last executing test programs: 5m20.512201859s ago: executing program 3 (id=2356): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc044560f, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40880) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/223, 0xdf}, {&(0x7f0000000680)=""/11, 0xb}], 0x2}, 0x5}], 0x1, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 5m18.905019346s ago: executing program 3 (id=2357): r0 = socket(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000021c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff91d17410, 0x0, 0x0, 0x81}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0xa, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x10000, 0x4, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x75, 0xdab5, 0x4000, 0x0, r4, r5, 0x6, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) capset(&(0x7f0000000300)={0x20080522}, &(0x7f00000003c0)={0x6, 0xa2f, 0x9, 0x200, 0xe6c, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x18, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r14 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r14, &(0x7f0000000a80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) r15 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) syz_ublk_setup_queues(r15, r12, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) r16 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r16, &(0x7f0000000a00)={'syz0\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x3, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0xffff0000, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x20005, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r16, 0x5501) write$input_event(r16, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) setsockopt$MRT6_FLUSH(r0, 0x29, 0x24, &(0x7f0000000000)=0x5f5e0ff, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 5m18.690585711s ago: executing program 3 (id=2358): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400000}, 0xc004) 5m18.600803059s ago: executing program 3 (id=2359): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008003700", @ANYRES32=r2, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) 5m18.596915286s ago: executing program 3 (id=2360): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x2000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (fail_nth: 3) 5m18.283298615s ago: executing program 3 (id=2364): syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa0009"], 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x5, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000c00)=0x6) r3 = syz_clone(0xb2960100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8c) r7 = syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x491, 0x1, 0x6}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r8, r9, 0x2c, 0x10000) syz_io_uring_submit$UBLK(r8, r9, r10, &(0x7f0000001480)=@ublk_io_commit_and_fetch_sqe={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0107521, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x3, 0xd83, 0x9, 0x0}}) syz_io_uring_submit$UBLK(r8, r9, r10, &(0x7f0000001500)=@ublk_io_cmd_sqes={0x2e, 0x24, 0x0, r11, 0xc0107521, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, '\x00', @fetch_req_cmd={0x2, 0x2f7, 0x0, 0x0}}) io_uring_enter(r7, 0x20, 0x20, 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000100)=ANY=[@ANYRESOCT=r6], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000440)=@random={'trusted.', 'blkio.bfq.io_wait_time_recursive\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1c, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0d0300000000000009000000"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5m3.236506807s ago: executing program 32 (id=2364): syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa0009"], 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x5, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}}}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000c00)=0x6) r3 = syz_clone(0xb2960100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8c) r7 = syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x491, 0x1, 0x6}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r8, r9, 0x2c, 0x10000) syz_io_uring_submit$UBLK(r8, r9, r10, &(0x7f0000001480)=@ublk_io_commit_and_fetch_sqe={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0107521, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x3, 0xd83, 0x9, 0x0}}) syz_io_uring_submit$UBLK(r8, r9, r10, &(0x7f0000001500)=@ublk_io_cmd_sqes={0x2e, 0x24, 0x0, r11, 0xc0107521, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, '\x00', @fetch_req_cmd={0x2, 0x2f7, 0x0, 0x0}}) io_uring_enter(r7, 0x20, 0x20, 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000100)=ANY=[@ANYRESOCT=r6], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000440)=@random={'trusted.', 'blkio.bfq.io_wait_time_recursive\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1c, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0d0300000000000009000000"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 41.415950713s ago: executing program 4 (id=3661): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff9a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setrlimit(0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 40.294869056s ago: executing program 4 (id=3664): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x31, 0x0, @tid=r3}, &(0x7f0000000200)=0x0) timer_gettime(r5, &(0x7f0000000240)) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044801}, 0x4000000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="0c007d800801ff800400019c"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 40.141670581s ago: executing program 4 (id=3665): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 40.055626718s ago: executing program 4 (id=3666): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x2840, 0x0) unshare(0x6a040000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x40010, 0xffffffffffffffff, 0x185b2000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x4f0a5000) syz_io_uring_setup(0x564c, &(0x7f0000000400)={0x0, 0x8088, 0x80000, 0x0, 0xef}, &(0x7f0000000080), 0x0, &(0x7f00000006c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f000024f000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000611000/0x3000)=nil) madvise(&(0x7f00004f3000/0x1000)=nil, 0x1000, 0x4) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_clone(0x400b200, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lstat64(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x1000, 0xb, 0x0, 0xa, 0x0, 0x0, 0x5, 0x0, 0x10, 0x0, 0x1}, {0x0, 0x60000, 0x4, 0x0, 0x0, 0x17, 0xf9, 0x6, 0x0, 0x0, 0x0, 0x42}, {0x1000, 0x6000, 0x13, 0x3, 0x3, 0x0, 0x81, 0x0, 0x4, 0x6, 0x1, 0x3}, {0x4000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {0xc000, 0x1000, 0x3, 0x0, 0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x1a}, {0xe000, 0xd000, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x84}, {0x4, 0x5000, 0x11, 0x5, 0x3, 0x0, 0x0, 0x0, 0x3}, {0x1, 0x100000, 0x10, 0xf9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x25}, {0x70000}, {0x1, 0xfffe}, 0x0, 0x0, 0x6000, 0x0, 0x1, 0x1, 0x900, [0xfffffffffffffffc, 0x0, 0x0, 0x3]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_init(0x20, 0x1003) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x44) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000140)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x64) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/98, 0x62}], 0x1, 0x5, 0xe, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472796c6f636b206e9224f10f"], 0xd) 39.623635353s ago: executing program 4 (id=3670): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x28cff, 0x0) 39.113814416s ago: executing program 4 (id=3671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000120000000000230000001800018014000200626f6e645f736c6176655f30000000000500020001"], 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r2, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x4004000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000000c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000080)={r7, 0x3, 0x6, 0x0, &(0x7f0000000380)}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="0a00274f7b1c0303030300004400238006001b00000000000500060002000000080017000000000005000f00ef00000006001900010000000500110001000000080009"], 0x6c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) 23.975965001s ago: executing program 33 (id=3671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000120000000000230000001800018014000200626f6e645f736c6176655f30000000000500020001"], 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r2, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x4004000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000000c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000080)={r7, 0x3, 0x6, 0x0, &(0x7f0000000380)}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="0a00274f7b1c0303030300004400238006001b00000000000500060002000000080017000000000005000f00ef00000006001900010000000500110001000000080009"], 0x6c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) 4.400051443s ago: executing program 1 (id=3814): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfb7f, 0x2000, &(0x7f0000000000/0x2000)=nil}) 4.309133026s ago: executing program 5 (id=3816): mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='reiserfs\x00', 0xc000, 0x0) 4.227790113s ago: executing program 5 (id=3817): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80600, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x9f, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x102}}}, &(0x7f0000000280)) r5 = openat2$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x20000, 0x20, 0x24}, 0x18) linkat(r4, &(0x7f0000000100)='./file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x800) bind$can_raw(r3, &(0x7f0000000000), 0x10) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000380), 0x0, &(0x7f0000000500)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x74, r7, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x34, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xf}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x4}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x9}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x401}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x1}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0xb210}]}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x1}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xc}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x6}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0xf23}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$nl_route_sched(r2, 0x0, 0xc840) sendmsg$nl_route_sched(r2, 0x0, 0x24040084) 4.161861525s ago: executing program 5 (id=3818): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x40) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x80000003, 0x82) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32=r1, @ANYRES8=r1], 0x50) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402) fsmount(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0305602, &(0x7f0000000040)={0x1}) 4.020168943s ago: executing program 0 (id=3820): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004080) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB], 0x20000600}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0500000023"], 0x80}}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, @none, 0x1}, 0xa) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0xfffd}, 0xe) 3.113896975s ago: executing program 0 (id=3821): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) setsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) io_setup(0x8, &(0x7f0000004200)=0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000000040)="6f080bcae62f88573d245d6b8da55f18b1a528ee3872728c290bccb6581371f4918b9b460928ee4bf17cf62e9b26b397a23a81950e40df04095821841404038dd59098053fca88d0a3ad3993e5f5be4167eac63f3467a76d0b0ceadbffc16228fba224fb0984afd3dc48eea6f5da868cb8262dbb2ff40cd5b82a520233a03358a4eadadea863cb30e094ddb8e58a4510c79eb09760e634ce52b9d8458e1f", 0x9e, 0xfff, 0x0, 0x2}, &(0x7f0000000180)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20008, r3, 0x1}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) listen(r1, 0x614b) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000001000000dd00000009"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$sequencer2(0xffffff9c, &(0x7f00000003c0), 0x2002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000400)=@echo=0x7f) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000019c0)={r7, 0x20, &(0x7f0000001980)={&(0x7f0000000940)=""/4096, 0x1000, 0x0, &(0x7f0000001940)=""/56, 0x38}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181140bfdc380f817221649b12a293abf620c93fea705f01", @ANYRES64=r6, @ANYRESDEC=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) 2.97720612s ago: executing program 1 (id=3823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x1f00, 0x810}, 0x20004098) 2.076861809s ago: executing program 1 (id=3825): socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x7, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='sync\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180), &(0x7f0000000240), 0x2, 0x0) r3 = request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='\x0e9h\xb5\xe1\x00\xe4\xa6A\xb0{\xf4\x80opyr\xc5 z\fG@J\x7f\xa8\xeb{\x82\xea\x17!&\a\x80\x90\xcb\xe210\x9b\x13\xfd/\xbac4\x05\xd1\xf5\xaf\x9b\xbc\x96\xe6Y;\xbe\xcb.qVu\xae^\xdd\x04\x8a|\x1fA\x1e\x01\xfa`PyGj\x12W\xbe\xc00\xef\xe4a\x10W,\xaaz\xceE\xa0\xc4cV\xbcxV\x90\a\xb9\xdcpB\x80\x18\x0e\x82oso\xa07>E\xc2\x878\x94\x83\xc3\xab\xfb\xab\xa0\xc2R\xa9\xc5Un\xc9\x1fc\xbc)\xba3\xdf75\xc3D)\x1d-\x1c\xb6O\xf5\xdfp]\xb1o\xe1\x06\xf9\xb7\x195vAcbV\xed\x82\xe3\xbe!fq\x00E\xe98WO\xef\xc0\x94\x17$\x13\xf5J\xc4\xc2eE\xd2a\xe2\xa7\x18\xe1\xc9\xc9\xcf\xd0a0\xf0II\thN\x89=\x83\xee\xd0T\xac\xfd{\x9e2Wc\xdf\x98\x83s xy-\x9b\x1d\xf4\xf3\xc9\xb1c^\ta\x01\xabn\x05%\xef\x9f\xca\r\x82Su\xfa\xd1\xd8\xc1\xba\x00/', 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='gfs2\x00', 0x21000d, 0x0) request_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000600)='netdevsim\x00', 0xfffffffffffffffd) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea11004a35f4667d41", 0x29}], 0x1) fsmount(r2, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r7, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xffffffff}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r5, @ANYRES16=r5, @ANYRES16=r3], 0x38}}, 0xc004) 1.965558676s ago: executing program 0 (id=3826): syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) 1.96515401s ago: executing program 2 (id=3827): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = getpgid(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xf48, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWNSID={0x0, 0x58, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NETNSA_NSID={0x0, 0x1, 0x2}, @NETNSA_FD={0x0, 0x3, r0}, @NETNSA_NSID, @NETNSA_FD={0x0, 0x3, r4}, @NETNSA_PID={0x0, 0x2, r5}, @NETNSA_NSID={0x0, 0x1, 0x2}, @NETNSA_NSID={0x0, 0x1, 0x4}, @NETNSA_NSID={0x0, 0x1, 0x1}, @NETNSA_FD={0x0, 0x3, r6}, @NETNSA_NSID={0x0, 0x1, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x2, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000380)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={r8, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r10, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r10, &(0x7f00000002c0)={0x130, 0x0, r11, {0x4000000000007, 0xc, 0x0, '\x00', {0x6, 0xaf22, 0x6, 0x6, 0x0, r12, 0xa000, '\x00', 0x7, 0x8, 0xd60b, 0x80000000005, {0x4002008, 0xfffffff0}, {0x203d7f, 0x2, 0xc000000}, {0x100000000408, 0x72}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x8000}}}, 0x130) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r13, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="050427fd8100fe9cdbdf5747501a98b08fed4a295736afc8356797a4fb1289cbe42501000068e8b62456f95c7d5dbd6196cd16d18810cc372093aed8b7d4a0b915fad3"], 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x880) 1.964768405s ago: executing program 0 (id=3828): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"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", 0x103e}}, 0x1006) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r2, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000380), &(0x7f0000000400)=0x4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r1) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x17, 0x0, 0x0) r8 = openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r1) landlock_restrict_self(0xffffffffffffffff, 0x2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000326bf7000fbdbdf250700000014000600776c616e31000000000000000000000014000300fe80000000000000000000000000002908000400ac1414331400030000000000000000ff712bfb72d164141dfdd9f2a088eac2ff"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x8000) openat$cgroup_freezer_state(r8, &(0x7f0000000080), 0x2, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf251300000008000300", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x2ef6f98f0f5d127c}, 0x4040100) 1.852778317s ago: executing program 2 (id=3829): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x5a, {0x2, 0x3, 0x0, 0x400000000000000, 0xfffffffd, 0x0, {0x1, 0x8, 0x0, 0x1, 0x0, 0x3, 0xfffffffc, 0x0, 0x7, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x3, 0x8000000000000, 0x3, 0x0, 0x100, 0xfffffffe, {0x1, 0xfffffffffffffff1, 0x9, 0x8, 0x100000000, 0xffffffff80000001, 0x0, 0x0, 0x4, 0xc000, 0x0, 0x0, 0x0, 0x40}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') openat$kvm(0xffffff9c, &(0x7f0000000180), 0x200, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x100000000100000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0xf, 0x1, 0x200, 0xfffffffd, 0x0, 0x0, 0xa000, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(0x0, 0x105002, 0x5a) read$FUSE(r0, &(0x7f00000102c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000012300)={0x18, 0x0, r2, {0x6}}, 0x18) openat$ppp(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) close(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f00000005c0)={0x280a00300, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0xe0) 1.845344303s ago: executing program 5 (id=3830): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1823000022000000008d5b65f029501ab85427f3a4fd0cd9dd637c28e9586ffe59"], 0x0, 0x0, 0x0, 0x0, 0xe3980, 0x67}, 0x94) r0 = socket(0x200000000000011, 0x2, 0xd) socket(0x28, 0x3, 0x5) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca20180c3000000080045"], 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) socket$packet(0x11, 0x3, 0x300) 1.786549723s ago: executing program 0 (id=3831): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001280)={&(0x7f00000002c0)={0xa, 0x4e23, 0xffff0000, @mcast2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000001240)=[@flowinfo={{0x10, 0x29, 0xb, 0xfff}}], 0x10, 0x60000000}, 0x100) 1.785016659s ago: executing program 5 (id=3832): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x23, r1, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 1.784824337s ago: executing program 0 (id=3833): r0 = syz_open_dev$video4linux(0x0, 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x17}}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000380)={0x0, 0x0, {0x0, 0x8, 0x201d, 0x11a699d3fcac74a1, 0x0, 0x0, 0x2, 0x2}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x2008, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0xf3021be2a65b013}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0xa4, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xfa}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x27f}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb4}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1d}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 1.761113222s ago: executing program 1 (id=3834): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) lstat(&(0x7f0000000140)='./bus\x00', &(0x7f0000000340)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x3) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x4, {0x0, 0x1}}}}]}]}, 0xffffff39}, 0x1, 0x0, 0x0, 0x80}, 0x840) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r2, @ANYBLOB="080004007f00"], 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x400c091}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x6}, 0x50) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000580)={r4, 0x58, &(0x7f0000000640)}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file7\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 1.759698389s ago: executing program 5 (id=3835): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000280)={r8, 0x7}, &(0x7f0000000b40)=0xc) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0xe, 0x0, 0x46}, {0x6, 0x0, 0x0, 0x6ce3}]}, 0x8) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01030000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x9}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.673980663s ago: executing program 1 (id=3836): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x205, &(0x7f0000000040)=0x0) io_submit(r9, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8003, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r11, 0x400454e2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.659305075s ago: executing program 2 (id=3837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000008000000000001801000020646c2100000000002020007b00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000738ad6ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000120000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000750000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.57016005s ago: executing program 2 (id=3838): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = syz_open_dev$video(&(0x7f0000000140), 0x5, 0x6c8200) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, &(0x7f0000000000)={0x980912, 0xe43, '\x00', @value=0x5}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f0000000040)=0x1) 1.35999361s ago: executing program 2 (id=3839): socket$nl_xfrm(0x10, 0x3, 0x6) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mmap(&(0x7f000038a000/0x1000)=nil, 0x1000, 0x1000004, 0x11, 0xffffffffffffffff, 0x201000) open(0x0, 0x143142, 0x80) (async) r0 = open(0x0, 0x143142, 0x80) ftruncate(r0, 0x2007ffb) (async) ftruncate(r0, 0x2007ffb) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x18da82, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x18da82, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x14e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x118, 0x6, 0x0, @remote, @local, {[@routing={0x33, 0xe, 0x0, 0xf8, 0x0, [@empty, @remote, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x2f}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}, @routing={0x0, 0x6, 0x2, 0xfa, 0x0, [@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x6c, 0x8, 0x0, 0x6, 0x0, [@loopback, @private0, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x5, @loopback, 0x2}]}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) shutdown(r5, 0x1) (async) shutdown(r5, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa10000000000000701"], &(0x7f0000000200)='GPL\x00', 0x4000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 377.618µs ago: executing program 1 (id=3840): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000002fc0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') writev(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 0s ago: executing program 2 (id=3841): r0 = add_key(&(0x7f0000000400)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="ae2716a673bf1958a71b53247e8030084a784029f0a10a0cc3abe50b6a325377ad1071fa5408dafd688c7ece225de0bc7b5bc5da4c366c", 0x37, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000ffffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="005b0000000002000002055c0da79eadddb2bd54416a000000000000"], 0x50) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSCTTY(r2, 0x540e, 0xac) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x4001af84, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) fchdir(r1) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="db19544b3bcc6a", @ANYRES16=r6, @ANYBLOB="01072bbd70000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x133001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'bridge_slave_1\x00', 0x10}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000003, 0x400, 0x800, 0xfffffffe, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0x7, 0x4, 0x9, 0x7, 0x0, 0x2, 0x10000101, 0x1, 0x9, 0x4, 0x1, 0x1, 0x9, 0xc, 0x1000, 0x1, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x0, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x80000008, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0x4003, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc68, 0x9, 0x7, 0x3, 0x9, 0x3, 0x2, 0xfffffffa, 0x5, 0x2008000, 0x3, 0xffffffff, 0x4, 0x5, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x7, 0xb, 0x8000, 0xfffffffe, 0x45c, 0x80, 0x3, 0x9, 0xff, 0xdef0ff4, 0xa7, 0xf, 0x2, 0xfffffffd, 0x2, 0x1000, 0x672, 0x401, 0xf8a, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xafab, 0x4000006, 0x4, 0x8, 0x485e, 0xa89, 0x0, 0x2, 0x7, 0x7, 0x105, 0x2d5421e5, 0x7, 0x10000, 0xffffffff, 0x400000ed, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x4, 0x8d, 0x1, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0xffffffff, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0xffff0327, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x8, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x57, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b17, 0xfff, 0xcc3f, 0x3, 0xcd34, 0x7, 0x8001, 0xdf3, 0x2, 0x7, 0x8, 0x20000401, 0x1ff, 0x8000, 0x3, 0x4, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x2, 0x6, 0xc, 0x1000, 0x9, 0xb, 0xe6, 0xab, 0x1, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x1, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x6, &(0x7f0000000000)={0xfc, "e922fe53e14fcad1ebe6ff00000000008100"}}) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r11, &(0x7f0000000240)={0xa, 0x4e24, 0x5, @local, 0x4}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r11, 0x5411, &(0x7f0000000000)) getsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000140)=0x8) kernel console output (not intermixed with test programs): registering): Port device team_slave_0 removed [ 668.534064][T19728] team0 (unregistering): Port device team_slave_1 removed [ 671.251424][T19785] Process accounting resumed [ 671.356047][T19800] binder: 19799:19800 ioctl 5000943f 80000680 returned -22 [ 671.514230][T19815] binder: 19814:19815 ioctl 5000943f 80000680 returned -22 [ 672.532279][T19855] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 672.538898][ T42] audit: type=1326 audit(1782424282.704:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19854 comm="syz.2.2879" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 672.616995][T19856] netlink: 'syz.2.2879': attribute type 10 has an invalid length. [ 672.751276][T19856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.755972][T19856] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 673.022146][T19881] binder: 19879:19881 ioctl 5000943f 80000680 returned -22 [ 673.793595][ T42] audit: type=1326 audit(1782424283.954:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.4.2888" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43fec code=0x0 [ 673.868435][T19908] netlink: 'syz.4.2888': attribute type 10 has an invalid length. [ 675.327709][T15407] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 675.458845][T15407] usb 6-1: device descriptor read/64, error -71 [ 675.707812][T15407] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 675.839923][T15407] usb 6-1: device descriptor read/64, error -71 [ 675.846908][T19931] netlink: 'syz.0.2892': attribute type 2 has an invalid length. [ 675.849515][T19931] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2892'. [ 675.917113][T19933] binder: 19932:19933 ioctl 5000943f 80000680 returned -22 [ 675.957881][T15407] usb usb6-port1: attempt power cycle [ 676.100311][T19948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 676.207226][T19953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2897'. [ 676.261447][T19958] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 676.268755][ T42] audit: type=1326 audit(1782424286.434:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19957 comm="syz.0.2899" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdefec code=0x0 [ 676.317892][T15407] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 676.342354][T15407] usb 6-1: device descriptor read/8, error -71 [ 676.345265][T19960] netlink: 'syz.0.2899': attribute type 10 has an invalid length. [ 676.597654][T15407] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 676.618346][T15407] usb 6-1: device descriptor read/8, error -71 [ 676.728154][T15407] usb usb6-port1: unable to enumerate USB device [ 677.747995][T19970] Process accounting resumed [ 677.807095][T19984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2905'. [ 678.058341][T20002] FAULT_INJECTION: forcing a failure. [ 678.058341][T20002] name failslab, interval 1, probability 0, space 0, times 0 [ 678.063882][T20002] CPU: 0 UID: 0 PID: 20002 Comm: syz.1.2909 Tainted: G L syzkaller #0 PREEMPT(full) [ 678.063907][T20002] Tainted: [L]=SOFTLOCKUP [ 678.063912][T20002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 678.063922][T20002] Call Trace: [ 678.063929][T20002] [ 678.063936][T20002] dump_stack_lvl+0x100/0x190 [ 678.063969][T20002] should_fail_ex.cold+0x5/0xa [ 678.063991][T20002] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 678.064039][T20002] should_failslab+0xc2/0x120 [ 678.064061][T20002] kmem_cache_alloc_noprof+0x91/0x6a0 [ 678.064082][T20002] ? skb_clone+0x190/0x400 [ 678.064113][T20002] skb_clone+0x190/0x400 [ 678.064140][T20002] netlink_deliver_tap+0xaed/0xcc0 [ 678.064165][T20002] netlink_unicast+0x62b/0x850 [ 678.064191][T20002] ? __pfx_netlink_unicast+0x10/0x10 [ 678.064208][T20002] ? __build_skb_around+0x278/0x390 [ 678.064224][T20002] ? is_vmalloc_addr+0x86/0xa0 [ 678.064238][T20002] netlink_sendmsg+0x8b0/0xda0 [ 678.064254][T20002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.064271][T20002] ? apparmor_socket_sendmsg+0x15b/0x270 [ 678.064290][T20002] sock_sendmsg+0x394/0x410 [ 678.064303][T20002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.064317][T20002] ? __pfx_sock_sendmsg+0x10/0x10 [ 678.064330][T20002] ? is_bpf_text_address+0x8a/0x1a0 [ 678.064356][T20002] splice_to_socket+0xb3c/0x11a0 [ 678.064368][T20002] ? __lock_acquire+0x49f/0x1a40 [ 678.064385][T20002] ? __pfx_splice_to_socket+0x10/0x10 [ 678.064412][T20002] ? apparmor_file_permission+0x13f/0x1c0 [ 678.064431][T20002] ? bpf_lsm_file_permission+0x9/0x10 [ 678.064442][T20002] ? security_file_permission+0x76/0x210 [ 678.064455][T20002] ? __pfx_splice_to_socket+0x10/0x10 [ 678.064470][T20002] do_splice+0x109c/0x1f90 [ 678.064483][T20002] ? __lock_acquire+0x49f/0x1a40 [ 678.064493][T20002] ? rcu_read_lock_any_held+0x6a/0xa0 [ 678.064512][T20002] ? __pfx_do_splice+0x10/0x10 [ 678.064523][T20002] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 678.064542][T20002] ? find_held_lock+0x2b/0x80 [ 678.064558][T20002] __do_splice+0x33b/0x370 [ 678.064571][T20002] ? __pfx___do_splice+0x10/0x10 [ 678.064587][T20002] __ia32_sys_splice+0x189/0x250 [ 678.064601][T20002] __do_fast_syscall_32+0xe7/0x970 [ 678.064616][T20002] ? lockdep_hardirqs_on+0x78/0x100 [ 678.064646][T20002] do_fast_syscall_32+0x32/0x70 [ 678.064661][T20002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 678.064676][T20002] RIP: 0023:0xf703efec [ 678.064690][T20002] Code: Unable to access opcode bytes at 0xf703efc2. [ 678.064696][T20002] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000139 [ 678.064707][T20002] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 678.064714][T20002] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000010500 [ 678.064721][T20002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 678.064727][T20002] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 678.064734][T20002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 678.064748][T20002] [ 678.064816][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2909'. [ 678.182100][T19981] Process accounting resumed [ 678.327448][T20008] atomic_op ffff8880443a9198 conn xmit_atomic 0000000000000000 [ 679.325431][T20011] Process accounting resumed [ 679.351005][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2917'. [ 679.547554][T20033] binder: 20032:20033 ioctl 5000943f 80000680 returned -22 [ 679.778348][ T5744] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 680.584939][ T42] audit: type=1326 audit(1782424290.744:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20062 comm="syz.4.2924" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43fec code=0x0 [ 680.700317][T20068] netlink: 'syz.4.2924': attribute type 10 has an invalid length. [ 681.109842][T20079] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1280 [ 681.120791][ T42] audit: type=1326 audit(1782424291.284:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20078 comm="syz.2.2927" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 681.221754][T20081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.234296][T20081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.249525][T20081] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 681.258239][T20081] bond0 (unregistering): Released all slaves [ 681.716805][T20073] Process accounting resumed [ 683.383884][T20105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2932'. [ 683.466566][T20109] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 683.601398][T20112] netlink: 'syz.4.2935': attribute type 3 has an invalid length. [ 683.604941][T20112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2935'. [ 684.492684][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2939'. [ 684.699733][T20130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.705419][T20130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.711073][T20130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.956175][ T42] audit: type=1326 audit(1782424295.114:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20137 comm="syz.0.2943" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdefec code=0x0 [ 685.036517][T20139] netlink: 'syz.0.2943': attribute type 10 has an invalid length. [ 685.439578][ T42] audit: type=1326 audit(1782424295.604:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20149 comm="syz.1.2945" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 686.169906][T20163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2948'. [ 688.585962][T20201] loop5: detected capacity change from 0 to 7 [ 688.590842][T20201] Dev loop5: unable to read RDB block 7 [ 688.592697][T20201] loop5: unable to read partition table [ 688.594591][T20201] loop5: partition table beyond EOD, truncated [ 688.596741][T20201] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 689.607323][ T42] audit: type=1326 audit(1782424299.764:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20215 comm="syz.4.2960" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43fec code=0x0 [ 689.769803][T20219] netlink: 'syz.4.2960': attribute type 10 has an invalid length. [ 690.352207][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.354841][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.446158][ T42] audit: type=1326 audit(1782424300.604:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20232 comm="syz.1.2964" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 692.606261][T20272] fuse: Bad value for 'user_id' [ 692.608799][T20272] fuse: Bad value for 'user_id' [ 692.845338][T20282] binder: 20281:20282 ioctl 5000943f 80000680 returned -22 [ 693.878303][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2981'. [ 693.887928][T20324] befs: (loop2): No write support. Marking filesystem read-only [ 693.901806][T20324] befs: (loop2): unable to read superblock [ 694.648637][T20335] binder: 20334:20335 ioctl 5000943f 80000680 returned -22 [ 695.004576][T20352] netlink: zone id is out of range [ 696.031725][T20381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2993'. [ 696.035256][T20382] 9p: Bad value for 'version' [ 696.041830][T20381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2993'. [ 696.841631][T20411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3000'. [ 696.864776][T20411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3000'. [ 696.897033][T20415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3000'. [ 696.906347][T20411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3000'. [ 696.923659][T20415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3000'. [ 696.967237][T20415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3000'. [ 697.042972][T20422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3002'. [ 697.138706][ T5749] Bluetooth: hci1: command 0x0405 tx timeout [ 697.219168][T20428] FAULT_INJECTION: forcing a failure. [ 697.219168][T20428] name failslab, interval 1, probability 0, space 0, times 0 [ 697.223287][T20428] CPU: 3 UID: 0 PID: 20428 Comm: syz.1.3003 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.223306][T20428] Tainted: [L]=SOFTLOCKUP [ 697.223311][T20428] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 697.223317][T20428] Call Trace: [ 697.223323][T20428] [ 697.223328][T20428] dump_stack_lvl+0x100/0x190 [ 697.223347][T20428] should_fail_ex.cold+0x5/0xa [ 697.223362][T20428] should_failslab+0xc2/0x120 [ 697.223379][T20428] __kvmalloc_node_noprof+0x116/0x970 [ 697.223395][T20428] ? __might_fault+0xc5/0x140 [ 697.223408][T20428] ? vmemdup_user+0x2a/0xe0 [ 697.223423][T20428] vmemdup_user+0x2a/0xe0 [ 697.223437][T20428] kvm_vm_ioctl+0x133c/0x4030 [ 697.223455][T20428] ? tomoyo_path_number_perm+0x46d/0x580 [ 697.223475][T20428] ? stack_trace_save+0x8e/0xc0 [ 697.223491][T20428] ? __pfx_stack_trace_save+0x10/0x10 [ 697.223508][T20428] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 697.223524][T20428] ? __lock_acquire+0x49f/0x1a40 [ 697.223535][T20428] ? tomoyo_path_number_perm+0x46d/0x580 [ 697.223553][T20428] ? kasan_save_stack+0x3f/0x50 [ 697.223567][T20428] ? kasan_save_stack+0x30/0x50 [ 697.223580][T20428] ? kasan_save_track+0x14/0x30 [ 697.223592][T20428] ? kasan_save_free_info+0x3b/0x70 [ 697.223602][T20428] ? __kasan_slab_free+0x5f/0x80 [ 697.223616][T20428] ? kfree+0x22b/0x6c0 [ 697.223625][T20428] ? tomoyo_path_number_perm+0x46d/0x580 [ 697.223643][T20428] ? security_file_ioctl_compat+0xd3/0x230 [ 697.223661][T20428] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 697.223677][T20428] ? __do_fast_syscall_32+0xe7/0x970 [ 697.223691][T20428] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 697.223712][T20428] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 697.223770][T20428] ? kasan_quarantine_put+0x104/0x240 [ 697.223784][T20428] ? lockdep_hardirqs_on+0x78/0x100 [ 697.223798][T20428] ? find_held_lock+0x2b/0x80 [ 697.223812][T20428] ? tomoyo_path_number_perm+0x28f/0x580 [ 697.223830][T20428] ? tomoyo_path_number_perm+0x28f/0x580 [ 697.223851][T20428] ? tomoyo_path_number_perm+0x188/0x580 [ 697.223870][T20428] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 697.223893][T20428] ? get_pid_task+0x106/0x250 [ 697.223911][T20428] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 697.223929][T20428] ? do_vfs_ioctl+0x226/0x13e0 [ 697.223945][T20428] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 697.223962][T20428] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 697.223980][T20428] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 697.223998][T20428] ? find_held_lock+0x2b/0x80 [ 697.224012][T20428] ? __fget_files+0x215/0x3d0 [ 697.224021][T20428] ? hook_file_ioctl_common+0x140/0x440 [ 697.224035][T20428] ? __fget_files+0x21f/0x3d0 [ 697.224048][T20428] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 697.224065][T20428] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 697.224083][T20428] __do_fast_syscall_32+0xe7/0x970 [ 697.224098][T20428] ? lockdep_hardirqs_on+0x78/0x100 [ 697.224113][T20428] do_fast_syscall_32+0x32/0x70 [ 697.224128][T20428] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 697.224142][T20428] RIP: 0023:0xf703efec [ 697.224156][T20428] Code: Unable to access opcode bytes at 0xf703efc2. [ 697.224161][T20428] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 697.224173][T20428] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004008ae6a [ 697.224180][T20428] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 697.224187][T20428] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 697.224193][T20428] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 697.224200][T20428] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 697.224213][T20428] [ 698.313248][ T42] audit: type=1326 audit(1782424308.474:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20448 comm="syz.1.3008" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 698.331099][T20451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.338767][T20451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.345546][T20451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.406349][T20455] netlink: 'syz.1.3008': attribute type 10 has an invalid length. [ 699.217203][T20468] __nla_validate_parse: 2 callbacks suppressed [ 699.217243][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3011'. [ 699.242248][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3011'. [ 699.286328][T20470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3012'. [ 699.290253][T20470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3012'. [ 699.294098][T20470] netlink: 'syz.2.3012': attribute type 12 has an invalid length. [ 699.298253][T20470] netlink: 'syz.2.3012': attribute type 11 has an invalid length. [ 699.312274][ T42] audit: type=1326 audit(1782424309.474:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20469 comm="syz.2.3012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 699.322173][ T42] audit: type=1326 audit(1782424309.474:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20469 comm="syz.2.3012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 699.337707][ T42] audit: type=1326 audit(1782424309.474:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20469 comm="syz.2.3012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 699.357483][ T42] audit: type=1326 audit(1782424309.474:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20469 comm="syz.2.3012" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 699.371964][ T42] audit: type=1326 audit(1782424309.474:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20469 comm="syz.2.3012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 699.381619][ T42] audit: type=1326 audit(1782424309.474:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20469 comm="syz.2.3012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 699.390814][ T42] audit: type=1326 audit(1782424309.474:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20469 comm="syz.2.3012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 699.401318][ T42] audit: type=1326 audit(1782424309.474:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20469 comm="syz.2.3012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 699.410316][ T42] audit: type=1326 audit(1782424309.474:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20469 comm="syz.2.3012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 699.434770][T20475] 9p: Bad value for 'version' [ 700.722844][T20500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3020'. [ 700.735665][T20500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3020'. [ 700.942176][T20505] pim6reg: entered allmulticast mode [ 700.987457][T20505] team0: entered allmulticast mode [ 700.990184][T20505] team_slave_1: entered allmulticast mode [ 700.998846][T20505] team0: left allmulticast mode [ 701.001492][T20505] team_slave_1: left allmulticast mode [ 701.004944][T20505] pim6reg: left allmulticast mode [ 702.148045][ T5806] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 702.707838][ T5806] usb 6-1: Using ep0 maxpacket: 8 [ 702.818060][ T5806] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 702.836043][ T5806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.872351][ T5806] pvrusb2: Hardware description: Terratec Grabster AV400 [ 702.875015][ T5806] pvrusb2: ********** [ 702.876588][ T5806] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 702.897765][ T5806] pvrusb2: Important functionality might not be entirely working. [ 702.901010][ T5806] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 702.905015][ T5806] pvrusb2: ********** [ 703.175109][ T2509] pvrusb2: Invalid write control endpoint [ 703.321436][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 703.336123][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 703.869922][ T2509] pvrusb2: Invalid write control endpoint [ 703.872691][ T2509] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 703.875594][ T2509] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 703.878399][ T2509] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 703.882562][ T2509] pvrusb2: Device being rendered inoperable [ 703.885224][ T2509] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 703.888654][ T2509] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 703.904377][ T2509] pvrusb2: Attached sub-driver cx25840 [ 703.910069][ T5822] usb 6-1: USB disconnect, device number 49 [ 703.915952][ T2509] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 703.923512][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 703.923523][ T42] audit: type=1326 audit(1782424314.084:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20576 comm="syz.4.3033" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43fec code=0x0 [ 703.926080][ T2509] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 703.994262][T20586] netlink: 'syz.4.3033': attribute type 10 has an invalid length. [ 704.197882][ T5887] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 704.447080][T20559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.452196][T20559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.100813][T20609] Process accounting resumed [ 705.229395][ T5887] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 705.236061][ T5887] usb 7-1: can't read configurations, error -71 [ 705.373914][T20617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3038'. [ 705.389776][T20617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3038'. [ 705.512015][T20620] 9pnet_virtio: no channels available for device syz [ 706.479148][T20635] 9p: Bad value for 'version' [ 706.648645][T20642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3047'. [ 706.669755][T20642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3047'. [ 706.777269][T20648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3049'. [ 707.136629][ T5815] Process accounting resumed [ 707.245199][T20712] Process accounting resumed [ 708.449254][T20739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3056'. [ 708.500351][T20739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3056'. [ 708.584405][ T42] audit: type=1326 audit(1782424318.744:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20741 comm="syz.2.3058" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 708.673946][T20746] netlink: 'syz.2.3058': attribute type 10 has an invalid length. [ 708.727170][T20752] program syz.4.3061 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 708.771704][T20756] syzkaller0: entered promiscuous mode [ 708.773504][T20756] syzkaller0: entered allmulticast mode [ 708.781288][T20756] FAULT_INJECTION: forcing a failure. [ 708.781288][T20756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.785285][T20756] CPU: 1 UID: 0 PID: 20756 Comm: syz.0.3062 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.785303][T20756] Tainted: [L]=SOFTLOCKUP [ 708.785307][T20756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 708.785314][T20756] Call Trace: [ 708.785320][T20756] [ 708.785328][T20756] dump_stack_lvl+0x100/0x190 [ 708.785346][T20756] should_fail_ex.cold+0x5/0xa [ 708.785374][T20756] _copy_from_user+0x2e/0xd0 [ 708.785390][T20756] kstrtouint_from_user+0xd6/0x1d0 [ 708.785408][T20756] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 708.785424][T20756] ? __lock_acquire+0x49f/0x1a40 [ 708.785441][T20756] proc_fail_nth_write+0x83/0x220 [ 708.785457][T20756] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 708.785477][T20756] vfs_write+0x2aa/0x1050 [ 708.785488][T20756] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 708.785504][T20756] ? __pfx_vfs_write+0x10/0x10 [ 708.785514][T20756] ? find_held_lock+0x2b/0x80 [ 708.785529][T20756] ? __fget_files+0x215/0x3d0 [ 708.785542][T20756] ? __fget_files+0x21f/0x3d0 [ 708.785555][T20756] ksys_write+0x12a/0x250 [ 708.785566][T20756] ? __pfx_ksys_write+0x10/0x10 [ 708.785580][T20756] do_int80_emulation+0x14b/0x720 [ 708.785598][T20756] asm_int80_emulation+0x1a/0x20 [ 708.785609][T20756] RIP: 0023:0xf71171eb [ 708.785619][T20756] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 708.785630][T20756] RSP: 002b:00000000f53cd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 708.785645][T20756] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f53cd5d0 [ 708.785652][T20756] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 708.785659][T20756] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 708.785666][T20756] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 708.785672][T20756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 708.785686][T20756] [ 709.017889][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3065'. [ 709.029633][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3065'. [ 709.039966][T20768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3063'. [ 710.143767][T20794] FAULT_INJECTION: forcing a failure. [ 710.143767][T20794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.149765][T20794] CPU: 1 UID: 0 PID: 20794 Comm: syz.4.3072 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.149796][T20794] Tainted: [L]=SOFTLOCKUP [ 710.149803][T20794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 710.149812][T20794] Call Trace: [ 710.149818][T20794] [ 710.149825][T20794] dump_stack_lvl+0x100/0x190 [ 710.149855][T20794] should_fail_ex.cold+0x5/0xa [ 710.149880][T20794] _copy_from_user+0x2e/0xd0 [ 710.149902][T20794] kstrtouint_from_user+0xd6/0x1d0 [ 710.149929][T20794] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 710.149953][T20794] ? __lock_acquire+0x49f/0x1a40 [ 710.149981][T20794] proc_fail_nth_write+0x83/0x220 [ 710.150006][T20794] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 710.150037][T20794] vfs_write+0x2aa/0x1050 [ 710.150055][T20794] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 710.150081][T20794] ? __pfx_vfs_write+0x10/0x10 [ 710.150095][T20794] ? find_held_lock+0x2b/0x80 [ 710.150117][T20794] ? __fget_files+0x215/0x3d0 [ 710.150140][T20794] ? __fget_files+0x21f/0x3d0 [ 710.150164][T20794] ksys_write+0x12a/0x250 [ 710.150180][T20794] ? __pfx_ksys_write+0x10/0x10 [ 710.150224][T20794] do_int80_emulation+0x14b/0x720 [ 710.150251][T20794] asm_int80_emulation+0x1a/0x20 [ 710.150268][T20794] RIP: 0023:0xf71471eb [ 710.150283][T20794] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 710.150299][T20794] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 710.150318][T20794] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54065d0 [ 710.150330][T20794] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 710.150341][T20794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 710.150351][T20794] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 710.150361][T20794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 710.150385][T20794] [ 710.292106][ T5749] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 711.213929][T20804] Process accounting resumed [ 711.697137][T20837] __nla_validate_parse: 2 callbacks suppressed [ 711.700619][T20837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3083'. [ 712.110494][T20852] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3087'. [ 712.171726][T20852] netlink: 'syz.0.3087': attribute type 12 has an invalid length. [ 712.175278][T20852] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3087'. [ 712.478644][T20860] Process accounting resumed [ 713.257190][T20874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3092'. [ 713.326414][ T42] audit: type=1326 audit(1782424323.484:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20878 comm="syz.2.3094" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 713.393572][T20883] kvm: pic: non byte read [ 713.395291][T20883] kvm: pic: non byte read [ 713.397074][T20883] kvm: pic: non byte read [ 713.399345][T20883] kvm: pic: non byte read [ 713.402147][T20883] kvm: pic: non byte read [ 713.404382][T20883] kvm: pic: non byte read [ 713.406715][T20883] kvm: pic: non byte read [ 713.409256][T20883] kvm: pic: non byte read [ 713.410906][T20883] kvm: pic: non byte read [ 713.412777][T20883] kvm: pic: non byte read [ 713.484171][T20876] xt_cgroup: invalid path, errno=-2 [ 713.609170][T20894] netlink: 'syz.4.3096': attribute type 13 has an invalid length. [ 713.617312][T20894] netlink: 'syz.4.3096': attribute type 27 has an invalid length. [ 713.994022][T20902] loop5: detected capacity change from 0 to 7 [ 714.015782][T20902] Dev loop5: unable to read RDB block 7 [ 714.021273][T20902] loop5: unable to read partition table [ 714.025378][T20902] loop5: partition table beyond EOD, truncated [ 714.027240][T20902] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 714.510987][T20922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'. [ 715.958074][T20949] binder: 20948:20949 ioctl 5000943f 80000680 returned -22 [ 716.118509][T20958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3110'. [ 716.536973][T20971] overlayfs: upper fs does not support file handles, falling back to index=off. [ 718.005960][T21003] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3120'. [ 718.092711][T21007] 9p: Bad value for 'version' [ 718.462711][ T42] audit: type=1326 audit(1782424328.624:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21015 comm="syz.4.3122" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43fec code=0x0 [ 718.915605][T21030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3124'. [ 718.919467][T21030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3124'. [ 720.720726][T21066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3132'. [ 721.020968][T21072] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 721.023762][T21072] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 721.038475][T21072] vhci_hcd vhci_hcd.0: Device attached [ 721.327709][T16423] usb 38-1: SetAddress Request (14) to port 0 [ 721.330742][T16423] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 721.607254][T21073] vhci_hcd: connection reset by peer [ 721.612938][ T12] vhci_hcd vhci_hcd.0: stop threads [ 721.617147][ T12] vhci_hcd vhci_hcd.0: release socket [ 721.622480][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 723.211613][T21122] binder: 21121:21122 ioctl c0306201 80000440 returned -22 [ 723.566773][ T5829] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 723.651428][ T42] audit: type=1326 audit(1782424333.804:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21131 comm="syz.0.3146" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdefec code=0x0 [ 723.757852][T15407] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 723.925472][T15407] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 723.940961][T15407] usb 6-1: config 0 has no interface number 0 [ 723.951982][T15407] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 723.966339][T15407] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 723.972097][T15407] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 723.980745][T15407] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 723.984085][T15407] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 723.986705][T15407] usb 6-1: Product: syz [ 723.988214][T15407] usb 6-1: SerialNumber: syz [ 724.037770][T15407] usb 6-1: config 0 descriptor?? [ 724.074667][T15407] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 724.093180][T15407] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input23 [ 724.295746][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 725.309167][T15407] usb 6-1: USB disconnect, device number 50 [ 725.331977][T15407] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 725.568489][T21194] binder: 21193:21194 ioctl 5000943f 80000680 returned -22 [ 726.417872][T16423] usb 38-1: device descriptor read/8, error -110 [ 726.979554][T16423] usb usb38-port1: attempt power cycle [ 727.538545][T16423] usb usb38-port1: unable to enumerate USB device [ 731.092685][T21227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3159'. [ 733.103516][ T42] audit: type=1326 audit(1782424343.264:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21265 comm="syz.4.3168" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43fec code=0x0 [ 733.167989][T21271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3169'. [ 733.271844][T21284] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3171'. [ 733.275470][T21284] openvswitch: netlink: Message has 512 unknown bytes. [ 733.309942][T21286] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 733.314365][T21286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3172'. [ 733.577562][T21291] netlink: 'syz.0.3171': attribute type 8 has an invalid length. [ 734.618487][T21311] binder: 21309:21311 ioctl 5000943f 80000680 returned -22 [ 735.566887][T21335] binder: 21334:21335 ioctl 5000943f 80000680 returned -22 [ 735.693242][T21344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3184'. [ 735.696258][T21344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3184'. [ 735.876476][T21351] EXT4-fs (nbd0): unable to read superblock [ 736.410514][T21368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3190'. [ 736.540294][T21372] MPI: mpi too large (108672 bits) [ 737.200470][T21384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3194'. [ 737.447206][ T42] audit: type=1326 audit(1782424347.604:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21391 comm="syz.2.3197" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 738.013881][T21411] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3200'. [ 738.097941][ T5749] Bluetooth: hci1: command 0x0405 tx timeout [ 738.950461][T21457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3205'. [ 739.152074][T21470] overlayfs: missing 'lowerdir' [ 739.209859][T21473] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 739.212016][T21473] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 739.224935][T21473] vhci_hcd vhci_hcd.0: Device attached [ 739.478040][T16423] usb 40-1: SetAddress Request (11) to port 0 [ 739.480146][T16423] usb 40-1: new SuperSpeed USB device number 11 using vhci_hcd [ 739.983197][T21474] vhci_hcd: connection reset by peer [ 739.985951][ T5586] vhci_hcd vhci_hcd.1: stop threads [ 739.988378][ T5586] vhci_hcd vhci_hcd.1: release socket [ 739.990825][ T5586] vhci_hcd vhci_hcd.1: disconnect device [ 740.084686][ T42] audit: type=1326 audit(1782424350.244:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21482 comm="syz.0.3212" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x0 [ 740.177960][ T5749] Bluetooth: hci1: command 0x0405 tx timeout [ 741.610602][T21542] overlayfs: failed lookup in lower (newroot/162, name='file1', err=-40): overlapping layers [ 741.623887][ T5744] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 741.792931][T21546] binder: 21545:21546 ioctl 5000943f 80000680 returned -22 [ 741.981378][T21556] Process accounting resumed [ 742.369494][T21571] xt_TPROXY: Can be used only with -p tcp or -p udp [ 744.474447][T21631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'. [ 744.478638][T21631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.490304][T21631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.578211][T16423] usb 40-1: device descriptor read/8, error -110 [ 744.663722][T21642] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3231'. [ 744.704311][T21643] syzkaller0: entered promiscuous mode [ 744.706033][T21643] syzkaller0: entered allmulticast mode [ 744.775934][T21642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3231'. [ 744.843716][T21652] binder: 21651:21652 ioctl 5000943f 80000680 returned -22 [ 744.977371][T16423] usb usb40-port1: attempt power cycle [ 745.560187][T21672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3236'. [ 745.720713][T16423] usb usb40-port1: unable to enumerate USB device [ 745.921803][T21680] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3240'. [ 745.931980][T21684] binder: 21683:21684 ioctl 5000943f 80000680 returned -22 [ 746.163976][ T42] audit: type=1326 audit(1782424356.324:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21701 comm="syz.1.3246" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 746.249583][T21709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3248'. [ 746.364151][T21716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3250'. [ 746.372412][T21716] macsec1: entered promiscuous mode [ 746.374190][T21716] batadv0: entered promiscuous mode [ 746.375988][T21716] macsec1: entered allmulticast mode [ 746.378156][T21716] batadv0: entered allmulticast mode [ 746.380465][T21716] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 746.383232][T21716] batadv0: left allmulticast mode [ 746.384893][T21716] batadv0: left promiscuous mode [ 747.129124][T21746] binder: 21745:21746 ioctl 5000943f 80000680 returned -22 [ 747.383275][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3258'. [ 748.853376][T21779] syzkaller0: entered promiscuous mode [ 748.855859][T21779] syzkaller0: entered allmulticast mode [ 749.927852][ T42] audit: type=1326 audit(1782424360.084:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21798 comm="syz.4.3267" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43fec code=0x0 [ 749.993903][T21803] netlink: 'syz.4.3267': attribute type 10 has an invalid length. [ 750.331481][T21818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3271'. [ 750.351905][T21818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3271'. [ 750.883152][ T42] audit: type=1326 audit(1782424361.044:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21821 comm="syz.1.3273" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 751.564795][T21847] FAULT_INJECTION: forcing a failure. [ 751.564795][T21847] name failslab, interval 1, probability 0, space 0, times 0 [ 751.570438][T21847] CPU: 3 UID: 0 PID: 21847 Comm: syz.0.3279 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.570470][T21847] Tainted: [L]=SOFTLOCKUP [ 751.570478][T21847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 751.570490][T21847] Call Trace: [ 751.570497][T21847] [ 751.570506][T21847] dump_stack_lvl+0x100/0x190 [ 751.570536][T21847] should_fail_ex.cold+0x5/0xa [ 751.570563][T21847] should_failslab+0xc2/0x120 [ 751.570591][T21847] __kvmalloc_node_noprof+0x116/0x970 [ 751.570618][T21847] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 751.570640][T21847] ? copy_regset_to_user+0xfd/0x250 [ 751.570674][T21847] copy_regset_to_user+0xfd/0x250 [ 751.570704][T21847] compat_arch_ptrace+0x2cf/0x3a0 [ 751.570732][T21847] ? __pfx_compat_arch_ptrace+0x10/0x10 [ 751.570765][T21847] __ia32_compat_sys_ptrace+0x249/0x2c0 [ 751.570796][T21847] __do_fast_syscall_32+0xe7/0x970 [ 751.570822][T21847] ? lockdep_hardirqs_on+0x78/0x100 [ 751.570848][T21847] do_fast_syscall_32+0x32/0x70 [ 751.570873][T21847] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 751.570904][T21847] RIP: 0023:0xf6fdefec [ 751.570922][T21847] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 751.570940][T21847] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 000000000000001a [ 751.570982][T21847] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 0000000000000216 [ 751.570996][T21847] RDX: 0000000000000401 RSI: 0000000080000100 RDI: 0000000000000000 [ 751.571007][T21847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 751.571016][T21847] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 751.571028][T21847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 751.571052][T21847] [ 751.780703][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.784180][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.777122][T21852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.192309][ T5822] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 754.204523][ T5822] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 754.215166][ T5822] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 754.225042][ T5822] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 754.235368][ T5822] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 754.246441][ T5822] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 754.256881][ T5822] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 754.268463][ T5822] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 754.279390][ T5822] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 754.292077][ T5822] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 754.322760][ T5822] hid-generic 00A0:0006:0003.0006: hidraw0: HID v0.05 Device [syz0] on syz0 [ 754.521908][T21929] fido_id[21929]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 756.673578][ T42] audit: type=1326 audit(1782424366.834:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21956 comm="syz.0.3302" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdefec code=0x0 [ 759.365215][T21994] syzkaller0: entered promiscuous mode [ 759.367632][T21994] syzkaller0: entered allmulticast mode [ 759.393225][T21994] tipc: Started in network mode [ 759.395365][T21994] tipc: Node identity 3250ca87eeaf, cluster identity 4711 [ 759.398685][T21994] tipc: Enabled bearer , priority 0 [ 759.404773][T21993] tipc: Resetting bearer [ 759.424367][T21993] tipc: Disabling bearer [ 759.991386][T22010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3316'. [ 760.071612][T22012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'. [ 761.537292][T22044] 9pnet_virtio: no channels available for device syz [ 762.845169][T22060] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 762.847265][T22060] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 762.850598][T22060] vhci_hcd vhci_hcd.0: Device attached [ 762.897761][ T9289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.900608][ T9289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.942749][T22060] xt_policy: too many policy elements [ 763.117800][ T56] usb 46-1: SetAddress Request (6) to port 0 [ 763.120537][ T56] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 763.133498][T22065] binder: 22064:22065 ioctl 5000943f 80000680 returned -22 [ 763.546230][T22061] vhci_hcd: connection reset by peer [ 763.554480][ T5842] vhci_hcd vhci_hcd.4: stop threads [ 763.560010][ T5842] vhci_hcd vhci_hcd.4: release socket [ 763.573724][ T5842] vhci_hcd vhci_hcd.4: disconnect device [ 764.176126][T22083] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3333'. [ 764.187066][T22083] syzkaller1: entered promiscuous mode [ 764.189941][T22083] syzkaller1: entered allmulticast mode [ 764.329348][T22098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3336'. [ 764.414533][T22100] binder: 22099:22100 ioctl 5000943f 80000680 returned -22 [ 764.631623][T22128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3345'. [ 764.637420][T22128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.640947][T22128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.380861][T22210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3352'. [ 767.269390][T22183] Process accounting resumed [ 767.325176][T22255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3362'. [ 767.615849][T22260] syzkaller0: entered promiscuous mode [ 767.621393][T22260] syzkaller0: entered allmulticast mode [ 768.187799][ T56] usb 46-1: device descriptor read/8, error -110 [ 768.609091][ T56] usb usb46-port1: attempt power cycle [ 769.202998][ T56] usb usb46-port1: unable to enumerate USB device [ 769.885216][ T5822] Process accounting resumed [ 770.544718][T22320] binder: 22319:22320 ioctl 5000943f 80000680 returned -22 [ 771.217317][T22338] binder: 22337:22338 ioctl 5000943f 80000680 returned -22 [ 771.435123][T22346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3384'. [ 771.686917][T22361] binder: 22360:22361 ioctl 5000943f 80000680 returned -22 [ 772.271808][T22376] syzkaller0: entered promiscuous mode [ 772.274126][T22376] syzkaller0: entered allmulticast mode [ 772.283103][T22376] tipc: Enabled bearer , priority 0 [ 772.291425][T22375] tipc: Resetting bearer [ 772.398476][T22375] tipc: Disabling bearer [ 772.680415][T22391] netlink: 'syz.1.3394': attribute type 1 has an invalid length. [ 772.693911][T22391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.699868][T22391] batman_adv: batadv0: Interface deactivated: dummy0 [ 772.707036][T22391] batman_adv: batadv0: Removing interface: dummy0 [ 772.716230][T22391] bond0: (slave dummy0): making interface the new active one [ 772.719473][T22391] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 772.724200][T22391] netlink: 'syz.1.3394': attribute type 10 has an invalid length. [ 772.726637][T22391] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3394'. [ 772.738765][T22391] dummy0: entered promiscuous mode [ 772.742862][T22391] bond0: (slave dummy0): Releasing active interface [ 773.279316][T22442] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 773.285125][T22442] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 773.292310][T22442] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 773.304044][T22442] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 775.909799][ T42] audit: type=1326 audit(1782424386.074:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22486 comm="syz.2.3408" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 776.346781][T22499] sctp: [Deprecated]: syz.1.3410 (pid 22499) Use of struct sctp_assoc_value in delayed_ack socket option. [ 776.346781][T22499] Use struct sctp_sack_info instead [ 776.686273][T22520] netlink: 'syz.1.3414': attribute type 1 has an invalid length. [ 776.689152][T22520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3414'. [ 776.692597][T22521] netlink: 'syz.1.3414': attribute type 1 has an invalid length. [ 776.695840][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3414'. [ 776.845487][T22532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3418'. [ 776.934993][T22533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3417'. [ 778.452985][T22567] vivid-003: disconnect [ 778.516988][T22565] binder: 22564:22565 ioctl 5000943f 80000680 returned -22 [ 779.322186][T22566] vivid-003: reconnect [ 779.410295][T22597] loop2: detected capacity change from 0 to 7 [ 779.419714][T22597] Dev loop2: unable to read RDB block 7 [ 779.422421][T22597] loop2: unable to read partition table [ 779.425000][T22597] loop2: partition table beyond EOD, truncated [ 779.428014][T22597] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 779.705750][T22617] binder: 22616:22617 ioctl 5000943f 80000680 returned -22 [ 779.824274][T22624] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3433'. [ 779.969292][T22629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3435'. [ 779.979222][T22629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3435'. [ 780.069194][T22637] sch_tbf: peakrate 3 is lower than or equals to rate 3 ! [ 780.127239][T22638] 9p: Bad value for 'port' [ 780.141422][T22638] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3437'. [ 780.302502][T22599] Process accounting resumed [ 780.790609][T22654] bridge0: port 3(vlan3) entered blocking state [ 780.793364][T22654] bridge0: port 3(vlan3) entered disabled state [ 780.796177][T22654] vlan3: entered allmulticast mode [ 780.801301][T22654] vlan0: entered allmulticast mode [ 780.802996][T22654] veth0_vlan: entered allmulticast mode [ 780.806040][T22654] vlan3: entered promiscuous mode [ 780.807872][T22654] vlan0: entered promiscuous mode [ 783.599022][T22728] syz.4.3460 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 783.763350][T22754] 9p: Bad value for 'version' [ 783.802910][T22762] macvlan2: entered promiscuous mode [ 783.809220][T22762] macvlan2: entered allmulticast mode [ 783.811040][T22762] dummy0: entered allmulticast mode [ 783.824474][T22762] team0: Port device macvlan2 added [ 783.834696][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3463'. [ 784.748838][ T5744] Bluetooth: hci1: command 0x0405 tx timeout [ 786.580704][T22808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3469'. [ 786.639325][T22811] /dev/nullb0: Can't open blockdev [ 786.709955][T22815] binder: 22807:22815 ioctl c0306201 800004c0 returned -22 [ 786.844607][T22825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3472'. [ 786.982841][T22832] syzkaller0: entered promiscuous mode [ 786.985900][T22832] syzkaller0: entered allmulticast mode [ 787.637350][T22865] fuse: Bad value for 'group_id' [ 787.639849][T22865] fuse: Bad value for 'group_id' [ 788.645454][T22893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3484'. [ 788.913647][T22895] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 790.393106][T22912] fuse: Bad value for 'group_id' [ 790.397370][T22912] fuse: Bad value for 'group_id' [ 790.550888][T22918] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3491'. [ 791.151969][T22928] netlink: 'syz.1.3495': attribute type 1 has an invalid length. [ 791.168180][T22928] bond1: option mode: invalid value (8) [ 791.172586][T22928] bond1 (unregistering): Released all slaves [ 791.311176][T22928] : renamed from dummy0 [ 791.453123][T22998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3496'. [ 791.883001][T23016] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 791.885388][T23016] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 791.888502][T23016] vhci_hcd vhci_hcd.0: Device attached [ 792.157663][ T5806] usb 38-1: SetAddress Request (18) to port 0 [ 792.159685][ T5806] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 792.441108][T23017] vhci_hcd: connection reset by peer [ 792.444148][ T12] vhci_hcd vhci_hcd.0: stop threads [ 792.447971][ T12] vhci_hcd vhci_hcd.0: release socket [ 792.450406][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 792.531908][T23035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3499'. [ 792.702493][T23047] netlink: 'syz.1.3502': attribute type 2 has an invalid length. [ 794.405313][T23108] FAULT_INJECTION: forcing a failure. [ 794.405313][T23108] name failslab, interval 1, probability 0, space 0, times 0 [ 794.415183][T23108] CPU: 2 UID: 0 PID: 23108 Comm: syz.1.3517 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.415215][T23108] Tainted: [L]=SOFTLOCKUP [ 794.415223][T23108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 794.415234][T23108] Call Trace: [ 794.415240][T23108] [ 794.415245][T23108] dump_stack_lvl+0x100/0x190 [ 794.415277][T23108] should_fail_ex.cold+0x5/0xa [ 794.415302][T23108] should_failslab+0xc2/0x120 [ 794.415328][T23108] __kmalloc_noprof+0xfc/0x820 [ 794.415349][T23108] ? rcu_is_watching+0x12/0xc0 [ 794.415370][T23108] ? tomoyo_realpath_from_path+0xb6/0x690 [ 794.415397][T23108] tomoyo_realpath_from_path+0xb6/0x690 [ 794.415420][T23108] tomoyo_path_number_perm+0x23c/0x580 [ 794.415439][T23108] ? tomoyo_path_number_perm+0x22e/0x580 [ 794.415465][T23108] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 794.415485][T23108] ? get_pid_task+0x106/0x250 [ 794.415512][T23108] ? find_held_lock+0x2b/0x80 [ 794.415526][T23108] ? __fget_files+0x215/0x3d0 [ 794.415536][T23108] ? hook_file_ioctl_common+0x140/0x440 [ 794.415547][T23108] ? __fget_files+0x215/0x3d0 [ 794.415559][T23108] ? __fget_files+0x21f/0x3d0 [ 794.415571][T23108] security_file_ioctl_compat+0xd3/0x230 [ 794.415591][T23108] __ia32_compat_sys_ioctl+0xc2/0x360 [ 794.415610][T23108] __do_fast_syscall_32+0xe7/0x970 [ 794.415626][T23108] ? lockdep_hardirqs_on+0x78/0x100 [ 794.415640][T23108] do_fast_syscall_32+0x32/0x70 [ 794.415655][T23108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 794.415670][T23108] RIP: 0023:0xf703efec [ 794.415684][T23108] Code: Unable to access opcode bytes at 0xf703efc2. [ 794.415689][T23108] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 794.415701][T23108] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 794.415708][T23108] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 794.415714][T23108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 794.415721][T23108] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 794.415739][T23108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 794.415755][T23108] [ 794.416928][T23108] ERROR: Out of memory at tomoyo_realpath_from_path. [ 794.677077][T23112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3518'. [ 795.278008][T23146] FAULT_INJECTION: forcing a failure. [ 795.278008][T23146] name failslab, interval 1, probability 0, space 0, times 0 [ 795.283013][T23146] CPU: 0 UID: 0 PID: 23146 Comm: syz.4.3525 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.283030][T23146] Tainted: [L]=SOFTLOCKUP [ 795.283035][T23146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 795.283041][T23146] Call Trace: [ 795.283046][T23146] [ 795.283051][T23146] dump_stack_lvl+0x100/0x190 [ 795.283069][T23146] should_fail_ex.cold+0x5/0xa [ 795.283084][T23146] should_failslab+0xc2/0x120 [ 795.283101][T23146] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 795.283116][T23146] ? __alloc_skb+0x140/0x710 [ 795.283136][T23146] __alloc_skb+0x140/0x710 [ 795.283165][T23146] ? __alloc_skb+0x5b7/0x710 [ 795.283182][T23146] ? __pfx___alloc_skb+0x10/0x10 [ 795.283199][T23146] ? lock_acquire+0x1b9/0x370 [ 795.283210][T23146] ? find_held_lock+0x2b/0x80 [ 795.283226][T23146] fdb_notify+0xa2/0x190 [ 795.283241][T23146] fdb_delete+0x937/0x1280 [ 795.283263][T23146] br_fdb_flush+0x2cc/0x530 [ 795.283289][T23146] br_fdb_delete_bulk+0x66a/0xd10 [ 795.283312][T23146] ? __pfx_br_fdb_delete_bulk+0x10/0x10 [ 795.283330][T23146] ? __asan_memset+0x23/0x50 [ 795.283343][T23146] ? __nla_validate_parse+0x1e7/0x28b0 [ 795.283375][T23146] ? __lock_acquire+0x49f/0x1a40 [ 795.283405][T23146] ? __nla_parse+0x40/0x60 [ 795.283428][T23146] ? __pfx_br_fdb_delete_bulk+0x10/0x10 [ 795.283446][T23146] rtnl_fdb_del+0x797/0xc20 [ 795.283468][T23146] ? __pfx_rtnl_fdb_del+0x10/0x10 [ 795.283510][T23146] ? __pfx_rtnl_fdb_del+0x10/0x10 [ 795.283529][T23146] rtnetlink_rcv_msg+0x3c9/0xe90 [ 795.283547][T23146] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 795.283567][T23146] ? ref_tracker_free+0x37e/0x6c0 [ 795.283591][T23146] netlink_rcv_skb+0x159/0x420 [ 795.283612][T23146] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 795.283630][T23146] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 795.283658][T23146] ? netlink_deliver_tap+0x1ae/0xcc0 [ 795.283679][T23146] netlink_unicast+0x585/0x850 [ 795.283703][T23146] ? __pfx_netlink_unicast+0x10/0x10 [ 795.283730][T23146] netlink_sendmsg+0x8b0/0xda0 [ 795.283750][T23146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.283779][T23146] ____sys_sendmsg+0xa4d/0xbe0 [ 795.283797][T23146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.283819][T23146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 795.283850][T23146] ___sys_sendmsg+0x190/0x1e0 [ 795.283871][T23146] ? __pfx____sys_sendmsg+0x10/0x10 [ 795.283903][T23146] ? find_held_lock+0x2b/0x80 [ 795.283938][T23146] __sys_sendmsg+0x160/0x210 [ 795.283961][T23146] ? __pfx___sys_sendmsg+0x10/0x10 [ 795.283992][T23146] ? __pfx_ksys_write+0x10/0x10 [ 795.284013][T23146] __do_fast_syscall_32+0xe7/0x970 [ 795.284034][T23146] ? lockdep_hardirqs_on+0x78/0x100 [ 795.284051][T23146] do_fast_syscall_32+0x32/0x70 [ 795.284073][T23146] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 795.284093][T23146] RIP: 0023:0xf7f43fec [ 795.284111][T23146] Code: Unable to access opcode bytes at 0xf7f43fc2. [ 795.284119][T23146] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 795.284136][T23146] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 795.284145][T23146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 795.284155][T23146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 795.284162][T23146] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 795.284171][T23146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 795.284193][T23146] [ 796.624600][T23163] netlink: 'syz.2.3530': attribute type 1 has an invalid length. [ 796.627052][T23163] netlink: 'syz.2.3530': attribute type 2 has an invalid length. [ 796.702777][T23164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3530'. [ 797.188736][T23169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3532'. [ 797.227423][ T5806] usb 38-1: device descriptor read/8, error -110 [ 797.323432][T23173] netlink: zone id is out of range [ 797.325153][T23173] netlink: zone id is out of range [ 797.327148][T23173] netlink: zone id is out of range [ 797.328874][T23173] netlink: zone id is out of range [ 797.330496][T23173] netlink: zone id is out of range [ 797.332154][T23173] netlink: zone id is out of range [ 797.334130][T23173] netlink: zone id is out of range [ 797.335986][T23173] netlink: zone id is out of range [ 797.337866][T23173] netlink: zone id is out of range [ 797.339629][T23173] netlink: zone id is out of range [ 797.344327][T23172] netlink: 'syz.0.3533': attribute type 20 has an invalid length. [ 797.346867][T23172] IPv6: NLM_F_CREATE should be specified when creating new route [ 797.349483][T23172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.351768][T23172] IPv6: NLM_F_CREATE should be set when creating new route [ 797.837890][ T5806] usb usb38-port1: attempt power cycle [ 797.908408][ T42] audit: type=1326 audit(1782424408.074:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23194 comm="syz.2.3538" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 797.991257][T23197] netlink: 'syz.2.3538': attribute type 10 has an invalid length. [ 798.448469][ T5806] usb usb38-port1: unable to enumerate USB device [ 799.829493][T23220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3543'. [ 802.004437][T23263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3552'. [ 803.385677][T23292] binder: 23288:23292 ioctl 5000943f 80000680 returned -22 [ 804.689750][T23315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3562'. [ 805.162473][T23315] macsec1: entered promiscuous mode [ 805.167008][T23315] batadv0: entered promiscuous mode [ 805.175338][T23315] macsec1: entered allmulticast mode [ 805.181130][T23315] batadv0: entered allmulticast mode [ 805.190642][T23315] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 805.205094][T23315] batadv0: left allmulticast mode [ 805.209798][T23315] batadv0: left promiscuous mode [ 805.573438][T23333] netlink: 'syz.1.3565': attribute type 1 has an invalid length. [ 805.628526][T23333] bond1: entered promiscuous mode [ 805.631061][T23333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 805.655993][T23295] Process accounting resumed [ 806.444179][T23391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3569'. [ 806.501819][T23389] binder: 23388:23389 ioctl 5000943f 80000680 returned -22 [ 806.741421][ T42] audit: type=1326 audit(1782424416.905:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23470 comm="syz.0.3572" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdefec code=0x0 [ 806.749783][T23473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3573'. [ 806.815709][T23477] netlink: 'syz.0.3572': attribute type 10 has an invalid length. [ 807.043835][T23496] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 807.133752][T23497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3578'. [ 807.138705][T23497] bridge_slave_1: left allmulticast mode [ 807.141354][T23497] bridge_slave_1: left promiscuous mode [ 807.144734][T23497] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.162484][T23497] bridge_slave_0: left allmulticast mode [ 807.164964][T23497] bridge_slave_0: left promiscuous mode [ 807.168219][T23497] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.129080][T23518] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 808.206211][T23523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3583'. [ 808.355511][T23528] FAULT_INJECTION: forcing a failure. [ 808.355511][T23528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.361202][T23528] CPU: 2 UID: 0 PID: 23528 Comm: syz.2.3584 Tainted: G L syzkaller #0 PREEMPT(full) [ 808.361231][T23528] Tainted: [L]=SOFTLOCKUP [ 808.361238][T23528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 808.361249][T23528] Call Trace: [ 808.361256][T23528] [ 808.361264][T23528] dump_stack_lvl+0x100/0x190 [ 808.361291][T23528] should_fail_ex.cold+0x5/0xa [ 808.361315][T23528] _copy_from_user+0x2e/0xd0 [ 808.361338][T23528] __sys_bpf+0x2f5/0x4e80 [ 808.361366][T23528] ? __pfx___sys_bpf+0x10/0x10 [ 808.361386][T23528] ? find_held_lock+0x2b/0x80 [ 808.361408][T23528] ? get_pid_task+0xfc/0x250 [ 808.361431][T23528] ? get_pid_task+0xfc/0x250 [ 808.361461][T23528] ? proc_fail_nth_write+0x9f/0x220 [ 808.361486][T23528] ? find_held_lock+0x2b/0x80 [ 808.361514][T23528] ? rcu_read_lock_any_held+0x6a/0xa0 [ 808.361538][T23528] ? find_held_lock+0x2b/0x80 [ 808.361566][T23528] ? ksys_write+0x190/0x250 [ 808.361582][T23528] ? ksys_write+0x190/0x250 [ 808.361616][T23528] ? fput+0x79/0x100 [ 808.361639][T23528] ? __ia32_sys_bpf+0xcc/0x170 [ 808.361658][T23528] __ia32_sys_bpf+0xcc/0x170 [ 808.361679][T23528] ? __do_fast_syscall_32+0x98/0x970 [ 808.361703][T23528] __do_fast_syscall_32+0xe7/0x970 [ 808.361725][T23528] ? lockdep_hardirqs_on+0x78/0x100 [ 808.361748][T23528] do_fast_syscall_32+0x32/0x70 [ 808.361771][T23528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 808.361793][T23528] RIP: 0023:0xf6ffefec [ 808.361813][T23528] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 808.361821][T23528] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 808.361839][T23528] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 808.361850][T23528] RDX: 0000000000000049 RSI: 0000000000000000 RDI: 0000000000000000 [ 808.361860][T23528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 808.361870][T23528] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 808.361880][T23528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 808.361903][T23528] [ 808.494803][T23531] gre1: entered promiscuous mode [ 809.256855][T16948] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 809.409580][T16948] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.414321][T16948] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 809.421497][T16948] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 809.425335][T16948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.429300][T16948] usb 6-1: Product: syz [ 809.431189][T16948] usb 6-1: Manufacturer: syz [ 809.433204][T16948] usb 6-1: SerialNumber: syz [ 809.451546][T16948] cdc_mbim 6-1:1.0: skipping garbage [ 809.456679][ T42] audit: type=1326 audit(1782424419.615:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23560 comm="syz.2.3589" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x0 [ 809.653982][T23564] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 810.315970][T23564] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 810.319196][T16948] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 810.325013][T16948] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 810.339919][T16948] wwan wwan0: port wwan0mbim0 attached [ 810.371956][T16948] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 26:e0:6c:ab:75:4e [ 810.525566][ C2] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 810.528142][ C2] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 810.531162][ C2] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 810.533214][ C2] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 810.535300][ C2] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 810.537395][ C2] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 810.540033][ C2] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 810.542682][ C2] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 810.544901][ C2] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 810.547185][ C2] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 810.549849][ C2] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 810.552442][ C2] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 810.555233][ C2] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 810.557606][ C2] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 810.560263][ C2] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 810.562845][ C2] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 810.565507][ C2] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 810.567724][ C2] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 810.569905][ C2] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 810.572017][ C2] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 810.638754][ T5829] usb 6-1: USB disconnect, device number 51 [ 810.645677][ T5829] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 810.726643][T23602] libceph: resolve '400' (ret=-3): failed [ 810.768846][ T5829] wwan wwan0: port wwan0mbim0 disconnected [ 810.917035][T23645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3593'. [ 810.917872][T23646] fuse: Unknown parameter 'grou00000000000000000000' [ 810.967465][T23652] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 810.969488][T23652] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 810.974022][T23652] vhci_hcd vhci_hcd.0: Device attached [ 810.984930][T23653] vhci_hcd: cannot find a urb of seqnum 64 max seqnum 0 [ 810.992079][ T5586] vhci_hcd vhci_hcd.4: stop threads [ 810.994325][ T5586] vhci_hcd vhci_hcd.4: release socket [ 810.997382][ T5586] vhci_hcd vhci_hcd.4: disconnect device [ 811.018074][T23652] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3596'. [ 812.460855][T23690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3603'. [ 812.548909][T23696] fuse: Unknown parameter 'group_i00000000000000000000' [ 812.670979][T23703] binder: 23702:23703 ioctl 5000943f 80000680 returned -22 [ 813.095693][T23730] net_ratelimit: 351 callbacks suppressed [ 813.095710][T23730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 813.106051][T23732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3613'. [ 813.221238][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.224277][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.296315][T23737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3614'. [ 813.319045][T23737] syzkaller0: entered promiscuous mode [ 813.321620][T23737] syzkaller0: entered allmulticast mode [ 813.326679][T13273] syzkaller0: tun_net_xmit 70 [ 813.499185][T23745] fuse: Unknown parameter 'group_i00000000000000000000' [ 813.789868][T23756] binder: 23755:23756 ioctl 5000943f 80000680 returned -22 [ 813.960226][ T42] audit: type=1326 audit(1782424424.125:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23770 comm="syz.0.3621" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdefec code=0x0 [ 814.068041][ T5822] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 814.248494][ T5822] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.253407][ T5822] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 814.262605][ T5822] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 814.266770][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.270516][ T5822] usb 7-1: Product: syz [ 814.272836][ T5822] usb 7-1: Manufacturer: syz [ 814.276248][ T5822] usb 7-1: SerialNumber: syz [ 814.289118][ T5822] cdc_mbim 7-1:1.0: skipping garbage [ 814.495753][T23754] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 814.998626][T23789] fuse: Unknown parameter 'group_i00000000000000000000' [ 815.104486][T23754] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 815.109584][ T5822] cdc_mbim 7-1:1.0: setting tx_max = 16384 [ 815.113672][ T5822] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 815.122383][ T5822] wwan wwan0: port wwan0mbim0 attached [ 815.140527][ T5822] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 7a:a3:e5:88:25:61 [ 815.311676][T23754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.316196][T23754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.449504][ T5447] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 815.504941][ T5586] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.605152][ T5586] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.667261][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 815.677454][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 815.680985][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 815.689993][ T5586] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.690085][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 815.691757][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 815.780101][ T5586] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.844230][ T846] usb 7-1: USB disconnect, device number 40 [ 815.855411][ T846] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 815.896026][ T846] cdc_mbim 7-1:1.0 wwan0: failed to kill vid 0081/0 [ 816.002141][ T846] wwan wwan0: port wwan0mbim0 disconnected [ 816.253787][ T5586] IPVS: stopping master sync thread 19362 ... [ 816.442527][T23832] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.444889][T23832] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.447516][T23832] bridge_slave_0: entered allmulticast mode [ 816.450520][T23832] bridge_slave_0: entered promiscuous mode [ 816.453780][T23832] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.456077][T23832] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.458575][T23832] bridge_slave_1: entered allmulticast mode [ 816.461223][T23832] bridge_slave_1: entered promiscuous mode [ 816.501571][ T5586] hsr_slave_0: left promiscuous mode [ 816.504013][ T5586] hsr_slave_1: left promiscuous mode [ 816.513454][ T5586] veth1_macvtap: left promiscuous mode [ 816.515730][ T5586] veth0_macvtap: left promiscuous mode [ 816.519238][ T5586] veth1_vlan: left promiscuous mode [ 816.521007][ T5586] veth0_vlan: left promiscuous mode [ 816.747390][T24045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3634'. [ 816.791151][T23832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.828295][T23832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.891685][T24045] netlink: 'syz.1.3634': attribute type 1 has an invalid length. [ 816.945683][T23832] team0: Port device team_slave_0 added [ 816.952058][T23832] team0: Port device team_slave_1 added [ 816.966781][T23832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.969040][T23832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.978409][T23832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.986545][T23832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.989498][T23832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.999275][T23832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.068684][T23832] hsr_slave_0: entered promiscuous mode [ 817.082384][T23832] hsr_slave_1: entered promiscuous mode [ 817.233438][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 817.286313][ T5806] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 817.437971][ T5806] usb 7-1: config index 0 descriptor too short (expected 115, got 36) [ 817.441754][ T5806] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.446328][ T5806] usb 7-1: config 0 has no interfaces? [ 817.448653][ T5806] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 817.452372][ T5806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.459586][ T5806] usb 7-1: config 0 descriptor?? [ 817.480213][ T5447] 8021q: adding VLAN 0 to HW filter on device eth7 [ 817.703155][ T5806] usb 7-1: USB disconnect, device number 41 [ 817.732273][ T5586] IPVS: stop unused estimator thread 0... [ 817.776289][ T5749] Bluetooth: hci2: command tx timeout [ 817.812093][ T5447] 8021q: adding VLAN 0 to HW filter on device eth8 [ 818.071892][T24235] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 818.074502][T24235] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 818.077953][T24235] vhci_hcd vhci_hcd.0: Device attached [ 818.141009][T24235] netlink: 'syz.0.3642': attribute type 12 has an invalid length. [ 818.396972][ T41] usb 38-1: SetAddress Request (22) to port 0 [ 818.404298][ T41] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 819.086695][T24236] vhci_hcd: connection reset by peer [ 819.089588][ T12] vhci_hcd vhci_hcd.0: stop threads [ 819.091478][ T12] vhci_hcd vhci_hcd.0: release socket [ 819.093550][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 819.721567][T23832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 819.725917][T23832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 819.728666][T23832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 819.767521][T23832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 819.775265][T23832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 819.884628][ T5749] Bluetooth: hci2: command tx timeout [ 819.890868][T23832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 819.914246][T23832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 819.984970][T23832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 821.153222][T23832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.249856][T23832] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.330195][ T9303] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.333287][ T9303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.391162][ T9303] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.393416][ T9303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.590320][T24340] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 821.615137][T17086] IPVS: starting estimator thread 0... [ 821.716839][T24342] IPVS: using max 43 ests per chain, 103200 per kthread [ 821.937856][ T5749] Bluetooth: hci2: command tx timeout [ 822.185817][T23832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.412522][T24370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3652'. [ 822.452186][T23832] veth0_vlan: entered promiscuous mode [ 822.478690][T23832] veth1_vlan: entered promiscuous mode [ 822.500408][T23832] veth0_macvtap: entered promiscuous mode [ 822.504372][T23832] veth1_macvtap: entered promiscuous mode [ 822.526428][T23832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.543782][T23832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.563508][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.570168][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.575116][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.582139][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.607867][ T42] audit: type=1326 audit(1782424432.766:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24378 comm="syz.2.3656" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 822.684143][T24380] netlink: 'syz.2.3656': attribute type 10 has an invalid length. [ 822.860026][ T9292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.864931][ T9292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.893131][ T9291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.895694][ T9291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.536108][ T41] usb 38-1: device descriptor read/8, error -110 [ 823.935491][ T41] usb usb38-port1: attempt power cycle [ 824.018081][ T5749] Bluetooth: hci2: command tx timeout [ 824.531643][ T41] usb usb38-port1: unable to enumerate USB device [ 824.889783][T24423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3662'. [ 825.171576][T24425] syzkaller0: entered promiscuous mode [ 825.173499][T24425] syzkaller0: entered allmulticast mode [ 825.514819][T24434] fuse: Unknown parameter 'group_id00000000000000000000' [ 825.787816][ T42] audit: type=1326 audit(1782424435.956:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24469 comm="syz.2.3669" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 826.709305][T24495] fuse: Bad value for 'user_id' [ 826.711091][T24495] fuse: Bad value for 'user_id' [ 826.741489][T24497] FAULT_INJECTION: forcing a failure. [ 826.741489][T24497] name failslab, interval 1, probability 0, space 0, times 0 [ 826.747581][T24497] CPU: 2 UID: 0 PID: 24497 Comm: syz.0.3675 Tainted: G L syzkaller #0 PREEMPT(full) [ 826.747600][T24497] Tainted: [L]=SOFTLOCKUP [ 826.747605][T24497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 826.747612][T24497] Call Trace: [ 826.747617][T24497] [ 826.747622][T24497] dump_stack_lvl+0x100/0x190 [ 826.747641][T24497] should_fail_ex.cold+0x5/0xa [ 826.747657][T24497] should_failslab+0xc2/0x120 [ 826.747673][T24497] kmem_cache_alloc_noprof+0x91/0x6a0 [ 826.747687][T24497] ? lock_acquire+0x1b9/0x370 [ 826.747698][T24497] ? skb_clone+0x190/0x400 [ 826.747718][T24497] skb_clone+0x190/0x400 [ 826.747737][T24497] raw6_local_deliver+0x373/0xaf0 [ 826.747754][T24497] ip6_protocol_deliver_rcu+0x241/0x15b0 [ 826.747775][T24497] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 826.747796][T24497] ip6_input_finish+0x1e4/0x4a0 [ 826.747815][T24497] ip6_input+0x105/0x2f0 [ 826.747833][T24497] ip6_mc_input+0x513/0xf50 [ 826.747856][T24497] ? __pfx_ip6_mc_input+0x10/0x10 [ 826.747875][T24497] ? ip6_rcv_finish_core.isra.0+0x113/0x1260 [ 826.747895][T24497] ? __pfx_ip6_mc_input+0x10/0x10 [ 826.747913][T24497] ipv6_rcv+0x34c/0x3d0 [ 826.747930][T24497] ? __pfx_ipv6_rcv+0x10/0x10 [ 826.747947][T24497] __netif_receive_skb_one_core+0x12d/0x1e0 [ 826.747963][T24497] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 826.747980][T24497] ? lock_acquire+0x1b9/0x370 [ 826.747994][T24497] __netif_receive_skb+0x1f/0x120 [ 826.748010][T24497] netif_receive_skb+0x139/0x7d0 [ 826.748026][T24497] ? __pfx_netif_receive_skb+0x10/0x10 [ 826.748046][T24497] tun_rx_batched.isra.0+0x3f6/0x750 [ 826.748064][T24497] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 826.748083][T24497] ? tun_get_user+0x1cc8/0x3c20 [ 826.748102][T24497] tun_get_user+0x1e31/0x3c20 [ 826.748123][T24497] ? __pfx_tun_get_user+0x10/0x10 [ 826.748140][T24497] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 826.748160][T24497] ? find_held_lock+0x2b/0x80 [ 826.748175][T24497] ? tun_get+0x191/0x370 [ 826.748188][T24497] ? tun_get+0x191/0x370 [ 826.748206][T24497] tun_chr_write_iter+0xdc/0x200 [ 826.748224][T24497] vfs_write+0x6ac/0x1050 [ 826.748235][T24497] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 826.748253][T24497] ? __pfx_vfs_write+0x10/0x10 [ 826.748262][T24497] ? find_held_lock+0x2b/0x80 [ 826.748284][T24497] ksys_write+0x12a/0x250 [ 826.748295][T24497] ? __pfx_ksys_write+0x10/0x10 [ 826.748309][T24497] do_int80_emulation+0x14b/0x720 [ 826.748327][T24497] asm_int80_emulation+0x1a/0x20 [ 826.748338][T24497] RIP: 0023:0xf71171eb [ 826.748348][T24497] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 826.748359][T24497] RSP: 002b:00000000f53cd44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 826.748371][T24497] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080002e40 [ 826.748378][T24497] RDX: 000000000000004e RSI: 0000000000000000 RDI: 0000000000000000 [ 826.748385][T24497] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 826.748392][T24497] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 826.748398][T24497] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 826.748412][T24497] [ 826.865673][ T5815] usb 6-1: new low-speed USB device number 52 using dummy_hcd [ 827.017991][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 827.022823][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.026984][ T5815] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 827.030956][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.038064][ T5815] usb 6-1: config 0 descriptor?? [ 827.663709][ T5815] usbhid 6-1:0.0: can't add hid device: -71 [ 827.665753][ T5815] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 827.675341][ T5815] usb 6-1: USB disconnect, device number 52 [ 829.115395][T24558] FAULT_INJECTION: forcing a failure. [ 829.115395][T24558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.119542][T24558] CPU: 3 UID: 0 PID: 24558 Comm: syz.2.3686 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.119574][T24558] Tainted: [L]=SOFTLOCKUP [ 829.119578][T24558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 829.119585][T24558] Call Trace: [ 829.119590][T24558] [ 829.119595][T24558] dump_stack_lvl+0x100/0x190 [ 829.119614][T24558] should_fail_ex.cold+0x5/0xa [ 829.119629][T24558] _copy_to_user+0x32/0xd0 [ 829.119644][T24558] generic_map_lookup_batch+0x5cc/0xc80 [ 829.119662][T24558] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 829.119678][T24558] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 829.119690][T24558] bpf_map_do_batch+0x5b2/0x6d0 [ 829.119706][T24558] ? bpf_lsm_bpf+0x9/0x10 [ 829.119719][T24558] __sys_bpf+0xe98/0x4e80 [ 829.119736][T24558] ? __pfx___sys_bpf+0x10/0x10 [ 829.119747][T24558] ? trace_hrtimer_start+0x77/0x220 [ 829.119761][T24558] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 829.119779][T24558] ? finish_task_switch.isra.0+0x2c0/0x1010 [ 829.119793][T24558] ? rcu_is_watching+0x12/0xc0 [ 829.119809][T24558] ? finish_task_switch.isra.0+0x37e/0x1010 [ 829.119822][T24558] ? rcu_is_watching+0x12/0xc0 [ 829.119836][T24558] ? trace_sched_exit_tp+0x120/0x160 [ 829.119851][T24558] ? __schedule+0x126e/0x6730 [ 829.119872][T24558] ? __pfx___schedule+0x10/0x10 [ 829.119889][T24558] ? fput+0x79/0x100 [ 829.119910][T24558] ? __ia32_sys_bpf+0xcc/0x170 [ 829.119926][T24558] __ia32_sys_bpf+0xcc/0x170 [ 829.119944][T24558] ? __do_fast_syscall_32+0x98/0x970 [ 829.119966][T24558] __do_fast_syscall_32+0xe7/0x970 [ 829.119986][T24558] ? lockdep_hardirqs_on+0x78/0x100 [ 829.120003][T24558] do_fast_syscall_32+0x32/0x70 [ 829.120018][T24558] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 829.120033][T24558] RIP: 0023:0xf6ffefec [ 829.120047][T24558] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 829.120052][T24558] RSP: 002b:00000000f53cc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 829.120063][T24558] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000800003c0 [ 829.120070][T24558] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 829.120076][T24558] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 829.120083][T24558] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 829.120089][T24558] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 829.120103][T24558] [ 830.004492][T24571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.065578][ T42] audit: type=1326 audit(1782424440.196:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24572 comm="syz.0.3690" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdefec code=0x0 [ 830.113617][ T5586] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.117723][ T5586] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.121439][ T5586] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.125095][ T5586] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.773520][ T9292] Bluetooth: hci3: Frame reassembly failed (-84) [ 831.507633][T20357] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 831.517234][T20357] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 831.523041][T20357] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 831.535242][T20357] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 831.540322][T20357] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 831.987989][T24598] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.991140][T24598] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.994192][T24598] bridge_slave_0: entered allmulticast mode [ 831.998525][T24598] bridge_slave_0: entered promiscuous mode [ 832.003441][T24598] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.006698][T24598] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.009668][T24598] bridge_slave_1: entered allmulticast mode [ 832.013653][T24598] bridge_slave_1: entered promiscuous mode [ 832.053506][T24598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.062469][T24598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.092715][T24598] team0: Port device team_slave_0 added [ 832.098518][T24598] team0: Port device team_slave_1 added [ 832.123853][T24598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.126838][T24598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.137520][T24598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.143528][T24598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.148017][T24598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.159636][T24598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.200732][T24598] hsr_slave_0: entered promiscuous mode [ 832.203986][T24598] hsr_slave_1: entered promiscuous mode [ 832.207132][T24598] debugfs: 'hsr0' already exists in 'hsr' [ 832.209464][T24598] Cannot create hsr debugfs directory [ 832.356598][T24598] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.449971][T24598] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.534774][T24598] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.628321][T24598] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.757606][T24598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 832.761356][T24598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 832.763992][T24598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 832.767701][T24598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 832.770225][T24598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 832.774006][T24598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 832.776547][T24598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 832.779989][T24598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 832.800488][T24598] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.802868][T24598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.805538][T24598] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.807753][T24598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.817176][T24588] Bluetooth: hci3: command 0x1003 tx timeout [ 832.820745][ T5744] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 832.861655][T24598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.870934][ T9303] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.876998][ T9303] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.877541][T24888] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 832.888391][T24598] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.898471][ T9303] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.900503][ T9303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.911663][ T9303] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.913729][ T9303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.929914][T24891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.935828][T24891] program syz.1.3696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 833.215309][T24598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.254351][T24598] veth0_vlan: entered promiscuous mode [ 833.264905][T24598] veth1_vlan: entered promiscuous mode [ 833.283042][T24598] veth0_macvtap: entered promiscuous mode [ 833.289741][T24598] veth1_macvtap: entered promiscuous mode [ 833.301724][T24598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.312564][T24598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.321029][ T5586] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.323988][ T5586] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.328994][ T5586] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.332566][ T5586] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.428733][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.431226][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.455425][ T9288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.460301][ T9288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.480088][T24918] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 833.488004][ T42] audit: type=1326 audit(1782424443.656:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24917 comm="syz.1.3698" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 833.615375][ T5744] Bluetooth: hci4: command tx timeout [ 835.025335][T24949] netlink: 'syz.0.3703': attribute type 1 has an invalid length. [ 835.039441][T24949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.047444][T24949] bond0: (slave geneve2): making interface the new active one [ 835.051003][T24949] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 835.413388][ T42] audit: type=1326 audit(1782424448.580:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.0.3705" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdefec code=0x0 [ 835.695364][ T5744] Bluetooth: hci4: command tx timeout [ 836.104616][T24990] bond0 (unregistering): (slave geneve2): Releasing active interface [ 836.116878][T24990] bond0 (unregistering): Released all slaves [ 836.367212][T25027] FAULT_INJECTION: forcing a failure. [ 836.367212][T25027] name failslab, interval 1, probability 0, space 0, times 0 [ 836.371082][T25027] CPU: 3 UID: 0 PID: 25027 Comm: syz.2.3706 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.371100][T25027] Tainted: [L]=SOFTLOCKUP [ 836.371104][T25027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 836.371112][T25027] Call Trace: [ 836.371116][T25027] [ 836.371122][T25027] dump_stack_lvl+0x100/0x190 [ 836.371140][T25027] should_fail_ex.cold+0x5/0xa [ 836.371156][T25027] should_failslab+0xc2/0x120 [ 836.371172][T25027] __kmalloc_noprof+0xfc/0x820 [ 836.371187][T25027] ? __seq_open_private+0x22/0xd0 [ 836.371208][T25027] __seq_open_private+0x22/0xd0 [ 836.371224][T25027] pid_smaps_open+0x29/0xf0 [ 836.371240][T25027] do_dentry_open+0x6ab/0x14d0 [ 836.371252][T25027] ? __pfx_pid_smaps_open+0x10/0x10 [ 836.371270][T25027] vfs_open+0x82/0x3f0 [ 836.371286][T25027] path_openat+0x2873/0x4280 [ 836.371303][T25027] ? __pfx_path_openat+0x10/0x10 [ 836.371319][T25027] do_file_open+0x20e/0x430 [ 836.371329][T25027] ? __lock_acquire+0x49f/0x1a40 [ 836.371341][T25027] ? __pfx_do_file_open+0x10/0x10 [ 836.371357][T25027] ? __pfx_kfree_link+0x10/0x10 [ 836.371377][T25027] ? _raw_spin_unlock+0x28/0x50 [ 836.371388][T25027] ? alloc_fd+0x471/0x7a0 [ 836.371402][T25027] do_sys_openat2+0x10f/0x1e0 [ 836.371417][T25027] ? __pfx_do_sys_openat2+0x10/0x10 [ 836.371433][T25027] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 836.371448][T25027] ? __fget_files+0x21f/0x3d0 [ 836.371460][T25027] __ia32_compat_sys_openat+0x12d/0x210 [ 836.371477][T25027] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 836.371493][T25027] ? ksys_write+0x1ac/0x250 [ 836.371508][T25027] do_int80_emulation+0x14b/0x720 [ 836.371525][T25027] asm_int80_emulation+0x1a/0x20 [ 836.371537][T25027] RIP: 0023:0xf71071eb [ 836.371547][T25027] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 836.371558][T25027] RSP: 002b:00000000f53c63cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 836.371569][T25027] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53c6490 [ 836.371576][T25027] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 836.371583][T25027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 836.371589][T25027] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 836.371595][T25027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 836.371609][T25027] [ 837.076343][T25042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3708'. [ 837.528353][T25061] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 837.532088][T25061] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 837.536319][T25061] overlayfs: failed to set uuid (357/file0, err=-13); falling back to uuid=null. [ 837.702931][T25065] FAULT_INJECTION: forcing a failure. [ 837.702931][T25065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.709055][T25065] CPU: 2 UID: 0 PID: 25065 Comm: syz.1.3712 Tainted: G L syzkaller #0 PREEMPT(full) [ 837.709083][T25065] Tainted: [L]=SOFTLOCKUP [ 837.709089][T25065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 837.709099][T25065] Call Trace: [ 837.709104][T25065] [ 837.709111][T25065] dump_stack_lvl+0x100/0x190 [ 837.709139][T25065] should_fail_ex.cold+0x5/0xa [ 837.709161][T25065] _copy_from_user+0x2e/0xd0 [ 837.709182][T25065] cmsghdr_from_user_compat_to_kern+0x354/0x7d0 [ 837.709215][T25065] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 837.709232][T25065] ? __import_iovec+0x1d2/0x640 [ 837.709258][T25065] ____sys_sendmsg+0x607/0xbe0 [ 837.709279][T25065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 837.709302][T25065] ? rcu_is_watching+0x12/0xc0 [ 837.709321][T25065] ? ___sys_sendmsg+0x19d/0x1e0 [ 837.709339][T25065] ? kfree+0x1e5/0x6c0 [ 837.709354][T25065] ? __pfx__kstrtoull+0x10/0x10 [ 837.709379][T25065] ___sys_sendmsg+0x190/0x1e0 [ 837.709401][T25065] ? __pfx____sys_sendmsg+0x10/0x10 [ 837.709419][T25065] ? __lock_acquire+0x49f/0x1a40 [ 837.709458][T25065] ? __pfx___might_resched+0x10/0x10 [ 837.709488][T25065] __sys_sendmmsg+0x309/0x440 [ 837.709516][T25065] ? __pfx___sys_sendmmsg+0x10/0x10 [ 837.709539][T25065] ? find_held_lock+0x2b/0x80 [ 837.709571][T25065] ? __mutex_unlock_slowpath+0x35d/0x930 [ 837.709604][T25065] ? fput+0x79/0x100 [ 837.709622][T25065] ? ksys_write+0x1ac/0x250 [ 837.709663][T25065] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 837.709685][T25065] ? lockdep_hardirqs_on+0x78/0x100 [ 837.709704][T25065] __do_fast_syscall_32+0xe7/0x970 [ 837.709724][T25065] ? lockdep_hardirqs_on+0x78/0x100 [ 837.709778][T25065] do_fast_syscall_32+0x32/0x70 [ 837.709802][T25065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 837.709824][T25065] RIP: 0023:0xf703efec [ 837.709843][T25065] Code: Unable to access opcode bytes at 0xf703efc2. [ 837.709851][T25065] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 837.709867][T25065] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009240 [ 837.709878][T25065] RDX: 0000000000000002 RSI: 0000000010004000 RDI: 0000000000000000 [ 837.709887][T25065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 837.709897][T25065] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 837.709907][T25065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 837.709930][T25065] [ 837.785375][ T5744] Bluetooth: hci4: command tx timeout [ 837.926428][T25068] could not allocate digest TFM handle md5 [ 838.496181][T25077] syzkaller0: entered promiscuous mode [ 838.499584][T25077] syzkaller0: entered allmulticast mode [ 838.658449][T25077] tipc: Started in network mode [ 838.661254][T25077] tipc: Node identity 268a212e458e, cluster identity 4711 [ 838.663938][T25077] tipc: Enabled bearer , priority 0 [ 838.721140][T25076] tipc: Resetting bearer [ 838.748877][T25076] tipc: Disabling bearer [ 839.855345][ T5744] Bluetooth: hci4: command tx timeout [ 840.501260][T25139] vlan2: entered promiscuous mode [ 840.503134][T25139] hsr0: entered promiscuous mode [ 840.508130][T25139] vlan2: entered allmulticast mode [ 840.510396][T25139] hsr0: entered allmulticast mode [ 840.511960][T25139] hsr_slave_0: entered allmulticast mode [ 840.513713][T25139] hsr_slave_1: entered allmulticast mode [ 840.565286][ T42] audit: type=1326 audit(1782424453.740:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25142 comm="syz.0.3723" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdefec code=0x0 [ 840.876930][T25157] FAULT_INJECTION: forcing a failure. [ 840.876930][T25157] name failslab, interval 1, probability 0, space 0, times 0 [ 840.881968][T25157] CPU: 1 UID: 0 PID: 25157 Comm: syz.2.3726 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.881999][T25157] Tainted: [L]=SOFTLOCKUP [ 840.882006][T25157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 840.882017][T25157] Call Trace: [ 840.882025][T25157] [ 840.882032][T25157] dump_stack_lvl+0x100/0x190 [ 840.882060][T25157] should_fail_ex.cold+0x5/0xa [ 840.882084][T25157] should_failslab+0xc2/0x120 [ 840.882109][T25157] __kmalloc_cache_noprof+0x91/0x6c0 [ 840.882131][T25157] ? sctp_add_bind_addr+0xae/0x3e0 [ 840.882158][T25157] sctp_add_bind_addr+0xae/0x3e0 [ 840.882185][T25157] sctp_copy_local_addr_list+0x349/0x550 [ 840.882217][T25157] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 840.882245][T25157] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 840.882274][T25157] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 840.882302][T25157] sctp_bind_addr_copy+0xe0/0x530 [ 840.882329][T25157] sctp_connect_new_asoc+0x1c9/0x770 [ 840.882351][T25157] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 840.882377][T25157] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 840.882404][T25157] sctp_sendmsg+0x1743/0x22e0 [ 840.882428][T25157] ? __pfx___might_resched+0x10/0x10 [ 840.882457][T25157] ? __pfx_sctp_sendmsg+0x10/0x10 [ 840.882477][T25157] ? aa_sk_perm+0x309/0xaa0 [ 840.882509][T25157] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 840.882537][T25157] ? __pfx_sctp_sendmsg+0x10/0x10 [ 840.882558][T25157] inet_sendmsg+0x11c/0x140 [ 840.882588][T25157] ____sys_sendmsg+0x9c9/0xbe0 [ 840.882608][T25157] ? __pfx_inet_sendmsg+0x10/0x10 [ 840.882636][T25157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 840.882662][T25157] ? _kstrtoull+0x13c/0x1f0 [ 840.882687][T25157] ? __pfx__kstrtoull+0x10/0x10 [ 840.882714][T25157] ___sys_sendmsg+0x190/0x1e0 [ 840.882744][T25157] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.882765][T25157] ? __lock_acquire+0x49f/0x1a40 [ 840.882811][T25157] __sys_sendmmsg+0x309/0x440 [ 840.882864][T25157] ? __pfx___sys_sendmmsg+0x10/0x10 [ 840.882891][T25157] ? find_held_lock+0x2b/0x80 [ 840.882920][T25157] ? __mutex_unlock_slowpath+0x35d/0x930 [ 840.882954][T25157] ? fput+0x79/0x100 [ 840.882977][T25157] ? ksys_write+0x1ac/0x250 [ 840.882996][T25157] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 840.883017][T25157] ? lockdep_hardirqs_on+0x78/0x100 [ 840.883039][T25157] __do_fast_syscall_32+0xe7/0x970 [ 840.883061][T25157] ? lockdep_hardirqs_on+0x78/0x100 [ 840.883083][T25157] do_fast_syscall_32+0x32/0x70 [ 840.883105][T25157] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 840.883129][T25157] RIP: 0023:0xf7f04fec [ 840.883147][T25157] Code: Unable to access opcode bytes at 0xf7f04fc2. [ 840.883156][T25157] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 840.883174][T25157] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080002780 [ 840.883186][T25157] RDX: 0000000000000002 RSI: 0000000000048000 RDI: 0000000000000000 [ 840.883197][T25157] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 840.883205][T25157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.883214][T25157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 840.883239][T25157] [ 841.763287][T24588] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 841.783756][T24588] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 841.789946][T24588] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 841.810247][T24588] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 841.819711][T24588] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 842.343977][T25168] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.347037][T25168] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.349364][T25168] bridge_slave_0: entered allmulticast mode [ 842.352026][T25168] bridge_slave_0: entered promiscuous mode [ 842.355481][T25168] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.357731][T25168] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.360016][T25168] bridge_slave_1: entered allmulticast mode [ 842.362641][T25168] bridge_slave_1: entered promiscuous mode [ 842.380234][T25168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.384694][T25168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.403023][T25168] team0: Port device team_slave_0 added [ 842.407135][T25168] team0: Port device team_slave_1 added [ 842.424296][T25168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.428589][T25168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.436587][T25168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.440778][T25168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.442914][T25168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.451129][T25168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.475989][T25168] hsr_slave_0: entered promiscuous mode [ 842.478228][T25168] hsr_slave_1: entered promiscuous mode [ 842.480278][T25168] debugfs: 'hsr0' already exists in 'hsr' [ 842.482037][T25168] Cannot create hsr debugfs directory [ 842.588496][T25168] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 842.593967][T25168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 842.597754][T25168] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 842.602745][T25168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 842.606661][T25168] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 842.611773][T25168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 842.615287][T25168] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 842.620428][T25168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 842.641867][T25168] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.644829][T25168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.647852][T25168] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.650259][T25168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.694024][T25168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.703544][T22973] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.707171][T22973] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.715756][T25168] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.722975][T22973] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.725757][T22973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.732690][T22973] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.735619][T22973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.053452][T25168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.271378][T25168] veth0_vlan: entered promiscuous mode [ 843.281269][T25168] veth1_vlan: entered promiscuous mode [ 843.302035][T25168] veth0_macvtap: entered promiscuous mode [ 843.311291][T25168] veth1_macvtap: entered promiscuous mode [ 843.320250][T25168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.332704][T25168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.341688][ T6782] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.344470][ T6782] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.349224][ T6782] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.352827][ T6782] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.422207][T22973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.427549][T22973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.451170][ T9290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.458859][ T9290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.571243][T25499] fuse: Bad value for 'fd' [ 843.959973][T24588] Bluetooth: hci3: command tx timeout [ 845.372699][T25545] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 845.379314][ T42] audit: type=1326 audit(1782424458.551:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25544 comm="syz.5.3744" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe3fec code=0x0 [ 845.439954][T25550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.451642][T25550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.459912][T25550] bond0 (unregistering): Released all slaves [ 846.014807][T24588] Bluetooth: hci3: command tx timeout [ 846.654916][T25576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3748'. [ 846.711485][T25580] input: syz0 as /devices/virtual/input/input26 [ 847.096014][T25592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3750'. [ 847.100033][T25592] openvswitch: netlink: Missing key (keys=40, expected=80) [ 848.104528][T24588] Bluetooth: hci3: command tx timeout [ 848.111810][T25616] FAULT_INJECTION: forcing a failure. [ 848.111810][T25616] name failslab, interval 1, probability 0, space 0, times 0 [ 848.115914][T25616] CPU: 3 UID: 0 PID: 25616 Comm: syz.2.3757 Tainted: G L syzkaller #0 PREEMPT(full) [ 848.115944][T25616] Tainted: [L]=SOFTLOCKUP [ 848.115951][T25616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 848.115963][T25616] Call Trace: [ 848.115970][T25616] [ 848.115977][T25616] dump_stack_lvl+0x100/0x190 [ 848.116003][T25616] should_fail_ex.cold+0x5/0xa [ 848.116020][T25616] should_failslab+0xc2/0x120 [ 848.116037][T25616] kmem_cache_alloc_noprof+0x91/0x6a0 [ 848.116052][T25616] ? __asan_memcpy+0x3c/0x60 [ 848.116064][T25616] ? __kernfs_new_node+0xd2/0xa10 [ 848.116086][T25616] __kernfs_new_node+0xd2/0xa10 [ 848.116104][T25616] ? stack_trace_save+0x8e/0xc0 [ 848.116122][T25616] ? __pfx_stack_trace_save+0x10/0x10 [ 848.116138][T25616] ? __pfx___kernfs_new_node+0x10/0x10 [ 848.116160][T25616] ? find_held_lock+0x2b/0x80 [ 848.116175][T25616] ? kernfs_root+0xee/0x2a0 [ 848.116191][T25616] ? kernfs_root+0xee/0x2a0 [ 848.116211][T25616] kernfs_create_dir_ns+0xa6/0x2b0 [ 848.116226][T25616] sysfs_create_dir_ns+0x13a/0x2b0 [ 848.116249][T25616] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 848.116265][T25616] ? find_held_lock+0x2b/0x80 [ 848.116279][T25616] ? kobject_add_internal+0x25f/0x930 [ 848.116297][T25616] ? kobject_add_internal+0x25f/0x930 [ 848.116316][T25616] ? class_dir_child_ns_type+0xd/0x60 [ 848.116333][T25616] kobject_add_internal+0x2c8/0x930 [ 848.116353][T25616] kobject_add+0x16a/0x1e0 [ 848.116371][T25616] ? __pfx_kobject_add+0x10/0x10 [ 848.116390][T25616] ? get_device_parent+0x1b3/0x4c0 [ 848.116403][T25616] ? kobject_put+0xb9/0x640 [ 848.116420][T25616] ? device_add+0xc4d/0x1970 [ 848.116437][T25616] device_add+0x294/0x1970 [ 848.116452][T25616] ? __pfx_device_add+0x10/0x10 [ 848.116466][T25616] ? kfree_const+0x5a/0x70 [ 848.116478][T25616] ? kfree+0x1e5/0x6c0 [ 848.116493][T25616] device_create_groups_vargs+0x1f8/0x270 [ 848.116510][T25616] device_create+0xed/0x130 [ 848.116525][T25616] ? __pfx_device_create+0x10/0x10 [ 848.116539][T25616] ? lockdep_init_map_type+0x5c/0x250 [ 848.116551][T25616] ? timer_init_key+0x150/0x310 [ 848.116571][T25616] ? ieee80211_roc_setup+0x136/0x270 [ 848.116583][T25616] ? ieee80211_alloc_hw_nm+0x19f8/0x22e0 [ 848.116601][T25616] mac80211_hwsim_new_radio+0x37c/0x64c0 [ 848.116627][T25616] ? parse_pmsr_capa+0x383/0x700 [ 848.116643][T25616] ? __pfx_parse_pmsr_capa+0x10/0x10 [ 848.116659][T25616] ? kasan_save_track+0x14/0x30 [ 848.116681][T25616] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 848.116711][T25616] ? hwsim_new_radio_nl+0xbcf/0x13f0 [ 848.116742][T25616] hwsim_new_radio_nl+0xc6b/0x13f0 [ 848.116772][T25616] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 848.116807][T25616] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 848.116833][T25616] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 848.116863][T25616] genl_family_rcv_msg_doit+0x214/0x300 [ 848.116889][T25616] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 848.116913][T25616] ? genl_get_cmd+0x3e7/0x760 [ 848.116960][T25616] ? bpf_lsm_capable+0x9/0x10 [ 848.116980][T25616] ? security_capable+0x80/0x260 [ 848.117006][T25616] ? ns_capable+0xd2/0xf0 [ 848.117027][T25616] genl_rcv_msg+0x560/0x800 [ 848.117055][T25616] ? __pfx_genl_rcv_msg+0x10/0x10 [ 848.117081][T25616] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 848.117119][T25616] netlink_rcv_skb+0x159/0x420 [ 848.117142][T25616] ? __pfx_genl_rcv_msg+0x10/0x10 [ 848.117169][T25616] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 848.117203][T25616] ? netlink_deliver_tap+0x1ae/0xcc0 [ 848.117228][T25616] genl_rcv+0x28/0x40 [ 848.117257][T25616] netlink_unicast+0x585/0x850 [ 848.117283][T25616] ? __pfx_netlink_unicast+0x10/0x10 [ 848.117313][T25616] netlink_sendmsg+0x8b0/0xda0 [ 848.117340][T25616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 848.117367][T25616] ? apparmor_socket_sendmsg+0x15b/0x270 [ 848.117398][T25616] ____sys_sendmsg+0xa4d/0xbe0 [ 848.117420][T25616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 848.117444][T25616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 848.117478][T25616] ___sys_sendmsg+0x190/0x1e0 [ 848.117503][T25616] ? __pfx____sys_sendmsg+0x10/0x10 [ 848.117540][T25616] ? find_held_lock+0x2b/0x80 [ 848.117601][T25616] __sys_sendmsg+0x160/0x210 [ 848.117632][T25616] ? __pfx___sys_sendmsg+0x10/0x10 [ 848.117667][T25616] ? __pfx_ksys_write+0x10/0x10 [ 848.117690][T25616] __do_fast_syscall_32+0xe7/0x970 [ 848.117714][T25616] ? lockdep_hardirqs_on+0x78/0x100 [ 848.117737][T25616] do_fast_syscall_32+0x32/0x70 [ 848.117761][T25616] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 848.117784][T25616] RIP: 0023:0xf7f04fec [ 848.117806][T25616] Code: Unable to access opcode bytes at 0xf7f04fc2. [ 848.117814][T25616] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 848.117832][T25616] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 848.117844][T25616] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 848.117854][T25616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 848.117865][T25616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.117876][T25616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 848.117900][T25616] [ 848.118029][T25616] kobject: kobject_add_internal failed for hwsim30 (error: -12 parent: mac80211_hwsim) [ 849.688332][T25655] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3765'. [ 849.692160][T25655] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3765'. [ 849.816883][T25665] fuse: Invalid rootmode [ 850.181840][T24588] Bluetooth: hci3: command tx timeout [ 850.193675][T25689] overlayfs: overlapping lowerdir path [ 850.206694][T25689] overlayfs: overlapping lowerdir path [ 850.494178][T25693] overlayfs: overlapping lowerdir path [ 851.516101][T25714] ubi8: attaching mtd0 [ 851.521055][T25714] ubi8: scanning is finished [ 851.523185][T25714] ubi8: empty MTD device detected [ 851.525879][T25714] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 851.677658][T25717] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 851.683640][T25717] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 851.738693][T25714] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 851.743244][T25717] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 851.783463][T25717] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 852.803131][T25735] overlayfs: overlapping lowerdir path [ 852.828111][T25735] overlayfs: overlapping lowerdir path [ 853.382332][ T42] audit: type=1326 audit(1782424466.541:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25742 comm="syz.0.3786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 853.647278][T25752] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 853.657396][T25752] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.659854][T25752] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.664062][T25752] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 853.726664][ T42] audit: type=1326 audit(1782424466.541:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25742 comm="syz.0.3786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 853.753952][ T42] audit: type=1326 audit(1782424466.711:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25742 comm="syz.0.3786" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 853.774212][ T42] audit: type=1326 audit(1782424466.741:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25742 comm="syz.0.3786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 853.792901][ T42] audit: type=1326 audit(1782424466.741:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25742 comm="syz.0.3786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 853.813924][ T42] audit: type=1326 audit(1782424466.801:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25742 comm="syz.0.3786" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 854.580623][T25762] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 856.554363][T25798] overlayfs: overlapping lowerdir path [ 856.566089][T25798] overlayfs: overlapping lowerdir path [ 857.451611][T25813] fuse: Bad value for 'rootmode' [ 858.130448][T25828] overlayfs: failed to resolve './file1': -2 [ 858.434518][T17086] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 858.573955][T17086] usb 10-1: device descriptor read/64, error -71 [ 858.685605][ T5815] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 858.813986][T17086] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 858.833958][ T5815] usb 7-1: Using ep0 maxpacket: 32 [ 858.837728][ T5815] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.841216][ T5815] usb 7-1: config 0 has no interfaces? [ 858.846186][ T5815] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 858.849578][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.852812][ T5815] usb 7-1: Product: syz [ 858.854567][ T5815] usb 7-1: Manufacturer: syz [ 858.856311][ T5815] usb 7-1: SerialNumber: syz [ 858.868395][ T5815] usb 7-1: config 0 descriptor?? [ 858.953997][T17086] usb 10-1: device descriptor read/64, error -71 [ 859.064329][T17086] usb usb10-port1: attempt power cycle [ 859.403875][T17086] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 859.425336][T17086] usb 10-1: device descriptor read/8, error -71 [ 859.663897][T17086] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 859.684543][T17086] usb 10-1: device descriptor read/8, error -71 [ 859.794124][T17086] usb usb10-port1: unable to enumerate USB device [ 861.385938][T25894] syzkaller0: entered promiscuous mode [ 861.388233][T25894] syzkaller0: entered allmulticast mode [ 861.496082][ T50] usb 7-1: USB disconnect, device number 43 [ 861.671009][T25917] netlink: 'syz.2.3819': attribute type 9 has an invalid length. [ 861.678741][T25917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3819'. [ 861.885519][T25917] macvlan2: entered promiscuous mode [ 861.898303][T25917] hsr0: entered promiscuous mode [ 861.934204][T25917] macvlan2: entered allmulticast mode [ 861.947445][T25917] hsr0: entered allmulticast mode [ 861.961909][T25917] hsr_slave_0: entered allmulticast mode [ 861.973609][T25917] hsr_slave_1: entered allmulticast mode [ 862.595447][T25938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3822'. [ 862.595573][T25939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3822'. [ 863.590547][T25954] netlink: 'syz.1.3825': attribute type 2 has an invalid length. [ 863.611546][T25954] : entered promiscuous mode [ 863.702714][T25960] CUSE: unknown device info "" [ 863.702731][T25960] CUSE: unknown device info "Ö" [ 863.702739][T25960] CUSE: unknown device info "" [ 863.702747][T25960] CUSE: unknown device info "" [ 863.702754][T25960] CUSE: unknown device info "" [ 863.702761][T25960] CUSE: unknown device info "" [ 863.702768][T25960] CUSE: unknown device info "ðÿÿÿ" [ 863.702776][T25960] CUSE: unknown device info "" [ 863.702783][T25960] CUSE: unknown device info "" [ 863.702791][T25960] CUSE: unknown device info "" [ 863.702799][T25960] CUSE: unknown device info "" [ 863.702805][T25960] CUSE: unknown device info "r" [ 863.702813][T25960] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 863.702821][T25960] CUSE: unknown device info "ÿÿÿÿ" [ 863.702830][T25960] CUSE: unknown device info "" [ 863.702838][T25960] CUSE: unknown device info "€" [ 863.702847][T25960] CUSE: DEVNAME unspecified [ 863.743348][T25962] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3828'. [ 863.766896][T25954] syz.1.3825: attempt to access beyond end of device [ 863.766896][T25954] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 863.771039][T25954] gfs2: error -5 reading superblock [ 863.773013][T25963] netlink: 'syz.1.3825': attribute type 6 has an invalid length. [ 863.866675][T25981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3834'. [ 863.871461][T25981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3834'. [ 865.565466][T25991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3835'. [ 865.568779][T25991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.568796][T25991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.578998][T25991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 865.579021][T25991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.704636][ T50] ------------[ cut here ]------------ [ 865.707583][ T50] workqueue: cannot queue hci_conn_timeout on wq hci2 [ 865.709848][ T50] WARNING: kernel/workqueue.c:2305 at __queue_work+0xd2d/0x12b0, CPU#2: kworker/2:1/50 [ 865.712734][ T50] Modules linked in: [ 865.714199][ T50] CPU: 2 UID: 0 PID: 50 Comm: kworker/2:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 865.717434][ T50] Tainted: [L]=SOFTLOCKUP [ 865.718762][ T50] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 865.721826][ T50] Workqueue: events l2cap_chan_timeout [ 865.723505][ T50] RIP: 0010:__queue_work+0xd31/0x12b0 [ 865.725144][ T50] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d 13 82 10 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 865.730951][ T50] RSP: 0000:ffffc9000071fa28 EFLAGS: 00010046 [ 865.732804][ T50] RAX: dffffc0000000000 RBX: ffff88801b8f4c00 RCX: 1ffff1100956914b [ 865.735200][ T50] RDX: ffff888024d74970 RSI: ffffffff8a901670 RDI: ffffffff90deea00 [ 865.737596][ T50] RBP: ffff88804ab48a40 R08: 0000000000000005 R09: 0000000000000000 [ 865.740023][ T50] R10: 0000000000200000 R11: 0000000000000000 R12: ffff888024d74800 [ 865.742421][ T50] R13: ffff88801dbd2540 R14: ffff88804ab48a88 R15: ffff88804ab48a48 [ 865.744791][ T50] FS: 0000000000000000(0000) GS:ffff8880972f0000(0000) knlGS:0000000000000000 [ 865.747486][ T50] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 865.749489][ T50] CR2: 0000000080001080 CR3: 0000000060396000 CR4: 0000000000352ef0 [ 865.751912][ T50] Call Trace: [ 865.752954][ T50] [ 865.753883][ T50] ? __cancel_work+0x2b5/0x340 [ 865.755357][ T50] ? lockdep_hardirqs_on+0x78/0x100 [ 865.756969][ T50] ? __cancel_work+0x245/0x340 [ 865.758456][ T50] __queue_delayed_work+0x357/0x450 [ 865.760079][ T50] queue_delayed_work_on+0x180/0x1e0 [ 865.761717][ T50] l2cap_chan_del+0x644/0x920 [ 865.763179][ T50] l2cap_chan_close+0x3b0/0xa70 [ 865.764693][ T50] ? __pfx_l2cap_chan_close+0x10/0x10 [ 865.766353][ T50] l2cap_chan_timeout+0x211/0x3f0 [ 865.767899][ T50] process_one_work+0xa23/0x1940 [ 865.769440][ T50] ? __pfx_process_one_work+0x10/0x10 [ 865.771101][ T50] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 865.772804][ T50] worker_thread+0x5ef/0xe50 [ 865.774231][ T50] ? kthread+0x13a/0x450 [ 865.775551][ T50] ? __pfx_worker_thread+0x10/0x10 [ 865.777121][ T50] kthread+0x370/0x450 [ 865.778407][ T50] ? __pfx_kthread+0x10/0x10 [ 865.779873][ T50] ret_from_fork+0x72b/0xd50 [ 865.781310][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 865.782916][ T50] ? __switch_to+0x800/0x10f0 [ 865.784369][ T50] ? __pfx_kthread+0x10/0x10 [ 865.785803][ T50] ret_from_fork_asm+0x1a/0x30 [ 865.787287][ T50] [ 865.788254][ T50] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 865.790493][ T50] CPU: 2 UID: 0 PID: 50 Comm: kworker/2:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 865.793710][ T50] Tainted: [L]=SOFTLOCKUP [ 865.794993][ T50] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 865.798030][ T50] Workqueue: events l2cap_chan_timeout [ 865.799697][ T50] Call Trace: [ 865.800760][ T50] [ 865.801687][ T50] dump_stack_lvl+0x100/0x190 [ 865.803148][ T50] vpanic+0x552/0x970 [ 865.804384][ T50] ? __pfx_vpanic+0x10/0x10 [ 865.805801][ T50] panic+0xd1/0xe0 [ 865.806969][ T50] ? __pfx_panic+0x10/0x10 [ 865.808349][ T50] ? check_panic_on_warn+0x1f/0x90 [ 865.809956][ T50] check_panic_on_warn.cold+0x19/0x34 [ 865.811583][ T50] ? __queue_work+0xd2d/0x12b0 [ 865.813065][ T50] __warn.cold+0x191/0x318 [ 865.814492][ T50] __report_bug+0x30f/0x440 [ 865.815894][ T50] ? __queue_work+0xd2d/0x12b0 [ 865.817308][ T50] ? __pfx___report_bug+0x10/0x10 [ 865.818860][ T50] ? __pfx_hci_conn_timeout+0x10/0x10 [ 865.820521][ T50] ? __pfx_debug_object_assert_init+0x10/0x10 [ 865.822314][ T50] report_bug_entry+0xe1/0x290 [ 865.823631][ T50] ? __queue_work+0xd31/0x12b0 [ 865.824955][ T50] handle_bug+0x1cd/0x2a0 [ 865.826309][ T50] exc_invalid_op+0x17/0x50 [ 865.827718][ T50] asm_exc_invalid_op+0x1a/0x20 [ 865.829216][ T50] RIP: 0010:__queue_work+0xd31/0x12b0 [ 865.830899][ T50] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d 13 82 10 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 865.836696][ T50] RSP: 0000:ffffc9000071fa28 EFLAGS: 00010046 [ 865.838574][ T50] RAX: dffffc0000000000 RBX: ffff88801b8f4c00 RCX: 1ffff1100956914b [ 865.840994][ T50] RDX: ffff888024d74970 RSI: ffffffff8a901670 RDI: ffffffff90deea00 [ 865.843440][ T50] RBP: ffff88804ab48a40 R08: 0000000000000005 R09: 0000000000000000 [ 865.845851][ T50] R10: 0000000000200000 R11: 0000000000000000 R12: ffff888024d74800 [ 865.848241][ T50] R13: ffff88801dbd2540 R14: ffff88804ab48a88 R15: ffff88804ab48a48 [ 865.850663][ T50] ? __pfx_hci_conn_timeout+0x10/0x10 [ 865.852316][ T50] ? __queue_work+0xcff/0x12b0 [ 865.853827][ T50] ? __cancel_work+0x2b5/0x340 [ 865.855305][ T50] ? lockdep_hardirqs_on+0x78/0x100 [ 865.856901][ T50] ? __cancel_work+0x245/0x340 [ 865.858384][ T50] __queue_delayed_work+0x357/0x450 [ 865.860017][ T50] queue_delayed_work_on+0x180/0x1e0 [ 865.861650][ T50] l2cap_chan_del+0x644/0x920 [ 865.863142][ T50] l2cap_chan_close+0x3b0/0xa70 [ 865.864639][ T50] ? __pfx_l2cap_chan_close+0x10/0x10 [ 865.866307][ T50] l2cap_chan_timeout+0x211/0x3f0 [ 865.867865][ T50] process_one_work+0xa23/0x1940 [ 865.869429][ T50] ? __pfx_process_one_work+0x10/0x10 [ 865.871118][ T50] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 865.872777][ T50] worker_thread+0x5ef/0xe50 [ 865.874222][ T50] ? kthread+0x13a/0x450 [ 865.875543][ T50] ? __pfx_worker_thread+0x10/0x10 [ 865.877112][ T50] kthread+0x370/0x450 [ 865.878384][ T50] ? __pfx_kthread+0x10/0x10 [ 865.879809][ T50] ret_from_fork+0x72b/0xd50 [ 865.881262][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 865.882829][ T50] ? __switch_to+0x800/0x10f0 [ 865.884272][ T50] ? __pfx_kthread+0x10/0x10 [ 865.885712][ T50] ret_from_fork_asm+0x1a/0x30 [ 865.887196][ T50] [ 865.888761][ T50] Kernel Offset: disabled [ 865.890110][ T50] Rebooting in 86400 seconds..