6027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.103977][ T6027] Workqueue: kacpi_hotplug acpi_hotplug_work_fn [ 195.105813][ T6027] Call Trace: [ 195.106803][ T6027] [ 195.107676][ T6027] dump_stack_lvl+0x100/0x190 [ 195.109057][ T6027] print_circular_bug.cold+0x178/0x1be [ 195.110664][ T6027] check_noncircular+0x146/0x160 [ 195.112119][ T6027] check_prev_add+0xeb/0xe60 [ 195.113484][ T6027] ? __lock_acquire+0x5c0/0x1f40 [ 195.114936][ T6027] __lock_acquire+0x1528/0x1f40 [ 195.116375][ T6027] lock_acquire+0x1d1/0x380 [ 195.117694][ T6027] ? __kernfs_remove+0x34c/0xb80 [ 195.119164][ T6027] ? kernfs_drain+0x4c7/0x600 [ 195.120538][ T6027] kernfs_drain+0x4f0/0x600 [ 195.121896][ T6027] ? __kernfs_remove+0x34c/0xb80 [ 195.123347][ T6027] ? __pfx_kernfs_drain+0x10/0x10 [ 195.124810][ T6027] ? find_held_lock+0x2b/0x80 [ 195.126196][ T6027] ? __kernfs_remove+0x224/0xb80 [ 195.127637][ T6027] ? __kernfs_remove+0x224/0xb80 [ 195.129090][ T6027] ? up_write+0x2dc/0x5b0 [ 195.130357][ T6027] __kernfs_remove+0x34c/0xb80 [ 195.131786][ T6027] kernfs_remove_by_name_ns+0x7c/0x120 [ 195.133378][ T6027] device_remove_attrs+0x15c/0x290 [ 195.134868][ T6027] ? __pfx_device_remove_attrs+0x10/0x10 [ 195.136500][ T6027] device_del+0x36e/0x9b0 [ 195.137762][ T6027] ? __pfx_device_del+0x10/0x10 [ 195.139215][ T6027] ? kernfs_remove_by_name_ns+0xbb/0x120 [ 195.140870][ T6027] device_unregister+0x1d/0xe0 [ 195.142255][ T6027] unregister_cpu+0xa0/0x140 [ 195.143596][ T6027] acpi_processor_post_eject+0x16f/0x390 [ 195.145202][ T6027] ? __pfx_acpi_processor_post_eject+0x10/0x10 [ 195.146992][ T6027] acpi_device_hotplug+0xa33/0xc40 [ 195.148474][ T6027] ? __pfx_acpi_device_hotplug+0x10/0x10 [ 195.150144][ T6027] acpi_hotplug_work_fn+0x5e/0x90 [ 195.151625][ T6027] process_one_work+0xac7/0x1b10 [ 195.153073][ T6027] ? __pfx_process_one_work+0x10/0x10 [ 195.154663][ T6027] ? lock_acquire+0x1d1/0x380 [ 195.156057][ T6027] ? __pfx_acpi_hotplug_work_fn+0x10/0x10 [ 195.157733][ T6027] worker_thread+0x5ef/0xe50 [ 195.159102][ T6027] ? kthread+0x13a/0x450 [ 195.160370][ T6027] ? __pfx_worker_thread+0x10/0x10 [ 195.161884][ T6027] kthread+0x373/0x450 [ 195.163086][ T6027] ? __pfx_kthread+0x10/0x10 [ 195.164448][ T6027] ret_from_fork+0x730/0xd60 [ 195.165827][ T6027] ? __pfx_ret_from_fork+0x10/0x10 [ 195.167322][ T6027] ? native_load_gs_index+0x1e/0xc0 [ 195.168848][ T6027] ? __switch_to+0x800/0x10f0 [ 195.170265][ T6027] ? __pfx_kthread+0x10/0x10 [ 195.171629][ T6027] ret_from_fork_asm+0x1a/0x30 [ 195.173073][ T6027] [ 195.413446][ T5835] infiniband syz1: ib_query_port failed (-19) [ 195.413990][ T1175] smbdirect: ib_dev[syz1] removed [ 195.418712][T10957] syz_tun (unregistering): left allmulticast mode [ 195.489020][ T6027] bridge_slave_1: left allmulticast mode [ 195.489037][ T6027] bridge_slave_1: left promiscuous mode [ 195.489113][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.491915][ T6027] bridge_slave_0: left allmulticast mode [ 195.491926][ T6027] bridge_slave_0: left promiscuous mode [ 195.491991][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.532476][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.533540][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.534222][ T6027] bond0 (unregistering): Released all slaves [ 195.541801][ T6027] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 195.547119][ T6027] bond1 (unregistering): Released all slaves [ 195.726596][ T6027] hsr_slave_0: left promiscuous mode [ 195.726822][ T6027] hsr_slave_1: left promiscuous mode [ 195.727060][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.727069][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.727296][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.727304][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.728725][ T6027] veth1_macvtap: left promiscuous mode [ 195.728760][ T6027] veth0_macvtap: left promiscuous mode [ 195.728804][ T6027] veth1_vlan: left promiscuous mode [ 195.728830][ T6027] veth0_vlan: left promiscuous mode [ 195.784219][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 195.789317][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 196.744746][ T5750] Bluetooth: hci4: command 0x1003 tx timeout [ 196.744859][ T5099] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 196.978336][ T7924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.060708][ T7924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.097704][ T7924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.208936][ T7924] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.270792][ T7924] bridge_slave_1: left allmulticast mode [ 197.270814][ T7924] bridge_slave_1: left promiscuous mode [ 197.270911][ T7924] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.272124][ T7924] bridge_slave_0: left allmulticast mode [ 197.272140][ T7924] bridge_slave_0: left promiscuous mode [ 197.272233][ T7924] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.330601][ T7924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.331566][ T7924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.332187][ T7924] bond0 (unregistering): Released all slaves [ 197.453291][ T5451] 8021q: adding VLAN 0 to HW filter on device eth3 [ 197.500750][ T7924] hsr_slave_0: left promiscuous mode [ 197.501021][ T7924] hsr_slave_1: left promiscuous mode [ 197.501290][ T7924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.501299][ T7924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.501575][ T7924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.501584][ T7924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.503158][ T7924] veth1_macvtap: left promiscuous mode [ 197.503181][ T7924] veth0_macvtap: left promiscuous mode [ 197.503213][ T7924] veth1_vlan: left promiscuous mode [ 197.503232][ T7924] veth0_vlan: left promiscuous mode [ 197.553668][ T7924] team0 (unregistering): Port device team_slave_1 removed [ 197.557729][ T7924] team0 (unregistering): Port device team_slave_0 removed [ 197.577906][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2 [ 197.696869][ T5451] 8021q: adding VLAN 0 to HW filter on device eth4 [ 197.802755][ T5451] 8021q: adding VLAN 0 to HW filter on device eth5