last executing test programs: 10m13.06537868s ago: executing program 3 (id=510): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "d4dfeb1ceb40eeefe68d6cf265b68e88a8bb314f3c0f82df67e25dad70d6b31e036f9f20b70c42a4dc5b21aa28f606af1557115f56805a217afe6b467cb413b3"}, 0x48, 0xffffffffffffffff) keyctl$negate(0x4, r0, 0x0, 0xfffffffffffffffe) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0x7, 0x400, 0x1, 0xfffff001}, 0xfffffffffffffe08) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x2, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 10m13.03375681s ago: executing program 3 (id=511): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z\xe7\xeb\x06\xcf\xf3>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000"], 0xe4}}, 0x800) 10m12.969956368s ago: executing program 3 (id=513): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)=0x40) syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), 0xffffffffffffffff) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x8) chdir(&(0x7f00000000c0)='./file1\x00') lseek(0xffffffffffffffff, 0x5, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r3, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) gettid() 10m11.892783659s ago: executing program 3 (id=515): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08004500001400000000"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, &(0x7f00000002c0)=0xd42) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score_adj\x00') read$FUSE(r5, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000540)) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x80000, &(0x7f0000000900)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x35, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x34, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, 'V\x7f\x8f#R\xca\bM\x9d@\xe9\xb1G\x84\x8d\x10\xe3U.;\xe0D\x80\x0e,\x11\xd5tO\xd2 [Q\x94\x04\xe8/\xb8pk\xa6\x0e\xa0[.b\xbcS\xfeka\xea\xde\xd0tX\xbd\xaaE\xd0Z\x1e\x8a[\xae\n\xfct\xa7\x7f\x05p(\xed\xcb\r:.\xf0\xa0F\xff3\x94e>\x8b\x9c\xc7\xf3\x13\xe0w]\xe8\xcc\xf8\xfen$^\xba0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x800a}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r5 = semget$private(0x0, 0x0, 0x1) semctl$SETVAL(r5, 0x3, 0x10, &(0x7f0000000340)=0x3) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800120076000d0b"], 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getchain={0x3c, 0x66, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0x4}, {0x2, 0x6}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008084) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='i8042\x00', 0x6) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000200001000800000000000000020000000000000000000000050013000100000008000f0094000000"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c000280180003801000"], 0x48}}, 0x0) 9m55.092958221s ago: executing program 32 (id=519): syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xe, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x800a}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r5 = semget$private(0x0, 0x0, 0x1) semctl$SETVAL(r5, 0x3, 0x10, &(0x7f0000000340)=0x3) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800120076000d0b"], 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getchain={0x3c, 0x66, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0x4}, {0x2, 0x6}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008084) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='i8042\x00', 0x6) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000200001000800000000000000020000000000000000000000050013000100000008000f0094000000"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c000280180003801000"], 0x48}}, 0x0) 4m19.539512631s ago: executing program 0 (id=2321): socket$key(0xf, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r2) dup3(0xffffffffffffffff, r2, 0x80000) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000180)={0xffff, 0xd4, 0x3, 0x400c, 0x5, "73309be7b71700", 0x70000000, 0x1ff}) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0xfb, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m19.260379626s ago: executing program 0 (id=2324): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) close(0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6, @ANYBLOB="dc196c174c0f622e019df2d7fcc0c6e67e55dd353e5b54dbb5c89c1e1f4a22120475c8cdd9a545554eab5c90c9583f399da9afac43bb3186c0baf3fa64ff2c4c70f0c0ea424307be53"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg$unix(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}, 0x1000000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4m17.936418411s ago: executing program 0 (id=2331): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)=0x40) syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), 0xffffffffffffffff) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x8) chdir(&(0x7f00000000c0)='./file1\x00') lseek(0xffffffffffffffff, 0x5, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r3, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) gettid() 4m16.447766694s ago: executing program 0 (id=2339): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001300)="92", 0x2) syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000140)="4abfc4c52d8c003a", 0x8}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='dummy_udc.0', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = getpid() syz_pidfd_open(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x0) write(r4, &(0x7f0000000400)='dummy_udc.0', 0xb) fchdir(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) 4m15.601883401s ago: executing program 0 (id=2344): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb\v1d\xbe\xa1\xc1\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\xcee_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2y\xeb\xffa\v3~\x84\x9aI\xd7\x14J\x9f\x88@e2\xa6\x0f&\xa4(\xcd\xc7\x1f\xbb\x1e\x13\x7f \x85\xe5\xa9\xf0\x14\xc0\f1P\x85\xd4\x01\x00\x88\xfaL\xf1m{\xb6%E\"_\x00\xbdti>\x81\xb5\xcez\xa7\xf8\xc7a8\aI\x9d9P\xe0Z\xfe\x1eX6\x91\xc7\'\x96\xe2\x83\x8d\x93\x03\xc2\xae\x86\x01Y\x98v\x14;&\xaeH\xdcW\xe0\x1d\xa2\x8846\xa0#\x1c\x16\xf9\xa8\x00'/298, &(0x7f0000000300)='\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xc9\xe1\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fZ\xf1\xed\f\b\x17\x81>\t\xc30-\xe2\xb3\xb0\x98\t\xed\xc8!\xf6\xcd#\xcc\x1bsz\x96\xde\x00\x9d\xaaCq\xc9\xa20xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x9, 0x3, 0x2e4, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x21c, 0xffffffff, 0xffffffff, 0x21c, 0xffffffff, 0x3, &(0x7f0000000300), {[{{@ipv6={@local, @mcast2, [0x0, 0xff000000, 0xff, 0xff], [0x0, 0xff000000, 0xffffff00, 0xffffff], 'syzkaller0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x23, 0x7, 0x1, 0x1}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ipv6header={{0x24}, {0x90, 0x83}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x57dd, 0x200, 0x10000, 'snmp_trap\x00', 'syz1\x00', {0x10}}}}, {{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x19}, [0xff000000, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], 'hsr0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x8, 0x3, 0x0, 0x21}, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x2, 0x200, 'snmp_trap\x00', {0xc685}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x340) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004801, &(0x7f0000b63fe4)={0xa, 0x4, 0xffffffff, @empty}, 0x1c) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@filename='./bus\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000340)='msdos\x00', 0x8080, &(0x7f00000001c0)='discard') r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac14"], 0x1c) ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f00000000c0)) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r0, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv2(r6, &(0x7f0000000140)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x6b, 0x1) 1m21.7148488s ago: executing program 5 (id=3644): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, 0x0, r3, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x101}) syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 1m21.63166281s ago: executing program 5 (id=3648): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x41, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000400)={0x30, 0x5, 0x0, {0x0, 0x1, 0x7, 0x80000001}}, 0x30) 1m21.561719507s ago: executing program 5 (id=3650): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x40880, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) 1m21.429012987s ago: executing program 5 (id=3652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000, {0x7f, 0x7fff, 0x8, 0x52}}}]}, 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x5) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200002, 0x0, 0x3, 0x7}) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x110, 0x5, 0xa, 0x204, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0xd6, 0xc, "a7d29ef712ac81204a93471716a67cd96fb9dc9ba06cac9a005a194d11565b9217712c0ec2e80e0a3d4a47c3b4ea4d0a4fc43db6c869500f21a1f60cab544a22fc733f2b75e1f79de88f5b135273b206550b8b545a740b24620a1c07fd4bb1c57fd6fdc894c2850d176c61a32269d6ce99190ecae649f25c924950868195b2bef0ef9bc98292b18ea350c66f35f53c2190d3193b69f4486d44b7ce32a834c26e5cf8af0cb848923acfc4369d6004623d94a1488e40d5bb5297aca7eb3bd15d9797fa8677daeeb0afb1ee47d9804f089de4ae"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x138}}, 0x0) 1m6.278293292s ago: executing program 34 (id=3652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000, {0x7f, 0x7fff, 0x8, 0x52}}}]}, 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x5) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200002, 0x0, 0x3, 0x7}) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x110, 0x5, 0xa, 0x204, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0xd6, 0xc, "a7d29ef712ac81204a93471716a67cd96fb9dc9ba06cac9a005a194d11565b9217712c0ec2e80e0a3d4a47c3b4ea4d0a4fc43db6c869500f21a1f60cab544a22fc733f2b75e1f79de88f5b135273b206550b8b545a740b24620a1c07fd4bb1c57fd6fdc894c2850d176c61a32269d6ce99190ecae649f25c924950868195b2bef0ef9bc98292b18ea350c66f35f53c2190d3193b69f4486d44b7ce32a834c26e5cf8af0cb848923acfc4369d6004623d94a1488e40d5bb5297aca7eb3bd15d9797fa8677daeeb0afb1ee47d9804f089de4ae"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x138}}, 0x0) 4.663265617s ago: executing program 4 (id=4213): socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x1, @private2}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)="b8", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xffff}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000200)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r5) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, &(0x7f0000000400)) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r9 = fcntl$dupfd(r8, 0x0, r8) write$binfmt_script(r9, 0x0, 0x0) 3.60233704s ago: executing program 2 (id=4221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000020603000000378150380000070000000c0007800800114000000000050085000200000005000400000000000900020073797a310000000016000300686173683a6e65742c306f72742c6e6574000000"], 0x54}, 0x13, 0x0, 0x0, 0x810}, 0x20004000) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r3 = openat(r1, &(0x7f0000000800)='./sys\x00', 0x20041, 0x0) write(r3, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r4, &(0x7f0000000b00)='0x01', 0x4) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 3.506416682s ago: executing program 4 (id=4223): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x25cbc0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0xf7d, 0x280) close(r1) 3.487690469s ago: executing program 4 (id=4224): bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.446149342s ago: executing program 2 (id=4225): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x2, 0x6, 0x5, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x39, '\x00', r0, @fallback, r3, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='127.0.0.1', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) write(r5, &(0x7f00000003c0)="37d827bb56b7d41f554f023ecc5108c3aacb118e47383b07f16c658d59aafe19ab726144ad6962fa60f24c9e4e8c48868aee6b6263defde7eb2059a711fa08ad3f36872b42b076b2f0cebd7502ecb4fc2db4850ddcf78f5009a49298af435662dba17da07a7d167d0be463c44537421687f8485e6cd4ad5773a48b3377f4d5b6e8e83f68103982259fa63b0738d4dcaf970eb721f5c940ba70584b68e539f15e893bd8bf3b5698270434e868070565cb5b747543fc7e4a33c896f80bb322b0707e6ddd6532ea4b3cf4fd9388", 0x114) close(r5) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)='0', 0x1) close(r7) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) r8 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) write(r8, &(0x7f0000000380)='1', 0x1) 3.427857717s ago: executing program 4 (id=4227): syz_emit_ethernet(0x67, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x31, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, [{0x4, 0x1, "9595f429ae08a5"}]}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x9, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc04c560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100000, 0x1, {}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, '\x00\x00\x00\b'}, 0x5141, 0x1, {0x0}, 0x2, 0x20000000, r6}) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) 2.467512056s ago: executing program 1 (id=4229): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1000}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010601000000cd7a0000000000000000000000000000000000001000030073fbfa5bf9f7ef36d0af1299e7a5e4207a83873aeedd0f6050b623d56d797a6b616c"], 0x48}}, 0x40000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x28}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x59c, 0x13c, 0x324, 0x13c, 0x324, 0x324, 0x4d4, 0x4d4, 0x4d4, 0x4d4, 0x4d4, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @private1, [0xff, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4}, 0x0, 0xf4, 0x13c, 0x0, {0x7a00000010000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x0, 0xfffe, 0x0, 0x0, 0x4e21], [], 0xfd}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'bond_slave_1\x00', {0x1}}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0xfc}, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {0x0, 0xff, 0x2}, {}, 0x300}}}, {{@uncond, 0x0, 0xa4, 0x110, 0x48000000}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9ccf9eb8fc186f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x1c}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5f8) sendmsg$nl_route(r1, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r4, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) sendmsg$nl_route(r1, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r1, @ANYBLOB="00000000d8e260f35aff935710b3f95eca02bedeb0996678cc019ec6a87af7441d32aafc2364005f14c01b813ccdb3340a10624b445c48"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004004) writev(r2, &(0x7f0000002a40)=[{&(0x7f0000000440)="4f7c5be5d4b82149d8ca35d0890adcd3f552035abfc81b271f99ce1b7dffa9d5865269ea489a64634ec3855106d9f566c50ff41f82a6b43d67c80577cb358d4d25cf3db719de6083e62da35c67ce3494fe10dc4c35c040b0bd8ff0d9f6906fb45b5b9a44e3fc20b123a7276c60e847da8e293da668022967d029ec5b9d929d2e4a2739b68eb3fdd93e0d83dc03a6da73fc0b0622b7effeacdd8c30a3fb55ca2c1a57852e2cc2c21aee87ad541fc5fe6b24d44924c2bb27a2f1e71f1a2235fe33d6cff7b146e7e7085193c010", 0xcc}, {&(0x7f0000000540)="dc1fb1e7fc89889dcf030fceef29235a7a23205d2f2f616506267f1933c2ac9fd532d730aaa19eb2ea601fb69cc16d3209e71bf179a03c964aa3c4e8ec24237931650ba30eab48ccc2c95a3931773ce8805144965fecec0273f34ed096b9e1c6369feca9345b02c24a078c0ba18f3ebec44f31d12ccb0d93c9a3e7824481da3849f43bcecaee6edd5fce41d37ca1b60342955c34ae302f04430a9a7f828368f6d15dac0180100777a8e01a8e8f46318475bee61375a2aa9a4a5a5647d4e69788", 0xc0}, {&(0x7f0000000600)="1fc3f2c9e3a02ef3659be676d5afd22bb1fe3a47cab05a88461b2c6f164c07dd24eac64ff31cb3a06bb4910a4c", 0x2d}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="78cf012ccd99fe435c4e6f31f1d41fc4ebdbd19a7ae35f166f0efcee6becb3acc6185e1a85d827c1cad12a21180c530f75ba258cd9c310b81df76afdfa70907592b9643d9a62c4e0b99ce1c1b9fdb4c0b0db262b49184c91de123733f3524c", 0x5f}], 0x5) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x4000000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20018045}, 0x811) socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 2.397960367s ago: executing program 2 (id=4230): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4b542c814f24e491022d048000000007910a800000000001500007e000000009500"/46], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x20008004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100000000000400000019000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000003c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80008010}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x188, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc2f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf94d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}]}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfa4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xdbd4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x391b5683}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "85d51fc9d961fc4dbade12a7aa5b52a85d44d2a835be6a0076aba933e0f5dd4787624efd"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff0df3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK={0x4}]}, 0x188}, 0x1, 0x0, 0x0, 0x8000}, 0x4000844) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x38, 0x107, 0x70bd2c, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008811}, 0x8010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregs(0xc, r8, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000000)='.\x00', 0xa4000021) r10 = syz_io_uring_setup(0x7056, &(0x7f0000000400)={0x0, 0xdf8a, 0x10000, 0x1000000, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r10, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107042, 0x124) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x6, 0x6}, {0xe, 0xffff}}}, 0x24}}, 0x24040084) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r16, {0x4}, {0xffff, 0xffff}, {0xe, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.175544863s ago: executing program 1 (id=4231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa4, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x60, 0xe, {{{}, {}, @device_a, @broadcast}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x84}, @void, @val={0x6, 0x2, 0x4}, @val={0x5, 0x3, {0x7, 0xe9, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0xf, 0x7f, [@gcr_ga={0xbd, 0x6, @device_b}, @challenge={0x10, 0x1, 0x30}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa}]}, 0xa4}}, 0x20000014) 2.10269922s ago: executing program 1 (id=4232): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0}, 0x28) 1.976170528s ago: executing program 1 (id=4233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000020603000000378150380000070000000c0007800800114000000000050085000200000005000400000000000900020073797a310000000016000300686173683a6e65742c306f72742c6e6574000000"], 0x54}, 0x13, 0x0, 0x0, 0x810}, 0x20004000) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r3 = openat(r1, &(0x7f0000000800)='./sys\x00', 0x20041, 0x0) write(r3, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r4, &(0x7f0000000b00)='0x01', 0x4) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 1.892561347s ago: executing program 2 (id=4234): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5407000044000701fefffffffcdbdf25037c000004004580"], 0x754}}, 0xc000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 1.890148275s ago: executing program 1 (id=4235): bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.822628613s ago: executing program 2 (id=4236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x9, 0x3, 0x2e4, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x21c, 0xffffffff, 0xffffffff, 0x21c, 0xffffffff, 0x3, &(0x7f0000000300), {[{{@ipv6={@local, @mcast2, [0x0, 0xff000000, 0xff, 0xff], [0x0, 0xff000000, 0xffffff00, 0xffffff], 'syzkaller0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x23, 0x7, 0x1, 0x1}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ipv6header={{0x24}, {0x90, 0x83}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x57dd, 0x200, 0x10000, 'snmp_trap\x00', 'syz1\x00', {0x10}}}}, {{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x19}, [0xff000000, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], 'hsr0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x8, 0x3, 0x0, 0x21}, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x2, 0x200, 'snmp_trap\x00', {0xc685}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x340) sendto$inet6(r4, 0x0, 0x0, 0x22004801, &(0x7f0000b63fe4)={0xa, 0x4, 0xffffffff, @empty}, 0x1c) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@filename='./bus\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000340)='msdos\x00', 0x8080, &(0x7f00000001c0)='discard') r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414"], 0x1c) sendto$inet6(r4, &(0x7f0000000540), 0x0, 0x4000, 0x0, 0x0) shutdown(r4, 0x1) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"/616], 0x268}}, 0x8000) 1.773691072s ago: executing program 1 (id=4237): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x2, 0x4, 0x101], [0x20000000, 0x500, 0x4, 0x0, 0x0, 0x0, 0xf4e], [0x40, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000]], '\x00', [{0x1, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {0x1, 0x2}, {0x0, 0x3}, {}, {}, {0xfffffffc, 0xab9}, {0x82}, {0x400}, {0x6}], '\x00', 0x4b4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r8 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0xd, 0x10, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@ldst={0x2, 0x1, 0x4, 0xa, 0xa, 0x18, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00'}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x12, 0xffffffffffffffff, 0xaf99b000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000000)) 1.604244182s ago: executing program 4 (id=4238): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x20, 0x141d, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='smb3\x00', 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x101000, 0x17f) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 653.10188ms ago: executing program 6 (id=4245): clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000}) 540.638506ms ago: executing program 6 (id=4246): bpf$PROG_LOAD(0x5, 0x0, 0x0) 517.070126ms ago: executing program 4 (id=4247): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x9a) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0x40049366, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r6, &(0x7f00000024c0)={0x2020}, 0xfffffec1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r7, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0xff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) 422.665654ms ago: executing program 6 (id=4248): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000700)='dummy_udc.0', 0xb) write(0xffffffffffffffff, &(0x7f0000000a00)='t', 0x1) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf25005ab006561867757211de321df5ab01000000080002000200000008000c0000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0xc050) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) 394.337098ms ago: executing program 6 (id=4249): r0 = eventfd2(0xc, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)="0892e5a4116ffcce", 0x8}, {&(0x7f0000000380)='^', 0x1}], 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A7', 0x2}], 0x1}}], 0x1, 0x4000001) r4 = dup(r3) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$tipc(r4, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)="d3", 0x1}], 0x1, 0x0, 0x0, 0x4}, 0x1) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1, 0xf6700000}, {0x6, 0x2007f}]}}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x7, 0xfec00000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 142.583833ms ago: executing program 6 (id=4250): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b}, 0x28) 67.977468ms ago: executing program 2 (id=4251): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000080)=ANY=[@ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6}, 0x48) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2881, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x9, 0x3, 0x2e4, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x21c, 0xffffffff, 0xffffffff, 0x21c, 0xffffffff, 0x3, &(0x7f0000000300), {[{{@ipv6={@local, @mcast2, [0x0, 0xff000000, 0xff, 0xff], [0x0, 0xff000000, 0xffffff00, 0xffffff], 'syzkaller0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x23, 0x7, 0x1, 0x1}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ipv6header={{0x24}, {0x90, 0x83}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x57dd, 0x200, 0x10000, 'snmp_trap\x00', 'syz1\x00', {0x10}}}}, {{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x19}, [0xff000000, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], 'hsr0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x8, 0x3, 0x0, 0x21}, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x2, 0x200, 'snmp_trap\x00', {0xc685}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x340) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004801, &(0x7f0000b63fe4)={0xa, 0x4, 0xffffffff, @empty}, 0x1c) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@filename='./bus\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000340)='msdos\x00', 0x8080, &(0x7f00000001c0)='discard') r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f00000000c0)) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r0, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv2(r6, &(0x7f0000000140)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x6b, 0x1) 0s ago: executing program 6 (id=4252): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0\n', 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) kernel console output (not intermixed with test programs): matching packets. [ 680.690443][T17195] fuse: fd is not a fuse device [ 680.924035][T13206] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 681.007981][ T6279] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 681.014321][ T6279] (NULL device *): queue 0 connect admin queue failed (-111). [ 681.020632][ T6279] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 681.026263][ T6279] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 681.090881][T13206] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 681.104581][T13206] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.112517][T13206] usb 9-1: Product: syz [ 681.114221][T13206] usb 9-1: Manufacturer: syz [ 681.121233][T13206] usb 9-1: SerialNumber: syz [ 681.123905][T17206] nfs4: Unknown parameter 'tcp€´' [ 681.172816][ T5879] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 681.599247][T13206] usb 9-1: USB disconnect, device number 20 [ 682.209919][ T5879] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 682.213332][ T5879] ath9k_htc: Failed to initialize the device [ 682.215877][T13206] usb 9-1: ath9k_htc: USB layer deinitialized [ 683.108844][T15829] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 683.120786][T15829] (NULL device *): queue 0 connect admin queue failed (-111). [ 683.127848][T15829] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 683.130400][T15829] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 683.453082][T17263] fuse: Bad value for 'fd' [ 683.501554][T17265] fuse: fd is not a fuse device [ 684.080188][T17265] fuse: Bad value for 'fd' [ 684.741703][T17281] ./bus: Can't lookup blockdev [ 684.780127][T17283] lo speed is unknown, defaulting to 1000 [ 684.786001][T17283] lo speed is unknown, defaulting to 1000 [ 684.792150][T17283] lo speed is unknown, defaulting to 1000 [ 684.869597][T17287] netlink: 'syz.2.3418': attribute type 1 has an invalid length. [ 684.874673][T17287] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.3418'. [ 684.933768][T17283] infiniband syz2: set active [ 684.935407][ T1341] lo speed is unknown, defaulting to 1000 [ 684.937616][T17283] infiniband syz2: added lo [ 684.944921][T17283] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 684.950315][T17283] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 684.957554][T17283] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 685.102486][T17293] fuse: Bad value for 'fd' [ 685.168836][ T6282] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 685.174131][ T6282] (NULL device *): queue 0 connect admin queue failed (-111). [ 685.177319][ T6282] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 685.181886][ T6282] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 685.196902][T17283] RDS/IB: syz2: added [ 685.198905][T17283] smc: adding ib device syz2 with port count 1 [ 685.201866][T17283] smc: ib device syz2 port 1 has no pnetid [ 685.204716][T17283] lo speed is unknown, defaulting to 1000 [ 685.220770][ T24] lo speed is unknown, defaulting to 1000 [ 685.329869][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.352489][T17283] lo speed is unknown, defaulting to 1000 [ 685.443394][T17283] lo speed is unknown, defaulting to 1000 [ 685.527622][T17283] lo speed is unknown, defaulting to 1000 [ 685.609717][T17283] lo speed is unknown, defaulting to 1000 [ 685.691576][T17283] lo speed is unknown, defaulting to 1000 [ 686.823590][T17322] device-mapper: ioctl: device name cannot contain '/' [ 687.042591][T17331] ./bus: Can't lookup blockdev [ 687.253225][ T6282] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 687.262352][ T6282] (NULL device *): queue 0 connect admin queue failed (-111). [ 687.269747][ T6282] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 687.276072][ T6282] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 687.874018][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3435'. [ 688.715051][T17358] tipc: Enabling of bearer rejected, failed to enable media [ 688.882211][T17367] netlink: 'syz.5.3442': attribute type 2 has an invalid length. [ 689.057612][T17372] fuse: fd is not a fuse device [ 689.328352][T15854] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 689.335385][T15854] (NULL device *): queue 0 connect admin queue failed (-111). [ 689.341322][T15854] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 689.344438][T15854] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 689.455765][T17393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3450'. [ 689.506096][T17396] tipc: Enabling of bearer rejected, failed to enable media [ 689.567626][T17401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3453'. [ 689.681071][ T42] audit: type=1800 audit(1786284222.130:937): pid=17411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3451" name="attr_allow_any_host" dev="configfs" ino=69671 res=0 errno=0 [ 689.688467][ T42] audit: type=1800 audit(1786284222.130:938): pid=17411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3451" name="device_path" dev="configfs" ino=69672 res=0 errno=0 [ 689.695322][ T42] audit: type=1800 audit(1786284222.140:939): pid=17411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3451" name="buffered_io" dev="configfs" ino=69673 res=0 errno=0 [ 689.702837][ T42] audit: type=1800 audit(1786284222.140:940): pid=17411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3451" name="enable" dev="configfs" ino=69674 res=0 errno=0 [ 689.710704][ T42] audit: type=1800 audit(1786284222.150:941): pid=17411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3451" name="addr_trtype" dev="configfs" ino=69675 res=0 errno=0 [ 689.815156][ T6282] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:9f760990-1dc1-4731-9ee7-22c08180d939. [ 689.842520][T17411] nvme nvme1: creating 4 I/O queues. [ 689.864513][T17411] nvme nvme1: new ctrl: "testnqn" [ 690.483809][T17436] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234756656 (33878053248 ns) > initial count (25262286960 ns). Using initial count to start timer. [ 690.833330][T17458] fuse: Bad value for 'rootmode' [ 690.937537][T17464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3470'. [ 691.185256][T17484] fuse: Bad value for 'rootmode' [ 691.253620][T17487] ip6gre1: entered allmulticast mode [ 691.257013][T13441] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 691.381918][T17475] fuse: Unknown parameter '' [ 691.407459][T17491] sch_fq: defrate 4 ignored. [ 691.408308][ T6279] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 691.415618][ T6279] (NULL device *): queue 0 connect admin queue failed (-111). [ 691.419900][ T6279] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 691.422810][ T6279] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 691.889661][T17509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3486'. [ 691.892564][T17509] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 692.539588][ T5090] Bluetooth: hci3: command 0x0406 tx timeout [ 692.947648][T17512] ./bus: Can't lookup blockdev [ 693.489199][ T6282] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 693.496030][ T6282] (NULL device *): queue 0 connect admin queue failed (-111). [ 693.504369][ T6282] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 693.510442][ T6282] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 693.645906][T17537] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3490'. [ 694.205129][T17528] lo speed is unknown, defaulting to 1000 [ 694.439318][T17554] ./bus: Can't lookup blockdev [ 694.622118][T17564] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 694.684138][T17571] netlink: 'syz.4.3506': attribute type 3 has an invalid length. [ 694.694635][T17573] kAFS: No cell specified [ 694.711652][T17571] NILFS (loop4): device size too small [ 695.048056][T17585] overlay: Unknown parameter '/' [ 695.196926][T17585] netlink: zone id is out of range [ 695.198864][T17585] netlink: zone id is out of range [ 695.203335][T17585] netlink: zone id is out of range [ 695.205140][T17585] netlink: zone id is out of range [ 695.226496][T17584] input: syz0 as /devices/virtual/input/input111 [ 695.442448][T17587] ./bus: Can't lookup blockdev [ 695.497933][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 695.570784][ T6282] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 695.777399][ T6282] (NULL device *): queue 0 connect admin queue failed (-111). [ 695.783908][ T6282] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 695.793712][ T6282] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 695.869918][T17583] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3509'. [ 696.112680][T17597] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3514'. [ 696.161611][T17597] team0 (unregistering): Port device team_slave_0 removed [ 696.185971][T17597] team0 (unregistering): Port device team_slave_1 removed [ 696.274738][T17599] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 696.306104][T17599] syzkaller0: entered promiscuous mode [ 696.321536][T17599] syzkaller0: entered allmulticast mode [ 697.140330][T17616] fuse: fd is not a fuse device [ 697.282502][T17623] overlay: Unknown parameter '/' [ 697.296784][T17623] netlink: zone id is out of range [ 697.304938][T17623] netlink: zone id is out of range [ 697.307489][T17623] netlink: zone id is out of range [ 697.310435][T17623] netlink: zone id is out of range [ 697.333526][T17625] overlayfs: missing 'lowerdir' [ 697.376064][T17625] netlink: zone id is out of range [ 697.399195][T17625] netlink: zone id is out of range [ 697.412348][T17625] netlink: zone id is out of range [ 697.420417][T17625] netlink: zone id is out of range [ 697.808265][T15823] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 697.815109][T15823] (NULL device *): queue 0 connect admin queue failed (-111). [ 697.817710][T15823] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 697.820573][T15823] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 698.094693][T17642] fuse: Unknown parameter 'user_i00000000000000000000' [ 698.233386][T17646] tipc: Enabled bearer , priority 0 [ 698.236384][T17646] syzkaller0: entered promiscuous mode [ 698.238641][T17646] syzkaller0: entered allmulticast mode [ 698.243339][T17646] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 698.311838][T17649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3528'. [ 698.321818][T17647] ./bus: Can't lookup blockdev [ 698.368149][T17645] tipc: Resetting bearer [ 698.433254][T17645] tipc: Disabling bearer [ 698.565406][T17655] tipc: Enabled bearer , priority 0 [ 698.569761][T17655] syzkaller0: entered promiscuous mode [ 698.572072][T17655] syzkaller0: entered allmulticast mode [ 698.581309][T17655] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 698.664549][T17654] tipc: Resetting bearer [ 698.683484][T17654] tipc: Disabling bearer [ 698.964168][T17667] fuse: fd is not a fuse device [ 699.865926][T17678] tipc: Enabled bearer , priority 0 [ 699.869889][T17678] syzkaller0: entered promiscuous mode [ 699.872111][T17678] syzkaller0: entered allmulticast mode [ 699.877673][T17678] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 699.899809][T15854] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 699.913134][T15854] (NULL device *): queue 0 connect admin queue failed (-111). [ 699.950106][T15854] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 699.960300][T15854] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 700.006650][T17677] tipc: Resetting bearer [ 700.042143][T17677] tipc: Disabling bearer [ 700.421005][T17700] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3549'. [ 700.426009][T17699] ./bus: Can't lookup blockdev [ 700.561621][T17700] syz.5.3549: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 700.569853][T17700] CPU: 0 UID: 0 PID: 17700 Comm: syz.5.3549 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.569898][T17700] Tainted: [L]=SOFTLOCKUP [ 700.569906][T17700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 700.569931][T17700] Call Trace: [ 700.569949][T17700] [ 700.569957][T17700] dump_stack_lvl+0x100/0x190 [ 700.570006][T17700] warn_alloc.cold+0x94/0xa8 [ 700.570040][T17700] ? __pfx_warn_alloc+0x10/0x10 [ 700.570087][T17700] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 700.570117][T17700] ? __pfx_get_page_from_freelist+0x10/0x10 [ 700.570148][T17700] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 700.570176][T17700] ? __lock_acquire+0x49f/0x1a40 [ 700.570221][T17700] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 700.570248][T17700] ? find_held_lock+0x2b/0x80 [ 700.570272][T17700] ? __free_frozen_pages+0x747/0x1090 [ 700.570302][T17700] ? __free_frozen_pages+0x747/0x1090 [ 700.570330][T17700] ? do_raw_spin_unlock+0x145/0x1e0 [ 700.570352][T17700] ? _raw_spin_unlock+0x28/0x50 [ 700.570379][T17700] ? irqentry_exit+0x24d/0xa00 [ 700.570411][T17700] __folio_alloc_noprof+0x13/0x260 [ 700.570434][T17700] alloc_migration_target+0x1d7/0x6d0 [ 700.570474][T17700] migrate_pages_batch+0x5dc/0x45c0 [ 700.570506][T17700] ? __pfx_alloc_migration_target+0x10/0x10 [ 700.570553][T17700] ? migrate_pages_sync+0x12c/0x880 [ 700.570582][T17700] ? migrate_pages_sync+0x588/0x880 [ 700.570615][T17700] ? __pfx_migrate_pages_batch+0x10/0x10 [ 700.570648][T17700] ? __pfx_migrate_pages_sync+0x10/0x10 [ 700.570674][T17700] ? __free_object+0x2a8/0x3f0 [ 700.570730][T17700] ? __lock_acquire+0x49f/0x1a40 [ 700.570742][T17700] ? __css_rstat_updated+0x1ce/0x5a0 [ 700.570794][T17700] migrate_pages+0x1950/0x2850 [ 700.570822][T17700] ? __lock_acquire+0x49f/0x1a40 [ 700.570841][T17700] ? __pfx_alloc_migration_target+0x10/0x10 [ 700.570872][T17700] ? __pfx_migrate_pages+0x10/0x10 [ 700.570904][T17700] ? __lock_acquire+0x49f/0x1a40 [ 700.570925][T17700] ? mtree_load+0x32d/0xa90 [ 700.570956][T17700] move_pages_and_store_status+0xf1/0x230 [ 700.570987][T17700] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 700.571027][T17700] kernel_move_pages+0xc89/0x14a0 [ 700.571062][T17700] ? __pfx_kernel_move_pages+0x10/0x10 [ 700.571098][T17700] ? xfd_validate_state+0x129/0x190 [ 700.571139][T17700] __ia32_sys_move_pages+0xdd/0x1b0 [ 700.571156][T17700] ? __do_fast_syscall_32+0x98/0x970 [ 700.571183][T17700] ? lockdep_hardirqs_on+0x78/0x100 [ 700.571206][T17700] __do_fast_syscall_32+0xe7/0x970 [ 700.571235][T17700] do_fast_syscall_32+0x32/0x70 [ 700.571261][T17700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 700.571283][T17700] RIP: 0023:0xf704efec [ 700.571307][T17700] Code: Unable to access opcode bytes at 0xf704efc2. [ 700.571327][T17700] RSP: 002b:00000000f53fb50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 700.571348][T17700] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 700.571360][T17700] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 700.571372][T17700] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 700.571383][T17700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.571396][T17700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 700.571420][T17700] [ 700.571627][T17700] Mem-Info: [ 700.713554][T17700] active_anon:6977 inactive_anon:815 isolated_anon:12 [ 700.713554][T17700] active_file:3263 inactive_file:19874 isolated_file:0 [ 700.713554][T17700] unevictable:1000 dirty:653 writeback:0 [ 700.713554][T17700] slab_reclaimable:6978 slab_unreclaimable:72241 [ 700.713554][T17700] mapped:31372 shmem:3908 pagetables:1435 [ 700.713554][T17700] sec_pagetables:317 bounce:0 [ 700.713554][T17700] kernel_misc_reclaimable:0 [ 700.713554][T17700] free:40563 free_pcp:5063 free_cma:0 [ 700.734161][T17700] Node 0 active_anon:28kB inactive_anon:4kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1052kB dirty:4kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8960kB pagetables:1644kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 700.748203][T17700] Node 1 active_anon:24380kB inactive_anon:3256kB active_file:13052kB inactive_file:79480kB unevictable:4000kB isolated(anon):48kB isolated(file):0kB mapped:124436kB dirty:2608kB writeback:0kB shmem:15628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7060kB pagetables:4096kB sec_pagetables:156kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 700.763193][T17700] Node 0 DMA free:2240kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 700.775057][T17700] lowmem_reserve[]: 0 280 280 280 280 [ 700.777536][T17700] Node 0 DMA32 free:21104kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:4kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:4kB zspages:1496kB present:1032196kB managed:287068kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 700.791470][T17700] lowmem_reserve[]: 0 0 0 0 0 [ 700.793677][T17700] Node 1 DMA32 free:138908kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:208KB active_anon:18680kB inactive_anon:3256kB active_file:13052kB inactive_file:79480kB unevictable:5700kB writepending:2608kB zspages:4916kB present:1048432kB managed:948212kB mlocked:1700kB bounce:0kB free_pcp:28116kB local_pcp:408kB free_cma:0kB [ 700.808138][T17700] lowmem_reserve[]: 0 0 0 0 0 [ 700.810354][T17700] Node 0 DMA: 20*4kB (UM) 12*8kB (U) 5*16kB (UM) 4*32kB (UM) 1*64kB (M) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2240kB [ 700.817346][T17700] Node 0 DMA32: 337*4kB (UME) 168*8kB (UME) 97*16kB (UME) 131*32kB (UME) 34*64kB (UME) 24*128kB (UME) 9*256kB (UME) 6*512kB (ME) 0*1024kB 1*2048kB (M) 0*4096kB = 21108kB [ 700.825871][T17700] Node 1 DMA32: 10*4kB (E) 189*8kB (UMEH) 860*16kB (UMEH) 408*32kB (UMEH) 266*64kB (UMEH) 90*128kB (ME) 42*256kB (ME) 29*512kB (UM) 25*1024kB (UM) 9*2048kB (M) 3*4096kB (UM) = 138832kB [ 700.835036][T17700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 700.839434][T17700] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 700.843245][T17700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 700.847343][T17700] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 700.852560][T17700] 27779 total pagecache pages [ 700.854758][T17700] 749 pages in swap cache [ 700.856660][T17700] Free swap = 83904kB [ 700.858987][T17700] Total swap = 124996kB [ 700.861003][T17700] 524155 pages RAM [ 700.862706][T17700] 0 pages HighMem/MovableOnly [ 700.864824][T17700] 211495 pages reserved [ 700.866724][T17700] 0 pages cma reserved [ 701.151959][T17709] netlink: NAT attribute has 5 unknown bytes [ 701.154303][T17709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 701.170591][T17709] CIFS: iocharset name too long [ 701.259886][T17715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3555'. [ 701.273390][T17717] tipc: Enabled bearer , priority 0 [ 701.280493][T17717] syzkaller0: entered promiscuous mode [ 701.283993][T17717] syzkaller0: entered allmulticast mode [ 701.291414][T17717] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 701.394180][T17716] tipc: Resetting bearer [ 701.416983][T17716] tipc: Disabling bearer [ 701.435153][T17725] overlay: Unknown parameter '/' [ 701.768579][T17739] fuse: Unknown parameter 'user_id00000000000000000000' [ 701.981379][ T6282] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 701.991710][ T6282] (NULL device *): queue 0 connect admin queue failed (-111). [ 701.996226][ T6282] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 702.002253][ T6282] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 702.207262][T17745] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3565'. [ 702.723214][T17758] tipc: Enabled bearer , priority 0 [ 702.731810][T17758] syzkaller0: entered promiscuous mode [ 702.736537][T17758] syzkaller0: entered allmulticast mode [ 702.751179][T17758] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 702.861971][T17757] tipc: Resetting bearer [ 702.912616][T17757] tipc: Disabling bearer [ 702.956457][T17767] fuse: fd is not a fuse device [ 703.042903][T17773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3576'. [ 703.240046][T17785] 9p: Bad value for 'rfdno' [ 703.246183][T17785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 703.250925][T17785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 703.255377][T17785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 703.257469][T17787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3580'. [ 703.259907][T17785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 703.266675][T17785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 703.298182][T17785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead [ 703.303959][T17785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead [ 703.316199][T17785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 703.321756][T17785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 703.329469][T17785] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 703.333072][T17785] jffs2: Further such events for this erase block will not be printed [ 703.336022][T17785] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 703.338905][T17785] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 703.341494][T17785] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 703.354087][T17785] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 703.357330][T17785] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 703.597198][T17793] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3582'. [ 703.786356][ T42] audit: type=1800 audit(1786284236.230:942): pid=17775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3574" name="/" dev="fuse" ino=6 res=0 errno=0 [ 703.939959][T17798] fuse: Bad value for 'fd' [ 704.048559][ T6282] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 704.053708][ T6282] (NULL device *): queue 0 connect admin queue failed (-111). [ 704.056547][ T6282] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 704.059948][ T6282] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 704.096414][T17805] tipc: Enabling of bearer rejected, failed to enable media [ 704.521220][T17820] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3591'. [ 704.525263][T17820] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3591'. [ 704.537982][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 704.899110][T17828] fuse: Bad value for 'fd' [ 705.216047][T17834] binder: 17832:17834 ioctl c02c5638 80000280 returned -22 [ 705.235469][T17834] netlink: 'syz.5.3596': attribute type 10 has an invalid length. [ 705.352390][T17836] tipc: Enabling of bearer rejected, failed to enable media [ 705.664198][T17849] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3598'. [ 705.808750][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 706.101936][ T42] audit: type=1326 audit(1786284238.550:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17855 comm="syz.1.3601" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x0 [ 706.128491][ T6282] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 706.134229][ T6282] (NULL device *): queue 0 connect admin queue failed (-111). [ 706.136785][ T6282] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 706.140240][ T6282] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 706.294355][T17865] tipc: Started in network mode [ 706.296168][T17865] tipc: Node identity 7f000001, cluster identity 4711 [ 706.300904][T17865] tipc: Enabled bearer , priority 10 [ 706.316665][T17865] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3605'. [ 706.331360][T17865] tipc: Enabling of bearer rejected, failed to enable media [ 706.933216][T17903] FAULT_INJECTION: forcing a failure. [ 706.933216][T17903] name failslab, interval 1, probability 0, space 0, times 0 [ 706.938241][T17903] CPU: 1 UID: 0 PID: 17903 Comm: syz.4.3617 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.938261][T17903] Tainted: [L]=SOFTLOCKUP [ 706.938266][T17903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 706.938273][T17903] Call Trace: [ 706.938277][T17903] [ 706.938283][T17903] dump_stack_lvl+0x100/0x190 [ 706.938301][T17903] should_fail_ex.cold+0x5/0xa [ 706.938321][T17903] should_failslab+0xc2/0x120 [ 706.938337][T17903] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 706.938353][T17903] ? __alloc_skb+0x5b7/0x710 [ 706.938390][T17903] ? __alloc_skb+0x140/0x710 [ 706.938406][T17903] __alloc_skb+0x140/0x710 [ 706.938420][T17903] ? __alloc_skb+0x5b7/0x710 [ 706.938433][T17903] ? __pfx___alloc_skb+0x10/0x10 [ 706.938451][T17903] netlink_alloc_large_skb+0x69/0x150 [ 706.938472][T17903] netlink_sendmsg+0x680/0xda0 [ 706.938487][T17903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 706.938501][T17903] ? apparmor_socket_sendmsg+0x15b/0x270 [ 706.938517][T17903] ____sys_sendmsg+0xa4d/0xbe0 [ 706.938528][T17903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 706.938541][T17903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 706.938558][T17903] ___sys_sendmsg+0x190/0x1e0 [ 706.938571][T17903] ? __pfx____sys_sendmsg+0x10/0x10 [ 706.938589][T17903] ? find_held_lock+0x2b/0x80 [ 706.938613][T17903] __sys_sendmsg+0x160/0x210 [ 706.938629][T17903] ? __pfx___sys_sendmsg+0x10/0x10 [ 706.938652][T17903] ? __pfx_ksys_write+0x10/0x10 [ 706.938666][T17903] __do_fast_syscall_32+0xe7/0x970 [ 706.938698][T17903] ? lockdep_hardirqs_on+0x78/0x100 [ 706.938714][T17903] do_fast_syscall_32+0x32/0x70 [ 706.938730][T17903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 706.938745][T17903] RIP: 0023:0xf70befec [ 706.938760][T17903] Code: Unable to access opcode bytes at 0xf70befc2. [ 706.938765][T17903] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 706.938777][T17903] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800002c0 [ 706.938784][T17903] RDX: 00000000040c0080 RSI: 0000000000000000 RDI: 0000000000000000 [ 706.938790][T17903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 706.938796][T17903] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 706.938802][T17903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 706.938825][T17903] [ 707.165780][T17906] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3618'. [ 707.308268][T13529] tipc: Node number set to 2130706433 [ 707.729721][T17918] ./bus: Can't lookup blockdev [ 708.207946][T15842] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 708.213845][T15842] (NULL device *): queue 0 connect admin queue failed (-111). [ 708.217217][T15842] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 708.220851][T15842] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 708.291635][T17922] overlay: Unknown parameter '/' [ 708.320119][T17922] net_ratelimit: 4 callbacks suppressed [ 708.320202][T17922] netlink: zone id is out of range [ 708.324980][T17922] netlink: zone id is out of range [ 708.327644][T17922] netlink: zone id is out of range [ 708.376850][T17921] input: syz0 as /devices/virtual/input/input112 [ 709.339437][T17945] ./bus: Can't lookup blockdev [ 709.540132][T17898] Set syz1 is full, maxelem 65536 reached [ 709.671963][T17952] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3630'. [ 709.841465][T17961] ./bus: Can't lookup blockdev [ 710.122373][T17970] tipc: Enabled bearer , priority 0 [ 710.126501][T17970] syzkaller0: entered promiscuous mode [ 710.129213][T17970] syzkaller0: entered allmulticast mode [ 710.135337][T17970] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 710.232790][T17969] tipc: Resetting bearer [ 710.252048][T17969] tipc: Disabling bearer [ 710.290426][ T6282] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 710.295694][ T6282] (NULL device *): queue 0 connect admin queue failed (-111). [ 710.299105][ T6282] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 710.302239][ T6282] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 710.346155][T17973] fuse: Unknown parameter '0x0000000000000004' [ 710.774592][T17999] fuse: Unknown parameter '0x0000000000000004' [ 710.810898][T18000] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3647'. [ 710.896786][T18005] warn_alloc: 5 callbacks suppressed [ 710.896810][T18005] syz.2.3647: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 710.906060][T18005] CPU: 2 UID: 0 PID: 18005 Comm: syz.2.3647 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.906089][T18005] Tainted: [L]=SOFTLOCKUP [ 710.906095][T18005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 710.906104][T18005] Call Trace: [ 710.906112][T18005] [ 710.906120][T18005] dump_stack_lvl+0x100/0x190 [ 710.906148][T18005] warn_alloc.cold+0x94/0xa8 [ 710.906165][T18005] ? __pfx_warn_alloc+0x10/0x10 [ 710.906190][T18005] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 710.906218][T18005] ? __pfx_get_page_from_freelist+0x10/0x10 [ 710.906241][T18005] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 710.906264][T18005] ? __lock_acquire+0x49f/0x1a40 [ 710.906287][T18005] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 710.906309][T18005] ? find_held_lock+0x2b/0x80 [ 710.906330][T18005] ? __free_frozen_pages+0x747/0x1090 [ 710.906357][T18005] ? __free_frozen_pages+0x747/0x1090 [ 710.906386][T18005] ? do_raw_spin_unlock+0x145/0x1e0 [ 710.906404][T18005] ? _raw_spin_unlock+0x28/0x50 [ 710.906426][T18005] ? __pfx_alloc_migration_target+0x10/0x10 [ 710.906462][T18005] __folio_alloc_noprof+0x13/0x260 [ 710.906483][T18005] alloc_migration_target+0x1d7/0x6d0 [ 710.906511][T18005] migrate_pages_batch+0x5dc/0x45c0 [ 710.906540][T18005] ? __pfx_alloc_migration_target+0x10/0x10 [ 710.906571][T18005] ? migrate_pages_sync+0x12c/0x880 [ 710.906605][T18005] ? migrate_pages_sync+0x588/0x880 [ 710.906630][T18005] ? __pfx_migrate_pages_batch+0x10/0x10 [ 710.906663][T18005] ? __pfx_migrate_pages_sync+0x10/0x10 [ 710.906698][T18005] ? __lock_acquire+0x49f/0x1a40 [ 710.906713][T18005] ? __css_rstat_updated+0x1ce/0x5a0 [ 710.906746][T18005] migrate_pages+0x1950/0x2850 [ 710.906774][T18005] ? __lock_acquire+0x49f/0x1a40 [ 710.906792][T18005] ? __pfx_alloc_migration_target+0x10/0x10 [ 710.906825][T18005] ? __pfx_migrate_pages+0x10/0x10 [ 710.906860][T18005] ? __lock_acquire+0x49f/0x1a40 [ 710.906879][T18005] ? mtree_load+0x32d/0xa90 [ 710.906909][T18005] move_pages_and_store_status+0xf1/0x230 [ 710.906938][T18005] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 710.906975][T18005] kernel_move_pages+0xc89/0x14a0 [ 710.907009][T18005] ? __pfx_kernel_move_pages+0x10/0x10 [ 710.907043][T18005] ? xfd_validate_state+0x129/0x190 [ 710.907069][T18005] __ia32_sys_move_pages+0xdd/0x1b0 [ 710.907085][T18005] ? __do_fast_syscall_32+0x98/0x970 [ 710.907113][T18005] ? lockdep_hardirqs_on+0x78/0x100 [ 710.907137][T18005] __do_fast_syscall_32+0xe7/0x970 [ 710.907164][T18005] do_fast_syscall_32+0x32/0x70 [ 710.907187][T18005] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 710.907213][T18005] RIP: 0023:0xf700efec [ 710.907238][T18005] Code: Unable to access opcode bytes at 0xf700efc2. [ 710.907246][T18005] RSP: 002b:00000000f53bb50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 710.907266][T18005] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 710.907277][T18005] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 710.907289][T18005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 710.907299][T18005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.907309][T18005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 710.907333][T18005] [ 710.907341][T18005] Mem-Info: [ 711.051103][T18005] active_anon:1545 inactive_anon:743 isolated_anon:12 [ 711.051103][T18005] active_file:3264 inactive_file:18158 isolated_file:0 [ 711.051103][T18005] unevictable:1000 dirty:144 writeback:0 [ 711.051103][T18005] slab_reclaimable:6869 slab_unreclaimable:75110 [ 711.051103][T18005] mapped:26002 shmem:1058 pagetables:1350 [ 711.051103][T18005] sec_pagetables:318 bounce:0 [ 711.051103][T18005] kernel_misc_reclaimable:0 [ 711.051103][T18005] free:37988 free_pcp:14474 free_cma:0 [ 711.067943][T18005] Node 0 active_anon:20kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1052kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8960kB pagetables:1644kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 711.079829][T18005] Node 1 active_anon:8360kB inactive_anon:2968kB active_file:13052kB inactive_file:72632kB unevictable:4000kB isolated(anon):48kB isolated(file):0kB mapped:105056kB dirty:676kB writeback:0kB shmem:6332kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6644kB pagetables:3756kB sec_pagetables:160kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 711.092163][T18005] Node 0 DMA free:2240kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 711.103770][T18005] lowmem_reserve[]: 0 280 280 280 280 [ 711.107391][T18005] Node 0 DMA32 free:21320kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:1220kB present:1032196kB managed:287068kB mlocked:0kB bounce:0kB free_pcp:912kB local_pcp:360kB free_cma:0kB [ 711.118686][T18005] lowmem_reserve[]: 0 0 0 0 0 [ 711.120709][T18005] Node 1 DMA32 free:128392kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:212KB active_anon:12660kB inactive_anon:2968kB active_file:13052kB inactive_file:72632kB unevictable:4000kB writepending:676kB zspages:4400kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:50788kB local_pcp:9676kB free_cma:0kB [ 711.134105][T18005] lowmem_reserve[]: 0 0 0 0 0 [ 711.135919][T18005] Node 0 DMA: 20*4kB (UM) 12*8kB (U) 5*16kB (UM) 4*32kB (UM) 1*64kB (M) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2240kB [ 711.141082][T18005] Node 0 DMA32: 348*4kB (UME) 167*8kB (UME) 96*16kB (UME) 131*32kB (UME) 35*64kB (UME) 25*128kB (UME) 9*256kB (UME) 6*512kB (ME) 0*1024kB 1*2048kB (M) 0*4096kB = 21320kB [ 711.146658][T18005] Node 1 DMA32: 1293*4kB (UMEH) 90*8kB (MEH) 280*16kB (UMEH) 148*32kB (UMEH) 150*64kB (UMEH) 97*128kB (UME) 52*256kB (UME) 30*512kB (UM) 25*1024kB (UM) 6*2048kB (UM) 6*4096kB (M) = 128260kB [ 711.155822][T18005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 711.160011][T18005] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 711.163859][T18005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 711.166988][T18005] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 711.170440][T18005] 26287 total pagecache pages [ 711.172748][T18005] 959 pages in swap cache [ 711.174899][T18005] Free swap = 85304kB [ 711.176723][T18005] Total swap = 124996kB [ 711.179006][T18005] 524155 pages RAM [ 711.180682][T18005] 0 pages HighMem/MovableOnly [ 711.182703][T18005] 211495 pages reserved [ 711.184372][T18005] 0 pages cma reserved [ 711.272246][T18011] ./bus: Can't lookup blockdev [ 711.464404][T18013] FAULT_INJECTION: forcing a failure. [ 711.464404][T18013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.469666][T18013] CPU: 3 UID: 0 PID: 18013 Comm: syz.4.3654 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.469693][T18013] Tainted: [L]=SOFTLOCKUP [ 711.469698][T18013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 711.469707][T18013] Call Trace: [ 711.469713][T18013] [ 711.469720][T18013] dump_stack_lvl+0x100/0x190 [ 711.469751][T18013] should_fail_ex.cold+0x5/0xa [ 711.469771][T18013] _copy_from_iter+0x1f4/0x1690 [ 711.469797][T18013] ? __asan_memset+0x23/0x50 [ 711.469816][T18013] ? __pfx__copy_from_iter+0x10/0x10 [ 711.469836][T18013] ? __pfx___alloc_skb+0x10/0x10 [ 711.469865][T18013] netlink_sendmsg+0x808/0xda0 [ 711.469888][T18013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.469908][T18013] ? apparmor_socket_sendmsg+0x15b/0x270 [ 711.469928][T18013] ____sys_sendmsg+0xa4d/0xbe0 [ 711.469943][T18013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.469961][T18013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 711.469986][T18013] ___sys_sendmsg+0x190/0x1e0 [ 711.470004][T18013] ? __pfx____sys_sendmsg+0x10/0x10 [ 711.470033][T18013] ? find_held_lock+0x2b/0x80 [ 711.470067][T18013] __sys_sendmsg+0x160/0x210 [ 711.470087][T18013] ? __pfx___sys_sendmsg+0x10/0x10 [ 711.470112][T18013] ? __pfx_ksys_write+0x10/0x10 [ 711.470131][T18013] __do_fast_syscall_32+0xe7/0x970 [ 711.470152][T18013] ? lockdep_hardirqs_on+0x78/0x100 [ 711.470172][T18013] do_fast_syscall_32+0x32/0x70 [ 711.470192][T18013] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 711.470212][T18013] RIP: 0023:0xf70befec [ 711.470234][T18013] Code: Unable to access opcode bytes at 0xf70befc2. [ 711.470241][T18013] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 711.470257][T18013] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 711.470266][T18013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 711.470274][T18013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 711.470282][T18013] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 711.470290][T18013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 711.470310][T18013] [ 712.164540][T18032] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3661'. [ 712.377832][T15829] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 712.382456][T15829] (NULL device *): queue 0 connect admin queue failed (-111). [ 712.392223][T15829] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 712.399228][T15829] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 712.925924][T18053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3670'. [ 713.065828][T18056] overlay: Unknown parameter '/' [ 713.079705][T18056] netlink: zone id is out of range [ 713.081571][T18056] netlink: zone id is out of range [ 713.090606][T18056] netlink: zone id is out of range [ 713.336585][T18060] ./bus: Can't lookup blockdev [ 713.820113][T18072] fuse: fd is not a fuse device [ 713.880447][T18074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3679'. [ 714.119932][T18079] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3681'. [ 714.457951][T15826] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 714.464128][T15826] (NULL device *): queue 0 connect admin queue failed (-111). [ 714.467550][T15826] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 714.471992][T15826] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 714.626020][T18090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3685'. [ 714.722449][T18092] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 714.727246][T18092] ip6gretap1: entered promiscuous mode [ 715.105817][T18097] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.109443][T18097] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.240671][T18097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.261153][T18097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.471088][T13669] lo speed is unknown, defaulting to 1000 [ 715.475711][T13669] syz2: Port: 1 Link DOWN [ 715.501838][T13500] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.514870][T13500] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.526137][T13669] lo speed is unknown, defaulting to 1000 [ 715.540138][T13500] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.543816][T13500] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.908836][T18114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3690'. [ 715.931525][T18119] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3695'. [ 716.527937][T15826] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 716.534198][T15826] (NULL device *): queue 0 connect admin queue failed (-111). [ 716.537472][T15826] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 716.541371][T15826] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 716.784511][T18137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3701'. [ 717.020899][T18156] overlayfs: failed to resolve './file0': -2 [ 717.233700][T18165] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3708'. [ 717.310229][T18170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3712'. [ 717.782058][T18181] ./bus: Can't lookup blockdev [ 718.610409][T15823] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 718.614493][T15823] (NULL device *): queue 0 connect admin queue failed (-111). [ 718.635216][T15823] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 718.640215][T15823] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 718.864454][T18212] overlayfs: failed to clone upperpath [ 719.878124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 720.697906][T15826] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 720.702079][T15826] (NULL device *): queue 0 connect admin queue failed (-111). [ 720.704521][T15826] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 720.707026][T15826] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 720.928442][T18239] tipc: Enabling of bearer rejected, failed to enable media [ 721.178527][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 721.971263][ T42] audit: type=1800 audit(1786284254.420:944): pid=18253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3739" name="file0" dev="tmpfs" ino=1893 res=0 errno=0 [ 722.583877][ T42] audit: type=1326 audit(1786284255.030:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.2.3745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 722.592426][ T42] audit: type=1326 audit(1786284255.030:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.2.3745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 722.601678][ T42] audit: type=1326 audit(1786284255.030:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.2.3745" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf700efec code=0x7ffc0000 [ 722.630670][ T42] audit: type=1326 audit(1786284255.070:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.2.3745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 722.646545][T18099] libceph: connect (1)[c::]:6789 error -101 [ 722.649334][T18099] libceph: mon0 (1)[c::]:6789 connect error [ 722.650207][ T42] audit: type=1326 audit(1786284255.070:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.2.3745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 722.660988][ T42] audit: type=1326 audit(1786284255.070:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.2.3745" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf700efec code=0x7ffc0000 [ 722.670777][ T42] audit: type=1326 audit(1786284255.070:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.2.3745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 722.680301][ T42] audit: type=1326 audit(1786284255.070:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.2.3745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 722.690535][ T42] audit: type=1326 audit(1786284255.070:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.2.3745" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf700efec code=0x7ffc0000 [ 722.777905][T15826] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 722.781887][T15826] (NULL device *): queue 0 connect admin queue failed (-111). [ 722.784322][T15826] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 722.786884][T15826] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 722.948376][T18099] libceph: connect (1)[c::]:6789 error -101 [ 722.951585][T18099] libceph: mon0 (1)[c::]:6789 connect error [ 723.142192][T18274] ceph: No mds server is up or the cluster is laggy [ 723.619102][T18304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3750'. [ 723.774913][T18309] overlay: Unknown parameter '/' [ 724.519124][T18324] ./bus: Can't lookup blockdev [ 724.847989][T15854] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 724.853329][T15854] (NULL device *): queue 0 connect admin queue failed (-111). [ 724.856563][T15854] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 724.860029][T15854] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 726.194182][ T5090] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 726.203801][ T5090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 726.211744][ T5090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 726.214973][ T5090] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 726.219835][ T5090] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 726.493317][T18355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3764'. [ 726.570634][T18338] lo speed is unknown, defaulting to 1000 [ 726.833935][T18365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3766'. [ 726.851613][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.948013][ T6282] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 726.989037][T18338] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.991483][T18338] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.994199][T18338] bridge_slave_0: entered allmulticast mode [ 726.997040][T18338] bridge_slave_0: entered promiscuous mode [ 727.000968][T18338] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.003411][T18338] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.005511][T18338] bridge_slave_1: entered allmulticast mode [ 727.008456][T18338] bridge_slave_1: entered promiscuous mode [ 727.025550][T18338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.030349][T18338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.047244][T18338] team0: Port device team_slave_0 added [ 727.050854][T18338] team0: Port device team_slave_1 added [ 727.066269][T18338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.073405][T18338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.080234][ T6282] (NULL device *): queue 0 connect admin queue failed (-111). [ 727.081984][T18338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.089228][T18338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.091547][T18338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.093592][ T6282] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 727.100284][T18338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.124738][ T6282] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 727.153570][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.186405][T18338] hsr_slave_0: entered promiscuous mode [ 727.189431][T18338] hsr_slave_1: entered promiscuous mode [ 727.191806][T18338] debugfs: 'hsr0' already exists in 'hsr' [ 727.194762][T18338] Cannot create hsr debugfs directory [ 727.230923][T18380] ./bus: Can't lookup blockdev [ 727.270649][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.520695][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.597993][T18338] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 727.604543][T18338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 727.608113][T18338] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 727.615267][T18338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 727.634938][T18338] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 727.659966][T18338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 727.663071][T18338] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 727.682809][T18384] fuse: fd is not a fuse device [ 727.683407][T18338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 727.929675][T18397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3772'. [ 727.935472][ T13] bridge_slave_1: left allmulticast mode [ 727.948631][ T13] bridge_slave_1: left promiscuous mode [ 727.950685][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.967375][ T13] bridge_slave_0: left allmulticast mode [ 727.978014][ T13] bridge_slave_0: left promiscuous mode [ 727.981391][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.014917][ T13] dvmrp8: left allmulticast mode [ 728.214232][T18413] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3776'. [ 728.257221][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.262802][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.266628][ T13] bond0 (unregistering): Released all slaves [ 728.283001][T18412] tipc: Enabled bearer , priority 0 [ 728.288034][ T5745] Bluetooth: hci4: command tx timeout [ 728.290479][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 728.296185][T18414] syzkaller0: entered promiscuous mode [ 728.299690][T18414] syzkaller0: entered allmulticast mode [ 728.307022][T18401] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 728.340340][T18417] overlay: Unknown parameter '/' [ 728.342968][T18413] warn_alloc: 3 callbacks suppressed [ 728.342981][T18413] syz.1.3776: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 728.351231][T18413] CPU: 0 UID: 0 PID: 18413 Comm: syz.1.3776 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.351252][T18413] Tainted: [L]=SOFTLOCKUP [ 728.351256][T18413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 728.351263][T18413] Call Trace: [ 728.351268][T18413] [ 728.351273][T18413] dump_stack_lvl+0x100/0x190 [ 728.351293][T18413] warn_alloc.cold+0x94/0xa8 [ 728.351306][T18413] ? __pfx_warn_alloc+0x10/0x10 [ 728.351325][T18413] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 728.351344][T18413] ? __pfx_get_page_from_freelist+0x10/0x10 [ 728.351360][T18413] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 728.351376][T18413] ? __lock_acquire+0x49f/0x1a40 [ 728.351391][T18413] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 728.351405][T18413] ? find_held_lock+0x2b/0x80 [ 728.351419][T18413] ? __free_frozen_pages+0x747/0x1090 [ 728.351436][T18413] ? __free_frozen_pages+0x747/0x1090 [ 728.351453][T18413] ? do_raw_spin_unlock+0x145/0x1e0 [ 728.351466][T18413] ? _raw_spin_unlock+0x28/0x50 [ 728.351488][T18413] __folio_alloc_noprof+0x13/0x260 [ 728.351505][T18413] alloc_migration_target+0x1d7/0x6d0 [ 728.351524][T18413] migrate_pages_batch+0x5dc/0x45c0 [ 728.351543][T18413] ? __pfx_alloc_migration_target+0x10/0x10 [ 728.351562][T18413] ? migrate_pages_sync+0x12c/0x880 [ 728.351578][T18413] ? migrate_pages_sync+0x588/0x880 [ 728.351594][T18413] ? __pfx_migrate_pages_batch+0x10/0x10 [ 728.351614][T18413] ? __pfx_migrate_pages_sync+0x10/0x10 [ 728.351630][T18413] ? __free_object+0x2a8/0x3f0 [ 728.351650][T18413] ? __lock_acquire+0x49f/0x1a40 [ 728.351659][T18413] ? __css_rstat_updated+0x1ce/0x5a0 [ 728.351678][T18413] migrate_pages+0x1950/0x2850 [ 728.351695][T18413] ? __lock_acquire+0x49f/0x1a40 [ 728.351706][T18413] ? __pfx_alloc_migration_target+0x10/0x10 [ 728.351725][T18413] ? __pfx_migrate_pages+0x10/0x10 [ 728.351744][T18413] ? __lock_acquire+0x49f/0x1a40 [ 728.351756][T18413] ? mtree_load+0x32d/0xa90 [ 728.351775][T18413] move_pages_and_store_status+0xf1/0x230 [ 728.351793][T18413] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 728.351816][T18413] kernel_move_pages+0xc89/0x14a0 [ 728.351837][T18413] ? __pfx_kernel_move_pages+0x10/0x10 [ 728.351858][T18413] ? xfd_validate_state+0x129/0x190 [ 728.351877][T18413] __ia32_sys_move_pages+0xdd/0x1b0 [ 728.351887][T18413] ? __do_fast_syscall_32+0x98/0x970 [ 728.351903][T18413] ? lockdep_hardirqs_on+0x78/0x100 [ 728.351918][T18413] __do_fast_syscall_32+0xe7/0x970 [ 728.351936][T18413] do_fast_syscall_32+0x32/0x70 [ 728.351952][T18413] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 728.351967][T18413] RIP: 0023:0xf706efec [ 728.351983][T18413] Code: Unable to access opcode bytes at 0xf706efc2. [ 728.351988][T18413] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 728.352000][T18413] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 728.352007][T18413] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 728.352013][T18413] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 728.352019][T18413] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 728.352026][T18413] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 728.352039][T18413] [ 728.352044][T18413] Mem-Info: [ 728.452478][T18413] active_anon:5777 inactive_anon:754 isolated_anon:1 [ 728.452478][T18413] active_file:3457 inactive_file:18504 isolated_file:0 [ 728.452478][T18413] unevictable:1000 dirty:623 writeback:0 [ 728.452478][T18413] slab_reclaimable:6965 slab_unreclaimable:76499 [ 728.452478][T18413] mapped:26195 shmem:5141 pagetables:1245 [ 728.452478][T18413] sec_pagetables:318 bounce:0 [ 728.452478][T18413] kernel_misc_reclaimable:0 [ 728.452478][T18413] free:34693 free_pcp:12968 free_cma:0 [ 728.467530][T18413] Node 0 active_anon:4kB inactive_anon:20kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1052kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8896kB pagetables:1460kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 728.478212][T18413] Node 1 active_anon:23104kB inactive_anon:2996kB active_file:13824kB inactive_file:74016kB unevictable:4000kB isolated(anon):4kB isolated(file):0kB mapped:103728kB dirty:2488kB writeback:0kB shmem:20564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7052kB pagetables:3520kB sec_pagetables:160kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 728.489399][T18413] Node 0 DMA free:2240kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.498970][T18413] lowmem_reserve[]: 0 280 280 280 280 [ 728.499084][ T13] tipc: Left network mode [ 728.505308][T18413] Node 0 DMA32 free:21320kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:20kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:1140kB present:1032196kB managed:287068kB mlocked:0kB bounce:0kB free_pcp:4576kB local_pcp:1680kB free_cma:0kB [ 728.515151][T18413] lowmem_reserve[]: 0 0 0 0 0 [ 728.516697][T18413] Node 1 DMA32 free:115212kB boost:12288kB min:59428kB low:71212kB high:82996kB reserved_highatomic:2048KB free_highatomic:228KB active_anon:23104kB inactive_anon:2996kB active_file:13824kB inactive_file:74016kB unevictable:4000kB writepending:2488kB zspages:4212kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:47792kB local_pcp:7460kB free_cma:0kB [ 728.527939][T18400] tipc: Resetting bearer [ 728.527979][T18413] lowmem_reserve[]: 0 0 0 0 0 [ 728.532923][T18413] Node 0 DMA: 20*4kB (UM) 12*8kB (U) 5*16kB (UM) 4*32kB (UM) 1*64kB (M) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2240kB [ 728.537704][T18413] Node 0 DMA32: 348*4kB (UME) 167*8kB (UME) 96*16kB (UME) 131*32kB (UME) 35*64kB (UME) 25*128kB (UME) 9*256kB (UME) 6*512kB (ME) 0*1024kB 1*2048kB (M) 0*4096kB = 21320kB [ 728.556159][T18413] Node 1 DMA32: 14*4kB (MEH) 3*8kB (EH) 18*16kB (UMEH) 130*32kB (UMH) 231*64kB (UMEH) 73*128kB (UME) 40*256kB (UME) 25*512kB (UM) 14*1024kB (UM) 4*2048kB (M) 10*4096kB (U) = 115184kB [ 728.556991][T18400] tipc: Disabling bearer [ 728.564835][T18413] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.570397][T18413] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 728.573553][T18413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.576644][T18413] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 728.580089][T18413] 28065 total pagecache pages [ 728.581728][T18413] 965 pages in swap cache [ 728.585538][T18413] Free swap = 86952kB [ 728.591574][T18413] Total swap = 124996kB [ 728.594635][T18413] 524155 pages RAM [ 728.597551][T18413] 0 pages HighMem/MovableOnly [ 728.602123][T18413] 211495 pages reserved [ 728.603561][T18413] 0 pages cma reserved [ 728.609788][T18338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.628641][T18338] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.638304][T15826] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.640653][T15826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.671321][T15854] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.673682][T15854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.770085][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 729.043833][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 729.054942][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 729.054957][ T42] audit: type=1326 audit(1786284261.500:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18441 comm="syz.4.3781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 729.068572][ T42] audit: type=1326 audit(1786284261.510:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18441 comm="syz.4.3781" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf70befec code=0x7ffc0000 [ 729.075111][ T42] audit: type=1326 audit(1786284261.510:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18441 comm="syz.4.3781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 729.117830][ T42] audit: type=1326 audit(1786284261.520:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18441 comm="syz.4.3781" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70befec code=0x7ffc0000 [ 729.177849][T15826] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 729.182845][T15826] (NULL device *): queue 0 connect admin queue failed (-111). [ 729.186038][T15826] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 729.189828][T15826] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 729.223023][ T13] hsr_slave_0: left promiscuous mode [ 729.226110][ T13] hsr_slave_1: left promiscuous mode [ 729.232345][ T42] audit: type=1326 audit(1786284261.520:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18441 comm="syz.4.3781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 729.248692][ T42] audit: type=1326 audit(1786284261.520:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18441 comm="syz.4.3781" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf70befec code=0x7ffc0000 [ 729.258098][ T42] audit: type=1326 audit(1786284261.530:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18441 comm="syz.4.3781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 729.262568][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.271008][ T42] audit: type=1326 audit(1786284261.530:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18441 comm="syz.4.3781" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70befec code=0x7ffc0000 [ 729.286202][ T42] audit: type=1326 audit(1786284261.530:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18441 comm="syz.4.3781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 729.286769][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.295230][ T42] audit: type=1326 audit(1786284261.540:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18441 comm="syz.4.3781" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70befec code=0x7ffc0000 [ 729.310093][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.316239][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.326131][ T13] veth1_macvtap: left promiscuous mode [ 729.328843][ T13] veth0_macvtap: left promiscuous mode [ 729.331864][ T13] veth1_vlan: left promiscuous mode [ 729.334292][ T13] veth0_vlan: left promiscuous mode [ 729.405713][T18476] ./bus: Can't lookup blockdev [ 729.892205][T18338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.896041][T18482] syz_tun: entered allmulticast mode [ 729.900051][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 729.906936][T18481] syz_tun: left allmulticast mode [ 729.979861][T18492] netlink: 'syz.1.3785': attribute type 1 has an invalid length. [ 730.078826][T18492] bond2: option mode: invalid value (8) [ 730.089223][T18492] bond2 (unregistering): Released all slaves [ 730.149189][T18502] netlink: 'syz.1.3785': attribute type 10 has an invalid length. [ 730.157923][T18502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3785'. [ 730.211028][T18502] dummy0: entered promiscuous mode [ 730.346954][T18338] veth0_vlan: entered promiscuous mode [ 730.373921][T18338] veth1_vlan: entered promiscuous mode [ 730.381147][ T5745] Bluetooth: hci4: command tx timeout [ 730.406566][T18338] veth0_macvtap: entered promiscuous mode [ 730.411669][T18338] veth1_macvtap: entered promiscuous mode [ 730.422225][T18338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.429947][T18338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.457121][ T13] IPVS: stop unused estimator thread 0... [ 730.458279][T13500] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.461868][T13500] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.510465][T13500] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.518082][T13500] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.595677][T18521] overlay: Unknown parameter '/' [ 730.733656][T15854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.737014][T15854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.753719][T18521] input: syz0 as /devices/virtual/input/input113 [ 730.814868][ T6283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.827525][ T6283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.056644][T18487] ceph: No mds server is up or the cluster is laggy [ 731.062391][T18492] ceph: No mds server is up or the cluster is laggy [ 731.211153][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3791'. [ 731.219112][T18529] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3791'. [ 731.241052][T18529] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 731.247404][T18529] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 731.255779][ T6283] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 731.261227][ T6283] (NULL device *): queue 0 connect admin queue failed (-111). [ 731.264445][ T6283] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 731.272340][ T6283] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 731.386149][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3791'. [ 731.953248][T18548] ./bus: Can't lookup blockdev [ 731.976146][T18547] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3795'. [ 732.226663][T18555] overlay: Unknown parameter '/' [ 732.448237][ T5745] Bluetooth: hci4: command tx timeout [ 732.490034][T18560] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3799'. [ 732.493742][T18560] openvswitch: netlink: Flow actions attr not present in new flow. [ 732.620245][T18571] overlay: Unknown parameter '/' [ 732.673722][T18574] tipc: Enabled bearer , priority 0 [ 732.677538][T18574] syzkaller0: entered promiscuous mode [ 732.680724][T18574] syzkaller0: entered allmulticast mode [ 732.685430][T18574] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 732.771617][T18573] tipc: Resetting bearer [ 732.790203][T18573] tipc: Disabling bearer [ 733.338035][T15826] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 733.418030][T15826] (NULL device *): queue 0 connect admin queue failed (-111). [ 733.425093][T15826] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 733.429301][T15826] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 733.574159][T18605] ./bus: Can't lookup blockdev [ 733.986522][T18615] tipc: Enabling of bearer rejected, failed to enable media [ 734.170787][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 734.170807][ T42] audit: type=1326 audit(1786284266.620:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18624 comm="syz.1.3819" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 734.183949][ T42] audit: type=1326 audit(1786284266.630:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18624 comm="syz.1.3819" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 734.192610][ T42] audit: type=1326 audit(1786284266.630:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18624 comm="syz.1.3819" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf706efec code=0x7ffc0000 [ 734.280900][ T42] audit: type=1326 audit(1786284266.730:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18624 comm="syz.1.3819" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf706efec code=0x7ffc0000 [ 734.310732][T18638] fuse: fd is not a fuse device [ 734.315167][ T42] audit: type=1326 audit(1786284266.760:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18624 comm="syz.1.3819" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706f008 code=0x7ffc0000 [ 734.339339][ T42] audit: type=1326 audit(1786284266.760:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18624 comm="syz.1.3819" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 734.348152][ T42] audit: type=1326 audit(1786284266.760:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18624 comm="syz.1.3819" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 734.538265][ T5745] Bluetooth: hci4: command tx timeout [ 734.957539][T18664] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3831'. [ 735.437915][T18671] dummy0: entered promiscuous mode [ 735.444842][T18671] gretap0: entered promiscuous mode [ 735.447550][T18671] debugfs: 'hsr1' already exists in 'hsr' [ 735.449719][T18671] Cannot create hsr debugfs directory [ 735.456117][T18671] hsr1: entered allmulticast mode [ 735.462847][T18671] dummy0: entered allmulticast mode [ 735.464690][T18671] gretap0: entered allmulticast mode [ 735.488810][ T6282] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 735.494138][ T6282] (NULL device *): queue 0 connect admin queue failed (-111). [ 735.499222][ T6282] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 735.503121][ T6282] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 735.860762][T18678] ./bus: Can't lookup blockdev [ 736.511675][T18687] bond2: (slave team0): Device is not bonding slave [ 736.514602][T18687] bond2: option active_slave: invalid value (team0) [ 736.524006][T18687] bond2 (unregistering): Released all slaves [ 736.682649][T18696] tipc: Started in network mode [ 736.684351][T18696] tipc: Node identity 0e1c2918e717, cluster identity 4711 [ 736.688111][T18696] tipc: Enabled bearer , priority 0 [ 736.691913][T18696] syzkaller0: entered promiscuous mode [ 736.693764][T18696] syzkaller0: entered allmulticast mode [ 736.707977][T18696] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 736.953738][T18695] tipc: Resetting bearer [ 736.975605][T18695] tipc: Disabling bearer [ 737.002780][T18716] ./bus: Can't lookup blockdev [ 737.012310][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3848'. [ 737.212884][T18721] bond2 (unregistering): Released all slaves [ 737.492348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 737.568207][T15829] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 737.577037][T15829] (NULL device *): queue 0 connect admin queue failed (-111). [ 737.580317][T15829] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 737.583640][T15829] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 737.948805][ T6078] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 738.089572][T18732] fuse: fd is not a fuse device [ 738.098864][ T6078] usb 11-1: Using ep0 maxpacket: 8 [ 738.101406][T18732] netlink: 'syz.1.3852': attribute type 143 has an invalid length. [ 738.102160][ T6078] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 738.113320][ T6078] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 738.116375][ T6078] usb 11-1: config 0 has no interface number 0 [ 738.121177][ T6078] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 738.125446][ T6078] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.170395][ T6078] usb 11-1: config 0 descriptor?? [ 738.178508][ T6078] iowarrior 11-1:0.1: no interrupt-in endpoint found [ 738.600597][T18099] usb 11-1: USB disconnect, device number 2 [ 738.799255][T18747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3859'. [ 738.818502][T18747] netlink: 'syz.2.3859': attribute type 1 has an invalid length. [ 738.896823][T18749] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 739.128490][T18762] ./bus: Can't lookup blockdev [ 739.367906][T18777] 9pnet_virtio: no channels available for device syz [ 739.379550][T18777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3870'. [ 739.647919][T15829] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 739.654343][T15829] (NULL device *): queue 0 connect admin queue failed (-111). [ 739.657911][T15829] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 739.661399][T15829] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 739.922256][T18787] pimreg: entered allmulticast mode [ 740.534766][T18811] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3880'. [ 740.631375][T18811] warn_alloc: 2 callbacks suppressed [ 740.631395][T18811] syz.6.3880: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 740.664892][T18811] CPU: 1 UID: 0 PID: 18811 Comm: syz.6.3880 Tainted: G L syzkaller #0 PREEMPT(full) [ 740.664923][T18811] Tainted: [L]=SOFTLOCKUP [ 740.664928][T18811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 740.664937][T18811] Call Trace: [ 740.664942][T18811] [ 740.664948][T18811] dump_stack_lvl+0x100/0x190 [ 740.664979][T18811] warn_alloc.cold+0x94/0xa8 [ 740.664998][T18811] ? __pfx_warn_alloc+0x10/0x10 [ 740.665018][T18811] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 740.665037][T18811] ? __pfx_get_page_from_freelist+0x10/0x10 [ 740.665053][T18811] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 740.665069][T18811] ? __lock_acquire+0x49f/0x1a40 [ 740.665087][T18811] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 740.665116][T18811] ? find_held_lock+0x2b/0x80 [ 740.665130][T18811] ? __free_frozen_pages+0x747/0x1090 [ 740.665148][T18811] ? __free_frozen_pages+0x747/0x1090 [ 740.665166][T18811] ? do_raw_spin_unlock+0x145/0x1e0 [ 740.665179][T18811] ? _raw_spin_unlock+0x28/0x50 [ 740.665194][T18811] ? __pfx_alloc_migration_target+0x10/0x10 [ 740.665218][T18811] __folio_alloc_noprof+0x13/0x260 [ 740.665231][T18811] alloc_migration_target+0x1d7/0x6d0 [ 740.665249][T18811] migrate_pages_batch+0x5dc/0x45c0 [ 740.665268][T18811] ? __pfx_alloc_migration_target+0x10/0x10 [ 740.665287][T18811] ? migrate_pages_sync+0x12c/0x880 [ 740.665303][T18811] ? migrate_pages_sync+0x588/0x880 [ 740.665320][T18811] ? __pfx_migrate_pages_batch+0x10/0x10 [ 740.665339][T18811] ? __pfx_migrate_pages_sync+0x10/0x10 [ 740.665359][T18811] ? __lock_acquire+0x49f/0x1a40 [ 740.665368][T18811] ? __css_rstat_updated+0x1ce/0x5a0 [ 740.665389][T18811] migrate_pages+0x1950/0x2850 [ 740.665407][T18811] ? __lock_acquire+0x49f/0x1a40 [ 740.665417][T18811] ? __pfx_alloc_migration_target+0x10/0x10 [ 740.665436][T18811] ? __pfx_migrate_pages+0x10/0x10 [ 740.665460][T18811] ? __lock_acquire+0x49f/0x1a40 [ 740.665471][T18811] ? mtree_load+0x32d/0xa90 [ 740.665489][T18811] move_pages_and_store_status+0xf1/0x230 [ 740.665508][T18811] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 740.665531][T18811] kernel_move_pages+0xc89/0x14a0 [ 740.665553][T18811] ? __pfx_kernel_move_pages+0x10/0x10 [ 740.665574][T18811] ? xfd_validate_state+0x129/0x190 [ 740.665592][T18811] __ia32_sys_move_pages+0xdd/0x1b0 [ 740.665602][T18811] ? __do_fast_syscall_32+0x98/0x970 [ 740.665619][T18811] ? lockdep_hardirqs_on+0x78/0x100 [ 740.665633][T18811] __do_fast_syscall_32+0xe7/0x970 [ 740.665651][T18811] do_fast_syscall_32+0x32/0x70 [ 740.665667][T18811] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 740.665682][T18811] RIP: 0023:0xf6fcefec [ 740.665701][T18811] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 740.665709][T18811] RSP: 002b:00000000f537b50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 740.665724][T18811] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 740.665733][T18811] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 740.665742][T18811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 740.665750][T18811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.665760][T18811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 740.665780][T18811] [ 740.790145][T18811] Mem-Info: [ 740.791424][T18811] active_anon:8766 inactive_anon:1246 isolated_anon:12 [ 740.791424][T18811] active_file:4516 inactive_file:20345 isolated_file:0 [ 740.791424][T18811] unevictable:1000 dirty:724 writeback:0 [ 740.791424][T18811] slab_reclaimable:6985 slab_unreclaimable:73151 [ 740.791424][T18811] mapped:28411 shmem:7996 pagetables:1425 [ 740.791424][T18811] sec_pagetables:320 bounce:0 [ 740.791424][T18811] kernel_misc_reclaimable:0 [ 740.791424][T18811] free:30801 free_pcp:13133 free_cma:0 [ 740.810311][T18811] Node 0 active_anon:8kB inactive_anon:16kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1052kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8736kB pagetables:1460kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 740.823736][T18811] Node 1 active_anon:35056kB inactive_anon:4968kB active_file:18060kB inactive_file:81380kB unevictable:4000kB isolated(anon):48kB isolated(file):0kB mapped:112592kB dirty:2892kB writeback:0kB shmem:31984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7376kB pagetables:4240kB sec_pagetables:168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 740.837071][T18811] Node 0 DMA free:2240kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 740.849148][T18811] lowmem_reserve[]: 0 280 280 280 280 [ 740.851097][T18811] Node 0 DMA32 free:21448kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:16kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:1132kB present:1032196kB managed:287068kB mlocked:0kB bounce:0kB free_pcp:5876kB local_pcp:1116kB free_cma:0kB [ 740.855305][T18821] overlay: Unknown parameter '/' [ 740.861540][T18811] lowmem_reserve[]: 0 0 0 0 0 [ 740.861571][T18811] Node 1 DMA32 free:99516kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:288KB active_anon:35056kB inactive_anon:4968kB active_file:18060kB inactive_file:81380kB unevictable:4000kB writepending:2892kB zspages:4160kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:46772kB local_pcp:6928kB free_cma:0kB [ 740.861605][T18811] lowmem_reserve[]: 0 0 0 0 0 [ 740.861633][T18811] Node 0 DMA: 20*4kB (UM) 12*8kB (U) 5*16kB (UM) 4*32kB (UM) 1*64kB (M) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2240kB [ 740.882661][T18811] Node 0 DMA32: 348*4kB (UME) 167*8kB (UME) 96*16kB (UME) 131*32kB (UME) 37*64kB (UME) 25*128kB (UME) 9*256kB (UME) 6*512kB (ME) 0*1024kB 1*2048kB (M) 0*4096kB = 21448kB [ 740.888201][T18811] Node 1 DMA32: 1579*4kB (UMH) 291*8kB (UMH) 261*16kB (UMH) 165*32kB (UMH) 129*64kB (UMEH) 44*128kB (UE) 15*256kB (UME) 22*512kB (UM) 11*1024kB (UM) 4*2048kB (UM) 8*4096kB (UM) = 99316kB [ 740.894871][T18811] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 740.898100][T18811] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 740.901115][T18811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 740.904124][T18811] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 740.907101][T18811] 33904 total pagecache pages [ 740.908917][T18811] 1049 pages in swap cache [ 740.910471][T18811] Free swap = 86976kB [ 740.911866][T18811] Total swap = 124996kB [ 740.913219][T18811] 524155 pages RAM [ 740.914357][T18811] 0 pages HighMem/MovableOnly [ 740.915891][T18811] 211495 pages reserved [ 740.917178][T18811] 0 pages cma reserved [ 740.952899][T18814] ./bus: Can't lookup blockdev [ 740.971396][T18821] input: syz0 as /devices/virtual/input/input114 [ 741.728022][T15823] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 741.734901][T15823] (NULL device *): queue 0 connect admin queue failed (-111). [ 741.737336][T15823] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 741.739870][T15823] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 741.847909][T13206] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 742.018371][T13206] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 742.024676][T13206] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.033529][T13206] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.045903][T13206] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.068080][T13206] usb 9-1: config 0 descriptor?? [ 742.423919][T18867] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 743.268996][T13206] cm6533_jd 0003:0D8C:0022.0007: unknown global tag 0xc [ 743.478215][T13206] cm6533_jd 0003:0D8C:0022.0007: item 0 2 1 12 parsing failed [ 743.808070][T15829] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 743.816061][T15829] (NULL device *): queue 0 connect admin queue failed (-111). [ 743.819769][T15829] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 743.825065][T13206] cm6533_jd 0003:0D8C:0022.0007: parse failed [ 743.826284][T15829] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 743.830529][T13206] cm6533_jd 0003:0D8C:0022.0007: probe with driver cm6533_jd failed with error -22 [ 744.399956][T18881] fuse: fd is not a fuse device [ 744.492473][T18884] overlay: Unknown parameter '/' [ 744.625269][T13669] usb 9-1: USB disconnect, device number 21 [ 744.838056][ T6078] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 744.992117][ T6078] usb 11-1: unable to get BOS descriptor or descriptor too short [ 744.995350][ T6078] usb 11-1: not running at top speed; connect to a high speed hub [ 745.005791][ T6078] usb 11-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 745.021369][ T6078] usb 11-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 745.025089][ T6078] usb 11-1: config 1 interface 0 has no altsetting 0 [ 745.030374][ T6078] usb 11-1: string descriptor 0 read error: -22 [ 745.032571][ T6078] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.040989][T18886] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 745.269470][T18886] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3895'. [ 745.276499][ T6078] usbhid 11-1:1.0: can't add hid device: -71 [ 745.288349][ T6078] usbhid 11-1:1.0: probe with driver usbhid failed with error -71 [ 745.294896][ T6078] usb 11-1: USB disconnect, device number 3 [ 745.371072][T18909] ./bus: Can't lookup blockdev [ 745.389656][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3901'. [ 745.396768][T18911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3901'. [ 745.403506][T18911] lo: entered allmulticast mode [ 745.411589][T18905] lo: left allmulticast mode [ 745.888067][T15823] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 745.898204][T15823] (NULL device *): queue 0 connect admin queue failed (-111). [ 745.906617][T15823] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 745.910947][T15823] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 746.262558][T18924] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3906'. [ 746.573979][T18940] overlayfs: failed to clone lowerpath [ 746.581112][T18940] overlayfs: failed to clone lowerpath [ 746.682659][T18942] ./bus: Can't lookup blockdev [ 746.712881][T18943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3912'. [ 746.733865][T18943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3912'. [ 746.774560][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.791235][T18944] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3912'. [ 747.023233][T18948] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 747.968761][T15842] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 747.977512][T15842] (NULL device *): queue 0 connect admin queue failed (-111). [ 747.983609][T15842] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 747.989343][T15842] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 748.364541][T18989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3930'. [ 749.009601][T19002] x_tables: duplicate underflow at hook 3 [ 749.018197][T19002] ./bus: Can't lookup blockdev [ 749.561761][T19019] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3939'. [ 749.821997][T19028] fuse: fd is not a fuse device [ 750.057841][ T6282] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 750.062144][ T6282] (NULL device *): queue 0 connect admin queue failed (-111). [ 750.064764][ T6282] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 750.067462][ T6282] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 751.178433][ T6078] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 751.340203][ T6078] usb 9-1: Using ep0 maxpacket: 32 [ 751.343671][ T6078] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 751.356800][ T6078] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 751.360551][ T6078] usb 9-1: config 0 has no interface number 0 [ 751.362422][ T6078] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 751.368286][ T6078] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 751.372946][ T6078] usb 9-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 751.376648][ T6078] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 751.384039][ T6078] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.394345][ T6078] usb 9-1: Product: syz [ 751.397132][ T6078] usb 9-1: Manufacturer: syz [ 751.399401][ T6078] usb 9-1: SerialNumber: syz [ 751.405151][ T6078] usb 9-1: config 0 descriptor?? [ 751.416218][ T6078] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.119/input/input115 [ 751.626257][T19065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.631898][T19065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.913074][T19094] tipc: Enabling of bearer rejected, failed to enable media [ 752.127975][T15829] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 752.135761][T15829] (NULL device *): queue 0 connect admin queue failed (-111). [ 752.140137][T15829] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 752.144302][T15829] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 752.165421][T18099] usb 9-1: USB disconnect, device number 22 [ 752.249602][T19111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3969'. [ 753.172355][T19130] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3977'. [ 753.259098][T19130] warn_alloc: 2 callbacks suppressed [ 753.259161][T19130] syz.1.3977: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 753.266535][T19130] CPU: 1 UID: 0 PID: 19130 Comm: syz.1.3977 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.266566][T19130] Tainted: [L]=SOFTLOCKUP [ 753.266573][T19130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 753.266585][T19130] Call Trace: [ 753.266594][T19130] [ 753.266602][T19130] dump_stack_lvl+0x100/0x190 [ 753.266633][T19130] warn_alloc.cold+0x94/0xa8 [ 753.266655][T19130] ? __pfx_warn_alloc+0x10/0x10 [ 753.266684][T19130] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 753.266715][T19130] ? __pfx_get_page_from_freelist+0x10/0x10 [ 753.266746][T19130] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 753.266772][T19130] ? __lock_acquire+0x49f/0x1a40 [ 753.266800][T19130] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 753.266826][T19130] ? find_held_lock+0x2b/0x80 [ 753.266851][T19130] ? __free_frozen_pages+0x747/0x1090 [ 753.266877][T19130] ? __free_frozen_pages+0x747/0x1090 [ 753.266906][T19130] ? do_raw_spin_unlock+0x145/0x1e0 [ 753.266928][T19130] ? _raw_spin_unlock+0x28/0x50 [ 753.266955][T19130] ? irqentry_exit+0x24d/0xa00 [ 753.266995][T19130] __folio_alloc_noprof+0x13/0x260 [ 753.267017][T19130] alloc_migration_target+0x1d7/0x6d0 [ 753.267050][T19130] migrate_pages_batch+0x5dc/0x45c0 [ 753.267082][T19130] ? __pfx_alloc_migration_target+0x10/0x10 [ 753.267114][T19130] ? migrate_pages_sync+0x12c/0x880 [ 753.267141][T19130] ? migrate_pages_sync+0x588/0x880 [ 753.267170][T19130] ? __pfx_migrate_pages_batch+0x10/0x10 [ 753.267204][T19130] ? __pfx_migrate_pages_sync+0x10/0x10 [ 753.267232][T19130] ? __free_object+0x2a8/0x3f0 [ 753.267266][T19130] ? __lock_acquire+0x49f/0x1a40 [ 753.267282][T19130] ? __css_rstat_updated+0x1ce/0x5a0 [ 753.267317][T19130] migrate_pages+0x1950/0x2850 [ 753.267346][T19130] ? __lock_acquire+0x49f/0x1a40 [ 753.267364][T19130] ? __pfx_alloc_migration_target+0x10/0x10 [ 753.267401][T19130] ? __pfx_migrate_pages+0x10/0x10 [ 753.267427][T19130] ? __lock_acquire+0x49f/0x1a40 [ 753.267443][T19130] ? mtree_load+0x32d/0xa90 [ 753.267490][T19130] move_pages_and_store_status+0xf1/0x230 [ 753.267523][T19130] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 753.267570][T19130] kernel_move_pages+0xc89/0x14a0 [ 753.267606][T19130] ? __pfx_kernel_move_pages+0x10/0x10 [ 753.267644][T19130] ? xfd_validate_state+0x129/0x190 [ 753.267676][T19130] __ia32_sys_move_pages+0xdd/0x1b0 [ 753.267695][T19130] ? __do_fast_syscall_32+0x98/0x970 [ 753.267719][T19130] ? lockdep_hardirqs_on+0x78/0x100 [ 753.267738][T19130] __do_fast_syscall_32+0xe7/0x970 [ 753.267756][T19130] do_fast_syscall_32+0x32/0x70 [ 753.267772][T19130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 753.267787][T19130] RIP: 0023:0xf706efec [ 753.267803][T19130] Code: Unable to access opcode bytes at 0xf706efc2. [ 753.267809][T19130] RSP: 002b:00000000f541b50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 753.267821][T19130] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 753.267828][T19130] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 753.267834][T19130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 753.267841][T19130] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 753.267847][T19130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 753.267861][T19130] [ 753.398448][T19130] Mem-Info: [ 753.399687][T19130] active_anon:7101 inactive_anon:1289 isolated_anon:12 [ 753.399687][T19130] active_file:4518 inactive_file:20813 isolated_file:0 [ 753.399687][T19130] unevictable:1000 dirty:1104 writeback:0 [ 753.399687][T19130] slab_reclaimable:6992 slab_unreclaimable:73077 [ 753.399687][T19130] mapped:25499 shmem:5168 pagetables:1418 [ 753.399687][T19130] sec_pagetables:320 bounce:0 [ 753.399687][T19130] kernel_misc_reclaimable:0 [ 753.399687][T19130] free:33308 free_pcp:11420 free_cma:0 [ 753.414561][T19130] Node 0 active_anon:8kB inactive_anon:16kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1052kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8704kB pagetables:1460kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 753.424966][T19130] Node 1 active_anon:24420kB inactive_anon:5128kB active_file:18068kB inactive_file:83252kB unevictable:4000kB isolated(anon):4kB isolated(file):0kB mapped:100956kB dirty:4412kB writeback:0kB shmem:20644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7360kB pagetables:4292kB sec_pagetables:168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 753.435749][T19130] Node 0 DMA free:2240kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 753.445176][T19130] lowmem_reserve[]: 0 280 280 280 280 [ 753.447064][T19130] Node 0 DMA32 free:21448kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:16kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:1028kB present:1032196kB managed:287068kB mlocked:0kB bounce:0kB free_pcp:7332kB local_pcp:1232kB free_cma:0kB [ 753.459103][T19130] lowmem_reserve[]: 0 0 0 0 0 [ 753.460799][T19130] Node 1 DMA32 free:117048kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:288KB active_anon:24420kB inactive_anon:5128kB active_file:18068kB inactive_file:83252kB unevictable:4000kB writepending:4412kB zspages:4060kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:34532kB local_pcp:13072kB free_cma:0kB [ 753.471755][T19130] lowmem_reserve[]: 0 0 0 0 0 [ 753.473412][T19130] Node 0 DMA: 20*4kB (UM) 12*8kB (U) 5*16kB (UM) 4*32kB (UM) 1*64kB (M) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2240kB [ 753.478129][T19130] Node 0 DMA32: 348*4kB (UME) 167*8kB (UME) 96*16kB (UME) 131*32kB (UME) 37*64kB (UME) 25*128kB (UME) 9*256kB (UME) 6*512kB (ME) 0*1024kB 1*2048kB (M) 0*4096kB = 21448kB [ 753.483599][T19130] Node 1 DMA32: 3194*4kB (UMEH) 1807*8kB (UMEH) 638*16kB (UMEH) 372*32kB (UMEH) 168*64kB (UMEH) 101*128kB (UME) 42*256kB (UME) 17*512kB (UM) 8*1024kB (UM) 2*2048kB (UM) 3*4096kB (U) = 117056kB [ 753.486927][T19142] overlay: Unknown parameter '/' [ 753.489611][T19130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 753.489626][T19130] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 753.489634][T19130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 753.489644][T19130] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 753.489652][T19130] 31753 total pagecache pages [ 753.489657][T19130] 1263 pages in swap cache [ 753.489661][T19130] Free swap = 87040kB [ 753.489666][T19130] Total swap = 124996kB [ 753.489671][T19130] 524155 pages RAM [ 753.489674][T19130] 0 pages HighMem/MovableOnly [ 753.489678][T19130] 211495 pages reserved [ 753.489682][T19130] 0 pages cma reserved [ 754.016572][T19161] tipc: Enabled bearer , priority 0 [ 754.021537][T19161] syzkaller0: entered promiscuous mode [ 754.023821][T19161] syzkaller0: entered allmulticast mode [ 754.039519][T19161] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 754.207910][T15842] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 754.213171][T15842] (NULL device *): queue 0 connect admin queue failed (-111). [ 754.216574][T15842] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 754.220329][T15842] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 754.222851][T19160] tipc: Resetting bearer [ 754.241881][T19160] tipc: Disabling bearer [ 754.628781][T19182] Invalid logical block size (4) [ 755.185097][T19200] tipc: Enabled bearer , priority 0 [ 755.189402][T19200] syzkaller0: entered promiscuous mode [ 755.193092][T19200] syzkaller0: entered allmulticast mode [ 755.203139][T19200] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 755.322902][T19199] tipc: Resetting bearer [ 755.345481][T19199] tipc: Disabling bearer [ 755.728180][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 755.915257][T19213] tipc: Enabling of bearer rejected, failed to enable media [ 756.297989][T15829] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 756.307203][T15829] (NULL device *): queue 0 connect admin queue failed (-111). [ 756.316730][T15829] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 756.322780][T15829] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 756.955018][T19234] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4007'. [ 757.075724][T19240] tipc: Enabling of bearer rejected, failed to enable media [ 757.904183][T19263] overlay: Unknown parameter '/' [ 758.370635][T15829] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 758.380641][T15829] (NULL device *): queue 0 connect admin queue failed (-111). [ 758.388201][T15829] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 758.391116][T15829] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 759.655738][T19306] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4029'. [ 760.453884][T19314] tipc: Enabled bearer , priority 0 [ 760.456650][T19314] syzkaller0: entered promiscuous mode [ 760.458053][ T6283] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 760.458596][T19314] syzkaller0: entered allmulticast mode [ 760.462573][ T6283] (NULL device *): queue 0 connect admin queue failed (-111). [ 760.466384][ T6283] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 760.467622][T19314] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 760.469032][ T6283] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 760.594381][T19313] tipc: Resetting bearer [ 760.617055][T19313] tipc: Disabling bearer [ 761.435144][T19336] fuse: fd is not a fuse device [ 761.768537][T19347] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 761.774109][T19347] overlayfs: failed to set xattr on upper [ 761.775973][T19347] overlayfs: ...falling back to redirect_dir=nofollow. [ 761.779279][T19347] overlayfs: ...falling back to metacopy=off. [ 761.781560][T19347] overlayfs: ...falling back to index=off. [ 761.783447][T19347] overlayfs: ...falling back to uuid=null. [ 761.828395][T19347] xt_cgroup: invalid path, errno=-2 [ 761.998474][T13669] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 762.275815][T19363] lo speed is unknown, defaulting to 1000 [ 762.461068][T19380] netlink: 'syz.1.4051': attribute type 1 has an invalid length. [ 762.483823][T19380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 762.497025][T19380] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4051'. [ 762.534573][T15829] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 762.541273][T15829] (NULL device *): queue 0 connect admin queue failed (-111). [ 762.562654][T15829] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 762.565000][T15829] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 762.637176][T19392] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 764.608164][T15823] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 764.613485][T15823] (NULL device *): queue 0 connect admin queue failed (-111). [ 764.616470][T15823] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 764.620087][T15823] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 766.698505][T15829] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 766.705105][T15829] (NULL device *): queue 0 connect admin queue failed (-111). [ 766.708209][T15829] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 766.711226][T15829] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 767.248388][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 768.768347][T15842] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 768.773515][T15842] (NULL device *): queue 0 connect admin queue failed (-111). [ 768.776436][T15842] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 768.779614][T15842] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 770.850111][T15842] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 770.864650][T15842] (NULL device *): queue 0 connect admin queue failed (-111). [ 770.870654][T15842] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 770.888259][T15842] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 770.900034][T19430] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 770.902829][T19430] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 770.912406][T19430] vhci_hcd vhci_hcd.0: Device attached [ 771.178148][T13206] usb 50-1: SetAddress Request (2) to port 0 [ 771.178252][T13206] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 771.279398][T19420] rdma_rxe: rxe_newlink: failed to add wg2 [ 771.359468][T13669] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 771.454728][T19433] vhci_hcd: connection reset by peer [ 771.460218][T13441] vhci_hcd vhci_hcd.6: stop threads [ 771.462242][T13441] vhci_hcd vhci_hcd.6: release socket [ 771.464664][T13441] vhci_hcd vhci_hcd.6: disconnect device [ 771.527989][T13669] usb 9-1: Using ep0 maxpacket: 8 [ 771.535296][T13669] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 771.547565][T13669] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 771.555122][T13669] usb 9-1: config 0 has no interface number 0 [ 771.562827][T13669] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 771.572558][T13669] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.605501][T13669] usb 9-1: config 0 descriptor?? [ 771.639302][T13669] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 772.586939][T19454] fuse: fd is not a fuse device [ 772.928165][T15823] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 772.935801][T15823] (NULL device *): queue 0 connect admin queue failed (-111). [ 772.941694][T15823] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 772.949045][T15823] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 773.221749][T13669] usb 9-1: USB disconnect, device number 23 [ 773.244773][T19472] overlay: Unknown parameter '/' [ 773.307943][T19472] netlink: 1852 bytes leftover after parsing attributes in process `syz.6.4073'. [ 773.338689][T19469] input: syz0 as /devices/virtual/input/input116 [ 774.053583][T19489] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4078'. [ 774.993913][T19510] €Â0: renamed from virt_wifi0 [ 775.008802][ T6282] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 775.098986][ T6282] (NULL device *): queue 0 connect admin queue failed (-111). [ 775.101678][ T6282] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 775.109191][ T6282] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 775.236972][T19517] ./bus: Can't lookup blockdev [ 775.493591][T19527] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4091'. [ 775.563259][T19527] warn_alloc: 1 callbacks suppressed [ 775.563279][T19527] syz.6.4091: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 775.578203][T19527] CPU: 2 UID: 0 PID: 19527 Comm: syz.6.4091 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.578250][T19527] Tainted: [L]=SOFTLOCKUP [ 775.578257][T19527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 775.578269][T19527] Call Trace: [ 775.578276][T19527] [ 775.578284][T19527] dump_stack_lvl+0x100/0x190 [ 775.578313][T19527] warn_alloc.cold+0x94/0xa8 [ 775.578333][T19527] ? __pfx_warn_alloc+0x10/0x10 [ 775.578359][T19527] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 775.578389][T19527] ? __pfx_get_page_from_freelist+0x10/0x10 [ 775.578417][T19527] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 775.578444][T19527] ? __lock_acquire+0x49f/0x1a40 [ 775.578472][T19527] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 775.578494][T19527] ? find_held_lock+0x2b/0x80 [ 775.578529][T19527] ? __free_frozen_pages+0x747/0x1090 [ 775.578556][T19527] ? __free_frozen_pages+0x747/0x1090 [ 775.578588][T19527] ? do_raw_spin_unlock+0x145/0x1e0 [ 775.578610][T19527] ? _raw_spin_unlock+0x28/0x50 [ 775.578635][T19527] ? __pfx_alloc_migration_target+0x10/0x10 [ 775.578672][T19527] __folio_alloc_noprof+0x13/0x260 [ 775.578693][T19527] alloc_migration_target+0x1d7/0x6d0 [ 775.578720][T19527] migrate_pages_batch+0x5dc/0x45c0 [ 775.578752][T19527] ? __pfx_alloc_migration_target+0x10/0x10 [ 775.578785][T19527] ? migrate_pages_sync+0x12c/0x880 [ 775.578814][T19527] ? migrate_pages_sync+0x588/0x880 [ 775.578841][T19527] ? __pfx_migrate_pages_batch+0x10/0x10 [ 775.578882][T19527] ? __pfx_migrate_pages_sync+0x10/0x10 [ 775.578934][T19527] ? __lock_acquire+0x49f/0x1a40 [ 775.578951][T19527] ? __css_rstat_updated+0x1ce/0x5a0 [ 775.578984][T19527] migrate_pages+0x1950/0x2850 [ 775.579018][T19527] ? __lock_acquire+0x49f/0x1a40 [ 775.579039][T19527] ? __pfx_alloc_migration_target+0x10/0x10 [ 775.579074][T19527] ? __pfx_migrate_pages+0x10/0x10 [ 775.579111][T19527] ? __lock_acquire+0x49f/0x1a40 [ 775.579134][T19527] ? mtree_load+0x32d/0xa90 [ 775.579169][T19527] move_pages_and_store_status+0xf1/0x230 [ 775.579203][T19527] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 775.579247][T19527] kernel_move_pages+0xc89/0x14a0 [ 775.579287][T19527] ? __pfx_kernel_move_pages+0x10/0x10 [ 775.579325][T19527] ? xfd_validate_state+0x129/0x190 [ 775.579356][T19527] __ia32_sys_move_pages+0xdd/0x1b0 [ 775.579374][T19527] ? __do_fast_syscall_32+0x98/0x970 [ 775.579401][T19527] ? lockdep_hardirqs_on+0x78/0x100 [ 775.579426][T19527] __do_fast_syscall_32+0xe7/0x970 [ 775.579455][T19527] do_fast_syscall_32+0x32/0x70 [ 775.579481][T19527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 775.579504][T19527] RIP: 0023:0xf6fcefec [ 775.579528][T19527] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 775.579537][T19527] RSP: 002b:00000000f539c50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 775.579556][T19527] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 775.579567][T19527] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 775.579578][T19527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 775.579588][T19527] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 775.579598][T19527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 775.579624][T19527] [ 775.581001][T19527] Mem-Info: [ 775.722970][T19527] active_anon:9110 inactive_anon:1207 isolated_anon:12 [ 775.722970][T19527] active_file:4518 inactive_file:20825 isolated_file:0 [ 775.722970][T19527] unevictable:1000 dirty:42 writeback:0 [ 775.722970][T19527] slab_reclaimable:6979 slab_unreclaimable:73401 [ 775.722970][T19527] mapped:27221 shmem:8031 pagetables:1418 [ 775.722970][T19527] sec_pagetables:320 bounce:0 [ 775.722970][T19527] kernel_misc_reclaimable:0 [ 775.722970][T19527] free:38548 free_pcp:12607 free_cma:0 [ 775.741766][T19527] Node 0 active_anon:4kB inactive_anon:20kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1052kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8672kB pagetables:1460kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 775.752234][T19527] Node 1 active_anon:36436kB inactive_anon:4808kB active_file:18068kB inactive_file:83300kB unevictable:4000kB isolated(anon):48kB isolated(file):0kB mapped:107832kB dirty:168kB writeback:0kB shmem:32124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7388kB pagetables:4212kB sec_pagetables:168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 775.763352][T19527] Node 0 DMA free:2240kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 775.772832][T19527] lowmem_reserve[]: 0 280 280 280 280 [ 775.774643][T19527] Node 0 DMA32 free:21448kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:20kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:1028kB present:1032196kB managed:287068kB mlocked:0kB bounce:0kB free_pcp:9408kB local_pcp:3240kB free_cma:0kB [ 775.786958][T19527] lowmem_reserve[]: 0 0 0 0 0 [ 775.789146][T19527] Node 1 DMA32 free:130596kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:288KB active_anon:36440kB inactive_anon:4808kB active_file:18068kB inactive_file:83308kB unevictable:4000kB writepending:12kB zspages:3912kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:41552kB local_pcp:13076kB free_cma:0kB [ 775.800402][T19527] lowmem_reserve[]: 0 0 0 0 0 [ 775.802187][T19527] Node 0 DMA: 20*4kB (UM) 12*8kB (U) 5*16kB (UM) 4*32kB (UM) 1*64kB (M) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2240kB [ 775.806835][T19527] Node 0 DMA32: 348*4kB (UME) 167*8kB (UME) 96*16kB (UME) 131*32kB (UME) 37*64kB (UME) 25*128kB (UME) 9*256kB (UME) 6*512kB (ME) 0*1024kB 1*2048kB (M) 0*4096kB = 21448kB [ 775.812754][T19527] Node 1 DMA32: 2171*4kB (UMEH) 1657*8kB (UMH) 117*16kB (UMEH) 95*32kB (UMEH) 165*64kB (UMEH) 104*128kB (UME) 58*256kB (UME) 37*512kB (UM) 15*1024kB (UM) 5*2048kB (UM) 5*4096kB (UM) = 130596kB [ 775.819238][T19527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 775.823373][T19527] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 775.837972][T19527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 775.844258][T19527] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 775.849332][T19527] 34675 total pagecache pages [ 775.851479][T19527] 1301 pages in swap cache [ 775.853436][T19527] Free swap = 87276kB [ 775.855189][T19527] Total swap = 124996kB [ 775.883613][T19527] 524155 pages RAM [ 775.886507][T19527] 0 pages HighMem/MovableOnly [ 775.891359][T19527] 211495 pages reserved [ 775.893152][T19527] 0 pages cma reserved [ 776.207869][T13206] usb 50-1: device descriptor read/8, error -110 [ 776.487214][T19557] overlay: Unknown parameter '/' [ 776.542973][T19557] netlink: 1852 bytes leftover after parsing attributes in process `syz.6.4099'. [ 776.589501][T19553] input: syz0 as /devices/virtual/input/input117 [ 776.612969][T13206] usb usb50-port1: attempt power cycle [ 777.168334][T15823] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 777.206571][T15823] (NULL device *): queue 0 connect admin queue failed (-111). [ 777.209901][T13206] usb usb50-port1: unable to enumerate USB device [ 777.241403][T15823] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 777.247857][T15823] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 777.780983][T19579] tipc: Enabled bearer , priority 0 [ 777.785190][T19579] syzkaller0: entered promiscuous mode [ 777.786989][T19579] syzkaller0: entered allmulticast mode [ 777.798299][T19579] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 777.900678][T19578] tipc: Resetting bearer [ 777.924499][T19578] tipc: Disabling bearer [ 778.913896][T19608] ./bus: Can't lookup blockdev [ 779.328522][ T6282] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 779.335905][ T6282] (NULL device *): queue 0 connect admin queue failed (-111). [ 779.341325][ T6282] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 779.345576][ T6282] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 779.643154][T19635] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4127'. [ 779.768936][T19646] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4128'. [ 780.379608][T19671] ./bus: Can't lookup blockdev [ 780.400960][T19673] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4140'. [ 780.525155][T19678] €Â0: renamed from virt_wifi0 [ 781.097644][T19707] fuse: fd is not a fuse device [ 781.112497][T13441] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.116972][T13441] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.120811][T13441] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.123680][T13441] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.418393][ T6283] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 781.424150][ T6283] (NULL device *): queue 0 connect admin queue failed (-111). [ 781.426681][ T6283] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 781.429725][ T6283] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 781.722998][T19716] netlink: 'syz.1.4156': attribute type 2 has an invalid length. [ 781.731768][T19716] netlink: 'syz.1.4156': attribute type 1 has an invalid length. [ 781.997345][T19728] ./bus: Can't lookup blockdev [ 782.216440][T19732] overlay: Unknown parameter '/' [ 782.268663][T19731] input: syz0 as /devices/virtual/input/input118 [ 782.864641][T19739] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4163'. [ 783.488079][ T6283] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 783.492444][ T6283] (NULL device *): queue 0 connect admin queue failed (-111). [ 783.495395][ T6283] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 783.498703][ T6283] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 784.172937][T19785] netlink: 1852 bytes leftover after parsing attributes in process `syz.1.4182'. [ 784.212286][T19790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4184'. [ 784.225617][T19790] 8021q: adding VLAN 0 to HW filter on device bond3 [ 784.263397][T19790] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 784.278112][T13500] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.286453][T13500] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.298219][T13500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.301556][T13500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.340153][T19796] netlink: 'syz.4.4185': attribute type 10 has an invalid length. [ 784.346738][T19795] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 784.364948][T19799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4186'. [ 784.671975][T19812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4192'. [ 784.693079][T19812] overlayfs: failed to resolve './cgroup': -2 [ 784.698456][T13441] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.704345][T13441] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.706803][T13441] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.710274][T13441] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.022473][T19826] overlay: Unknown parameter '/' [ 785.045792][T19826] netlink: zone id is out of range [ 785.048217][T19826] netlink: zone id is out of range [ 785.050716][T19826] netlink: zone id is out of range [ 785.053164][T19826] netlink: zone id is out of range [ 785.082765][T19823] input: syz0 as /devices/virtual/input/input119 [ 785.612258][ T6279] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 785.777693][ T6279] (NULL device *): queue 0 connect admin queue failed (-111). [ 785.781358][ T6279] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 785.785857][ T6279] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 785.798988][T19830] overlay: Unknown parameter '/' [ 785.829323][T19830] netlink: zone id is out of range [ 785.831110][T19830] netlink: zone id is out of range [ 785.843503][T19830] netlink: zone id is out of range [ 785.845372][T19830] netlink: zone id is out of range [ 786.112092][T19838] netlink: 1852 bytes leftover after parsing attributes in process `syz.1.4201'. [ 786.957471][T19851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4205'. [ 787.283592][T19859] tipc: Enabled bearer , priority 0 [ 787.288038][T19859] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 787.387406][T19858] tipc: Disabling bearer [ 787.715339][T19872] netlink: 1852 bytes leftover after parsing attributes in process `syz.2.4212'. [ 787.811049][T15823] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 787.821321][T15823] (NULL device *): queue 0 connect admin queue failed (-111). [ 787.824907][T15823] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 787.828891][T15823] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 787.948366][T13529] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 788.098194][T13529] usb 11-1: Using ep0 maxpacket: 8 [ 788.102386][T13529] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 788.124244][T13529] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 788.141915][T13529] usb 11-1: config 0 has no interface number 0 [ 788.150216][T13529] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 788.165474][T13529] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.261891][T13529] usb 11-1: config 0 descriptor?? [ 788.280462][T13529] iowarrior 11-1:0.1: no interrupt-in endpoint found [ 788.890706][T19909] netlink: 1852 bytes leftover after parsing attributes in process `syz.1.4222'. [ 789.080816][T19918] tmpfs: Unknown parameter 'grpquota/cluster/mycluster/node/mynode/ipv4_address' [ 789.114602][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4226'. [ 789.117497][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4226'. [ 789.411896][T19913] lo speed is unknown, defaulting to 1000 [ 789.497923][T13441] netdevsim netdevsim5 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.505759][T13441] netdevsim netdevsim5 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.515879][T13441] netdevsim netdevsim5 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.522123][T13441] netdevsim netdevsim5 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.529060][T13441] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.532279][T13441] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.537265][T13441] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.544819][T13441] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.552563][T13441] netdevsim netdevsim10 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.888622][T15854] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 789.897666][T15854] (NULL device *): queue 0 connect admin queue failed (-111). [ 789.904079][T15854] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 789.914149][T15854] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 790.003991][T19947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4229'. [ 790.042048][T19950] netlink: 'syz.2.4230': attribute type 1 has an invalid length. [ 790.080423][T19952] SET target dimension over the limit! [ 790.108628][ T42] audit: type=1800 audit(1786284322.560:989): pid=19952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4229" name="nullb0" dev="tmpfs" ino=3234 res=0 errno=0 [ 790.121175][T19950] tipc: Started in network mode [ 790.122984][T19950] tipc: Node identity 1000001, cluster identity 4369 [ 790.155969][T19950] tipc: Node number set to 16777217 [ 790.159347][T19950] tipc: Cannot configure node identity twice [ 790.495096][T19966] netlink: 1852 bytes leftover after parsing attributes in process `syz.2.4234'. [ 790.760824][ T1480] usb 11-1: USB disconnect, device number 4 [ 790.874614][T19976] x_tables: duplicate underflow at hook 3 [ 790.906377][T19976] ./bus: Can't lookup blockdev [ 791.262594][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4240'. [ 791.372350][T19984] syz0: rxe_newlink: already configured on bond_slave_1 [ 791.661552][T19995] netlink: 1852 bytes leftover after parsing attributes in process `syz.6.4244'. [ 791.985778][ T6279] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nq" [ 791.990903][ T6279] (NULL device *): queue 0 connect admin queue failed (-111). [ 791.994264][ T6279] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 791.998860][ T6279] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 792.059408][T19999] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 792.606820][T20021] ------------[ cut here ]------------ [ 792.608789][T20021] !work->func [ 792.608800][T20021] WARNING: kernel/workqueue.c:4335 at __flush_work+0xa5d/0xcb0, CPU#2: syz.6.4252/20021 [ 792.614776][T20021] Modules linked in: [ 792.618621][T20021] CPU: 2 UID: 0 PID: 20021 Comm: syz.6.4252 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.622510][T20021] Tainted: [L]=SOFTLOCKUP [ 792.624125][T20021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 792.627587][T20021] RIP: 0010:__flush_work+0xa5d/0xcb0 [ 792.629401][T20021] Code: 35 00 00 00 00 e8 63 03 16 00 e8 5e 64 1f 00 c6 44 24 0f 00 e9 91 fd ff ff e8 7f 50 3a 00 90 0f 0b 90 eb eb e8 74 50 3a 00 90 <0f> 0b 90 eb e0 e8 69 50 3a 00 e8 64 50 3a 00 48 8b 3c 24 e8 5b 89 [ 792.635329][T20021] RSP: 0018:ffffc9000e6dfa68 EFLAGS: 00010283 [ 792.637401][T20021] RAX: 0000000000001092 RBX: dffffc0000000000 RCX: ffffc90028463000 [ 792.639912][T20021] RDX: 0000000000080000 RSI: ffffffff81cf7f2c RDI: ffff888021152540 [ 792.642393][T20021] RBP: ffff88806fa0c998 R08: 0000000000000001 R09: 0000000000000000 [ 792.644896][T20021] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 792.647441][T20021] R13: ffff88806fa0c9b0 R14: 0000000000000001 R15: 0000000000000001 [ 792.649805][T20021] FS: 0000000000000000(0000) GS:ffff888096df3000(0063) knlGS:00000000f4f58b40 [ 792.655979][T20021] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 792.658336][T20021] CR2: 00000000f4f57ff4 CR3: 0000000046827000 CR4: 0000000000352ef0 [ 792.660929][T20021] Call Trace: [ 792.661999][T20021] [ 792.662943][T20021] ? rcu_is_watching+0x12/0xc0 [ 792.664473][T20021] ? trace_contention_end+0x51/0x160 [ 792.666196][T20021] ? __pfx___flush_work+0x10/0x10 [ 792.666934][T20022] ./bus: Can't lookup blockdev [ 792.667849][T20021] ? __pfx___might_resched+0x10/0x10 [ 792.671838][T20021] cancel_work_sync+0xd1/0xf0 [ 792.673431][T20021] f_midi_free+0xc7/0x140 [ 792.674914][T20021] usb_put_function+0x3e/0x50 [ 792.676487][T20021] config_usb_cfg_unlink+0x29d/0x3e0 [ 792.678254][T20021] ? __pfx_config_usb_cfg_unlink+0x10/0x10 [ 792.680304][T20021] configfs_symlink+0xca1/0x11f0 [ 792.681909][T20021] ? bpf_lsm_inode_permission+0x9/0x10 [ 792.683658][T20021] ? security_inode_permission+0xbf/0x250 [ 792.685572][T20021] ? __pfx_configfs_symlink+0x10/0x10 [ 792.687328][T20021] vfs_symlink+0x178/0x4d0 [ 792.688794][T20021] filename_symlinkat+0x2a6/0x560 [ 792.690552][T20021] ? __pfx_filename_symlinkat+0x10/0x10 [ 792.692324][T20021] ? strncpy_from_user+0x19d/0x2d0 [ 792.694013][T20021] ? do_getname+0x191/0x390 [ 792.695537][T20021] __ia32_sys_symlinkat+0x9b/0xe0 [ 792.697211][T20021] __do_fast_syscall_32+0xe7/0x970 [ 792.698879][T20021] do_fast_syscall_32+0x32/0x70 [ 792.700458][T20021] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 792.702570][T20021] RIP: 0023:0xf6fcefec [ 792.703893][T20021] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 792.706036][T20021] RSP: 002b:00000000f4f5850c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 792.708571][T20021] RAX: ffffffffffffffda RBX: 0000000080000580 RCX: 00000000ffffff9c [ 792.711129][T20021] RDX: 00000000800005c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 792.716642][T20021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 792.719146][T20021] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 792.721611][T20021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 792.724191][T20021] [ 792.725215][T20021] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 792.727516][T20021] CPU: 2 UID: 0 PID: 20021 Comm: syz.6.4252 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.730935][T20021] Tainted: [L]=SOFTLOCKUP [ 792.732297][T20021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 792.735448][T20021] Call Trace: [ 792.736539][T20021] [ 792.737485][T20021] dump_stack_lvl+0x100/0x190 [ 792.739005][T20021] vpanic+0x552/0x970 [ 792.740286][T20021] ? __pfx_vpanic+0x10/0x10 [ 792.741747][T20021] panic+0xd1/0xe0 [ 792.742946][T20021] ? __pfx_panic+0x10/0x10 [ 792.744386][T20021] check_panic_on_warn.cold+0x19/0x34 [ 792.746096][T20021] ? __flush_work+0xa5d/0xcb0 [ 792.747596][T20021] __warn.cold+0x191/0x318 [ 792.749033][T20021] __report_bug+0x30f/0x440 [ 792.750521][T20021] ? __flush_work+0xa5d/0xcb0 [ 792.752026][T20021] ? __pfx___report_bug+0x10/0x10 [ 792.753636][T20021] ? stack_depot_save_flags+0x479/0x9d0 [ 792.755417][T20021] ? kasan_save_stack+0x3f/0x50 [ 792.756992][T20021] ? kasan_save_stack+0x30/0x50 [ 792.758553][T20021] ? kasan_save_track+0x14/0x30 [ 792.760101][T20021] ? __kasan_kmalloc+0xaa/0xb0 [ 792.761635][T20021] ? __kmalloc_node_noprof+0x339/0x830 [ 792.763350][T20021] ? __kfifo_alloc_node+0x142/0x280 [ 792.765025][T20021] ? f_midi_alloc+0x473/0x770 [ 792.766564][T20021] ? __flush_work+0xa5d/0xcb0 [ 792.768187][T20021] report_bug+0xb2/0x220 [ 792.769562][T20021] ? __flush_work+0xa5d/0xcb0 [ 792.771057][T20021] handle_bug+0x16a/0x2a0 [ 792.772443][T20021] exc_invalid_op+0x17/0x50 [ 792.773888][T20021] asm_exc_invalid_op+0x1a/0x20 [ 792.775443][T20021] RIP: 0010:__flush_work+0xa5d/0xcb0 [ 792.777212][T20021] Code: 35 00 00 00 00 e8 63 03 16 00 e8 5e 64 1f 00 c6 44 24 0f 00 e9 91 fd ff ff e8 7f 50 3a 00 90 0f 0b 90 eb eb e8 74 50 3a 00 90 <0f> 0b 90 eb e0 e8 69 50 3a 00 e8 64 50 3a 00 48 8b 3c 24 e8 5b 89 [ 792.783312][T20021] RSP: 0018:ffffc9000e6dfa68 EFLAGS: 00010283 [ 792.785240][T20021] RAX: 0000000000001092 RBX: dffffc0000000000 RCX: ffffc90028463000 [ 792.787766][T20021] RDX: 0000000000080000 RSI: ffffffff81cf7f2c RDI: ffff888021152540 [ 792.790241][T20021] RBP: ffff88806fa0c998 R08: 0000000000000001 R09: 0000000000000000 [ 792.792739][T20021] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 792.795209][T20021] R13: ffff88806fa0c9b0 R14: 0000000000000001 R15: 0000000000000001 [ 792.797708][T20021] ? __flush_work+0xa5c/0xcb0 [ 792.799249][T20021] ? __flush_work+0xa5c/0xcb0 [ 792.800755][T20021] ? rcu_is_watching+0x12/0xc0 [ 792.802279][T20021] ? trace_contention_end+0x51/0x160 [ 792.803947][T20021] ? __pfx___flush_work+0x10/0x10 [ 792.805678][T20021] ? __pfx___might_resched+0x10/0x10 [ 792.807577][T20021] cancel_work_sync+0xd1/0xf0 [ 792.809264][T20021] f_midi_free+0xc7/0x140 [ 792.810852][T20021] usb_put_function+0x3e/0x50 [ 792.812417][T20021] config_usb_cfg_unlink+0x29d/0x3e0 [ 792.814133][T20021] ? __pfx_config_usb_cfg_unlink+0x10/0x10 [ 792.815984][T20021] configfs_symlink+0xca1/0x11f0 [ 792.817584][T20021] ? bpf_lsm_inode_permission+0x9/0x10 [ 792.819446][T20021] ? security_inode_permission+0xbf/0x250 [ 792.821399][T20021] ? __pfx_configfs_symlink+0x10/0x10 [ 792.823246][T20021] vfs_symlink+0x178/0x4d0 [ 792.824510][T20021] filename_symlinkat+0x2a6/0x560 [ 792.825962][T20021] ? __pfx_filename_symlinkat+0x10/0x10 [ 792.827730][T20021] ? strncpy_from_user+0x19d/0x2d0 [ 792.829461][T20021] ? do_getname+0x191/0x390 [ 792.830919][T20021] __ia32_sys_symlinkat+0x9b/0xe0 [ 792.832509][T20021] __do_fast_syscall_32+0xe7/0x970 [ 792.834151][T20021] do_fast_syscall_32+0x32/0x70 [ 792.835717][T20021] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 792.837741][T20021] RIP: 0023:0xf6fcefec [ 792.839071][T20021] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 792.841133][T20021] RSP: 002b:00000000f4f5850c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 792.843725][T20021] RAX: ffffffffffffffda RBX: 0000000080000580 RCX: 00000000ffffff9c [ 792.846198][T20021] RDX: 00000000800005c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 792.848722][T20021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 792.851217][T20021] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 792.853742][T20021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 792.856230][T20021] [ 792.857877][T20021] Kernel Offset: disabled [ 792.859603][T20021] Rebooting in 86400 seconds..