Warning: Permanently added '10.128.0.77' (ECDSA) to the list of known hosts. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 2020/09/11 12:48:58 fuzzer started 2020/09/11 12:48:59 dialing manager at 10.128.0.26:34937 2020/09/11 12:48:59 syscalls: 3317 2020/09/11 12:48:59 code coverage: enabled 2020/09/11 12:48:59 comparison tracing: enabled 2020/09/11 12:48:59 extra coverage: enabled 2020/09/11 12:48:59 setuid sandbox: enabled 2020/09/11 12:48:59 namespace sandbox: enabled 2020/09/11 12:48:59 Android sandbox: enabled 2020/09/11 12:48:59 fault injection: enabled 2020/09/11 12:48:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/11 12:48:59 net packet injection: enabled 2020/09/11 12:48:59 net device setup: enabled 2020/09/11 12:48:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/11 12:48:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/11 12:48:59 USB emulation: enabled 2020/09/11 12:48:59 hci packet injection: enabled 12:52:21 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) syzkaller login: [ 367.059228][ T28] audit: type=1400 audit(1599828741.273:8): avc: denied { execmem } for pid=8497 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 368.600694][ T8498] IPVS: ftp: loaded support on port[0] = 21 [ 369.139351][ T8498] chnl_net:caif_netlink_parms(): no params data found [ 369.263761][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.271031][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.280679][ T8498] device bridge_slave_0 entered promiscuous mode [ 369.293925][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.301163][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.311590][ T8498] device bridge_slave_1 entered promiscuous mode [ 369.363688][ T8498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.380786][ T8498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.428587][ T8498] team0: Port device team_slave_0 added [ 369.442973][ T8498] team0: Port device team_slave_1 added [ 369.485579][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.492930][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.520206][ T8498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.536283][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.543995][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.570333][ T8498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.633726][ T8498] device hsr_slave_0 entered promiscuous mode [ 369.643764][ T8498] device hsr_slave_1 entered promiscuous mode [ 369.909970][ T8498] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 369.929116][ T8498] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 369.958465][ T8498] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 369.976729][ T8498] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 370.309263][ T8498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.347578][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 370.356710][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 370.384045][ T8498] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.404795][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 370.414551][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 370.424010][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.431240][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.476215][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 370.485572][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 370.495398][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 370.504801][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.512016][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.521048][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 370.522773][ T12] Bluetooth: hci0: command 0x0409 tx timeout [ 370.531526][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 370.564345][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 370.576125][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 370.595656][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 370.637352][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 370.647812][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 370.684123][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 370.693812][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 370.721110][ T8498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.734777][ T8498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 370.748619][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 370.758272][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 370.818177][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 370.826220][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 370.862992][ T8498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.922470][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 370.933316][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 370.995779][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 371.006957][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.035445][ T8498] device veth0_vlan entered promiscuous mode [ 371.047800][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.056891][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.097991][ T8498] device veth1_vlan entered promiscuous mode [ 371.176553][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 371.187505][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.214392][ T8498] device veth0_macvtap entered promiscuous mode [ 371.239296][ T8498] device veth1_macvtap entered promiscuous mode [ 371.294794][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.302487][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 371.312310][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 371.321711][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 371.331634][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 371.367132][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.404410][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 371.414478][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:52:26 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x2004, 0x8}}) 12:52:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 12:52:26 executing program 0: prctl$PR_GET_PDEATHSIG(0x21, &(0x7f0000000080)) 12:52:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) [ 372.604317][ T3223] Bluetooth: hci0: command 0x041b tx timeout 12:52:26 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x5452, &(0x7f0000000000)={0x5b}) 12:52:27 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a2ec29cd27569643d", @ANYRESHEX, @ANYBLOB=',\x00']) socket$inet_tcp(0x2, 0x1, 0x0) [ 373.153631][ T8745] FAT-fs (loop0): Unrecognized mount option ".ÂœÒuid=0xffffffffffffffff" or missing value [ 373.217399][ T8745] FAT-fs (loop0): Unrecognized mount option ".ÂœÒuid=0xffffffffffffffff" or missing value 12:52:27 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x0) r1 = socket(0x400020000000010, 0x803, 0x0) write(r1, &(0x7f00000000c0)="1700000054000d0000000000fc07011b0704004003f500", 0x17) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000100)={0xa, 0x4e22, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@hopopts_2292={{0x18, 0x29, 0x2}}], 0x18}, 0x0) 12:52:28 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000000)=0xc) setuid(r1) lgetxattr(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)=@random={'user.', '[))\x00'}, 0x0, 0x0) 12:52:28 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) r3 = openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8200, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x7ffd}) signalfd4(r4, &(0x7f0000000240)={[0x7, 0x5]}, 0x8, 0x100000) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0xc00, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='devices.list\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xfe6f) r8 = fsopen(&(0x7f0000000080)='bfs\x00', 0x0) pwritev(r8, &(0x7f0000000100)=[{&(0x7f0000000180)="c18c82ef80fd3f7362bc43e81c188995e6b40f5973e7d03e8711a31884f33e92c3f2e8f7655628eae02e9712769d97303498b1198f49a5721c92525c07a386d4ee4cbb0d6ab52b999af5451ac0d692b8d6ada33e6dc3930b58a3", 0x5a}], 0x1, 0x5, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305839, &(0x7f0000000040)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040), 0xc) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305829, &(0x7f0000000040)) [ 374.418089][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 374.456152][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 12:52:28 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) r3 = openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8200, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x7ffd}) signalfd4(r4, &(0x7f0000000240)={[0x7, 0x5]}, 0x8, 0x100000) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0xc00, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='devices.list\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xfe6f) r8 = fsopen(&(0x7f0000000080)='bfs\x00', 0x0) pwritev(r8, &(0x7f0000000100)=[{&(0x7f0000000180)="c18c82ef80fd3f7362bc43e81c188995e6b40f5973e7d03e8711a31884f33e92c3f2e8f7655628eae02e9712769d97303498b1198f49a5721c92525c07a386d4ee4cbb0d6ab52b999af5451ac0d692b8d6ada33e6dc3930b58a3", 0x5a}], 0x1, 0x5, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305839, &(0x7f0000000040)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040), 0xc) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305829, &(0x7f0000000040)) [ 374.628162][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 12:52:28 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) r3 = openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8200, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x7ffd}) signalfd4(r4, &(0x7f0000000240)={[0x7, 0x5]}, 0x8, 0x100000) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0xc00, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='devices.list\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xfe6f) r8 = fsopen(&(0x7f0000000080)='bfs\x00', 0x0) pwritev(r8, &(0x7f0000000100)=[{&(0x7f0000000180)="c18c82ef80fd3f7362bc43e81c188995e6b40f5973e7d03e8711a31884f33e92c3f2e8f7655628eae02e9712769d97303498b1198f49a5721c92525c07a386d4ee4cbb0d6ab52b999af5451ac0d692b8d6ada33e6dc3930b58a3", 0x5a}], 0x1, 0x5, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305839, &(0x7f0000000040)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040), 0xc) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305829, &(0x7f0000000040)) [ 374.675024][ T8720] Bluetooth: hci0: command 0x040f tx timeout [ 374.790218][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 12:52:29 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) r3 = openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8200, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x7ffd}) signalfd4(r4, &(0x7f0000000240)={[0x7, 0x5]}, 0x8, 0x100000) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0xc00, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='devices.list\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xfe6f) r8 = fsopen(&(0x7f0000000080)='bfs\x00', 0x0) pwritev(r8, &(0x7f0000000100)=[{&(0x7f0000000180)="c18c82ef80fd3f7362bc43e81c188995e6b40f5973e7d03e8711a31884f33e92c3f2e8f7655628eae02e9712769d97303498b1198f49a5721c92525c07a386d4ee4cbb0d6ab52b999af5451ac0d692b8d6ada33e6dc3930b58a3", 0x5a}], 0x1, 0x5, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305839, &(0x7f0000000040)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040), 0xc) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305829, &(0x7f0000000040)) [ 374.949956][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 12:52:29 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) r3 = openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8200, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x7ffd}) signalfd4(r4, &(0x7f0000000240)={[0x7, 0x5]}, 0x8, 0x100000) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0xc00, 0x0) openat$cgroup_ro(r5, &(0x7f0000000340)='devices.list\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xfe6f) r7 = fsopen(&(0x7f0000000080)='bfs\x00', 0x0) pwritev(r7, &(0x7f0000000100)=[{&(0x7f0000000180)="c18c82ef80fd3f7362bc43e81c188995e6b40f5973e7d03e8711a31884f33e92c3f2e8f7655628eae02e9712769d97303498b1198f49a5721c92525c07a386d4ee4cbb0d6ab52b999af5451ac0d692b8d6ada33e6dc3930b58a3", 0x5a}], 0x1, 0x5, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305839, &(0x7f0000000040)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040), 0xc) [ 375.270510][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 12:52:29 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) r3 = openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8200, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x7ffd}) signalfd4(r4, &(0x7f0000000240)={[0x7, 0x5]}, 0x8, 0x100000) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0xc00, 0x0) openat$cgroup_ro(r5, &(0x7f0000000340)='devices.list\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xfe6f) r7 = fsopen(&(0x7f0000000080)='bfs\x00', 0x0) pwritev(r7, &(0x7f0000000100)=[{&(0x7f0000000180)="c18c82ef80fd3f7362bc43e81c188995e6b40f5973e7d03e8711a31884f33e92c3f2e8f7655628eae02e9712769d97303498b1198f49a5721c92525c07a386d4ee4cbb0d6ab52b999af5451ac0d692b8d6ada33e6dc3930b58a3", 0x5a}], 0x1, 0x5, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305839, &(0x7f0000000040)) [ 375.486428][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 12:52:29 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) r3 = openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8200, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x7ffd}) signalfd4(r4, &(0x7f0000000240)={[0x7, 0x5]}, 0x8, 0x100000) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0xc00, 0x0) openat$cgroup_ro(r5, &(0x7f0000000340)='devices.list\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xfe6f) r6 = fsopen(&(0x7f0000000080)='bfs\x00', 0x0) pwritev(r6, &(0x7f0000000100)=[{&(0x7f0000000180)="c18c82ef80fd3f7362bc43e81c188995e6b40f5973e7d03e8711a31884f33e92c3f2e8f7655628eae02e9712769d97303498b1198f49a5721c92525c07a386d4ee4cbb0d6ab52b999af5451ac0d692b8d6ada33e6dc3930b58a3", 0x5a}], 0x1, 0x5, 0x1) [ 375.784851][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 12:52:30 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) r3 = openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8200, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x7ffd}) signalfd4(r4, &(0x7f0000000240)={[0x7, 0x5]}, 0x8, 0x100000) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0xc00, 0x0) openat$cgroup_ro(r5, &(0x7f0000000340)='devices.list\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xfe6f) fsopen(&(0x7f0000000080)='bfs\x00', 0x0) [ 376.101400][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 12:52:30 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) r3 = openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8200, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x7ffd}) signalfd4(r4, &(0x7f0000000240)={[0x7, 0x5]}, 0x8, 0x100000) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0xc00, 0x0) openat$cgroup_ro(r5, &(0x7f0000000340)='devices.list\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xfe6f) [ 376.318546][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 12:52:30 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) r3 = openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8200, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x7ffd}) signalfd4(r4, &(0x7f0000000240)={[0x7, 0x5]}, 0x8, 0x100000) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0xc00, 0x0) openat$cgroup_ro(r5, &(0x7f0000000340)='devices.list\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 12:52:30 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) r3 = openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8200, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x7ffd}) signalfd4(r4, &(0x7f0000000240)={[0x7, 0x5]}, 0x8, 0x100000) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0xc00, 0x0) openat$cgroup_ro(r5, &(0x7f0000000340)='devices.list\x00', 0x7a05, 0x1700) 12:52:30 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) r3 = openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8200, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x7ffd}) signalfd4(r4, &(0x7f0000000240)={[0x7, 0x5]}, 0x8, 0x100000) openat$hwrng(0xffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0xc00, 0x0) [ 376.755725][ T8720] Bluetooth: hci0: command 0x0419 tx timeout 12:52:31 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) r3 = openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8200, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x7ffd}) signalfd4(r4, &(0x7f0000000240)={[0x7, 0x5]}, 0x8, 0x100000) 12:52:31 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) r3 = openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8200, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x7ffd}) 12:52:31 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) r3 = openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8200, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 12:52:31 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) openat$autofs(0xffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8200, 0x0) 12:52:32 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) 12:52:32 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x10, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x2c}}, 0x0) 12:52:32 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') 12:52:32 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12:52:32 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) 12:52:33 executing program 0: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) 12:52:33 executing program 0: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) 12:52:33 executing program 0: openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) 12:52:33 executing program 0 (fault-call:0 fault-nth:0): openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) [ 379.744138][ T8840] FAULT_INJECTION: forcing a failure. [ 379.744138][ T8840] name failslab, interval 1, probability 0, space 0, times 1 [ 379.757118][ T8840] CPU: 0 PID: 8840 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 379.765772][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.775893][ T8840] Call Trace: [ 379.779369][ T8840] dump_stack+0x21c/0x280 [ 379.783880][ T8840] should_fail+0x8b7/0x9e0 [ 379.788475][ T8840] __should_failslab+0x1f6/0x290 [ 379.793572][ T8840] should_failslab+0x29/0x70 [ 379.798308][ T8840] kmem_cache_alloc+0xcf/0xc50 [ 379.803212][ T8840] ? getname_flags+0x14b/0xc40 [ 379.808076][ T8840] ? kmsan_get_metadata+0x116/0x180 [ 379.813370][ T8840] ? __msan_instrument_asm_store+0xab/0x120 [ 379.819369][ T8840] getname_flags+0x14b/0xc40 [ 379.824068][ T8840] getname+0x55/0x60 [ 379.828146][ T8840] do_sys_openat2+0x923/0x1020 [ 379.833068][ T8840] __se_compat_sys_openat+0x2a4/0x310 [ 379.838573][ T8840] __ia32_compat_sys_openat+0x56/0x70 [ 379.844067][ T8840] __do_fast_syscall_32+0x2af/0x480 [ 379.849435][ T8840] do_fast_syscall_32+0x6b/0xd0 [ 379.854395][ T8840] do_SYSENTER_32+0x73/0x90 [ 379.859061][ T8840] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 379.865452][ T8840] RIP: 0023:0xf7f76549 [ 379.869560][ T8840] Code: Bad RIP value. [ 379.873692][ T8840] RSP: 002b:00000000f55700cc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 379.882243][ T8840] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000400 [ 379.890285][ T8840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 379.898327][ T8840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 379.906364][ T8840] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 379.914404][ T8840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 12:52:34 executing program 0 (fault-call:0 fault-nth:1): openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) 12:52:34 executing program 1: ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x2, 'bond_slave_0\x00', {0x5f}, 0x1}) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'wg1\x00', {0x400}, 0x8}) open_by_handle_at(r0, &(0x7f0000000080)={0xf9, 0x9, "9116e1eb852f718c5775dacfb3d48b6be9cb768849bc25af537a71181827c4ea0790cc32bcc73e03a9675e5550a6f31c41f2031e736b49485355eef8379fec28f4ec21521f6ff06a0a23a11c36460d4a7b93252390d45d0aac2a16bf8edbe33cf0981271a844446a4539fec74085d0eb607e7e51147e143fe4b05faf715860bacb376ec0e609af55330b596e36acad82782330e623748fcd0a3dcb573dc6b59d2e74054e181076201094a826b5fe96e92362b1b0dfcc10c7e640fba16749b530e94d18bddc4b29950f3bf4cad88dbf0003730aa580335be86ddb4237d783d29c24e2031644f9796572744f947a27bfbe05"}, 0x410000) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000180)={0x0, 0x8000}) r1 = socket$inet6(0xa, 0xa, 0x8001) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001180)={0x0, 0x9, 0x2, 0x92}, 0x10) r2 = syz_open_dev$vcsu(&(0x7f0000001700)='/dev/vcsu#\x00', 0x7, 0x240240) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000001740)=@bcast) r3 = openat$full(0xffffff9c, &(0x7f0000001780)='/dev/full\x00', 0x30042, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f00000017c0)={0x0, 0x2, "309572c60058ad447028a2e9c272077e13ae2a980b7d207af389315a6b78a20d", 0xd0, 0x5, 0xeb1, 0x1800000, 0x2, 0x3, 0x2, 0x9, [0x40, 0x3, 0x810000, 0x2]}) r4 = socket$pptp(0x18, 0x1, 0x2) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f00000018c0)=0x4, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000001900)) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004010}, 0x20000000) fdatasync(r4) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000001b40)={&(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x5, 0x4, 0x0, 0x200}) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000001bc0)=""/41, &(0x7f0000001c00)=0x29) acct(&(0x7f0000001c40)='./file0\x00') bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001f40)={&(0x7f0000001c80)="ab9cc0535aab1b4292", &(0x7f0000001cc0)=""/179, &(0x7f0000001d80)="7d722a6f6cd24c0bdfd95b84792657f294de447ce8ba795a1dbbe9f7f321c0b2e512f9fe34bb6196872ec8acc0f86bb83b5b0e9705f01d919ad9b6907e8d31c77467d4a01c1a32234c1572a638e38154f579461324d554e7bd844955be6181df58979a5f47c5cfe3f346b7de638433bc360d7a92b38acbfa54baa63097b0c8a5d324a0b8562992556237a3fa25ddcb7604213a7423ee427c9a84c4b42cd7b47c8d4bf06ef24387b30b6297ad9bac549e38e77d62483ef5213edbeb8ad4b5e67c7b00a1943d1725bb088820090c8ccd4348864c8a993ddeee170ed91ffb8b8f24c5258db6295fe8b1801c6c7d4f66d83c11fb", &(0x7f0000001e80)="c9b94627990261d442562129e1cb8a2d58d06b8124435acd835fdce84bd351b81ed997bdc1e39a7ab733d67dba8eeb277497a05aae10c9c8b3f4b225200cff1791e4f6891e74bdb405960c315a9232fc13e835177b6991c013fff7c7cd14191144bd1ce6be1df0b9e70d1a5f739ac107ad06af53362656975b08b028f71ce5697c9232733145ca406c6a5bbf74a4340397a12c8db55210ecce57263ca8e97d24c5d879", 0x401, 0xffffffffffffffff, 0x4}, 0x38) [ 380.189267][ T8845] FAULT_INJECTION: forcing a failure. [ 380.189267][ T8845] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 380.202698][ T8845] CPU: 0 PID: 8845 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 380.211343][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.221581][ T8845] Call Trace: [ 380.224976][ T8845] dump_stack+0x21c/0x280 [ 380.229411][ T8845] should_fail+0x8b7/0x9e0 [ 380.233943][ T8845] should_fail_usercopy+0x39/0x40 [ 380.239061][ T8845] strncpy_from_user+0x86/0x950 [ 380.244012][ T8845] ? getname_flags+0x14b/0xc40 [ 380.248873][ T8845] ? kmsan_get_metadata+0x116/0x180 [ 380.254166][ T8845] getname_flags+0x236/0xc40 [ 380.254239][ T8845] getname+0x55/0x60 [ 380.254314][ T8845] do_sys_openat2+0x923/0x1020 [ 380.254430][ T8845] __se_compat_sys_openat+0x2a4/0x310 [ 380.273123][ T8845] __ia32_compat_sys_openat+0x56/0x70 [ 380.278615][ T8845] __do_fast_syscall_32+0x2af/0x480 [ 380.283965][ T8845] do_fast_syscall_32+0x6b/0xd0 [ 380.288911][ T8845] do_SYSENTER_32+0x73/0x90 [ 380.293539][ T8845] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 380.299933][ T8845] RIP: 0023:0xf7f76549 [ 380.304040][ T8845] Code: Bad RIP value. [ 380.308163][ T8845] RSP: 002b:00000000f55700cc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 380.316670][ T8845] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000400 [ 380.324709][ T8845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 380.332750][ T8845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 380.340790][ T8845] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 380.348831][ T8845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 12:52:35 executing program 0 (fault-call:0 fault-nth:2): openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) [ 380.915426][ T8850] FAULT_INJECTION: forcing a failure. [ 380.915426][ T8850] name failslab, interval 1, probability 0, space 0, times 0 [ 380.928396][ T8850] CPU: 1 PID: 8850 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 380.937064][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.947183][ T8850] Call Trace: [ 380.950580][ T8850] dump_stack+0x21c/0x280 [ 380.955020][ T8850] should_fail+0x8b7/0x9e0 [ 380.959571][ T8850] __should_failslab+0x1f6/0x290 [ 380.964631][ T8850] should_failslab+0x29/0x70 [ 380.969334][ T8850] kmem_cache_alloc+0xcf/0xc50 [ 380.974196][ T8850] ? __alloc_file+0x85/0x760 [ 380.978892][ T8850] __alloc_file+0x85/0x760 [ 380.983413][ T8850] alloc_empty_file+0x27f/0x570 [ 380.988368][ T8850] ? __ia32_compat_sys_openat+0x56/0x70 [ 380.994023][ T8850] path_openat+0xfc/0x6ba0 [ 380.998544][ T8850] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 381.004708][ T8850] ? kmsan_get_metadata+0x116/0x180 [ 381.010007][ T8850] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 381.015918][ T8850] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 381.021817][ T8850] ? kmsan_get_metadata+0x116/0x180 [ 381.027104][ T8850] ? kmsan_internal_set_origin+0x75/0xb0 [ 381.032823][ T8850] ? __msan_poison_alloca+0xf0/0x120 [ 381.038203][ T8850] ? kmsan_get_metadata+0x116/0x180 [ 381.043498][ T8850] do_filp_open+0x2b8/0x710 [ 381.048140][ T8850] do_sys_openat2+0xa6a/0x1020 [ 381.053038][ T8850] __se_compat_sys_openat+0x2a4/0x310 [ 381.058530][ T8850] __ia32_compat_sys_openat+0x56/0x70 [ 381.064002][ T8850] __do_fast_syscall_32+0x2af/0x480 [ 381.069312][ T8850] do_fast_syscall_32+0x6b/0xd0 [ 381.074261][ T8850] do_SYSENTER_32+0x73/0x90 [ 381.078862][ T8850] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 381.085258][ T8850] RIP: 0023:0xf7f76549 [ 381.089361][ T8850] Code: Bad RIP value. [ 381.093484][ T8850] RSP: 002b:00000000f55700cc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 381.101984][ T8850] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000400 [ 381.110020][ T8850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.118057][ T8850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.126091][ T8850] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 381.134235][ T8850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 12:52:35 executing program 0 (fault-call:0 fault-nth:3): openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) [ 381.477861][ T8854] FAULT_INJECTION: forcing a failure. [ 381.477861][ T8854] name failslab, interval 1, probability 0, space 0, times 0 [ 381.490783][ T8854] CPU: 0 PID: 8854 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 381.499431][ T8854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.509538][ T8854] Call Trace: [ 381.512936][ T8854] dump_stack+0x21c/0x280 [ 381.517369][ T8854] should_fail+0x8b7/0x9e0 [ 381.521911][ T8854] __should_failslab+0x1f6/0x290 [ 381.526956][ T8854] should_failslab+0x29/0x70 [ 381.531642][ T8854] kmem_cache_alloc+0xcf/0xc50 [ 381.536504][ T8854] ? kmsan_get_metadata+0x116/0x180 [ 381.541857][ T8854] ? security_file_alloc+0x93/0x550 [ 381.547153][ T8854] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 381.553051][ T8854] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 381.559213][ T8854] security_file_alloc+0x93/0x550 [ 381.564329][ T8854] ? kmsan_get_metadata+0x116/0x180 [ 381.569633][ T8854] __alloc_file+0x1eb/0x760 [ 381.574238][ T8854] alloc_empty_file+0x27f/0x570 [ 381.579187][ T8854] ? __ia32_compat_sys_openat+0x56/0x70 [ 381.584828][ T8854] path_openat+0xfc/0x6ba0 [ 381.589334][ T8854] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 381.595497][ T8854] ? kmsan_get_metadata+0x116/0x180 [ 381.600789][ T8854] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 381.606699][ T8854] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 381.612618][ T8854] ? kmsan_get_metadata+0x116/0x180 [ 381.617902][ T8854] ? kmsan_internal_set_origin+0x75/0xb0 [ 381.623623][ T8854] ? __msan_poison_alloca+0xf0/0x120 [ 381.629001][ T8854] ? kmsan_get_metadata+0x116/0x180 [ 381.634296][ T8854] do_filp_open+0x2b8/0x710 [ 381.638944][ T8854] do_sys_openat2+0xa6a/0x1020 [ 381.643832][ T8854] __se_compat_sys_openat+0x2a4/0x310 [ 381.649322][ T8854] __ia32_compat_sys_openat+0x56/0x70 [ 381.654795][ T8854] __do_fast_syscall_32+0x2af/0x480 [ 381.660104][ T8854] do_fast_syscall_32+0x6b/0xd0 [ 381.665052][ T8854] do_SYSENTER_32+0x73/0x90 [ 381.669651][ T8854] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 381.676039][ T8854] RIP: 0023:0xf7f76549 [ 381.680143][ T8854] Code: Bad RIP value. [ 381.684268][ T8854] RSP: 002b:00000000f55700cc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 381.692771][ T8854] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000400 [ 381.700809][ T8854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.708848][ T8854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.716886][ T8854] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 381.724925][ T8854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 12:52:36 executing program 0 (fault-call:0 fault-nth:4): openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) [ 381.998010][ T8848] IPVS: ftp: loaded support on port[0] = 21 [ 382.009511][ T8863] FAULT_INJECTION: forcing a failure. [ 382.009511][ T8863] name failslab, interval 1, probability 0, space 0, times 0 [ 382.022553][ T8863] CPU: 1 PID: 8863 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 382.031210][ T8863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.041323][ T8863] Call Trace: [ 382.044724][ T8863] dump_stack+0x21c/0x280 [ 382.049164][ T8863] should_fail+0x8b7/0x9e0 [ 382.053697][ T8863] __should_failslab+0x1f6/0x290 [ 382.058740][ T8863] should_failslab+0x29/0x70 [ 382.063431][ T8863] __kmalloc+0xae/0x410 [ 382.067706][ T8863] ? kmsan_get_metadata+0x116/0x180 [ 382.073079][ T8863] ? tomoyo_realpath_from_path+0x15a/0xcb0 [ 382.078994][ T8863] tomoyo_realpath_from_path+0x15a/0xcb0 [ 382.084746][ T8863] tomoyo_check_open_permission+0x2d8/0xdf0 [ 382.090779][ T8863] tomoyo_file_open+0x240/0x2c0 [ 382.095742][ T8863] ? tomoyo_file_fcntl+0x3e0/0x3e0 [ 382.100947][ T8863] security_file_open+0xb1/0x1f0 [ 382.105999][ T8863] do_dentry_open+0x738/0x1d30 [ 382.110980][ T8863] vfs_open+0xaf/0xe0 [ 382.115066][ T8863] path_openat+0x542b/0x6ba0 [ 382.119814][ T8863] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 382.125943][ T8863] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 382.131878][ T8863] ? kmsan_get_metadata+0x116/0x180 [ 382.137194][ T8863] ? kmsan_get_metadata+0x116/0x180 [ 382.142500][ T8863] do_filp_open+0x2b8/0x710 [ 382.147149][ T8863] do_sys_openat2+0xa6a/0x1020 [ 382.152044][ T8863] __se_compat_sys_openat+0x2a4/0x310 [ 382.157544][ T8863] __ia32_compat_sys_openat+0x56/0x70 [ 382.163023][ T8863] __do_fast_syscall_32+0x2af/0x480 [ 382.168342][ T8863] do_fast_syscall_32+0x6b/0xd0 [ 382.173293][ T8863] do_SYSENTER_32+0x73/0x90 [ 382.177914][ T8863] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 382.184309][ T8863] RIP: 0023:0xf7f76549 [ 382.188423][ T8863] Code: Bad RIP value. [ 382.192554][ T8863] RSP: 002b:00000000f55700cc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 382.201063][ T8863] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000400 [ 382.209106][ T8863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.217149][ T8863] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.225186][ T8863] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 382.233222][ T8863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 382.241990][ T8863] ERROR: Out of memory at tomoyo_realpath_from_path. [ 382.828709][ T8848] chnl_net:caif_netlink_parms(): no params data found 12:52:37 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) [ 383.043676][ T8848] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.051112][ T8848] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.061163][ T8848] device bridge_slave_0 entered promiscuous mode [ 383.081697][ T8848] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.089728][ T8848] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.099550][ T8848] device bridge_slave_1 entered promiscuous mode [ 383.173788][ T8848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.202638][ T8848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.302341][ T8848] team0: Port device team_slave_0 added [ 383.341506][ T8848] team0: Port device team_slave_1 added 12:52:37 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) [ 383.459380][ T8848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.467011][ T8848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.493160][ T8848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.589342][ T8848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.596569][ T8848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.623107][ T8848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 12:52:37 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x2, 0x0) [ 383.823046][ T8848] device hsr_slave_0 entered promiscuous mode [ 383.834209][ T8848] device hsr_slave_1 entered promiscuous mode [ 383.848395][ T8848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.856418][ T8848] Cannot create hsr debugfs directory [ 383.892198][ T8718] Bluetooth: hci1: command 0x0409 tx timeout 12:52:38 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x3, 0x0) [ 384.239146][ T8848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 384.268672][ T8848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 384.337526][ T8848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 384.368411][ T8848] netdevsim netdevsim1 netdevsim3: renamed from eth3 12:52:38 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x4, 0x0) [ 384.853017][ T8848] 8021q: adding VLAN 0 to HW filter on device bond0 12:52:39 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x5, 0x0) [ 384.923140][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 384.932519][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 384.991822][ T8848] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.033708][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 385.043695][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.053101][ T8720] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.060552][ T8720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.145398][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 385.154976][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 385.164755][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 385.174010][ T8720] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.181331][ T8720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.190361][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 385.201119][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 385.293996][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 385.305042][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 385.315766][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 385.325960][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 385.348605][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 385.373295][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 385.383286][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 12:52:39 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x6, 0x0) [ 385.432028][ T8848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.445330][ T8848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 385.461211][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 385.471274][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 385.544671][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 385.552423][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 385.594848][ T8848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.685640][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 385.695620][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 385.798176][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 385.807707][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 385.838627][ T8848] device veth0_vlan entered promiscuous mode [ 385.847795][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 385.857250][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 12:52:40 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x7, 0x0) [ 385.905417][ T8848] device veth1_vlan entered promiscuous mode [ 385.957843][ T3370] Bluetooth: hci1: command 0x041b tx timeout [ 386.031384][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 386.041216][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 386.050527][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 386.060285][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 386.100348][ T8848] device veth0_macvtap entered promiscuous mode [ 386.144263][ T8848] device veth1_macvtap entered promiscuous mode [ 386.232875][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 386.243861][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.257560][ T8848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.267911][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 386.278231][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 386.287504][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 386.297493][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 386.328256][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 386.339296][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.352868][ T8848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.363392][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.374084][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:52:41 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x8, 0x0) 12:52:41 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='\n'], 0x1, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000540)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}) msgsnd(r3, &(0x7f00000005c0)={0x3}, 0x4, 0x0) msgctl$IPC_RMID(r3, 0x0) msgsnd(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000ae27bf39a0bb45024277ab0eb7c164d7489ad65bbe5f971aac678d87a23791cad7da5883e9b375db5ba3c051d3fb2c66c92ddc042a765c550f651c3f35a8e222674b93df0100000000000000132c4b1257a82c846cf4b504040ec53b0a8d6c2e7c31ca74d54960373c28692809b0e44043843b2ad04d743d88f0d0051d94ebb9e39454c05e135b5f85eca8000400000000000015b4100b148b0179415c481f821cabff5ff06f03174a297473ab1f9bb4a81b50dc530e628f796967d581eb975b9809f381a7e4a46279"], 0xd6, 0x800) msgrcv(r3, &(0x7f00000000c0)={0x0, ""/16}, 0x14, 0x3, 0x800) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x11, 0xa, 0x1fffd) bind(r5, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0xa03, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r6}, @CGW_SRC_IF={0x8, 0x9, r6}]}, 0x24}}, 0x0) close(r0) r7 = openat$full(0xffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x3ad940, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r7, 0xc0605345, &(0x7f00000002c0)={0xe6ec, 0x2, {0x2, 0x1, 0x9, 0x0, 0x7}, 0x16}) 12:52:41 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x9, 0x0) 12:52:41 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xa, 0x0) 12:52:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100006bd32310501da160316a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$session_to_parent(0x12) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000230000000010000f9dd2f774de9a51a6ef8dbb568b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb0, 0x1405, 0x800, 0x70bd2b, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0xb0}}, 0x1) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000013c0)={0x34, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x11, 0x3, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "74318aa08e0993e51f0e6353f35678d3fec390411db841044b257ad10a5c496f811a4501142b3ed585bcbd2e3ff15388880c6c7cfeff2f96c48433a4f60ebb"}, 0x60, &(0x7f0000001800)=[{&(0x7f0000000100)="e5ad6bd31aa2c360d93b879788a8", 0x1000e}], 0x1}, 0x0) read(r1, &(0x7f0000000100)=""/165, 0xa5) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x3ff) 12:52:42 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xb, 0x0) [ 388.038448][ T8725] Bluetooth: hci1: command 0x040f tx timeout [ 388.077277][ T8720] usb 2-1: new high-speed USB device number 2 using dummy_hcd 12:52:42 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xc, 0x0) [ 388.326536][ T8720] usb 2-1: Using ep0 maxpacket: 16 [ 388.457341][ T8720] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=6a.31 [ 388.466663][ T8720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.508600][ T8720] usb 2-1: config 0 descriptor?? 12:52:42 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xd, 0x0) 12:52:43 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xe, 0x0) [ 389.007767][ T8720] airspy 2-1:0.0: Board ID: 00 [ 389.013047][ T8720] airspy 2-1:0.0: Firmware version: 12:52:43 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x10, 0x0) 12:52:43 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x11, 0x0) 12:52:44 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x12, 0x0) 12:52:44 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x25, 0x0) 12:52:44 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x2f, 0x0) [ 390.116369][ T8725] Bluetooth: hci1: command 0x0419 tx timeout 12:52:44 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x5c, 0x0) [ 390.536989][ T8720] airspy 2-1:0.0: usb_control_msg() failed -110 request 12 [ 390.564069][ T8720] airspy 2-1:0.0: Registered as swradio16 [ 390.570883][ T8720] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow 12:52:44 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x300, 0x0) 12:52:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f0512fe01b2a4a280930a06000000a84306910000000b000f0035020000060000001900154004000001d40000dc1338d54400009b84136ef75afb83de44110016000d0004000000060cec4faba7d4", 0x55}], 0x1}, 0x0) [ 390.820154][ T3223] usb 2-1: USB disconnect, device number 2 12:52:45 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x500, 0x0) [ 391.103383][ T9169] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 391.112170][ T9169] netlink: 'syz-executor.1': attribute type 21 has an invalid length. 12:52:45 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat(r0, &(0x7f0000000380)='./file0\x00', 0x4540, 0x100) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x1406, 0x20, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x300}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) mount(&(0x7f0000000340)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ntfs\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1a3) close(r2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f00000004c0)="0bfc7cff1fab0f6ef8e66cf4c27078c1c4bd3b4044d95e602f910baff445464ae95fa3a36951dbde9777fd2601316e4ee95c59552809bd11cb4668908255a67a50341420df0b74f10b2888b9a7ea840105e19391a8ad0daa28186394d6be98232019eb2eb97f081beaa531137647c3fd96e5a6eeefe5e98f9f2143d839a5e724f3cf1dcd1a1d0fd68af51e419979abd0d8598d62d1dc90688ebafb33b2a30ab53b09f63856474fcdc6406c58", &(0x7f0000000140)=""/71, &(0x7f0000000580)="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"/350, &(0x7f0000000280)="e404f581a64ff68b0c0d7b58b1745b1afa168215d456a82324ad04d4a01f18d6f4a63ff571e11adf363dde8dbc2be6a13cf0dfdf75d0ecb3fbf3a47a7108", 0x41, r2}, 0x38) 12:52:45 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x600, 0x0) 12:52:45 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x700, 0x0) [ 391.489904][ T9177] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 391.499404][ T9177] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 391.512580][ T9177] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume. [ 391.558793][ T9179] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 391.568298][ T9179] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 391.581536][ T9179] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume. 12:52:45 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat(r0, &(0x7f0000000380)='./file0\x00', 0x4540, 0x100) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x1406, 0x20, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x300}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) mount(&(0x7f0000000340)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ntfs\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1a3) close(r2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f00000004c0)="0bfc7cff1fab0f6ef8e66cf4c27078c1c4bd3b4044d95e602f910baff445464ae95fa3a36951dbde9777fd2601316e4ee95c59552809bd11cb4668908255a67a50341420df0b74f10b2888b9a7ea840105e19391a8ad0daa28186394d6be98232019eb2eb97f081beaa531137647c3fd96e5a6eeefe5e98f9f2143d839a5e724f3cf1dcd1a1d0fd68af51e419979abd0d8598d62d1dc90688ebafb33b2a30ab53b09f63856474fcdc6406c58", &(0x7f0000000140)=""/71, &(0x7f0000000580)="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"/350, &(0x7f0000000280)="e404f581a64ff68b0c0d7b58b1745b1afa168215d456a82324ad04d4a01f18d6f4a63ff571e11adf363dde8dbc2be6a13cf0dfdf75d0ecb3fbf3a47a7108", 0x41, r2}, 0x38) 12:52:46 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x900, 0x0) [ 391.842478][ T9187] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 391.852069][ T9187] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 391.865172][ T9187] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume. 12:52:46 executing program 1: r0 = syz_mount_image$xfs(&(0x7f0000000940)='xfs\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x0, &(0x7f0000000b00), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6f476273697a653d2d382c00587f6007bb21ad3b9fcce6aa86a7b2e848b092f3be852ad76ac3e7822a7012313d706a2c302e31"]) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x100) r2 = openat$pfkey(0xffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x2000, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000000100)=""/113, &(0x7f0000000180)=0x71) r3 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r3}) 12:52:46 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xa00, 0x0) [ 392.233308][ T9194] xfs: Unknown parameter 'loGbsize' [ 392.328908][ T9194] xfs: Unknown parameter 'loGbsize' 12:52:46 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xb00, 0x0) 12:52:46 executing program 1: getpeername(0xffffffffffffffff, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f00000000c0)=0x80) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003580)={0x2020}, 0x2020) 12:52:46 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xc00, 0x0) 12:52:47 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xd00, 0x0) 12:52:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xe) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="290000002000190f05003fffffffda0602000009fee80501dd6c06040d000600fe7f00000005000f00", 0x29}], 0x27) r1 = socket(0x11, 0x3, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "74318aa08e0993e51f0e6353f35678d3fec390411db841044b257ad10a5c496f811a4501142b3ed585bcbd2e3ff15388880c6c7cfeff2f96c48433a4f60ebb"}, 0x60, &(0x7f0000001800)=[{&(0x7f0000000100)="e5ad6bd31aa2c360d93b879788a8", 0x1000e}], 0x1}, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0x18, &(0x7f00000000c0)=""/4096, &(0x7f0000000040)=0x1000) 12:52:47 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xe00, 0x0) 12:52:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x8480, 0x0) r1 = openat$ion(0xffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x88080, 0x0) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x1f, 0x5e}) ioperm(0x0, 0x8, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:52:47 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x1100, 0x0) [ 393.568682][ T9226] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 12:52:47 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100000e6860082d080001a3f200000021090212000101000000090400000098187e00ce9e80e3598dc272621d625dd5a6465579786833b2a30de44bd10e6dc0afd23c62506b5ae48694836d1537637303c35c"], 0x0) syz_usb_disconnect(r0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000351200004010474b0000001ed84d000000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffff01000000", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1a3) close(r2) ioctl$VIDIOC_G_EDID(r2, 0xc0245628, &(0x7f00000001c0)={0x0, 0x4, 0x4e, [], &(0x7f00000000c0)=0x4}) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000040)={0x62, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2, 'fo\x00', 0x25, 0x1f, 0x31}, 0x2c) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000940)={{r4}, "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"}) 12:52:48 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x1200, 0x0) 12:52:48 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x1f00, 0x0) [ 394.196624][ T3370] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 394.435877][ T3370] usb 2-1: Using ep0 maxpacket: 8 [ 394.476810][ T3370] usb 2-1: too many configurations: 33, using maximum allowed: 8 12:52:48 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x2500, 0x0) 12:52:49 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x2f00, 0x0) [ 395.118541][ T3370] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=f2.a3 [ 395.127946][ T3370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:52:49 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x5c00, 0x0) [ 395.457515][ T3370] usb 2-1: palm_os_3_probe - error -71 getting connection information [ 395.466165][ T3370] visor: probe of 2-1:1.0 failed with error -71 12:52:49 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x1000000, 0x0) [ 395.502005][ T3370] usb 2-1: USB disconnect, device number 3 12:52:49 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x2000000, 0x0) 12:52:50 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x3000000, 0x0) [ 396.036576][ T3370] usb 2-1: new high-speed USB device number 4 using dummy_hcd 12:52:50 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x4000000, 0x0) [ 396.277385][ T3370] usb 2-1: Using ep0 maxpacket: 8 [ 396.317012][ T3370] usb 2-1: too many configurations: 33, using maximum allowed: 8 12:52:50 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x5000000, 0x0) 12:52:50 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x6000000, 0x0) 12:52:51 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0) 12:52:51 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x7000000, 0x0) [ 397.037346][ T3370] usb 2-1: unable to read config index 6 descriptor/all [ 397.044523][ T3370] usb 2-1: can't read configurations, error -71 12:52:51 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x8000000, 0x0) 12:52:51 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "74318aa08e0993e51f0e6353f35678d3fec390411db841044b257ad10a5c496f811a4501142b3ed585bcbd2e3ff15388880c6c7cfeff2f96c48433a4f60ebb"}, 0x60, &(0x7f0000001800)=[{&(0x7f0000000100)="e5ad6bd31aa2c360d93b879788a8", 0x1000e}], 0x1}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x2, 0x4) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x2, 0x0, 0x101c, 0x1, 0xa}}) 12:52:51 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x9000000, 0x0) 12:52:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x5}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x5c}}, 0x0) 12:52:52 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xa000000, 0x0) 12:52:52 executing program 1: r0 = memfd_create(&(0x7f0000000040)='4\xacXrcO\b\xc4ut/eve\x94\xa1m\x1e\x12\x8ai,\xbeTnt#\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46000000d2000000000001000003003e0000001000000006000000001e40000000000000000000000000008b000000001000003800020000000000000003"], 0x44) write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0, 0x19, 0x0, {0x51, {}, 0xcc}}, 0xa0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000ed03020325bd7000fbdbdf25b9720aedb5d7e39be99c5b5011c5dd61910dc29dca92cbf42542dd4251bbb372aedef96710fec8f4daa04f09e29c6fd4d1345d2031f2ff2076cd940f393d26fb92fa98c5282a63f3b59484b0c94d"], 0x54}}, 0x4000) 12:52:52 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xb000000, 0x0) [ 398.222999][ T9304] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.1 proc:/self/fd/3' not defined. 12:52:52 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x3, &(0x7f00000002c0)=0x0) openat$ttyprintk(0xffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x250181, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80400, 0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f020000000000000000000000000000000001000000", 0x38}]) 12:52:52 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xc000000, 0x0) 12:52:52 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x1, 0x0, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x5, 0x4, @tid=r0}, &(0x7f0000000300)) r1 = openat$proc_capi20ncci(0xffffff9c, 0x0, 0x80, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0405405, &(0x7f00000001c0)={{0x1, 0x0, 0x200, 0x3, 0x9}, 0x8, 0x8000, 0x7}) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_MTU={0x6}]}, 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4810}, 0x40084) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) 12:52:52 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xd000000, 0x0) [ 399.101908][ T9317] IPVS: ftp: loaded support on port[0] = 21 [ 399.116335][ C0] hrtimer: interrupt took 192214 ns 12:52:53 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xe000000, 0x0) 12:52:53 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x10000000, 0x0) [ 399.767125][ T9320] IPVS: ftp: loaded support on port[0] = 21 12:52:54 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x11000000, 0x0) 12:52:54 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x1, 0x0, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x5, 0x4, @tid=r0}, &(0x7f0000000300)) r1 = openat$proc_capi20ncci(0xffffff9c, 0x0, 0x80, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0405405, &(0x7f00000001c0)={{0x1, 0x0, 0x200, 0x3, 0x9}, 0x8, 0x8000, 0x7}) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_MTU={0x6}]}, 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4810}, 0x40084) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) [ 400.112190][ T8722] tipc: TX() has been purged, node left! 12:52:54 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x12000000, 0x0) [ 400.525470][ T9373] IPVS: ftp: loaded support on port[0] = 21 12:52:55 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x1f000000, 0x0) 12:52:55 executing program 2: fchdir(0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0xff, 0x1, 0x0, @ipv4={[], [], @remote}, @ipv4={[], [], @remote}, 0x1, 0x80, 0x1f, 0x1ff}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40800) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40449426, &(0x7f0000000200)={{}, 0x7, &(0x7f00000001c0)=[0x80000000, 0xde00, 0x80000000, 0x8000, 0x9, 0x8001, 0xff800000000000], 0x1000, 0x4, [0x4, 0xfffffffffffffffa, 0x80000000, 0x1000]}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r1 = syz_mount_image$jfs(&(0x7f00000002c0)='jfs\x00', &(0x7f0000000300)='./file0\x00', 0x9, 0x8, &(0x7f0000002640)=[{&(0x7f0000000340)="d3eb3d5722e62fd76407d085f1222ad9134fb06c63b7c82a7438c23052c84fcd9c0b628a26dac06ecbaf259397e446e3275a1393ffe697e1f184aec29ffa185622603ba412f1d95f8d79ca7ded5b1c23ad939bbb265390d5", 0x58, 0x3}, {&(0x7f00000003c0)="2c71def95ff2d404a8b9212a3c6ba4071f545bfd842f2f7d8e9e265405de2ee87548d056903fd2ea318cc0c4b51f292945352a74e1c27655347befaedbb04651a03ee246b927b186294eeefb5490ef2556f902f5aa0ec0270d630cbe923d9a5b2fd794e07a7a9f1ba352e1678e2211b494e13c99bba14444cd7637f4a8cddb849060f87dc9e4d7a3867fa8c3ea8afc5e2de6abde8535a2094c89ff4a027259ef2d7f5311f1700eb9e6414a97959aaae132676b3446abcf6b7f11c499ed216807707d81a7af19cd896c2048469b510a48d9", 0xd1, 0x3f}, {&(0x7f00000004c0)="76e1a62424374f43aeadcd63852b8631f9098ae5b938efd802f4772481aa5d8fdb87f5a623c1f17d1bba3f214d90b85fdc7026c2d7e82e951408179f18f1688f6c5a631ee530db00f238bc6b195977f3c8fc6cbae72cacf8a9ae4293d6fc18f10e665ab5c787ff6c0fe648c47c9f10a625dbc75e17ea5f87bd99f6bfa7322a276991ce0e0b4c5a78cb68e575906298c6d90451404340e8972a931e19d29a2bff403dc71e7973b3c457e783ad507d2838a8d683ac650ae1375fcd7963f5ed0a6ddd7cafd85ae7264606f689e978cbac1de27d1019cf855a8af44c533e385cf92e911acbb58099ad054b7d95661f612ba7b1bd31f378ba82f044fb246b743d038f1be29451ce60ca380de6456e57294666e4aa53bcca767b0e7390bcc3dcc166fe65a69a5deb110cda1659165d54580f6460617817d1fcd4412d881df6ea7804f1210cc3ee11a5853af89e2ef15f87bc18b4fff24865c95736148538a303fa4bfca28a9b66d33e4f0d344dc0346d368a92bb8c54b5d1eb359307cb0d9c5552957c00bbf1df30445c3d811d8ccbc350eb4b52a5fc72152ba1b6764f9714f21e01be1bdee37f28b889b8eebad3f1040427ecc3f55df148bea9dd3939a9f90385f918e68387c9fe0549c37e18f42bea1e3cf969310c9efeb1e0283bb0054a11862fb9dc75bbaa75fe5def6b6ec6f359dcafda96203ddc69157bea9f071edaabecd8639b598a0d78081b7b6d0ddffb0ffbbcac52066c90b0fc477616931be778a4b346b1e71cadabf7f5ce206500cb7dc202b096fa40443f1e79780f5d05e6c9d369d3fd4d82e11f417a56e9dda2eb8056994d37bd5ece36ea9b172cbbc52c75760433fa5b23177fb40d06e3e1e9bdce892c44052c70549fc2165201ab7242decac56619b1327776c368514d47ec5a2c0db171ed267ec9c85eda704598bca5bc2cdf58a6b5c3e2a2f12b93ee32bbb16d6a11cabb8799caacd5b13267304ea9ed1cf635521eab2479472bb8c382fd2698132c1ef3aee29fb45d8c075d74d79c5e1446a58a373f18eb5829ac91212595aca94c08bd2db5feea5d9687838987998d85dbef185e3eb6501dd9d2d123b46f58d32580391f06f0175a3f7a49e771d5e919689a2902dec678d6424d6c9f7d94b324c296c3c101eb330682e91b73a3392776f194cb61b0c0deec24c4f5a5c32447f47a1b902e40fa9ca132be520d49162983e6b52fcb0e2d2e0123a9fe72291d56bbdde9dd4d17ee8dfac28096a0a5c57f348891eb9f8a5b66ac9d2cab1809c69bed2e25c791c904744b0496d96b3ed6d331fed37eb015906f4d98d30f748a1b2d7944945899fe28abfa283f1827d6beabb966b45456ee6d08fbe2e5802864bbdf78aeb1c2a6d37d0faeda3284d11e52782e902cdae58d12e3109b0e24e93f9bec4a60984b87aa55438c0f9ffb293518b4ae6868e7a0addeb774168442567a8b9eb4719fe5754f8674f9fa120b7b1cb7f551ec0c03c0e804f5611ebd933e125bf42613d1cb36a1dd7858ff7efe72ea8f1ae3dd9e0b7f6b76ea90f5ed58e167fc15d65087b5083e1ad559d7c3cb14806f111f5815741b3cb903b71ca0cc32095811e63039bb9c5cbf297677393d1a5aa1c209018ed0fafac3e683c9e3e5976b228881e51e8c2be4c97adf24ad89b1fed29905c12c734a73e845eea2ed737c56be2d6d7f3690dc7e4b7b0a64c58ed5a0009231ac3eef7cb07ddcb8000c2001e5a448d8fd6be0c4ab8e2f1f4de491f26a4386a5dfc762f41e4a4078ff277a702c4b6029a07d5259af5571be80e0a7e08ffcc7cca2064e0f694d466f20fed2b7daa382c67823f0816b59b469a67db5910068a894e9c4bd909ac8cea0b2be9509a2b5cb2170dfbae6609c6182687b326ada70703acc9d090a4e8c35a104909f2307963967eb9acbc07e56d380177877df7bf481f0c669e5f3be8e37af2ca9e68084d94237a091347a0c5313423266873e07f2727a80593b9a63d4956cc3e3d9baae0ec6849fc54fd2e62dca686de45788d093987916b07f3decc2b69ea41a534dd646c61320525bb4440f8a78adf4fbbc937f421322af019f09ad4d9eb36338b8f2f7bc6f1a8a8c076a3e789f3997acc5c764d9d069e80b6a20113bcd4cf9fc9ab80631b5cba6592cf99396450ed992b847ff7d5ffd1f2d67e91ea30991905532fcbc750c60fba04c3715476faf3925a976865ce97acd7adfee7355964f26a5194de0e15645ac6b910eaa76a8d2368fb35c1be45b4d4bc547f844acfc908c657106c7bad0d31725b35f9219444100b9d53cbb44a2d0d33b789f36cae90459cff26b19a8f38fabdf357a338832c237240338792b2e43a4521d7e01b53200c6a49999fc18864c4b8fdc77db2c94ebc156c34ac9f1a422aa44bb48d0bdbf56c5c6be85e56ae901cbb8be57c21c8d616f2fd4bce7651e29946d976d48c7a71879260415a465724cde4b5d5e3323c4d8f07d935ab500bdfeeb8487ca51c141821f2e18e84fe6beeef614ef349bf1607ad6aafb6c510bf2e13ef0cd143f8238338155e976746dfc958dfbacb3642908cf2065f6328fed214b4f7750ca14ce487bcf3b0a4dbe5e5a555b91256d1e93a37ae019105dd386c01ea8a08adc4f2275d04da7bbffbc4484d9a0a4759d69022ddd376df56dcd935dd621278f00a601394214b89379bf81bdc5c054a6d1539f7167b9ead05a13ad92b74d3c79fd48d33bf15741c7b8039a9b0efd8ab2b9e0841dae32307e0a0936e5235555dd69ad7d31258ae55d5a8331dd3fed6bc2121c50d538cda441b206d63153e7bf764c8f71483648efb3adff1f06b05e0f7aeb818afa0d9fb72ef7881fe5cb8879ae31f4a0e7a8b1ab2ca12039a0834dbd6ab594ba2e25d9a8ffac80c9fc6e6e3301b2ea39957ace23814133652b443cf235dd9eb72f2d2e3ee868b88890ab972c055a0002dc6b07d958edeeff08abd856e28f42b407e02795026e278fc74360c5b236a9ebdf9c777ad1168f88516778d49a1d7294304f6305eebb7c1c41a306088d93417394be326a6ab1e3daf459766e5ea44815b07268bd2e19d6a8fc8a40a0431927eaef980cd337b03c6af33e22de4b2474f1a672810b9de29c5fe8e6d44583f666dd14aa14a43646c5da0afd4909b57082f2bf32de6021199f2501b07a660af8dc06552f08bf105a5bfa66dd321c3aaad5c234805b4b272cd82e62aa037b8e7ba0b38ac0b139512a100e6c305b64f1895e888ba8fe75f5f693c45c4ac809063b735410f3ec972de4166acbc7272c8bc3ce779b04aaa2e068a7528ec0b2d3607da445cfa95332548dce2bd56ef6f48b397dc4dacde99a330deeacfdf3305f2134508337260e407d5254e67ebe5850fa4d270966b54772e72321816a905745e9d99faac7b2a44c7c622878b2cf9fb3bbf2bd4942b524299cf99f042644d1c7387372919080ae730bec7831fd571c650e61adca65cfb11d310b37fc889bdfadba9a46eac2f3193d0a5a272138888b49e2edf994ba4c17091204da23b02b24d80a5c71bc35d4ea72dae09b5cebc20420385e984e6e0f1ad81a2307eeb1b319ac1a837d10b48bc122042bc7743d5f34b5356effbd62bdf130445b61f532c18639ce9e0790ae168d5bd07927700349b68b1b238b488dde982d4a34bb48bdb2879e791b3517ade3f45d4fe088ad02ecd02cbee1089f526f608229dcadb3f75de8a5267fd9646c8c78153b54478e304bb19a15b6ee7fa910ce0decfe1c5155edf25903e487bc8434d9c8b41a884dc6a6838d228790cfd8f6f08db535ebb92449fca50dbcf499b5498e7c168af8a7b0fe9ab4577a277a71b816b0e2337c3f745d1dcf9cb74c8c67dc4a8333c0948863017079ca2d2f773925f907f9867668c53f9018dd24618d52edb681baf5dfce7c2799827c5272222f9d91198cb08897e62b63473a5f4887e67be25289578efa2cd49265d08e74248235965e04a18baf5b11a4b8ac9c4b14677661287609356bf27bcb3ca95091c6c28d76af756f9f29207eb0c084f82ae178959da888a52e2125f0cfc1484fde6997082f1c8a280eea5705685ea85f95935f04a9b2ac39eb19e452c2d92f8508650d6a026e0cce18a3d8f854b8d6880afe7395a8fcf20369e7187c1a7d1dd25b22c12ed6b9315b6c170e787ae30ac7cd60782c29441b8460c0271b3e87de8b81cf669ee4c18a0437f59be05ebce8a8fe5ea180f893033719fafeccae171cc3c0b342af4f31a65542fe19bb4759536ad8f72ade72756a22ff293864f24c0a9a6da3427616537a5af905124defd1f6efe303a3dd119d0604e186ee039171a9e72aad579898135dc05417960c814dff177837179c73a1b92bc2c438e65b87a5a53006607f7f732d502de6971654d5981b0cc69aad00508f10cc8aec259ee81f1c4698f0926eb8cc8f93dfd53f9ce944c65f92f5592b3347519d4c498cbb9dcda71df7505134ed0e0e2f1edb6b8b90773615b67b9bc6d2e7343f1ced8f836fdc61d198dc0cc3f330ae4b279a9f1a939952e90905b68b269ab9086f03dea539c5136620d0d9ae5221c837571e0fc06506b8f0ee5cdfb42016d29267414c7b7372d627a76f708de5921f886ee7f026b1fba38044e71b77034c2fa308a49c4869e1e339b0ed1a6c28aa56db247234090009ff3423edd1f32cde7301aa04ad02464c1e6954bbb98ef3d0824456e40bd22d28f674918aa11bccd4f149b81806864c7a2f8eb25d10a46c272f948703c9ff39ab063383f317003a680c1faa0e3199d0270b3d3b642cc68c0118a7b3b64f6dd94867a42d13d2e4f8105a8ac0b467a46c78b8eae2c88cb72fd4d301f85eee44673a19bc846eb179abf74379219aa6a734e108fcd743f24a3b41875e5f9a9d4f08680642492d7ab44b995ecf7017696162e277bc811235d2164ea9a460756c3d4d985ba6c625798b5b8c0ce11ca9e0e9efea0f1dfd595e4ec0ef2e756b5f950551fc7dd49a3d186c80e8fc07a1ea016e438357c64273bed5a95eb946b1811f7f5331af44b2dc165f87ac0a16033fb1bbe88b8bcf9bc1d2937e3115699c8a6369eaee4a7d0bd4b44d912ae97c42239222eff0e9a9b640d9d3c22216ef62735f60d9b65226b891d0850e8f2758ccecf6160ad419aa76fa0a6a7b95621231f8fd038fc00b0ee01975c9cc91e29f96b647c016c07215fbc6ace641b8647121cd36b4a484f1f0017f3c2d705a979739dfb975ea0d6b201d04ee25a6fb242a1137ee7b404feecf97854343da4c0e114a8539866f25ae9f33db9c3381db2c3ea5afb453a529420ab2da3d681a67ecf5eded310a0bf5b553f61759679969bb2bbc8735716025ffc59998203136f42e4b63fae305e1b3cd15b1a7000b9c2f3423a241059507966d60cbf8ffe56f6367294a8f2758456697cf148b8b69814fe4623413ff16c2a17b792c7b76f2a950c37caae905d6dcc016f2ed7b629adfb1b258643249441e92712d91d1b8dc1ff1c51f94febcc941bdf00213d3fdf830646a4bcb00f6f61f0a083c9847ee3648ee960c17dffa444fae2a60ca99a7689a4ed63983a18874e90c34039f9de278bb33011c8a2854822fd312a34d1223a955a0ee1f9a02def321f140ee133404298eb31ace3842d1bea34b8d2a34c34bd044f3f3c1c89af212ced6c9dcb305c09443dc66edf30c5421cb5e1325d33e926c3ded69e453db31984424b13ac1a891045edde3ddc5632f69526922d7098be35c73bd528de6014aeb6de8f617432c5b4ca4fbffa43b0ba267787f53ee7300ca15341807c79eb6cd74", 0x1000, 0x4}, {&(0x7f00000014c0)="e6f68e31010c15fcee00d2bf79d28bc936e1d8c62fdc3f", 0x17, 0x7ff}, {&(0x7f0000001500)="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", 0x1000, 0xffff}, {&(0x7f0000002500)="71d9698f05b6991dd6593819", 0xc, 0x10000}, {&(0x7f0000002540)="0bbc5bf56e020b8d2672800095a22b445435f66d0093", 0x16, 0x9}, {&(0x7f0000002580)="8263794e28f4252516461924abb20e7a23353f309e0443c55693d54f2348372d0a144a6bb0692ec7f5f534c965589fb8a82870af075406bffd94fcf17da7de730f45306f9f14b6c846ad067ac3bf9af4efa8400395800934279b136cd9406e91fd4213e86a0cd9f5310f0dfeaafbfdf7f88b2188da02b2ab0e0d002c543063f153899364bbe9748948c44c00", 0x8c, 0x33a435e}], 0x1040420, &(0x7f00000026c0)={[{@umask={'umask', 0x3d, 0xfffffffffffffeff}}, {@resize_size={'resize', 0x3d, 0x7ff}}, {@resize_size={'resize', 0x3d, 0x3}}, {@grpquota='grpquota'}], [{@euid_gt={'euid>', 0xee00}}, {@euid_gt={'euid>', 0xee01}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type', 0x3d, '(@/{$'}}]}) symlinkat(&(0x7f0000000280)='./file0\x00', r1, &(0x7f0000002780)='./file0\x00') r2 = syz_genetlink_get_family_id$smc(&(0x7f0000002800)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x3c, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40840}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000002900)={r1, 0x8e8, 0x3, 0x6f}) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002980)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x44, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crontab_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x44}}, 0x8080) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x5, 0x3]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x40008) perf_event_open(&(0x7f0000002bc0)={0x1, 0x70, 0x7, 0x9, 0xfb, 0x81, 0x0, 0x8, 0x80, 0x22ebf43b818b77e2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x1, 0x5}, 0x10, 0x7, 0x1, 0x4, 0xffffffff, 0x8, 0x8}, 0x0, 0x1, r3, 0x2) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000002c40)=0x2) ioctl$VT_ACTIVATE(r3, 0x5606, 0x8) sendmsg$nl_route(r3, &(0x7f0000002dc0)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002d80)={&(0x7f0000002cc0)=@ipv6_deladdr={0x84, 0x15, 0x100, 0x70bd2b, 0x25dfdbfc, {0xa, 0x8, 0x55, 0xc8, r0}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_CACHEINFO={0x14, 0x6, {0x3e7, 0x9, 0x8, 0x3}}, @IFA_LOCAL={0x14, 0x2, @remote}, @IFA_FLAGS={0x8, 0x8, 0x40}]}, 0x84}}, 0x48881) r5 = syz_io_uring_complete(0x0) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000002f80)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002e40)={0x100, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0xffff}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x90) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000004600)=""/4096, 0x1000, 0x1, &(0x7f0000005600)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @empty}}, 0x24) 12:52:55 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x1, 0x0, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x5, 0x4, @tid=r0}, &(0x7f0000000300)) r1 = openat$proc_capi20ncci(0xffffff9c, 0x0, 0x80, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0405405, &(0x7f00000001c0)={{0x1, 0x0, 0x200, 0x3, 0x9}, 0x8, 0x8000, 0x7}) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_MTU={0x6}]}, 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4810}, 0x40084) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) 12:52:55 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x25000000, 0x0) [ 401.354297][ T28] audit: type=1400 audit(1599828775.558:9): avc: denied { execmem } for pid=9402 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:52:55 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x2f000000, 0x0) [ 401.814768][ T9406] IPVS: ftp: loaded support on port[0] = 21 12:52:56 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x1, 0x0, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x5, 0x4, @tid=r0}, &(0x7f0000000300)) r1 = openat$proc_capi20ncci(0xffffff9c, 0x0, 0x80, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0405405, &(0x7f00000001c0)={{0x1, 0x0, 0x200, 0x3, 0x9}, 0x8, 0x8000, 0x7}) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_MTU={0x6}]}, 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4810}, 0x40084) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) 12:52:56 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x5c000000, 0x0) [ 402.979398][ T9436] IPVS: ftp: loaded support on port[0] = 21 12:52:57 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xebffffff, 0x0) 12:52:57 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xf6ffffff, 0x0) 12:52:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7000, 0x2, 0xffff}) ioctl$TCXONC(r0, 0x540a, 0x1) 12:52:58 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xffffffeb, 0x0) [ 403.966313][ T9437] IPVS: ftp: loaded support on port[0] = 21 12:52:58 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x34, 0xcc, 0x17, 0x8, 0x82d, 0x200, 0x69a4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0xda, 0x2}}]}}]}}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000001c0)={{}, "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"}) 12:52:58 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0xfffffff6, 0x0) [ 404.597271][ T8718] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 404.747850][ T9437] chnl_net:caif_netlink_parms(): no params data found [ 404.850005][ T8718] usb 2-1: Using ep0 maxpacket: 8 [ 405.071063][ T9437] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.078429][ T9437] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.088196][ T9437] device bridge_slave_0 entered promiscuous mode [ 405.139204][ T8718] usb 2-1: New USB device found, idVendor=082d, idProduct=0200, bcdDevice=69.a4 [ 405.148508][ T8718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.156626][ T8718] usb 2-1: Product: syz [ 405.160983][ T9437] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.161139][ T9437] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.168232][ T8718] usb 2-1: Manufacturer: syz [ 405.177466][ T9437] device bridge_slave_1 entered promiscuous mode [ 405.179981][ T8718] usb 2-1: SerialNumber: syz [ 405.370358][ T8718] usb 2-1: config 0 descriptor?? [ 405.388385][ T9437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.414558][ T8718] usb 2-1: active config #0 != 1 ?? [ 405.430953][ T9437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.499087][ T9437] team0: Port device team_slave_0 added [ 405.515514][ T9437] team0: Port device team_slave_1 added [ 405.573382][ T9437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.580568][ T9437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.606762][ T9437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.627941][ T8718] usb 2-1: USB disconnect, device number 6 [ 405.842699][ T9437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.850005][ T9437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.876215][ T9437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.957423][ T8718] Bluetooth: hci2: command 0x0409 tx timeout [ 406.242265][ T9437] device hsr_slave_0 entered promiscuous mode [ 406.281101][ T9437] device hsr_slave_1 entered promiscuous mode [ 406.310114][ T9437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.318157][ T9437] Cannot create hsr debugfs directory [ 406.495610][ T8718] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 406.666007][ T9437] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 406.693056][ T9437] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 406.720374][ T9437] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 406.749942][ T9437] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 406.801609][ T8718] usb 2-1: Using ep0 maxpacket: 8 [ 407.078219][ T8718] usb 2-1: New USB device found, idVendor=082d, idProduct=0200, bcdDevice=69.a4 [ 407.088266][ T8718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.096404][ T8718] usb 2-1: Product: syz [ 407.098362][ T9437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.100846][ T8718] usb 2-1: Manufacturer: syz [ 407.111982][ T8718] usb 2-1: SerialNumber: syz [ 407.126092][ T8718] usb 2-1: config 0 descriptor?? [ 407.172977][ T8718] usb 2-1: active config #0 != 1 ?? [ 407.218570][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 407.227725][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.283935][ T9437] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.342220][ T8719] usb 2-1: USB disconnect, device number 7 [ 407.385781][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 407.395682][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.405539][ T8718] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.412860][ T8718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.498941][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 407.508323][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 407.518665][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 407.528157][ T8718] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.535355][ T8718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.544401][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 407.555375][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 407.655341][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 407.665888][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 407.676289][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 407.686751][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 407.753745][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 407.763722][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 407.773433][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 407.783340][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 407.792914][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 407.806849][ T9437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 407.905440][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 407.913839][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 407.972966][ T9437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.042955][ T8725] Bluetooth: hci2: command 0x041b tx timeout [ 408.077558][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.087602][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.159154][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 408.168732][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.199309][ T9437] device veth0_vlan entered promiscuous mode [ 408.215256][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 408.224747][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.259042][ T9437] device veth1_vlan entered promiscuous mode [ 408.344404][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 408.353784][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 408.363843][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 408.373436][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.397166][ T9437] device veth0_macvtap entered promiscuous mode [ 408.419333][ T9437] device veth1_macvtap entered promiscuous mode [ 408.484856][ T9437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 408.496449][ T9437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.507488][ T9437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 408.518097][ T9437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.531635][ T9437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.540260][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 408.549679][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 408.558921][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.568838][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.604556][ T9437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 408.615576][ T9437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.625680][ T9437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 408.636287][ T9437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.649644][ T9437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.670738][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 408.680606][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:53:03 executing program 2: syz_mount_image$exfat(&(0x7f0000000040)='exfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='namecase']) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x802008) 12:53:03 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) 12:53:03 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x68, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x4, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0xfffffffffffffffd}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}}, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000040)={0x0, 0x0, 0x10001, &(0x7f0000000000)=0x4}) r1 = socket(0x11, 0x3, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "74318aa08e0993e51f0e6353f35678d3fec390411db841044b257ad10a5c496f811a4501142b3ed585bcbd2e3ff15388880c6c7cfeff2f96c48433a4f60ebb"}, 0x60, &(0x7f0000001800)=[{&(0x7f0000000100)="e5ad6bd31aa2c360d93b879788a8", 0x1000e}], 0x1}, 0x0) connect(r1, &(0x7f0000000140)=@in6={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x3}, 0x80) 12:53:03 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x2) 12:53:03 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x44d}}}}]}}]}}, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00002900000029007c69a6410ce7bc8acadba5b98554d80af56a47dc272801ab80b64fbb"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0xe, {0xe, 0x0, "f845fad15fe95a4bcfe779c8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001d80)={0x2c, &(0x7f0000001b80)={0x0, 0x0, 0xc, {0xc, 0x0, "8852f32787000a97f302"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 409.601914][ T9731] exfat: Deprecated parameter 'namecase' [ 409.608013][ T9731] exfat: Bad value for 'namecase' [ 409.737097][ T9731] exfat: Deprecated parameter 'namecase' [ 409.743002][ T9731] exfat: Bad value for 'namecase' 12:53:04 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x325, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1aa74ec9c9208a8d0000b0"], 0x0}, 0x0) socket$inet6(0xa, 0x3, 0x5) 12:53:04 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x3) [ 410.119546][ T8718] Bluetooth: hci2: command 0x040f tx timeout [ 410.438636][ T8718] usb 2-1: new high-speed USB device number 8 using dummy_hcd 12:53:04 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x4) [ 410.679918][ T8718] usb 2-1: Using ep0 maxpacket: 8 [ 410.702134][ T8725] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 410.799214][ T8718] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.810453][ T8718] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.948376][ T8725] usb 3-1: Using ep0 maxpacket: 8 12:53:05 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x5) [ 411.071983][ T8725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.083524][ T8725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.093617][ T8725] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.106741][ T8725] usb 3-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.40 [ 411.116068][ T8725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.159759][ T8718] usb 2-1: string descriptor 0 read error: -22 [ 411.166334][ T8718] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 411.175707][ T8718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.267294][ T8725] usb 3-1: config 0 descriptor?? 12:53:05 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x6) [ 411.799400][ T8725] usbhid 3-1:0.0: can't add hid device: -71 [ 411.805728][ T8725] usbhid: probe of 3-1:0.0 failed with error -71 [ 411.876863][ T8725] usb 3-1: USB disconnect, device number 2 12:53:06 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x7) [ 412.172574][ T8718] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0x0 [ 412.180919][ T8718] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0x5 [ 412.189311][ T8718] steelseries_srws1 0003:1038:1410.0001: report_id 4086761984 is invalid [ 412.198092][ T8718] steelseries_srws1 0003:1038:1410.0001: item 0 4 1 8 parsing failed [ 412.207028][ T8718] steelseries_srws1 0003:1038:1410.0001: parse failed [ 412.214273][ T8718] steelseries_srws1: probe of 0003:1038:1410.0001 failed with error -22 [ 412.429383][ T8719] Bluetooth: hci2: command 0x0419 tx timeout [ 412.437524][ T8718] usb 2-1: USB disconnect, device number 8 12:53:06 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x8) [ 412.588159][ T8725] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 412.839061][ T8725] usb 3-1: Using ep0 maxpacket: 8 12:53:07 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x9) [ 412.959812][ T8725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.971288][ T8725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.981827][ T8725] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.994895][ T8725] usb 3-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.40 [ 413.005700][ T8725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.113438][ T8725] usb 3-1: config 0 descriptor?? [ 413.148120][ T3223] usb 2-1: new high-speed USB device number 9 using dummy_hcd 12:53:07 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0xa) 12:53:07 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') write(r1, &(0x7f0000001400)="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"/3584, 0xe00) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000180)={0x4, 0x4, {r0}, {0xee01}, 0x209}) gettid() fallocate(r1, 0x11, 0x0, 0x10000) sendfile(r1, r2, 0x0, 0x11f08) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) execveat(r3, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000004c0)=[&(0x7f0000000380)='!+\\\x00', &(0x7f00000003c0)='\').\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='&\x00', &(0x7f0000000480)='\b\x00'], 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @initdev}, &(0x7f0000000100)=0xc) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f00000000c0)={0x1, 0x88c, 0x1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x646480, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x108c}, &(0x7f0000000280)=0x8) [ 413.398170][ T3223] usb 2-1: Using ep0 maxpacket: 8 [ 413.486730][ T8725] usbhid 3-1:0.0: can't add hid device: -71 [ 413.493145][ T8725] usbhid: probe of 3-1:0.0 failed with error -71 [ 413.538958][ T3223] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.550576][ T3223] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.571452][ T8725] usb 3-1: USB disconnect, device number 3 12:53:07 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0xb) [ 413.872265][ T28] audit: type=1800 audit(1599828788.087:10): pid=9805 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=15800 res=0 12:53:08 executing program 1: r0 = memfd_create(&(0x7f0000000140)='\vbm1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff\xc4\xf3yz\x02\x00kM\xb2\xd4k\xa2\xcc\x19\x1b\x12\b%\x92ACa\xeb\xf3\xe6L\\\xbcZ\x8b?\xd9\xc3\xf5\xbd\xb7B~D)\xfb\xa5x\x119Q\xbc1\xeak\x1aj`\xb5\x8e\xd1H\'\x11\xf2P\x01h\xb8\f\xb6\xd6\x96\x9d1\xedo\xe1\x8b\xcc\xf5\xba\xa4a#efb\x8f\xd2\x9a\xbf|\x15\xd7\x16S&\x18\x89;\xf8\\\x80\xb08\xec\xaa\xdb\\\xaa\\Y7S\xb9\xb3\x17T\xfb\x92\xbac\xe6\x95|\xbfB', 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[], 0x72) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3c, 0x0, &(0x7f0000000100)) [ 413.948493][ T3223] usb 2-1: string descriptor 0 read error: -71 [ 413.955084][ T3223] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 413.964581][ T3223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.068626][ T3223] usb 2-1: can't set config #1, error -71 [ 414.076729][ T3223] usb 2-1: USB disconnect, device number 9 12:53:08 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0xc) [ 414.296801][ T28] audit: type=1804 audit(1599828788.507:11): pid=9805 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir607899646/syzkaller.qK3h5k/3/file0" dev="sda1" ino=15800 res=1 12:53:08 executing program 1: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x3, 0x1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="5500000018007f09260000b2a4a280930a80000000284308", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:53:08 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0xd) 12:53:08 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0xe) [ 414.713095][ T9823] __nla_validate_parse: 9 callbacks suppressed [ 414.713133][ T9823] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.1'. [ 414.729114][ T9823] IPv6: Can't replace route, no match found 12:53:09 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x10) 12:53:09 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x11) 12:53:09 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000180)={@link_local={0x3}, @empty, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "090011", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request}}}}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004140)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@multicast2}}, &(0x7f0000004240)=0xe4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004b40)={&(0x7f0000004280)={0x88c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x3, 0x6, 0x0, 0x1}, {0x800, 0x3, 0x0, 0x8cd}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c, 0x4, [{0x3, 0x6, 0x24, 0x3}, {0x9bc7, 0x1, 0x9, 0x438}, {0xfec, 0xff, 0x20, 0x49cb}, {0x101, 0x20, 0xfd, 0x20}, {0x2, 0x0, 0x7, 0x822}, {0x21, 0x80, 0x3, 0x9}, {0x4, 0x0, 0x6, 0xfffff668}, {0x4, 0x9, 0x2, 0x3f}, {0x2, 0x0, 0x6, 0x7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x3, 0x20, 0x4, 0x58cb}, {0xd2, 0xf, 0x6, 0x2}, {0x53c, 0x6, 0x4, 0x9}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xa0}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r1}, {0x1c0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20000041}, 0x80) 12:53:09 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x12) 12:53:10 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x25) 12:53:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x11, 0x3, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000300)=0xfffff941) sendmsg$nfc_llcp(r3, &(0x7f0000000580)={&(0x7f0000000080)={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "74318aa08e0993e51f0e6353f35678d3fec390411db841044b257ad10a5c496f811a4501142b3ed585bcbd2e3ff15388880c6c7cfeff2f96c48433a4f60ebb"}, 0x60, &(0x7f0000001800)=[{&(0x7f0000000100)="e5ad6bd31aa2c360d93b879788a8", 0x1000e}], 0x1}, 0x0) getsockname$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xffff}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa}, @TCA_FLOWER_KEY_ETH_SRC={0xa}]}}]}, 0x4c}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0xb9b7c7bc3b66d3ac, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000380)={0x0, 0x1, 0x6, 0xe, 0xf3, &(0x7f00000005c0)="f0d09b1896c8dfb4391355bf363e9e2a10e61e59619404547dac148812dbcc4109c31c9e26f0f3afaaee4afcd31dbfbeadcf908ed61cc5bc9c88a679a4010e23a05da25aef5a27b48ba1c1e6983067c58a6efa43ded630ae471c82530beb6dfd5ecc28c761394e761688c39eb09bdbe35c770a3f4f4f05489fc45a1f9509d34b61d66792fb51e1b86a0a6cee892ba12f0987a6c57e1dcda8225ca040aec60aa46eec63d728bf0174c4b7d63bdff5584c92ba6595913c648791875b4c43f4277579e84826ccd11ee1110429039bd06efb36ef98b63e9d292a15312b896638ffd08589b3acc3af64d829c9a94cd0c3d1d8e10b7398c6dd6cd750606b471ebc468dda53c891fedbff1baa303461e00d996dcf1de7151c0ec1ecf26896ac410d96a1afed535ad0c796fb383ccc5ff25717369b4ea90503c01a41dd68953639411f8fede9329cf75b0161cd3db01bdf5b5b0f5ce530b081b6d233fdb3e9f6867cb5c4380a41551171cd61f43a29128151f7000d1d50f78c80504e08dec247559863677514d7ccdb30459ddb333e82ed6ef0c43ffab9d53618e3986795832a3253e547a4f518d11c7a4daad1016e0576e8017fd1c9e73fc72d2cf2d6f3caa41d44e593188e0558ff11b9471e1e2722a6d17c9f0849f8a2003a46111660c3b2de3865a0d6e3f0b6b0f460210e00ed36391b0f1be14617077820b55860072092e17ed4835da5290aec29c4c5325c01ad1322b727d40a8d368f512a12239a7ba4ee3c54324e75d1bc6980e658fc183d697bbdbc7f66b2593df7e403c88d9be558b99248d38bef7de7e47036b00a906b6cdf9100b9f19a21966aa3c4f78e716a06d9f1274bdff7fec679616a0c475272203525a6c5aa5663a2ea15c64b0e09c23bed4d9300c42abc76e7802ffb3c53da96641457113706a2ade9a0ede22682ade383fb919122e254a8305ecc6f39297b1b5b9a186fb59f39f7a74d2995c653557af0e3e6604cf991487816a3427b9a917b40f927420b23cd55a7055a590b793dbc2c7a1cde756fdbf3f3e2f3b01b824e4dde80686f287ca96ed47d9c827eaf409bfc44bf7e07441d3fc67a957a0f3642008739cb673dc23bbb4751b1564d8ea945a23b97300f1c315907ae323c164c9e17755d378a22e72b105993aafc8928a2a4a17b8d4208195f1dec5bbc2d9236e8b51b8b6a29dffe8744c45148861076d88a28261fdb0cba2c207269bf6e27c2d24b14725ff769c70d1bd53b4d5d75deffb32dccc755b3feb0346a8011ff87db68b59305842e4f6d2fbf3602c20d64d28a13d884a444fa69a39909eb02bb20d69d8c3ede0bee775293d55f0292c922231f0298115e517af6f44b6975ae1dcff065d6cce7e4f47d9cf11ec9c964ac203ee1e713a3609d56e2f0a885eca3358d49fb2b2a1c3e5cd82f45120bd77a5a469fac81a1c4c70c"}) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) 12:53:11 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x2f) 12:53:11 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1a3) close(r0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8937, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x1000, 0x5ac, 0x4, 0x0, 0x1f}, &(0x7f0000000140)=0x14) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x1a3) close(r3) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000000)={0x0, 0x3, 0x9, 0x6, 0x8000, 0xfffffff7, 0xffffffe0, 0x6db, 0x1, 0xfffffff9, 0x7, 0x2}) [ 417.291083][ T9858] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:53:11 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x5c) [ 417.387627][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:53:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000001c0)={0x80, 0x9, 0x0, [{0x4, 0x401, 0x401, 0x81, 0x1, 0xc1, 0x81}, {0x0, 0x2, 0x28a, 0xff, 0x20, 0x2, 0x9}, {0x80000000, 0x3, 0x8001, 0x5, 0xb0, 0x2a, 0x8}, {0xfffffffffffff05c, 0xbb, 0x8, 0x40, 0x8, 0x7, 0x1}, {0x1, 0xbc, 0x9, 0x6, 0x5, 0x3f, 0xff}, {0x4, 0x7ff, 0x7, 0xfc, 0x1e, 0x0, 0x1a}, {0x4, 0x7, 0x5, 0x80, 0x1, 0x5, 0x1}, {0x3, 0x72, 0x1, 0x26, 0xd, 0x6, 0x1f}, {0x0, 0x9af1, 0x0, 0x89, 0x3, 0x2, 0x81}]}) r1 = socket(0xf, 0x3, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "74318aa08e0993e51f0e6353f35678d3fec390411db841044b257ad10a5c496f811a4501142b3ed585bcbd2e3ff15388880c6c7cfeff2f96c48433a4f60ebb"}, 0x60, &(0x7f0000001800)=[{&(0x7f0000000100)="e5ad6bd31aa2c360d93b879788a8", 0x1000e}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4890}, 0x11) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x28, 0x0) 12:53:11 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000002700)='/dev/ocfs2_control\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x800}, &(0x7f0000000140)=0x8) r4 = socket(0x10, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100000000000000008000a0009d35b4f000000b0b9cad4a128"], 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x64010102}}, 0x1c) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 12:53:12 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x300) [ 417.883782][ T9873] SELinux: Context system_u:object_r:auditd_unit_file_t:s0 is not valid (left unmapped). [ 417.897823][ T28] audit: type=1400 audit(1599828792.107:12): avc: denied { relabelto } for pid=9872 comm="syz-executor.1" name="NETLINK" dev="sockfs" ino=36823 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 418.015278][ T9879] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 418.051434][ T9879] device team_slave_0 entered promiscuous mode [ 418.057741][ T9879] device team_slave_1 entered promiscuous mode 12:53:12 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x500) [ 418.064334][ T9879] device macsec1 entered promiscuous mode [ 418.070238][ T9879] device team0 entered promiscuous mode 12:53:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000100)=0x18) [ 418.115958][ T9879] device team0 left promiscuous mode [ 418.123178][ T9879] device team_slave_0 left promiscuous mode [ 418.129329][ T9879] device team_slave_1 left promiscuous mode 12:53:12 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video1\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000240)={0x0, 0x8, 0x3ff}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc050560f, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "db5c7f67"}, 0x0, 0x0, @offset, 0x8000}) 12:53:12 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x600) [ 418.803692][ T9897] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 418.821170][ T9897] device team_slave_0 entered promiscuous mode [ 418.827629][ T9897] device team_slave_1 entered promiscuous mode [ 418.834072][ T9897] device macsec1 entered promiscuous mode [ 418.840211][ T9897] device team0 entered promiscuous mode 12:53:13 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x700) 12:53:13 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000000000000779da87520d3ca317028a816f7edae0006040000000000cb2149d57d1a0a4ceba49769f71e00eb49bf6df02967"], &(0x7f0000000240)=""/140, 0x26, 0x8c, 0x8}, 0x20) [ 419.005793][ T9897] device team0 left promiscuous mode [ 419.013351][ T9897] device team_slave_0 left promiscuous mode [ 419.019525][ T9897] device team_slave_1 left promiscuous mode 12:53:13 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x900) [ 419.355803][ T9906] BPF:Invalid section offset 12:53:13 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7fffffff, 0x101100) io_setup(0xffff, &(0x7f0000000000)) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)={0x1d, 0x3, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @pad1]}, 0x28) io_setup(0x6, &(0x7f0000000040)) [ 419.385117][ T9907] BPF:Invalid section offset 12:53:13 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0xa00) 12:53:13 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000002700)='/dev/ocfs2_control\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x800}, &(0x7f0000000140)=0x8) r4 = socket(0x10, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100000000000000008000a0009d35b4f000000b0b9cad4a128"], 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x64010102}}, 0x1c) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 12:53:14 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0xb00) 12:53:14 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7fffffff, 0x101100) io_setup(0xffff, &(0x7f0000000000)) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)={0x1d, 0x3, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @pad1]}, 0x28) io_setup(0x6, &(0x7f0000000040)) [ 419.882585][ T9921] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 419.899637][ T9921] device team_slave_0 entered promiscuous mode [ 419.906022][ T9921] device team_slave_1 entered promiscuous mode [ 419.912519][ T9921] device macsec1 entered promiscuous mode [ 419.918295][ T9921] device team0 entered promiscuous mode [ 420.041460][ T9921] device team0 left promiscuous mode [ 420.048795][ T9921] device team_slave_0 left promiscuous mode [ 420.054789][ T9921] device team_slave_1 left promiscuous mode 12:53:14 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0xc00) 12:53:14 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7fffffff, 0x101100) io_setup(0xffff, &(0x7f0000000000)) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)={0x1d, 0x3, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @pad1]}, 0x28) io_setup(0x6, &(0x7f0000000040)) 12:53:14 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0xd00) 12:53:14 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7fffffff, 0x101100) io_setup(0xffff, &(0x7f0000000000)) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)={0x1d, 0x3, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @pad1]}, 0x28) io_setup(0x6, &(0x7f0000000040)) 12:53:14 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0xe00) 12:53:15 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x1100) 12:53:15 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7fffffff, 0x101100) io_setup(0xffff, &(0x7f0000000000)) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)={0x1d, 0x3, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @pad1]}, 0x28) io_setup(0x6, &(0x7f0000000040)) 12:53:15 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7fffffff, 0x101100) io_setup(0xffff, &(0x7f0000000000)) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)={0x1d, 0x3, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @pad1]}, 0x28) io_setup(0x6, &(0x7f0000000040)) 12:53:15 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x1200) 12:53:15 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7fffffff, 0x101100) io_setup(0xffff, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000040)) 12:53:16 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x1f00) 12:53:16 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x2500) 12:53:16 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7fffffff, 0x101100) io_setup(0xffff, &(0x7f0000000000)) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)={0x1d, 0x3, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @pad1]}, 0x28) io_setup(0x6, &(0x7f0000000040)) 12:53:16 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7fffffff, 0x101100) io_setup(0x6, &(0x7f0000000040)) 12:53:16 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x2f00) 12:53:16 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7fffffff, 0x101100) io_setup(0x6, &(0x7f0000000040)) 12:53:16 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7fffffff, 0x101100) io_setup(0xffff, &(0x7f0000000000)) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)={0x1d, 0x3, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @pad1]}, 0x28) 12:53:17 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x5c00) 12:53:17 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x1000000) 12:53:17 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7fffffff, 0x101100) io_setup(0x6, &(0x7f0000000040)) 12:53:17 executing program 2: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7fffffff, 0x101100) io_setup(0xffff, &(0x7f0000000000)) 12:53:17 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x2000000) 12:53:17 executing program 1: io_setup(0xffff, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000040)) 12:53:17 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x3000000) 12:53:18 executing program 2: io_setup(0xffff, &(0x7f0000000000)) 12:53:18 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x4000000) 12:53:18 executing program 1: io_setup(0x0, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000040)) 12:53:18 executing program 2: io_setup(0x0, &(0x7f0000000000)) 12:53:18 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x5000000) 12:53:19 executing program 1: io_setup(0x0, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000040)) 12:53:19 executing program 2: io_setup(0x0, &(0x7f0000000000)) 12:53:19 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x6000000) 12:53:19 executing program 1: io_setup(0x0, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000040)) 12:53:19 executing program 2: io_setup(0x0, &(0x7f0000000000)) 12:53:19 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x7000000) 12:53:19 executing program 2: io_setup(0xffff, 0x0) 12:53:20 executing program 3: io_setup(0xffff, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000040)) 12:53:20 executing program 1: io_setup(0xffff, 0x0) io_setup(0x6, &(0x7f0000000040)) 12:53:20 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x8000000) 12:53:20 executing program 2: io_setup(0xffff, 0x0) 12:53:20 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x9000000) 12:53:20 executing program 1: io_setup(0xffff, 0x0) io_setup(0x6, &(0x7f0000000040)) 12:53:20 executing program 2: io_setup(0xffff, 0x0) 12:53:20 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0xa000000) 12:53:21 executing program 1: io_setup(0xffff, 0x0) io_setup(0x6, &(0x7f0000000040)) 12:53:21 executing program 2 (fault-call:0 fault-nth:0): io_setup(0xffff, &(0x7f0000000000)) 12:53:21 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0xb000000) [ 427.235172][T10044] FAULT_INJECTION: forcing a failure. [ 427.235172][T10044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.248824][T10044] CPU: 1 PID: 10044 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 427.257567][T10044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.267680][T10044] Call Trace: [ 427.271077][T10044] dump_stack+0x21c/0x280 [ 427.275514][T10044] should_fail+0x8b7/0x9e0 [ 427.280050][T10044] should_fail_usercopy+0x39/0x40 [ 427.285272][T10044] __se_compat_sys_io_setup+0x6e/0x670 [ 427.290839][T10044] ? kmsan_set_origin_checked+0x95/0xf0 [ 427.296485][T10044] ? kmsan_get_metadata+0x116/0x180 [ 427.301786][T10044] __ia32_compat_sys_io_setup+0x3e/0x60 [ 427.307453][T10044] __do_fast_syscall_32+0x2af/0x480 [ 427.312768][T10044] do_fast_syscall_32+0x6b/0xd0 [ 427.317727][T10044] do_SYSENTER_32+0x73/0x90 [ 427.322346][T10044] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 427.328745][T10044] RIP: 0023:0xf7fed549 [ 427.332858][T10044] Code: Bad RIP value. [ 427.337114][T10044] RSP: 002b:00000000f55e70cc EFLAGS: 00000296 ORIG_RAX: 00000000000000f5 [ 427.345615][T10044] RAX: ffffffffffffffda RBX: 000000000000ffff RCX: 0000000020000000 [ 427.353655][T10044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.361702][T10044] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 427.369740][T10044] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 427.377893][T10044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 12:53:21 executing program 1: io_setup(0xffff, &(0x7f0000000000)) io_setup(0x0, &(0x7f0000000040)) [ 428.138646][T10039] IPVS: ftp: loaded support on port[0] = 21 [ 428.644571][T10039] chnl_net:caif_netlink_parms(): no params data found [ 428.985254][T10039] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.993607][T10039] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.094056][T10039] device bridge_slave_0 entered promiscuous mode [ 429.163768][T10039] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.171541][T10039] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.181647][T10039] device bridge_slave_1 entered promiscuous mode [ 429.245971][T10039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.266958][T10039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.346219][T10039] team0: Port device team_slave_0 added [ 429.360360][T10039] team0: Port device team_slave_1 added [ 429.505779][T10039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.512952][T10039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.539165][T10039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.624924][T10039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.632247][T10039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.658539][T10039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.733537][T10039] device hsr_slave_0 entered promiscuous mode [ 429.746057][T10039] device hsr_slave_1 entered promiscuous mode [ 429.755829][T10039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.763690][T10039] Cannot create hsr debugfs directory [ 430.040435][ T8725] Bluetooth: hci3: command 0x0409 tx timeout [ 430.045043][T10039] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 430.082418][T10039] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 430.122204][T10039] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 430.155084][T10039] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 430.454664][T10039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.495764][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 430.504733][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 430.526500][T10039] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.551864][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 430.563102][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 430.572549][ T3223] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.579879][ T3223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.630970][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 430.640487][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 430.650419][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 430.659863][ T3223] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.667078][ T3223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.676161][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 430.687052][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 430.716313][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 430.725937][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 430.771278][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 430.781144][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 430.791653][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 430.802586][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 430.812230][ T3370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 430.845559][T10039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.859107][T10039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 430.907146][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 430.916906][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.964804][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 430.972588][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 431.005236][T10039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.072610][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 431.082573][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.145146][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 431.154753][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 431.182704][T10039] device veth0_vlan entered promiscuous mode [ 431.194932][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 431.203977][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 431.244046][T10039] device veth1_vlan entered promiscuous mode [ 431.325041][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 431.334477][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 431.343964][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 431.353930][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 431.377354][T10039] device veth0_macvtap entered promiscuous mode [ 431.399122][T10039] device veth1_macvtap entered promiscuous mode [ 431.459633][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 431.471425][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.481539][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 431.492145][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.502170][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 431.512756][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.526939][T10039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.538763][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 431.548450][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 431.557619][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 431.567914][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 431.592504][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 431.603154][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.616277][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 431.626809][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.636822][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 431.647335][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.661492][T10039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.672706][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 431.683339][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 432.122286][ T8725] Bluetooth: hci3: command 0x041b tx timeout 12:53:26 executing program 3: utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{}, {0x0, 0x2710}}) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4b3, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x33, {0x33, 0x0, "90861c9b5edf0ef70a3e257eef9f911bdeb7c22db7b1ae26c9d6080ec08dd0465102cbd7b197d2a1996b20e8db2d431626"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, 0x1403, 0x400, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000050) 12:53:26 executing program 2 (fault-call:0 fault-nth:1): io_setup(0xffff, &(0x7f0000000000)) 12:53:26 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0xc000000) 12:53:26 executing program 1: io_setup(0xffff, &(0x7f0000000000)) io_setup(0x0, &(0x7f0000000040)) [ 432.591140][T10280] FAULT_INJECTION: forcing a failure. [ 432.591140][T10280] name failslab, interval 1, probability 0, space 0, times 0 [ 432.604174][T10280] CPU: 1 PID: 10280 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 432.612927][T10280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.623047][T10280] Call Trace: [ 432.626455][T10280] dump_stack+0x21c/0x280 [ 432.630893][T10280] should_fail+0x8b7/0x9e0 [ 432.635432][T10280] __should_failslab+0x1f6/0x290 [ 432.640481][T10280] should_failslab+0x29/0x70 [ 432.645171][T10280] kmem_cache_alloc+0xcf/0xc50 [ 432.650122][T10280] ? __anon_vma_prepare+0xa6/0xb00 [ 432.655332][T10280] ? kmsan_get_metadata+0x116/0x180 [ 432.660627][T10280] ? kmsan_internal_set_origin+0x75/0xb0 [ 432.666365][T10280] __anon_vma_prepare+0xa6/0xb00 [ 432.671424][T10280] ? kmsan_get_metadata+0x116/0x180 [ 432.676719][T10280] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 432.682646][T10280] do_huge_pmd_anonymous_page+0x669/0x1ac0 [ 432.688554][T10280] ? kmsan_get_metadata+0x116/0x180 [ 432.693861][T10280] ? __msan_poison_alloca+0xf0/0x120 [ 432.699243][T10280] ? kmsan_get_metadata+0x116/0x180 [ 432.704551][T10280] handle_mm_fault+0x3d2c/0x4940 [ 432.709636][T10280] do_user_addr_fault+0xe09/0x19d0 [ 432.714853][T10280] __exc_page_fault+0x308/0x450 [ 432.719777][T10280] exc_page_fault+0x45/0x50 [ 432.724336][T10280] asm_exc_page_fault+0x1e/0x30 [ 432.729310][T10280] RIP: 0010:__get_user_4+0x21/0x30 [ 432.734488][T10280] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 5d 65 48 8b 14 25 00 6d 01 00 48 3b 82 d0 1a 00 00 73 4b 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 2d 65 [ 432.754140][T10280] RSP: 0018:ffff888033d9bde0 EFLAGS: 00010206 [ 432.760255][T10280] RAX: 0000000020000003 RBX: ffff888033d9bde8 RCX: 00000000344be52c [ 432.768273][T10280] RDX: ffffffffffffffff RSI: 00000000000000c0 RDI: ffff8880348be52c [ 432.776292][T10280] RBP: ffff888033d9be60 R08: ffffea000000000f R09: ffff88812fffa000 [ 432.784303][T10280] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 432.792317][T10280] R13: 0000000020000000 R14: ffff8880348be558 R15: 0000000000000000 [ 432.800388][T10280] ? __se_compat_sys_io_setup+0xa5/0x670 [ 432.806089][T10280] ? kmsan_get_metadata+0x116/0x180 [ 432.811350][T10280] __ia32_compat_sys_io_setup+0x3e/0x60 [ 432.816965][T10280] __do_fast_syscall_32+0x2af/0x480 [ 432.822238][T10280] do_fast_syscall_32+0x6b/0xd0 [ 432.827153][T10280] do_SYSENTER_32+0x73/0x90 [ 432.831822][T10280] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 432.838185][T10280] RIP: 0023:0xf7fed549 [ 432.842272][T10280] Code: Bad RIP value. [ 432.846374][T10280] RSP: 002b:00000000f55e70cc EFLAGS: 00000296 ORIG_RAX: 00000000000000f5 [ 432.854842][T10280] RAX: ffffffffffffffda RBX: 000000000000ffff RCX: 0000000020000000 [ 432.862857][T10280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.870873][T10280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 432.878886][T10280] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 12:53:26 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0xd000000) [ 432.886901][T10280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 12:53:27 executing program 1: io_setup(0xffff, &(0x7f0000000000)) io_setup(0x0, &(0x7f0000000040)) 12:53:27 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0xe000000) 12:53:27 executing program 2 (fault-call:0 fault-nth:2): io_setup(0xffff, &(0x7f0000000000)) [ 433.500085][ T8725] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 433.749519][T10296] FAULT_INJECTION: forcing a failure. [ 433.749519][T10296] name failslab, interval 1, probability 0, space 0, times 0 [ 433.763071][T10296] CPU: 1 PID: 10296 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 433.771819][T10296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.781937][T10296] Call Trace: [ 433.785337][T10296] dump_stack+0x21c/0x280 [ 433.789792][T10296] should_fail+0x8b7/0x9e0 [ 433.794325][T10296] __should_failslab+0x1f6/0x290 [ 433.799369][T10296] should_failslab+0x29/0x70 [ 433.804064][T10296] kmem_cache_alloc+0xcf/0xc50 [ 433.808926][T10296] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 433.814832][T10296] ? __anon_vma_prepare+0x1d6/0xb00 [ 433.820134][T10296] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 433.826316][T10296] __anon_vma_prepare+0x1d6/0xb00 [ 433.831442][T10296] ? kmsan_get_metadata+0x116/0x180 [ 433.836758][T10296] do_huge_pmd_anonymous_page+0x669/0x1ac0 [ 433.842774][T10296] ? kmsan_get_metadata+0x116/0x180 [ 433.848072][T10296] ? __msan_poison_alloca+0xf0/0x120 [ 433.853451][T10296] ? kmsan_get_metadata+0x116/0x180 [ 433.858748][T10296] handle_mm_fault+0x3d2c/0x4940 [ 433.863831][T10296] do_user_addr_fault+0xe09/0x19d0 [ 433.869078][T10296] __exc_page_fault+0x308/0x450 [ 433.874038][T10296] exc_page_fault+0x45/0x50 [ 433.878626][T10296] asm_exc_page_fault+0x1e/0x30 [ 433.883579][T10296] RIP: 0010:__get_user_4+0x21/0x30 [ 433.888781][T10296] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 5d 65 48 8b 14 25 00 6d 01 00 48 3b 82 d0 1a 00 00 73 4b 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 2d 65 [ 433.908463][T10296] RSP: 0018:ffff888033ee3de0 EFLAGS: 00010206 [ 433.914614][T10296] RAX: 0000000020000003 RBX: ffff888033ee3de8 RCX: 00000000344bc6ac [ 433.922680][T10296] RDX: ffffffffffffffff RSI: 00000000000000c0 RDI: ffff8880348bc6ac [ 433.930779][T10296] RBP: ffff888033ee3e60 R08: ffffea000000000f R09: ffff88812fffa000 [ 433.938828][T10296] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 433.946883][T10296] R13: 0000000020000000 R14: ffff8880348bc6d8 R15: 0000000000000000 [ 433.954983][T10296] ? __se_compat_sys_io_setup+0xa5/0x670 [ 433.960728][T10296] ? kmsan_get_metadata+0x116/0x180 [ 433.966026][T10296] __ia32_compat_sys_io_setup+0x3e/0x60 [ 433.971678][T10296] __do_fast_syscall_32+0x2af/0x480 [ 433.976990][T10296] do_fast_syscall_32+0x6b/0xd0 [ 433.981938][T10296] do_SYSENTER_32+0x73/0x90 [ 433.986546][T10296] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 433.992944][T10296] RIP: 0023:0xf7fed549 12:53:28 executing program 1: io_setup(0xffff, &(0x7f0000000000)) io_setup(0x6, 0x0) 12:53:28 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x10000000) [ 433.997048][T10296] Code: Bad RIP value. [ 434.001167][T10296] RSP: 002b:00000000f55e70cc EFLAGS: 00000296 ORIG_RAX: 00000000000000f5 [ 434.009667][T10296] RAX: ffffffffffffffda RBX: 000000000000ffff RCX: 0000000020000000 [ 434.017752][T10296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 434.025875][T10296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.033909][T10296] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 434.041944][T10296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 434.160900][ T8725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 434.172119][ T8725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.182164][ T8725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 434.193258][ T8725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 434.203198][ T8725] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 434.216321][ T8725] usb 4-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 434.225591][ T8725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.246613][ T8719] Bluetooth: hci3: command 0x040f tx timeout [ 434.533468][ T8725] usb 4-1: config 0 descriptor?? 12:53:28 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x11000000) 12:53:29 executing program 1: io_setup(0xffff, &(0x7f0000000000)) io_setup(0x6, 0x0) [ 435.025678][ T8725] lenovo 0003:04B3:3100.0002: unknown main item tag 0x3 [ 435.033188][ T8725] lenovo 0003:04B3:3100.0002: unknown main item tag 0xd [ 435.114178][ T8725] lenovo 0003:04B3:3100.0002: hidraw0: USB HID v0.00 Device [HID 04b3:3100] on usb-dummy_hcd.3-1/input0 [ 435.233110][ T3223] usb 4-1: USB disconnect, device number 2 [ 436.022605][ T8720] usb 4-1: new full-speed USB device number 3 using dummy_hcd 12:53:30 executing program 3: io_setup(0xffff, &(0x7f0000000000)) io_setup(0x0, &(0x7f0000000040)) 12:53:30 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x12000000) 12:53:30 executing program 2: io_setup(0xffff, &(0x7f0000000000)) 12:53:30 executing program 1: io_setup(0xffff, &(0x7f0000000000)) io_setup(0x6, 0x0) [ 436.283963][ T8718] Bluetooth: hci3: command 0x0419 tx timeout 12:53:30 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x1f000000) 12:53:31 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x25000000) 12:53:31 executing program 2: io_setup(0x8, &(0x7f0000000000)) 12:53:31 executing program 1 (fault-call:1 fault-nth:0): io_setup(0xffff, &(0x7f0000000000)) io_setup(0x6, &(0x7f0000000040)) 12:53:31 executing program 3: r0 = socket(0x11, 0x3, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x27, 0x1, 0x0, 0x6, 0x0, 0x0, "74318a1f0e6353f35678d3fec390411db841044b257ad10a5c496f811a4501142b3ed585bcbd2e3ff15388880c6c7cfeff2f96c48433a4f60ebb00"}, 0x58, &(0x7f0000001800)=[{&(0x7f0000000100)="e5ad6bd31aa2c360d93b879788a8", 0xe}], 0x1}, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000180)={0x0, 0xffffffff}) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1a3) close(r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f00000001c0)={0x1, 0xffffff01, 0x5, {0x100, 0x2}, 0x9, 0x5}) [ 437.223520][T10353] FAULT_INJECTION: forcing a failure. [ 437.223520][T10353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.236938][T10353] CPU: 0 PID: 10353 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 437.245678][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.255799][T10353] Call Trace: [ 437.259201][T10353] dump_stack+0x21c/0x280 [ 437.263639][T10353] should_fail+0x8b7/0x9e0 [ 437.268185][T10353] should_fail_usercopy+0x39/0x40 [ 437.273306][T10353] __se_compat_sys_io_setup+0x6e/0x670 [ 437.278856][T10353] ? kmsan_set_origin_checked+0x95/0xf0 [ 437.284511][T10353] ? kmsan_get_metadata+0x116/0x180 [ 437.289793][T10353] __ia32_compat_sys_io_setup+0x3e/0x60 [ 437.295406][T10353] __do_fast_syscall_32+0x2af/0x480 [ 437.300679][T10353] do_fast_syscall_32+0x6b/0xd0 [ 437.305594][T10353] do_SYSENTER_32+0x73/0x90 [ 437.310166][T10353] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 437.317486][T10353] RIP: 0023:0xf7fd3549 [ 437.321579][T10353] Code: Bad RIP value. [ 437.325693][T10353] RSP: 002b:00000000f51ab0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000f5 [ 437.334162][T10353] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000040 [ 437.342176][T10353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 437.350191][T10353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 437.358202][T10353] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 437.366269][T10353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 12:53:31 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) r0 = socket(0x11, 0x3, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "74318aa08e0993e51f0e6353f35678d3fec390411db841044b257ad10a5c496f811a4501142b3ed585bcbd2e3ff15388880c6c7cfeff2f96c48433a4f60ebb"}, 0x60, &(0x7f0000001800)=[{&(0x7f0000000100)="e5ad6bd31aa2c360d93b879788a8", 0x1000e}], 0x1}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="5e08000000000000000100000100c910fe800000000000000000000000000044c20400000009c910ff02000000b050689fe69ca2945949dc653d0000000000000000000001c910000000000000000000"], 0x50) open_by_handle_at(r0, &(0x7f0000000040)={0x49, 0x80, "46bb53bfbe924a7c8221570b1b70d8b868aebcbd9abeb21d040de1e49e3e185454cda7a55b8324a1b181f00937cb4ab0b43420654203b7baf560b5bd2cd37d72a5"}, 0x400) 12:53:31 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x2f000000) [ 437.796910][ C1] ===================================================== [ 437.803993][ C1] BUG: KMSAN: uninit-value in __netif_receive_skb_core+0x3f45/0x6520 [ 437.812071][ C1] CPU: 1 PID: 10364 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 437.820739][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.830795][ C1] Call Trace: [ 437.834079][ C1] [ 437.836940][ C1] dump_stack+0x21c/0x280 [ 437.841284][ C1] kmsan_report+0xf7/0x1e0 [ 437.845731][ C1] __msan_warning+0x58/0xa0 [ 437.850246][ C1] __netif_receive_skb_core+0x3f45/0x6520 [ 437.855985][ C1] ? kmsan_get_metadata+0x116/0x180 [ 437.861200][ C1] ? kmsan_get_metadata+0x116/0x180 [ 437.866414][ C1] __netif_receive_skb+0x164/0x670 [ 437.871535][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 437.877101][ C1] process_backlog+0x50d/0xba0 [ 437.881877][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 437.887838][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 437.893131][ C1] napi_poll+0x43b/0xfd0 [ 437.897396][ C1] ? kmsan_get_metadata+0x116/0x180 [ 437.902603][ C1] net_rx_action+0x35c/0xd40 [ 437.907214][ C1] ? net_tx_action+0xdc0/0xdc0 [ 437.911989][ C1] __do_softirq+0x2ea/0x7f5 [ 437.916507][ C1] asm_call_on_stack+0xf/0x20 [ 437.921179][ C1] [ 437.924214][ C1] do_softirq_own_stack+0x7c/0xa0 [ 437.929297][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 437.934507][ C1] local_bh_enable+0x36/0x40 [ 437.939104][ C1] __dev_queue_xmit+0x41a8/0x4470 [ 437.944155][ C1] dev_queue_xmit+0x4b/0x60 [ 437.948666][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 437.954020][ C1] packet_sendmsg+0x8542/0x9a80 [ 437.958882][ C1] ? kmsan_internal_chain_origin+0xfa/0x130 [ 437.964789][ C1] ? kmsan_internal_chain_origin+0xad/0x130 [ 437.970686][ C1] ? __msan_chain_origin+0x50/0x90 [ 437.975902][ C1] ? __get_compat_msghdr+0x6db/0x9d0 [ 437.981311][ C1] ? get_compat_msghdr+0x108/0x2b0 [ 437.986486][ C1] ? __sys_sendmsg+0x50c/0x840 [ 437.991259][ C1] ? __se_compat_sys_sendmsg+0xa7/0xc0 [ 437.996731][ C1] ? kmsan_get_metadata+0x116/0x180 [ 438.001939][ C1] ? kmsan_internal_set_origin+0x75/0xb0 [ 438.007584][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 438.012881][ C1] ? kmsan_get_metadata+0x116/0x180 [ 438.018092][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 438.023912][ C1] ? tomoyo_socket_sendmsg_permission+0x4a5/0x5f0 [ 438.030368][ C1] ____sys_sendmsg+0xc82/0x1240 [ 438.035241][ C1] ? compat_packet_setsockopt+0x3c0/0x3c0 [ 438.040971][ C1] __sys_sendmsg+0x6d1/0x840 [ 438.045586][ C1] ? kmsan_copy_to_user+0x81/0x90 [ 438.050635][ C1] ? kmsan_get_metadata+0x116/0x180 [ 438.055842][ C1] __se_compat_sys_sendmsg+0xa7/0xc0 [ 438.061142][ C1] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 438.066627][ C1] __do_fast_syscall_32+0x2af/0x480 [ 438.071847][ C1] do_fast_syscall_32+0x6b/0xd0 [ 438.076713][ C1] do_SYSENTER_32+0x73/0x90 [ 438.081230][ C1] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.087552][ C1] RIP: 0023:0xf7fed549 [ 438.091613][ C1] Code: Bad RIP value. [ 438.095675][ C1] RSP: 002b:00000000f55c60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 438.104091][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000580 [ 438.112064][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 438.120039][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.128013][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 438.135988][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.143971][ C1] [ 438.146296][ C1] Uninit was stored to memory at: [ 438.151333][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 438.157060][ C1] __msan_chain_origin+0x50/0x90 [ 438.162001][ C1] skb_vlan_untag+0x7e7/0xf70 [ 438.166683][ C1] __netif_receive_skb_core+0xa4d/0x6520 [ 438.172323][ C1] __netif_receive_skb+0x164/0x670 [ 438.177444][ C1] process_backlog+0x50d/0xba0 [ 438.182213][ C1] napi_poll+0x43b/0xfd0 [ 438.186460][ C1] net_rx_action+0x35c/0xd40 [ 438.191054][ C1] __do_softirq+0x2ea/0x7f5 [ 438.195545][ C1] [ 438.197875][ C1] Uninit was created at: [ 438.202128][ C1] kmsan_internal_poison_shadow+0x66/0xd0 [ 438.207854][ C1] kmsan_slab_alloc+0x8a/0xe0 [ 438.212547][ C1] __kmalloc_node_track_caller+0xeab/0x12e0 [ 438.218450][ C1] __alloc_skb+0x35f/0xb30 [ 438.222879][ C1] alloc_skb_with_frags+0x1f2/0xc10 [ 438.228085][ C1] sock_alloc_send_pskb+0xc83/0xe50 [ 438.233289][ C1] packet_sendmsg+0x6abb/0x9a80 [ 438.238144][ C1] ____sys_sendmsg+0xc82/0x1240 [ 438.242997][ C1] __sys_sendmsg+0x6d1/0x840 [ 438.247596][ C1] __se_compat_sys_sendmsg+0xa7/0xc0 [ 438.252891][ C1] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 438.258355][ C1] __do_fast_syscall_32+0x2af/0x480 [ 438.263562][ C1] do_fast_syscall_32+0x6b/0xd0 [ 438.268420][ C1] do_SYSENTER_32+0x73/0x90 [ 438.272932][ C1] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.279247][ C1] ===================================================== [ 438.286171][ C1] Disabling lock debugging due to kernel taint [ 438.292316][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 438.298936][ C1] CPU: 1 PID: 10364 Comm: syz-executor.2 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 438.308991][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.319041][ C1] Call Trace: [ 438.322324][ C1] [ 438.325189][ C1] dump_stack+0x21c/0x280 [ 438.329536][ C1] panic+0x4d7/0xef7 [ 438.333454][ C1] ? add_taint+0x17c/0x210 [ 438.337899][ C1] kmsan_report+0x1df/0x1e0 [ 438.342417][ C1] __msan_warning+0x58/0xa0 [ 438.346932][ C1] __netif_receive_skb_core+0x3f45/0x6520 [ 438.352666][ C1] ? kmsan_get_metadata+0x116/0x180 [ 438.357881][ C1] ? kmsan_get_metadata+0x116/0x180 [ 438.363177][ C1] __netif_receive_skb+0x164/0x670 [ 438.368297][ C1] ? kmsan_set_origin_checked+0x95/0xf0 [ 438.373857][ C1] process_backlog+0x50d/0xba0 [ 438.378630][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 438.384452][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 438.389751][ C1] napi_poll+0x43b/0xfd0 [ 438.394007][ C1] ? kmsan_get_metadata+0x116/0x180 [ 438.399220][ C1] net_rx_action+0x35c/0xd40 [ 438.403851][ C1] ? net_tx_action+0xdc0/0xdc0 [ 438.408625][ C1] __do_softirq+0x2ea/0x7f5 [ 438.413145][ C1] asm_call_on_stack+0xf/0x20 [ 438.417817][ C1] [ 438.420766][ C1] do_softirq_own_stack+0x7c/0xa0 [ 438.425809][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 438.431018][ C1] local_bh_enable+0x36/0x40 [ 438.435622][ C1] __dev_queue_xmit+0x41a8/0x4470 [ 438.440687][ C1] dev_queue_xmit+0x4b/0x60 [ 438.445213][ C1] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 438.450505][ C1] packet_sendmsg+0x8542/0x9a80 [ 438.455369][ C1] ? kmsan_internal_chain_origin+0xfa/0x130 [ 438.461270][ C1] ? kmsan_internal_chain_origin+0xad/0x130 [ 438.467183][ C1] ? __msan_chain_origin+0x50/0x90 [ 438.472298][ C1] ? __get_compat_msghdr+0x6db/0x9d0 [ 438.477589][ C1] ? get_compat_msghdr+0x108/0x2b0 [ 438.482705][ C1] ? __sys_sendmsg+0x50c/0x840 [ 438.487472][ C1] ? __se_compat_sys_sendmsg+0xa7/0xc0 [ 438.492939][ C1] ? kmsan_get_metadata+0x116/0x180 [ 438.498141][ C1] ? kmsan_internal_set_origin+0x75/0xb0 [ 438.503776][ C1] ? __msan_poison_alloca+0xf0/0x120 [ 438.509080][ C1] ? kmsan_get_metadata+0x116/0x180 [ 438.514286][ C1] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 438.520107][ C1] ? tomoyo_socket_sendmsg_permission+0x4a5/0x5f0 [ 438.526558][ C1] ____sys_sendmsg+0xc82/0x1240 [ 438.531428][ C1] ? compat_packet_setsockopt+0x3c0/0x3c0 [ 438.537159][ C1] __sys_sendmsg+0x6d1/0x840 [ 438.541780][ C1] ? kmsan_copy_to_user+0x81/0x90 [ 438.546847][ C1] ? kmsan_get_metadata+0x116/0x180 [ 438.552056][ C1] __se_compat_sys_sendmsg+0xa7/0xc0 [ 438.557356][ C1] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 438.562830][ C1] __do_fast_syscall_32+0x2af/0x480 [ 438.568049][ C1] do_fast_syscall_32+0x6b/0xd0 [ 438.572916][ C1] do_SYSENTER_32+0x73/0x90 [ 438.577441][ C1] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 438.583771][ C1] RIP: 0023:0xf7fed549 [ 438.587837][ C1] Code: Bad RIP value. [ 438.591908][ C1] RSP: 002b:00000000f55c60cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 438.600326][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000580 [ 438.608297][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 438.616276][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.624248][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 438.632223][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.641613][ C1] Kernel Offset: disabled [ 438.645936][ C1] Rebooting in 86400 seconds..