last executing test programs: 1.047662211s ago: executing program 0 (id=1): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000f80)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x180) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000300)=0xb7, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r1, &(0x7f00000003c0)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) write(r0, &(0x7f00000004c0)='4', 0x4b) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000080)=0x33, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000500)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f0000000540)=0x6) connect$inet(r3, &(0x7f0000000580)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f00000005c0), 0xffffffffffffff94, 0x201, 0x0, 0x0) ppoll(&(0x7f0000000600)=[{r3}], 0x1, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000640)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) listen(r2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r6, &(0x7f0000009b40)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}], 0x3, 0x12140, 0x0) sendto(r5, &(0x7f0000000100), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f0000000180)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 803.960408ms ago: executing program 3 (id=4): syz_open_dev$sg(0x0, 0x6f5e, 0x121403) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x0, 0x256}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x27ffffe, 0x4520, 0x2100, 0x2d8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x800, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0xfffffffc, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0xfffffffe, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0xe, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x3, 0xe0b, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) 723.506939ms ago: executing program 2 (id=3): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000040)={&(0x7f0000000080)=@name, 0x10, 0x0}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000380)={r2, 0x1, 0x2000, 0x8000}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf251b0000000e0001006e65746465767369830000000f0002006e6574646530000008000b000f000000000000002f4dd57b7f896599cffb98c7165e6fa21572c97cfea0e43c3a7e9c0d6af8038fabae44542e6e2e4c0be631153edb130f40d1102a1e51da6e3a323266cf6734e9d2b5c6052fc0b043c0ea1127d6e5cb324d35cf17b5"], 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x42d11360952b3d20) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20040001) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x22004000) 713.079698ms ago: executing program 1 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2800004}, 0xc, &(0x7f00000005c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x4f8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x438, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x424, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x414, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x410, 0xa, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x46}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa0}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x98}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x7c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4b641528}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x800}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x270, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x260, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0xa2, 0x3, "090488495340080b6fc55b21825dbb85808eacccaa4ad5d8486fed846ea20adccba9d9d4e225ef177324e764c41688df665c76e799e4bb5b511a95a38e1a1e96897284805dfa91a6f40b9db34c63bf840806e96fc7baae733744686fd8297a11e12b7f07da7017f85b55f91367759aa91a77816cf23ab90d0b728e0b6101d6a78a9b24ecf7f5bdf21d3c217af3c37f25c73c7af01005eada76df49adf4fc"}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_INFO={0xff, 0x3, "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"}, @NFTA_TARGET_NAME={0xd, 0x1, 'REDIRECT\x00'}, @NFTA_TARGET_INFO={0x8c, 0x3, "30fb2f99eb2021c3d2daafacb2aa9f1c493ae1d6f02f4c055d3d4a034f4ff1058f32e009d4a6bf7fd7b8a89c8823c6b86b2d2253e708baf3714afc1e78680752d38ece12acc13e353356ddeac7ec519d4f7f67cf5f2ca6b3496a177607803816835e7434457d819e55e41dd4d523688d5a7a3e9b57c7eb3928240ba89652b09ecfac004e571843ee"}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x70, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1ff}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x200}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}]}}}]}, @NFTA_RULE_USERDATA={0x89, 0x7, 0x1, 0x0, "4363a434953a98443fcdea66bfb612ab559be3ad97b9e8294a3540c0426c2d270a25a489f96efbf9c8c8ad876399a50219221fe6b727b7adc7699f112744de216ed4efc4958c4b3130fc7216b56ad8fd0a83fa5b519039c33409d4c520aac16194fd060f4086e4eaea853af5203f2b8f1a6e0138d86fa5a212b3d7150e959292b7365e5e02"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x554}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000640), 0x4) gettid() getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000680), &(0x7f0000000700)=0x80) r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000740), 0x4000c1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000800)={r2}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x370053c91ebb6c54}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x20001) ioctl$BSG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000a00)) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x48, r7, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "a31758f292f1bc087a7812706f652cb9"}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000050) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000bc0)=0xd) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c40), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r9, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000d40)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000d80)=r1, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000e00)={0x5, &(0x7f0000000dc0)=""/5}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x84, r10, 0x0, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008081}, 0x20048050) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000001040)={0x0, 0x0, 0x5, 0x400, 0x0, 0x0, &(0x7f0000001000)}) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000010c0), r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x28, r11, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000001}, 0x24000001) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000011c0)) 590.083159ms ago: executing program 1 (id=5): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) setxattr$system_posix_acl(&(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020006000100000000000000040000000000090008000000e5ffffff24"], 0x24, 0x0) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000080)='xfs\x00', 0x3114432, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000440)={0x0, 0xfffffe98, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) userfaultfd(0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000e000000000000000000000008500000087000000850000002a00000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) listen(0xffffffffffffffff, 0x20) syz_open_dev$I2C(&(0x7f0000000680), 0x0, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f00000006c0)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40080c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f0000000700)={0x0, 0xffffffffffffffff, 0x80800}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000740)={0x1, 0x3b, "057d1f627ba13da75d804aefb142fc0b0d32c009cfb8802c0fdd43a47ed2635e12f57bb7f876a79e876c623b0803248659ac91b09f39580d5bdd3a"}, &(0x7f00000007c0)=0x43) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x7, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000008c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000900)=""/102392, 0x18ff8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000019900)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000019940)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) 519.28418ms ago: executing program 2 (id=6): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) open(&(0x7f0000002d00)='./file0\x00', 0x41b41, 0x0) execve(&(0x7f0000002e40)='./file0\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000880)={0x2, 0x6e24, @empty}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x140, &(0x7f0000000340)=[{&(0x7f0000000c80)=""/4091, 0x10e0}, {&(0x7f0000001c80)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x40, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r4 = open(&(0x7f0000000540)='.\x00', 0x8000, 0x50) getdents(r4, &(0x7f0000000580)=""/184, 0xb8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc04c5609, &(0x7f0000000640)=@mmap={0x7, 0xd, 0x4, 0x100, 0x0, {0x77359400}, {0x2, 0x1, 0x60, 0x47, 0x9, 0x6, "dff70d13"}, 0xfffffc01, 0x1, {}, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000068000100fffc0000fcdbdf25020000006e62000004000400"], 0x1c}}, 0x0) getsockopt$bt_hci(r6, 0x0, 0x2, &(0x7f0000000380)=""/46, &(0x7f00000003c0)=0x2e) sendmmsg(r5, &(0x7f0000000240), 0x400000000000235, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 460.334763ms ago: executing program 3 (id=7): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, &(0x7f0000000000)={0x54000, 0x304000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/273], 0x158}}, 0x0) syz_emit_ethernet(0x27, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "0000123412"}}}}, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout', 0x0, 0x1c3) r5 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, r5, 0x0, 0x276) 0s ago: executing program 0 (id=8): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000080000000003bfc209b80f6eb3100"/28], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x20, 0x7fffffff}]}) syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/regulator/regulator_summary\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000032c0)=""/4096, 0x1000}], 0x1) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000042c0)={0xe11, 0x0, 0x8, r0, 0x8}) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f00000004c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000202, 0x600000d, 0x13, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000008c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000900)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r1, 0x0, 0xe, 0x0, &(0x7f0000000cc0)="089198ef75ca778895e0e359940e", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mkdir(&(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pci/rescan\x00', 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40)={r2, 0x0, 0x25, 0x12, @void}, 0x10) write(r3, &(0x7f0000000480)='1', 0x1) (fail_nth: 4) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:13437' (ED25519) to the list of known hosts. [ 42.276892][ T5781] cgroup: Unknown subsys name 'net' [ 42.404234][ T5781] cgroup: Unknown subsys name 'cpuset' [ 42.409151][ T5781] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.327036][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.424237][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.425457][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.426222][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.426592][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.427442][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.427669][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.428984][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.429564][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.429655][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.430557][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.430668][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.431120][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.431145][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.432371][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.433684][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.434319][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.457712][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.461456][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.462596][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.462932][ T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.655587][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.659341][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.660652][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.670064][ T5796] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.671520][ T5794] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.675431][ T5805] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.753508][ T5795] infiniband rxe0: set active [ 47.753522][ T5795] infiniband rxe0: added rxe_eth0 [ 47.754656][ T5048] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.762422][ T5795] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 47.762442][ T5795] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 47.762461][ T5795] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 47.773730][ T5795] RDS/IB: rxe0: added [ 47.774007][ T5795] smc: adding ib device rxe0 with port count 1 [ 47.774040][ T5795] smc: ib device rxe0 port 1 has no pnetid [ 47.785249][ T5048] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.796784][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.907258][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.005349][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.013238][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.013615][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.013679][ T5805] bridge_slave_0: entered allmulticast mode [ 48.014443][ T5805] bridge_slave_0: entered promiscuous mode [ 48.026806][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.026849][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.026912][ T5805] bridge_slave_1: entered allmulticast mode [ 48.027662][ T5805] bridge_slave_1: entered promiscuous mode [ 48.049577][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.049621][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.049676][ T5796] bridge_slave_0: entered allmulticast mode [ 48.050379][ T5796] bridge_slave_0: entered promiscuous mode [ 48.058676][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.058718][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.058770][ T5794] bridge_slave_0: entered allmulticast mode [ 48.059405][ T5794] bridge_slave_0: entered promiscuous mode [ 48.060558][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.060598][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.060649][ T5794] bridge_slave_1: entered allmulticast mode [ 48.062279][ T5794] bridge_slave_1: entered promiscuous mode [ 48.064041][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.064080][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.064128][ T5796] bridge_slave_1: entered allmulticast mode [ 48.064849][ T5796] bridge_slave_1: entered promiscuous mode [ 48.088949][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.090654][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.096889][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.098870][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.100534][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.105157][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.142238][ T5796] team0: Port device team_slave_0 added [ 48.143245][ T5805] team0: Port device team_slave_0 added [ 48.144203][ T5794] team0: Port device team_slave_0 added [ 48.144233][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.145114][ T5805] team0: Port device team_slave_1 added [ 48.146058][ T5796] team0: Port device team_slave_1 added [ 48.146928][ T5794] team0: Port device team_slave_1 added [ 48.184289][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.184301][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.184313][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.185676][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.185687][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.185706][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.192018][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.192026][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.192038][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.192899][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.192906][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.192918][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.205161][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.205174][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.205201][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.207800][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.207811][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.207829][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.254670][ T5796] hsr_slave_0: entered promiscuous mode [ 48.255508][ T5796] hsr_slave_1: entered promiscuous mode [ 48.263025][ T5805] hsr_slave_0: entered promiscuous mode [ 48.263763][ T5805] hsr_slave_1: entered promiscuous mode [ 48.264340][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 48.264398][ T5805] Cannot create hsr debugfs directory [ 48.275430][ T5794] hsr_slave_0: entered promiscuous mode [ 48.275843][ T5794] hsr_slave_1: entered promiscuous mode [ 48.276132][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 48.276143][ T5794] Cannot create hsr debugfs directory [ 48.521672][ T5805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.528205][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.528935][ T5805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.533280][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.534658][ T5805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.546551][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.564631][ T5805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.566451][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.661229][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.661313][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.661412][ T5795] bridge_slave_0: entered allmulticast mode [ 48.662672][ T5795] bridge_slave_0: entered promiscuous mode [ 48.664384][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.664427][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.664483][ T5795] bridge_slave_1: entered allmulticast mode [ 48.665122][ T5795] bridge_slave_1: entered promiscuous mode [ 48.666074][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.669387][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.671915][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.683753][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.684662][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.689723][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.709780][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.712965][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.718274][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.730432][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.737270][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.737334][ T5805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.737605][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.737650][ T5805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.755388][ T5795] team0: Port device team_slave_0 added [ 48.757785][ T5795] team0: Port device team_slave_1 added [ 48.767217][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.767268][ T5794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.767374][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.767418][ T5794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.790121][ T5796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.793453][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.799994][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.800003][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.800016][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.804517][ T5796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.815742][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.816432][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.816443][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.816460][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.816767][ T5796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.819542][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.820012][ T5796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.824130][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.879308][ T5795] hsr_slave_0: entered promiscuous mode [ 48.880149][ T5795] hsr_slave_1: entered promiscuous mode [ 48.880735][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 48.880753][ T5795] Cannot create hsr debugfs directory [ 48.909799][ T457] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.910542][ T457] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.913542][ T457] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.918076][ T457] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.964110][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.022009][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.024476][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.039975][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.040067][ T457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.057430][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.059915][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.060001][ T457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.076707][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.076790][ T457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.097561][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.097643][ T457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.099647][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.102444][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.104799][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.106930][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.107450][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.109976][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.126685][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.129639][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.147915][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.183589][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.202050][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.202098][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.216425][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.216507][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.300370][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.326917][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.335683][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.335768][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.355743][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.355831][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.462407][ T5800] Bluetooth: hci3: command tx timeout [ 49.462658][ T67] Bluetooth: hci0: command tx timeout [ 49.472088][ T67] Bluetooth: hci2: command tx timeout [ 49.507476][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.542819][ T67] Bluetooth: hci1: command tx timeout [ 49.556831][ T5794] veth0_vlan: entered promiscuous mode [ 49.560664][ T5794] veth1_vlan: entered promiscuous mode [ 49.572218][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.595084][ T5794] veth0_macvtap: entered promiscuous mode [ 49.597681][ T5794] veth1_macvtap: entered promiscuous mode [ 49.620635][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.632963][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.636837][ T5796] veth0_vlan: entered promiscuous mode [ 49.645393][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.647200][ T5796] veth1_vlan: entered promiscuous mode [ 49.704447][ T5796] veth0_macvtap: entered promiscuous mode [ 49.719541][ T5796] veth1_macvtap: entered promiscuous mode [ 49.732139][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.732157][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.738301][ T5805] veth0_vlan: entered promiscuous mode [ 49.745043][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.760499][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.766835][ T5805] veth1_vlan: entered promiscuous mode [ 49.769162][ T292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.769178][ T292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.774114][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.791120][ T5899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.791660][ T5899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.814011][ T5899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.814138][ T5899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.817092][ T5795] veth0_vlan: entered promiscuous mode [ 49.824557][ T5795] veth1_vlan: entered promiscuous mode [ 49.851758][ T5805] veth0_macvtap: entered promiscuous mode [ 49.863215][ T5805] veth1_macvtap: entered promiscuous mode [ 49.866999][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.867011][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.891588][ T5795] veth0_macvtap: entered promiscuous mode [ 49.895519][ T5794] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.899247][ T5795] veth1_macvtap: entered promiscuous mode [ 49.899910][ T5794] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.900028][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.900042][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.912136][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.912221][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.912285][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.917421][ T5794] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.918231][ T5794] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.929896][ T5794] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.931100][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.937200][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.960318][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.962646][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.965831][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.041761][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.041775][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.058699][ T42] audit: type=1326 audit(1793209260.799:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 50.058729][ T42] audit: type=1326 audit(1793209260.799:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 50.064614][ T5899] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.064640][ T5899] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.064658][ T5899] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.064676][ T5899] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.064694][ T5899] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.064710][ T5899] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.064728][ T5899] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.064745][ T5899] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.072468][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.072479][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.076309][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.076320][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.083548][ T42] audit: type=1326 audit(1793209260.819:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 50.094576][ T42] audit: type=1326 audit(1793209260.839:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 50.094722][ T42] audit: type=1326 audit(1793209260.839:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 50.120972][ T42] audit: type=1326 audit(1793209260.869:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 50.121227][ T42] audit: type=1326 audit(1793209260.869:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 50.122893][ T529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.122909][ T529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.123230][ T42] audit: type=1326 audit(1793209260.869:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 50.130981][ T42] audit: type=1326 audit(1793209260.869:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 50.131322][ T42] audit: type=1326 audit(1793209260.879:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.1" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efbc code=0x7ffc0000 [ 50.575733][ T5981] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7'. [ 50.720956][ T859] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.890856][ T859] usb 7-1: Using ep0 maxpacket: 32 [ 50.892436][ T859] usb 7-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 50.893759][ T859] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 50.896357][ T859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.896369][ T859] usb 7-1: Product: syz [ 50.896376][ T859] usb 7-1: Manufacturer: syz [ 50.896383][ T859] usb 7-1: SerialNumber: syz [ 50.898948][ T859] usb 7-1: config 0 descriptor?? [ 50.899821][ T5978] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 50.921350][ T859] hub 7-1:0.0: bad descriptor, ignoring hub [ 50.921364][ T859] hub 7-1:0.0: probe with driver hub failed with error -5 [ 50.938992][ T859] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input5 [ 51.130387][ T5978] Zero length message leads to an empty skb [ 51.142127][ C0] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 51.142257][ T2322] usb 7-1: USB disconnect, device number 2 [ 51.208173][ T5983] pci_bus 0000:01: busn_res: [bus 01] is released [ 51.255048][ T5984] FAULT_INJECTION: forcing a failure. [ 51.255048][ T5984] name failslab, interval 1, probability 0, space 0, times 0 ** replaying previous printk message ** [ 51.255048][ T5984] FAULT_INJECTION: forcing a failure. [ 51.255048][ T5984] name failslab, interval 1, probability 0, space 0, times 0 [ 51.255074][ T5984] CPU: 2 UID: 0 PID: 5984 Comm: syz.0.8 Not tainted syzkaller #0 PREEMPT(full) [ 51.255093][ T5984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.255101][ T5984] Call Trace: [ 51.255107][ T5984] [ 51.255113][ T5984] dump_stack_lvl+0x100/0x190 [ 51.255143][ T5984] should_fail_ex.cold+0x5/0xa [ 51.255167][ T5984] should_failslab+0xc2/0x120 [ 51.255187][ T5984] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 51.255216][ T5984] ? kvasprintf_const+0x66/0x1a0 [ 51.255247][ T5984] kvasprintf+0xbc/0x150 [ 51.255271][ T5984] ? __pfx_kvasprintf+0x10/0x10 [ 51.255297][ T5984] ? acpi_dev_for_each_child+0x88/0xc0 [ 51.255328][ T5984] ? find_held_lock+0x2b/0x80 [ 51.255355][ T5984] kvasprintf_const+0x66/0x1a0 [ 51.255381][ T5984] kobject_set_name_vargs+0x5a/0x140 [ 51.255409][ T5984] dev_set_name+0xc7/0x100 [ 51.255429][ T5984] ? __pfx_dev_set_name+0x10/0x10 [ 51.255454][ T5984] ? set_primary_fwnode+0x11a/0x2a0 [ 51.255470][ T5984] ? pci_dev_assign_slot+0x1ea/0x270 [ 51.255498][ T5984] pci_setup_device+0x575/0x22f0 [ 51.255529][ T5984] ? __pfx_pci_setup_device+0x10/0x10 [ 51.255558][ T5984] ? kasan_save_track+0x14/0x30 [ 51.255574][ T5984] ? __kasan_kmalloc+0xaa/0xb0 [ 51.255592][ T5984] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 51.255616][ T5984] ? lockdep_init_map_type+0x5c/0x250 [ 51.255637][ T5984] ? __raw_spin_lock_init+0x3a/0x110 [ 51.255663][ T5984] pci_scan_single_device+0x1ac/0x240 [ 51.255689][ T5984] ? __pfx_pci_scan_single_device+0x10/0x10 [ 51.255715][ T5984] ? __mutex_lock+0x824/0x1c10 [ 51.255742][ T5984] pci_scan_slot+0x1c9/0x7c0 [ 51.255771][ T5984] ? __pfx_pci_scan_slot+0x10/0x10 [ 51.255797][ T5984] ? rcu_is_watching+0x13/0xc0 [ 51.255822][ T5984] pci_scan_child_bus_extend+0x6b/0x7b0 [ 51.255847][ T5984] ? pci_find_next_bus+0x60/0xb0 [ 51.255880][ T5984] pci_rescan_bus+0x18/0x40 [ 51.255905][ T5984] rescan_store+0xfb/0x130 [ 51.255931][ T5984] ? __pfx_rescan_store+0x10/0x10 [ 51.255957][ T5984] ? sysfs_file_kobj+0xe4/0x290 [ 51.255979][ T5984] ? __pfx_rescan_store+0x10/0x10 [ 51.256004][ T5984] bus_attr_store+0x74/0xb0 [ 51.256022][ T5984] ? __pfx_bus_attr_store+0x10/0x10 [ 51.256040][ T5984] sysfs_kf_write+0xf2/0x150 [ 51.256062][ T5984] kernfs_fop_write_iter+0x3e0/0x5f0 [ 51.256079][ T5984] ? __pfx_sysfs_kf_write+0x10/0x10 [ 51.256102][ T5984] vfs_write+0x6af/0x1050 [ 51.256121][ T5984] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 51.256141][ T5984] ? __pfx_vfs_write+0x10/0x10 [ 51.256155][ T5984] ? find_held_lock+0x2b/0x80 [ 51.256217][ T5984] ksys_write+0x12a/0x250 [ 51.256234][ T5984] ? __pfx_ksys_write+0x10/0x10 [ 51.256259][ T5984] __do_fast_syscall_32+0x14b/0x8c0 [ 51.256280][ T5984] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.256302][ T5984] do_fast_syscall_32+0x32/0x70 [ 51.256327][ T5984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.256349][ T5984] RIP: 0023:0xf741efbc [ 51.256364][ T5984] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.256379][ T5984] RSP: 002b:00000000f541550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 51.256397][ T5984] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000480 [ 51.256407][ T5984] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.256417][ T5984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.256427][ T5984] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.256436][ T5984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.256461][ T5984] [ 51.257005][ T5984] pci (null): [8086:3420] type 01 class 0x060400 PCIe Root Port [ 51.262585][ T5984] pci (null): PCI bridge to [bus 01] [ 51.262725][ T5984] pci (null): bridge window [io 0x1000-0x1fff] [ 51.262823][ T5984] pci (null): bridge window [mem 0xfe800000-0xfe9fffff] [ 51.264332][ T5984] pci (null): bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 51.264749][ T5984] pci (null): enabling Extended Tags [ 51.267603][ T5984] ------------[ cut here ]------------ [ 51.267609][ T5984] ret < 0 [ 51.267613][ T5984] WARNING: drivers/pci/probe.c:2777 at pci_device_add+0x1343/0x1820, CPU#2: syz.0.8/5984 [ 51.393855][ T5984] Modules linked in: [ 51.395091][ T5984] CPU: 2 UID: 0 PID: 5984 Comm: syz.0.8 Not tainted syzkaller #0 PREEMPT(full) [ 51.397630][ T5984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.400504][ T5984] RIP: 0010:pci_device_add+0x1343/0x1820 [ 51.402194][ T5984] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 20 f4 ff ff e8 00 10 98 fc 90 0f 0b 90 90 0f 0b 90 e9 06 f7 ff ff e8 ee 0f 98 fc 90 <0f> 0b 90 e9 7e fa ff ff e8 e0 0f 98 fc 90 0f 0b 90 e9 11 fa ff ff [ 51.407563][ T5984] RSP: 0018:ffffc900062df910 EFLAGS: 00010293 [ 51.409260][ T5984] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: 0000000000000000 [ 51.411508][ T5984] RDX: ffff888026f00000 RSI: ffffffff857592d2 RDI: 0000000000000005 [ 51.413670][ T5984] RBP: ffff88801dae9000 R08: 0000000000000000 R09: 00000000ffffffea [ 51.415803][ T5984] R10: ffff8880149e610b R11: 0000000000000001 R12: ffff888022c2a028 [ 51.417972][ T5984] R13: ffff888022c2a000 R14: 0000000000000001 R15: ffff888022d0c000 [ 51.420141][ T5984] FS: 0000000000000000(0000) GS:ffff888095494000(0063) knlGS:00000000f5415b40 [ 51.422689][ T5984] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 51.424491][ T5984] CR2: 00000000f71f8e10 CR3: 000000006ec3a000 CR4: 0000000000352ef0 [ 51.426650][ T5984] Call Trace: [ 51.427570][ T5984] [ 51.428390][ T5984] ? __pfx_pci_device_add+0x10/0x10 [ 51.429881][ T5984] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 51.431489][ T5984] ? __raw_spin_lock_init+0x3a/0x110 [ 51.432977][ T5984] pci_scan_single_device+0x1d0/0x240 [ 51.434454][ T5984] ? __pfx_pci_scan_single_device+0x10/0x10 [ 51.436069][ T5984] ? __mutex_lock+0x824/0x1c10 [ 51.437389][ T5984] pci_scan_slot+0x1c9/0x7c0 [ 51.438681][ T5984] ? __pfx_pci_scan_slot+0x10/0x10 [ 51.440116][ T5984] ? rcu_is_watching+0x13/0xc0 [ 51.441513][ T5984] pci_scan_child_bus_extend+0x6b/0x7b0 [ 51.443089][ T5984] ? pci_find_next_bus+0x60/0xb0 [ 51.444889][ T5984] pci_rescan_bus+0x18/0x40 [ 51.446219][ T5984] rescan_store+0xfb/0x130 [ 51.447476][ T5984] ? __pfx_rescan_store+0x10/0x10 [ 51.448888][ T5984] ? sysfs_file_kobj+0xe4/0x290 [ 51.450417][ T5984] ? __pfx_rescan_store+0x10/0x10 [ 51.452341][ T5984] bus_attr_store+0x74/0xb0 [ 51.453684][ T5984] ? __pfx_bus_attr_store+0x10/0x10 [ 51.455191][ T5984] sysfs_kf_write+0xf2/0x150 [ 51.456696][ T5984] kernfs_fop_write_iter+0x3e0/0x5f0 [ 51.458349][ T5984] ? __pfx_sysfs_kf_write+0x10/0x10 [ 51.460004][ T5984] vfs_write+0x6af/0x1050 [ 51.461558][ T5984] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 51.463178][ T5984] ? __pfx_vfs_write+0x10/0x10 [ 51.464469][ T5984] ? find_held_lock+0x2b/0x80 [ 51.465776][ T5984] ksys_write+0x12a/0x250 [ 51.467013][ T5984] ? __pfx_ksys_write+0x10/0x10 [ 51.468378][ T5984] __do_fast_syscall_32+0x14b/0x8c0 [ 51.469811][ T5984] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.471381][ T5984] do_fast_syscall_32+0x32/0x70 [ 51.472784][ T5984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.474489][ T5984] RIP: 0023:0xf741efbc [ 51.475646][ T5984] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.480912][ T5984] RSP: 002b:00000000f541550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 51.483224][ T5984] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000480 [ 51.485383][ T5984] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.487595][ T5984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.489739][ T5984] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.491913][ T5984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.494079][ T5984] [ 51.494960][ T5984] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 51.496933][ T5984] CPU: 2 UID: 0 PID: 5984 Comm: syz.0.8 Not tainted syzkaller #0 PREEMPT(full) [ 51.499421][ T5984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.502165][ T5984] Call Trace: [ 51.503106][ T5984] [ 51.503933][ T5984] dump_stack_lvl+0x100/0x190 [ 51.505231][ T5984] vpanic+0x2dc/0x6f8 [ 51.506332][ T5984] panic+0xd1/0xe0 [ 51.507380][ T5984] ? __pfx_panic+0x10/0x10 [ 51.508606][ T5984] check_panic_on_warn.cold+0x19/0x34 [ 51.510049][ T5984] ? pci_device_add+0x1343/0x1820 [ 51.511413][ T5984] __warn.cold+0x191/0x321 [ 51.512688][ T5984] __report_bug+0x30f/0x440 [ 51.513929][ T5984] ? pci_device_add+0x1343/0x1820 [ 51.515299][ T5984] ? __pfx___report_bug+0x10/0x10 [ 51.516684][ T5984] ? kasan_quarantine_put+0x104/0x240 [ 51.518130][ T5984] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.519550][ T5984] ? device_add+0x2a0/0x1970 [ 51.520806][ T5984] ? pci_device_add+0x1343/0x1820 [ 51.522192][ T5984] report_bug+0xb3/0x220 [ 51.523406][ T5984] ? pci_device_add+0x1343/0x1820 [ 51.524788][ T5984] handle_bug+0x16a/0x2a0 [ 51.526006][ T5984] exc_invalid_op+0x17/0x50 [ 51.527265][ T5984] asm_exc_invalid_op+0x1a/0x20 [ 51.528588][ T5984] RIP: 0010:pci_device_add+0x1343/0x1820 [ 51.530121][ T5984] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 20 f4 ff ff e8 00 10 98 fc 90 0f 0b 90 90 0f 0b 90 e9 06 f7 ff ff e8 ee 0f 98 fc 90 <0f> 0b 90 e9 7e fa ff ff e8 e0 0f 98 fc 90 0f 0b 90 e9 11 fa ff ff [ 51.535427][ T5984] RSP: 0018:ffffc900062df910 EFLAGS: 00010293 [ 51.537149][ T5984] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: 0000000000000000 [ 51.539415][ T5984] RDX: ffff888026f00000 RSI: ffffffff857592d2 RDI: 0000000000000005 [ 51.541589][ T5984] RBP: ffff88801dae9000 R08: 0000000000000000 R09: 00000000ffffffea [ 51.543856][ T5984] R10: ffff8880149e610b R11: 0000000000000001 R12: ffff888022c2a028 [ 51.546109][ T5984] R13: ffff888022c2a000 R14: 0000000000000001 R15: ffff888022d0c000 [ 51.548372][ T5984] ? pci_device_add+0x1342/0x1820 [ 51.549826][ T5984] ? __pfx_pci_device_add+0x10/0x10 [ 51.551319][ T5984] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 51.552932][ T5984] ? __raw_spin_lock_init+0x3a/0x110 [ 51.554445][ T5984] pci_scan_single_device+0x1d0/0x240 [ 51.555962][ T5984] ? __pfx_pci_scan_single_device+0x10/0x10 [ 51.557640][ T5984] ? __mutex_lock+0x824/0x1c10 [ 51.559040][ T5984] pci_scan_slot+0x1c9/0x7c0 [ 51.560426][ T5984] ? __pfx_pci_scan_slot+0x10/0x10 [ 51.562068][ T5984] ? rcu_is_watching+0x13/0xc0 [ 51.563524][ T5984] pci_scan_child_bus_extend+0x6b/0x7b0 [ 51.565112][ T5984] ? pci_find_next_bus+0x60/0xb0 [ 51.566588][ T5984] pci_rescan_bus+0x18/0x40 [ 51.567922][ T5984] rescan_store+0xfb/0x130 [ 51.569216][ T5984] ? __pfx_rescan_store+0x10/0x10 [ 51.570677][ T5984] ? sysfs_file_kobj+0xe4/0x290 [ 51.572079][ T5984] ? __pfx_rescan_store+0x10/0x10 [ 51.573543][ T5984] bus_attr_store+0x74/0xb0 [ 51.574860][ T5984] ? __pfx_bus_attr_store+0x10/0x10 [ 51.576370][ T5984] sysfs_kf_write+0xf2/0x150 [ 51.577717][ T5984] kernfs_fop_write_iter+0x3e0/0x5f0 [ 51.579291][ T5984] ? __pfx_sysfs_kf_write+0x10/0x10 [ 51.580789][ T5984] vfs_write+0x6af/0x1050 [ 51.582035][ T5984] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 51.583745][ T5984] ? __pfx_vfs_write+0x10/0x10 [ 51.585121][ T5984] ? find_held_lock+0x2b/0x80 [ 51.586490][ T5984] ksys_write+0x12a/0x250 [ 51.587737][ T5984] ? __pfx_ksys_write+0x10/0x10 [ 51.589140][ T5984] __do_fast_syscall_32+0x14b/0x8c0 [ 51.590640][ T5984] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.592124][ T5984] do_fast_syscall_32+0x32/0x70 [ 51.593572][ T5984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.595374][ T5984] RIP: 0023:0xf741efbc [ 51.596543][ T5984] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.601944][ T5984] RSP: 002b:00000000f541550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 51.604356][ T5984] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000480 [ 51.606626][ T5984] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.608867][ T5984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.611105][ T5984] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.613343][ T5984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.615598][ T5984] [ 51.617120][ T5984] Kernel Offset: disabled [ 51.618363][ T5984] Rebooting in 86400 seconds..