last executing test programs: 24.5008769s ago: executing program 1 (id=2): modify_ldt$write2(0x11, &(0x7f0000000100)={0x5, 0x20001000, 0xffffffffffffffff, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x82802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x1, 0x6d, 0xffffffff, 0x9, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x400, 0x2}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="20325aa2", @ANYRES32=0x0, @ANYBLOB="2700000000000000000000000000ffff7f00000100000000"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./sec\x00', 0x0, 0x10}, 0x14) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_clone(0x48020100, 0x0, 0x0, 0x0, 0x0, 0x0) 24.307553981s ago: executing program 1 (id=7): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x18410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x12) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000640)=0x4000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x339, @tick=0x3ff, 0x6, {0x8, 0x80}, 0x6, 0x1}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000180)=0x1f27, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @multicast1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000080)=0x2, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74"], 0x0, 0x8e}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r6, @ANYRESOCT=r3], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto(r2, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 8.721527457s ago: executing program 32 (id=7): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x18410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x12) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000640)=0x4000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x339, @tick=0x3ff, 0x6, {0x8, 0x80}, 0x6, 0x1}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000180)=0x1f27, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @multicast1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000080)=0x2, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74"], 0x0, 0x8e}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r6, @ANYRESOCT=r3], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto(r2, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 2.833988762s ago: executing program 0 (id=95): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = fsmount(r0, 0x0, 0x2) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2442, 0x1ff) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x18e) close(r2) 2.795174265s ago: executing program 0 (id=97): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x58, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044855}, 0x50) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000180)=""/205, 0xcd, 0x0, &(0x7f0000000340)=""/121, 0x79}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 2.739198376s ago: executing program 4 (id=99): r0 = socket$inet6(0xa, 0x5, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) (async, rerun: 32) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x70bd25, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x48030) (async) r6 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x80Z\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a].\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x8) fcntl$addseals(r6, 0x409, 0x8) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000}) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) (rerun: 64) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, r7}, 0xc) (async) r8 = openat$mice(0xffffff9c, &(0x7f0000000100), 0x490200) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_newaddr={0x7c, 0x14, 0x20, 0x70bd2c, 0x25dfdbfe, {0xa, 0x3f, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x7, 0x80000000, 0x3}}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7f}, @IFA_CACHEINFO={0x14, 0x6, {0xd76, 0xfffffff7, 0xfc0, 0x1}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) (async, rerun: 64) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) (async, rerun: 32) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, 0x0, &(0x7f0000000000)) (async, rerun: 32) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0xd, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x45804}, 0x10) (async, rerun: 32) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r9, 0x40786e88, &(0x7f0000000600)={{&(0x7f00000001c0)=[{0x80, 0x4f, 0xc5c8, {0x2, 0x8}, 0x6, 0xc, 0xa}], 0x1, 0x40, 0xed, 0xbc}, {&(0x7f0000000340)=[{0x80000000, 0x81}, {0x2, 0x7fff}, {0x10001, 0x8}, {0xd, 0x1}], 0x4, 0x10, 0x9, 0x5}, {&(0x7f0000000380)=[0xffff, 0x401, 0x7], 0x3, 0x8, 0x3, 0x31}, {&(0x7f0000000400)=[{0xffffffff, 0x5, 0x3, 0x4, 0x1}, {0x1, 0xc1, 0x3629, 0x9, 0x7fffffff}, {0x9, 0x326, 0xff, 0x400, 0x8}], 0x3, 0x28, 0xffef, 0x5}, {&(0x7f0000000580)=[0x7fff, 0xfffffffffffffffd, 0x9, 0x86d8, 0xb, 0x10, 0x0, 0x917, 0x5, 0x100000001], 0xa, 0x8, 0xc000, 0x6}}) (async) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @loopback, 0xffff}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c) 2.730804785s ago: executing program 0 (id=100): r0 = openat$tun(0xffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000003c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}], 0x1) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) 1.867896601s ago: executing program 0 (id=104): socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x4, &(0x7f0000000680)) io_setup(0x6, &(0x7f0000000480)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) futex$unlock_wake_list32(&(0x7f0000000280)=0x9, 0x681, 0x0, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)=0x3, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r3, &(0x7f0000000100)=""/9, 0xfffffd87) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r3, &(0x7f00000001c0)=ANY=[], 0xffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendfile64(r0, r2, &(0x7f0000000440)=0xffffffffffffffde, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000f50f00010800e3302b4d2600000000001cbb98d5814e8c44dacb06ca5cb7860c18e1464c7e6df6e8e3c9b342b162c4d4", @ANYRES32=0x0], 0x30}}, 0x0) 1.677872772s ago: executing program 4 (id=107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000b010200000000000000000200000507a92bca0db4dbc7"], 0x1c}, 0x1, 0x0, 0x0, 0x4c051}, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x2, 0x4, 0x9}, 0x50) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 1.622505739s ago: executing program 2 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9957b00000064323723e7eecdf40c363423eb3d259266ec9c37865c6c1a3e40ce1b22bb33270450001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e65852548deb01efd54f11ed2c4998d99ece2ab1e39566153c97e4af37017ea6b16b694b94a6e4606c3fb19d1d2bd3c8c4e97b90400000000000000c2000000000000008e6827d61dcc3a633bf6ff250b5a293eb2a39e48660edb720a010000000000000044febf7ddc73fd4a5a000001c55f7f46c7084e17c809268103a0584ab40a68e528329d97afc3652e325c1eb4a3ab2e156a9744480000000800", "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"}) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001320038010000030000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120") 1.509440051s ago: executing program 4 (id=111): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000380)={r1, 0x1, &(0x7f0000000180)=[0x3], 0x0, 0x0}) openat$sw_sync_info(0xffffff9c, &(0x7f0000000240), 0x2280, 0x0) r2 = openat$panthor(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000040)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000080)={0x0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa0002, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000100)={0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x6, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r2, 0xc01064c4, &(0x7f0000000200)={&(0x7f0000000140)=[r3, r4, 0x0, r6, 0x0], 0x5}) 1.468592415s ago: executing program 2 (id=112): r0 = openat$tun(0xffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000003c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}], 0x1) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) 1.465492289s ago: executing program 4 (id=113): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f00000002c0)="5c0000003000050600000000000000000000000048000180440001800900010067617465000000003400028018000200000000000000000000000000000000000000000018000580140001800800010000", 0x51, 0x0, 0x0, 0x0) 1.378073931s ago: executing program 4 (id=114): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) setns(0xc9, 0x40000000) mmap(&(0x7f0000a0d000/0x2000)=nil, 0x2000, 0x2, 0x4010, 0xffffffffffffffff, 0x5e153000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)="3504000041000511d25a35400c2037153e370c04018006041000450000002a560000e7ff0040000000000000", 0x2c}, {&(0x7f00000009c0)="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", 0x1d8}, {&(0x7f0000000040)="9d493c13b6b02affcc19cb904ec2bd74085b0bd225277e5a44d681809b6d764ecab211ef0c90ba361a4378457b19705b18406f35077cf1453aeb21e4c30a85207027af69f536ec61a4a59614b3f500"/89, 0x59}], 0x3}, 0x10049010) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f0000000400)={0x4, 0x8ab5, 0x7fff, 0x40000020000000, 0xdf, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000000c0)) write$cgroup_int(r3, &(0x7f0000000080)=0x4, 0xfffffe7d) shutdown(r1, 0x1) listen(r0, 0xdfd) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}], 0x1, 0x8000) write$UHID_DESTROY(r3, &(0x7f0000000340), 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) shutdown(r5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) 1.158164807s ago: executing program 3 (id=115): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x4000) 805.816023ms ago: executing program 3 (id=116): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = fsmount(r0, 0x0, 0x2) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2442, 0x1ff) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x18e) close(r2) 637.713153ms ago: executing program 3 (id=117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)={0x3a}, 0x8) sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x9000, @loopback, 0x9}, 0x1c) 538.03768ms ago: executing program 2 (id=118): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x4000) (fail_nth: 1) 537.708684ms ago: executing program 2 (id=119): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000001d80), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x1c, r0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}}, 0x804) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x4000) 434.68981ms ago: executing program 3 (id=120): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 434.019222ms ago: executing program 0 (id=121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r3) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00') writev(r4, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa0042, 0x0) r6 = socket$inet6(0xa, 0x4, 0x1) setsockopt$inet6_int(r6, 0x29, 0x4d, 0x0, 0x0) copy_file_range(r5, 0x0, r5, &(0x7f0000000040)=0x8, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x430, 0x230, 0x0, 0xffffffff, 0x2d4, 0x0, 0x39c, 0x39c, 0xffffffff, 0x39c, 0x39c, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x18c, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1d, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1b, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0xc, "1542", 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x48c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x5}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000180)='./dev/console\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/console\x00', 0x1, 0x0) write$eventfd(r7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) 377.379128ms ago: executing program 2 (id=122): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f00000002c0)="5c0000003000050600000000000000000000000048000180440001800900010067617465000000003400028018000200000000000000000000000000000000000000000018000580140001800800010000000000080003", 0x57, 0x0, 0x0, 0x0) 376.880389ms ago: executing program 3 (id=123): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8001) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0x9) (async) openat$panthor(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$tun(0xffffff9c, &(0x7f00000000c0), 0x220082, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x7, 0x180) ioctl$SG_IO(r2, 0x2285, &(0x7f0000003580)={0x0, 0xfffffffffffffffd, 0xa2, 0x5, @scatter={0x6, 0x0, &(0x7f0000002440)=[{&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/210, 0xd2}, {&(0x7f0000002400)=""/21, 0x15}]}, &(0x7f0000002480)="af9dd40512a3c09b5fcebf1e38d3748e81ac2caa0f6908426823469c1983b1df71311425854df4279413dc6b7d19781bde1143cfc1b35800d05ab2ec320f2147a7f7b9b2291b108878848420d38ae67edfd9881604588e9e4257feaf1c70d709ed7c9cc5b5d6ea1973a4c27c3881277d767d2eff2bd9c0e1d301bd8597377562f84e28c3c5a1856fe9ebb5d585f4310d06bf48fdfad44a9ff87e9b459ef265879d0f", &(0x7f0000002540)=""/4096, 0x200000, 0x0, 0x2, &(0x7f0000003540)}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc01c5868, &(0x7f00000036c0)={r3, &(0x7f00000035c0)='/dev/net/tun\x00', 0x2, &(0x7f0000003600)={@_ha_fsid={[0x73]}, {0x7f, 0x7, 0x4, 0x9}}, 0xff, &(0x7f0000003640), &(0x7f0000003680)=0x4}) io_uring_register$IORING_UNREGISTER_NAPI(r4, 0x1c, &(0x7f0000003700), 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000003740)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000003780)={r4, 0x9, 0x8, 0xde000000000}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000037c0)={0x0, 0x0, 0x8, 0xffffb5e3, 0x9, 0xfffffffa}, &(0x7f0000003800)=0x14) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000003840)={r7, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64) write$P9_RVERSION(r4, &(0x7f0000003900)={0x13, 0x65, 0xffff, 0xfff, 0x6, '9P2000'}, 0x13) (async, rerun: 64) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000003940)={r7, @in6={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, 0x6e, 0x8}, 0x88) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000003a00)={{0x2, 0x8000000, 0x10, 0x52, 0x4, 0x9, 0x5, 0x5e, 0x0, 0x1, 0xff, 0xe}, {0x9000, 0x80a0000, 0x9, 0x3, 0x9, 0x2, 0x8, 0x0, 0x6, 0x39, 0x6, 0xa}, {0x2ffc, 0x58000, 0x41bddcec7807716e, 0xf, 0x3, 0x9, 0x6, 0x40, 0x1, 0x8, 0x5, 0x5}, {0x54000, 0xffc, 0x0, 0x0, 0x2, 0x5, 0x6, 0x1, 0x40, 0x8, 0x9, 0x5}, {0x40000, 0x1ffe, 0xe, 0x3, 0x7, 0x3, 0x40, 0x1, 0x5, 0x8, 0xff, 0x1}, {0x3ff8, 0xffffffff, 0xc, 0x3, 0xa, 0xa, 0xd, 0x4, 0xfb, 0x4, 0x3, 0xc2}, {0x8000000, 0x4000, 0xb, 0x6, 0x0, 0xff, 0x4, 0x5, 0x3, 0x9, 0x6, 0x8}, {0x54000, 0xdddd0000, 0xf, 0x2, 0x1, 0x89, 0x1, 0x6, 0x7d, 0x7f, 0x8, 0x4}, {0x4c000, 0x7}, {0x30000, 0x1ff}, 0x10021, 0x0, 0x7000, 0x40008, 0x1, 0x8400, 0x2000, [0x0, 0xd, 0x2, 0x10001]}) (async) openat$rfkill(0xffffff9c, &(0x7f0000003b40), 0x208201, 0x0) (async, rerun: 32) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) (async, rerun: 32) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x22) (async) ioctl$sock_bt_hci(r6, 0x400448c9, &(0x7f0000003b80)="7bf4b3fc661a94664684efd325282d") (async) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f0000003bc0)={0x8c2, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x84) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003c80), r9) (async) modify_ldt$write2(0x11, &(0x7f0000003cc0)={0x40, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000003d40), r9) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000003d80)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000003dc0)=0x0) sendmsg$NFC_CMD_VENDOR(r9, &(0x7f0000004ec0)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004e80)={&(0x7f0000003e00)={0x107c, r10, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_DATA={0x1004, 0x1f, "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"}, @NFC_ATTR_VENDOR_DATA={0x43, 0x1f, "7905fa318d012e39f05e5b073640252d7a4fe8df904b92c361841f075fbc9101eb230f5293bdaf13e47402dec66768d6156458322d7f34d4fb0c23618b812c"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7fffffff}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x107c}, 0x1, 0x0, 0x0, 0x10}, 0xd0d62b31aee3e09a) 328.01414ms ago: executing program 2 (id=124): r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x4, &(0x7f0000000680)) io_setup(0x6, &(0x7f0000000480)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) futex$unlock_wake_list32(&(0x7f0000000280)=0x9, 0x681, 0x0, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)=0x3, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, &(0x7f0000000100)=""/9, 0xfffffd87) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r4, &(0x7f00000001c0)=ANY=[], 0xffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendfile64(r1, r3, &(0x7f0000000440)=0xffffffffffffffde, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000f50f00010800e3302b4d2600000000001cbb98d5814e8c44dacb06ca5cb7860c18e1464c7e6df6e8e3c9b342b162c4d4", @ANYRES32=0x0], 0x30}}, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000240)='FROZEN\x00', 0x7) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x7fff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7a}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 317.813618ms ago: executing program 4 (id=125): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x800040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x8, 0xfffffffffffffffc, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x400c050) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000240)={0x110, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1cc9ea0f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffe0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x619}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x222c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x110}}, 0x0) r3 = openat$hpet(0xffffff9c, &(0x7f0000000040), 0x200300, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f00000001c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r4, &(0x7f0000000140)='off\n', 0x4) ioperm(0x82f, 0x8, 0x0) write(r4, &(0x7f0000000180)='on', 0x2) 254.041406ms ago: executing program 3 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x4, &(0x7f0000000680)) io_setup(0x6, &(0x7f0000000480)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) futex$unlock_wake_list32(&(0x7f0000000280)=0x9, 0x681, 0x0, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)=0x3, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, &(0x7f0000000100)=""/9, 0xfffffd87) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r4, &(0x7f00000001c0)=ANY=[], 0xffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendfile64(r1, r3, &(0x7f0000000440)=0xffffffffffffffde, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000f50f00010800e3302b4d2600000000001cbb98d5814e8c44dacb06ca5cb7860c18e1464c7e6df6e8e3c9b342b162c4d4", @ANYRES32=0x0], 0x30}}, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000240)='FROZEN\x00', 0x7) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x7fff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7a}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 0s ago: executing program 0 (id=127): r0 = openat$tun(0xffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000003c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}], 0x1) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:22345' (ED25519) to the list of known hosts. [ 33.042965][ T5662] cgroup: Unknown subsys name 'net' [ 33.165496][ T5662] cgroup: Unknown subsys name 'cpuset' [ 33.169072][ T5662] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.070359][ T5662] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.437749][ T5737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.441480][ T5740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.442009][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.445485][ T5740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.446014][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.447220][ T5739] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.447968][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.448964][ T5740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.449719][ T5740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.452069][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.453266][ T5743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.456018][ T5739] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.456208][ T5740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.459014][ T5739] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.459759][ T5740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.485759][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.488006][ T5745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.489061][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.492364][ T5745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.495374][ T5745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.012971][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.013421][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.013586][ T5732] bridge_slave_0: entered allmulticast mode [ 38.014452][ T5732] bridge_slave_0: entered promiscuous mode [ 38.028510][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.028554][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.028616][ T5732] bridge_slave_1: entered allmulticast mode [ 38.029846][ T5732] bridge_slave_1: entered promiscuous mode [ 38.086101][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.099077][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.122269][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.122312][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.122367][ T5733] bridge_slave_0: entered allmulticast mode [ 38.123121][ T5733] bridge_slave_0: entered promiscuous mode [ 38.124310][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.124353][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.125714][ T5733] bridge_slave_1: entered allmulticast mode [ 38.126510][ T5733] bridge_slave_1: entered promiscuous mode [ 38.163635][ T5732] team0: Port device team_slave_0 added [ 38.177150][ T5732] team0: Port device team_slave_1 added [ 38.193647][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.234787][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.258900][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.259029][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.259085][ T5744] bridge_slave_0: entered allmulticast mode [ 38.259764][ T5744] bridge_slave_0: entered promiscuous mode [ 38.262048][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.262056][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.262068][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.262607][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.262689][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.262746][ T5744] bridge_slave_1: entered allmulticast mode [ 38.263869][ T5744] bridge_slave_1: entered promiscuous mode [ 38.265413][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.265453][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.265514][ T5741] bridge_slave_0: entered allmulticast mode [ 38.266353][ T5741] bridge_slave_0: entered promiscuous mode [ 38.276027][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.276039][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.276059][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.300427][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.300472][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.300527][ T5741] bridge_slave_1: entered allmulticast mode [ 38.301247][ T5741] bridge_slave_1: entered promiscuous mode [ 38.303786][ T5733] team0: Port device team_slave_0 added [ 38.306227][ T5733] team0: Port device team_slave_1 added [ 38.307943][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.333834][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.358759][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.359197][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.359206][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.359218][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.360456][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.360728][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.360736][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.360748][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.367559][ T5744] team0: Port device team_slave_0 added [ 38.377122][ T5732] hsr_slave_0: entered promiscuous mode [ 38.377613][ T5732] hsr_slave_1: entered promiscuous mode [ 38.383528][ T5744] team0: Port device team_slave_1 added [ 38.390522][ T5741] team0: Port device team_slave_0 added [ 38.415522][ T5741] team0: Port device team_slave_1 added [ 38.416098][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.416111][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.416132][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.440406][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.440418][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.440431][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.443769][ T5733] hsr_slave_0: entered promiscuous mode [ 38.444282][ T5733] hsr_slave_1: entered promiscuous mode [ 38.444591][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 38.444639][ T5733] Cannot create hsr debugfs directory [ 38.459567][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.459578][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.459592][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.474816][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.474829][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.474842][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.544908][ T5744] hsr_slave_0: entered promiscuous mode [ 38.545688][ T5744] hsr_slave_1: entered promiscuous mode [ 38.546234][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 38.546251][ T5744] Cannot create hsr debugfs directory [ 38.566909][ T5741] hsr_slave_0: entered promiscuous mode [ 38.567372][ T5741] hsr_slave_1: entered promiscuous mode [ 38.567702][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 38.567713][ T5741] Cannot create hsr debugfs directory [ 38.758611][ T5732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.762873][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.763479][ T5732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.766915][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.796722][ T5732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.799276][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.800414][ T5732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.805241][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.841080][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.845323][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.847466][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.853428][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.854354][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.859300][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.861049][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.864193][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.943229][ T5741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.947866][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.948927][ T5741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.954103][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.955565][ T5741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.959343][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.966627][ T5741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.970903][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.016137][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.017705][ T5744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.019666][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.020303][ T5744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.024666][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.031143][ T5744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.033590][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.034161][ T5744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.036499][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.050046][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.055939][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.077860][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.077940][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.084992][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.085038][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.087023][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.093919][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.093964][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.102532][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.102578][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.171091][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.177067][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.199455][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.206884][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.215519][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.216195][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.228831][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.228875][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.229917][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.229979][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.243674][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.243723][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.293929][ T5744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.459790][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.481898][ T5743] Bluetooth: hci2: command tx timeout [ 39.482023][ T5743] Bluetooth: hci0: command tx timeout [ 39.490401][ T5745] Bluetooth: hci1: command tx timeout [ 39.498211][ T5732] veth0_vlan: entered promiscuous mode [ 39.503348][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.505446][ T5732] veth1_vlan: entered promiscuous mode [ 39.534615][ T5732] veth0_macvtap: entered promiscuous mode [ 39.540933][ T5732] veth1_macvtap: entered promiscuous mode [ 39.555392][ T5733] veth0_vlan: entered promiscuous mode [ 39.560089][ T5745] Bluetooth: hci3: command tx timeout [ 39.562514][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.567287][ T5733] veth1_vlan: entered promiscuous mode [ 39.569057][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.583819][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.592524][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.599396][ T5733] veth0_macvtap: entered promiscuous mode [ 39.619596][ T5733] veth1_macvtap: entered promiscuous mode [ 39.659646][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.665440][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.665453][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.666316][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.669929][ T5744] veth0_vlan: entered promiscuous mode [ 39.688157][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.688177][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.700295][ T5741] veth0_vlan: entered promiscuous mode [ 39.705884][ T5744] veth1_vlan: entered promiscuous mode [ 39.719582][ T5741] veth1_vlan: entered promiscuous mode [ 39.722274][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.722735][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.722802][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.750179][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.750204][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.750223][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.750242][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.757289][ T5732] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.764920][ T5744] veth0_macvtap: entered promiscuous mode [ 39.768295][ T5744] veth1_macvtap: entered promiscuous mode [ 39.768403][ T5732] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.775303][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.775314][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.781843][ T5732] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.782515][ T5732] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.794406][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.794422][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.794815][ T5741] veth0_macvtap: entered promiscuous mode [ 39.797307][ T5741] veth1_macvtap: entered promiscuous mode [ 39.807062][ T5732] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.808210][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.814043][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.816955][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.819756][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.819832][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.824448][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.874295][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.908938][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.908952][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.937116][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.937130][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.947366][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.947383][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.960728][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.960745][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.967253][ T5887] FAULT_INJECTION: forcing a failure. [ 39.967253][ T5887] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.967272][ T5887] CPU: 2 UID: 0 PID: 5887 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 39.967285][ T5887] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 39.967291][ T5887] Call Trace: [ 39.967295][ T5887] [ 39.967300][ T5887] dump_stack_lvl+0x100/0x190 [ 39.967318][ T5887] should_fail_ex.cold+0x5/0xa [ 39.967332][ T5887] _copy_from_user+0x2e/0xd0 [ 39.967349][ T5887] get_compat_msghdr+0xb3/0x480 [ 39.967364][ T5887] ? __pfx_get_compat_msghdr+0x10/0x10 [ 39.967382][ T5887] ___sys_sendmsg+0x1b6/0x1e0 [ 39.967398][ T5887] ? __pfx____sys_sendmsg+0x10/0x10 [ 39.967418][ T5887] ? find_held_lock+0x2b/0x80 [ 39.967439][ T5887] __sys_sendmsg+0x160/0x210 [ 39.967449][ T5887] ? __pfx___sys_sendmsg+0x10/0x10 [ 39.967463][ T5887] ? __pfx_ksys_write+0x10/0x10 [ 39.967479][ T5887] __do_fast_syscall_32+0x13a/0x8b0 [ 39.967506][ T5887] ? lockdep_hardirqs_on+0x7d/0x110 [ 39.967523][ T5887] do_fast_syscall_32+0x32/0x70 [ 39.967537][ T5887] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 39.967551][ T5887] RIP: 0023:0xf7fd2fec [ 39.967565][ T5887] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 39.967570][ T5887] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 39.967580][ T5887] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 39.967587][ T5887] RDX: 0000000004044000 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.967593][ T5887] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 39.967599][ T5887] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 39.967606][ T5887] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 39.967618][ T5887] [ 39.991888][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.022039][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.022077][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.022100][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.022127][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.022154][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.093302][ T5894] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'. [ 40.270253][ T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 40.453054][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 40.453875][ T35] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 40.457076][ T35] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 40.457088][ T35] usb 5-1: config 0 has no interface number 0 [ 40.458827][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.458840][ T35] usb 5-1: Product: syz [ 40.458847][ T35] usb 5-1: Manufacturer: syz [ 40.458854][ T35] usb 5-1: SerialNumber: syz [ 40.462073][ T35] usb 5-1: config 0 descriptor?? [ 40.475718][ T35] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 40.475733][ T35] usb 5-1: selecting invalid altsetting 1 [ 40.475741][ T35] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 40.481105][ T35] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 40.481342][ T35] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 40.481363][ T35] usb 5-1: media controller created [ 40.500363][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 40.509694][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 40.535717][ T5908] loop3: detected capacity change from 0 to 7 [ 40.574529][ T5908] Dev loop3: unable to read RDB block 7 [ 40.574616][ T5908] loop3: AHDI p1 [ 40.574673][ T5908] loop3: partition table partially beyond EOD, truncated [ 40.772615][ T5909] kvm: apic: phys broadcast and lowest prio [ 40.792243][ T5909] e1000e 0000:00:02.0 eth1: removed PHC [ 40.976125][ T5909] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 41.560595][ T5745] Bluetooth: hci0: command tx timeout [ 41.560663][ T5745] Bluetooth: hci2: command tx timeout [ 41.560772][ T5743] Bluetooth: hci1: command tx timeout [ 41.571911][ T35] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 41.573686][ T35] zl10353_read_register: readreg error (reg=127, ret==-110) [ 41.650079][ T5743] Bluetooth: hci3: command tx timeout [ 42.065187][ T35] usb 5-1: USB disconnect, device number 2 [ 43.055448][ T5967] FAULT_INJECTION: forcing a failure. [ 43.055448][ T5967] name failslab, interval 1, probability 0, space 0, times 1 [ 43.055469][ T5967] CPU: 0 UID: 0 PID: 5967 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT(full) [ 43.055482][ T5967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.055488][ T5967] Call Trace: [ 43.055492][ T5967] [ 43.055497][ T5967] dump_stack_lvl+0x100/0x190 [ 43.055516][ T5967] should_fail_ex.cold+0x5/0xa [ 43.055530][ T5967] should_failslab+0xc2/0x120 [ 43.055551][ T5967] __kmalloc_cache_noprof+0x91/0x6d0 [ 43.055564][ T5967] ? madvise_collapse+0x228/0x750 [ 43.055580][ T5967] madvise_collapse+0x228/0x750 [ 43.055594][ T5967] ? __pfx_madvise_collapse+0x10/0x10 [ 43.055607][ T5967] ? mas_prev_slot+0x768/0x11b0 [ 43.055628][ T5967] madvise_vma_behavior+0x112f/0x2350 [ 43.055652][ T5967] ? mas_prev+0xa4/0x100 [ 43.055669][ T5967] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 43.055688][ T5967] ? mas_walk+0x260/0x310 [ 43.055701][ T5967] ? find_vma_prev+0xd8/0x150 [ 43.055717][ T5967] ? __pfx_find_vma_prev+0x10/0x10 [ 43.055736][ T5967] ? _kstrtoull+0x144/0x200 [ 43.055749][ T5967] ? __pfx__kstrtoull+0x10/0x10 [ 43.055762][ T5967] madvise_walk_vmas+0x30e/0xc50 [ 43.055775][ T5967] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 43.055798][ T5967] ? lock_acquire+0x1d1/0x380 [ 43.055816][ T5967] madvise_do_behavior+0x1ea/0x510 [ 43.055828][ T5967] ? __pfx_madvise_do_behavior+0x10/0x10 [ 43.055840][ T5967] ? down_read+0x13b/0x4c0 [ 43.055861][ T5967] do_madvise+0x238/0x290 [ 43.055872][ T5967] ? __pfx_do_madvise+0x10/0x10 [ 43.055881][ T5967] ? lock_acquire+0x1d1/0x380 [ 43.055906][ T5967] ? fput+0x7c/0x100 [ 43.055922][ T5967] ? ksys_write+0x1ac/0x250 [ 43.055937][ T5967] __ia32_sys_madvise+0xa7/0x110 [ 43.055948][ T5967] ? lockdep_hardirqs_on+0x7d/0x110 [ 43.055962][ T5967] __do_fast_syscall_32+0x13a/0x8b0 [ 43.055976][ T5967] ? lockdep_hardirqs_on+0x7d/0x110 [ 43.055991][ T5967] do_fast_syscall_32+0x32/0x70 [ 43.056006][ T5967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 43.056020][ T5967] RIP: 0023:0xf702efec [ 43.056034][ T5967] Code: Unable to access opcode bytes at 0xf702efc2. [ 43.056039][ T5967] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 43.056049][ T5967] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600003 [ 43.056056][ T5967] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.056062][ T5967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 43.056068][ T5967] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 43.056074][ T5967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 43.056087][ T5967] [ 43.394438][ T5977] syz.2.16: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 43.399725][ T5977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16'. [ 43.640166][ T5743] Bluetooth: hci1: command tx timeout [ 43.641259][ T5743] Bluetooth: hci2: command tx timeout [ 43.641968][ T5743] Bluetooth: hci0: command tx timeout [ 43.721834][ T5745] Bluetooth: hci3: command tx timeout [ 43.883913][ T5988] loop3: detected capacity change from 0 to 7 [ 43.904447][ T5988] Dev loop3: unable to read RDB block 7 [ 43.904481][ T5988] loop3: unable to read partition table [ 43.904626][ T5988] loop3: partition table beyond EOD, truncated [ 43.904640][ T5988] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 43.962297][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 43.963764][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 43.978366][ T5992] netlink: 'syz.2.21': attribute type 3 has an invalid length. [ 44.746041][ T5999] Zero length message leads to an empty skb [ 45.720038][ T5745] Bluetooth: hci2: command tx timeout [ 45.720062][ T5745] Bluetooth: hci1: command tx timeout [ 45.720074][ T5745] Bluetooth: hci0: command tx timeout [ 45.800828][ T5743] Bluetooth: hci3: command tx timeout [ 47.978342][ T6015] loop3: detected capacity change from 0 to 7 [ 47.987341][ T6015] Dev loop3: unable to read RDB block 7 [ 47.987375][ T6015] loop3: unable to read partition table [ 47.987537][ T6015] loop3: partition table beyond EOD, truncated [ 47.987553][ T6015] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 48.310053][ T5882] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 48.370216][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 48.469975][ T5882] usb 8-1: Using ep0 maxpacket: 32 [ 48.472442][ T5882] usb 8-1: unable to get BOS descriptor or descriptor too short [ 48.472483][ T5882] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 48.473561][ T5882] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 48.473580][ T5882] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 48.473597][ T5882] usb 8-1: config 14 has no interface number 0 [ 48.473611][ T5882] usb 8-1: config 14 has no interface number 1 [ 48.473661][ T5882] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 48.473681][ T5882] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 48.473701][ T5882] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 48.473723][ T5882] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 48.473744][ T5882] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 48.473764][ T5882] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 48.473786][ T5882] usb 8-1: config 14 interface 57 has no altsetting 0 [ 48.473802][ T5882] usb 8-1: config 14 interface 228 has no altsetting 0 [ 48.476560][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.476580][ T5882] usb 8-1: Product: syz [ 48.476592][ T5882] usb 8-1: Manufacturer: syz [ 48.476604][ T5882] usb 8-1: SerialNumber: syz [ 48.530057][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 48.532598][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 48.532639][ T9] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 48.533564][ T9] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 48.533583][ T9] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 48.533599][ T9] usb 5-1: config 14 has no interface number 0 [ 48.533611][ T9] usb 5-1: config 14 has no interface number 1 [ 48.533655][ T9] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 48.533673][ T9] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 48.533693][ T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 48.533712][ T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 48.533733][ T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 48.533752][ T9] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 48.533772][ T9] usb 5-1: config 14 interface 57 has no altsetting 0 [ 48.533786][ T9] usb 5-1: config 14 interface 228 has no altsetting 0 [ 48.535641][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.535660][ T9] usb 5-1: Product: syz [ 48.535671][ T9] usb 5-1: Manufacturer: syz [ 48.535683][ T9] usb 5-1: SerialNumber: syz [ 49.192057][ T5882] legousbtower 8-1:14.57: interrupt endpoints not found [ 49.522781][ T5882] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 49.571743][ T9] legousbtower 5-1:14.57: interrupt endpoints not found [ 49.576099][ T5882] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 50.006891][ T9] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 50.008553][ T9] legousbtower 5-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 50.272486][ T6022] FAULT_INJECTION: forcing a failure. [ 50.272486][ T6022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.272508][ T6022] CPU: 2 UID: 0 PID: 6022 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT(full) [ 50.272521][ T6022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.272528][ T6022] Call Trace: [ 50.272532][ T6022] [ 50.272537][ T6022] dump_stack_lvl+0x100/0x190 [ 50.272555][ T6022] should_fail_ex.cold+0x5/0xa [ 50.272570][ T6022] _copy_to_user+0x32/0xd0 [ 50.272588][ T6022] simple_read_from_buffer+0xcb/0x170 [ 50.272604][ T6022] proc_fail_nth_read+0x1af/0x230 [ 50.272619][ T6022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.272633][ T6022] ? rw_verify_area+0xce/0x6d0 [ 50.272644][ T6022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.272657][ T6022] vfs_read+0x1e4/0xb40 [ 50.272672][ T6022] ? lock_acquire+0x1d1/0x380 [ 50.272688][ T6022] ? __fget_files+0x34/0x3d0 [ 50.272702][ T6022] ? __pfx_vfs_read+0x10/0x10 [ 50.272713][ T6022] ? find_held_lock+0x2b/0x80 [ 50.272726][ T6022] ? __fget_files+0x215/0x3d0 [ 50.272742][ T6022] ? __fget_files+0x21f/0x3d0 [ 50.272760][ T6022] ksys_read+0x12a/0x250 [ 50.272772][ T6022] ? __pfx_ksys_read+0x10/0x10 [ 50.272789][ T6022] do_int80_emulation+0x166/0x650 [ 50.272810][ T6022] asm_int80_emulation+0x1a/0x20 [ 50.272823][ T6022] RIP: 0023:0xf71d75ab [ 50.272833][ T6022] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 50.272843][ T6022] RSP: 002b:00000000f54964bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 50.272854][ T6022] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54965d0 [ 50.272861][ T6022] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 50.272867][ T6022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.272873][ T6022] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.272882][ T6022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.272894][ T6022] [ 50.291758][ T75] usb 8-1: USB disconnect, device number 2 [ 50.348044][ T6046] netlink: 'syz.2.36': attribute type 1 has an invalid length. [ 50.349042][ T6046] FAULT_INJECTION: forcing a failure. [ 50.349042][ T6046] name fail_futex, interval 1, probability 0, space 0, times 1 [ 50.349067][ T6046] CPU: 1 UID: 0 PID: 6046 Comm: syz.2.36 Not tainted syzkaller #0 PREEMPT(full) [ 50.349087][ T6046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.349098][ T6046] Call Trace: [ 50.349103][ T6046] [ 50.349111][ T6046] dump_stack_lvl+0x100/0x190 [ 50.349140][ T6046] should_fail_ex.cold+0x5/0xa [ 50.349166][ T6046] get_futex_key+0x1d0/0x14f0 [ 50.349188][ T6046] ? __pfx_get_futex_key+0x10/0x10 [ 50.349207][ T6046] ? trace_ipi_send_cpu.constprop.0+0x73/0x220 [ 50.349239][ T6046] ? __smp_call_single_queue+0x17e/0x450 [ 50.349272][ T6046] ? __pfx___smp_call_single_queue+0x10/0x10 [ 50.349306][ T6046] futex_wait_setup+0x91/0x540 [ 50.349340][ T6046] __futex_wait+0x19f/0x300 [ 50.349367][ T6046] ? __pfx___futex_wait+0x10/0x10 [ 50.349390][ T6046] ? __pfx_try_to_wake_up+0x10/0x10 [ 50.349418][ T6046] ? futex_hash+0x311/0x400 [ 50.349437][ T6046] ? __pfx_futex_wake_mark+0x10/0x10 [ 50.349466][ T6046] ? find_held_lock+0x2b/0x80 [ 50.349487][ T6046] ? futex_wake+0x4ea/0x5e0 [ 50.349518][ T6046] futex_wait+0xe6/0x370 [ 50.349543][ T6046] ? __pfx_futex_wait+0x10/0x10 [ 50.349574][ T6046] ? rcu_read_lock_any_held+0x6a/0x90 [ 50.349597][ T6046] ? find_held_lock+0x2b/0x80 [ 50.349619][ T6046] ? ksys_write+0x190/0x250 [ 50.349639][ T6046] ? ksys_write+0x190/0x250 [ 50.349664][ T6046] do_futex+0x265/0x440 [ 50.349687][ T6046] ? __pfx_do_futex+0x10/0x10 [ 50.349708][ T6046] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 50.349739][ T6046] __ia32_sys_futex_time32+0x2f4/0x470 [ 50.349764][ T6046] ? fput+0x7c/0x100 [ 50.349789][ T6046] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 50.349809][ T6046] ? ksys_write+0x1ac/0x250 [ 50.349828][ T6046] ? __pfx_ksys_write+0x10/0x10 [ 50.349846][ T6046] __do_fast_syscall_32+0x13a/0x8b0 [ 50.349878][ T6046] do_fast_syscall_32+0x32/0x70 [ 50.349896][ T6046] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.349911][ T6046] RIP: 0023:0xf702efec [ 50.349926][ T6046] Code: Unable to access opcode bytes at 0xf702efc2. [ 50.349931][ T6046] RSP: 002b:00000000f541d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 50.349952][ T6046] RAX: ffffffffffffffda RBX: 00000000f7424f88 RCX: 0000000000000080 [ 50.349959][ T6046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7424f8c [ 50.349967][ T6046] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 50.349974][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.349981][ T6046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.349996][ T6046] [ 50.362228][ T1354] usb 5-1: USB disconnect, device number 3 [ 50.367334][ T75] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 50.436020][ T6050] loop3: detected capacity change from 0 to 7 [ 50.436813][ T6050] Dev loop3: unable to read RDB block 7 [ 50.436841][ T6050] loop3: unable to read partition table [ 50.436975][ T6050] loop3: partition table beyond EOD, truncated [ 50.436989][ T6050] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 50.471731][ T1354] legousbtower 5-1:14.228: LEGO USB Tower #-159 now disconnected [ 50.594485][ T6055] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 50.595137][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 50.595147][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 50.609978][ T30] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.760028][ T30] usb 7-1: device descriptor read/64, error -71 [ 51.379987][ T30] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 51.790678][ T30] usb 7-1: device descriptor read/64, error -71 [ 51.938686][ T30] usb usb7-port1: attempt power cycle [ 52.551513][ T30] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 52.570718][ T30] usb 7-1: device descriptor read/8, error -71 [ 52.795756][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 52.805507][ T6077] loop3: detected capacity change from 0 to 7 [ 52.810289][ T6077] Dev loop3: unable to read RDB block 7 [ 52.810317][ T6077] loop3: AHDI p1 [ 52.810337][ T6077] loop3: partition table partially beyond EOD, truncated [ 52.830746][ T30] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 52.860470][ T30] usb 7-1: device descriptor read/8, error -71 [ 52.970774][ T30] usb usb7-port1: unable to enumerate USB device [ 54.144368][ T6114] netlink: 'syz.3.56': attribute type 1 has an invalid length. [ 54.146492][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 54.146510][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 54.287950][ T6102] syz.2.55 (6102) used greatest stack depth: 19848 bytes left [ 54.367145][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 54.645029][ T6122] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 54.655297][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 54.873340][ T6127] netlink: 'syz.3.61': attribute type 1 has an invalid length. [ 55.055431][ T6134] FAULT_INJECTION: forcing a failure. [ 55.055431][ T6134] name failslab, interval 1, probability 0, space 0, times 0 [ 55.055452][ T6134] CPU: 2 UID: 0 PID: 6134 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT(full) [ 55.055465][ T6134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.055471][ T6134] Call Trace: [ 55.055476][ T6134] [ 55.055481][ T6134] dump_stack_lvl+0x100/0x190 [ 55.055500][ T6134] should_fail_ex.cold+0x5/0xa [ 55.055515][ T6134] should_failslab+0xc2/0x120 [ 55.055532][ T6134] kmem_cache_alloc_noprof+0x92/0x6a0 [ 55.055553][ T6134] ? do_getname+0x35/0x390 [ 55.055567][ T6134] do_getname+0x35/0x390 [ 55.055579][ T6134] do_sys_openat2+0xc7/0x1e0 [ 55.055597][ T6134] ? __pfx_do_sys_openat2+0x10/0x10 [ 55.055616][ T6134] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 55.055637][ T6134] __ia32_compat_sys_openat+0x12d/0x210 [ 55.055649][ T6134] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 55.055661][ T6134] ? fput+0x7c/0x100 [ 55.055676][ T6134] ? ksys_write+0x1ac/0x250 [ 55.055689][ T6134] ? __pfx_ksys_write+0x10/0x10 [ 55.055705][ T6134] __do_fast_syscall_32+0x13a/0x8b0 [ 55.055720][ T6134] ? lockdep_hardirqs_on+0x7d/0x110 [ 55.055735][ T6134] do_fast_syscall_32+0x32/0x70 [ 55.055750][ T6134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 55.055765][ T6134] RIP: 0023:0xf7fe8fec [ 55.055779][ T6134] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 55.055784][ T6134] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 55.055795][ T6134] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 55.055803][ T6134] RDX: 0000000000080201 RSI: 0000000000000088 RDI: 0000000000000000 [ 55.055809][ T6134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 55.055816][ T6134] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 55.055822][ T6134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.055835][ T6134] [ 55.885484][ T5745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.889180][ T5745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.889640][ T5745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.893133][ T5745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.893553][ T5745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.000053][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 56.163796][ T6163] FAULT_INJECTION: forcing a failure. [ 56.163796][ T6163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.163818][ T6163] CPU: 0 UID: 0 PID: 6163 Comm: syz.0.71 Not tainted syzkaller #0 PREEMPT(full) [ 56.163830][ T6163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.163837][ T6163] Call Trace: [ 56.163841][ T6163] [ 56.163845][ T6163] dump_stack_lvl+0x100/0x190 [ 56.163864][ T6163] should_fail_ex.cold+0x5/0xa [ 56.163879][ T6163] _copy_from_user+0x2e/0xd0 [ 56.163896][ T6163] move_addr_to_kernel+0x65/0x170 [ 56.163918][ T6163] __sys_connect+0xb5/0x170 [ 56.163933][ T6163] ? __pfx___sys_connect+0x10/0x10 [ 56.163949][ T6163] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 56.163969][ T6163] ? ksys_write+0x1ac/0x250 [ 56.163982][ T6163] ? __pfx_ksys_write+0x10/0x10 [ 56.163997][ T6163] __ia32_sys_connect+0x71/0xb0 [ 56.164012][ T6163] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.164026][ T6163] __do_fast_syscall_32+0x13a/0x8b0 [ 56.164041][ T6163] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.164055][ T6163] do_fast_syscall_32+0x32/0x70 [ 56.164070][ T6163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.164084][ T6163] RIP: 0023:0xf7fd2fec [ 56.164097][ T6163] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 56.164102][ T6163] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 56.164112][ T6163] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 56.164119][ T6163] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.164125][ T6163] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.164132][ T6163] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 56.164138][ T6163] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.164151][ T6163] [ 56.168823][ T6158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.291273][ T5841] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.371233][ T5841] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.401669][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.401715][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.401774][ T6142] bridge_slave_0: entered allmulticast mode [ 56.402608][ T6142] bridge_slave_0: entered promiscuous mode [ 56.404008][ T6142] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.404080][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.404265][ T6142] bridge_slave_1: entered allmulticast mode [ 56.404965][ T6142] bridge_slave_1: entered promiscuous mode [ 56.425141][ T6142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.427050][ T6142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.440525][ T6142] team0: Port device team_slave_0 added [ 56.441720][ T6142] team0: Port device team_slave_1 added [ 56.462401][ T5841] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.462533][ T6179] netlink: 'syz.0.75': attribute type 1 has an invalid length. [ 56.477155][ T6142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.477167][ T6142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.477181][ T6142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.478172][ T6142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.478181][ T6142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.478196][ T6142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.504637][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 56.504652][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 56.515509][ T6142] hsr_slave_0: entered promiscuous mode [ 56.515951][ T6142] hsr_slave_1: entered promiscuous mode [ 56.516291][ T6142] debugfs: 'hsr0' already exists in 'hsr' [ 56.516303][ T6142] Cannot create hsr debugfs directory [ 56.541028][ T5841] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.663044][ T5841] bridge_slave_1: left allmulticast mode [ 56.663120][ T5841] bridge_slave_1: left promiscuous mode [ 56.664505][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.671331][ T5841] bridge_slave_0: left allmulticast mode [ 56.671349][ T5841] bridge_slave_0: left promiscuous mode [ 56.671722][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.796565][ T5841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.804261][ T5841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.806107][ T5841] bond0 (unregistering): Released all slaves [ 57.112187][ T5451] 8021q: adding VLAN 0 to HW filter on device eth1 [ 57.908212][ T6202] FAULT_INJECTION: forcing a failure. [ 57.908212][ T6202] name failslab, interval 1, probability 0, space 0, times 0 [ 57.908393][ T6202] CPU: 0 UID: 0 PID: 6202 Comm: syz.2.80 Not tainted syzkaller #0 PREEMPT(full) [ 57.908419][ T6202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.908426][ T6202] Call Trace: [ 57.908430][ T6202] [ 57.908434][ T6202] dump_stack_lvl+0x100/0x190 [ 57.908454][ T6202] should_fail_ex.cold+0x5/0xa [ 57.908469][ T6202] should_failslab+0xc2/0x120 [ 57.908486][ T6202] __kmalloc_noprof+0xfc/0x840 [ 57.908500][ T6202] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 57.908515][ T6202] kernfs_fop_write_iter+0x26a/0x5f0 [ 57.908528][ T6202] vfs_write+0x6af/0x1050 [ 57.908542][ T6202] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 57.908555][ T6202] ? __pfx_vfs_write+0x10/0x10 [ 57.908566][ T6202] ? find_held_lock+0x2b/0x80 [ 57.908589][ T6202] ksys_write+0x12a/0x250 [ 57.908602][ T6202] ? __pfx_ksys_write+0x10/0x10 [ 57.908616][ T6202] ? rcu_is_watching+0x13/0xc0 [ 57.908631][ T6202] __do_fast_syscall_32+0x13a/0x8b0 [ 57.908646][ T6202] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.908661][ T6202] do_fast_syscall_32+0x32/0x70 [ 57.908676][ T6202] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.908690][ T6202] RIP: 0023:0xf702efec [ 57.908704][ T6202] Code: Unable to access opcode bytes at 0xf702efc2. [ 57.908709][ T6202] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 57.908720][ T6202] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 57.908727][ T6202] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.908733][ T6202] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.908739][ T6202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.908746][ T6202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.908759][ T6202] [ 57.950119][ T6142] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.984591][ T5745] Bluetooth: hci4: command tx timeout [ 58.249968][ T6142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.278682][ T6142] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.288162][ T6142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.341475][ T6142] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.406636][ T6142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.506041][ T5841] hsr_slave_0: left promiscuous mode [ 58.506675][ T5841] hsr_slave_1: left promiscuous mode [ 58.507463][ T5841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.507488][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.509100][ T5841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.509115][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.604044][ T5841] veth1_macvtap: left promiscuous mode [ 58.620715][ T5841] veth0_macvtap: left promiscuous mode [ 58.621076][ T5841] veth1_vlan: left promiscuous mode [ 58.621489][ T5841] veth0_vlan: left promiscuous mode [ 58.853534][ T5841] team0 (unregistering): Port device team_slave_1 removed [ 58.859403][ T5841] team0 (unregistering): Port device team_slave_0 removed [ 58.859559][ T6216] netlink: 'syz.0.85': attribute type 1 has an invalid length. [ 58.913293][ T6142] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.916192][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 58.916234][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 58.916964][ T6142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.930189][ T6216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.990773][ T6142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.013411][ T6142] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.020552][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.020599][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.028928][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.028976][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.090562][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2 [ 59.206833][ T6240] netlink: 'syz.2.88': attribute type 1 has an invalid length. [ 59.228964][ T6240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.230113][ T5451] 8021q: adding VLAN 0 to HW filter on device eth3 [ 59.245461][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 59.245475][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'. [ 59.314106][ T6142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.358455][ T5451] 8021q: adding VLAN 0 to HW filter on device eth4 [ 59.452532][ T6142] veth0_vlan: entered promiscuous mode [ 59.456272][ T6142] veth1_vlan: entered promiscuous mode [ 59.469818][ T6142] veth0_macvtap: entered promiscuous mode [ 59.472172][ T6142] veth1_macvtap: entered promiscuous mode [ 59.478581][ T6142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.483180][ T6142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.510305][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.510582][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.510604][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.510621][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.533559][ T6275] openvswitch: netlink: Message has 8 unknown bytes. [ 59.543108][ T122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.543127][ T122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.544161][ T6275] FAULT_INJECTION: forcing a failure. [ 59.544161][ T6275] name failslab, interval 1, probability 0, space 0, times 0 [ 59.544179][ T6275] CPU: 1 UID: 0 PID: 6275 Comm: syz.0.90 Not tainted syzkaller #0 PREEMPT(full) [ 59.544192][ T6275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.544199][ T6275] Call Trace: [ 59.544203][ T6275] [ 59.544207][ T6275] dump_stack_lvl+0x100/0x190 [ 59.544226][ T6275] should_fail_ex.cold+0x5/0xa [ 59.544242][ T6275] should_failslab+0xc2/0x120 [ 59.544259][ T6275] __kmalloc_noprof+0xfc/0x840 [ 59.544274][ T6275] ? sk_prot_alloc+0x10b/0x2a0 [ 59.544291][ T6275] sk_prot_alloc+0x10b/0x2a0 [ 59.544305][ T6275] sk_alloc+0x36/0xe80 [ 59.544323][ T6275] __netlink_create+0x5e/0x2c0 [ 59.544337][ T6275] ? __wake_up+0x3f/0x60 [ 59.544353][ T6275] netlink_create+0x29b/0x610 [ 59.544367][ T6275] ? __pfx_genl_bind+0x10/0x10 [ 59.544407][ T6275] ? __pfx_genl_unbind+0x10/0x10 [ 59.544425][ T6275] ? __pfx_genl_release+0x10/0x10 [ 59.544438][ T6275] __sock_create+0x339/0x860 [ 59.544456][ T6275] __sys_socket+0x14d/0x260 [ 59.544471][ T6275] ? xfd_validate_state+0x129/0x190 [ 59.544491][ T6275] ? __pfx___sys_socket+0x10/0x10 [ 59.544512][ T6275] __ia32_sys_socket+0x72/0xb0 [ 59.544529][ T6275] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.544544][ T6275] __do_fast_syscall_32+0x13a/0x8b0 [ 59.544558][ T6275] ? lockdep_hardirqs_on+0x7d/0x110 [ 59.544572][ T6275] do_fast_syscall_32+0x32/0x70 [ 59.544587][ T6275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 59.544602][ T6275] RIP: 0023:0xf7fd2fec [ 59.544614][ T6275] Code: Unable to access opcode bytes at 0xf7fd2fc2. [ 59.544619][ T6275] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 59.544631][ T6275] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 59.544639][ T6275] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.544645][ T6275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 59.544651][ T6275] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 59.544658][ T6275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.544675][ T6275] [ 59.563354][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.563368][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.041743][ T5745] Bluetooth: hci4: command 0x041b tx timeout [ 61.815712][ T6308] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 61.824516][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 61.881110][ T43] audit: type=1326 audit(1791044118.431:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.3.101" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe8fec code=0x0 [ 62.101933][ T6326] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 62.130001][ T5745] Bluetooth: hci4: command 0x041b tx timeout [ 62.865683][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'. [ 62.880994][ T6335] loop3: detected capacity change from 0 to 7 [ 62.904030][ T6335] Dev loop3: unable to read RDB block 7 [ 62.904053][ T6335] loop3: unable to read partition table [ 62.904145][ T6335] loop3: partition table beyond EOD, truncated [ 62.904161][ T6335] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 63.095538][ T6349] FAULT_INJECTION: forcing a failure. [ 63.095538][ T6349] name failslab, interval 1, probability 0, space 0, times 0 [ 63.095634][ T6349] CPU: 1 UID: 0 PID: 6349 Comm: syz.3.110 Not tainted syzkaller #0 PREEMPT(full) [ 63.095660][ T6349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.095667][ T6349] Call Trace: [ 63.095672][ T6349] [ 63.095677][ T6349] dump_stack_lvl+0x100/0x190 [ 63.095699][ T6349] should_fail_ex.cold+0x5/0xa [ 63.095720][ T6349] should_failslab+0xc2/0x120 [ 63.095746][ T6349] __kmalloc_noprof+0xfc/0x840 [ 63.095769][ T6349] ? rcu_is_watching+0x13/0xc0 [ 63.095790][ T6349] ? tomoyo_realpath_from_path+0xb6/0x690 [ 63.095821][ T6349] tomoyo_realpath_from_path+0xb6/0x690 [ 63.095849][ T6349] tomoyo_path_number_perm+0x23c/0x580 [ 63.095861][ T6349] ? tomoyo_path_number_perm+0x22e/0x580 [ 63.095874][ T6349] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 63.095886][ T6349] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 63.095909][ T6349] ? __lock_acquire+0x5c0/0x1f40 [ 63.095933][ T6349] ? __fget_files+0x34/0x3d0 [ 63.095948][ T6349] ? find_held_lock+0x2b/0x80 [ 63.095960][ T6349] ? __fget_files+0x215/0x3d0 [ 63.095974][ T6349] ? hook_file_ioctl_common+0x140/0x440 [ 63.095986][ T6349] ? __fget_files+0x215/0x3d0 [ 63.096002][ T6349] ? __fget_files+0x21f/0x3d0 [ 63.096019][ T6349] security_file_ioctl_compat+0xd3/0x230 [ 63.096032][ T6349] __ia32_compat_sys_ioctl+0xc2/0x360 [ 63.096047][ T6349] __do_fast_syscall_32+0x13a/0x8b0 [ 63.096078][ T6349] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.096094][ T6349] do_fast_syscall_32+0x32/0x70 [ 63.096109][ T6349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.096124][ T6349] RIP: 0023:0xf7fe8fec [ 63.096138][ T6349] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 63.096143][ T6349] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 63.096154][ T6349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c138fd09 [ 63.096162][ T6349] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.096168][ T6349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.096177][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.096183][ T6349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.096197][ T6349] [ 63.104914][ T6349] ERROR: Out of memory at tomoyo_realpath_from_path. [ 63.435824][ T6356] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 63.643808][ C1] Illegal XDP return value 16128 on prog (id 6) dev lo, expect packet loss! [ 63.966064][ T6364] FAULT_INJECTION: forcing a failure. [ 63.966064][ T6364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.966096][ T6364] CPU: 2 UID: 0 PID: 6364 Comm: syz.2.118 Not tainted syzkaller #0 PREEMPT(full) [ 63.966118][ T6364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.966130][ T6364] Call Trace: [ 63.966137][ T6364] [ 63.966144][ T6364] dump_stack_lvl+0x100/0x190 [ 63.966174][ T6364] should_fail_ex.cold+0x5/0xa [ 63.966200][ T6364] _copy_from_user+0x2e/0xd0 [ 63.966228][ T6364] get_compat_msghdr+0xb3/0x480 [ 63.966252][ T6364] ? __pfx_get_compat_msghdr+0x10/0x10 [ 63.966285][ T6364] ___sys_sendmsg+0x1b6/0x1e0 [ 63.966310][ T6364] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.966367][ T6364] ? find_held_lock+0x2b/0x80 [ 63.966406][ T6364] __sys_sendmsg+0x160/0x210 [ 63.966426][ T6364] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.966450][ T6364] ? __pfx_ksys_write+0x10/0x10 [ 63.966478][ T6364] __do_fast_syscall_32+0x13a/0x8b0 [ 63.966502][ T6364] ? lockdep_hardirqs_on+0x7d/0x110 [ 63.966526][ T6364] do_fast_syscall_32+0x32/0x70 [ 63.966548][ T6364] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.966572][ T6364] RIP: 0023:0xf702efec [ 63.966594][ T6364] Code: Unable to access opcode bytes at 0xf702efc2. [ 63.966602][ T6364] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 63.966622][ T6364] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 63.966633][ T6364] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.966646][ T6364] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.966656][ T6364] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 63.966666][ T6364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.966690][ T6364] [ 64.060655][ T6368] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 64.202813][ T5745] Bluetooth: hci4: command 0x041b tx timeout [ 64.219430][ T6387] xt_MASQUERADE: bad rangesize 29 [ 64.222898][ T6389] ======================================================= [ 64.222898][ T6389] WARNING: The mand mount option has been deprecated and [ 64.222898][ T6389] and is ignored by this kernel. Remove the mand [ 64.222898][ T6389] option from the mount to silence this warning. [ 64.222898][ T6389] ======================================================= [ 64.224573][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'. [ 64.807324][ T6389] smpboot: CPU 1 is now offline [ 64.921983][ T6389] smpboot: CPU 3 is now offline [ 65.063527][ T6390] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 65.084032][ T6390] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 65.086915][ T6393] ------------[ cut here ]------------ [ 65.086924][ T6393] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 65.086930][ T6393] WARNING: kernel/sched/sched.h:1666 at update_rq_clock+0x40a/0xd20, CPU#2: syz.3.126/6393 [ 65.096360][ T6393] Modules linked in: [ 65.097703][ T6393] CPU: 2 UID: 0 PID: 6393 Comm: syz.3.126 Not tainted syzkaller #0 PREEMPT(full) [ 65.100780][ T6393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.104273][ T6393] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 65.106092][ T6393] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 65.112079][ T6393] RSP: 0018:ffffc9000617f840 EFLAGS: 00010046 [ 65.114103][ T6393] RAX: 0000000000000000 RBX: ffff88802b53c040 RCX: 0000000000000001 [ 65.116924][ T6393] RDX: 0000000000000046 RSI: ffffffff8e36be9b RDI: ffffffff8c624080 [ 65.119557][ T6393] RBP: ffffc9000617f9e0 R08: 0000000000000001 R09: 0000000000000001 [ 65.122123][ T6393] R10: ffff88802b43cbd8 R11: 0000000000000000 R12: ffffffff9145bbe4 [ 65.124827][ T6393] R13: ffff88802b53cf20 R14: ffff88802b53c040 R15: 0000000000000003 [ 65.127808][ T6393] FS: 0000000000000000(0000) GS:ffff888096b52000(0063) knlGS:00000000f54a6b40 [ 65.130703][ T6393] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 65.132806][ T6393] CR2: 00007fe6b8ee7f89 CR3: 00000000290d1000 CR4: 0000000000352ef0 [ 65.135308][ T6393] Call Trace: [ 65.136392][ T6393] [ 65.137345][ T6393] __schedule+0x1c69/0x6920 [ 65.138840][ T6393] ? __lock_acquire+0x5c0/0x1f40 [ 65.140423][ T6393] ? __pfx___schedule+0x10/0x10 [ 65.141902][ T6393] ? find_held_lock+0x2b/0x80 [ 65.143357][ T6393] ? schedule+0x225/0x2c0 [ 65.144681][ T6393] schedule+0xdd/0x2c0 [ 65.146033][ T6393] schedule_timeout+0x127/0x280 [ 65.147620][ T6393] ? __pfx_schedule_timeout+0x10/0x10 [ 65.149376][ T6393] ? __pfx_process_timeout+0x10/0x10 [ 65.151080][ T6393] ? snd_rawmidi_write+0x488/0xc60 [ 65.152715][ T6393] ? rcu_is_watching+0x13/0xc0 [ 65.154251][ T6393] ? snd_rawmidi_write+0x44d/0xc60 [ 65.156064][ T6393] snd_rawmidi_write+0x492/0xc60 [ 65.157681][ T6393] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 65.159438][ T6393] ? common_file_perm+0x266/0x500 [ 65.161015][ T6393] ? __pfx_default_wake_function+0x10/0x10 [ 65.162809][ T6393] ? bpf_lsm_file_permission+0x9/0x10 [ 65.164488][ T6393] ? security_file_permission+0x76/0x210 [ 65.166294][ T6393] ? rw_verify_area+0xce/0x6d0 [ 65.167846][ T6393] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 65.169584][ T6393] vfs_writev+0x5ed/0xdd0 [ 65.170981][ T6393] ? __pfx_vfs_writev+0x10/0x10 [ 65.172514][ T6393] ? lock_acquire+0x1d1/0x380 [ 65.174003][ T6393] ? __fget_files+0x34/0x3d0 [ 65.175472][ T6393] ? __fget_files+0x21f/0x3d0 [ 65.176991][ T6393] ? do_writev+0x28a/0x340 [ 65.178429][ T6393] do_writev+0x28a/0x340 [ 65.179784][ T6393] ? __pfx_do_writev+0x10/0x10 [ 65.181314][ T6393] __do_fast_syscall_32+0x13a/0x8b0 [ 65.183004][ T6393] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.184688][ T6393] do_fast_syscall_32+0x32/0x70 [ 65.186321][ T6393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.188507][ T6393] RIP: 0023:0xf7fe8fec [ 65.189911][ T6393] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 65.192033][ T6393] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 65.194664][ T6393] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000840 [ 65.197169][ T6393] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.199673][ T6393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.202135][ T6393] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.204619][ T6393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.207118][ T6393] [ 65.208109][ T6393] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 65.210396][ T6393] CPU: 2 UID: 0 PID: 6393 Comm: syz.3.126 Not tainted syzkaller #0 PREEMPT(full) [ 65.213234][ T6393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.216382][ T6393] Call Trace: [ 65.217448][ T6393] [ 65.218407][ T6393] dump_stack_lvl+0x100/0x190 [ 65.219900][ T6393] vpanic+0x553/0x970 [ 65.221171][ T6393] ? __pfx_vpanic+0x10/0x10 [ 65.222619][ T6393] panic+0xd1/0xe0 [ 65.223817][ T6393] ? __pfx_panic+0x10/0x10 [ 65.225240][ T6393] check_panic_on_warn.cold+0x19/0x34 [ 65.226953][ T6393] ? update_rq_clock+0x40a/0xd20 [ 65.228518][ T6393] __warn.cold+0x191/0x318 [ 65.229971][ T6393] __report_bug+0x30f/0x440 [ 65.231426][ T6393] ? update_rq_clock+0x40a/0xd20 [ 65.232994][ T6393] ? __pfx___report_bug+0x10/0x10 [ 65.234602][ T6393] ? pick_eevdf+0x1ad/0x880 [ 65.236071][ T6393] ? __lock_acquire+0x5c0/0x1f40 [ 65.237642][ T6393] ? __lock_acquire+0x5c0/0x1f40 [ 65.239245][ T6393] ? update_rq_clock+0x40a/0xd20 [ 65.240806][ T6393] report_bug+0xb3/0x220 [ 65.242156][ T6393] ? update_rq_clock+0x40a/0xd20 [ 65.243726][ T6393] handle_bug+0x16a/0x2a0 [ 65.245099][ T6393] exc_invalid_op+0x17/0x50 [ 65.246553][ T6393] asm_exc_invalid_op+0x1a/0x20 [ 65.248089][ T6393] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 65.249832][ T6393] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 65.255840][ T6393] RSP: 0018:ffffc9000617f840 EFLAGS: 00010046 [ 65.257753][ T6393] RAX: 0000000000000000 RBX: ffff88802b53c040 RCX: 0000000000000001 [ 65.260161][ T6393] RDX: 0000000000000046 RSI: ffffffff8e36be9b RDI: ffffffff8c624080 [ 65.262630][ T6393] RBP: ffffc9000617f9e0 R08: 0000000000000001 R09: 0000000000000001 [ 65.265175][ T6393] R10: ffff88802b43cbd8 R11: 0000000000000000 R12: ffffffff9145bbe4 [ 65.267669][ T6393] R13: ffff88802b53cf20 R14: ffff88802b53c040 R15: 0000000000000003 [ 65.270171][ T6393] __schedule+0x1c69/0x6920 [ 65.271657][ T6393] ? __lock_acquire+0x5c0/0x1f40 [ 65.273220][ T6393] ? __pfx___schedule+0x10/0x10 [ 65.274764][ T6393] ? find_held_lock+0x2b/0x80 [ 65.276279][ T6393] ? schedule+0x225/0x2c0 [ 65.277642][ T6393] schedule+0xdd/0x2c0 [ 65.278937][ T6393] schedule_timeout+0x127/0x280 [ 65.280500][ T6393] ? __pfx_schedule_timeout+0x10/0x10 [ 65.282195][ T6393] ? __pfx_process_timeout+0x10/0x10 [ 65.283895][ T6393] ? snd_rawmidi_write+0x488/0xc60 [ 65.285522][ T6393] ? rcu_is_watching+0x13/0xc0 [ 65.287080][ T6393] ? snd_rawmidi_write+0x44d/0xc60 [ 65.288697][ T6393] snd_rawmidi_write+0x492/0xc60 [ 65.290286][ T6393] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 65.292046][ T6393] ? common_file_perm+0x266/0x500 [ 65.293640][ T6393] ? __pfx_default_wake_function+0x10/0x10 [ 65.295484][ T6393] ? bpf_lsm_file_permission+0x9/0x10 [ 65.297153][ T6393] ? security_file_permission+0x76/0x210 [ 65.298941][ T6393] ? rw_verify_area+0xce/0x6d0 [ 65.300480][ T6393] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 65.302108][ T6393] vfs_writev+0x5ed/0xdd0 [ 65.303498][ T6393] ? __pfx_vfs_writev+0x10/0x10 [ 65.305062][ T6393] ? lock_acquire+0x1d1/0x380 [ 65.306592][ T6393] ? __fget_files+0x34/0x3d0 [ 65.308062][ T6393] ? __fget_files+0x21f/0x3d0 [ 65.309567][ T6393] ? do_writev+0x28a/0x340 [ 65.310998][ T6393] do_writev+0x28a/0x340 [ 65.312346][ T6393] ? __pfx_do_writev+0x10/0x10 [ 65.313865][ T6393] __do_fast_syscall_32+0x13a/0x8b0 [ 65.315514][ T6393] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.317182][ T6393] do_fast_syscall_32+0x32/0x70 [ 65.318752][ T6393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.320866][ T6393] RIP: 0023:0xf7fe8fec [ 65.322219][ T6393] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 65.324330][ T6393] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 65.327022][ T6393] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000840 [ 65.329538][ T6393] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.332019][ T6393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.334534][ T6393] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.337070][ T6393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.339607][ T6393] [ 66.412170][ T6393] Shutting down cpus with NMI [ 66.414235][ T6393] Kernel Offset: disabled [ 66.415622][ T6393] Rebooting in 86400 seconds..