last executing test programs: 9.30179708s ago: executing program 3 (id=1866): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x70, &(0x7f0000000100)}, 0x1c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r3}) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000180)={0x2, 0x7, 0x2, 0xfb45, 0x3, "0d5f078393b87ad2"}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000380)={0x1, 0x0, r3}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_channels={0x1, 0x1, 0x0, 0x1000, 0x0, 0xffffdffc, 0x3, 0xfffffffc}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 8.326285349s ago: executing program 3 (id=1867): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000740)='dummy_udc.0', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='t', 0x1) close(r1) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xf4da, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xc58) tkill(r4, 0x34) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000200), 0x14fffffd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000002fc0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000000)='d', 0x1}], 0x1) 7.977473786s ago: executing program 3 (id=1869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x280000) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(r5, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040), 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x0, r4}) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0x3, 0x3}) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x2, @private2, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000080)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0xfffffd0d}}], 0x2, 0x2008c058) 6.798062716s ago: executing program 3 (id=1871): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt(r3, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r3, 0x0, 0x489, &(0x7f0000000400)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, r4, 0x0, 0xa0028000}, 0x38) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x50) setsockopt(r3, 0x0, 0x488, 0x0, 0x0) setsockopt(r3, 0x0, 0x484, &(0x7f0000000600)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, 0x0, 0x0, 0x317, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.300870842s ago: executing program 0 (id=1881): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = semget$private(0x0, 0x6, 0x3b1) semctl$GETZCNT(r2, 0x0, 0xf, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xa, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3066}, @map_val={0x18, 0xc9fb544bafcfcf4f, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xedf}]}, &(0x7f0000000580)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x2, 0x9, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r3, r3], 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x9, &(0x7f0000000280)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3b77}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000000300)='GPL\x00', 0xff, 0x45, &(0x7f0000000340)=""/69, 0x41000, 0x10, '\x00', r7, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x8, 0x3, 0xef}, 0x10, 0xffffffffffffffff, r8, 0x8, &(0x7f0000000700)=[r1, r1], &(0x7f0000000740)=[{0x3, 0x3, 0xe, 0x3}, {0x1, 0x4, 0x5, 0xa}, {0x3, 0x1, 0xd, 0xe}, {0x4, 0x4, 0xc, 0x5}, {0x0, 0x5, 0x7, 0x5}, {0x1, 0x3, 0x7, 0x3}, {0x1, 0x3, 0x1, 0x6}, {0x5, 0x5, 0xd, 0x9}], 0x10, 0x1ff}, 0x94) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 5.096756221s ago: executing program 1 (id=1883): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f84, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xb, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4a4, 0x348, 0x198, 0xffffffff, 0x198, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x164, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x2c}, {0x40, 0x200, 0x0, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 4.425285647s ago: executing program 0 (id=1892): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x800, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r4, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x10, 0x4, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x29b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x3e7}}], 0x1, 0x0, 0x0) 4.384382721s ago: executing program 2 (id=1885): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x70, &(0x7f0000000100)}, 0x1c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r3}) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000180)={0x2, 0x7, 0x2, 0xfb45, 0x3, "0d5f078393b87ad2"}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000380)={0x1, 0x0, r3}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_channels={0x1, 0x1, 0x0, 0x1000, 0x0, 0xffffdffc, 0x3, 0xfffffffc}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 4.243704204s ago: executing program 2 (id=1886): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x70, &(0x7f0000000100)}, 0x1c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r3}) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000180)={0x2, 0x7, 0x2, 0xfb45, 0x3, "0d5f078393b87ad2"}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000380)={0x1, r4, r3}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x89b0, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_channels={0x1, 0x1, 0x0, 0x1000, 0x0, 0xffffdffc, 0x3, 0xfffffffc}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 3.886691958s ago: executing program 1 (id=1887): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x70, &(0x7f0000000100)}, 0x1c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r3}) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000180)={0x2, 0x7, 0x2, 0xfb45, 0x3, "0d5f078393b87ad2"}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000380)={0x1, r4, r3}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x89b0, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_channels={0x1, 0x1, 0x0, 0x1000, 0x0, 0xffffdffc, 0x3, 0xfffffffc}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 3.327287794s ago: executing program 0 (id=1888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 3.326963851s ago: executing program 1 (id=1889): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r5, r4, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r3, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9") bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r7, r7, 0x0, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000002500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000024c0)={&(0x7f0000002340)={0x80, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x64, 0x3, "c907821af0a1a820c8a9d270a15dbabaa1e56e30808953e62fb8fc92d00052d206e217f2dce4148877931e67d9998da21eb88975347d6c0f02b1fcf501d04c3d3332e23cd85edcaa445a27871c8cb8690379961e759cb5262f98620916a88c26"}]}, @TIPC_NLA_NODE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f00000003c0)={0x0, 0x1, r8, 0x1, 0x80000}) 3.321255819s ago: executing program 2 (id=1897): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x70, &(0x7f0000000100)}, 0x1c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r3}) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000180)={0x2, 0x7, 0x2, 0xfb45, 0x3, "0d5f078393b87ad2"}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000380)={0x1, r4, r3}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x89b0, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_channels={0x1, 0x1, 0x0, 0x1000, 0x0, 0xffffdffc, 0x3, 0xfffffffc}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 3.292282796s ago: executing program 3 (id=1890): syz_io_uring_setup(0x3274, &(0x7f0000000400)={0x0, 0x597f, 0x8, 0xffffffff, 0x38c}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x2002) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r5, r4, 0x0, 0x7ffff000) readv(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x65, 0x2c, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1}, 0x800000, 0x11, 0x1}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r6 = syz_io_uring_setup(0x60d8, &(0x7f0000000100)={0x0, 0x5e3e, 0x2000, 0x3, 0xa3}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) r8 = openat(0xffffffffffffffff, 0x0, 0x608a40, 0x40) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r10 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x12b, 0x0, r6}, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) r13 = syz_ublk_add_dev(r10, 0x0, r11, r12, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) syz_io_uring_submit$UBLK(0x0, 0x0, r7, &(0x7f0000000340)=@ublk_get_features_sqe={0x2e, 0x50, 0x0, r8, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, r9, '\x00', {r13, 0xffff, 0x8, &(0x7f00000002c0)}}) ioctl$DVB_DVR_DMX_EXPBUF(r8, 0xc00c6f3e, &(0x7f00000003c0)={0x10000, 0x0, r3}) 3.032249425s ago: executing program 2 (id=1891): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x70, &(0x7f0000000100)}, 0x1c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r3}) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000180)={0x2, 0x7, 0x2, 0xfb45, 0x3, "0d5f078393b87ad2"}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000380)={0x1, 0x0, r3}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_channels={0x1, 0x1, 0x0, 0x1000, 0x0, 0xffffdffc, 0x3, 0xfffffffc}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 2.861563133s ago: executing program 2 (id=1893): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x7, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x305) 2.743420229s ago: executing program 0 (id=1894): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x20002) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x800081fd, 0x2001, 0x4001}, 0x1c) openat$dir(0xffffffffffffff9c, 0x0, 0x20400, 0x66) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7fffffff, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80804120, &(0x7f00000022c0)) 1.664573867s ago: executing program 1 (id=1895): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x70, &(0x7f0000000100)}, 0x1c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r3}) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000180)={0x2, 0x7, 0x2, 0xfb45, 0x3, "0d5f078393b87ad2"}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000380)={0x1, 0x0, r3}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_channels={0x1, 0x1, 0x0, 0x1000, 0x0, 0xffffdffc, 0x3, 0xfffffffc}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 1.621406618s ago: executing program 0 (id=1896): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f84, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xb, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4a4, 0x348, 0x198, 0xffffffff, 0x198, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x164, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x2c}, {0x40, 0x200, 0x0, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 1.443983223s ago: executing program 1 (id=1898): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r5, r4, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r3, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9") bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x1, 0x20010, r6, 0x20000000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r8, r8, 0x0, 0x6) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000002500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000024c0)={&(0x7f0000002340)={0x80, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x64, 0x3, "c907821af0a1a820c8a9d270a15dbabaa1e56e30808953e62fb8fc92d00052d206e217f2dce4148877931e67d9998da21eb88975347d6c0f02b1fcf501d04c3d3332e23cd85edcaa445a27871c8cb8690379961e759cb5262f98620916a88c26"}]}, @TIPC_NLA_NODE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f00000003c0)={0x0, 0x1, r9, 0x1, 0x80000}) 1.12654816s ago: executing program 3 (id=1899): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create1(0x0) syz_open_dev$sg(&(0x7f0000000480), 0xfffffffffffffffa, 0x1841) socket$inet(0x2, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_test={0x51}}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/unix\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x80, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x3, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r11}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r12, &(0x7f0000000200)={0x0, 0xbc38, 0x10, 0x3, 0xb2, 0x0, r0}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1819, 0x0, 0x1, 0x8002ad, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb2, 0x1000, 0x3, 0x23a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, 0x0, 0x0) 173.935944ms ago: executing program 0 (id=1900): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240)="cd742d85ea", 0x0}, 0x50) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlimit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x4048010) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x4c, r6, 0x20, 0x1, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x1d, 0x5b, "9212aafc2be381c21b1bcc9c0f5b6496d9f07159ddf948b924"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0xd0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 264.104µs ago: executing program 1 (id=1901): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt(r3, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt(r3, 0x0, 0x489, &(0x7f0000000400)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, r4, 0x0, 0xa0028000}, 0x38) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x50) setsockopt(r3, 0x0, 0x488, 0x0, 0x0) setsockopt(r3, 0x0, 0x484, &(0x7f0000000600)="060000007f00000100150000000000006d6800"/44, 0x2c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, 0x0, 0x0, 0x317, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 2 (id=1902): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x70, &(0x7f0000000100)}, 0x1c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r3}) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000180)={0x2, 0x7, 0x2, 0xfb45, 0x3, "0d5f078393b87ad2"}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000380)={0x1, r4, r3}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x89b0, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_channels={0x1, 0x1, 0x0, 0x1000, 0x0, 0xffffdffc, 0x3, 0xfffffffc}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) kernel console output (not intermixed with test programs): :3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11893 comm="syz.0.1403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 550.276788][ T43] audit: type=1326 audit(1790100543.325:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11893 comm="syz.0.1403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 550.321627][ T43] audit: type=1326 audit(1790100543.375:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11893 comm="syz.0.1403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 550.322779][ T43] audit: type=1326 audit(1790100543.375:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11893 comm="syz.0.1403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 550.361702][ T43] audit: type=1326 audit(1790100543.415:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11893 comm="syz.0.1403" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708efec code=0x7ffc0000 [ 550.392079][ T43] audit: type=1326 audit(1790100543.445:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11893 comm="syz.0.1403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 550.392121][ T43] audit: type=1326 audit(1790100543.445:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11893 comm="syz.0.1403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 550.394242][ T43] audit: type=1326 audit(1790100543.425:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11893 comm="syz.0.1403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 550.394538][ T43] audit: type=1326 audit(1790100543.445:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11893 comm="syz.0.1403" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708efec code=0x7ffc0000 [ 551.526094][ T168] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 551.936237][ T168] (NULL device *): queue 0 connect admin queue failed (-111). [ 551.936267][ T168] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 551.936283][ T168] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 552.213629][T11899] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1401'. [ 553.646670][T11922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1406'. [ 553.950871][ T228] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 553.956003][ T228] (NULL device *): queue 0 connect admin queue failed (-111). [ 553.956168][ T228] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 553.956260][ T228] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 554.589723][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.589747][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.591899][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.591928][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.591959][ T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.591982][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.592020][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.592042][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.030192][T11170] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 556.055053][T11170] (NULL device *): queue 0 connect admin queue failed (-111). [ 556.055077][T11170] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 556.055087][T11170] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 557.791180][T11945] futex_wake_op: syz.3.1413 tries to shift op by 144; fix this program [ 558.099562][T11170] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 558.099725][T11170] (NULL device *): queue 0 connect admin queue failed (-111). [ 558.099744][T11170] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 558.099760][T11170] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 558.224816][T11954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1416'. [ 558.335491][ T43] kauditd_printk_skb: 279 callbacks suppressed [ 558.335504][ T43] audit: type=1326 audit(1790100551.385:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.0.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 558.335612][ T43] audit: type=1326 audit(1790100551.385:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.0.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 558.339269][ T43] audit: type=1326 audit(1790100551.385:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.0.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf708efec code=0x7ffc0000 [ 558.451069][T11957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1415'. [ 558.453762][ T43] audit: type=1326 audit(1790100551.505:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.0.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708f008 code=0x7ffc0000 [ 558.454032][ T43] audit: type=1326 audit(1790100551.505:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.0.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 558.454158][ T43] audit: type=1326 audit(1790100551.505:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.0.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 558.649560][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 558.895559][T11968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1418'. [ 558.910425][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 558.916150][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.916174][ T10] usb 5-1: Product: syz [ 558.916186][ T10] usb 5-1: Manufacturer: syz [ 558.916198][ T10] usb 5-1: SerialNumber: syz [ 559.128989][ T854] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 559.365509][ T43] audit: type=1326 audit(1790100552.415:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.0.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708efec code=0x7ffc0000 [ 559.366258][ T43] audit: type=1326 audit(1790100552.415:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.0.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c75ab code=0x7ffc0000 [ 559.659793][ T43] audit: type=1326 audit(1790100552.675:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.0.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 559.659854][ T43] audit: type=1326 audit(1790100552.675:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.0.1417" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 559.823825][T11959] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 559.824064][T11959] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 559.840283][T11959] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 559.840323][T11959] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 560.034107][ T6449] lo speed is unknown, defaulting to 1000 [ 560.034128][ T6449] syz0: Port: 1 Link DOWN [ 560.038475][ T1478] lo speed is unknown, defaulting to 1000 [ 560.077201][ T1478] usb 5-1: USB disconnect, device number 16 [ 560.180098][ T1164] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 560.180181][ T1164] (NULL device *): queue 0 connect admin queue failed (-111). [ 560.180193][ T1164] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 560.180202][ T1164] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 560.236621][T11972] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 560.267220][ T854] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 560.421584][ T854] ath9k_htc: Failed to initialize the device [ 560.424633][ T1478] usb 5-1: ath9k_htc: USB layer deinitialized [ 560.850033][ T6449] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 561.010623][ T6449] usb 6-1: Using ep0 maxpacket: 32 [ 561.014178][ T6449] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 561.035452][ T6449] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.035841][ T6449] usb 6-1: config 0 has no interfaces? [ 561.063799][ T6449] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 561.063822][ T6449] usb 6-1: Product: syz [ 561.063832][ T6449] usb 6-1: Manufacturer: syz [ 561.063842][ T6449] usb 6-1: SerialNumber: syz [ 561.099146][ T6449] usb 6-1: config 0 descriptor?? [ 561.411705][ T6449] usb 6-1: USB disconnect, device number 20 [ 561.862290][T11087] Bluetooth: hci3: command 0x0406 tx timeout [ 561.862328][T11087] Bluetooth: hci2: command 0x0406 tx timeout [ 562.258745][T12013] Bluetooth: MGMT ver 1.23 [ 562.282182][T11176] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 562.298348][T11176] (NULL device *): queue 0 connect admin queue failed (-111). [ 562.298370][T11176] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 562.298380][T11176] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 562.395098][T12009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1426'. [ 562.972512][T12018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1427'. [ 562.992859][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.992905][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.288017][T12025] netlink: 'syz.3.1428': attribute type 2 has an invalid length. [ 563.288036][T12025] netlink: 'syz.3.1428': attribute type 7 has an invalid length. [ 563.307394][T12025] Uý: entered promiscuous mode [ 563.949852][T11087] Bluetooth: hci3: command 0x0406 tx timeout [ 563.949878][ T5752] Bluetooth: hci2: command 0x0406 tx timeout [ 564.058663][T12034] usb3503 0-0008: unknown mode is requested [ 564.058682][T12034] usb3503 0-0008: usb3503_probe: probed in standby mode [ 564.069211][T12034] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 564.339568][ T228] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 564.339738][ T228] (NULL device *): queue 0 connect admin queue failed (-111). [ 564.339755][ T228] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 564.339770][ T228] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 564.554313][T12041] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1433'. [ 564.698902][T12045] overlay: Bad value for 'verity' [ 564.728744][T12047] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1434'. [ 564.763479][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 564.763497][T12047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.763507][T12047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.764247][T12047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.764258][T12047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.890498][T12050] UDC core: g1: couldn't find an available UDC or it's busy [ 564.966614][T12053] hfsplus: unable to find HFS+ superblock [ 565.297343][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'. [ 565.503486][T12059] Console: switching to colour dummy device 80x25 [ 566.335256][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 566.335304][ T43] audit: type=1326 audit(1790100559.385:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12074 comm="syz.2.1440" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 566.336191][ T43] audit: type=1326 audit(1790100559.385:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12074 comm="syz.2.1440" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 566.356850][ T43] audit: type=1326 audit(1790100559.405:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12074 comm="syz.2.1440" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 566.357828][ T43] audit: type=1326 audit(1790100559.405:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12074 comm="syz.2.1440" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 566.358069][ T43] audit: type=1326 audit(1790100559.405:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12074 comm="syz.2.1440" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 566.358808][ T43] audit: type=1326 audit(1790100559.405:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12074 comm="syz.2.1440" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 566.387100][ T43] audit: type=1326 audit(1790100559.405:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12074 comm="syz.2.1440" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 566.389107][ T43] audit: type=1326 audit(1790100559.435:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12074 comm="syz.2.1440" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 566.403747][ T43] audit: type=1326 audit(1790100559.455:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12074 comm="syz.2.1440" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 566.404261][ T43] audit: type=1326 audit(1790100559.435:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12074 comm="syz.2.1440" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 566.440625][T11171] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 566.444716][T11171] (NULL device *): queue 0 connect admin queue failed (-111). [ 566.444742][T11171] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 566.444758][T11171] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 566.530390][ T1478] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 566.619501][ T9139] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 566.729888][ T1478] usb 8-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 566.732374][ T1478] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 566.732415][ T1478] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 566.732455][ T1478] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 566.732565][ T1478] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.772941][ T9139] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 566.773555][ T9139] usb 5-1: config 0 has no interfaces? [ 566.773580][ T9139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.782902][ T9139] usb 5-1: config 0 descriptor?? [ 567.217085][T12071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 567.217185][T12071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 567.232349][ T1478] pl2303 8-1:1.0: required interrupt-in endpoint missing [ 567.640690][ T10] usb 5-1: USB disconnect, device number 17 [ 568.005841][ T1478] usb 8-1: USB disconnect, device number 22 [ 568.339588][ T5821] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 568.495157][T12096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1445'. [ 568.501081][ T5821] usb 7-1: Using ep0 maxpacket: 8 [ 568.501825][ T5821] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 568.502730][ T5821] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 568.502749][ T5821] usb 7-1: config 0 has no interface number 0 [ 568.503138][T11176] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 568.510601][T11176] (NULL device *): queue 0 connect admin queue failed (-111). [ 568.510643][T11176] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 568.510653][T11176] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 568.513509][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.513533][ T5821] usb 7-1: Product: syz [ 568.513544][ T5821] usb 7-1: Manufacturer: syz [ 568.513554][ T5821] usb 7-1: SerialNumber: syz [ 568.515906][ T5821] usb 7-1: config 0 descriptor?? [ 569.613843][T12091] ffs_data_put(): freeing [ 569.802074][T12102] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1447'. [ 569.975880][T12105] overlay: Bad value for 'verity' [ 570.419605][ T1478] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 570.572207][ T1478] usb 5-1: Using ep0 maxpacket: 32 [ 570.577917][ T1478] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 570.580389][ T1478] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.580409][ T1478] usb 5-1: config 0 has no interfaces? [ 570.582149][T11170] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 570.582988][T11170] (NULL device *): queue 0 connect admin queue failed (-111). [ 570.583009][T11170] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 570.583024][T11170] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 570.618279][ T1478] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 570.618302][ T1478] usb 5-1: Product: syz [ 570.618314][ T1478] usb 5-1: Manufacturer: syz [ 570.618388][ T1478] usb 5-1: SerialNumber: syz [ 570.625568][ T1478] usb 5-1: config 0 descriptor?? [ 571.039834][ T6449] usb 5-1: USB disconnect, device number 18 [ 571.761489][T12130] veth0: entered promiscuous mode [ 572.735995][ T1160] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 572.742366][ T1160] (NULL device *): queue 0 connect admin queue failed (-111). [ 572.742383][ T1160] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 572.742393][ T1160] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 572.920272][T12137] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 572.920342][T12137] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 572.920379][T12137] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 572.965828][T12137] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 573.117860][T12142] jffs2: notice: (12142) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 573.121082][T12137] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 573.216717][T12130] veth0: left promiscuous mode [ 573.527362][T12160] UDC core: g1: couldn't find an available UDC or it's busy [ 573.541617][ T5821] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 573.541665][ T5821] uvcvideo 7-1:0.31: No valid video chain found. [ 573.809489][ T5821] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 573.962572][ T5821] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 573.963708][ T5821] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 573.963733][ T5821] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 573.963752][ T5821] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 573.963831][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.972544][T12162] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 573.972653][T12162] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 573.977086][ T5821] pl2303 5-1:1.0: required interrupt-in endpoint missing [ 574.185970][ T9139] usb 7-1: USB disconnect, device number 17 [ 574.822718][T11176] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 574.823507][T11176] (NULL device *): queue 0 connect admin queue failed (-111). [ 574.823560][T11176] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 574.823661][T11176] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 575.297666][T12180] bond0: entered promiscuous mode [ 575.299879][T12180] batadv0: entered promiscuous mode [ 575.300539][T12180] debugfs: 'hsr1' already exists in 'hsr' [ 575.300552][T12180] Cannot create hsr debugfs directory [ 575.300578][T12180] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 575.300588][T12180] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 575.301901][T12180] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 575.400269][T12181] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 575.400285][T12181] overlayfs: failed to set xattr on upper [ 575.400288][T12181] overlayfs: ...falling back to redirect_dir=nofollow. [ 575.400293][T12181] overlayfs: ...falling back to metacopy=off. [ 575.400297][T12181] overlayfs: ...falling back to index=off. [ 575.400300][T12181] overlayfs: ...falling back to uuid=null. [ 575.679705][ T5821] usb 5-1: USB disconnect, device number 19 [ 576.062766][T12184] ip6gretap0: entered promiscuous mode [ 576.889366][T12201] 9pnet_virtio: no channels available for device 127.0.0.1 [ 576.897050][T12201] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 576.900669][ T1160] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 576.904906][ T1160] (NULL device *): queue 0 connect admin queue failed (-111). [ 576.904971][ T1160] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 576.905028][ T1160] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 577.867844][ T43] kauditd_printk_skb: 2141 callbacks suppressed [ 577.867859][ T43] audit: type=1326 audit(1790100570.915:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.3.1470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 577.868111][ T43] audit: type=1326 audit(1790100570.915:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.3.1470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 577.869260][ T43] audit: type=1326 audit(1790100570.915:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.3.1470" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 577.898446][ T43] audit: type=1326 audit(1790100570.945:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.3.1470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 577.898888][ T43] audit: type=1326 audit(1790100570.945:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.3.1470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 577.914590][ T43] audit: type=1326 audit(1790100570.945:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.3.1470" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 577.914994][ T43] audit: type=1326 audit(1790100570.965:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.3.1470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 577.915386][ T43] audit: type=1326 audit(1790100570.965:5580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.3.1470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 577.920353][ T43] audit: type=1326 audit(1790100570.965:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.3.1470" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 577.954998][ T43] audit: type=1326 audit(1790100571.005:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12208 comm="syz.3.1470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 578.153955][T12215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1473'. [ 578.292778][T12220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1474'. [ 578.979670][T11177] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 578.981454][T11177] (NULL device *): queue 0 connect admin queue failed (-111). [ 578.981471][T11177] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 578.981481][T11177] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 579.812151][T12243] netlink: 'syz.1.1479': attribute type 2 has an invalid length. [ 579.812172][T12243] netlink: 'syz.1.1479': attribute type 7 has an invalid length. [ 579.820517][T12243] Uý: entered promiscuous mode [ 580.084477][T12245] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 580.084499][T12245] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 580.088006][T12245] vhci_hcd vhci_hcd.0: Device attached [ 580.229517][ T854] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 580.309982][T12247] rdma_rxe: rxe_newlink: failed to add wg2 [ 580.380366][ T854] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 580.384352][ T854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.384372][ T854] usb 7-1: Product: syz [ 580.384379][ T854] usb 7-1: Manufacturer: syz [ 580.384387][ T854] usb 7-1: SerialNumber: syz [ 580.409629][ T3376] usb 44-1: SetAddress Request (2) to port 0 [ 580.409685][ T3376] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 580.522364][ T9139] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 580.552597][T12251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1480'. [ 580.708299][T12248] vhci_hcd: connection reset by peer [ 580.708486][ T13] vhci_hcd vhci_hcd.3: stop threads [ 580.708500][ T13] vhci_hcd vhci_hcd.3: release socket [ 580.708527][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 580.866048][T12256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1481'. [ 581.080060][T11170] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 581.084790][T11170] (NULL device *): queue 0 connect admin queue failed (-111). [ 581.084878][T11170] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 581.084928][T11170] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 581.381510][T12260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1483'. [ 581.390956][T12234] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 581.392358][T12234] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 581.549757][ T9139] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 581.549843][ T9139] ath9k_htc: Failed to initialize the device [ 581.569119][ T10] usb 7-1: USB disconnect, device number 18 [ 581.572166][T12263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1484'. [ 581.578240][ T10] usb 7-1: ath9k_htc: USB layer deinitialized [ 583.139558][T11177] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 583.139689][T11177] (NULL device *): queue 0 connect admin queue failed (-111). [ 583.139708][T11177] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 583.139725][T11177] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 583.460953][T11087] Bluetooth: hci3: command 0x0406 tx timeout [ 583.460988][T11087] Bluetooth: hci2: command 0x0406 tx timeout [ 583.903206][T12285] netlink: 'syz.2.1490': attribute type 2 has an invalid length. [ 583.903226][T12285] netlink: 'syz.2.1490': attribute type 7 has an invalid length. [ 583.912828][T12285] Uý: entered promiscuous mode [ 585.219631][ T1160] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 585.219869][ T1160] (NULL device *): queue 0 connect admin queue failed (-111). [ 585.219889][ T1160] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 585.219898][ T1160] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 585.370510][T12296] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 585.370525][T12296] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 585.370531][T12296] PKCS7: Unsupported data type 106 [ 585.371244][T12296] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 585.405803][T12299] futex_wake_op: syz.0.1492 tries to shift op by 144; fix this program [ 586.068413][ T3376] usb 44-1: device descriptor read/8, error -110 [ 586.415705][T12308] Invalid ELF header magic: != ELF [ 587.024155][ T3376] usb usb44-port1: attempt power cycle [ 587.300062][ T1160] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 587.300854][ T1160] (NULL device *): queue 0 connect admin queue failed (-111). [ 587.300899][ T1160] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 587.301001][ T1160] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 587.830486][ T3376] usb usb44-port1: unable to enumerate USB device [ 588.391589][T12312] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1495'. [ 588.427412][T12315] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 588.946137][T12319] overlay: Bad value for 'verity' [ 589.319615][ T5821] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 589.334749][T12332] rdma_rxe: rxe_newlink: failed to add lo [ 589.379606][ T1160] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 589.379694][ T1160] (NULL device *): queue 0 connect admin queue failed (-111). [ 589.379706][ T1160] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 589.379715][ T1160] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 589.470595][ T5821] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 589.471054][ T5821] usb 5-1: config 0 has no interfaces? [ 589.472896][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.472915][ T5821] usb 5-1: Product: syz [ 589.472927][ T5821] usb 5-1: Manufacturer: syz [ 589.472938][ T5821] usb 5-1: SerialNumber: syz [ 589.475140][ T5821] usb 5-1: config 0 descriptor?? [ 589.729036][T12330] db_root: cannot be changed because it's in use [ 589.753702][T12342] UDC core: g1: couldn't find an available UDC or it's busy [ 591.469551][T12370] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 591.471192][T12370] (NULL device *): queue 0 connect admin queue failed (-111). [ 591.471212][T12370] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 591.471235][T12370] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 591.661588][T12385] rdma_rxe: rxe_newlink: failed to add lo [ 591.821984][T12390] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1513'. [ 591.864869][ T3376] Process accounting resumed [ 592.171876][T12394] overlay: Bad value for 'verity' [ 592.241076][ T10] usb 5-1: USB disconnect, device number 20 [ 593.539663][T12371] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 593.541163][T12371] (NULL device *): queue 0 connect admin queue failed (-111). [ 593.541184][T12371] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 593.541201][T12371] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 593.569018][T12418] jffs2: notice: (12418) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 593.660671][T12424] rdma_rxe: rxe_newlink: failed to add lo [ 594.088892][T12445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1524'. [ 595.619585][T12370] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 595.619673][T12370] (NULL device *): queue 0 connect admin queue failed (-111). [ 595.619685][T12370] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 595.619694][T12370] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 596.992601][T12487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1533'. [ 597.059923][T12489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1534'. [ 597.436799][T12499] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 597.452573][T12499] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 597.452704][T12499] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 597.452914][T12499] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 597.453396][T12499] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 597.482313][T12499] pci 0000:00:01.0: Adding to iommu group 1 [ 597.492396][T12499] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 597.492414][T12499] pci 0000:00:01.0: vgaarb: bridge control possible [ 597.492428][T12499] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 597.511002][T12499] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 597.511159][T12499] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 597.516687][T12499] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 597.550402][T12499] [drm] Found bochs VGA, ID 0xb0c5. [ 597.550416][T12499] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 597.579230][T12499] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 597.702695][T12370] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 597.702850][T12370] (NULL device *): queue 0 connect admin queue failed (-111). [ 597.702876][T12370] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 597.702893][T12370] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 597.959885][T12499] Console: switching to colour frame buffer device 160x50 [ 598.044743][T12499] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 599.145240][T12544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1543'. [ 599.149353][T12541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1544'. [ 599.311527][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1545'. [ 599.311579][T12550] vlan2: left promiscuous mode [ 599.311588][T12550] dummy0: left promiscuous mode [ 599.311978][T12550] bridge0: port 3(vlan2) entered disabled state [ 599.422299][T12550] bridge_slave_1: left allmulticast mode [ 599.422317][T12550] bridge_slave_1: left promiscuous mode [ 599.422434][T12550] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.451091][T12550] bridge_slave_0: left allmulticast mode [ 599.451109][T12550] bridge_slave_0: left promiscuous mode [ 599.451216][T12550] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.782884][ T1161] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 599.783001][ T1161] (NULL device *): queue 0 connect admin queue failed (-111). [ 599.783018][ T1161] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 599.783028][ T1161] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 600.504137][T12565] 9pnet_virtio: no channels available for device 127.0.0.1 [ 600.506029][T12565] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 601.347150][T12522] syz.0.1540 (12522) used greatest stack depth: 18120 bytes left [ 601.462440][T12573] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.474838][T12575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1551'. [ 601.861747][ T63] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 601.863868][ T63] (NULL device *): queue 0 connect admin queue failed (-111). [ 601.863893][ T63] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 601.863908][ T63] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 602.508243][T12575] team0 (unregistering): left promiscuous mode [ 602.508268][T12575] team_slave_0: left promiscuous mode [ 602.508397][T12575] team_slave_1: left promiscuous mode [ 602.594206][T12575] team0 (unregistering): Port device team_slave_0 removed [ 602.615182][T12575] team0 (unregistering): Port device team_slave_1 removed [ 602.633767][ T9665] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.633804][ T9665] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.634246][ T9665] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.634428][ T9665] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.634555][ T9665] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.634709][ T9665] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.634925][ T9665] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.635018][ T9665] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.834219][T12589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1554'. [ 603.079506][ T10] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 603.079591][ T9139] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 603.232561][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1560'. [ 603.240775][ T9139] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 603.240936][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 603.247102][ T10] usb 6-1: config 0 has an invalid descriptor of length 121, skipping remainder of the config [ 603.247137][ T10] usb 6-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 603.247157][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 603.247511][ T9139] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.247587][ T9139] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.247604][ T9139] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 603.247694][ T9139] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.258139][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 603.258162][ T10] usb 6-1: Product: syz [ 603.258173][ T10] usb 6-1: Manufacturer: syz [ 603.258183][ T10] usb 6-1: SerialNumber: syz [ 603.260029][ T9139] usb 7-1: config 0 descriptor?? [ 603.263465][ T10] usb 6-1: config 0 descriptor?? [ 603.382264][ T10] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 603.420746][T12604] Invalid ELF header magic: != ELF [ 603.446384][T10875] udevd[10875]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 603.623357][T12603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1561'. [ 603.802468][ T9139] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 603.941652][ T1161] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 603.941827][ T1161] (NULL device *): queue 0 connect admin queue failed (-111). [ 603.941845][ T1161] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 603.941859][ T1161] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 605.526817][ T3376] usb 6-1: USB disconnect, device number 21 [ 605.710436][T12677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1566'. [ 605.775623][T12676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1567'. [ 605.880423][ T9139] usb 7-1: USB disconnect, device number 19 [ 606.019582][T12666] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 606.019869][T12666] (NULL device *): queue 0 connect admin queue failed (-111). [ 606.019888][T12666] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 606.019903][T12666] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 606.190209][ T43] kauditd_printk_skb: 270 callbacks suppressed [ 606.190228][ T43] audit: type=1326 audit(1790100599.245:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.1.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 606.190269][ T43] audit: type=1326 audit(1790100599.245:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.1.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 606.195663][ T43] audit: type=1326 audit(1790100599.245:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.1.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf709efec code=0x7ffc0000 [ 606.232891][T12680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1569'. [ 606.261359][T12686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1570'. [ 606.323225][ T43] audit: type=1326 audit(1790100599.365:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.1.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709f008 code=0x7ffc0000 [ 606.323272][ T43] audit: type=1326 audit(1790100599.365:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.1.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 606.323306][ T43] audit: type=1326 audit(1790100599.365:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.1.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 606.509601][ T3376] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 606.613880][T12692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.690931][ T3376] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 606.698467][ T3376] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.698490][ T3376] usb 6-1: Product: syz [ 606.698502][ T3376] usb 6-1: Manufacturer: syz [ 606.698514][ T3376] usb 6-1: SerialNumber: syz [ 606.722601][ T25] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 606.944745][ T43] audit: type=1326 audit(1790100599.995:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.1.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709efec code=0x7ffc0000 [ 606.945361][ T43] audit: type=1326 audit(1790100599.995:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.1.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d75ab code=0x7ffc0000 [ 607.149146][ T43] audit: type=1326 audit(1790100600.195:5861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.1.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 607.149199][ T43] audit: type=1326 audit(1790100600.195:5862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.1.1568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 607.220745][T12682] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 607.223204][T12682] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 607.345879][ T5821] usb 6-1: USB disconnect, device number 22 [ 607.494142][T12709] netlink: 'syz.0.1573': attribute type 2 has an invalid length. [ 607.494163][T12709] netlink: 'syz.0.1573': attribute type 7 has an invalid length. [ 607.502464][T12709] Uý: entered promiscuous mode [ 607.779600][ T25] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 607.779802][ T25] ath9k_htc: Failed to initialize the device [ 607.795685][ T5821] usb 6-1: ath9k_htc: USB layer deinitialized [ 608.099861][T11175] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 608.100004][T11175] (NULL device *): queue 0 connect admin queue failed (-111). [ 608.100016][T11175] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 608.100026][T11175] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 608.799553][ T9139] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 608.855634][T12732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1580'. [ 608.862155][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 608.878002][T12730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1579'. [ 608.950194][ T9139] usb 8-1: Using ep0 maxpacket: 16 [ 608.951469][ T9139] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 608.952908][ T9139] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.952944][ T9139] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 608.952966][ T9139] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 608.952984][ T9139] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 608.953002][ T9139] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.955051][ T9139] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 608.955073][ T9139] usb 8-1: Manufacturer: syz [ 608.960351][ T9139] usb 8-1: config 0 descriptor?? [ 609.007600][T12740] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 609.029617][T12740] md: array md0 already has disks! [ 609.070197][T12740] md: md0 stopped. [ 609.072248][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 609.072357][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 609.102451][T12741] ceph: No mds server is up or the cluster is laggy [ 609.176846][T12745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1584'. [ 609.214324][T12749] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 609.243135][ T9139] rc_core: IR keymap rc-hauppauge not found [ 609.243150][ T9139] Registered IR keymap rc-empty [ 609.243510][ T9139] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 609.259636][ T9139] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 609.281384][ T9139] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 609.282950][ T9139] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input20 [ 609.299666][ T5752] Bluetooth: hci2: command 0x0406 tx timeout [ 609.299704][T11087] Bluetooth: hci3: command 0x0406 tx timeout [ 609.299754][ T9139] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 609.319564][ T9139] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 609.339740][ T9139] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 609.359539][ T9139] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 609.368885][T12751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1585'. [ 609.380019][ T9139] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 609.400670][ T9139] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 609.419704][ T9139] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 609.444395][ T9139] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 609.460267][ T9139] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 609.479851][ T9139] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 609.500455][ T9139] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 609.500470][ T9139] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 609.507539][ T9139] usb 8-1: USB disconnect, device number 23 [ 609.848947][T12765] Invalid ELF header magic: != ELF [ 610.189575][T12372] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 610.189781][T12372] (NULL device *): queue 0 connect admin queue failed (-111). [ 610.189798][T12372] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 610.189814][T12372] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 610.222748][T12769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1590'. [ 610.803444][T12787] __nla_validate_parse: 3 callbacks suppressed [ 610.803457][T12787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1595'. [ 611.200290][ T43] kauditd_printk_skb: 716 callbacks suppressed [ 611.200462][ T43] audit: type=1326 audit(1790100604.255:6579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12774 comm="syz.2.1592" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 611.201137][ T43] audit: type=1326 audit(1790100604.255:6580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12774 comm="syz.2.1592" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 611.201209][ T43] audit: type=1326 audit(1790100604.255:6581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12774 comm="syz.2.1592" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 611.201275][ T43] audit: type=1326 audit(1790100604.255:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12774 comm="syz.2.1592" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 611.201371][ T43] audit: type=1326 audit(1790100604.255:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12774 comm="syz.2.1592" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 611.201419][ T43] audit: type=1326 audit(1790100604.255:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12774 comm="syz.2.1592" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 611.201464][ T43] audit: type=1326 audit(1790100604.255:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12774 comm="syz.2.1592" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 611.201588][ T43] audit: type=1326 audit(1790100604.255:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12774 comm="syz.2.1592" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 611.202029][ T43] audit: type=1326 audit(1790100604.255:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12774 comm="syz.2.1592" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 611.202840][ T43] audit: type=1326 audit(1790100604.255:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12774 comm="syz.2.1592" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 611.986416][T12807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1600'. [ 612.105465][T12812] Trying to write to read-only block-device nullb0 [ 612.262817][T12373] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 612.262924][T12373] (NULL device *): queue 0 connect admin queue failed (-111). [ 612.262936][T12373] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 612.262945][T12373] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 612.297740][T12820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1603'. [ 612.392142][T12825] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1604'. [ 612.400505][T12825] syzkaller1: entered promiscuous mode [ 612.400524][T12825] syzkaller1: entered allmulticast mode [ 612.661736][T12828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1605'. [ 612.883232][T12832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1606'. [ 613.067328][T12838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1609'. [ 613.398994][T12840] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 613.403406][T12840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1608'. [ 613.597584][T12852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1612'. [ 614.339890][T11174] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 614.354701][T11174] (NULL device *): queue 0 connect admin queue failed (-111). [ 614.354732][T11174] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 614.354747][T11174] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 614.485227][T12864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1614'. [ 614.741710][T12869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.124237][T12881] bond0: Error: Cannot enslave bond to itself. [ 616.123399][T12880] __nla_validate_parse: 1 callbacks suppressed [ 616.123436][T12880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1618'. [ 616.420133][T11174] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 616.448785][T11174] (NULL device *): queue 0 connect admin queue failed (-111). [ 616.448818][T11174] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 616.448865][T11174] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 616.630460][T12892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1629'. [ 617.057071][T12900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1624'. [ 617.240296][T12906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1625'. [ 617.240836][T12909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1626'. [ 617.489090][T12913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1627'. [ 617.878104][T12921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1631'. [ 618.150043][ T43] kauditd_printk_skb: 552 callbacks suppressed [ 618.150063][ T43] audit: type=1800 audit(1790100611.205:7141): pid=12894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1621" name="file0" dev="overlay" ino=2292 res=0 errno=0 [ 618.357547][T12924] input: syz0 as /devices/virtual/input/input21 [ 618.470434][T12373] Bluetooth: hci4: Frame reassembly failed (-84) [ 618.470477][T12373] Bluetooth: hci4: Frame reassembly failed (-84) [ 618.470505][T12373] Bluetooth: hci4: Frame reassembly failed (-84) [ 618.470533][T12373] Bluetooth: hci4: Frame reassembly failed (-84) [ 618.470561][T12373] Bluetooth: hci4: Frame reassembly failed (-84) [ 618.509590][T12373] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 618.510069][T12373] (NULL device *): queue 0 connect admin queue failed (-111). [ 618.510090][T12373] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 618.510105][T12373] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 618.925736][T12931] lo speed is unknown, defaulting to 1000 [ 618.948936][T12931] wg2 speed is unknown, defaulting to 1000 [ 619.667961][T12936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1635'. [ 620.116289][T12945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1636'. [ 620.501861][T11087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 620.506152][ T5752] Bluetooth: hci4: command 0x1003 tx timeout [ 620.590285][T12373] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 620.600924][T12373] (NULL device *): queue 0 connect admin queue failed (-111). [ 620.600951][T12373] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 620.600965][T12373] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 620.910489][T12949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1638'. [ 621.130941][T12956] __nla_validate_parse: 1 callbacks suppressed [ 621.130960][T12956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1641'. [ 621.148549][T12954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1639'. [ 621.403391][T12965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1651'. [ 621.407573][T12962] syz.0.1642: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 621.407750][T12962] CPU: 0 UID: 0 PID: 12962 Comm: syz.0.1642 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.407774][T12962] Tainted: [L]=SOFTLOCKUP [ 621.407779][T12962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 621.407788][T12962] Call Trace: [ 621.407793][T12962] [ 621.407801][T12962] dump_stack_lvl+0x100/0x190 [ 621.407890][T12962] warn_alloc.cold+0x9e/0xb2 [ 621.407912][T12962] ? __pfx_warn_alloc+0x10/0x10 [ 621.407962][T12962] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 621.408016][T12962] ? __pfx_get_page_from_freelist+0x10/0x10 [ 621.408045][T12962] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 621.408075][T12962] ? debug_check_no_obj_freed+0x2c0/0x630 [ 621.408105][T12962] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 621.408130][T12962] ? find_held_lock+0x2b/0x80 [ 621.408143][T12966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1644'. [ 621.408149][T12962] ? __free_frozen_pages+0x747/0x10f0 [ 621.408175][T12962] ? __free_frozen_pages+0x747/0x10f0 [ 621.408204][T12962] ? _raw_spin_unlock+0x28/0x50 [ 621.408238][T12962] ? __pfx_alloc_migration_target+0x10/0x10 [ 621.408276][T12962] __folio_alloc_noprof+0x16/0x260 [ 621.408295][T12962] alloc_migration_target+0x1d7/0x6d0 [ 621.408324][T12962] migrate_pages_batch+0x5c4/0x4680 [ 621.408353][T12962] ? __pfx_alloc_migration_target+0x10/0x10 [ 621.408384][T12962] ? migrate_pages_sync+0x12c/0x880 [ 621.408410][T12962] ? migrate_pages_sync+0x588/0x880 [ 621.408436][T12962] ? __pfx_migrate_pages_batch+0x10/0x10 [ 621.408468][T12962] ? __pfx_migrate_pages_sync+0x10/0x10 [ 621.408493][T12962] ? __free_object+0x2a8/0x3f0 [ 621.408524][T12962] ? __lock_acquire+0x5c0/0x1f40 [ 621.408548][T12962] ? __css_rstat_updated+0x1ce/0x590 [ 621.408579][T12962] migrate_pages+0x1950/0x2850 [ 621.408628][T12962] ? __pfx_alloc_migration_target+0x10/0x10 [ 621.408662][T12962] ? __pfx_migrate_pages+0x10/0x10 [ 621.408698][T12962] ? mtree_load+0x3a4/0xb50 [ 621.408729][T12962] move_pages_and_store_status+0xf1/0x230 [ 621.408758][T12962] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 621.408796][T12962] kernel_move_pages+0xca4/0x14d0 [ 621.408831][T12962] ? __pfx_kernel_move_pages+0x10/0x10 [ 621.408867][T12962] ? xfd_validate_state+0x129/0x190 [ 621.408902][T12962] __ia32_sys_move_pages+0xdd/0x1b0 [ 621.408930][T12962] ? __do_fast_syscall_32+0xb3/0x8b0 [ 621.408958][T12962] ? lockdep_hardirqs_on+0x7d/0x110 [ 621.408984][T12962] __do_fast_syscall_32+0x13a/0x8b0 [ 621.409015][T12962] do_fast_syscall_32+0x32/0x70 [ 621.409042][T12962] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 621.409065][T12962] RIP: 0023:0xf708efec [ 621.409086][T12962] Code: Unable to access opcode bytes at 0xf708efc2. [ 621.409094][T12962] RSP: 002b:00000000f543b50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 621.409112][T12962] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 621.409125][T12962] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 621.409137][T12962] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 621.409147][T12962] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 621.409159][T12962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 621.409182][T12962] [ 621.411830][T12962] Mem-Info: [ 621.411841][T12962] active_anon:2600 inactive_anon:1397 isolated_anon:2 [ 621.411841][T12962] active_file:4286 inactive_file:12682 isolated_file:0 [ 621.411841][T12962] unevictable:1000 dirty:549 writeback:0 [ 621.411841][T12962] slab_reclaimable:11599 slab_unreclaimable:83486 [ 621.411841][T12962] mapped:25463 shmem:2982 pagetables:1247 [ 621.411841][T12962] sec_pagetables:329 bounce:0 [ 621.411841][T12962] kernel_misc_reclaimable:0 [ 621.411841][T12962] free:33554 free_pcp:174 free_cma:0 [ 621.411886][T12962] Node 0 active_anon:4768kB inactive_anon:2020kB active_file:56kB inactive_file:1376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:8kB writeback:0kB shmem:6260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7488kB pagetables:1336kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 621.411930][T12962] Node 1 active_anon:5632kB inactive_anon:3568kB active_file:17088kB inactive_file:49352kB unevictable:4000kB isolated(anon):8kB isolated(file):0kB mapped:101824kB dirty:2188kB writeback:0kB shmem:5668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8176kB pagetables:3652kB sec_pagetables:208kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 621.411976][T12962] Node 0 DMA free:3260kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:32kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 621.412028][T12962] lowmem_reserve[]: 0 277 277 277 277 [ 621.412056][T12962] Node 0 DMA32 free:21164kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4768kB inactive_anon:1988kB active_file:56kB inactive_file:1372kB unevictable:0kB writepending:8kB zspages:432kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 621.412106][T12962] lowmem_reserve[]: 0 0 0 0 0 [ 621.412136][T12962] Node 1 DMA32 free:109792kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:5632kB inactive_anon:3568kB active_file:17088kB inactive_file:49352kB unevictable:4000kB writepending:2188kB zspages:6816kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:696kB local_pcp:432kB free_cma:0kB [ 621.412188][T12962] lowmem_reserve[]: 0 0 0 0 0 [ 621.412224][T12962] Node 0 DMA: 101*4kB (U) 13*8kB (U) 4*16kB (U) 26*32kB (U) 15*64kB (U) 3*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 3260kB [ 621.412344][T12962] Node 0 DMA32: 458*4kB (UME) 100*8kB (UME) 81*16kB (UME) 166*32kB (UME) 43*64kB (UME) 12*128kB (UME) 8*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 21208kB [ 621.412524][T12962] Node 1 DMA32: 1868*4kB (UME) 497*8kB (UME) 299*16kB (UME) 328*32kB (UME) 129*64kB (UME) 90*128kB (UME) 39*256kB (UM) 14*512kB (UME) 13*1024kB (ME) 12*2048kB (M) 2*4096kB (M) = 109736kB [ 621.413644][T12962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.413659][T12962] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 621.413673][T12962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.413685][T12962] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 621.413698][T12962] 20810 total pagecache pages [ 621.413706][T12962] 862 pages in swap cache [ 621.413711][T12962] Free swap = 51664kB [ 621.413717][T12962] Total swap = 124996kB [ 621.413724][T12962] 524155 pages RAM [ 621.413730][T12962] 0 pages HighMem/MovableOnly [ 621.413736][T12962] 212121 pages reserved [ 621.414044][T12962] 0 pages cma reserved [ 622.515952][T12994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1647'. [ 622.659541][T12527] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 622.660065][T12527] (NULL device *): queue 0 connect admin queue failed (-111). [ 622.660079][T12527] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 622.660088][T12527] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 623.210405][T13003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1650'. [ 623.248192][T13006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1649'. [ 623.329742][T13009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1652'. [ 624.030675][T13011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1654'. [ 624.357125][T13024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1655'. [ 624.410255][T13025] Invalid ELF header magic: != ELF [ 624.422469][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.422535][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.739650][T11174] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 624.743862][T11174] (NULL device *): queue 0 connect admin queue failed (-111). [ 624.743888][T11174] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 624.743902][T11174] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 626.819604][T12377] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 626.819691][T12377] (NULL device *): queue 0 connect admin queue failed (-111). [ 626.819703][T12377] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 626.819711][T12377] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 627.114211][T13066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1664'. [ 627.160401][T13069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1665'. [ 628.376186][T13102] ubi0: attaching mtd0 [ 628.377708][T13102] ubi0: scanning is finished [ 628.377736][T13102] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 628.420214][ T9139] usb 8-1: new low-speed USB device number 24 using dummy_hcd [ 628.584086][ T9139] usb 8-1: unable to get BOS descriptor or descriptor too short [ 628.584178][ T9139] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 628.585275][ T9139] usb 8-1: config 8 has an invalid interface number: 109 but max is 0 [ 628.585295][ T9139] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 628.585359][ T9139] usb 8-1: config 8 has no interface number 0 [ 628.585392][ T9139] usb 8-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 628.585412][ T9139] usb 8-1: config 8 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 628.588356][ T9139] usb 8-1: string descriptor 0 read error: -22 [ 628.588446][ T9139] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.642328][ T9139] metro_usb 8-1:8.109: required endpoints missing [ 628.681755][T13102] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 628.916322][T11173] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 628.916526][T11173] (NULL device *): queue 0 connect admin queue failed (-111). [ 628.916546][T11173] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 628.916563][T11173] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 629.473992][T13113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1677'. [ 629.628390][T13118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1678'. [ 630.989611][ T1159] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 630.989733][ T1159] (NULL device *): queue 0 connect admin queue failed (-111). [ 630.989750][ T1159] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 630.989764][ T1159] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 631.769570][ T5173] usb 8-1: USB disconnect, device number 24 [ 632.691066][T13146] nbd0: detected capacity change from 0 to 63 [ 633.055134][T13160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1686'. [ 633.070140][T12656] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 633.075311][T12656] (NULL device *): queue 0 connect admin queue failed (-111). [ 633.075330][T12656] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 633.075339][T12656] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 633.106788][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 633.171339][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 633.197395][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 633.214603][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 633.300602][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 633.300801][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 633.300933][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 634.140299][T13170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1689'. [ 635.139690][T12652] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 635.139942][T12652] (NULL device *): queue 0 connect admin queue failed (-111). [ 635.139958][T12652] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 635.139975][T12652] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 635.511354][ T7442] block nbd0: Receive control failed (result -104) [ 635.525164][T13194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1694'. [ 635.701348][ T5173] wg2 speed is unknown, defaulting to 1000 [ 635.938885][T13161] syz.1.1684 (13161) used greatest stack depth: 17624 bytes left [ 637.280851][T12526] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 637.281597][T12526] (NULL device *): queue 0 connect admin queue failed (-111). [ 637.281646][T12526] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 637.281690][T12526] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 638.496939][T13232] lo speed is unknown, defaulting to 1000 [ 638.497714][T13232] wg2 speed is unknown, defaulting to 1000 [ 638.913320][T13236] sit2: entered promiscuous mode [ 639.312325][T12666] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 639.312399][T12666] (NULL device *): queue 0 connect admin queue failed (-111). [ 639.312411][T12666] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 639.312420][T12666] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 639.314941][T13247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1703'. [ 640.448792][T13278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1711'. [ 641.311148][ T5821] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 641.379596][ T63] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 641.380731][ T63] (NULL device *): queue 0 connect admin queue failed (-111). [ 641.380878][ T63] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 641.380919][ T63] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 641.462818][ T5821] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 641.464238][ T5821] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.464250][ T5821] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 641.464348][ T5821] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 641.464542][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.701701][T13291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 641.918102][ T5821] hub 7-1:1.0: bad descriptor, ignoring hub [ 641.918147][ T5821] hub 7-1:1.0: probe with driver hub failed with error -5 [ 641.921469][ T5821] cdc_wdm 7-1:1.0: skipping garbage [ 641.921614][ T5821] cdc_wdm 7-1:1.0: skipping garbage [ 642.052639][T13295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1715'. [ 642.702842][ T5821] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 642.702881][ T5821] cdc_wdm 7-1:1.0: Unknown control protocol [ 643.169552][ T871] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 643.230372][T11579] usb 7-1: USB disconnect, device number 20 [ 643.334405][ T871] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 643.335227][ T871] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 643.335247][ T871] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.335259][ T871] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.335270][ T871] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 643.336184][ T871] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 643.336196][ T871] usb 8-1: Manufacturer: syz [ 643.337474][ T871] usb 8-1: config 0 descriptor?? [ 643.459657][T12660] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 643.459856][T12660] (NULL device *): queue 0 connect admin queue failed (-111). [ 643.459874][T12660] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 643.459889][T12660] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 643.645736][T13319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1720'. [ 643.814201][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 643.850527][ T871] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 643.869256][ T871] appleir 0003:05AC:8243.000E: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 644.615195][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1722'. [ 644.750961][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1722'. [ 644.906506][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1722'. [ 645.311771][ T871] usb 8-1: reset high-speed USB device number 25 using dummy_hcd [ 645.479714][ T871] usb 8-1: device descriptor read/64, error -32 [ 645.539640][T12531] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 645.539757][T12531] (NULL device *): queue 0 connect admin queue failed (-111). [ 645.539773][T12531] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 645.539787][T12531] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 645.648209][T13343] syz.1.1726: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 645.648285][T13343] CPU: 2 UID: 0 PID: 13343 Comm: syz.1.1726 Tainted: G L syzkaller #0 PREEMPT(full) [ 645.648308][T13343] Tainted: [L]=SOFTLOCKUP [ 645.648314][T13343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 645.648323][T13343] Call Trace: [ 645.648329][T13343] [ 645.648336][T13343] dump_stack_lvl+0x100/0x190 [ 645.648361][T13343] warn_alloc.cold+0x9e/0xb2 [ 645.648380][T13343] ? __pfx_warn_alloc+0x10/0x10 [ 645.648395][T13343] ? __kasan_kmalloc+0xaa/0xb0 [ 645.648411][T13343] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 645.648442][T13343] ? xskq_create+0x52/0x290 [ 645.648463][T13343] ? do_sock_setsockopt+0xf3/0x1d0 [ 645.648487][T13343] ? __do_fast_syscall_32+0x13a/0x8b0 [ 645.648510][T13343] ? do_fast_syscall_32+0x32/0x70 [ 645.648544][T13343] ? xsk_setsockopt+0x743/0xab0 [ 645.648564][T13343] __vmalloc_node_range_noprof+0x123b/0x1420 [ 645.648595][T13343] ? xsk_setsockopt+0x743/0xab0 [ 645.648623][T13343] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 645.648646][T13343] ? kasan_save_track+0x14/0x30 [ 645.648666][T13343] ? __kasan_kmalloc+0xaa/0xb0 [ 645.648685][T13343] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 645.648710][T13343] ? xskq_create+0x52/0x290 [ 645.648731][T13343] ? xsk_setsockopt+0x743/0xab0 [ 645.648751][T13343] xskq_create+0x18f/0x290 [ 645.648770][T13343] ? xsk_setsockopt+0x743/0xab0 [ 645.648791][T13343] xsk_setsockopt+0x743/0xab0 [ 645.648809][T13343] ? __pfx_aa_sk_perm+0x10/0x10 [ 645.648833][T13343] ? __pfx_xsk_setsockopt+0x10/0x10 [ 645.648852][T13343] ? find_held_lock+0x2b/0x80 [ 645.648873][T13343] ? aa_sock_opt_perm+0x114/0x1e0 [ 645.648893][T13343] ? __pfx_xsk_setsockopt+0x10/0x10 [ 645.648914][T13343] do_sock_setsockopt+0xf3/0x1d0 [ 645.648941][T13343] __sys_setsockopt+0x119/0x190 [ 645.648966][T13343] __ia32_sys_setsockopt+0xbc/0x160 [ 645.648986][T13343] ? __do_fast_syscall_32+0xb3/0x8b0 [ 645.649009][T13343] ? lockdep_hardirqs_on+0x7d/0x110 [ 645.649032][T13343] __do_fast_syscall_32+0x13a/0x8b0 [ 645.649059][T13343] do_fast_syscall_32+0x32/0x70 [ 645.649108][T13343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 645.649130][T13343] RIP: 0023:0xf709efec [ 645.649150][T13343] Code: Unable to access opcode bytes at 0xf709efc2. [ 645.649158][T13343] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 645.649175][T13343] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 645.649187][T13343] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 645.649197][T13343] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 645.649206][T13343] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 645.649216][T13343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 645.649238][T13343] [ 645.649341][T13343] Mem-Info: [ 645.649349][T13343] active_anon:3700 inactive_anon:1489 isolated_anon:0 [ 645.649349][T13343] active_file:1860 inactive_file:20880 isolated_file:0 [ 645.649349][T13343] unevictable:1000 dirty:296 writeback:0 [ 645.649349][T13343] slab_reclaimable:11718 slab_unreclaimable:83305 [ 645.649349][T13343] mapped:26517 shmem:4854 pagetables:1244 [ 645.649349][T13343] sec_pagetables:341 bounce:0 [ 645.649349][T13343] kernel_misc_reclaimable:0 [ 645.649349][T13343] free:20511 free_pcp:7549 free_cma:0 [ 645.654065][T13343] Node 0 active_anon:4652kB inactive_anon:1476kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3096kB dirty:4kB writeback:0kB shmem:5652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7424kB pagetables:1336kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 645.654113][T13343] Node 1 active_anon:10896kB inactive_anon:4412kB active_file:7424kB inactive_file:83516kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:103720kB dirty:1180kB writeback:0kB shmem:14444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8136kB pagetables:3640kB sec_pagetables:256kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 645.654156][T13343] Node 0 DMA free:2900kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 645.654547][T13343] lowmem_reserve[]: 0 277 277 277 277 [ 645.654580][T13343] Node 0 DMA32 free:16216kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:2048kB free_highatomic:608kB active_anon:4644kB inactive_anon:1476kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:4kB zspages:452kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:2540kB local_pcp:16kB free_cma:0kB [ 645.654627][T13343] lowmem_reserve[]: 0 0 0 0 0 [ 645.654653][T13343] Node 1 DMA32 free:62928kB boost:2048kB min:49192kB low:60976kB high:72760kB reserved_highatomic:0kB free_highatomic:0kB active_anon:10896kB inactive_anon:4412kB active_file:7424kB inactive_file:83516kB unevictable:4000kB writepending:1180kB zspages:6980kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:26840kB local_pcp:6156kB free_cma:0kB [ 645.654701][T13343] lowmem_reserve[]: 0 0 0 0 0 [ 645.654727][T13343] Node 0 DMA: 107*4kB (U) 13*8kB (U) 4*16kB (U) 14*32kB (U) 15*64kB (U) 3*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2900kB [ 645.654833][T13343] Node 0 DMA32: 7*4kB (EH) 30*8kB (EH) 22*16kB (UEH) 47*32kB (MEH) 54*64kB (UMEH) 23*128kB (UMEH) 10*256kB (UM) 4*512kB (M) 1*1024kB (M) 1*2048kB (U) 0*4096kB = 16204kB [ 645.654949][T13343] Node 1 DMA32: 754*4kB (UME) 1076*8kB (UME) 437*16kB (UME) 223*32kB (UME) 175*64kB (UME) 66*128kB (UM) 30*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 62808kB [ 645.656098][T13343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 645.656115][T13343] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 645.656129][T13343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 645.656142][T13343] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 645.656154][T13343] 28499 total pagecache pages [ 645.656160][T13343] 624 pages in swap cache [ 645.656166][T13343] Free swap = 45932kB [ 645.656171][T13343] Total swap = 124996kB [ 645.656177][T13343] 524155 pages RAM [ 645.656182][T13343] 0 pages HighMem/MovableOnly [ 645.656188][T13343] 212121 pages reserved [ 645.656194][T13343] 0 pages cma reserved [ 645.809741][ T871] usb 8-1: reset high-speed USB device number 25 using dummy_hcd [ 645.829927][ T43] audit: type=1326 audit(1790100638.875:7142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13340 comm="syz.2.1725" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 645.832041][ T43] audit: type=1326 audit(1790100638.875:7143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13340 comm="syz.2.1725" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 645.832080][ T43] audit: type=1326 audit(1790100638.875:7144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13340 comm="syz.2.1725" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 645.832111][ T43] audit: type=1326 audit(1790100638.875:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13340 comm="syz.2.1725" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 645.832196][ T43] audit: type=1326 audit(1790100638.875:7146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13340 comm="syz.2.1725" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 645.832227][ T43] audit: type=1326 audit(1790100638.875:7147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13340 comm="syz.2.1725" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 645.832256][ T43] audit: type=1326 audit(1790100638.875:7148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13340 comm="syz.2.1725" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 645.832285][ T43] audit: type=1326 audit(1790100638.875:7149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13340 comm="syz.2.1725" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 645.832316][ T43] audit: type=1326 audit(1790100638.875:7150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13340 comm="syz.2.1725" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 645.832346][ T43] audit: type=1326 audit(1790100638.875:7151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13340 comm="syz.2.1725" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 646.080214][ T871] usb 8-1: device descriptor read/64, error -32 [ 646.109601][T13348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1727'. [ 646.320899][ T871] usb 8-1: reset high-speed USB device number 25 using dummy_hcd [ 646.350527][T13359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1730'. [ 646.529605][ T871] usb 8-1: device not accepting address 25, error -71 [ 646.598537][T13366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1733'. [ 647.615914][T13390] dvmrp0: entered allmulticast mode [ 647.619978][T13097] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 647.620937][T13097] (NULL device *): queue 0 connect admin queue failed (-111). [ 647.620957][T13097] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 647.620971][T13097] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 647.690456][T13389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1737'. [ 647.885778][ T3376] libceph: connect (1)[c::]:6789 error -101 [ 647.885869][ T3376] libceph: mon0 (1)[c::]:6789 connect error [ 647.887065][T13393] ceph: No mds server is up or the cluster is laggy [ 647.922934][T13400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1739'. [ 648.029921][ T9139] usb 8-1: USB disconnect, device number 25 [ 648.139657][ T3376] libceph: connect (1)[c::]:6789 error -101 [ 648.139742][ T3376] libceph: mon0 (1)[c::]:6789 connect error [ 648.671712][ T3376] libceph: connect (1)[c::]:6789 error -101 [ 648.671799][ T3376] libceph: mon0 (1)[c::]:6789 connect error [ 649.034182][T13412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1743'. [ 649.320300][T13420] Console: switching to colour dummy device 80x25 [ 649.439157][T13424] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 649.453274][T13424] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 649.453469][T13424] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 649.453718][T13424] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 649.454643][T13424] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 649.477509][T13424] pci 0000:00:01.0: Adding to iommu group 1 [ 649.483837][T13424] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 649.483852][T13424] pci 0000:00:01.0: vgaarb: bridge control possible [ 649.483859][T13424] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 649.507143][T13424] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 649.507260][T13424] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 649.510330][T13424] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 649.557176][T13424] [drm] Found bochs VGA, ID 0xb0c5. [ 649.557189][T13424] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 649.576230][T13424] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 649.699709][ T1166] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 649.699957][ T1166] (NULL device *): queue 0 connect admin queue failed (-111). [ 649.699981][ T1166] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 649.700082][ T1166] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 649.708891][T13424] Console: switching to colour frame buffer device 160x50 [ 649.744702][T13424] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 649.880120][T13435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1748'. [ 650.052564][T13437] kernel profiling enabled (shift: 17) [ 650.127145][T13443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1750'. [ 650.434468][T13455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1755'. [ 650.480994][T13459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1757'. [ 650.681219][T13466] msr: Write to unrecognized MSR 0x1a0 by syz.0.1756 (pid: 13466), tainting CPU_OUT_OF_SPEC. [ 650.681394][T13466] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 651.697246][T13482] Console: switching to colour dummy device 80x25 [ 651.782106][T12567] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 651.782248][T12567] (NULL device *): queue 0 connect admin queue failed (-111). [ 651.782261][T12567] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 651.782271][T12567] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 651.991154][T13483] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 652.018883][T13483] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 652.018998][T13483] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 652.019176][T13483] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 652.019610][T13483] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 652.089063][T13483] pci 0000:00:01.0: Adding to iommu group 1 [ 652.150606][T13483] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 652.150622][T13483] pci 0000:00:01.0: vgaarb: bridge control possible [ 652.150630][T13483] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 652.164027][T13483] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 652.164140][T13483] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 652.165255][T13483] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 652.279854][T13483] [drm] Found bochs VGA, ID 0xb0c5. [ 652.279867][T13483] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 652.313702][T13483] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 652.466370][T13491] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 652.534425][T13491] udc dummy_udc.0: failed to start g1: -19 [ 652.546843][T13491] UDC core: g1: couldn't find an available UDC or it's busy [ 653.150216][T13500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1765'. [ 653.190889][T13483] Console: switching to colour frame buffer device 160x50 [ 653.210862][T13483] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 653.328244][T13509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1768'. [ 653.332955][T13508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1767'. [ 653.413411][T13511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1769'. [ 653.564981][T13503] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 653.566853][T13503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1766'. [ 653.867600][T13522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1771'. [ 653.872509][T11175] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 653.873904][T11175] (NULL device *): queue 0 connect admin queue failed (-111). [ 653.873923][T11175] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 653.873933][T11175] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 655.033945][T13540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1776'. [ 655.101304][T13543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1778'. [ 655.108188][T13545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1779'. [ 655.128003][ C3] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 655.230095][T13550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1781'. [ 655.364033][T13553] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 655.375655][T13553] udc dummy_udc.0: failed to start g1: -19 [ 655.376586][T13558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1782'. [ 655.380647][T13553] UDC core: g1: couldn't find an available UDC or it's busy [ 655.939912][T12667] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 655.940343][T12667] (NULL device *): queue 0 connect admin queue failed (-111). [ 655.940356][T12667] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 655.940366][T12667] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 656.282638][T13580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1793'. [ 656.283674][T13581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1786'. [ 656.387710][T13579] Console: switching to colour dummy device 80x25 [ 656.402993][ T5173] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 656.494750][T13582] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 656.520804][T13588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1788'. [ 656.521357][T13582] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 656.521495][T13582] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 656.521749][T13582] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 656.522404][T13582] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 656.558928][T13582] pci 0000:00:01.0: Adding to iommu group 1 [ 656.566447][T13582] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 656.566462][T13582] pci 0000:00:01.0: vgaarb: bridge control possible [ 656.566470][T13582] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 656.586728][T13582] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 656.586885][T13582] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 656.588356][T13582] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 656.604574][T13582] [drm] Found bochs VGA, ID 0xb0c5. [ 656.604586][T13582] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 656.607280][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 656.607292][ T43] audit: type=1326 audit(1790100649.655:7169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 656.608474][ T43] audit: type=1326 audit(1790100649.655:7170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 656.608824][ T43] audit: type=1326 audit(1790100649.655:7171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf709efec code=0x7ffc0000 [ 656.647262][T13582] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 656.648877][ T43] audit: type=1326 audit(1790100649.695:7172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 656.717360][ T43] audit: type=1326 audit(1790100649.755:7173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf709efec code=0x7ffc0000 [ 656.718110][ T43] audit: type=1326 audit(1790100649.765:7174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 656.759782][ T43] audit: type=1326 audit(1790100649.765:7175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 656.772821][ T43] audit: type=1326 audit(1790100649.815:7176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf709efec code=0x7ffc0000 [ 656.869983][ T43] audit: type=1326 audit(1790100649.925:7177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 656.870588][ T43] audit: type=1326 audit(1790100649.925:7178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709efec code=0x7ffc0000 [ 657.003798][T13582] Console: switching to colour frame buffer device 160x50 [ 657.050433][T13582] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 657.445872][T13606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1792'. [ 657.548275][T13609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1794'. [ 658.019540][T11171] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 658.019675][T11171] (NULL device *): queue 0 connect admin queue failed (-111). [ 658.019699][T11171] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 658.019714][T11171] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 660.101246][T11171] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 660.124628][T11171] (NULL device *): queue 0 connect admin queue failed (-111). [ 660.124988][T11171] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 660.125203][T11171] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 660.307468][T13641] Console: switching to colour dummy device 80x25 [ 660.411252][T13644] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 660.467723][T13644] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 660.467826][T13644] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 660.468006][T13644] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 660.468350][T13644] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 660.494598][T13649] __nla_validate_parse: 3 callbacks suppressed [ 660.494610][T13649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1804'. [ 660.494620][T13644] pci 0000:00:01.0: Adding to iommu group 1 [ 660.518854][T13644] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 660.518869][T13644] pci 0000:00:01.0: vgaarb: bridge control possible [ 660.518877][T13644] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 660.540217][T13644] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 660.540333][T13644] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 660.541441][T13644] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 660.563416][T13651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1805'. [ 660.567626][T13644] [drm] Found bochs VGA, ID 0xb0c5. [ 660.567638][T13644] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 660.597767][T13644] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 660.861951][T13644] Console: switching to colour frame buffer device 160x50 [ 660.945935][T13644] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 661.501289][T11579] Process accounting resumed [ 661.917771][T13669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1808'. [ 662.180180][T12374] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 662.180283][T12374] (NULL device *): queue 0 connect admin queue failed (-111). [ 662.180294][T12374] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 662.180303][T12374] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 662.241141][T13675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1810'. [ 662.706309][T13680] lo speed is unknown, defaulting to 1000 [ 662.707207][T13680] wg2 speed is unknown, defaulting to 1000 [ 662.905143][T11806] block nbd0: Possible stuck request ffff888027e00000: control (read@0,1024B). Runtime 30 seconds [ 662.906661][T11806] block nbd0: Possible stuck request ffff888027e001c0: control (read@1024,3072B). Runtime 30 seconds [ 663.297355][T13694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1813'. [ 664.185808][T13706] bridge1: left promiscuous mode [ 664.185952][T13706] bond1: left allmulticast mode [ 664.186077][T13706] bridge2: left promiscuous mode [ 664.259941][ T63] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 664.260591][ T63] (NULL device *): queue 0 connect admin queue failed (-111). [ 664.260610][ T63] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 664.260624][ T63] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 664.304342][T13705] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 664.624990][T13716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1820'. [ 664.663784][T13710] Console: switching to colour dummy device 80x25 [ 664.744089][T13713] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 664.766968][T13713] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 664.767108][T13713] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 664.767347][T13713] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 664.767880][T13713] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 664.791686][T13713] pci 0000:00:01.0: Adding to iommu group 1 [ 664.813724][T13713] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 664.813741][T13713] pci 0000:00:01.0: vgaarb: bridge control possible [ 664.813749][T13713] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 664.832140][T13713] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 664.834154][T13713] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 664.835222][T13713] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 664.850796][T13713] [drm] Found bochs VGA, ID 0xb0c5. [ 664.850809][T13713] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 664.867157][T13713] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 664.875771][T13723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1822'. [ 665.228543][T13713] Console: switching to colour frame buffer device 160x50 [ 665.274425][T13713] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 665.644316][T13732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1824'. [ 665.644346][T13733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1825'. [ 665.779065][T13739] netlink: 'syz.3.1827': attribute type 11 has an invalid length. [ 665.815437][T13739] bond2: option ad_actor_sys_prio: invalid value (0) [ 665.815460][T13739] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 665.817328][T13739] bond2 (unregistering): Released all slaves [ 665.963369][T13742] can: request_module (can-proto-3) failed. [ 666.349736][ T74] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 666.349925][ T74] (NULL device *): queue 0 connect admin queue failed (-111). [ 666.349942][ T74] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 666.349957][ T74] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 666.869660][ T5173] Process accounting resumed [ 666.892128][T13757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1829'. [ 667.804808][T13755] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 667.914257][T13755] udc dummy_udc.0: failed to start g1: -19 [ 667.917306][T13755] UDC core: g1: couldn't find an available UDC or it's busy [ 668.202445][T13779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1834'. [ 668.419671][T12376] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 668.419825][T12376] (NULL device *): queue 0 connect admin queue failed (-111). [ 668.419844][T12376] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 668.419859][T12376] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 669.223511][T13795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'. [ 669.409536][ T9139] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 669.571292][ T9139] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 669.572616][ T9139] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 669.572630][ T9139] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 669.572639][ T9139] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 669.572658][ T9139] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 669.572671][ T9139] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 669.573949][ T9139] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 669.573961][ T9139] usb 6-1: Product: syz [ 669.573968][ T9139] usb 6-1: Manufacturer: syz [ 669.582758][ T9139] cdc_wdm 6-1:1.0: skipping garbage [ 669.582775][ T9139] cdc_wdm 6-1:1.0: skipping garbage [ 669.592018][ T9139] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 669.592031][ T9139] cdc_wdm 6-1:1.0: Unknown control protocol [ 670.089568][T13818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1842'. [ 670.095267][T13794] futex_wake_op: syz.1.1839 tries to shift op by 144; fix this program [ 670.095594][T13794] futex_wake_op: syz.1.1839 tries to shift op by 144; fix this program [ 670.360486][T11579] usb 6-1: USB disconnect, device number 23 [ 670.500063][ T1279] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 670.500381][ T1279] (NULL device *): queue 0 connect admin queue failed (-111). [ 670.500394][ T1279] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 670.500403][ T1279] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 670.890005][T13829] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 670.896287][T13829] udc dummy_udc.0: failed to start g1: -19 [ 670.896932][T13829] UDC core: g1: couldn't find an available UDC or it's busy [ 671.404651][T13843] jffs2: notice: (13843) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 672.595407][T12372] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 672.600409][T12372] (NULL device *): queue 0 connect admin queue failed (-111). [ 672.600518][T12372] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 672.600529][T12372] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 673.165494][T13869] Console: switching to colour dummy device 80x25 [ 673.685076][T13872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1854'. [ 673.694867][T13870] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 673.744645][T13870] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 673.744749][T13870] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 673.744973][T13870] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 673.745317][T13870] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 673.761413][T13870] pci 0000:00:01.0: Adding to iommu group 1 [ 673.783168][T13870] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 673.783184][T13870] pci 0000:00:01.0: vgaarb: bridge control possible [ 673.783191][T13870] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 673.793614][T13870] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 673.793772][T13870] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 673.804961][T13870] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 673.827238][T13870] [drm] Found bochs VGA, ID 0xb0c5. [ 673.827249][T13870] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 673.845601][T13870] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 673.961695][T13877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1855'. [ 674.128037][T13870] Console: switching to colour frame buffer device 160x50 [ 674.167290][T13870] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 674.402550][T13886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1858'. [ 674.670237][ T168] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 674.670409][ T168] (NULL device *): queue 0 connect admin queue failed (-111). [ 674.670425][ T168] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 674.670438][ T168] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 675.259835][T13899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1861'. [ 676.739635][T12653] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 676.740356][T12653] (NULL device *): queue 0 connect admin queue failed (-111). [ 676.740426][T12653] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 676.740438][T12653] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 676.833033][T13915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1865'. [ 676.858493][T13915] team0 (unregistering): left promiscuous mode [ 676.858517][T13915] team_slave_0: left promiscuous mode [ 676.864515][T13915] team0 (unregistering): Port device team_slave_0 removed [ 676.942357][T13921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1866'. [ 677.971919][T13930] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 677.976166][T13930] udc dummy_udc.0: failed to start g1: -19 [ 677.980398][T13930] UDC core: g1: couldn't find an available UDC or it's busy [ 678.294207][T13935] Console: switching to colour dummy device 80x25 [ 678.845196][T12654] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 678.845544][T12654] (NULL device *): queue 0 connect admin queue failed (-111). [ 678.845742][T12654] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 678.845879][T12654] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 679.252504][T13937] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 679.294986][T13937] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 679.295089][T13937] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 679.295264][T13937] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 679.295604][T13937] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 679.309516][T13937] pci 0000:00:01.0: Adding to iommu group 1 [ 679.333873][T13937] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 679.333895][T13937] pci 0000:00:01.0: vgaarb: bridge control possible [ 679.333924][T13937] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 679.388732][T13937] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 679.388866][T13937] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 679.394926][T13937] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 679.410886][T13942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1870'. [ 679.416768][T13937] [drm] Found bochs VGA, ID 0xb0c5. [ 679.416783][T13937] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 679.430348][T13937] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 679.656168][T13955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1876'. [ 679.795708][T13957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1877'. [ 680.152691][T13952] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 680.169818][T13952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1875'. [ 680.899831][T12528] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 680.900001][T12528] (NULL device *): queue 0 connect admin queue failed (-111). [ 680.900020][T12528] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 680.900035][T12528] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 680.943909][T13976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1882'. [ 681.789378][T13992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1885'. [ 681.947490][T13997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1886'. [ 682.261165][T14001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1887'. [ 682.801133][T14007] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1888'. [ 682.830804][T14007] team0 (unregistering): left allmulticast mode [ 682.830826][T14007] team_slave_0: left allmulticast mode [ 682.830858][T14007] team0 (unregistering): left promiscuous mode [ 682.830871][T14007] team_slave_0: left promiscuous mode [ 682.831226][T14007] bridge0: port 4(team0) entered disabled state [ 682.864155][T14007] team0 (unregistering): Port device team_slave_0 removed [ 682.880489][T14007] team0 (unregistering): Port device bridge3 removed [ 682.964133][T14009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1897'. [ 682.979597][T12531] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 682.979791][T12531] (NULL device *): queue 0 connect admin queue failed (-111). [ 682.979808][T12531] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 682.979822][T12531] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 683.488180][T14012] warn_alloc: 1 callbacks suppressed [ 683.488195][T14012] syz.3.1890: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 683.488230][T14012] CPU: 3 UID: 0 PID: 14012 Comm: syz.3.1890 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.488245][T14012] Tainted: [L]=SOFTLOCKUP [ 683.488249][T14012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 683.488261][T14012] Call Trace: [ 683.488303][T14012] [ 683.488308][T14012] dump_stack_lvl+0x100/0x190 [ 683.488361][T14012] warn_alloc.cold+0x9e/0xb2 [ 683.488374][T14012] ? __pfx_warn_alloc+0x10/0x10 [ 683.488407][T14012] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 683.488445][T14012] ? __pfx_get_page_from_freelist+0x10/0x10 [ 683.488460][T14012] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 683.488479][T14012] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 683.488491][T14012] ? __lock_acquire+0x5c0/0x1f40 [ 683.488511][T14012] ? lock_acquire+0x1d1/0x380 [ 683.488525][T14012] ? page_table_check_set+0x11d/0x580 [ 683.488553][T14012] ? page_table_check_set+0x30f/0x580 [ 683.488577][T14012] __folio_alloc_noprof+0x16/0x260 [ 683.488588][T14012] alloc_migration_target+0x1d7/0x6d0 [ 683.488606][T14012] migrate_pages_batch+0x5c4/0x4680 [ 683.488623][T14012] ? __pfx_alloc_migration_target+0x10/0x10 [ 683.488641][T14012] ? rcu_read_unlock+0x2d/0xb0 [ 683.488659][T14012] ? __pfx_migrate_pages_batch+0x10/0x10 [ 683.488675][T14012] ? finish_fault+0xaea/0x13e0 [ 683.488694][T14012] ? folio_unlock+0xf5/0x190 [ 683.488709][T14012] migrate_pages_sync+0x12c/0x880 [ 683.488725][T14012] ? rcu_read_unlock+0x2d/0xb0 [ 683.488740][T14012] ? __pfx_alloc_migration_target+0x10/0x10 [ 683.488759][T14012] ? __pfx_migrate_pages_sync+0x10/0x10 [ 683.488778][T14012] ? __lock_acquire+0x5c0/0x1f40 [ 683.488792][T14012] ? __css_rstat_updated+0x1ce/0x590 [ 683.488810][T14012] migrate_pages+0x1a83/0x2850 [ 683.488828][T14012] ? __pfx_alloc_migration_target+0x10/0x10 [ 683.488847][T14012] ? __pfx_migrate_pages+0x10/0x10 [ 683.488868][T14012] ? mtree_load+0x3a4/0xb50 [ 683.488887][T14012] move_pages_and_store_status+0xf1/0x230 [ 683.488905][T14012] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 683.488927][T14012] kernel_move_pages+0xca4/0x14d0 [ 683.488949][T14012] ? __pfx_kernel_move_pages+0x10/0x10 [ 683.488972][T14012] ? compat_restore_altstack+0x31/0x40 [ 683.488988][T14012] __ia32_sys_move_pages+0xdd/0x1b0 [ 683.489006][T14012] __do_fast_syscall_32+0x13a/0x8b0 [ 683.489023][T14012] ? lockdep_hardirqs_on+0x7d/0x110 [ 683.489040][T14012] do_fast_syscall_32+0x32/0x70 [ 683.489057][T14012] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 683.489071][T14012] RIP: 0023:0xf7ff8fec [ 683.489081][T14012] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 683.489092][T14012] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 683.489123][T14012] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000000020a0 [ 683.489129][T14012] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 683.489136][T14012] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 683.489143][T14012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.489150][T14012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 683.489163][T14012] [ 683.489196][T14012] Mem-Info: [ 683.489201][T14012] active_anon:4986 inactive_anon:1467 isolated_anon:0 [ 683.489201][T14012] active_file:10465 inactive_file:4885 isolated_file:0 [ 683.489201][T14012] unevictable:0 dirty:546 writeback:0 [ 683.489201][T14012] slab_reclaimable:11715 slab_unreclaimable:84371 [ 683.489201][T14012] mapped:29508 shmem:4830 pagetables:1262 [ 683.489201][T14012] sec_pagetables:344 bounce:0 [ 683.489201][T14012] kernel_misc_reclaimable:0 [ 683.489201][T14012] free:30221 free_pcp:2001 free_cma:0 [ 683.489246][T14012] Node 0 active_anon:40kB inactive_anon:1232kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:1092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7392kB pagetables:1336kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 683.489284][T14012] Node 1 active_anon:19904kB inactive_anon:4636kB active_file:41852kB inactive_file:19536kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118004kB dirty:2180kB writeback:0kB shmem:18228kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB kernel_stack:8216kB pagetables:3712kB sec_pagetables:268kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 683.489311][T14012] Node 0 DMA free:2996kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:8kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 683.489340][T14012] lowmem_reserve[]: 0 277 277 277 277 [ 683.489359][T14012] Node 0 DMA32 free:26060kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:40kB inactive_anon:1224kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB zspages:484kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 683.535794][T14012] lowmem_reserve[]: 0 0 0 0 0 [ 683.535818][T14012] Node 1 DMA32 free:82712kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21944kB inactive_anon:4636kB active_file:41852kB inactive_file:19536kB unevictable:0kB writepending:2180kB zspages:6828kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:14856kB local_pcp:13916kB free_cma:0kB [ 683.535850][T14012] lowmem_reserve[]: 0 0 0 0 0 [ 683.535869][T14012] Node 0 DMA: 107*4kB (U) 15*8kB (U) 7*16kB (U) 15*32kB (U) 15*64kB (U) 3*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2996kB [ 683.535941][T14012] Node 0 DMA32: 443*4kB (UME) 123*8kB (UME) 82*16kB (UME) 128*32kB (UME) 54*64kB (UME) 15*128kB (UME) 11*256kB (UM) 7*512kB (M) 2*1024kB (M) 2*2048kB (UM) 0*4096kB = 26084kB [ 683.536020][T14012] Node 1 DMA32: 194*4kB (ME) 1484*8kB (ME) 603*16kB (ME) 300*32kB (UME) 183*64kB (UME) 93*128kB (UM) 44*256kB (UM) 13*512kB (UM) 3*1024kB (M) 3*2048kB (UM) 0*4096kB = 82648kB [ 683.536099][T14012] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 683.536108][T14012] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 683.536116][T14012] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 683.536124][T14012] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 683.536132][T14012] 21548 total pagecache pages [ 683.536136][T14012] 851 pages in swap cache [ 683.536139][T14012] Free swap = 44608kB [ 683.536143][T14012] Total swap = 124996kB [ 683.536147][T14012] 524155 pages RAM [ 683.536150][T14012] 0 pages HighMem/MovableOnly [ 683.536154][T14012] 212121 pages reserved [ 683.536157][T14012] 0 pages cma reserved [ 683.749134][T14027] bond0: Error: Cannot enslave bond to itself. [ 684.554916][T14031] __nla_validate_parse: 1 callbacks suppressed [ 684.554933][T14031] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1895'. [ 684.827619][T14028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.059625][ T1160] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 685.059779][ T1160] (NULL device *): queue 0 connect admin queue failed (-111). [ 685.059792][ T1160] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 685.059802][ T1160] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 685.860824][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.860943][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.064538][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1900'. [ 686.064611][T14062] vlan2: left promiscuous mode [ 686.064628][T14062] dummy0: left promiscuous mode [ 686.065015][T14062] bridge0: port 3(vlan2) entered disabled state [ 686.110068][T14062] bridge_slave_1: left allmulticast mode [ 686.110093][T14062] bridge_slave_1: left promiscuous mode [ 686.110248][T14062] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.164643][T14062] bridge_slave_0: left allmulticast mode [ 686.164670][T14062] bridge_slave_0: left promiscuous mode [ 686.164851][T14062] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.165028][T14062] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN NOPTI [ 686.177190][T14062] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127] [ 686.181327][T14062] CPU: 0 UID: 0 PID: 14062 Comm: syz.0.1900 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.185802][T14062] Tainted: [L]=SOFTLOCKUP [ 686.187587][T14062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 686.191685][T14062] RIP: 0010:br_del_frame+0x106/0x1a0 [ 686.193941][T14062] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 87 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 65 18 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 76 49 89 1c 24 48 85 db 74 24 e8 c6 21 6b f7 48 8d [ 686.201767][T14062] RSP: 0000:ffffc90003ccf268 EFLAGS: 00010a06 [ 686.204232][T14062] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c001000 [ 686.207468][T14062] RDX: 1bd5a00000000024 RSI: ffffffff8aa03f9f RDI: ffffffff914730b8 [ 686.210746][T14062] RBP: ffffffff914730a0 R08: 0000000000000001 R09: 0000000000000000 [ 686.214006][T14062] R10: 0000000000000001 R11: 0000000000000000 R12: dead000000000122 [ 686.217127][T14062] R13: ffff88805fe27c00 R14: 000000000000001c R15: ffff88805fe27c00 [ 686.220425][T14062] FS: 0000000000000000(0000) GS:ffff888096960000(0063) knlGS:00000000f545cb40 [ 686.224078][T14062] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 686.226787][T14062] CR2: 00000000f7436288 CR3: 00000000595a6000 CR4: 0000000000352ef0 [ 686.230059][T14062] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 686.233341][T14062] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 686.236581][T14062] Call Trace: [ 686.237881][T14062] [ 686.238949][T14062] mep_delete_implementation+0x292/0x340 [ 686.241316][T14062] br_cfm_port_del+0x14f/0x1e0 [ 686.243244][T14062] del_nbp+0x168/0xd50 [ 686.244556][T14062] br_dev_delete+0x96/0x1c0 [ 686.246092][T14062] rtnl_dellink+0x463/0xb40 [ 686.247901][T14062] ? __pfx_br_dev_delete+0x10/0x10 [ 686.249700][T14062] ? kasan_save_track+0x14/0x30 [ 686.251561][T14062] ? kasan_save_free_info+0x3b/0x70 [ 686.253518][T14062] ? __kasan_slab_free+0x5f/0x80 [ 686.255052][T14062] ? __pfx_rtnl_dellink+0x10/0x10 [ 686.256751][T14062] ? nlmon_xmit+0xa5/0xe0 [ 686.258546][T14062] ? dev_hard_start_xmit+0x121/0x760 [ 686.260437][T14062] ? __dev_queue_xmit+0x1bbf/0x4970 [ 686.262176][T14062] ? netlink_sendmsg+0x8b0/0xda0 [ 686.264245][T14062] ? sock_write_iter+0x53a/0x5b0 [ 686.266298][T14062] ? __lock_acquire+0x5c0/0x1f40 [ 686.268126][T14062] ? find_held_lock+0x2b/0x80 [ 686.269665][T14062] ? lock_acquire+0x1d1/0x380 [ 686.271415][T14062] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 686.273160][T14062] ? find_held_lock+0x2b/0x80 [ 686.274664][T14062] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 686.276330][T14062] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 686.278498][T14062] ? __pfx_rtnl_dellink+0x10/0x10 [ 686.280119][T14062] rtnetlink_rcv_msg+0x95e/0xe90 [ 686.281662][T14062] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 686.283362][T14062] ? ref_tracker_free+0x37e/0x6c0 [ 686.284968][T14062] netlink_rcv_skb+0x159/0x420 [ 686.286899][T14062] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 686.288739][T14062] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 686.290581][T14062] ? netlink_deliver_tap+0x1ae/0xcc0 [ 686.292414][T14062] netlink_unicast+0x585/0x850 [ 686.294134][T14062] ? __pfx_netlink_unicast+0x10/0x10 [ 686.296303][T14062] netlink_sendmsg+0x8b0/0xda0 [ 686.297973][T14062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.299995][T14062] ? apparmor_socket_sendmsg+0x165/0x280 [ 686.302017][T14062] sock_write_iter+0x53a/0x5b0 [ 686.303879][T14062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.305860][T14062] ? __pfx_sock_write_iter+0x10/0x10 [ 686.308055][T14062] ? bpf_lsm_file_permission+0x9/0x10 [ 686.309873][T14062] ? security_file_permission+0x76/0x210 [ 686.312212][T14062] ? rw_verify_area+0xce/0x6d0 [ 686.314056][T14062] vfs_write+0x6af/0x1050 [ 686.315730][T14062] ? __pfx_sock_write_iter+0x10/0x10 [ 686.317985][T14062] ? __pfx_vfs_write+0x10/0x10 [ 686.320003][T14062] ? find_held_lock+0x2b/0x80 [ 686.321562][T14062] ksys_write+0x1f8/0x250 [ 686.323240][T14062] ? __pfx_ksys_write+0x10/0x10 [ 686.325265][T14062] __do_fast_syscall_32+0x13a/0x8b0 [ 686.327371][T14062] do_fast_syscall_32+0x32/0x70 [ 686.329556][T14062] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 686.332263][T14062] RIP: 0023:0xf708efec [ 686.334036][T14062] Code: Unable to access opcode bytes at 0xf708efc2. [ 686.336668][T14062] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 686.340129][T14062] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 686.343423][T14062] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 686.346646][T14062] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 686.349910][T14062] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 686.353231][T14062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 686.356568][T14062] [ 686.357932][T14062] Modules linked in: [ 686.359850][T14062] ---[ end trace 0000000000000000 ]--- [ 686.424938][T14062] RIP: 0010:br_del_frame+0x106/0x1a0 [ 686.424979][T14062] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 87 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 65 18 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 76 49 89 1c 24 48 85 db 74 24 e8 c6 21 6b f7 48 8d [ 686.424998][T14062] RSP: 0000:ffffc90003ccf268 EFLAGS: 00010a06 [ 686.425015][T14062] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c001000 [ 686.425027][T14062] RDX: 1bd5a00000000024 RSI: ffffffff8aa03f9f RDI: ffffffff914730b8 [ 686.425039][T14062] RBP: ffffffff914730a0 R08: 0000000000000001 R09: 0000000000000000 [ 686.425052][T14062] R10: 0000000000000001 R11: 0000000000000000 R12: dead000000000122 [ 686.425064][T14062] R13: ffff88805fe27c00 R14: 000000000000001c R15: ffff88805fe27c00 [ 686.425076][T14062] FS: 0000000000000000(0000) GS:ffff888096960000(0063) knlGS:00000000f545cb40 [ 686.425110][T14062] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 686.425124][T14062] CR2: 00000000f7377354 CR3: 00000000595a6000 CR4: 0000000000352ef0 [ 686.425136][T14062] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 686.425146][T14062] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 686.425160][T14062] Kernel panic - not syncing: Fatal exception [ 686.472037][T14062] Kernel Offset: disabled [ 686.473432][T14062] Rebooting in 86400 seconds..