last executing test programs: 2m32.913290314s ago: executing program 32 (id=250): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x4) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) flock(r0, 0x5) 2m32.600399351s ago: executing program 33 (id=254): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r1, r2, 0x1, 0x0) 2m27.619705583s ago: executing program 0 (id=336): syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xa, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000700)="b9d5e01a991e924ccc78cbc0a3ba", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open(0x0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b04, 0x0) 2m25.373322966s ago: executing program 0 (id=339): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) truncate(&(0x7f0000000080)='./file0\x00', 0x4) 2m25.302591127s ago: executing program 0 (id=344): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) 2m25.245817099s ago: executing program 0 (id=345): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}}) 2m25.173766824s ago: executing program 0 (id=348): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) timer_create(0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x800) writev(r0, &(0x7f0000005400)=[{&(0x7f0000005440)="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", 0x1aa}], 0x1) 2m24.960510724s ago: executing program 0 (id=358): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) mkdirat$cgroup(r0, &(0x7f0000000580)='syz0\x00', 0x1ff) 2m24.894478558s ago: executing program 34 (id=358): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) mkdirat$cgroup(r0, &(0x7f0000000580)='syz0\x00', 0x1ff) 2m22.18057764s ago: executing program 4 (id=392): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0xffffffffffffff24, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x0, 0x3, 0x0, 0x0, {{0xfffd, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0x0, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1fde, 0x3, 0x5}, {0x6, 0x2, 0x2}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) 2m21.786343035s ago: executing program 4 (id=394): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r0, &(0x7f0000000180)=0xffffffffffffffff, 0x12) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='10000', 0x5) 2m21.115959236s ago: executing program 4 (id=405): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000400)={0x0, {{0xa, 0xfffc, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0x0, @loopback, 0xfffffffe}}}, 0x11f) close_range(r0, 0xffffffffffffffff, 0x0) 2m21.009286675s ago: executing program 4 (id=406): connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x101180, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000005c0)={0x0, 0x4731, 0x400, 0x3, 0x279, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x3, 0x10000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xb0d, 0x0, 0x0, 0x1000, 0x80000001, 0x0, 0x0, 0x103}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x20003, 0x0, r1}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b15, 0x1, 0x0, 0x8000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x0, 0xfffffffd, 0x68, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2fdf, 0x800, 0x1, 0x81}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4000624f, 0x4000, 0x0, 0x61}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x0, 0xe53, 0x0, 0x0}}, 0x0) 2m20.167089741s ago: executing program 4 (id=413): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x3, 0x6, @link_local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m20.084370503s ago: executing program 4 (id=415): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2m12.14187658s ago: executing program 6 (id=554): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x800099eb, 0x100, 0x0, 0x1cb, 0x0, r0}, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 2m11.989593242s ago: executing program 6 (id=559): mkdir(&(0x7f0000000340)='./file0\x00', 0xb8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) chroot(&(0x7f0000000100)='./file0\x00') write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50) umount2(&(0x7f0000000140)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000002480)="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", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x6, {0x7, 0x2d, 0x0, 0x6438207, 0x0, 0xffff, 0x5, 0xf84, 0x0, 0x0, 0x80, 0xfd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m11.865815045s ago: executing program 6 (id=560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 2m11.828897392s ago: executing program 6 (id=561): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x2, 0x70000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x1, 0x60000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2m11.708480277s ago: executing program 6 (id=562): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 2m11.648988869s ago: executing program 6 (id=563): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x140) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x805}, @void, @x25={0x0, 0x2, 0xe9}}, 0x7) 2m4.714957661s ago: executing program 35 (id=415): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff2, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1m57.735229134s ago: executing program 5 (id=718): r0 = socket(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000280)={0x20000001}) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r3 = dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000300)={0x200f}) 1m57.580040007s ago: executing program 5 (id=723): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x15e) r2 = fanotify_init(0xf00, 0x8000) fanotify_mark(r2, 0x1, 0x5800003a, r1, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) 1m57.572917603s ago: executing program 5 (id=724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0) 1m57.492210326s ago: executing program 5 (id=725): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x50) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [], {}, [], {0x10, 0x5}, {0x20, 0x3}}, 0x24, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 1m57.387520371s ago: executing program 5 (id=726): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2c00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) 1m57.010288461s ago: executing program 5 (id=727): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 1m56.93688794s ago: executing program 36 (id=727): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 1m56.619961211s ago: executing program 37 (id=563): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x140) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x805}, @void, @x25={0x0, 0x2, 0xe9}}, 0x7) 1m33.047837244s ago: executing program 9 (id=943): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x800c6613, 0x0) 1m33.047505806s ago: executing program 9 (id=945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m32.970181489s ago: executing program 9 (id=948): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x200080, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1m32.487836915s ago: executing program 9 (id=953): mkdir(&(0x7f0000000340)='./file0\x00', 0xb8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) chroot(&(0x7f0000000100)='./file0\x00') write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50) umount2(&(0x7f0000000140)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000002480)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x6, {0x7, 0x2d, 0x0, 0x6438207, 0x0, 0xffff, 0x5, 0xf84, 0x0, 0x0, 0x80, 0xfd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m32.415593311s ago: executing program 9 (id=954): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m32.348590154s ago: executing program 9 (id=955): r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ftruncate(r2, 0x1) 1m17.318336576s ago: executing program 38 (id=955): r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ftruncate(r2, 0x1) 52.888158133s ago: executing program 8 (id=1260): unshare(0x28000600) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb31e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) unshare(0x2a020480) 52.808956131s ago: executing program 8 (id=1261): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0xa, 0x80805, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 52.79324196s ago: executing program 8 (id=1262): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x2, 0x5], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 52.578545755s ago: executing program 8 (id=1265): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000096, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 52.554751906s ago: executing program 8 (id=1266): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xfffffee2) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000480)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/195, 0xc3}], 0x1}, 0x0) 52.38765888s ago: executing program 8 (id=1267): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8002, 0x7ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, r0, 0x6faa6000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 52.283404831s ago: executing program 39 (id=1267): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8002, 0x7ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, r0, 0x6faa6000) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 4.263142467s ago: executing program 3 (id=1778): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x25a7, 0x4) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) 3.913631453s ago: executing program 3 (id=1790): syz_usb_disconnect(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff9, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffff92d, 0x2, 0x2, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200008c2}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @random="000863ee0a3d"}, 0x14) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.210077356s ago: executing program 7 (id=1785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x80, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc4"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x0, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x40007, 0x0}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.07150485s ago: executing program 3 (id=1786): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000002c0)={0x0, 0x1, 0x800, 0x203, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f73, 0x8, 0x6, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10080700, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x0, 0x125, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x82, 0xbf, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 3.07129082s ago: executing program 7 (id=1787): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\t\x00\x00\x00\f\x00\x00\x00B\x00\x00\x00@'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x10) 2.435156308s ago: executing program 7 (id=1800): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) r0 = socket$unix(0x1, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) socket$inet(0x2, 0xf, 0xfffffffd) fchown(r0, 0x0, 0x0) 2.344785408s ago: executing program 2 (id=1792): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 2.101099467s ago: executing program 7 (id=1793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x4, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 1.933101934s ago: executing program 3 (id=1797): ioperm(0x7, 0x81, 0xfffffffffffffffe) r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) 1.916997938s ago: executing program 1 (id=1798): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8a60deaa74610a7b4f3b38edc14e2979e63a275c40945c0f3ff765828123d0493bb2b49e4b234864ca6a3248cdbecca13b"], &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) read$FUSE(r0, &(0x7f00000093c0)={0x2020}, 0xdb983f296b9cca05) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000180)={{0x80, 0xf7}, 'port1\x00', 0x3fb, 0x2062f, 0x4, 0x6, 0x1, 0x1000, 0x2, 0x0, 0x7, 0xfd}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e0b7d0510", @ANYRES16=0x0, @ANYBLOB="2d18e15b83"], 0xe) 1.34231868s ago: executing program 1 (id=1799): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)) 1.342168023s ago: executing program 7 (id=1801): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}, 0x7fffffff}}, {{0xa, 0x0, 0x2000, @remote}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) 1.27227334s ago: executing program 7 (id=1802): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r1, 0x9) recvfrom$inet(r1, 0x0, 0x0, 0x2, 0x0, 0x0) 1.037053131s ago: executing program 3 (id=1803): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000340)=r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.033270002s ago: executing program 1 (id=1811): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 967.257375ms ago: executing program 3 (id=1804): iopl(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_sctp(0x2, 0x400000000001, 0x84) listen(r1, 0xda8c) accept4(r1, 0x0, 0x0, 0x0) 735.318917ms ago: executing program 2 (id=1805): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 659.668593ms ago: executing program 2 (id=1806): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa817}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 543.622018ms ago: executing program 1 (id=1807): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000640)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 453.138906ms ago: executing program 2 (id=1808): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r2, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2022, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 64.682868ms ago: executing program 2 (id=1809): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x54, 0x94, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x4, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 56.949127ms ago: executing program 1 (id=1810): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x32) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) 43.864671ms ago: executing program 2 (id=1812): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 0s ago: executing program 1 (id=1813): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x800099eb, 0x100, 0x0, 0x1cb, 0x0, r0}, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) kernel console output (not intermixed with test programs): 0x14/0x30 [ 109.720040][ T8498] ? __kasan_kmalloc+0xaa/0xb0 [ 109.720066][ T8498] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 109.720088][ T8498] ? pkcs7_parse_message+0x15f/0x870 [ 109.720120][ T8498] pkcs7_parse_message+0x289/0x870 [ 109.720149][ T8498] ? down_read+0x13b/0x4c0 [ 109.720176][ T8498] verify_pkcs7_signature+0x30/0xa0 [ 109.720199][ T8498] pkcs7_preparse+0x88/0xc0 [ 109.720217][ T8498] ? __pfx_pkcs7_view_content+0x10/0x10 [ 109.720237][ T8498] ? __pfx_pkcs7_preparse+0x10/0x10 [ 109.720255][ T8498] __key_create_or_update+0x463/0xe30 [ 109.720282][ T8498] ? __pfx___key_create_or_update+0x10/0x10 [ 109.720425][ T8498] ? lookup_user_key+0x3f3/0x1300 [ 109.720452][ T8498] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 109.720485][ T8498] ? __pfx_keyring_search_iterator+0x10/0x10 [ 109.720507][ T8498] key_create_or_update+0x42/0x60 [ 109.720523][ T8498] __do_sys_add_key+0x2e8/0x460 [ 109.720540][ T8498] ? __pfx___do_sys_add_key+0x10/0x10 [ 109.720561][ T8498] __do_fast_syscall_32+0x13a/0x8b0 [ 109.720578][ T8498] do_fast_syscall_32+0x32/0x70 [ 109.720592][ T8498] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.720607][ T8498] RIP: 0023:0xf6feefec [ 109.720622][ T8498] Code: Unable to access opcode bytes at 0xf6feefc2. [ 109.720628][ T8498] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 109.720640][ T8498] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 109.720647][ T8498] RDX: 0000000080000100 RSI: 00000000000000be RDI: 000000001c099daf [ 109.720654][ T8498] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.720661][ T8498] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 109.720667][ T8498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.720681][ T8498] [ 110.866382][ T8556] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 110.872733][ T8556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.884081][ T8556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.891043][ T8556] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 110.892630][ T8556] bond0 (unregistering): Released all slaves [ 111.028464][ T8561] FAULT_INJECTION: forcing a failure. [ 111.028464][ T8561] name failslab, interval 1, probability 0, space 0, times 0 [ 111.028487][ T8561] CPU: 3 UID: 0 PID: 8561 Comm: syz.9.876 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.028503][ T8561] Tainted: [L]=SOFTLOCKUP [ 111.028507][ T8561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.028514][ T8561] Call Trace: [ 111.028518][ T8561] [ 111.028523][ T8561] dump_stack_lvl+0x100/0x190 [ 111.028542][ T8561] should_fail_ex.cold+0x5/0xa [ 111.028558][ T8561] should_failslab+0xc2/0x120 [ 111.028576][ T8561] kmem_cache_alloc_noprof+0x92/0x6a0 [ 111.028592][ T8561] ? dev_queue_xmit_nit+0x38/0xa60 [ 111.028603][ T8561] ? skb_clone+0x190/0x400 [ 111.028616][ T8561] skb_clone+0x190/0x400 [ 111.028627][ T8561] dev_queue_xmit_nit+0x255/0xa60 [ 111.028645][ T8561] dev_hard_start_xmit+0x2f5/0x760 [ 111.028663][ T8561] __dev_queue_xmit+0x1bbf/0x4970 [ 111.028684][ T8561] ? __pfx___dev_queue_xmit+0x10/0x10 [ 111.028706][ T8561] ? rcu_is_watching+0x13/0xc0 [ 111.028723][ T8561] ? __skb_clone+0x570/0x760 [ 111.028742][ T8561] netlink_deliver_tap+0xa4d/0xcc0 [ 111.028760][ T8561] netlink_unicast+0x62b/0x850 [ 111.028779][ T8561] ? __pfx_netlink_unicast+0x10/0x10 [ 111.028799][ T8561] netlink_sendmsg+0x8b0/0xda0 [ 111.028818][ T8561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.028835][ T8561] ? apparmor_socket_sendmsg+0x165/0x280 [ 111.028856][ T8561] ____sys_sendmsg+0xa4d/0xbe0 [ 111.028870][ T8561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.028887][ T8561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.028907][ T8561] ___sys_sendmsg+0x190/0x1e0 [ 111.028922][ T8561] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.028937][ T8561] ? futex_wait+0x11e/0x370 [ 111.028956][ T8561] ? find_held_lock+0x2b/0x80 [ 111.028978][ T8561] __sys_sendmsg+0x160/0x210 [ 111.028989][ T8561] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.029007][ T8561] __do_fast_syscall_32+0x13a/0x8b0 [ 111.029037][ T8561] do_fast_syscall_32+0x32/0x70 [ 111.029053][ T8561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.029070][ T8561] RIP: 0023:0xf703efec [ 111.029083][ T8561] Code: Unable to access opcode bytes at 0xf703efc2. [ 111.029088][ T8561] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 111.029101][ T8561] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 111.029127][ T8561] RDX: 000000001400c0b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.029134][ T8561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.029141][ T8561] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.029148][ T8561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.029163][ T8561] [ 111.146150][ T8565] FAULT_INJECTION: forcing a failure. [ 111.146150][ T8565] name failslab, interval 1, probability 0, space 0, times 0 [ 111.146172][ T8565] CPU: 3 UID: 0 PID: 8565 Comm: syz.8.878 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.146188][ T8565] Tainted: [L]=SOFTLOCKUP [ 111.146192][ T8565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.146199][ T8565] Call Trace: [ 111.146204][ T8565] [ 111.146208][ T8565] dump_stack_lvl+0x100/0x190 [ 111.146228][ T8565] should_fail_ex.cold+0x5/0xa [ 111.146243][ T8565] should_failslab+0xc2/0x120 [ 111.146263][ T8565] __kmalloc_noprof+0xfc/0x840 [ 111.146279][ T8565] ? x509_fabricate_name.isra.0+0x5ea/0xa10 [ 111.146298][ T8565] x509_fabricate_name.isra.0+0x5ea/0xa10 [ 111.146317][ T8565] x509_note_issuer+0xf9/0x210 [ 111.146333][ T8565] asn1_ber_decoder+0xd0c/0x2170 [ 111.146353][ T8565] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 111.146369][ T8565] ? kasan_save_track+0x14/0x30 [ 111.146384][ T8565] ? __kasan_kmalloc+0xaa/0xb0 [ 111.146405][ T8565] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 111.146418][ T8565] ? x509_cert_parse+0x162/0x910 [ 111.146436][ T8565] x509_cert_parse+0x1c9/0x910 [ 111.146454][ T8565] x509_key_preparse+0x65/0x9c0 [ 111.146474][ T8565] asymmetric_key_preparse+0xce/0x1d0 [ 111.146489][ T8565] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 111.146504][ T8565] __key_create_or_update+0x463/0xe30 [ 111.146521][ T8565] ? __pfx___key_create_or_update+0x10/0x10 [ 111.146537][ T8565] ? lookup_user_key+0x3f3/0x1300 [ 111.146556][ T8565] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 111.146578][ T8565] key_create_or_update+0x42/0x60 [ 111.146593][ T8565] __do_sys_add_key+0x2e8/0x460 [ 111.146610][ T8565] ? __pfx___do_sys_add_key+0x10/0x10 [ 111.146631][ T8565] __do_fast_syscall_32+0x13a/0x8b0 [ 111.146648][ T8565] do_fast_syscall_32+0x32/0x70 [ 111.146663][ T8565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.146678][ T8565] RIP: 0023:0xf6feefec [ 111.146690][ T8565] Code: Unable to access opcode bytes at 0xf6feefc2. [ 111.146696][ T8565] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 111.146709][ T8565] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 111.146717][ T8565] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 111.146724][ T8565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.146731][ T8565] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.146738][ T8565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.146754][ T8565] [ 111.405864][ T8585] FAULT_INJECTION: forcing a failure. [ 111.405864][ T8585] name failslab, interval 1, probability 0, space 0, times 0 [ 111.411625][ T8585] CPU: 3 UID: 0 PID: 8585 Comm: syz.8.882 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.411659][ T8585] Tainted: [L]=SOFTLOCKUP [ 111.411668][ T8585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.411682][ T8585] Call Trace: [ 111.411689][ T8585] [ 111.411698][ T8585] dump_stack_lvl+0x100/0x190 [ 111.411732][ T8585] should_fail_ex.cold+0x5/0xa [ 111.411757][ T8585] should_failslab+0xc2/0x120 [ 111.411786][ T8585] __kmalloc_cache_noprof+0x91/0x6d0 [ 111.411808][ T8585] ? do_raw_spin_lock+0x128/0x260 [ 111.411830][ T8585] ? get_mountpoint+0x174/0x4f0 [ 111.411856][ T8585] get_mountpoint+0x174/0x4f0 [ 111.411877][ T8585] do_lock_mount.part.0+0x336/0xb10 [ 111.411908][ T8585] path_mount+0x8f5/0x24c0 [ 111.411941][ T8585] ? __pfx_path_mount+0x10/0x10 [ 111.411969][ T8585] ? lockdep_hardirqs_on+0x7d/0x110 [ 111.412007][ T8585] ? __ia32_sys_mount+0x292/0x310 [ 111.412036][ T8585] __ia32_sys_mount+0x292/0x310 [ 111.412068][ T8585] ? __pfx___ia32_sys_mount+0x10/0x10 [ 111.412109][ T8585] __do_fast_syscall_32+0x13a/0x8b0 [ 111.412139][ T8585] do_fast_syscall_32+0x32/0x70 [ 111.412164][ T8585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.412189][ T8585] RIP: 0023:0xf6feefec [ 111.412210][ T8585] Code: Unable to access opcode bytes at 0xf6feefc2. [ 111.412219][ T8585] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 111.412240][ T8585] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 111.412253][ T8585] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.412265][ T8585] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.412276][ T8585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.412287][ T8585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.412341][ T8585] [ 112.247055][ T8620] fuse: fd is not a fuse device [ 112.249291][ T8618] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 112.285287][ T8618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.297187][ T8618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.305528][ T8618] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 112.313441][ T8618] bond0 (unregistering): Released all slaves [ 112.397996][ T8631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.398014][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.398996][ T8631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.399009][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.671241][ T8657] FAULT_INJECTION: forcing a failure. [ 112.671241][ T8657] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 112.671264][ T8657] CPU: 1 UID: 0 PID: 8657 Comm: syz.7.898 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.671281][ T8657] Tainted: [L]=SOFTLOCKUP [ 112.671286][ T8657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.671294][ T8657] Call Trace: [ 112.671299][ T8657] [ 112.671304][ T8657] dump_stack_lvl+0x100/0x190 [ 112.671324][ T8657] should_fail_ex.cold+0x5/0xa [ 112.671337][ T8657] ? prepare_alloc_pages+0x16d/0x5b0 [ 112.671358][ T8657] should_fail_alloc_page+0xeb/0x140 [ 112.671378][ T8657] prepare_alloc_pages+0x1f0/0x5b0 [ 112.671394][ T8657] ? arch_stack_walk+0xa6/0xf0 [ 112.671409][ T8657] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 112.671426][ T8657] ? stack_trace_save+0x8e/0xc0 [ 112.671441][ T8657] ? __pfx_stack_trace_save+0x10/0x10 [ 112.671456][ T8657] ? is_bpf_text_address+0x94/0x1a0 [ 112.671473][ T8657] ? stack_depot_save_flags+0x27/0x9f0 [ 112.671486][ T8657] ? __kernel_text_address+0xd/0x30 [ 112.671502][ T8657] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.671515][ T8657] ? kasan_save_stack+0x30/0x50 [ 112.671530][ T8657] ? __kasan_kmalloc+0xaa/0xb0 [ 112.671545][ T8657] ? snd_pcm_attach_substream+0x436/0xd20 [ 112.671564][ T8657] ? snd_pcm_open_substream+0x90/0x1850 [ 112.671578][ T8657] ? snd_pcm_oss_open+0x715/0x1380 [ 112.671590][ T8657] ? soundcore_open+0x2e3/0x5a0 [ 112.671600][ T8657] ? chrdev_open+0x234/0x6a0 [ 112.671614][ T8657] ? do_dentry_open+0x6ab/0x14d0 [ 112.671627][ T8657] ? vfs_open+0x82/0x3f0 [ 112.671643][ T8657] ? path_openat+0x19fa/0x2440 [ 112.671681][ T8657] ? do_file_open+0x20e/0x430 [ 112.671696][ T8657] ? do_sys_openat2+0x10f/0x1e0 [ 112.671713][ T8657] ? __ia32_compat_sys_openat+0x12d/0x210 [ 112.671725][ T8657] ? __do_fast_syscall_32+0x13a/0x8b0 [ 112.671741][ T8657] ? do_fast_syscall_32+0x32/0x70 [ 112.671755][ T8657] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.671781][ T8657] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.671800][ T8657] ? policy_nodemask+0xed/0x4f0 [ 112.671819][ T8657] alloc_pages_mpol+0x201/0x550 [ 112.671837][ T8657] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 112.671854][ T8657] ? __kasan_kmalloc+0xaa/0xb0 [ 112.671871][ T8657] alloc_pages_noprof+0x1a/0x160 [ 112.671883][ T8657] alloc_pages_exact_noprof+0x32/0xf0 [ 112.671901][ T8657] snd_pcm_attach_substream+0x45d/0xd20 [ 112.671921][ T8657] snd_pcm_open_substream+0x90/0x1850 [ 112.671937][ T8657] ? __kasan_kmalloc+0xaa/0xb0 [ 112.671952][ T8657] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 112.671967][ T8657] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 112.671980][ T8657] ? snd_pcm_oss_open+0x5c5/0x1380 [ 112.671994][ T8657] snd_pcm_oss_open+0x715/0x1380 [ 112.672012][ T8657] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 112.672027][ T8657] ? __pfx_default_wake_function+0x10/0x10 [ 112.672055][ T8657] ? __lock_acquire+0x5c0/0x1f40 [ 112.672078][ T8657] ? do_raw_spin_lock+0x128/0x260 [ 112.672098][ T8657] ? soundcore_open+0x231/0x5a0 [ 112.672110][ T8657] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 112.672124][ T8657] soundcore_open+0x2e3/0x5a0 [ 112.672136][ T8657] ? __pfx_soundcore_open+0x10/0x10 [ 112.672148][ T8657] chrdev_open+0x234/0x6a0 [ 112.672165][ T8657] ? __pfx_chrdev_open+0x10/0x10 [ 112.672181][ T8657] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 112.672204][ T8657] do_dentry_open+0x6ab/0x14d0 [ 112.672218][ T8657] ? __pfx_chrdev_open+0x10/0x10 [ 112.672238][ T8657] vfs_open+0x82/0x3f0 [ 112.672260][ T8657] path_openat+0x19fa/0x2440 [ 112.672278][ T8657] ? __pfx_path_openat+0x10/0x10 [ 112.672324][ T8657] do_file_open+0x20e/0x430 [ 112.672341][ T8657] ? __pfx_do_file_open+0x10/0x10 [ 112.672368][ T8657] ? _raw_spin_unlock+0x28/0x50 [ 112.672380][ T8657] ? alloc_fd+0x471/0x7a0 [ 112.672400][ T8657] do_sys_openat2+0x10f/0x1e0 [ 112.672418][ T8657] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.672442][ T8657] __ia32_compat_sys_openat+0x12d/0x210 [ 112.672454][ T8657] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 112.672465][ T8657] ? ksys_write+0x1ac/0x250 [ 112.672483][ T8657] __do_fast_syscall_32+0x13a/0x8b0 [ 112.672500][ T8657] do_fast_syscall_32+0x32/0x70 [ 112.672516][ T8657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.672530][ T8657] RIP: 0023:0xf7f52fec [ 112.672544][ T8657] Code: Unable to access opcode bytes at 0xf7f52fc2. [ 112.672550][ T8657] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 112.672562][ T8657] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000300 [ 112.672569][ T8657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.672576][ T8657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.672582][ T8657] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 112.672588][ T8657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.672603][ T8657] [ 113.338757][ T8665] syzkaller1: entered promiscuous mode [ 113.338778][ T8665] syzkaller1: entered allmulticast mode [ 113.755204][ T8674] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 113.778797][ T8674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.782404][ T8674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.785782][ T8674] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 113.791732][ T8674] bond0 (unregistering): Released all slaves [ 114.180450][ T8687] netlink: 156 bytes leftover after parsing attributes in process `syz.9.908'. [ 114.237750][ T8691] jffs2: notice: (8691) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 116.297407][ T5738] Bluetooth: hci0: command 0x1003 tx timeout [ 116.301910][ T5733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.884163][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.7.915'. [ 117.685993][ T5826] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 117.836226][ T5826] usb 12-1: Using ep0 maxpacket: 32 [ 117.839250][ T5826] usb 12-1: unable to get BOS descriptor or descriptor too short [ 117.839288][ T5826] usb 12-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 117.840300][ T5826] usb 12-1: config 14 has an invalid interface number: 57 but max is 1 [ 117.840322][ T5826] usb 12-1: config 14 has an invalid interface number: 81 but max is 1 [ 117.840341][ T5826] usb 12-1: config 14 has no interface number 0 [ 117.840356][ T5826] usb 12-1: config 14 has no interface number 1 [ 117.840405][ T5826] usb 12-1: config 14 interface 81 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 117.840425][ T5826] usb 12-1: config 14 interface 81 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 117.840446][ T5826] usb 12-1: config 14 interface 81 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 117.840470][ T5826] usb 12-1: config 14 interface 81 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 117.840494][ T5826] usb 12-1: config 14 interface 81 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 117.840518][ T5826] usb 12-1: config 14 interface 81 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 117.840537][ T5826] usb 12-1: config 14 interface 81 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.840561][ T5826] usb 12-1: config 14 interface 57 has no altsetting 0 [ 117.840578][ T5826] usb 12-1: config 14 interface 81 has no altsetting 0 [ 117.843621][ T5826] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.843641][ T5826] usb 12-1: Product: syz [ 117.843653][ T5826] usb 12-1: Manufacturer: syz [ 117.843664][ T5826] usb 12-1: SerialNumber: syz [ 117.978080][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.8.934'. [ 117.979669][ T8747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.084645][ T8757] warning: `syz.1.938' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.258257][ T8761] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20001 [ 118.270008][ T5826] legousbtower 12-1:14.57: interrupt endpoints not found [ 118.301046][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.8.940'. [ 118.570096][ T8782] netlink: 20 bytes leftover after parsing attributes in process `syz.8.949'. [ 118.570908][ T8782] netlink: 20 bytes leftover after parsing attributes in process `syz.8.949'. [ 118.668406][ T5826] legousbtower 12-1:14.81: LEGO USB Tower firmware version is 0.0 build 0 [ 118.669463][ T5826] legousbtower 12-1:14.81: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 119.080006][ T8762] ceph: No mds server is up or the cluster is laggy [ 119.223654][ T8798] usb 12-1: Couldn't submit interrupt_out_urb -90 [ 119.425549][ T30] usb 12-1: USB disconnect, device number 4 [ 119.433435][ T30] legousbtower 12-1:14.81: LEGO USB Tower #-160 now disconnected [ 119.533757][ T8800] netlink: 'syz.8.957': attribute type 27 has an invalid length. [ 119.797035][ T8806] veth1_macvtap: left promiscuous mode [ 120.057659][ T5449] veth1_macvtap: entered promiscuous mode [ 120.624022][ T8834] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 120.689808][ T8843] gadgetfs: bound to dummy_udc driver [ 120.854510][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.7.971'. [ 120.956850][ T7017] e1000 0000:00:06.0 eth0: Reset adapter [ 121.159825][ T8883] fuse: fd is not a fuse device [ 121.554060][ T5826] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 123.257123][ T5880] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 131.855479][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'. [ 131.867474][ T43] audit: type=1326 audit(1790702766.469:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.7.988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 131.867520][ T43] audit: type=1326 audit(1790702766.469:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.7.988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 131.869008][ T43] audit: type=1326 audit(1790702766.479:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.7.988" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 131.869623][ T43] audit: type=1326 audit(1790702766.479:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.7.988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 131.869765][ T43] audit: type=1326 audit(1790702766.479:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.7.988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 131.870136][ T43] audit: type=1326 audit(1790702766.479:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.7.988" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 131.870578][ T43] audit: type=1326 audit(1790702766.479:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.7.988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 131.870620][ T43] audit: type=1326 audit(1790702766.479:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.7.988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 131.871143][ T43] audit: type=1326 audit(1790702766.479:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.7.988" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 131.871574][ T43] audit: type=1326 audit(1790702766.479:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.7.988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52fec code=0x7ffc0000 [ 132.457506][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.457538][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.375542][ T9040] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 133.376475][ T9040] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 133.535838][ T9046] tipc: Failed to remove unknown binding: 66,1,1/0:2812572676/2812572678 [ 133.578462][ T9050] netlink: 'syz.8.1015': attribute type 10 has an invalid length. [ 133.579153][ T9050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.579902][ T9050] team0: Port device netdevsim1 added [ 133.678493][ T9056] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1018'. [ 133.678542][ T9056] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1018'. [ 133.785058][ T9065] input: syz0 as /devices/virtual/input/input8 [ 134.273600][ T9095] netlink: 'syz.1.1030': attribute type 1 has an invalid length. [ 134.301640][ T9095] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.335778][ T9095] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.336339][ T9095] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 134.337207][ T9095] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 134.452875][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.459736][ T5738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.462884][ T5738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.463913][ T5738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.477493][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.491289][ T9099] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 134.500464][ T9099] bond3: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 134.798868][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 134.985127][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.104886][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.178518][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.267828][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.309497][ T9101] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.309609][ T9101] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.309699][ T9101] bridge_slave_0: entered allmulticast mode [ 135.311038][ T9101] bridge_slave_0: entered promiscuous mode [ 135.313279][ T9101] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.313398][ T9101] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.313492][ T9101] bridge_slave_1: entered allmulticast mode [ 135.314801][ T9101] bridge_slave_1: entered promiscuous mode [ 135.331078][ T9101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.334893][ T9101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.350718][ T9101] team0: Port device team_slave_0 added [ 135.352627][ T9101] team0: Port device team_slave_1 added [ 135.379941][ T9101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.379953][ T9101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.379966][ T9101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.380848][ T9101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.380855][ T9101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.380868][ T9101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.424921][ T9101] hsr_slave_0: entered promiscuous mode [ 135.426403][ T9101] hsr_slave_1: entered promiscuous mode [ 135.427176][ T9101] debugfs: 'hsr0' already exists in 'hsr' [ 135.427189][ T9101] Cannot create hsr debugfs directory [ 135.457601][ T12] bridge_slave_1: left allmulticast mode [ 135.457628][ T12] bridge_slave_1: left promiscuous mode [ 135.457797][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.459836][ T12] bridge_slave_0: left allmulticast mode [ 135.459853][ T12] bridge_slave_0: left promiscuous mode [ 135.459997][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.813239][ T5449] 8021q: adding VLAN 0 to HW filter on device eth18 [ 135.819556][ T12] hsr_slave_0: left promiscuous mode [ 135.819922][ T12] hsr_slave_1: left promiscuous mode [ 135.822528][ T12] veth1_macvtap: left promiscuous mode [ 135.822557][ T12] veth0_macvtap: left promiscuous mode [ 135.822612][ T12] veth1_vlan: left promiscuous mode [ 135.822663][ T12] veth0_vlan: left promiscuous mode [ 135.956397][ T12] team0 (unregistering): Port device team_slave_1 removed [ 135.961333][ T12] team0 (unregistering): Port device team_slave_0 removed [ 136.211500][ T5449] 8021q: adding VLAN 0 to HW filter on device eth19 [ 136.374859][ T5449] 8021q: adding VLAN 0 to HW filter on device eth20 [ 136.510204][ T5449] 8021q: adding VLAN 0 to HW filter on device eth21 [ 136.546163][ T5733] Bluetooth: hci0: command tx timeout [ 137.656790][ T9101] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 137.658562][ T9101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 137.659116][ T9101] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 137.660768][ T9101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 137.661464][ T9101] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 137.663219][ T9101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 137.663720][ T9101] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 137.665144][ T9101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 137.715585][ T9101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.723529][ T9101] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.728590][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.728676][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.733847][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.733952][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.764347][ T9101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.973096][ T9101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.991238][ T9101] veth0_vlan: entered promiscuous mode [ 137.994397][ T9101] veth1_vlan: entered promiscuous mode [ 138.015067][ T9101] veth0_macvtap: entered promiscuous mode [ 138.027940][ T9101] veth1_macvtap: entered promiscuous mode [ 138.039192][ T9101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.042745][ T9101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.109497][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.109511][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.124040][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.124052][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.137287][ T5810] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.137315][ T5810] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.137333][ T5810] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.137350][ T5810] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.621419][ T5733] Bluetooth: hci0: command tx timeout [ 139.405822][ T9306] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1058'. [ 139.409906][ T9306] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1058'. [ 139.842201][ T9323] request_module fs- succeeded, but still no fs? [ 139.905294][ T9329] syz.7.1065 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 140.241524][ T9346] syzkaller1: entered promiscuous mode [ 140.241546][ T9346] syzkaller1: entered allmulticast mode [ 140.696099][ T5733] Bluetooth: hci0: command tx timeout [ 140.826948][ T9373] netlink: 'syz.3.1084': attribute type 3 has an invalid length. [ 141.403580][ T9421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1089'. [ 141.512210][ T9447] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1091'. [ 141.549752][ T9442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1089'. [ 141.549772][ T9442] nbd: nbd64 already in use [ 141.812406][ T9462] bridge0: port 3(syzkaller0) entered blocking state [ 141.812484][ T9462] bridge0: port 3(syzkaller0) entered disabled state [ 141.812540][ T9462] syzkaller0: entered allmulticast mode [ 141.813287][ T9462] syzkaller0: entered promiscuous mode [ 141.813574][ T9462] bridge0: port 3(syzkaller0) entered blocking state [ 141.813617][ T9462] bridge0: port 3(syzkaller0) entered forwarding state [ 141.833152][ T9461] bridge0: port 3(syzkaller0) entered disabled state [ 141.851050][ T9461] syzkaller0 (unregistering): left allmulticast mode [ 141.851076][ T9461] syzkaller0 (unregistering): left promiscuous mode [ 141.851159][ T9461] bridge0: port 3(syzkaller0) entered disabled state [ 141.900000][ T9464] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.900422][ T9464] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.967048][ T9464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.973207][ T9464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.057102][ T5809] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.057147][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.057173][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.057191][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.197060][ T9473] overlayfs: failed to clone upperpath [ 142.506276][ T9492] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 142.778627][ T5733] Bluetooth: hci0: command tx timeout [ 145.657943][ T9522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 145.858426][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 145.859045][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 145.865691][ T9573] fuse: fd is not a fuse device [ 146.196064][ T5739] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 146.365975][ T5739] usb 8-1: Using ep0 maxpacket: 32 [ 146.367433][ T5739] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 146.370514][ T5739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.370535][ T5739] usb 8-1: Product: syz [ 146.370549][ T5739] usb 8-1: Manufacturer: syz [ 146.370562][ T5739] usb 8-1: SerialNumber: syz [ 146.587016][ T5739] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 146.588829][ T5739] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 146.621476][ T5739] usb 8-1: USB disconnect, device number 3 [ 146.744475][ T9003] udevd[9003]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.157031][ T9397] Bluetooth: hci5: Frame reassembly failed (-84) [ 147.220848][ T9599] overlayfs: failed to clone lowerpath [ 147.223227][ T9599] overlayfs: failed to clone upperpath [ 147.259991][ T9601] fuse: fd is not a fuse device [ 147.345301][ T1354] libceph: connect (1)[c::]:6789 error -101 [ 147.346360][ T1354] libceph: mon0 (1)[c::]:6789 connect error [ 147.490600][ T9608] ceph: No mds server is up or the cluster is laggy [ 149.133673][ T9660] FAULT_INJECTION: forcing a failure. [ 149.133673][ T9660] name failslab, interval 1, probability 0, space 0, times 0 [ 149.133707][ T9660] CPU: 1 UID: 0 PID: 9660 Comm: syz.8.1140 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.133739][ T9660] Tainted: [L]=SOFTLOCKUP [ 149.133747][ T9660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.133759][ T9660] Call Trace: [ 149.133766][ T9660] [ 149.133774][ T9660] dump_stack_lvl+0x100/0x190 [ 149.133804][ T9660] should_fail_ex.cold+0x5/0xa [ 149.133830][ T9660] ? __pfx_pseudo_fs_fill_super+0x10/0x10 [ 149.133857][ T9660] should_failslab+0xc2/0x120 [ 149.133883][ T9660] ? __pfx_pseudo_fs_fill_super+0x10/0x10 [ 149.133909][ T9660] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 149.133936][ T9660] ? alloc_inode+0x183/0x250 [ 149.133958][ T9660] ? __pfx_pseudo_fs_fill_super+0x10/0x10 [ 149.133983][ T9660] alloc_inode+0x183/0x250 [ 149.134004][ T9660] new_inode+0x22/0x1c0 [ 149.134023][ T9660] ? __pfx_pseudo_fs_fill_super+0x10/0x10 [ 149.134048][ T9660] pseudo_fs_fill_super+0x295/0x540 [ 149.134094][ T9660] ? __pfx_pseudo_fs_fill_super+0x10/0x10 [ 149.134124][ T9660] get_tree_nodev+0xdd/0x190 [ 149.134148][ T9660] vfs_get_tree+0x92/0x320 [ 149.134167][ T9660] path_mount+0x7d0/0x24c0 [ 149.134199][ T9660] ? __pfx_path_mount+0x10/0x10 [ 149.134225][ T9660] ? lockdep_hardirqs_on+0x7d/0x110 [ 149.134251][ T9660] ? putname+0xb1/0x110 [ 149.134274][ T9660] ? kmem_cache_free+0x127/0x6c0 [ 149.134303][ T9660] ? __ia32_sys_mount+0x292/0x310 [ 149.134330][ T9660] __ia32_sys_mount+0x292/0x310 [ 149.134359][ T9660] ? __pfx___ia32_sys_mount+0x10/0x10 [ 149.134401][ T9660] __do_fast_syscall_32+0x13a/0x8b0 [ 149.134430][ T9660] do_fast_syscall_32+0x32/0x70 [ 149.134457][ T9660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.134482][ T9660] RIP: 0023:0xf6feefec [ 149.134502][ T9660] Code: Unable to access opcode bytes at 0xf6feefc2. [ 149.134512][ T9660] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 149.134530][ T9660] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 00000000800002c0 [ 149.134543][ T9660] RDX: 0000000080000180 RSI: 0000000000200000 RDI: 0000000000000000 [ 149.134554][ T9660] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.134564][ T9660] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 149.134577][ T9660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.134601][ T9660] [ 149.159618][ T9663] fuse: fd is not a fuse device [ 149.176064][ T5733] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 149.199212][ T9665] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1142'. [ 149.201152][ T9665] netlink: 'syz.8.1142': attribute type 4 has an invalid length. [ 149.271250][ T9671] fuse: fd is not a fuse device [ 149.458085][ T9678] fuse: root generation should be zero [ 149.852919][ T9702] batman_adv: batadv0: Adding interface: syzkaller0 [ 149.852939][ T9702] batman_adv: batadv0: Interface activated: syzkaller0 [ 150.587179][ T9721] netlink: 'syz.1.1165': attribute type 5 has an invalid length. [ 150.628582][ T9727] FAULT_INJECTION: forcing a failure. [ 150.628582][ T9727] name failslab, interval 1, probability 0, space 0, times 0 [ 150.628613][ T9727] CPU: 3 UID: 0 PID: 9727 Comm: syz.8.1167 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.628640][ T9727] Tainted: [L]=SOFTLOCKUP [ 150.628647][ T9727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.628658][ T9727] Call Trace: [ 150.628664][ T9727] [ 150.628672][ T9727] dump_stack_lvl+0x100/0x190 [ 150.628701][ T9727] should_fail_ex.cold+0x5/0xa [ 150.628722][ T9727] should_failslab+0xc2/0x120 [ 150.628748][ T9727] __kmalloc_cache_noprof+0x91/0x6d0 [ 150.628769][ T9727] ? vhost_net_open+0x128/0x8b0 [ 150.628796][ T9727] vhost_net_open+0x128/0x8b0 [ 150.628817][ T9727] ? __pfx_vhost_net_open+0x10/0x10 [ 150.628838][ T9727] misc_open+0x26d/0x450 [ 150.628861][ T9727] ? __pfx_misc_open+0x10/0x10 [ 150.628888][ T9727] chrdev_open+0x234/0x6a0 [ 150.628910][ T9727] ? __pfx_apparmor_file_open+0x10/0x10 [ 150.628932][ T9727] ? __pfx_chrdev_open+0x10/0x10 [ 150.628956][ T9727] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 150.628983][ T9727] do_dentry_open+0x6ab/0x14d0 [ 150.629006][ T9727] ? __pfx_chrdev_open+0x10/0x10 [ 150.629036][ T9727] vfs_open+0x82/0x3f0 [ 150.629065][ T9727] path_openat+0x19fa/0x2440 [ 150.629087][ T9727] ? __pfx_path_openat+0x10/0x10 [ 150.629117][ T9727] do_file_open+0x20e/0x430 [ 150.629143][ T9727] ? __pfx_do_file_open+0x10/0x10 [ 150.629185][ T9727] ? _raw_spin_unlock+0x28/0x50 [ 150.629200][ T9727] ? alloc_fd+0x471/0x7a0 [ 150.629227][ T9727] do_sys_openat2+0x10f/0x1e0 [ 150.629255][ T9727] ? __pfx_do_sys_openat2+0x10/0x10 [ 150.629300][ T9727] __ia32_compat_sys_openat+0x12d/0x210 [ 150.629316][ T9727] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 150.629341][ T9727] __do_fast_syscall_32+0x13a/0x8b0 [ 150.629369][ T9727] do_fast_syscall_32+0x32/0x70 [ 150.629393][ T9727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.629415][ T9727] RIP: 0023:0xf6feefec [ 150.629434][ T9727] Code: Unable to access opcode bytes at 0xf6feefc2. [ 150.629439][ T9727] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 150.629457][ T9727] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 150.629469][ T9727] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.629480][ T9727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.629491][ T9727] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 150.629503][ T9727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.629528][ T9727] [ 151.422648][ T9749] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1176'. [ 152.020701][ T9654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.094289][ T9751] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1178'. [ 152.402103][ T9767] overlayfs: failed to clone lowerpath [ 152.410761][ T9767] overlayfs: failed to clone upperpath [ 152.491625][ T9775] gre1: entered promiscuous mode [ 152.635385][ T9780] mmap: syz.1.1182 (9780) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 152.873974][ T9790] netlink: 'syz.1.1189': attribute type 1 has an invalid length. [ 152.889243][ T9790] bond4: entered promiscuous mode [ 152.889276][ T9790] bond4: entered allmulticast mode [ 152.889563][ T9790] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.915027][ T9790] erspan1: entered allmulticast mode [ 152.920138][ T9790] bond4: (slave erspan1): making interface the new active one [ 152.920159][ T9790] erspan1: entered promiscuous mode [ 152.924526][ T9790] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 152.975627][ T9797] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.1192'. [ 153.325062][ T9810] smpboot: CPU 1 is now offline [ 154.214981][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1206'. [ 154.502351][ T9857] FAULT_INJECTION: forcing a failure. [ 154.502351][ T9857] name failslab, interval 1, probability 0, space 0, times 0 [ 154.502383][ T9857] CPU: 3 UID: 0 PID: 9857 Comm: syz.3.1209 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.502403][ T9857] Tainted: [L]=SOFTLOCKUP [ 154.502407][ T9857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.502414][ T9857] Call Trace: [ 154.502418][ T9857] [ 154.502423][ T9857] dump_stack_lvl+0x100/0x190 [ 154.502444][ T9857] should_fail_ex.cold+0x5/0xa [ 154.502461][ T9857] should_failslab+0xc2/0x120 [ 154.502479][ T9857] kmem_cache_alloc_noprof+0x92/0x6a0 [ 154.502495][ T9857] ? register_lock_class+0x3f/0x7b0 [ 154.502513][ T9857] ? can_rx_register+0x1ef/0x700 [ 154.502533][ T9857] can_rx_register+0x1ef/0x700 [ 154.502550][ T9857] ? __pfx_raw_rcv+0x10/0x10 [ 154.502563][ T9857] ? __pfx_can_rx_register+0x10/0x10 [ 154.502580][ T9857] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 154.502596][ T9857] raw_enable_filters+0xe0/0x210 [ 154.502610][ T9857] ? dev_get_by_index+0x180/0x380 [ 154.502647][ T9857] raw_enable_allfilters+0x8b/0x2b0 [ 154.502665][ T9857] raw_bind+0x33c/0xdf0 [ 154.502677][ T9857] ? apparmor_socket_bind+0x13d/0x220 [ 154.502698][ T9857] __sys_bind+0x1a9/0x260 [ 154.502715][ T9857] ? __pfx___sys_bind+0x10/0x10 [ 154.502741][ T9857] __ia32_sys_bind+0x71/0xb0 [ 154.502757][ T9857] ? lockdep_hardirqs_on+0x7d/0x110 [ 154.502771][ T9857] __do_fast_syscall_32+0x13a/0x8b0 [ 154.502787][ T9857] do_fast_syscall_32+0x32/0x70 [ 154.502802][ T9857] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.502817][ T9857] RIP: 0023:0xf7f95fec [ 154.502829][ T9857] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 154.502834][ T9857] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000169 [ 154.502846][ T9857] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 154.502859][ T9857] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.502865][ T9857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.502872][ T9857] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 154.502879][ T9857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.502893][ T9857] [ 154.699323][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1216'. [ 154.699420][ T9869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.717053][ T9869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.882727][ T9876] jffs2: notice: (9876) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 155.221954][ T9886] netlink: 'syz.3.1221': attribute type 1 has an invalid length. [ 155.286672][ T9886] bond1: (slave gretap1): making interface the new active one [ 155.287059][ T9886] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 155.420389][ T9890] can0: slcan on pts0. [ 155.552288][ T9889] can0 (unregistered): slcan off pts0. [ 155.959872][ T9902] fuse: Bad value for 'fd' [ 156.645405][ T9927] Bluetooth: MGMT ver 1.23 [ 156.715370][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1239'. [ 156.814597][ T9935] netlink: 'syz.3.1240': attribute type 1 has an invalid length. [ 156.829143][ T9935] bond2: entered promiscuous mode [ 156.829329][ T9935] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.853436][ T9935] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.853598][ T9935] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 156.853608][ T9935] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 156.870239][ T9935] bond2: (slave gre1): making interface the new active one [ 156.870254][ T9935] gre1: entered promiscuous mode [ 156.871014][ T9935] bond2: (slave gre1): Enslaving as an active interface with an up link [ 156.898798][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1240'. [ 156.978569][ T9935] bond2 (unregistering): (slave gre1): Releasing backup interface [ 156.978588][ T9935] gre1: left promiscuous mode [ 156.979678][ T9935] bond2 (unregistering): Released all slaves [ 157.140921][ T9882] syz.7.1218 (9882) used greatest stack depth: 19520 bytes left [ 157.566149][ T25] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 157.716418][ T25] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 157.717210][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.717235][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 157.717250][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 157.717262][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 157.717275][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 157.717288][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 157.717301][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 157.717314][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 157.717330][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 157.717342][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 157.717354][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 157.717366][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 157.717378][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.717388][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.717399][ T25] usb 8-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 157.718907][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.718920][ T25] usb 8-1: Product: syz [ 157.718928][ T25] usb 8-1: Manufacturer: syz [ 157.718936][ T25] usb 8-1: SerialNumber: syz [ 157.723976][ T9945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.724031][ T9945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.724135][ T9945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.724197][ T9945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.724291][ T9945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.724339][ T9945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.724429][ T9945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.724493][ T9945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.724579][ T9945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.724627][ T9945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.724682][ T9945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.730115][ T25] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 157.735263][ T25] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 157.742749][ T25] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 157.755072][ T25] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 157.761108][ T25] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 158.257814][ T5878] usb 8-1: USB disconnect, device number 4 [ 158.267177][ T5878] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 158.268680][ T5878] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 158.270783][ T5878] keyspan 8-1:1.0: device disconnected [ 158.469872][ T9986] syzkaller1: entered promiscuous mode [ 158.469886][ T9986] syzkaller1: entered allmulticast mode [ 158.720587][ T9993] FAULT_INJECTION: forcing a failure. [ 158.720587][ T9993] name failslab, interval 1, probability 0, space 0, times 0 [ 158.720609][ T9993] CPU: 3 UID: 0 PID: 9993 Comm: syz.8.1261 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.720625][ T9993] Tainted: [L]=SOFTLOCKUP [ 158.720630][ T9993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.720637][ T9993] Call Trace: [ 158.720641][ T9993] [ 158.720646][ T9993] dump_stack_lvl+0x100/0x190 [ 158.720666][ T9993] should_fail_ex.cold+0x5/0xa [ 158.720682][ T9993] should_failslab+0xc2/0x120 [ 158.720705][ T9993] __kmalloc_noprof+0xfc/0x840 [ 158.720721][ T9993] ? apply_wqattrs_prepare+0xfe/0xbb0 [ 158.720742][ T9993] apply_wqattrs_prepare+0xfe/0xbb0 [ 158.720759][ T9993] ? __alloc_workqueue+0x8ca/0x1950 [ 158.720777][ T9993] apply_workqueue_attrs_locked+0x64/0xe0 [ 158.720795][ T9993] __alloc_workqueue+0x9a7/0x1950 [ 158.720811][ T9993] alloc_workqueue_noprof+0xc7/0x130 [ 158.720823][ T9993] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 158.720838][ T9993] ? __pfx___debug_object_init+0x10/0x10 [ 158.720861][ T9993] nci_register_device+0x21e/0xb80 [ 158.720873][ T9993] ? __pfx_nci_register_device+0x10/0x10 [ 158.720886][ T9993] ? lockdep_init_map_type+0x5c/0x250 [ 158.720906][ T9993] virtual_ncidev_open+0x141/0x220 [ 158.720920][ T9993] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 158.720932][ T9993] misc_open+0x26d/0x450 [ 158.720949][ T9993] ? __pfx_misc_open+0x10/0x10 [ 158.720964][ T9993] chrdev_open+0x234/0x6a0 [ 158.720979][ T9993] ? __pfx_apparmor_file_open+0x10/0x10 [ 158.720992][ T9993] ? __pfx_chrdev_open+0x10/0x10 [ 158.721008][ T9993] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 158.721029][ T9993] do_dentry_open+0x6ab/0x14d0 [ 158.721044][ T9993] ? __pfx_chrdev_open+0x10/0x10 [ 158.721063][ T9993] vfs_open+0x82/0x3f0 [ 158.721081][ T9993] path_openat+0x19fa/0x2440 [ 158.721099][ T9993] ? __pfx_path_openat+0x10/0x10 [ 158.721118][ T9993] do_file_open+0x20e/0x430 [ 158.721134][ T9993] ? __pfx_do_file_open+0x10/0x10 [ 158.721159][ T9993] ? _raw_spin_unlock+0x28/0x50 [ 158.721170][ T9993] ? alloc_fd+0x471/0x7a0 [ 158.721189][ T9993] do_sys_openat2+0x10f/0x1e0 [ 158.721206][ T9993] ? __pfx_do_sys_openat2+0x10/0x10 [ 158.721229][ T9993] __ia32_compat_sys_openat+0x12d/0x210 [ 158.721241][ T9993] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 158.721258][ T9993] __do_fast_syscall_32+0x13a/0x8b0 [ 158.721275][ T9993] do_fast_syscall_32+0x32/0x70 [ 158.721290][ T9993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.721304][ T9993] RIP: 0023:0xf6feefec [ 158.721318][ T9993] Code: Unable to access opcode bytes at 0xf6feefc2. [ 158.721323][ T9993] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 158.721334][ T9993] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 158.721342][ T9993] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.721349][ T9993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.721355][ T9993] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 158.721362][ T9993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.721376][ T9993] [ 159.424557][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.430811][ T5738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.435696][ T5738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.440091][ T5738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.440574][ T5738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.576589][T10021] FAULT_INJECTION: forcing a failure. [ 159.576589][T10021] name failslab, interval 1, probability 0, space 0, times 0 [ 159.576612][T10021] CPU: 3 UID: 0 PID: 10021 Comm: syz.3.1272 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.576630][T10021] Tainted: [L]=SOFTLOCKUP [ 159.576634][T10021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.576641][T10021] Call Trace: [ 159.576646][T10021] [ 159.576651][T10021] dump_stack_lvl+0x100/0x190 [ 159.576671][T10021] should_fail_ex.cold+0x5/0xa [ 159.576687][T10021] should_failslab+0xc2/0x120 [ 159.576705][T10021] __kmalloc_noprof+0xfc/0x840 [ 159.576723][T10021] ? iter_file_splice_write+0x1d8/0x10b0 [ 159.576742][T10021] iter_file_splice_write+0x1d8/0x10b0 [ 159.576765][T10021] ? __pfx_iter_file_splice_write+0x10/0x10 [ 159.576781][T10021] ? __lock_acquire+0x5c0/0x1f40 [ 159.576799][T10021] ? shmem_file_splice_read+0x724/0xd80 [ 159.576819][T10021] ? __pfx_iter_file_splice_write+0x10/0x10 [ 159.576837][T10021] direct_splice_actor+0x192/0x690 [ 159.576854][T10021] splice_direct_to_actor+0x345/0xa30 [ 159.576870][T10021] ? __pfx_direct_splice_actor+0x10/0x10 [ 159.576888][T10021] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 159.576905][T10021] ? lock_acquire+0x1d1/0x380 [ 159.576923][T10021] do_splice_direct+0x174/0x240 [ 159.576939][T10021] ? __pfx_do_splice_direct+0x10/0x10 [ 159.576955][T10021] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 159.576972][T10021] ? rw_verify_area+0xce/0x6d0 [ 159.576986][T10021] do_sendfile+0xadc/0xe20 [ 159.577001][T10021] ? __pfx_do_sendfile+0x10/0x10 [ 159.577016][T10021] ? __might_fault+0xc5/0x140 [ 159.577039][T10021] __ia32_compat_sys_sendfile+0x162/0x220 [ 159.577065][T10021] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 159.577101][T10021] __do_fast_syscall_32+0x13a/0x8b0 [ 159.577137][T10021] do_fast_syscall_32+0x32/0x70 [ 159.577156][T10021] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.577179][T10021] RIP: 0023:0xf7f95fec [ 159.577200][T10021] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 159.577208][T10021] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 159.577222][T10021] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000003 [ 159.577236][T10021] RDX: 0000000080000100 RSI: 0000000000008112 RDI: 0000000000000000 [ 159.577245][T10021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.577252][T10021] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 159.577260][T10021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.577276][T10021] [ 159.650763][T10024] netlink: 'syz.1.1273': attribute type 4 has an invalid length. [ 159.661772][T10024] netlink: 'syz.1.1273': attribute type 4 has an invalid length. [ 159.712608][T10026] ovs-dp0: entered promiscuous mode [ 159.858497][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 159.858513][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1277'. [ 159.861662][T10038] fuse: fd is not a fuse device [ 159.898463][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1280'. [ 159.906291][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.906318][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.906335][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.906352][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.954581][T10049] fuse: fd is not a fuse device [ 159.961924][ T5733] Bluetooth: hci4: unexpected cc 0x2006 length: 2 > 1 [ 160.074232][T10009] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.074311][T10009] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.074373][T10009] bridge_slave_0: entered allmulticast mode [ 160.075296][T10009] bridge_slave_0: entered promiscuous mode [ 160.084896][T10009] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.084970][T10009] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.085126][T10009] bridge_slave_1: entered allmulticast mode [ 160.085944][T10009] bridge_slave_1: entered promiscuous mode [ 160.098471][T10060] FAULT_INJECTION: forcing a failure. [ 160.098471][T10060] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 160.098492][T10060] CPU: 0 UID: 0 PID: 10060 Comm: syz.3.1283 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.098508][T10060] Tainted: [L]=SOFTLOCKUP [ 160.098513][T10060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.098520][T10060] Call Trace: [ 160.098524][T10060] [ 160.098529][T10060] dump_stack_lvl+0x100/0x190 [ 160.098549][T10060] should_fail_ex.cold+0x5/0xa [ 160.098566][T10060] _copy_to_user+0x32/0xd0 [ 160.098584][T10060] bpf_log_attr_finalize+0x169/0x1a0 [ 160.098599][T10060] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 160.098630][T10060] ? btf_new_fd+0x4820/0x5d40 [ 160.098643][T10060] ? btf_new_fd+0x4878/0x5d40 [ 160.098654][T10060] ? kfree+0x22b/0x6d0 [ 160.098669][T10060] btf_new_fd+0x489b/0x5d40 [ 160.098684][T10060] ? __lock_acquire+0x5c0/0x1f40 [ 160.098710][T10060] ? __pfx_btf_new_fd+0x10/0x10 [ 160.098722][T10060] ? lock_acquire+0x1d1/0x380 [ 160.098740][T10060] ? rcu_is_watching+0x13/0xc0 [ 160.098754][T10060] ? apparmor_capable+0x1d7/0x4d0 [ 160.098774][T10060] ? security_capable+0x80/0x260 [ 160.098792][T10060] ? ns_capable+0xd2/0xf0 [ 160.098810][T10060] __sys_bpf+0x13ef/0x4a30 [ 160.098827][T10060] ? __pfx___sys_bpf+0x10/0x10 [ 160.098839][T10060] ? find_held_lock+0x2b/0x80 [ 160.098851][T10060] ? futex_wake+0x4ea/0x5e0 [ 160.098874][T10060] ? percpu_counter_add_batch+0xb9/0x230 [ 160.098892][T10060] ? errseq_sample+0x51/0x70 [ 160.098907][T10060] ? file_init_path+0x48e/0x670 [ 160.098933][T10060] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 160.098948][T10060] ? xfd_validate_state+0x129/0x190 [ 160.098968][T10060] ? __ia32_sys_bpf+0xcc/0x170 [ 160.098980][T10060] __ia32_sys_bpf+0xcc/0x170 [ 160.098994][T10060] ? __do_fast_syscall_32+0xb3/0x8b0 [ 160.099010][T10060] __do_fast_syscall_32+0x13a/0x8b0 [ 160.099025][T10060] do_fast_syscall_32+0x32/0x70 [ 160.099040][T10060] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.099054][T10060] RIP: 0023:0xf7f95fec [ 160.099067][T10060] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 160.099072][T10060] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 160.099083][T10060] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000200 [ 160.099090][T10060] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.099097][T10060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.099103][T10060] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 160.099110][T10060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.099124][T10060] [ 160.118758][T10009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.120367][T10009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.139461][T10009] team0: Port device team_slave_0 added [ 160.140830][T10009] team0: Port device team_slave_1 added [ 160.155540][T10009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.155551][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.155564][T10009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.156558][T10009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.156565][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.156578][T10009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.178851][T10063] jffs2: notice: (10063) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 160.184322][T10009] hsr_slave_0: entered promiscuous mode [ 160.184766][T10009] hsr_slave_1: entered promiscuous mode [ 160.185061][T10009] debugfs: 'hsr0' already exists in 'hsr' [ 160.185072][T10009] Cannot create hsr debugfs directory [ 160.407725][T10077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1288'. [ 160.409218][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1288'. [ 160.581671][T10084] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 160.581698][T10084] overlayfs: failed to set xattr on upper [ 160.581707][T10084] overlayfs: ...falling back to redirect_dir=nofollow. [ 160.581715][T10084] overlayfs: ...falling back to index=off. [ 160.914840][T10099] CIFS: Attempting to mount //127.0.0.1/share,ser=root [ 160.926992][T10009] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 160.930726][T10009] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.931391][T10009] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 160.934493][T10009] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.937758][T10009] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 160.943091][T10009] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.943697][T10009] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 160.960361][T10009] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.992186][T10009] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.992238][T10009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.992340][T10009] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.992384][T10009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.002308][T10101] virt_wifi0 speed is unknown, defaulting to 1000 [ 161.018407][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.018916][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.029619][T10101] virt_wifi0 speed is unknown, defaulting to 1000 [ 161.045972][T10101] virt_wifi0 speed is unknown, defaulting to 1000 [ 161.069683][T10009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.073709][T10101] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 161.073732][T10101] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 161.082209][T10101] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 161.092867][T10009] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.097567][T10101] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 161.098206][ T9456] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.098339][ T9456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.111855][ T9456] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.111941][ T9456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.122450][T10101] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 161.226983][T10101] virt_wifi0 speed is unknown, defaulting to 1000 [ 161.231259][T10101] virt_wifi0 speed is unknown, defaulting to 1000 [ 161.233266][T10101] virt_wifi0 speed is unknown, defaulting to 1000 [ 161.237521][T10101] virt_wifi0 speed is unknown, defaulting to 1000 [ 161.243118][T10101] virt_wifi0 speed is unknown, defaulting to 1000 [ 161.251840][T10101] virt_wifi0 speed is unknown, defaulting to 1000 [ 161.252670][T10101] virt_wifi0 speed is unknown, defaulting to 1000 [ 161.352541][T10009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.375294][T10009] veth0_vlan: entered promiscuous mode [ 161.382592][T10009] veth1_vlan: entered promiscuous mode [ 161.406083][T10009] veth0_macvtap: entered promiscuous mode [ 161.411746][T10009] veth1_macvtap: entered promiscuous mode [ 161.427202][T10009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.433721][T10009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.506984][ T5733] Bluetooth: hci1: command tx timeout [ 161.553923][ T9434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.553939][ T9434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.591093][ T5809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.591518][ T5809] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.591842][ T5809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.591992][ T5809] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.595656][ T9434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.595668][ T9434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.692878][T10099] CIFS: VFS: Error connecting to socket. Aborting operation. [ 161.692907][T10099] CIFS: VFS: cifs_mount failed w/return code = -4 [ 161.765297][T10129] netlink: 'syz.2.1268': attribute type 1 has an invalid length. [ 161.933099][T10137] virt_wifi0 speed is unknown, defaulting to 1000 [ 162.189756][T10165] tpm_tis pcspkr: no memory resource defined [ 162.338836][T10177] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1308'. [ 162.342243][T10177] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1308'. [ 162.422294][T10183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1310'. [ 162.431384][T10181] FAULT_INJECTION: forcing a failure. [ 162.431384][T10181] name failslab, interval 1, probability 0, space 0, times 0 [ 162.431415][T10181] CPU: 2 UID: 0 PID: 10181 Comm: syz.3.1309 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.431441][T10181] Tainted: [L]=SOFTLOCKUP [ 162.431447][T10181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.431458][T10181] Call Trace: [ 162.431466][T10181] [ 162.431475][T10181] dump_stack_lvl+0x100/0x190 [ 162.431506][T10181] should_fail_ex.cold+0x5/0xa [ 162.431533][T10181] ? __pfx_kthread_worker_fn+0x10/0x10 [ 162.431552][T10181] should_failslab+0xc2/0x120 [ 162.431579][T10181] __kmalloc_cache_noprof+0x91/0x6d0 [ 162.431601][T10181] ? __kthread_create_on_node+0xce/0x3f0 [ 162.431622][T10181] ? __pfx_kthread_worker_fn+0x10/0x10 [ 162.431643][T10181] __kthread_create_on_node+0xce/0x3f0 [ 162.431663][T10181] ? __pfx___kthread_create_on_node+0x10/0x10 [ 162.431692][T10181] ? lockdep_init_map_type+0x5c/0x250 [ 162.431724][T10181] kthread_create_worker_on_node+0x123/0x220 [ 162.431743][T10181] ? __pfx_kthread_create_worker_on_node+0x10/0x10 [ 162.431766][T10181] ? __kasan_kmalloc+0xaa/0xb0 [ 162.431798][T10181] ? lockdep_init_map_type+0x5c/0x250 [ 162.431829][T10181] ? lockdep_init_map_type+0x5c/0x250 [ 162.431860][T10181] kvm_create_pit+0x16f/0x780 [ 162.431883][T10181] kvm_arch_vm_ioctl+0x1325/0x18d0 [ 162.431902][T10181] ? is_bpf_text_address+0x94/0x1a0 [ 162.431930][T10181] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 162.431947][T10181] ? __kernel_text_address+0xd/0x30 [ 162.431970][T10181] ? unwind_get_return_address+0x59/0xa0 [ 162.431998][T10181] ? __lock_acquire+0x5c0/0x1f40 [ 162.432028][T10181] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 162.432073][T10181] ? look_up_lock_class+0x55/0x120 [ 162.432100][T10181] ? register_lock_class+0x3f/0x7b0 [ 162.432129][T10181] ? find_held_lock+0x2b/0x80 [ 162.432150][T10181] ? ima_match_policy+0x8c4/0x23f0 [ 162.432176][T10181] ? __lock_acquire+0x5c0/0x1f40 [ 162.432217][T10181] ? __lock_acquire+0x5c0/0x1f40 [ 162.432250][T10181] ? __lock_acquire+0x5c0/0x1f40 [ 162.432278][T10181] ? lock_acquire+0x1d1/0x380 [ 162.432304][T10181] ? unwind_next_frame+0xbd/0x2090 [ 162.432331][T10181] ? lock_acquire+0x1d1/0x380 [ 162.432357][T10181] ? is_bpf_text_address+0x25/0x1a0 [ 162.432384][T10181] ? find_held_lock+0x2b/0x80 [ 162.432404][T10181] ? is_bpf_text_address+0x8a/0x1a0 [ 162.432430][T10181] ? is_bpf_text_address+0x8a/0x1a0 [ 162.432457][T10181] ? bpf_ksym_find+0x124/0x1c0 [ 162.432479][T10181] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 162.432506][T10181] ? is_bpf_text_address+0x94/0x1a0 [ 162.432533][T10181] ? kernel_text_address+0x8d/0x100 [ 162.432556][T10181] ? __pfx_widen_string+0x10/0x10 [ 162.432580][T10181] ? __kernel_text_address+0xd/0x30 [ 162.432601][T10181] ? unwind_get_return_address+0x59/0xa0 [ 162.432625][T10181] kvm_vm_ioctl+0x1605/0x42c0 [ 162.432648][T10181] ? tomoyo_path_number_perm+0x46d/0x580 [ 162.432667][T10181] ? stack_trace_save+0x8e/0xc0 [ 162.432691][T10181] ? __pfx_stack_trace_save+0x10/0x10 [ 162.432716][T10181] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 162.432733][T10181] ? __lock_acquire+0x5c0/0x1f40 [ 162.432761][T10181] ? tomoyo_path_number_perm+0x46d/0x580 [ 162.432787][T10181] ? kasan_save_stack+0x3f/0x50 [ 162.432811][T10181] ? kasan_save_stack+0x30/0x50 [ 162.432834][T10181] ? kasan_save_track+0x14/0x30 [ 162.432858][T10181] ? kasan_save_free_info+0x3b/0x70 [ 162.432878][T10181] ? __kasan_slab_free+0x5f/0x80 [ 162.432904][T10181] ? kfree+0x22b/0x6d0 [ 162.432919][T10181] ? tomoyo_path_number_perm+0x46d/0x580 [ 162.432938][T10181] ? security_file_ioctl_compat+0xd3/0x230 [ 162.432955][T10181] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 162.432977][T10181] ? __do_fast_syscall_32+0x13a/0x8b0 [ 162.432996][T10181] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 162.433023][T10181] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 162.433074][T10181] ? kasan_quarantine_put+0x104/0x240 [ 162.433096][T10181] ? lockdep_hardirqs_on+0x7d/0x110 [ 162.433117][T10181] ? find_held_lock+0x2b/0x80 [ 162.433138][T10181] ? tomoyo_path_number_perm+0x28f/0x580 [ 162.433158][T10181] ? tomoyo_path_number_perm+0x28f/0x580 [ 162.433180][T10181] ? tomoyo_path_number_perm+0x188/0x580 [ 162.433201][T10181] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 162.433266][T10181] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 162.433299][T10181] ? do_vfs_ioctl+0x226/0x13e0 [ 162.433322][T10181] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 162.433347][T10181] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 162.433368][T10181] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 162.433386][T10181] ? __fget_files+0x34/0x3d0 [ 162.433409][T10181] ? find_held_lock+0x2b/0x80 [ 162.433429][T10181] ? __fget_files+0x215/0x3d0 [ 162.433451][T10181] ? hook_file_ioctl_common+0x140/0x440 [ 162.433476][T10181] ? __fget_files+0x21f/0x3d0 [ 162.433504][T10181] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 162.433523][T10181] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 162.433548][T10181] __do_fast_syscall_32+0x13a/0x8b0 [ 162.433575][T10181] do_fast_syscall_32+0x32/0x70 [ 162.433598][T10181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.433621][T10181] RIP: 0023:0xf7f95fec [ 162.433642][T10181] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 162.433650][T10181] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 162.433670][T10181] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004040ae77 [ 162.433682][T10181] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.433696][T10181] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.433707][T10181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.433718][T10181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.433744][T10181] [ 162.660013][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'. [ 162.664567][T10199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1315'. [ 162.720549][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'. [ 162.787019][ T7017] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 162.888729][T10216] virt_wifi0 speed is unknown, defaulting to 1000 [ 162.942140][T10225] virt_wifi0 speed is unknown, defaulting to 1000 [ 162.948046][ T7017] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.954673][ T7017] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.957342][ T7017] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.957362][ T7017] usb 7-1: Product: syz [ 162.957374][ T7017] usb 7-1: Manufacturer: syz [ 162.957387][ T7017] usb 7-1: SerialNumber: syz [ 163.187444][T10189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.188033][T10189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.198644][ T7017] cdc_ether 7-1:1.0: skipping garbage [ 163.199057][ T7017] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 163.211315][ T7017] usb 7-1: USB disconnect, device number 4 [ 163.576088][ T5733] Bluetooth: hci1: command tx timeout [ 163.656372][ T7017] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 163.811417][ T7017] usb 7-1: Using ep0 maxpacket: 8 [ 163.812174][ T7017] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 163.813172][ T7017] usb 7-1: config index 0 descriptor too short (expected 301, got 72) [ 163.813194][ T7017] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 163.813229][ T7017] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.813249][ T7017] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.813269][ T7017] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 163.813290][ T7017] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.813325][ T7017] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.879846][T10256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1328'. [ 163.885186][T10257] tipc: Failed to remove unknown binding: 66,1,1/0:1977279959/1977279961 [ 164.053155][ T7017] usb 7-1: GET_CAPABILITIES returned 0 [ 164.053178][ T7017] usbtmc 7-1:16.0: can't read capabilities [ 164.212450][ T5878] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 164.258895][ T5526] usb 7-1: USB disconnect, device number 5 [ 164.406872][ T5878] usb 8-1: not running at top speed; connect to a high speed hub [ 164.406891][ T5878] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 164.407687][ T5878] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.407711][ T5878] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 164.407728][ T5878] usb 8-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 164.407749][ T5878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.411703][ T5878] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 164.413822][ T5878] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 164.414767][ T5878] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 164.414808][ T5878] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 164.418101][ T5878] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 164.776214][ T5825] usb 8-1: USB disconnect, device number 5 [ 164.780369][ T5825] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 164.782772][ T5825] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 164.783172][ T5825] keyspan 8-1:1.0: device disconnected [ 165.523509][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1338'. [ 165.582668][T10283] FAULT_INJECTION: forcing a failure. [ 165.582668][T10283] name failslab, interval 1, probability 0, space 0, times 0 [ 165.582691][T10283] CPU: 3 UID: 0 PID: 10283 Comm: syz.3.1339 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.582709][T10283] Tainted: [L]=SOFTLOCKUP [ 165.582713][T10283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.582727][T10283] Call Trace: [ 165.582732][T10283] [ 165.582737][T10283] dump_stack_lvl+0x100/0x190 [ 165.582757][T10283] should_fail_ex.cold+0x5/0xa [ 165.582773][T10283] should_failslab+0xc2/0x120 [ 165.582791][T10283] __kmalloc_noprof+0xfc/0x840 [ 165.582806][T10283] ? ovs_vport_alloc+0x31/0x3b0 [ 165.582824][T10283] ovs_vport_alloc+0x31/0x3b0 [ 165.582841][T10283] internal_dev_create+0x25/0x520 [ 165.582857][T10283] ovs_vport_add+0x100/0x300 [ 165.582871][T10283] new_vport+0x16/0x1d0 [ 165.582888][T10283] ovs_dp_cmd_new+0x67e/0xe30 [ 165.582903][T10283] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 165.582915][T10283] ? __nla_parse+0x40/0x60 [ 165.582932][T10283] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 165.582955][T10283] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 165.582976][T10283] genl_family_rcv_msg_doit+0x214/0x300 [ 165.582996][T10283] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 165.583015][T10283] ? genl_get_cmd+0x3e7/0x760 [ 165.583055][T10283] ? bpf_lsm_capable+0x9/0x10 [ 165.583067][T10283] ? security_capable+0x80/0x260 [ 165.583086][T10283] ? ns_capable+0xd2/0xf0 [ 165.583105][T10283] genl_rcv_msg+0x560/0x800 [ 165.583118][T10283] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.583130][T10283] ? __lock_acquire+0x5c0/0x1f40 [ 165.583147][T10283] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 165.583165][T10283] netlink_rcv_skb+0x159/0x420 [ 165.583181][T10283] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.583193][T10283] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 165.583215][T10283] ? netlink_deliver_tap+0x1ae/0xcc0 [ 165.583233][T10283] genl_rcv+0x28/0x40 [ 165.583249][T10283] netlink_unicast+0x585/0x850 [ 165.583267][T10283] ? __pfx_netlink_unicast+0x10/0x10 [ 165.583288][T10283] netlink_sendmsg+0x8b0/0xda0 [ 165.583307][T10283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.583325][T10283] ? apparmor_socket_sendmsg+0x165/0x280 [ 165.583345][T10283] __sys_sendto+0x48b/0x4e0 [ 165.583361][T10283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.583378][T10283] ? __pfx___sys_sendto+0x10/0x10 [ 165.583398][T10283] ? fd_install+0x223/0x580 [ 165.583423][T10283] __ia32_sys_sendto+0xdd/0x1b0 [ 165.583439][T10283] ? __do_fast_syscall_32+0xb3/0x8b0 [ 165.583454][T10283] ? lockdep_hardirqs_on+0x7d/0x110 [ 165.583467][T10283] __do_fast_syscall_32+0x13a/0x8b0 [ 165.583483][T10283] do_fast_syscall_32+0x32/0x70 [ 165.583497][T10283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.583512][T10283] RIP: 0023:0xf7f95fec [ 165.583526][T10283] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 165.583531][T10283] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 165.583543][T10283] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 165.583550][T10283] RDX: 0000000000000034 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.583557][T10283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.583563][T10283] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 165.583570][T10283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.583584][T10283] [ 165.656366][ T5733] Bluetooth: hci1: command tx timeout [ 165.841312][T10290] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1342'. [ 165.841328][T10290] openvswitch: netlink: Flow key attr not present in new flow. [ 166.352597][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1353'. [ 166.589708][T10314] netlink: 'syz.1.1351': attribute type 5 has an invalid length. [ 166.676857][T10324] fuse: fd is not a fuse device [ 166.899571][T10335] netlink: 'syz.2.1360': attribute type 10 has an invalid length. [ 166.916488][T10335] team0 (unregistering): Port device team_slave_0 removed [ 166.920377][T10335] team0 (unregistering): Port device team_slave_1 removed [ 167.016808][ T9410] rpcbind: server 127.0.0.1 not responding, timed out [ 167.027396][T10345] FAULT_INJECTION: forcing a failure. [ 167.027396][T10345] name failslab, interval 1, probability 0, space 0, times 0 [ 167.027417][T10345] CPU: 0 UID: 0 PID: 10345 Comm: syz.3.1366 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.027433][T10345] Tainted: [L]=SOFTLOCKUP [ 167.027437][T10345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.027444][T10345] Call Trace: [ 167.027449][T10345] [ 167.027454][T10345] dump_stack_lvl+0x100/0x190 [ 167.027473][T10345] should_fail_ex.cold+0x5/0xa [ 167.027488][T10345] should_failslab+0xc2/0x120 [ 167.027506][T10345] __kvmalloc_node_noprof+0x113/0x9b0 [ 167.027523][T10345] ? lockdep_init_map_type+0x5c/0x250 [ 167.027540][T10345] ? lockdep_init_map_type+0x5c/0x250 [ 167.027557][T10345] ? alloc_netdev_mqs+0xb4e/0x15c0 [ 167.027587][T10345] ? __pfx_vlan_setup+0x10/0x10 [ 167.027599][T10345] alloc_netdev_mqs+0xb4e/0x15c0 [ 167.027614][T10345] vlan_ioctl_handler+0x724/0xa70 [ 167.027630][T10345] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 167.027650][T10345] ? tomoyo_path_number_perm+0x188/0x580 [ 167.027665][T10345] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 167.027681][T10345] sock_ioctl+0x5e9/0x6b0 [ 167.027698][T10345] ? __pfx_sock_ioctl+0x10/0x10 [ 167.027715][T10345] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.027733][T10345] ? do_vfs_ioctl+0x226/0x13e0 [ 167.027746][T10345] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 167.027760][T10345] compat_sock_ioctl+0x595/0x760 [ 167.027782][T10345] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 167.027798][T10345] ? hook_file_ioctl_common+0x140/0x440 [ 167.027814][T10345] ? __fget_files+0x21f/0x3d0 [ 167.027832][T10345] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 167.027849][T10345] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 167.027880][T10345] __do_fast_syscall_32+0x13a/0x8b0 [ 167.027902][T10345] do_fast_syscall_32+0x32/0x70 [ 167.027917][T10345] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.027932][T10345] RIP: 0023:0xf7f95fec [ 167.027948][T10345] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 167.027956][T10345] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 167.027974][T10345] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008982 [ 167.027987][T10345] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.027998][T10345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.028007][T10345] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 167.028016][T10345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.028058][T10345] [ 167.259130][T10355] 9p: Bad value for 'rfdno' [ 167.338715][T10358] CIFS: Attempting to mount //127.0.0.1/share,ser=root [ 167.339213][T10358] CIFS: VFS: Error connecting to socket. Aborting operation. [ 167.339231][T10358] CIFS: VFS: cifs_mount failed w/return code = -101 [ 167.350144][T10358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.350155][T10358] IPv6: NLM_F_CREATE should be set when creating new route [ 167.350224][T10358] IPv6: NLM_F_CREATE should be set when creating new route [ 167.350235][T10358] IPv6: NLM_F_CREATE should be set when creating new route [ 167.367087][T10358] siw: device registration error -23 [ 167.392628][ T12] team0: Port device netdevsim1 removed [ 167.732918][T10376] fuse: Bad value for 'fd' [ 167.733836][T10374] can0: slcan on pts0. [ 167.736258][ T5733] Bluetooth: hci1: command tx timeout [ 167.787225][ T12] bridge_slave_1: left allmulticast mode [ 167.787241][ T12] bridge_slave_1: left promiscuous mode [ 167.787368][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.790902][ T12] bridge_slave_0: left allmulticast mode [ 167.790916][ T12] bridge_slave_0: left promiscuous mode [ 167.791013][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.799698][ T68] block nbd2: Receive control failed (result -32) [ 167.827702][T10378] block nbd2: shutting down sockets [ 167.961210][T10392] __nla_validate_parse: 1 callbacks suppressed [ 167.961228][T10392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1385'. [ 167.967115][T10389] FAULT_INJECTION: forcing a failure. [ 167.967115][T10389] name failslab, interval 1, probability 0, space 0, times 0 [ 167.967149][T10389] CPU: 0 UID: 0 PID: 10389 Comm: syz.2.1384 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.967176][T10389] Tainted: [L]=SOFTLOCKUP [ 167.967184][T10389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.967195][T10389] Call Trace: [ 167.967203][T10389] [ 167.967210][T10389] dump_stack_lvl+0x100/0x190 [ 167.967240][T10389] should_fail_ex.cold+0x5/0xa [ 167.967275][T10389] should_failslab+0xc2/0x120 [ 167.967305][T10389] __kmalloc_noprof+0xfc/0x840 [ 167.967327][T10389] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 167.967350][T10389] ? tcf_idr_create+0x62/0x880 [ 167.967382][T10389] tcf_idr_create+0x62/0x880 [ 167.967411][T10389] tcf_idr_create_from_flags+0x4f/0x70 [ 167.967442][T10389] tunnel_key_init+0x11d6/0x1a70 [ 167.967477][T10389] ? __pfx_tunnel_key_init+0x10/0x10 [ 167.967520][T10389] ? tcf_action_init_1+0x2d8/0x6c0 [ 167.967537][T10389] ? __asan_memcpy+0x3c/0x60 [ 167.967571][T10389] ? tcf_action_init_1+0x466/0x6c0 [ 167.967587][T10389] tcf_action_init_1+0x466/0x6c0 [ 167.967608][T10389] ? __pfx_tcf_action_init_1+0x10/0x10 [ 167.967635][T10389] ? tc_action_load_ops+0x1f5/0x3e0 [ 167.967676][T10389] ? __nla_parse+0x40/0x60 [ 167.967701][T10389] tcf_action_init+0x43f/0xa60 [ 167.967728][T10389] ? __pfx_tcf_action_init+0x10/0x10 [ 167.967744][T10389] ? __lock_acquire+0x5c0/0x1f40 [ 167.967811][T10389] ? hrtimer_reprogram+0x165/0x6c0 [ 167.967833][T10389] ? find_held_lock+0x2b/0x80 [ 167.967854][T10389] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 167.967884][T10389] tcf_action_add+0xed/0x5c0 [ 167.967906][T10389] ? __pfx_tcf_action_add+0x10/0x10 [ 167.967924][T10389] ? __lock_acquire+0x5c0/0x1f40 [ 167.967982][T10389] ? __nla_parse+0x40/0x60 [ 167.968007][T10389] tc_ctl_action+0x2e3/0x470 [ 167.968055][T10389] ? __pfx_tc_ctl_action+0x10/0x10 [ 167.968086][T10389] ? __pfx_tc_ctl_action+0x10/0x10 [ 167.968106][T10389] rtnetlink_rcv_msg+0x3c9/0xe90 [ 167.968130][T10389] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.968156][T10389] ? ref_tracker_free+0x37e/0x6c0 [ 167.968178][T10389] netlink_rcv_skb+0x159/0x420 [ 167.968203][T10389] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.968223][T10389] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.968257][T10389] ? netlink_deliver_tap+0x1ae/0xcc0 [ 167.968357][T10389] netlink_unicast+0x585/0x850 [ 167.968388][T10389] ? __pfx_netlink_unicast+0x10/0x10 [ 167.968422][T10389] netlink_sendmsg+0x8b0/0xda0 [ 167.968452][T10389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.968479][T10389] ? apparmor_socket_sendmsg+0x165/0x280 [ 167.968509][T10389] ____sys_sendmsg+0xa4d/0xbe0 [ 167.968529][T10389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.968556][T10389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.968588][T10389] ___sys_sendmsg+0x190/0x1e0 [ 167.968612][T10389] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.968663][T10389] ? futex_wait+0x11e/0x370 [ 167.968696][T10389] ? find_held_lock+0x2b/0x80 [ 167.968732][T10389] __sys_sendmsg+0x160/0x210 [ 167.968750][T10389] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.968779][T10389] __do_fast_syscall_32+0x13a/0x8b0 [ 167.968807][T10389] do_fast_syscall_32+0x32/0x70 [ 167.968829][T10389] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.968853][T10389] RIP: 0023:0xf7ff2fec [ 167.968874][T10389] Code: Unable to access opcode bytes at 0xf7ff2fc2. [ 167.968882][T10389] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 167.968901][T10389] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 167.968913][T10389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.968924][T10389] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.968935][T10389] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 167.968947][T10389] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.968970][T10389] [ 168.007472][T10373] can0 (unregistered): slcan off pts0. [ 168.239967][T10410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1391'. [ 168.306591][ T12] hsr_slave_0: left promiscuous mode [ 168.308816][ T12] hsr_slave_1: left promiscuous mode [ 168.309575][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.414316][ T12] team0 (unregistering): Port device team_slave_1 removed [ 168.424667][ T12] team0 (unregistering): Port device team_slave_0 removed [ 168.518448][T10423] netlink: 'syz.1.1396': attribute type 1 has an invalid length. [ 168.520112][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2 [ 168.553016][T10423] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 168.575592][T10423] netlink: 'syz.1.1396': attribute type 1 has an invalid length. [ 168.606547][T10423] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 168.888883][ T5449] 8021q: adding VLAN 0 to HW filter on device eth3 [ 169.132617][ T5449] 8021q: adding VLAN 0 to HW filter on device eth4 [ 169.356260][ T5449] 8021q: adding VLAN 0 to HW filter on device eth5 [ 170.920881][T10490] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.921175][T10490] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.064879][T10490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.080588][T10490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.426708][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.426745][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.426764][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.426783][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.830328][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1413'. [ 171.830950][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1413'. [ 172.254987][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1416'. [ 172.511688][T10566] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 172.511688][T10566] [ 172.511702][T10566] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 172.511746][T10566] CIFS: Attempting to mount //172.20.20.170/share [ 172.513410][T10566] CIFS: VFS: Error connecting to socket. Aborting operation. [ 172.513432][T10566] CIFS: VFS: cifs_mount failed w/return code = -22 [ 173.514046][T10586] FAULT_INJECTION: forcing a failure. [ 173.514046][T10586] name failslab, interval 1, probability 0, space 0, times 0 [ 173.514069][T10586] CPU: 3 UID: 0 PID: 10586 Comm: syz.3.1429 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.514086][T10586] Tainted: [L]=SOFTLOCKUP [ 173.514091][T10586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.514098][T10586] Call Trace: [ 173.514102][T10586] [ 173.514107][T10586] dump_stack_lvl+0x100/0x190 [ 173.514128][T10586] should_fail_ex.cold+0x5/0xa [ 173.514144][T10586] should_failslab+0xc2/0x120 [ 173.514162][T10586] __kmalloc_cache_noprof+0x91/0x6d0 [ 173.514175][T10586] ? snd_mixer_oss_get_volume1_sw.isra.0+0x96/0x490 [ 173.514188][T10586] ? snd_mixer_oss_get_volume1_sw.isra.0+0x138/0x490 [ 173.514203][T10586] snd_mixer_oss_get_volume1_sw.isra.0+0x138/0x490 [ 173.514217][T10586] snd_mixer_oss_get_recsrc1_sw+0x104/0x1d0 [ 173.514229][T10586] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 173.514246][T10586] snd_mixer_oss_ioctl1+0x178f/0x1bb0 [ 173.514264][T10586] ? kasan_quarantine_put+0x104/0x240 [ 173.514279][T10586] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 173.514292][T10586] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 173.514309][T10586] ? tomoyo_path_number_perm+0x28f/0x580 [ 173.514321][T10586] ? tomoyo_path_number_perm+0x28f/0x580 [ 173.514335][T10586] ? tomoyo_path_number_perm+0x188/0x580 [ 173.514347][T10586] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 173.514358][T10586] ? futex_wait+0x11e/0x370 [ 173.514379][T10586] snd_mixer_oss_ioctl_card+0x102/0x170 [ 173.514397][T10586] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 173.514420][T10586] snd_pcm_oss_ioctl+0x34d/0x3790 [ 173.514433][T10586] ? find_held_lock+0x2b/0x80 [ 173.514447][T10586] ? __fget_files+0x215/0x3d0 [ 173.514461][T10586] ? hook_file_ioctl_common+0x140/0x440 [ 173.514474][T10586] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 173.514489][T10586] ? __fget_files+0x21f/0x3d0 [ 173.514506][T10586] ? __pfx_snd_pcm_oss_ioctl_compat+0x10/0x10 [ 173.514520][T10586] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 173.514536][T10586] __do_fast_syscall_32+0x13a/0x8b0 [ 173.514553][T10586] do_fast_syscall_32+0x32/0x70 [ 173.514567][T10586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.514581][T10586] RIP: 0023:0xf7f95fec [ 173.514595][T10586] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 173.514600][T10586] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 173.514613][T10586] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080044dff [ 173.514621][T10586] RDX: 00000000800054c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.514628][T10586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.514635][T10586] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 173.514643][T10586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.514657][T10586] [ 173.912498][T10599] jffs2: notice: (10599) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 174.989823][T10635] overlayfs: failed to resolve './cgroup': -2 [ 175.002625][ T35] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 175.008428][ T35] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 175.008455][ T35] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 175.008474][ T35] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 175.008492][ T35] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 175.008509][ T35] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 175.008528][ T35] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 175.008546][ T35] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 175.055826][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1453'. [ 175.086043][ T35] hid-generic 0000:0000:0001.0003: hidraw1: HID v0.10 Device [syz0] on syz1 [ 175.231333][T10644] fido_id[10644]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 175.890993][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 175.891697][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 176.229904][T10699] can0: slcan on ttyS3. [ 176.318329][T10699] can0 (unregistered): slcan off ttyS3. [ 176.953647][T10713] virt_wifi0 speed is unknown, defaulting to 1000 [ 177.003076][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 177.003089][ T43] audit: type=1326 audit(1790702811.609:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10712 comm="syz.3.1471" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f95fec code=0x0 [ 177.934242][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 177.934566][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 178.169124][T10758] virt_wifi0 speed is unknown, defaulting to 1000 [ 178.260751][ T43] audit: type=1326 audit(1790702812.869:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10756 comm="syz.1.1486" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fec code=0x0 [ 178.395997][ T5878] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 178.546580][ T5878] usb 7-1: Using ep0 maxpacket: 16 [ 178.551163][ T5878] usb 7-1: unable to get BOS descriptor or descriptor too short [ 178.551186][ T5878] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 178.553767][ T5878] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 178.568709][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.568723][ T5878] usb 7-1: Product: syz [ 178.568731][ T5878] usb 7-1: Manufacturer: syz [ 178.568738][ T5878] usb 7-1: SerialNumber: syz [ 180.154787][ T5878] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 180.164709][ T5878] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 180.263946][T10800] virt_wifi0 speed is unknown, defaulting to 1000 [ 180.287632][ T43] audit: type=1326 audit(1790702814.899:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10799 comm="syz.7.1497" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f52fec code=0x0 [ 180.347486][ T5878] usb 7-1: USB disconnect, device number 6 [ 180.486540][ T9001] udevd[9001]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.592334][T10826] fuse: fd is not a fuse device [ 181.236208][ T62] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 181.396500][ T62] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.398515][ T62] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.398533][ T62] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 181.398550][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.400227][T10842] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 181.403362][ T62] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 181.953133][ T62] usb 7-1: USB disconnect, device number 7 [ 182.969935][T10896] fuse: fd is not a fuse device [ 183.581360][T10824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.423168][T10938] ceph: No mds server is up or the cluster is laggy [ 185.746521][ T5733] Bluetooth: hci3: command 0x0406 tx timeout [ 186.462602][T10980] FAULT_INJECTION: forcing a failure. [ 186.462602][T10980] name failslab, interval 1, probability 0, space 0, times 0 [ 186.462624][T10980] CPU: 0 UID: 0 PID: 10980 Comm: syz.2.1541 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.462643][T10980] Tainted: [L]=SOFTLOCKUP [ 186.462648][T10980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.462654][T10980] Call Trace: [ 186.462659][T10980] [ 186.462664][T10980] dump_stack_lvl+0x100/0x190 [ 186.462684][T10980] should_fail_ex.cold+0x5/0xa [ 186.462700][T10980] should_failslab+0xc2/0x120 [ 186.462719][T10980] __kmalloc_cache_noprof+0x91/0x6d0 [ 186.462733][T10980] ? ovs_dp_cmd_new+0x433/0xe30 [ 186.462748][T10980] ovs_dp_cmd_new+0x433/0xe30 [ 186.462763][T10980] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 186.462774][T10980] ? __nla_parse+0x40/0x60 [ 186.462790][T10980] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 186.462809][T10980] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 186.462831][T10980] genl_family_rcv_msg_doit+0x214/0x300 [ 186.462851][T10980] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 186.462869][T10980] ? genl_get_cmd+0x3e7/0x760 [ 186.462891][T10980] ? bpf_lsm_capable+0x9/0x10 [ 186.462902][T10980] ? security_capable+0x80/0x260 [ 186.462918][T10980] ? ns_capable+0xd2/0xf0 [ 186.462937][T10980] genl_rcv_msg+0x560/0x800 [ 186.462949][T10980] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.462960][T10980] ? __lock_acquire+0x5c0/0x1f40 [ 186.462976][T10980] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 186.462989][T10980] ? __lock_acquire+0x5c0/0x1f40 [ 186.463008][T10980] netlink_rcv_skb+0x159/0x420 [ 186.463025][T10980] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.463036][T10980] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.463058][T10980] ? netlink_deliver_tap+0x1ae/0xcc0 [ 186.463076][T10980] genl_rcv+0x28/0x40 [ 186.463092][T10980] netlink_unicast+0x585/0x850 [ 186.463110][T10980] ? __pfx_netlink_unicast+0x10/0x10 [ 186.463147][T10980] ? aa_sk_perm+0x389/0xab0 [ 186.463164][T10980] netlink_sendmsg+0x8b0/0xda0 [ 186.463183][T10980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.463203][T10980] ? apparmor_socket_sendmsg+0x165/0x280 [ 186.463224][T10980] __sys_sendto+0x48b/0x4e0 [ 186.463242][T10980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.463260][T10980] ? __pfx___sys_sendto+0x10/0x10 [ 186.463282][T10980] ? fd_install+0x223/0x580 [ 186.463307][T10980] __ia32_sys_sendto+0xdd/0x1b0 [ 186.463323][T10980] ? __do_fast_syscall_32+0xb3/0x8b0 [ 186.463338][T10980] ? lockdep_hardirqs_on+0x7d/0x110 [ 186.463350][T10980] __do_fast_syscall_32+0x13a/0x8b0 [ 186.463366][T10980] do_fast_syscall_32+0x32/0x70 [ 186.463380][T10980] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.463395][T10980] RIP: 0023:0xf7ff2fec [ 186.463409][T10980] Code: Unable to access opcode bytes at 0xf7ff2fc2. [ 186.463414][T10980] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 186.463426][T10980] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 186.463433][T10980] RDX: 0000000000000034 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.463440][T10980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.463446][T10980] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 186.463453][T10980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.463467][T10980] [ 187.343622][T10993] fuse: fd is not a fuse device [ 187.619737][T11005] FAULT_INJECTION: forcing a failure. [ 187.619737][T11005] name failslab, interval 1, probability 0, space 0, times 0 [ 187.619760][T11005] CPU: 2 UID: 0 PID: 11005 Comm: syz.3.1552 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.619776][T11005] Tainted: [L]=SOFTLOCKUP [ 187.619780][T11005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.619788][T11005] Call Trace: [ 187.619792][T11005] [ 187.619797][T11005] dump_stack_lvl+0x100/0x190 [ 187.619817][T11005] should_fail_ex.cold+0x5/0xa [ 187.619833][T11005] should_failslab+0xc2/0x120 [ 187.619857][T11005] __kmalloc_cache_noprof+0x91/0x6d0 [ 187.619872][T11005] ? ovs_flow_tbl_init+0x1f5/0x680 [ 187.619893][T11005] ovs_flow_tbl_init+0x1f5/0x680 [ 187.619913][T11005] ovs_dp_cmd_new+0x27f/0xe30 [ 187.619929][T11005] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 187.619969][T11005] ? __nla_parse+0x40/0x60 [ 187.619986][T11005] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 187.620008][T11005] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 187.620030][T11005] genl_family_rcv_msg_doit+0x214/0x300 [ 187.620051][T11005] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.620072][T11005] ? genl_get_cmd+0x3e7/0x760 [ 187.620093][T11005] ? bpf_lsm_capable+0x9/0x10 [ 187.620104][T11005] ? security_capable+0x80/0x260 [ 187.620121][T11005] ? ns_capable+0xd2/0xf0 [ 187.620145][T11005] genl_rcv_msg+0x560/0x800 [ 187.620159][T11005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.620170][T11005] ? __lock_acquire+0x5c0/0x1f40 [ 187.620188][T11005] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 187.620205][T11005] netlink_rcv_skb+0x159/0x420 [ 187.620222][T11005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.620235][T11005] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.620259][T11005] ? netlink_deliver_tap+0x1ae/0xcc0 [ 187.620278][T11005] genl_rcv+0x28/0x40 [ 187.620295][T11005] netlink_unicast+0x585/0x850 [ 187.620314][T11005] ? __pfx_netlink_unicast+0x10/0x10 [ 187.620330][T11005] ? aa_sk_perm+0x389/0xab0 [ 187.620345][T11005] netlink_sendmsg+0x8b0/0xda0 [ 187.620363][T11005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.620381][T11005] ? apparmor_socket_sendmsg+0x165/0x280 [ 187.620401][T11005] __sys_sendto+0x48b/0x4e0 [ 187.620417][T11005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.620434][T11005] ? __pfx___sys_sendto+0x10/0x10 [ 187.620454][T11005] ? fd_install+0x223/0x580 [ 187.620478][T11005] __ia32_sys_sendto+0xdd/0x1b0 [ 187.620497][T11005] ? __do_fast_syscall_32+0xb3/0x8b0 [ 187.620511][T11005] ? lockdep_hardirqs_on+0x7d/0x110 [ 187.620527][T11005] __do_fast_syscall_32+0x13a/0x8b0 [ 187.620543][T11005] do_fast_syscall_32+0x32/0x70 [ 187.620558][T11005] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.620572][T11005] RIP: 0023:0xf7f95fec [ 187.620586][T11005] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 187.620591][T11005] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 187.620603][T11005] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 187.620610][T11005] RDX: 0000000000000034 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.620616][T11005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.620623][T11005] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 187.620629][T11005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.620643][T11005] [ 187.749385][T11012] FAULT_INJECTION: forcing a failure. [ 187.749385][T11012] name fail_futex, interval 1, probability 0, space 0, times 1 [ 187.749419][T11012] CPU: 3 UID: 0 PID: 11012 Comm: syz.3.1554 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.749443][T11012] Tainted: [L]=SOFTLOCKUP [ 187.749450][T11012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.749461][T11012] Call Trace: [ 187.749467][T11012] [ 187.749474][T11012] dump_stack_lvl+0x100/0x190 [ 187.749504][T11012] should_fail_ex.cold+0x5/0xa [ 187.749529][T11012] should_fail_futex+0x4c/0x60 [ 187.749548][T11012] lock_pi_update_atomic+0x20/0x130 [ 187.749573][T11012] futex_lock_pi_atomic+0x3ff/0xb80 [ 187.749600][T11012] futex_lock_pi+0x278/0x7e0 [ 187.749629][T11012] ? __pfx_futex_lock_pi+0x10/0x10 [ 187.749662][T11012] ? __pfx___futex_wait+0x10/0x10 [ 187.749685][T11012] ? __pfx_try_to_wake_up+0x10/0x10 [ 187.749737][T11012] ? __pfx_futex_wake_mark+0x10/0x10 [ 187.749770][T11012] ? putname+0xb1/0x110 [ 187.749798][T11012] do_futex+0x371/0x440 [ 187.749819][T11012] ? __pfx_do_futex+0x10/0x10 [ 187.749837][T11012] ? do_sys_openat2+0x159/0x1e0 [ 187.749864][T11012] ? __pfx_do_sys_openat2+0x10/0x10 [ 187.749890][T11012] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 187.749919][T11012] __ia32_sys_futex_time32+0x2f4/0x470 [ 187.749943][T11012] ? xfd_validate_state+0x129/0x190 [ 187.749970][T11012] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 187.750023][T11012] __do_fast_syscall_32+0x13a/0x8b0 [ 187.750049][T11012] ? lockdep_hardirqs_on+0x7d/0x110 [ 187.750073][T11012] do_fast_syscall_32+0x32/0x70 [ 187.750097][T11012] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.750121][T11012] RIP: 0023:0xf7f95fec [ 187.750141][T11012] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 187.750149][T11012] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 187.750168][T11012] RAX: ffffffffffffffda RBX: 000000008000cffc RCX: 000000000000000d [ 187.750181][T11012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.750193][T11012] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.750205][T11012] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 187.750234][T11012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.750259][T11012] [ 188.608175][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1560'. [ 188.716438][T11029] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1562'. [ 188.747665][T11031] batman_adv: batadv0: Adding interface: syzkaller0 [ 188.747679][T11031] batman_adv: batadv0: Interface activated: syzkaller0 [ 188.825378][T11033] ovs-dp0: entered promiscuous mode [ 188.981729][T11043] fuse: fd is not a fuse device [ 189.018969][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1569'. [ 189.020125][T11046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.346362][T11054] jffs2: notice: (11054) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 189.942865][T11059] batman_adv: batadv0: Adding interface: syzkaller0 [ 189.942879][T11059] batman_adv: batadv0: Interface activated: syzkaller0 [ 190.010916][T11077] overlayfs: failed to clone upperpath [ 190.073082][T11080] virt_wifi0 speed is unknown, defaulting to 1000 [ 190.243631][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1588'. [ 190.488733][T11104] gre1: entered promiscuous mode [ 190.586211][ T62] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 190.756687][ T62] usb 8-1: Using ep0 maxpacket: 16 [ 190.758863][ T62] usb 8-1: unable to get BOS descriptor or descriptor too short [ 190.758903][ T62] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 190.759960][ T62] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 190.762228][ T62] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.762251][ T62] usb 8-1: Product: syz [ 190.762267][ T62] usb 8-1: Manufacturer: syz [ 190.762278][ T62] usb 8-1: SerialNumber: syz [ 192.088057][ T62] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 192.091757][ T62] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 192.253090][ T62] usb 8-1: USB disconnect, device number 6 [ 192.357896][ T9001] udevd[9001]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.439589][T11130] fuse: Bad value for 'fd' [ 192.453615][T11132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1594'. [ 192.655822][T11138] gre1: entered promiscuous mode [ 193.898713][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.898744][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.697624][T11203] overlayfs: failed to clone upperpath [ 196.224185][T11242] virt_wifi0 speed is unknown, defaulting to 1000 [ 197.193086][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1642'. [ 197.246239][T11271] FAULT_INJECTION: forcing a failure. [ 197.246239][T11271] name failslab, interval 1, probability 0, space 0, times 0 [ 197.246264][T11271] CPU: 0 UID: 0 PID: 11271 Comm: syz.3.1641 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.246281][T11271] Tainted: [L]=SOFTLOCKUP [ 197.246286][T11271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.246293][T11271] Call Trace: [ 197.246298][T11271] [ 197.246302][T11271] dump_stack_lvl+0x100/0x190 [ 197.246323][T11271] should_fail_ex.cold+0x5/0xa [ 197.246339][T11271] should_failslab+0xc2/0x120 [ 197.246356][T11271] __kvmalloc_node_noprof+0x113/0x9b0 [ 197.246373][T11271] ? __asan_memcpy+0x3c/0x60 [ 197.246386][T11271] ? alloc_netdev_mqs+0xd7/0x15c0 [ 197.246399][T11271] ? __pfx_do_setup+0x10/0x10 [ 197.246413][T11271] alloc_netdev_mqs+0xd7/0x15c0 [ 197.246425][T11271] ? ovs_vport_alloc+0x288/0x3b0 [ 197.246440][T11271] internal_dev_create+0x8a/0x520 [ 197.246455][T11271] ovs_vport_add+0x100/0x300 [ 197.246469][T11271] new_vport+0x16/0x1d0 [ 197.246489][T11271] ovs_dp_cmd_new+0x67e/0xe30 [ 197.246504][T11271] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 197.246515][T11271] ? __nla_parse+0x40/0x60 [ 197.246532][T11271] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 197.246552][T11271] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 197.246580][T11271] genl_family_rcv_msg_doit+0x214/0x300 [ 197.246617][T11271] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 197.246644][T11271] ? genl_get_cmd+0x3e7/0x760 [ 197.246678][T11271] ? bpf_lsm_capable+0x9/0x10 [ 197.246695][T11271] ? security_capable+0x80/0x260 [ 197.246720][T11271] ? ns_capable+0xd2/0xf0 [ 197.246752][T11271] genl_rcv_msg+0x560/0x800 [ 197.246774][T11271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.246793][T11271] ? __lock_acquire+0x5c0/0x1f40 [ 197.246821][T11271] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 197.246852][T11271] netlink_rcv_skb+0x159/0x420 [ 197.246880][T11271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.246900][T11271] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.246940][T11271] ? netlink_deliver_tap+0x1ae/0xcc0 [ 197.246971][T11271] genl_rcv+0x28/0x40 [ 197.246999][T11271] netlink_unicast+0x585/0x850 [ 197.247031][T11271] ? __pfx_netlink_unicast+0x10/0x10 [ 197.247067][T11271] netlink_sendmsg+0x8b0/0xda0 [ 197.247099][T11271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.247129][T11271] ? apparmor_socket_sendmsg+0x165/0x280 [ 197.247164][T11271] __sys_sendto+0x48b/0x4e0 [ 197.247193][T11271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.247222][T11271] ? __pfx___sys_sendto+0x10/0x10 [ 197.247257][T11271] ? fd_install+0x223/0x580 [ 197.247293][T11271] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 197.247347][T11271] __ia32_sys_sendto+0xdd/0x1b0 [ 197.247376][T11271] ? __do_fast_syscall_32+0xb3/0x8b0 [ 197.247402][T11271] ? lockdep_hardirqs_on+0x7d/0x110 [ 197.247438][T11271] __do_fast_syscall_32+0x13a/0x8b0 [ 197.247467][T11271] do_fast_syscall_32+0x32/0x70 [ 197.247493][T11271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.247518][T11271] RIP: 0023:0xf7f95fec [ 197.247539][T11271] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 197.247548][T11271] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 197.247567][T11271] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 197.247581][T11271] RDX: 0000000000000034 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.247593][T11271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.247611][T11271] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 197.247622][T11271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.247649][T11271] [ 197.539083][T11282] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.539171][T11282] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 197.549062][T11282] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 197.549120][T11282] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 197.555757][T11282] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 197.567907][T11282] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 197.568148][T11282] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 197.569032][T11282] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 197.569799][T11282] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.569829][T11282] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 197.570597][T11282] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 197.803485][T11294] netlink: 'syz.7.1650': attribute type 1 has an invalid length. [ 197.815553][T11294] bond0: entered promiscuous mode [ 197.815746][T11294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.833681][T11294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.833844][T11294] bond0: (slave gre2): The slave device specified does not support setting the MAC address [ 197.833855][T11294] bond0: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 197.855188][T11294] bond0: (slave gre2): making interface the new active one [ 197.855205][T11294] gre2: entered promiscuous mode [ 197.862131][T11294] bond0: (slave gre2): Enslaving as an active interface with an up link [ 197.883622][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1650'. [ 197.891125][T11294] bond0 (unregistering): (slave gre2): Releasing backup interface [ 197.891143][T11294] gre2: left promiscuous mode [ 197.893208][T11294] bond0 (unregistering): Released all slaves [ 198.009235][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1653'. [ 198.859169][T11325] MTD: Couldn't look up './dev/mtdblock0': -2 [ 199.575984][ T5738] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.576030][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.576049][ T5738] Bluetooth: hci4: command 0x0c1a tx timeout [ 199.576066][ T5738] Bluetooth: hci3: command 0x0406 tx timeout [ 199.867630][ T227] IPVS: starting estimator thread 0... [ 199.976136][T11348] IPVS: using max 42 ests per chain, 100800 per kthread [ 200.228157][T11358] ceph: No mds server is up or the cluster is laggy [ 200.328521][T11370] overlayfs: failed to clone upperpath [ 200.329658][T11370] overlayfs: failed to resolve './cgroup': -2 [ 200.397580][T11372] virt_wifi0 speed is unknown, defaulting to 1000 [ 200.539318][T11375] netlink: 'syz.7.1679': attribute type 1 has an invalid length. [ 200.556958][T11375] bond0: entered promiscuous mode [ 200.557142][T11375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.588552][T11375] bond0: (slave bridge6): making interface the new active one [ 200.588569][T11375] bridge6: entered promiscuous mode [ 200.607006][T11375] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 200.931798][ T43] audit: type=1326 audit(1790702835.539:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11393 comm="syz.1.1687" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2fec code=0x0 [ 201.019313][T11400] overlayfs: failed to clone upperpath [ 201.656974][ T5733] Bluetooth: hci3: command 0x0406 tx timeout [ 201.657002][ T5733] Bluetooth: hci4: command 0x0c1a tx timeout [ 201.657020][ T5733] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.657034][ T5733] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.073667][T11424] jffs2: notice: (11424) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 202.381308][T11442] netlink: 'syz.7.1705': attribute type 1 has an invalid length. [ 202.414481][T11442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.451253][T11442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.451423][T11442] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 202.451946][T11442] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 202.554285][T11407] syz.2.1692 (11407) used greatest stack depth: 19320 bytes left [ 202.558536][T11448] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 202.564747][T11448] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 202.676884][ T5738] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 202.677289][T11454] virt_wifi0 speed is unknown, defaulting to 1000 [ 203.136127][T11472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1717'. [ 203.136302][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1719'. [ 203.195314][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1719'. [ 203.381891][T11480] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1720'. [ 203.452905][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1720'. [ 203.465450][T11484] overlayfs: failed to clone upperpath [ 203.536691][T11489] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1725'. [ 203.536708][T11489] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1725'. [ 203.746080][ T5733] Bluetooth: hci4: command 0x0c1a tx timeout [ 203.746114][ T5738] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.788299][T11540] netlink: 'syz.2.1747': attribute type 10 has an invalid length. [ 204.788337][T11540] syz_tun: entered promiscuous mode [ 204.788517][T11538] kvm: apic: phys broadcast and lowest prio [ 204.791177][T11540] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 204.805025][T11540] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 204.805062][T11540] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 204.805105][T11540] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 204.814575][T11540] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 205.029962][T11552] fuse: Bad value for 'fd' [ 205.206067][ T35] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 205.241138][T11562] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1755'. [ 205.241155][T11562] openvswitch: netlink: Flow key attr not present in new flow. [ 205.386486][ T35] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.387910][ T35] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.389866][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.389885][ T35] usb 8-1: Product: syz [ 205.389900][ T35] usb 8-1: Manufacturer: syz [ 205.389913][ T35] usb 8-1: SerialNumber: syz [ 205.392625][T11570] overlayfs: failed to clone upperpath [ 205.611003][T11548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.612334][T11548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.621792][ T35] cdc_ether 8-1:1.0: skipping garbage [ 205.621961][ T35] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 205.630577][ T35] usb 8-1: USB disconnect, device number 7 [ 206.099092][ T35] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 206.256001][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 206.256566][ T35] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 206.257484][ T35] usb 8-1: config index 0 descriptor too short (expected 301, got 72) [ 206.257499][ T35] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 206.257519][ T35] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.257532][ T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 206.257545][ T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 206.257558][ T35] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.257580][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.471081][ T35] usb 8-1: GET_CAPABILITIES returned 0 [ 206.471124][ T35] usbtmc 8-1:16.0: can't read capabilities [ 206.675010][ T7017] usb 8-1: USB disconnect, device number 8 [ 207.132851][T11608] netlink: 'syz.2.1775': attribute type 1 has an invalid length. [ 207.146372][T11608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.172756][T11608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.173082][T11608] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 207.173734][T11608] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 207.211917][T11613] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 207.212841][T11613] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 207.581475][T11626] ovs-dp0: entered promiscuous mode [ 207.695192][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1783'. [ 208.542564][T11652] vlan0: entered promiscuous mode [ 209.177192][T11664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1791'. [ 209.531327][T11672] bridge_slave_1: left allmulticast mode [ 209.531354][T11672] bridge_slave_1: left promiscuous mode [ 209.531553][T11672] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.554484][T11619] syz.3.1778 (11619) used greatest stack depth: 19232 bytes left [ 209.562695][T11672] bridge_slave_0: left allmulticast mode [ 209.562735][T11672] bridge_slave_0: left promiscuous mode [ 209.564266][T11672] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.973340][T11695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1806'. [ 211.676108][ T7126] unregister_netdevice: waiting for vcan0 to become free. Usage count = 3 [ 211.676266][ T7126] ref_tracker: netdev@ffff888076860700 has 1/2 users at [ 211.676266][ T7126] j1939_ecu_create_locked+0x1fc/0x4d0 [ 211.676266][ T7126] j1939_local_ecu_get+0x1b8/0x250 [ 211.676266][ T7126] j1939_sk_bind+0x89b/0xdb0 [ 211.676266][ T7126] __sys_bind+0x1a9/0x260 [ 211.676266][ T7126] __ia32_sys_bind+0x71/0xb0 [ 211.676266][ T7126] __do_fast_syscall_32+0x13a/0x8b0 [ 211.676266][ T7126] do_fast_syscall_32+0x32/0x70 [ 211.676266][ T7126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.676266][ T7126] [ 211.676327][ T7126] ref_tracker: netdev@ffff888076860700 has 1/2 users at [ 211.676327][ T7126] j1939_netdev_start+0x2b8/0x990 [ 211.676327][ T7126] j1939_sk_bind+0x479/0xdb0 [ 211.676327][ T7126] __sys_bind+0x1a9/0x260 [ 211.676327][ T7126] __ia32_sys_bind+0x71/0xb0 [ 211.676327][ T7126] __do_fast_syscall_32+0x13a/0x8b0 [ 211.676327][ T7126] do_fast_syscall_32+0x32/0x70 [ 211.676327][ T7126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.676327][ T7126] [ 211.824268][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'. [ 211.824859][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'.