last executing test programs: 5.189782057s ago: executing program 1 (id=211): r0 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=@ceph_nfs_confh={0x10, 0x2, {0x0, 0x8000000000000001}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) mlock(&(0x7f000002b000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x7, 0x2) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x19) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x2801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) openat$tun(0xffffff9c, &(0x7f0000000040), 0xc0001, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @empty}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x40010}, 0x24000050) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMWRITEOOB(r4, 0xc0104d03, &(0x7f0000000140)={0x1e7, 0x100000, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x840000000002, 0x1, 0xff) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200, 0x1, &(0x7f0000000940)) madvise(&(0x7f000085a000/0x1000)=nil, 0x1000, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000000906010200000000000000000502ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a82000000000500010007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) 3.899880729s ago: executing program 3 (id=223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={0xffffffffffffffff, 0x20, &(0x7f0000001880)={&(0x7f0000000800)=""/4096, 0x1000, 0x0, &(0x7f0000001800)=""/68, 0x44}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r2, 0x0) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x8000, &(0x7f00000001c0)=0x8, 0x5, 0x3) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3.839834729s ago: executing program 3 (id=224): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x20001, 0x18b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x800) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000280)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000001c0)=0x6) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3.744719313s ago: executing program 1 (id=225): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) timer_settime(0x0, 0x1, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) unshare(0x60040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffe00}, {}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x261, 0x27, &(0x7f0000000240)=""/39, 0x41000, 0x18, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x1361e, 0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x3, 0x2, 0x3, 0x4}, {0x5, 0x3, 0xf}], 0x10, 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000400)=r1, 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x9, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) close(0x3) bind$xdp(r3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000980)=ANY=[@ANYBLOB="602200004400010029bd7000040000000200000004004880482201"], 0x2260}, 0x1, 0x0, 0x0, 0x20004895}, 0x2000c814) eventfd(0xfffffff9) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 3.661810339s ago: executing program 3 (id=226): socket(0x2, 0x80805, 0x0) r0 = dup(0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8840) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000602, 0x0, &(0x7f0000000300)={0x2, 0x4, 0x0, 0x4}) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$rds(r0, &(0x7f0000003600)={&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001b00)=[{&(0x7f00000001c0)=""/76, 0x4c}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000000480)=""/254, 0xfe}, {&(0x7f0000000580)=""/223, 0xdf}, {&(0x7f0000000680)=""/247, 0xf7}, {&(0x7f0000000780)=""/70, 0x46}, {&(0x7f0000000800)=""/183, 0xb7}, {&(0x7f00000008c0)=""/55, 0x37}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/58, 0x3a}], 0xa, &(0x7f0000003480)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x7b}, {&(0x7f0000001b80)=""/4096, 0x1000}, &(0x7f0000003100)=[{&(0x7f0000002b80)=""/38, 0x26}, {&(0x7f0000002bc0)=""/242, 0xf2}, {&(0x7f0000002cc0)=""/59, 0x3b}, {&(0x7f0000002d00)=""/82, 0x52}, {&(0x7f0000002d80)=""/168, 0xa8}, {&(0x7f0000002e40)=""/127, 0x7f}, {&(0x7f0000002ec0)=""/111, 0x6f}, {&(0x7f0000002f40)=""/106, 0x6a}, {&(0x7f0000002fc0)=""/178, 0xb2}, {&(0x7f0000003080)=""/127, 0x7f}], 0xa, 0x8, 0x2}}, @zcopy_cookie={0x10, 0x114, 0xc, 0x3}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x5}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f00000031c0)=""/31, 0x1f}, &(0x7f0000003200), 0x490891ede69ad021}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000003240)=""/235, 0xeb}, &(0x7f0000003340), 0x50}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000003380)=""/25, 0x19}, &(0x7f00000033c0), 0x13}}, @fadd={0x58, 0x114, 0x6, {{0x6, 0x3ff}, &(0x7f0000003400)=0x200, &(0x7f0000003440), 0x8, 0x16c, 0x0, 0x79, 0x62, 0xffffffffffffffc0}}], 0x14c, 0xc801}, 0x8000) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 3.450174612s ago: executing program 1 (id=227): mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x1000, 0x3, &(0x7f0000598000/0x1000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10119, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x9d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRESOCT=r0], 0x50) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$CDROMREADAUDIO(r4, 0x5392, &(0x7f0000000000)={@msf={0x1, 0xc0, 0x2}, 0x1, 0x0, 0x0}) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) mbind(&(0x7f0000c9c000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x100000000000002, 0x9, 0x1) socket(0x25, 0x801, 0x7) openat$dir(0xffffff9c, 0x0, 0x40, 0x80) r5 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r5, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) 2.810040925s ago: executing program 2 (id=230): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) 2.809729325s ago: executing program 0 (id=231): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) 2.748092568s ago: executing program 0 (id=232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={0xffffffffffffffff, 0x20, &(0x7f0000001880)={&(0x7f0000000800)=""/4096, 0x1000, 0x0, &(0x7f0000001800)=""/68, 0x44}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r2, 0x0) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x8000, &(0x7f00000001c0)=0x8, 0x5, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.747877108s ago: executing program 3 (id=233): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x3}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x8) syz_io_uring_modify_offsets$flags(r1, r2, 0x68, 0x1) r3 = eventfd2(0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000200)=r3, 0x1) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f00000000c0)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 2.747747062s ago: executing program 2 (id=234): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/rt_cache\x00') (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x1, 0xfffffffe, 0x19, "0038e0079c7f65c5d13c000000f73809630400"}) (async) r3 = syz_open_pts(r2, 0x900) r4 = dup3(r3, r2, 0x80000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) 2.643996346s ago: executing program 0 (id=235): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x4ec641, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r4, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="ec0002001000130720000000fedbdf25e0000001000000000000000000000000ac00000000000000000000000400004e210e020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e000000200000000000000000000000000000000000000000000000000000000020000000000000009000000000000000d00000000000000000000000000000001000080000000004305000000000000040000000000000000000000000000800000000000000000fdffffffffffffff0000000000000000020000002cbd700003350000020000004d000000"], 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r5, &(0x7f0000000180)=0xfe5f, 0x12) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e00200001e00010029bd7000fcdbdf2514000000cc00f30077650b8a3ff9624abc1fd3da1bc0c6165a422c86814441545cb1b21b10faf9156b52762a3a585b0505a754f2b3179eb9f54b9c7acb9b63e89f0a7cf36901758b047a9eb5721469c5ab335e702191f66210049ccf5281e56ba0", @ANYRES32, @ANYBLOB="8f00"], 0x2e0}, 0x1, 0x0, 0x0, 0x890}, 0x20004080) syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') 2.556063273s ago: executing program 3 (id=236): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x18, r1, 0x800, 0x70bd2c, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt(r3, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e1d, 0x4, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000080)=0x2, 0x4) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x0, 0x2, 0x1b}, &(0x7f0000000200), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @local, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7800, 0x8, 0x9, 0x1}}) unshare(0x26020480) 2.517870341s ago: executing program 1 (id=237): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b37, &(0x7f0000000040)={'wlan0\x00'}) 2.386308336s ago: executing program 2 (id=238): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, 0x0, 0x40400d4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000a00)) 1.723260478s ago: executing program 1 (id=239): readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r1, r3, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0xbe2, &(0x7f00000035c0)=ANY=[], 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r4 = creat(&(0x7f0000000440)='./file0\x00', 0xb) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x40000000, 0x8, 0x1, 0x0, 0xff, 0x5, 0x1}]}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi5\x00', 0x2ac00, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000300)={'aio_iiro_16\x00', [0x100, 0x4, 0x4, 0x2, 0x5, 0x100, 0x3, 0x20000010, 0x800, 0xb, 0x80, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x8, 0xfe9, 0x401, 0x3, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a7a, 0x5, 0x7, 0x8]}) close(r4) r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r10, 0x400, 0x1) r11 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) r1 = gettid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)=0x0) syz_clone3(&(0x7f0000000680)={0x2410a0080, &(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0), {0x4}, &(0x7f0000000500)=""/174, 0xae, &(0x7f00000005c0)=""/91, &(0x7f0000000640)=[0x0], 0x1}, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r5, 0x8405}], 0x1, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000740)={0x40000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/211, 0xd3, &(0x7f0000000300)=""/39, &(0x7f0000000700)=[r0, r1, r2, r3, r4], 0x5, {r5}}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x181bd4799395f1df) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) rmdir(&(0x7f0000000380)='./file0/file0\x00') r6 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x0, r6}, 0x14) 1.646926205s ago: executing program 2 (id=242): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x28, 0x64, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x20}, {[@timestamp_addr={0x44, 0x4, 0xc6, 0x1, 0xf}]}}, {0x4e23, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x7, 0x100}}}}}, 0x36) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 1.539984792s ago: executing program 3 (id=243): syz_emit_ethernet(0x8a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb81004500080045000078000000000011"], 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="0800fedbdf25010000001c0007800c0001800800010000000000", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="09000a0070726f63000000000c0002000a0000000000000004000a000c000300020000000000000011000ae86e65742f736f636b73746174000000000c00060003000000000000001c0007800c00018008000100", @ANYRES32=r6, @ANYRESDEC=r5, @ANYRES32=r6, @ANYBLOB="0c0004000800000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x40010}, 0x10) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs/file-max\x00', 0x1, 0x0) write(r7, &(0x7f0000000100)='0', 0x1) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000380)={0x7, 0x7, 0x4, 0x1ff, 0x101, 0x1}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) socket$key(0xf, 0x3, 0x2) syz_open_procfs(r8, &(0x7f0000000000)='net/sockstat\x00') openat$uinput(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.539673318s ago: executing program 2 (id=244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000fe8000000000000000000000000000aa00000004000100000a00608087000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000063000000000000000000fdffffffffffffff00000000000000000000000000000000feffffffffffffff040000000000000000000000000000000000000000000000090000000000000000010200"], 0xb8}}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x1000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @sk_reuseport=0x169a2bf319b195b4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x4f}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2000000000000000}, {0x0, 0x1}, 0x0, 0x4, 0x0, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x4d2, 0xff}, 0x0, @in=@empty, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe4) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x4c005) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r8], 0xb8}}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000100)=0x5, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020156", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x4000880) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) write(r10, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 737.510565ms ago: executing program 0 (id=245): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_get$uid(0x3, 0x0) 659.18835ms ago: executing program 0 (id=246): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) r2 = socket(0x2d, 0x2, 0x0) read(r2, &(0x7f0000000240)=""/77, 0x4d) r3 = socket(0x40000000015, 0x5, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@delqdisc={0x100, 0x25, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xe, 0xc}, {0xb, 0x1}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd2}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x401}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) recvmmsg$unix(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001d0000012abd7000fcdbdf250a000000", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x8d2c0f0760922ef9}, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) mq_getsetattr(r0, &(0x7f0000000440)={0x3, 0x6, 0x0, 0x2}, &(0x7f0000000480)) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000028c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002680)=ANY=[@ANYBLOB="51a7ab7d", @ANYRES16=0x0, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000002380)=[0x0], 0x1}) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="0000000000303e97380e90231bdbdaf6a4bd77eabcd3866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9d00000c0a498396b28c7d1784d04aa38922721cb781608144284d90a72d7d2e3152d201ed78ffb6e711b889cda0346ce9bca2e6e9e46b15980456c43a659f427e3e6e9e16e0de93100734d409ca57c27d3bde66b2791c1b2f7032f3cc02c85c43e8652f13258bd412174ea931f1d39a9830e593761d91c56f637f0e1568ea66a15d9f0eba504ab3eb205fda13d1068e7692f8d00a2d92d2fb48887b6f71c6de43a923bbcaa9e3ac5bd82ac0ec00000000000000000000000000000000e48251271d0ed111d9ed7f4d18ee4aa30240843ed560aeebee209d8c557e60e69e634b37c43235e062634e8f0932582eb91d27c5c81911c5a4d57ea2813573aec3a6909f30f29c535a", 0x142}, {&(0x7f0000000d00)="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"/831, 0x33f}], 0x2}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000002900)=ANY=[@ANYBLOB="580000002d00000425bd7000fcdbdf2519000000f32eb69c2661d19542783bb4e88d3a3e5af10b63331454257bb7fa189e727b5fb33420b21dd2d9a1be2fc1787d01a5e9e5b7c54aabe0bd55a20d10c84ae35446fe0000001aaaad4ee429b77de39cd90be7fe87bd1663d69601292ae77c9dd6c9c969b022d1e2dce0e807859ae4a3f37fd698eb28284675929b560c38db3111c5655660f68d13cd5c8014f6f8e76abb88e21a36c1ff94803f32373314aa9205d970b556589038ac3c14b3d542de364b00a215e3c3b3e817c150565df02d8a26f43ee0f77052e09445de256076a2957e72163e08a900c707f07be7e96fe654d3440ecd80dd586b8d64d628ee49c3a8bcd9f286cbd1bf6ec3a10e1bddf9a49f8d9e7a04f7414577cf2d20874aeef2e551bebbe2fc863eec87d54e781fcd7b5c27d43b2a619cc4f35078a6af158bbfa8e10f9e4aba8a4452c2af300bd46d5844bafe30492ad08687a43de126cce8f3966f95a0f460c350bc63899f02642fe0a60b630bff7939466065173d001ef9af45a80bc391878421280538960562f8a927c1ef74d7dfc0caa781c98c7e4190"], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x200400c0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 0s ago: executing program 1 (id=247): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = io_uring_setup(0x6ded, &(0x7f0000000080)={0x0, 0x4279, 0x1, 0x801, 0x135}) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x24000000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x10400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044801}, 0x10) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='0', 0x1) write$cgroup_type(r3, &(0x7f0000000080), 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:18765' (ED25519) to the list of known hosts. [ 41.350067][ T5683] cgroup: Unknown subsys name 'net' [ 41.489775][ T5683] cgroup: Unknown subsys name 'cpuset' [ 41.497429][ T5683] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.585167][ T5683] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.737521][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.737537][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.739695][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.741678][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.742223][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.742355][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.743047][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.745758][ T5743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.746009][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.746598][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.747215][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.750943][ T5744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.751177][ T5094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.753458][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.757242][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.760380][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.762113][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.765343][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.767854][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.770702][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.558030][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.562404][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.567330][ T5731] bridge_slave_0: entered allmulticast mode [ 47.571333][ T5731] bridge_slave_0: entered promiscuous mode [ 47.597182][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.602124][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.604586][ T5741] bridge_slave_0: entered allmulticast mode [ 47.607380][ T5741] bridge_slave_0: entered promiscuous mode [ 47.610685][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.612987][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.615385][ T5741] bridge_slave_1: entered allmulticast mode [ 47.618096][ T5741] bridge_slave_1: entered promiscuous mode [ 47.620739][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.624775][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.627896][ T5731] bridge_slave_1: entered allmulticast mode [ 47.631616][ T5731] bridge_slave_1: entered promiscuous mode [ 47.707564][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.712521][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.715685][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.717938][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.720441][ T5732] bridge_slave_0: entered allmulticast mode [ 47.724447][ T5732] bridge_slave_0: entered promiscuous mode [ 47.744119][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.750622][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.775673][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.781256][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.784306][ T5732] bridge_slave_1: entered allmulticast mode [ 47.787987][ T5732] bridge_slave_1: entered promiscuous mode [ 47.801176][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.804450][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.807475][ T5733] bridge_slave_0: entered allmulticast mode [ 47.811275][ T5733] bridge_slave_0: entered promiscuous mode [ 47.829805][ T5731] team0: Port device team_slave_0 added [ 47.838174][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.841139][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.844016][ T5733] bridge_slave_1: entered allmulticast mode [ 47.847740][ T5733] bridge_slave_1: entered promiscuous mode [ 47.862759][ T5741] team0: Port device team_slave_0 added [ 47.867686][ T5741] team0: Port device team_slave_1 added [ 47.870712][ T5731] team0: Port device team_slave_1 added [ 47.874342][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.904868][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.910416][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.922072][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.926499][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.928699][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.936354][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.949283][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.952220][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.960447][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.972050][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.974288][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.983454][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.998686][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.002393][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.012671][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.038586][ T5732] team0: Port device team_slave_0 added [ 48.047596][ T5733] team0: Port device team_slave_0 added [ 48.052768][ T5733] team0: Port device team_slave_1 added [ 48.056107][ T5732] team0: Port device team_slave_1 added [ 48.101115][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.103323][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.112071][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.116555][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.119031][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.127136][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.144920][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.147241][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.155604][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.176869][ T5741] hsr_slave_0: entered promiscuous mode [ 48.179881][ T5741] hsr_slave_1: entered promiscuous mode [ 48.190520][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.193648][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.204909][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.222065][ T5731] hsr_slave_0: entered promiscuous mode [ 48.225336][ T5731] hsr_slave_1: entered promiscuous mode [ 48.228162][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 48.230612][ T5731] Cannot create hsr debugfs directory [ 48.323927][ T5732] hsr_slave_0: entered promiscuous mode [ 48.327079][ T5732] hsr_slave_1: entered promiscuous mode [ 48.329370][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 48.331416][ T5732] Cannot create hsr debugfs directory [ 48.366236][ T5733] hsr_slave_0: entered promiscuous mode [ 48.368614][ T5733] hsr_slave_1: entered promiscuous mode [ 48.370743][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 48.372569][ T5733] Cannot create hsr debugfs directory [ 48.630119][ T5741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.638935][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.641773][ T5741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.646911][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.649576][ T5741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.655029][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.658143][ T5741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.662099][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.731828][ T5731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.739465][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.745655][ T5731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.751389][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.754468][ T5731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.758929][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.761827][ T5731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.767493][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.794666][ T5743] Bluetooth: hci0: command tx timeout [ 48.795092][ T64] Bluetooth: hci3: command tx timeout [ 48.795356][ T5738] Bluetooth: hci2: command tx timeout [ 48.846123][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.853189][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.856697][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.860768][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.871758][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.877217][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.880049][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.884449][ T64] Bluetooth: hci1: command tx timeout [ 48.885021][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.905658][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.966205][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.974508][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.978778][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.981558][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.987989][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.990963][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.995244][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.005180][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.008044][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.011185][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.016772][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.028149][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.050810][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.053097][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.081999][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.096436][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.099186][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.119048][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.121520][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.166805][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.205253][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.222685][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.226149][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.247165][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.252374][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.254947][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.294061][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.304796][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.307883][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.337996][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.340981][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.521165][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.532021][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.568818][ T5731] veth0_vlan: entered promiscuous mode [ 49.585600][ T5731] veth1_vlan: entered promiscuous mode [ 49.597668][ T5741] veth0_vlan: entered promiscuous mode [ 49.605010][ T5741] veth1_vlan: entered promiscuous mode [ 49.627921][ T5731] veth0_macvtap: entered promiscuous mode [ 49.634468][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.636924][ T5741] veth0_macvtap: entered promiscuous mode [ 49.639934][ T5731] veth1_macvtap: entered promiscuous mode [ 49.646810][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.651334][ T5741] veth1_macvtap: entered promiscuous mode [ 49.673273][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.681757][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.692233][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.705347][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.714009][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.748592][ T5733] veth0_vlan: entered promiscuous mode [ 49.768904][ T5732] veth0_vlan: entered promiscuous mode [ 49.771890][ T5733] veth1_vlan: entered promiscuous mode [ 49.785310][ T5732] veth1_vlan: entered promiscuous mode [ 49.829979][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.830587][ T5733] veth0_macvtap: entered promiscuous mode [ 49.833052][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.850576][ T5732] veth0_macvtap: entered promiscuous mode [ 49.856499][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.856597][ T5733] veth1_macvtap: entered promiscuous mode [ 49.859585][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.874839][ T5732] veth1_macvtap: entered promiscuous mode [ 49.882826][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.885760][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.901397][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.901453][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.904413][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.910971][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.916919][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.929339][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.939344][ T5741] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.941935][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.953943][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.963056][ T5731] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.971877][ T5731] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.976165][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.976194][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.976213][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.985641][ T5741] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.996886][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.007649][ T5741] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.018261][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.021452][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.043167][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.043638][ T5812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.046798][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.049223][ T5812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.096773][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.101394][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.122398][ T229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.126614][ T229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.163907][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.167336][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.298402][ T5895] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 50.373708][ T5812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.378062][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.404362][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.407232][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.493962][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.744003][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5'. [ 50.873682][ T64] Bluetooth: hci3: command tx timeout [ 50.883962][ T64] Bluetooth: hci2: command tx timeout [ 50.886617][ T64] Bluetooth: hci0: command tx timeout [ 50.953878][ T5743] Bluetooth: hci1: command tx timeout [ 52.016640][ T5966] mtrr: base(0xa880000080000) is not aligned on a size(0x0000) boundary [ 52.024572][ T41] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.195239][ T41] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 52.220017][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.224971][ T41] usb 5-1: Product: syz [ 52.227329][ T41] usb 5-1: Manufacturer: syz [ 52.229190][ T41] usb 5-1: SerialNumber: syz [ 52.809571][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 52.825484][ C1] process 5967 (syz.3.11) no longer affine to cpu1 [ 52.845218][ T5986] smpboot: CPU 1 is now offline [ 52.882625][ T5986] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 52.954000][ T5967] process 5968 (syz.3.11) no longer affine to cpu1 [ 52.957185][ T5967] process 5974 (syz.3.11) no longer affine to cpu1 [ 52.957207][ T5967] process 5976 (syz.3.11) no longer affine to cpu1 [ 52.957218][ T5967] process 5980 (syz.3.11) no longer affine to cpu1 [ 52.963701][ T5743] Bluetooth: hci0: command tx timeout [ 52.971376][ T5743] Bluetooth: hci2: command tx timeout [ 52.973092][ T5743] Bluetooth: hci3: command tx timeout [ 52.975034][ T5743] Bluetooth: hci1: command tx timeout [ 53.321581][ T5998] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 53.439679][ T41] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 53.445723][ T41] kalmia 5-1:1.0: probe with driver kalmia failed with error -71 [ 53.464067][ T41] usb 5-1: USB disconnect, device number 2 [ 53.655545][ T5841] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 53.829189][ T5841] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 53.833048][ T5841] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 53.837961][ T5841] usb 6-1: config 0 interface 0 has no altsetting 0 [ 53.844327][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 53.853621][ T5841] usb 6-1: Product: syz [ 53.855374][ T5841] usb 6-1: Manufacturer: syz [ 53.857308][ T5841] usb 6-1: SerialNumber: syz [ 53.862672][ T5841] usb 6-1: config 0 descriptor?? [ 53.873420][ T5841] usb 6-1: selecting invalid altsetting 0 [ 54.000594][ T6011] Zero length message leads to an empty skb [ 54.254817][ T9] usb 6-1: USB disconnect, device number 2 [ 54.254884][ C3] usb 6-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 54.260030][ C3] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 54.260363][ T6023] usb 6-1: cannot submit urb 0, error -19: no device [ 54.837021][ T6034] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 55.033661][ T64] Bluetooth: hci1: command tx timeout [ 55.035545][ T64] Bluetooth: hci3: command tx timeout [ 55.037453][ T5743] Bluetooth: hci2: command tx timeout [ 55.037547][ T5738] Bluetooth: hci0: command tx timeout [ 55.383707][ T41] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 55.424312][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.556208][ T41] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 55.562083][ T41] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 55.565923][ T41] usb 5-1: config 0 interface 0 has no altsetting 0 [ 55.570760][ T41] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 55.573403][ T41] usb 5-1: Product: syz [ 55.574244][ T9] usb 8-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 55.577076][ T41] usb 5-1: Manufacturer: syz [ 55.579964][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.580283][ T41] usb 5-1: SerialNumber: syz [ 55.588837][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.594271][ T41] usb 5-1: config 0 descriptor?? [ 55.594799][ T9] usb 8-1: Product: syz [ 55.597914][ T9] usb 8-1: Manufacturer: syz [ 55.599836][ T9] usb 8-1: SerialNumber: syz [ 55.605755][ T41] usb 5-1: selecting invalid altsetting 0 [ 55.613451][ T9] kl5kusb105 8-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 55.619661][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 55.628840][ T9] usb 8-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 55.999934][ C1] usb 5-1: Unable to submit urb #1: -19 at snd_usb_queue_pending_output_urbs [ 55.999938][ T41] usb 5-1: USB disconnect, device number 3 [ 56.000193][ T6067] usb 5-1: cannot submit urb 0, error -19: no device [ 56.008797][ T6067] usb 5-1: cannot submit urb 0, error -19: no device [ 56.103632][ T5841] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 56.274377][ T5841] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 56.279161][ T5841] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 56.283775][ T5841] usb 6-1: config 0 interface 0 has no altsetting 0 [ 56.288576][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 56.292012][ T5841] usb 6-1: Product: syz [ 56.293946][ T5841] usb 6-1: Manufacturer: syz [ 56.295956][ T5841] usb 6-1: SerialNumber: syz [ 56.302064][ T5841] usb 6-1: config 0 descriptor?? [ 56.312992][ T5841] usb 6-1: selecting invalid altsetting 0 [ 56.643995][ T9] usb 6-1: USB disconnect, device number 3 [ 56.753660][ T56] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 56.919568][ T56] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 56.924404][ T56] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 56.927787][ T56] usb 7-1: config 0 interface 0 has no altsetting 0 [ 56.933425][ T56] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 56.936251][ T56] usb 7-1: Product: syz [ 56.937754][ T56] usb 7-1: Manufacturer: syz [ 56.939438][ T56] usb 7-1: SerialNumber: syz [ 56.954908][ T56] usb 7-1: config 0 descriptor?? [ 56.994897][ T56] usb 7-1: selecting invalid altsetting 0 [ 57.233088][ T6099] kl5kusb105d ttyUSB0: reading line status failed: -32 [ 57.346445][ T34] usb 7-1: USB disconnect, device number 2 [ 57.346444][ C2] usb 7-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 57.352604][ C2] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 57.438531][ T5841] usb 8-1: USB disconnect, device number 2 [ 57.456505][ T5841] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 57.461302][ T5841] kl5kusb105 8-1:1.0: device disconnected [ 57.490502][ T6098] netlink: 'syz.1.38': attribute type 4 has an invalid length. [ 57.493757][ T6098] netlink: 152 bytes leftover after parsing attributes in process `syz.1.38'. [ 57.745252][ T6110] netlink: 120 bytes leftover after parsing attributes in process `syz.0.41'. [ 58.090938][ T6123] netlink: 56 bytes leftover after parsing attributes in process `syz.3.45'. [ 58.404450][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 58.460048][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.49'. [ 58.513718][ T42] audit: type=1804 audit(1786384660.209:2): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.49" name="/newroot/11/file1" dev="tmpfs" ino=82 res=1 errno=0 [ 58.564280][ T24] usb 8-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 58.580378][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.596694][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.600608][ T24] usb 8-1: Product: syz [ 58.602368][ T24] usb 8-1: Manufacturer: syz [ 58.604101][ T24] usb 8-1: SerialNumber: syz [ 58.615224][ T24] kl5kusb105 8-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 58.630047][ T24] usb 8-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 58.820644][ T6149] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 58.869816][ T42] audit: type=1800 audit(1786384660.619:3): pid=6150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.43" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 59.289260][ T6162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.55'. [ 59.306162][ T6162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.55'. [ 60.200457][ T65] block nbd0: Receive control failed (result -32) [ 60.231482][ T5734] block nbd0: shutting down sockets [ 60.245867][ T6176] kl5kusb105d ttyUSB0: reading line status failed: -32 [ 60.384877][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 60.457323][ T2317] usb 8-1: USB disconnect, device number 3 [ 60.464862][ T2317] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 60.470705][ T2317] kl5kusb105 8-1:1.0: device disconnected [ 60.629848][ T6194] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 60.630544][ T6153] syz.1.53 (6153) used greatest stack depth: 19080 bytes left [ 61.732028][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 62.243708][ T56] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 62.394143][ T56] usb 5-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 62.397998][ T56] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.402923][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.405681][ T56] usb 5-1: Product: syz [ 62.407131][ T56] usb 5-1: Manufacturer: syz [ 62.409134][ T56] usb 5-1: SerialNumber: syz [ 62.416254][ T56] kl5kusb105 5-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 62.420721][ T56] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 62.787024][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 62.854884][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 62.970029][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 63.588431][ T6307] Bluetooth: MGMT ver 1.23 [ 63.698218][ T6307] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 64.097075][ T6322] kl5kusb105d ttyUSB0: reading line status failed: -32 [ 64.303287][ T41] usb 5-1: USB disconnect, device number 4 [ 64.319314][ T41] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 64.332598][ T41] kl5kusb105 5-1:1.0: device disconnected [ 64.540987][ T6343] process 'syz.2.85' launched './file0' with NULL argv: empty string added [ 64.545515][ T6343] Invalid argument reading file caps for ./file0 [ 64.845174][ T6357] FAULT_INJECTION: forcing a failure. [ 64.845174][ T6357] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 64.850611][ T6357] CPU: 3 UID: 0 PID: 6357 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(full) [ 64.850628][ T6357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.850634][ T6357] Call Trace: [ 64.850651][ T6357] [ 64.850656][ T6357] dump_stack_lvl+0x100/0x190 [ 64.850675][ T6357] should_fail_ex.cold+0x5/0xa [ 64.850688][ T6357] _copy_to_user+0x32/0xd0 [ 64.850705][ T6357] simple_read_from_buffer+0xcb/0x170 [ 64.850725][ T6357] proc_fail_nth_read+0x1af/0x230 [ 64.850747][ T6357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.850763][ T6357] ? rw_verify_area+0xce/0x6d0 [ 64.850779][ T6357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.850794][ T6357] vfs_read+0x1e4/0xb40 [ 64.850806][ T6357] ? __pfx_vfs_read+0x10/0x10 [ 64.850814][ T6357] ? find_held_lock+0x2b/0x80 [ 64.850828][ T6357] ? __fget_files+0x215/0x3d0 [ 64.850840][ T6357] ? __fget_files+0x21f/0x3d0 [ 64.850854][ T6357] ksys_read+0x12a/0x250 [ 64.850863][ T6357] ? __pfx_ksys_read+0x10/0x10 [ 64.850872][ T6357] ? trace_syscall_enter+0xd9/0x110 [ 64.850887][ T6357] do_int80_emulation+0x14b/0x720 [ 64.850906][ T6357] asm_int80_emulation+0x1a/0x20 [ 64.850917][ T6357] RIP: 0023:0xf71174eb [ 64.850926][ T6357] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 64.850936][ T6357] RSP: 002b:00000000f53cd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 64.850957][ T6357] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53cd5d0 [ 64.850963][ T6357] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 64.850969][ T6357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.850974][ T6357] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 64.850980][ T6357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.850993][ T6357] [ 65.225556][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'. [ 65.469578][ T6384] netlink: 64 bytes leftover after parsing attributes in process `syz.3.92'. [ 65.578208][ T6399] ip6gretap0: entered promiscuous mode [ 65.858075][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 66.317891][ T6422] smpboot: CPU 1 is now offline [ 66.361800][ T6427] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 66.596329][ T6437] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 66.635677][ T6443] cgroup: Invalid name [ 66.669481][ T6448] tipc: Started in network mode [ 66.672692][ T6448] tipc: Node identity e0, cluster identity 4711 [ 66.675379][ T6448] tipc: Node number set to 224 [ 66.785613][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 66.809817][ T6460] smpboot: CPU 1 is now offline [ 66.835482][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'. [ 66.839183][ T6460] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 66.976592][ T6476] Illegal XDP return value 531067400 on prog (id 10) dev syz_tun, expect packet loss! [ 67.857160][ T6514] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 68.157873][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 68.243328][ T6524] wireguard0: entered promiscuous mode [ 68.321685][ T6531] 9p: Bad value for 'wfdno' [ 68.337917][ T6531] netlink: 152 bytes leftover after parsing attributes in process `syz.2.119'. [ 68.849033][ T6559] SET target dimension over the limit! [ 68.853254][ T6559] netlink: 112 bytes leftover after parsing attributes in process `syz.2.125'. [ 69.192428][ T6570] netlink: 44 bytes leftover after parsing attributes in process `syz.3.129'. [ 69.209352][ T6570] netlink: 'syz.3.129': attribute type 1 has an invalid length. [ 69.230554][ T6570] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 69.351989][ T6573] FAULT_INJECTION: forcing a failure. [ 69.351989][ T6573] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 69.356173][ T6573] CPU: 3 UID: 0 PID: 6573 Comm: syz.3.131 Not tainted syzkaller #0 PREEMPT(full) [ 69.356188][ T6573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.356195][ T6573] Call Trace: [ 69.356199][ T6573] [ 69.356204][ T6573] dump_stack_lvl+0x100/0x190 [ 69.356221][ T6573] should_fail_ex.cold+0x5/0xa [ 69.356232][ T6573] ? prepare_alloc_pages+0x16d/0x5f0 [ 69.356249][ T6573] should_fail_alloc_page+0xeb/0x140 [ 69.356265][ T6573] prepare_alloc_pages+0x1f0/0x5f0 [ 69.356282][ T6573] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 69.356298][ T6573] ? rcu_is_watching+0x12/0xc0 [ 69.356312][ T6573] ? trace_mm_page_alloc+0x164/0x1c0 [ 69.356327][ T6573] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 69.356341][ T6573] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 69.356354][ T6573] ? is_bpf_text_address+0x8a/0x1a0 [ 69.356371][ T6573] ? bpf_ksym_find+0x124/0x1c0 [ 69.356383][ T6573] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 69.356414][ T6573] ? is_bpf_text_address+0x94/0x1a0 [ 69.356431][ T6573] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 69.356444][ T6573] ? __kernel_text_address+0xd/0x30 [ 69.356469][ T6573] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 69.356485][ T6573] ? policy_nodemask+0xed/0x4f0 [ 69.356501][ T6573] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 69.356521][ T6573] __kasan_populate_vmalloc+0xf0/0x210 [ 69.356537][ T6573] alloc_vmap_area+0x95d/0x2bb0 [ 69.356555][ T6573] ? kasan_save_track+0x14/0x30 [ 69.356569][ T6573] ? __kasan_kmalloc+0xaa/0xb0 [ 69.356582][ T6573] ? __pfx_alloc_vmap_area+0x10/0x10 [ 69.356597][ T6573] ? __get_vm_area_node+0x101/0x330 [ 69.356613][ T6573] __get_vm_area_node+0x1ca/0x330 [ 69.356630][ T6573] __vmalloc_node_range_noprof+0x228/0x1630 [ 69.356647][ T6573] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 69.356661][ T6573] ? find_held_lock+0x2b/0x80 [ 69.356674][ T6573] ? process_measurement+0x4c8/0x2350 [ 69.356688][ T6573] ? process_measurement+0x4c8/0x2350 [ 69.356701][ T6573] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 69.356719][ T6573] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 69.356737][ T6573] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 69.356755][ T6573] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 69.356769][ T6573] __vmalloc_node_noprof+0xad/0xf0 [ 69.356785][ T6573] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 69.356800][ T6573] __vmalloc_noprof+0xa3/0x120 [ 69.356816][ T6573] ? __pfx___vmalloc_noprof+0x10/0x10 [ 69.356833][ T6573] ? rcu_is_watching+0x12/0xc0 [ 69.356845][ T6573] ? apparmor_capable+0x1d7/0x4d0 [ 69.356859][ T6573] bpf_prog_alloc_no_stats+0x58/0x640 [ 69.356872][ T6573] ? security_capable+0x80/0x260 [ 69.356884][ T6573] bpf_prog_alloc+0x3b/0x200 [ 69.356897][ T6573] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.356914][ T6573] bpf_prog_load+0x4a9/0x2fa0 [ 69.356929][ T6573] ? __pfx_bpf_prog_load+0x10/0x10 [ 69.356940][ T6573] ? __lock_acquire+0x49f/0x1a40 [ 69.356961][ T6573] __sys_bpf+0x18dc/0x4e80 [ 69.356971][ T6573] ? __pfx_check_buffer+0x10/0x10 [ 69.356987][ T6573] ? __pfx___sys_bpf+0x10/0x10 [ 69.356998][ T6573] ? __rb_reserve_next.constprop.0+0x6f6/0x1640 [ 69.357020][ T6573] ? rb_commit+0x129/0x9d0 [ 69.357041][ T6573] ? trace_event_buffer_commit+0x20a/0xa80 [ 69.357054][ T6573] ? find_held_lock+0x2b/0x80 [ 69.357068][ T6573] ? __ia32_sys_bpf+0xcc/0x170 [ 69.357079][ T6573] __ia32_sys_bpf+0xcc/0x170 [ 69.357090][ T6573] ? rcu_is_watching+0x12/0xc0 [ 69.357103][ T6573] __do_fast_syscall_32+0xe7/0x970 [ 69.357120][ T6573] ? lockdep_hardirqs_on+0x78/0x100 [ 69.357135][ T6573] do_fast_syscall_32+0x32/0x70 [ 69.357151][ T6573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.357164][ T6573] RIP: 0023:0xf70befec [ 69.357177][ T6573] Code: Unable to access opcode bytes at 0xf70befc2. [ 69.357182][ T6573] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 69.357193][ T6573] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000340 [ 69.357199][ T6573] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.357205][ T6573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.357211][ T6573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.357216][ T6573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.357229][ T6573] [ 69.357396][ T6573] syz.3.131: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 69.493173][ T6573] CPU: 3 UID: 0 PID: 6573 Comm: syz.3.131 Not tainted syzkaller #0 PREEMPT(full) [ 69.493189][ T6573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.493195][ T6573] Call Trace: [ 69.493200][ T6573] [ 69.493205][ T6573] dump_stack_lvl+0x100/0x190 [ 69.493222][ T6573] warn_alloc.cold+0x94/0xa8 [ 69.493233][ T6573] ? __pfx_warn_alloc+0x10/0x10 [ 69.493246][ T6573] ? lockdep_hardirqs_on+0x78/0x100 [ 69.493262][ T6573] ? __get_vm_area_node+0x2cd/0x330 [ 69.493281][ T6573] ? __get_vm_area_node+0x208/0x330 [ 69.493298][ T6573] __vmalloc_node_range_noprof+0xccd/0x1630 [ 69.493315][ T6573] ? find_held_lock+0x2b/0x80 [ 69.493329][ T6573] ? process_measurement+0x4c8/0x2350 [ 69.493346][ T6573] ? process_measurement+0x4c8/0x2350 [ 69.493359][ T6573] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 69.493379][ T6573] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 69.493396][ T6573] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 69.493420][ T6573] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 69.493434][ T6573] __vmalloc_node_noprof+0xad/0xf0 [ 69.493450][ T6573] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 69.493466][ T6573] __vmalloc_noprof+0xa3/0x120 [ 69.493481][ T6573] ? __pfx___vmalloc_noprof+0x10/0x10 [ 69.493498][ T6573] ? rcu_is_watching+0x12/0xc0 [ 69.493527][ T6573] ? apparmor_capable+0x1d7/0x4d0 [ 69.493540][ T6573] bpf_prog_alloc_no_stats+0x58/0x640 [ 69.493554][ T6573] ? security_capable+0x80/0x260 [ 69.493566][ T6573] bpf_prog_alloc+0x3b/0x200 [ 69.493578][ T6573] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.493595][ T6573] bpf_prog_load+0x4a9/0x2fa0 [ 69.493610][ T6573] ? __pfx_bpf_prog_load+0x10/0x10 [ 69.493621][ T6573] ? __lock_acquire+0x49f/0x1a40 [ 69.493642][ T6573] __sys_bpf+0x18dc/0x4e80 [ 69.493652][ T6573] ? __pfx_check_buffer+0x10/0x10 [ 69.493672][ T6573] ? __pfx___sys_bpf+0x10/0x10 [ 69.493684][ T6573] ? __rb_reserve_next.constprop.0+0x6f6/0x1640 [ 69.493705][ T6573] ? rb_commit+0x129/0x9d0 [ 69.493726][ T6573] ? trace_event_buffer_commit+0x20a/0xa80 [ 69.493739][ T6573] ? find_held_lock+0x2b/0x80 [ 69.493754][ T6573] ? __ia32_sys_bpf+0xcc/0x170 [ 69.493765][ T6573] __ia32_sys_bpf+0xcc/0x170 [ 69.493776][ T6573] ? rcu_is_watching+0x12/0xc0 [ 69.493789][ T6573] __do_fast_syscall_32+0xe7/0x970 [ 69.493805][ T6573] ? lockdep_hardirqs_on+0x78/0x100 [ 69.493820][ T6573] do_fast_syscall_32+0x32/0x70 [ 69.493835][ T6573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.493849][ T6573] RIP: 0023:0xf70befec [ 69.493862][ T6573] Code: Unable to access opcode bytes at 0xf70befc2. [ 69.493867][ T6573] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 69.493877][ T6573] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000340 [ 69.493883][ T6573] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.493889][ T6573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.493894][ T6573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.493900][ T6573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.493912][ T6573] [ 69.513701][ T5819] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.517372][ T6573] Mem-Info: [ 69.606297][ T6573] active_anon:9071 inactive_anon:78 isolated_anon:0 [ 69.606297][ T6573] active_file:8218 inactive_file:40978 isolated_file:0 [ 69.606297][ T6573] unevictable:1000 dirty:551 writeback:0 [ 69.606297][ T6573] slab_reclaimable:6225 slab_unreclaimable:51290 [ 69.606297][ T6573] mapped:23767 shmem:4388 pagetables:1162 [ 69.606297][ T6573] sec_pagetables:297 bounce:0 [ 69.606297][ T6573] kernel_misc_reclaimable:0 [ 69.606297][ T6573] free:37268 free_pcp:17660 free_cma:0 [ 69.629671][ T6573] Node 0 active_anon:248kB inactive_anon:0kB active_file:16kB inactive_file:4kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:16kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9504kB pagetables:1600kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 69.651787][ T6573] Node 1 active_anon:36036kB inactive_anon:312kB active_file:32856kB inactive_file:163908kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:95040kB dirty:2188kB writeback:0kB shmem:15552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3900kB pagetables:3048kB sec_pagetables:64kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 69.662190][ T6573] Node 0 DMA free:2008kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:200kB local_pcp:64kB free_cma:0kB [ 69.671292][ T6573] lowmem_reserve[]: 0 280 280 280 280 [ 69.674453][ T6573] Node 0 DMA32 free:15784kB boost:0kB min:12776kB low:15968kB high:19160kB reserved_highatomic:0KB free_highatomic:0KB active_anon:248kB inactive_anon:0kB active_file:16kB inactive_file:4kB unevictable:2000kB writepending:16kB zspages:0kB present:1032196kB managed:287068kB mlocked:0kB bounce:0kB free_pcp:11304kB local_pcp:3840kB free_cma:0kB [ 69.683919][ T6573] lowmem_reserve[]: 0 0 0 0 0 [ 69.685461][ T6573] Node 1 DMA32 free:137380kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36036kB inactive_anon:312kB active_file:32856kB inactive_file:163908kB unevictable:2000kB writepending:2188kB zspages:1792kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:58396kB local_pcp:12316kB free_cma:0kB [ 69.695391][ T6573] lowmem_reserve[]: 0 0 0 0 0 [ 69.696909][ T6573] Node 0 DMA: 4*4kB (UM) 1*8kB (M) 2*16kB (UM) 5*32kB (U) 0*64kB 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2008kB [ 69.701180][ T6573] Node 0 DMA32: 4*4kB (ME) 41*8kB (ME) 35*16kB (UME) 71*32kB (UME) 19*64kB (UME) 23*128kB (ME) 13*256kB (M) 6*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 15784kB [ 69.706299][ T6573] Node 1 DMA32: 835*4kB (UM) 180*8kB (UME) 63*16kB (UM) 51*32kB (UME) 88*64kB (UME) 66*128kB (UME) 73*256kB (UME) 52*512kB (UME) 31*1024kB (UME) 7*2048kB (UM) 6*4096kB (M) = 137468kB [ 69.711830][ T6573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 69.714807][ T6573] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 69.717749][ T6573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 69.720891][ T6573] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 69.723785][ T6573] 54282 total pagecache pages [ 69.725485][ T6573] 702 pages in swap cache [ 69.727049][ T6573] Free swap = 120124kB [ 69.731108][ T6573] Total swap = 124996kB [ 69.732546][ T6573] 524155 pages RAM [ 69.733894][ T6573] 0 pages HighMem/MovableOnly [ 69.735552][ T6573] 211495 pages reserved [ 69.736955][ T6573] 0 pages cma reserved [ 69.854202][ T6583] syzkaller0: entered promiscuous mode [ 69.863606][ T6583] syzkaller0: entered allmulticast mode [ 70.037421][ T6588] warning: `syz.0.136' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.041863][ T6588] FAULT_INJECTION: forcing a failure. [ 70.041863][ T6588] name failslab, interval 1, probability 0, space 0, times 1 [ 70.047420][ T6588] CPU: 1 UID: 0 PID: 6588 Comm: syz.0.136 Not tainted syzkaller #0 PREEMPT(full) [ 70.047443][ T6588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.047454][ T6588] Call Trace: [ 70.047461][ T6588] [ 70.047468][ T6588] dump_stack_lvl+0x100/0x190 [ 70.047496][ T6588] should_fail_ex.cold+0x5/0xa [ 70.047519][ T6588] should_failslab+0xc2/0x120 [ 70.047546][ T6588] __kmalloc_noprof+0xfc/0x820 [ 70.047570][ T6588] ? __pfx___irq_work_queue_local+0x10/0x10 [ 70.047591][ T6588] ? ioctl_standard_iw_point+0x3e9/0xc90 [ 70.047620][ T6588] ioctl_standard_iw_point+0x3e9/0xc90 [ 70.047647][ T6588] ? __pfx_cfg80211_wext_giwencode+0x10/0x10 [ 70.047671][ T6588] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 70.047697][ T6588] ? __pfx_vprintk_emit+0x10/0x10 [ 70.047730][ T6588] compat_standard_call+0x222/0x360 [ 70.047762][ T6588] ? __pfx_cfg80211_wext_giwencode+0x10/0x10 [ 70.047784][ T6588] ? __pfx_compat_standard_call+0x10/0x10 [ 70.047814][ T6588] ? __pfx_compat_standard_call+0x10/0x10 [ 70.047838][ T6588] ? __pfx_cfg80211_wext_giwencode+0x10/0x10 [ 70.047856][ T6588] wext_ioctl_dispatch.constprop.0+0x312/0x3e0 [ 70.047887][ T6588] compat_wext_handle_ioctl+0x15d/0x220 [ 70.047913][ T6588] ? __pfx_compat_wext_handle_ioctl+0x10/0x10 [ 70.047943][ T6588] ? do_vfs_ioctl+0x226/0x13e0 [ 70.047979][ T6588] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.048006][ T6588] ? __pfx_unix_compat_ioctl+0x10/0x10 [ 70.048029][ T6588] ? unix_ioctl+0x9c/0x570 [ 70.048053][ T6588] compat_sock_ioctl+0x381/0x760 [ 70.048079][ T6588] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 70.048099][ T6588] ? hook_file_ioctl_common+0x140/0x440 [ 70.048130][ T6588] ? __fget_files+0x21f/0x3d0 [ 70.048153][ T6588] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 70.048176][ T6588] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 70.048206][ T6588] __do_fast_syscall_32+0xe7/0x970 [ 70.048233][ T6588] ? lockdep_hardirqs_on+0x78/0x100 [ 70.048259][ T6588] do_fast_syscall_32+0x32/0x70 [ 70.048286][ T6588] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.048309][ T6588] RIP: 0023:0xf6fdefec [ 70.048332][ T6588] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 70.048340][ T6588] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 70.048360][ T6588] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008b2b [ 70.048371][ T6588] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.048382][ T6588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.048391][ T6588] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 70.048402][ T6588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.048425][ T6588] [ 70.183969][ T5819] usb 7-1: Using ep0 maxpacket: 8 [ 70.188617][ T5819] usb 7-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 70.194959][ T5819] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.202056][ T5819] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 70.207474][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.210678][ T5819] usb 7-1: Product: syz [ 70.211956][ T5819] usb 7-1: Manufacturer: syz [ 70.213335][ T5819] usb 7-1: SerialNumber: syz [ 70.217558][ T5819] usb 7-1: config 0 descriptor?? [ 70.256289][ T42] audit: type=1326 audit(1786384671.999:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 70.271374][ T42] audit: type=1326 audit(1786384671.999:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 70.279361][ T42] audit: type=1326 audit(1786384671.999:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.138" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 70.286019][ T42] audit: type=1326 audit(1786384671.999:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 70.303260][ T42] audit: type=1326 audit(1786384671.999:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.138" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 70.325285][ T42] audit: type=1326 audit(1786384671.999:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 70.340917][ T42] audit: type=1326 audit(1786384671.999:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.138" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 70.357907][ T42] audit: type=1326 audit(1786384671.999:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 70.369203][ T42] audit: type=1326 audit(1786384671.999:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.138" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 70.376276][ T42] audit: type=1326 audit(1786384671.999:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.138" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 70.423590][ T5819] usb 7-1: USB disconnect, device number 3 [ 70.431645][ T6598] binder: 6597:6598 ioctl c0306201 80000040 returned -22 [ 71.037563][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.040081][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.553713][ T6642] overlay: Unknown parameter '/' [ 71.557906][ T6642] netlink: 'syz.1.154': attribute type 20 has an invalid length. [ 71.670802][ T6648] nbd: must specify a size in bytes for the device [ 71.696072][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 71.990851][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 72.095575][ T6678] vicodec vicodec.0: Removing vicodec [ 72.248905][ T6638] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 72.255605][ T6638] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 72.266251][ T6638] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 72.270908][ T6638] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 72.274471][ T6638] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.279172][ T6638] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.281980][ T6638] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 72.284034][ T6638] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.288762][ T6638] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.292268][ T6638] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 72.294327][ T6638] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.297037][ T6638] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.354821][ T6685] ======================================================= [ 72.354821][ T6685] WARNING: The mand mount option has been deprecated and [ 72.354821][ T6685] and is ignored by this kernel. Remove the mand [ 72.354821][ T6685] option from the mount to silence this warning. [ 72.354821][ T6685] ======================================================= [ 72.369803][ T6685] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 72.377387][ T6685] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 72.422710][ T6687] netlink: 64 bytes leftover after parsing attributes in process `syz.1.162'. [ 72.430124][ T6687] syzkaller1: entered promiscuous mode [ 72.431943][ T6687] syzkaller1: entered allmulticast mode [ 72.563752][ T5819] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 72.714219][ T5819] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 72.788124][ T5819] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.795157][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.798641][ T5819] usb 7-1: Product: syz [ 72.800346][ T5819] usb 7-1: Manufacturer: syz [ 72.802276][ T5819] usb 7-1: SerialNumber: syz [ 72.912645][ T5819] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 72.923362][ T5819] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb7/7-1/input/input5 [ 73.116980][ T9] usb 7-1: USB disconnect, device number 4 [ 73.289207][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 73.596207][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.633484][ T6742] capability: warning: `syz.1.173' uses 32-bit capabilities (legacy support in use) [ 73.639522][ T6742] overlay: ./file1 is not a directory [ 73.647014][ T6742] syzkaller0: entered promiscuous mode [ 73.649078][ T6742] syzkaller0: entered allmulticast mode [ 74.034120][ T6769] faux_driver vgem: [drm] Unknown color mode 55359; guessing buffer size. [ 74.213861][ T6756] can0: slcan on ttyS3. [ 74.313648][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.324251][ T5738] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.413656][ T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 74.564035][ T34] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 74.565633][ T5819] libceph: connect (1)[c::]:6789 error -101 [ 74.568069][ T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.570880][ T6793] ceph: No mds server is up or the cluster is laggy [ 74.576658][ T5819] libceph: mon0 (1)[c::]:6789 connect error [ 74.578161][ T34] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 74.583695][ T34] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.589930][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 74.593899][ T34] usb 6-1: Product: syz [ 74.595420][ T34] usb 6-1: Manufacturer: syz [ 74.599996][ T6769] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.605832][ T34] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 74.616861][ T34] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 74.736545][ T6750] can0 (unregistered): slcan off ttyS3. [ 74.813119][ T34] usb 6-1: USB disconnect, device number 4 [ 74.825060][ T34] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 74.840462][ T34] garmin_gps 6-1:1.0: device disconnected [ 74.954389][ T6812] input: syz0 as /devices/virtual/input/input6 [ 75.135657][ T6825] xt_socket: unknown flags 0x50 [ 75.235194][ T6829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.192'. [ 75.246872][ T6829] netlink: 'syz.0.192': attribute type 10 has an invalid length. [ 75.483693][ T56] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 75.526618][ T6840] syz.2.196 uses obsolete (PF_INET,SOCK_PACKET) [ 75.683646][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout [ 76.005938][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 76.167728][ T34] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 76.174465][ T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.179027][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.196071][ T34] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 76.202872][ T34] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 76.210989][ T34] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 76.225753][ T34] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 76.231406][ T34] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 76.240874][ T34] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 76.262212][ T34] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 76.273657][ T34] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 76.282198][ T34] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 76.393853][ T5738] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.393992][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 76.514765][ T24] usb 7-1: USB disconnect, device number 5 [ 76.528122][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 76.540683][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 76.547712][ T24] keyspan 7-1:1.0: device disconnected [ 77.179215][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 77.295249][ T6900] fuse: Unknown parameter 'grou' [ 77.386742][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 77.533633][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 77.540339][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 77.553643][ T9] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 77.557875][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.561284][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.572148][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.578024][ T9] usb 6-1: Product: syz [ 77.579638][ T9] usb 6-1: Manufacturer: syz [ 77.581204][ T9] usb 6-1: SerialNumber: syz [ 77.753649][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.951210][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.957303][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.969192][ T9] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 77.973040][ T56] usb 8-1: unable to get BOS descriptor or descriptor too short [ 77.974878][ T9] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 77.987460][ T56] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 77.996112][ T56] usb 8-1: no configurations [ 78.000080][ T56] usb 8-1: can't read configurations, error -22 [ 78.057147][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 78.065905][ T9] usb 6-1: USB disconnect, device number 5 [ 78.076068][ T5734] udevd[5734]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.418732][ T6961] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 78.429317][ T6966] loop7: detected capacity change from 0 to 7 [ 78.474339][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.484149][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.501527][ T6966] Dev loop7: unable to read RDB block 7 [ 78.506716][ T6966] loop7: unable to read partition table [ 78.509735][ T6966] loop7: partition table beyond EOD, truncated [ 78.512425][ T6966] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 78.590554][ T5144] Buffer I/O error on dev loop7, logical block 0, async page read [ 78.593118][ T5144] Buffer I/O error on dev loop7, logical block 0, async page read [ 78.595873][ T5144] Buffer I/O error on dev loop7, logical block 0, async page read [ 78.598536][ T5144] Buffer I/O error on dev loop7, logical block 0, async page read [ 78.601019][ T5144] Buffer I/O error on dev loop7, logical block 0, async page read [ 78.603730][ T5144] Buffer I/O error on dev loop7, logical block 0, async page read [ 78.609286][ T5144] Buffer I/O error on dev loop7, logical block 0, async page read [ 78.612121][ T5144] ldm_validate_partition_table(): Disk read failed. [ 78.614647][ T5144] Buffer I/O error on dev loop7, logical block 0, async page read [ 78.617241][ T5144] Buffer I/O error on dev loop7, logical block 0, async page read [ 78.619734][ T5144] Buffer I/O error on dev loop7, logical block 0, async page read [ 78.622165][ T5144] Dev loop7: unable to read RDB block 0 [ 78.624630][ T5144] loop7: unable to read partition table [ 78.626570][ T5144] loop7: partition table beyond EOD, truncated [ 78.654794][ T6974] dvmrp8: entered allmulticast mode [ 78.701113][ T5812] dvmrp8: left allmulticast mode [ 79.663393][ T7007] 9p: Bad value for 'rfdno' [ 79.851907][ T7018] kernel profiling enabled (shift: 7) [ 80.067308][ T7022] netlink: 512 bytes leftover after parsing attributes in process `syz.0.235'. [ 80.171985][ T7018] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 80.753018][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'. [ 80.760332][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'. [ 80.765477][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'. [ 80.787007][ T7038] syzkaller0: entered promiscuous mode [ 80.788823][ T7038] syzkaller0: entered allmulticast mode [ 81.493308][ T1508] cfg80211: failed to load regulatory.db [ 81.507938][ T7041] VFS: file-max limit 0 reached [ 82.295818][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 82.345849][ T7048] smpboot: CPU 1 is now offline [ 82.363208][ T7048] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 82.369124][ T7040] ------------[ cut here ]------------ [ 82.370462][ T7040] [ 82.370467][ T7040] ====================================================== [ 82.370482][ T7040] WARNING: possible circular locking dependency detected [ 82.370487][ T7040] syzkaller #0 Not tainted [ 82.370492][ T7040] ------------------------------------------------------ [ 82.370496][ T7040] syz.3.243/7040 is trying to acquire lock: [ 82.370501][ T7040] ffffffff8eaf3f60 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 82.370532][ T7040] [ 82.370532][ T7040] but task is already holding lock: [ 82.370535][ T7040] ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 82.370558][ T7040] [ 82.370558][ T7040] which lock already depends on the new lock. [ 82.370558][ T7040] [ 82.370561][ T7040] [ 82.370561][ T7040] the existing dependency chain (in reverse order) is: [ 82.370564][ T7040] [ 82.370564][ T7040] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 82.370577][ T7040] lock_acquire+0x1b9/0x370 [ 82.370586][ T7040] _raw_spin_lock_nested+0x31/0x40 [ 82.370598][ T7040] raw_spin_rq_lock_nested+0x2c/0x140 [ 82.370608][ T7040] _task_rq_lock+0xcf/0x500 [ 82.370618][ T7040] cgroup_move_task+0x81/0x320 [ 82.370631][ T7040] css_set_move_task+0x285/0x600 [ 82.370641][ T7040] cgroup_post_fork+0x1f9/0x9a0 [ 82.370655][ T7040] copy_process+0x6b7a/0x8030 [ 82.370667][ T7040] kernel_clone+0x176/0x9d0 [ 82.370678][ T7040] user_mode_thread+0xcc/0x110 [ 82.370689][ T7040] rest_init+0x21/0x260 [ 82.370698][ T7040] start_kernel+0x48e/0x490 [ 82.370712][ T7040] x86_64_start_reservations+0x24/0x30 [ 82.370727][ T7040] x86_64_start_kernel+0x12b/0x130 [ 82.370742][ T7040] common_startup_64+0x13e/0x158 [ 82.370757][ T7040] [ 82.370757][ T7040] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 82.370769][ T7040] lock_acquire+0x1b9/0x370 [ 82.370777][ T7040] _raw_spin_lock_irqsave+0x3a/0x60 [ 82.370788][ T7040] try_to_wake_up+0xbd/0x1c90 [ 82.370798][ T7040] __wake_up_common+0x135/0x1f0 [ 82.370813][ T7040] __wake_up+0x31/0x60 [ 82.370825][ T7040] tty_port_default_wakeup+0x47/0x60 [ 82.370840][ T7040] serial8250_tx_chars+0x68f/0x860 [ 82.370854][ T7040] serial8250_handle_irq_locked+0x770/0x9a0 [ 82.370869][ T7040] serial8250_handle_irq.part.0+0xb4/0x530 [ 82.370883][ T7040] serial8250_default_handle_irq+0xc2/0x280 [ 82.370898][ T7040] serial8250_interrupt+0xf8/0x1b0 [ 82.370907][ T7040] __handle_irq_event_percpu+0x232/0x880 [ 82.370920][ T7040] handle_irq_event+0xab/0x1e0 [ 82.370931][ T7040] handle_edge_irq+0x34c/0x950 [ 82.370941][ T7040] __common_interrupt+0xd8/0x2f0 [ 82.370952][ T7040] common_interrupt+0xb9/0xe0 [ 82.370962][ T7040] asm_common_interrupt+0x26/0x40 [ 82.370971][ T7040] pv_native_safe_halt+0xf/0x20 [ 82.370984][ T7040] default_idle+0x9/0x10 [ 82.371002][ T7040] default_idle_call+0x6c/0xb0 [ 82.371031][ T7040] do_idle+0x3a7/0x5b0 [ 82.371042][ T7040] cpu_startup_entry+0x4f/0x60 [ 82.371053][ T7040] start_secondary+0x21d/0x2d0 [ 82.371064][ T7040] common_startup_64+0x13e/0x158 [ 82.371078][ T7040] [ 82.371078][ T7040] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 82.371092][ T7040] lock_acquire+0x1b9/0x370 [ 82.371100][ T7040] _raw_spin_lock_irqsave+0x3a/0x60 [ 82.371111][ T7040] __wake_up+0x1c/0x60 [ 82.371123][ T7040] tty_port_default_wakeup+0x47/0x60 [ 82.371137][ T7040] serial8250_tx_chars+0x68f/0x860 [ 82.371150][ T7040] serial8250_handle_irq_locked+0x770/0x9a0 [ 82.371164][ T7040] serial8250_handle_irq.part.0+0xb4/0x530 [ 82.371179][ T7040] serial8250_default_handle_irq+0xc2/0x280 [ 82.371193][ T7040] serial8250_interrupt+0xf8/0x1b0 [ 82.371202][ T7040] __handle_irq_event_percpu+0x232/0x880 [ 82.371219][ T7040] handle_irq_event+0xab/0x1e0 [ 82.371230][ T7040] handle_edge_irq+0x34c/0x950 [ 82.371240][ T7040] __common_interrupt+0xd8/0x2f0 [ 82.371249][ T7040] common_interrupt+0xb9/0xe0 [ 82.371258][ T7040] asm_common_interrupt+0x26/0x40 [ 82.371267][ T7040] _raw_spin_unlock_irqrestore+0x31/0x80 [ 82.371279][ T7040] uart_write+0x29d/0xb20 [ 82.371292][ T7040] n_tty_write+0x431/0x1160 [ 82.371300][ T7040] file_tty_write.isra.0+0x4d2/0x890 [ 82.371313][ T7040] redirected_tty_write+0xd4/0x120 [ 82.371326][ T7040] vfs_write+0x6ac/0x1050 [ 82.371335][ T7040] ksys_write+0x12a/0x250 [ 82.371343][ T7040] do_syscall_64+0x115/0x840 [ 82.371360][ T7040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.371369][ T7040] [ 82.371369][ T7040] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 82.371382][ T7040] lock_acquire+0x1b9/0x370 [ 82.371390][ T7040] _raw_spin_lock_irqsave+0x3a/0x60 [ 82.371401][ T7040] serial8250_console_write+0x177/0x1a50 [ 82.371417][ T7040] console_flush_one_record+0x790/0xe50 [ 82.371428][ T7040] console_unlock+0x103/0x260 [ 82.371439][ T7040] vprintk_emit+0x407/0x6b0 [ 82.371451][ T7040] _printk+0xcf/0x110 [ 82.371459][ T7040] register_console.cold+0xc0/0x248 [ 82.371469][ T7040] univ8250_console_init+0x6f/0x80 [ 82.371482][ T7040] console_init+0x3d5/0x5b0 [ 82.371492][ T7040] start_kernel+0x314/0x490 [ 82.371506][ T7040] x86_64_start_reservations+0x24/0x30 [ 82.371521][ T7040] x86_64_start_kernel+0x12b/0x130 [ 82.371536][ T7040] common_startup_64+0x13e/0x158 [ 82.371549][ T7040] [ 82.371549][ T7040] -> #0 (console_owner){-.-.}-{0:0}: [ 82.371561][ T7040] check_prev_add+0xeb/0xe60 [ 82.371576][ T7040] __lock_acquire+0x136c/0x1a40 [ 82.371584][ T7040] lock_acquire+0x1b9/0x370 [ 82.371591][ T7040] console_lock_spinning_enable+0x72/0x80 [ 82.371602][ T7040] console_flush_one_record+0x739/0xe50 [ 82.371614][ T7040] console_unlock+0x103/0x260 [ 82.371624][ T7040] vprintk_emit+0x407/0x6b0 [ 82.371635][ T7040] _printk+0xcf/0x110 [ 82.371643][ T7040] __report_bug.cold+0x34/0x141 [ 82.371653][ T7040] report_bug+0xb2/0x220 [ 82.371666][ T7040] handle_bug+0x16a/0x2a0 [ 82.371680][ T7040] exc_invalid_op+0x17/0x50 [ 82.371688][ T7040] asm_exc_invalid_op+0x1a/0x20 [ 82.371696][ T7040] update_rq_clock+0x40a/0xd20 [ 82.371707][ T7040] __schedule+0x1e2d/0x6730 [ 82.371718][ T7040] preempt_schedule_common+0x42/0xc0 [ 82.371730][ T7040] preempt_schedule_thunk+0x16/0x40 [ 82.371744][ T7040] smp_call_function_single_async+0xa7/0xd0 [ 82.371760][ T7040] rdmsrq_safe_on_cpu+0x103/0x1b0 [ 82.371774][ T7040] msr_read+0x18e/0x240 [ 82.371782][ T7040] vfs_read+0x1e4/0xb40 [ 82.371789][ T7040] ksys_read+0x12a/0x250 [ 82.371797][ T7040] __do_fast_syscall_32+0xe7/0x970 [ 82.371811][ T7040] do_fast_syscall_32+0x32/0x70 [ 82.371825][ T7040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.371838][ T7040] [ 82.371838][ T7040] other info that might help us debug this: [ 82.371838][ T7040] [ 82.371841][ T7040] Chain exists of: [ 82.371841][ T7040] console_owner --> &p->pi_lock --> &rq->__lock [ 82.371841][ T7040] [ 82.371855][ T7040] Possible unsafe locking scenario: [ 82.371855][ T7040] [ 82.371857][ T7040] CPU0 CPU1 [ 82.371860][ T7040] ---- ---- [ 82.371862][ T7040] lock(&rq->__lock); [ 82.371868][ T7040] lock(&p->pi_lock); [ 82.371874][ T7040] lock(&rq->__lock); [ 82.371881][ T7040] lock(console_owner); [ 82.371886][ T7040] [ 82.371886][ T7040] *** DEADLOCK *** [ 82.371886][ T7040] [ 82.371889][ T7040] 3 locks held by syz.3.243/7040: [ 82.371894][ T7040] #0: ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 82.371917][ T7040] #1: ffffffff8ebd43a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 82.371939][ T7040] #2: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 82.371963][ T7040] [ 82.371963][ T7040] stack backtrace: [ 82.371969][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.3.243 Not tainted syzkaller #0 PREEMPT(full) [ 82.371981][ T7040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.371987][ T7040] Call Trace: [ 82.371991][ T7040] [ 82.371996][ T7040] dump_stack_lvl+0x100/0x190 [ 82.372016][ T7040] print_circular_bug.cold+0x178/0x1c7 [ 82.372033][ T7040] check_noncircular+0x146/0x160 [ 82.372050][ T7040] check_prev_add+0xeb/0xe60 [ 82.372066][ T7040] __lock_acquire+0x136c/0x1a40 [ 82.372077][ T7040] lock_acquire+0x1b9/0x370 [ 82.372085][ T7040] ? console_lock_spinning_enable+0x61/0x80 [ 82.372097][ T7040] ? console_lock_spinning_enable+0x4a/0x80 [ 82.372110][ T7040] console_lock_spinning_enable+0x72/0x80 [ 82.372122][ T7040] ? console_lock_spinning_enable+0x61/0x80 [ 82.372133][ T7040] console_flush_one_record+0x739/0xe50 [ 82.372147][ T7040] ? __pfx_console_flush_one_record+0x10/0x10 [ 82.372161][ T7040] ? is_printk_cpu_sync_owner+0x32/0x40 [ 82.372176][ T7040] console_unlock+0x103/0x260 [ 82.372187][ T7040] ? __pfx_console_unlock+0x10/0x10 [ 82.372200][ T7040] ? do_raw_spin_unlock+0x145/0x1e0 [ 82.372215][ T7040] ? _printk+0xcf/0x110 [ 82.372224][ T7040] vprintk_emit+0x407/0x6b0 [ 82.372237][ T7040] ? __pfx_vprintk_emit+0x10/0x10 [ 82.372249][ T7040] ? __lock_acquire+0x49f/0x1a40 [ 82.372258][ T7040] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.372274][ T7040] _printk+0xcf/0x110 [ 82.372283][ T7040] ? __pfx__printk+0x10/0x10 [ 82.372293][ T7040] ? check_buffer+0x13f/0x800 [ 82.372305][ T7040] ? __report_bug.cold+0x24/0x141 [ 82.372316][ T7040] __report_bug.cold+0x34/0x141 [ 82.372325][ T7040] ? update_rq_clock+0x40a/0xd20 [ 82.372337][ T7040] ? __pfx___report_bug+0x10/0x10 [ 82.372350][ T7040] ? __rb_reserve_next.constprop.0+0x6f6/0x1640 [ 82.372365][ T7040] ? update_rq_clock+0x40a/0xd20 [ 82.372376][ T7040] report_bug+0xb2/0x220 [ 82.372389][ T7040] ? update_rq_clock+0x40a/0xd20 [ 82.372400][ T7040] handle_bug+0x16a/0x2a0 [ 82.372416][ T7040] exc_invalid_op+0x17/0x50 [ 82.372424][ T7040] asm_exc_invalid_op+0x1a/0x20 [ 82.372434][ T7040] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 82.372446][ T7040] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 82.372456][ T7040] RSP: 0000:ffffc900040278b0 EFLAGS: 00010046 [ 82.372465][ T7040] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 82.372471][ T7040] RDX: 0000000000000046 RSI: ffffffff8e17ce80 RDI: ffffffff8c3fe580 [ 82.372477][ T7040] RBP: ffffc90004027a58 R08: 0000000000000001 R09: 0000000000000001 [ 82.372483][ T7040] R10: ffffffff9121bad7 R11: 0000000000000000 R12: ffffffff9121ee84 [ 82.372489][ T7040] R13: ffff88802b33c4e0 R14: ffff88801c34ca80 R15: ffff88802b23c198 [ 82.372500][ T7040] __schedule+0x1e2d/0x6730 [ 82.372512][ T7040] ? __lock_acquire+0x49f/0x1a40 [ 82.372524][ T7040] ? __pfx___schedule+0x10/0x10 [ 82.372537][ T7040] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 82.372550][ T7040] ? preempt_schedule_thunk+0x16/0x40 [ 82.372566][ T7040] preempt_schedule_common+0x42/0xc0 [ 82.372579][ T7040] preempt_schedule_thunk+0x16/0x40 [ 82.372595][ T7040] ? smp_call_function_single_async+0xa2/0xd0 [ 82.372611][ T7040] smp_call_function_single_async+0xa7/0xd0 [ 82.372627][ T7040] rdmsrq_safe_on_cpu+0x103/0x1b0 [ 82.372641][ T7040] ? __pfx_rdmsrq_safe_on_cpu+0x10/0x10 [ 82.372654][ T7040] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 82.372673][ T7040] ? _copy_to_user+0xaf/0xd0 [ 82.372689][ T7040] msr_read+0x18e/0x240 [ 82.372698][ T7040] ? __pfx_msr_read+0x10/0x10 [ 82.372707][ T7040] ? bpf_lsm_file_permission+0x9/0x10 [ 82.372718][ T7040] ? security_file_permission+0x76/0x210 [ 82.372733][ T7040] ? rw_verify_area+0xce/0x6d0 [ 82.372747][ T7040] ? __pfx_msr_read+0x10/0x10 [ 82.372757][ T7040] vfs_read+0x1e4/0xb40 [ 82.372766][ T7040] ? __pfx_vfs_read+0x10/0x10 [ 82.372774][ T7040] ? find_held_lock+0x2b/0x80 [ 82.372786][ T7040] ? __fget_files+0x215/0x3d0 [ 82.372796][ T7040] ? __fget_files+0x215/0x3d0 [ 82.372806][ T7040] ? __fget_files+0x21f/0x3d0 [ 82.372816][ T7040] ksys_read+0x12a/0x250 [ 82.372825][ T7040] ? __pfx_ksys_read+0x10/0x10 [ 82.372833][ T7040] ? trace_syscall_enter+0xd9/0x110 [ 82.372846][ T7040] __do_fast_syscall_32+0xe7/0x970 [ 82.372861][ T7040] ? lockdep_hardirqs_on+0x78/0x100 [ 82.372875][ T7040] do_fast_syscall_32+0x32/0x70 [ 82.372890][ T7040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.372902][ T7040] RIP: 0023:0xf70befec [ 82.372915][ T7040] Code: Unable to access opcode bytes at 0xf70befc2. [ 82.372919][ T7040] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 82.372928][ T7040] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080019680 [ 82.372934][ T7040] RDX: 0000000000018ff8 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.372939][ T7040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.372945][ T7040] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 82.372951][ T7040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.372959][ T7040] [ 82.762808][ T7040] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 82.762819][ T7040] WARNING: kernel/sched/sched.h:1641 at update_rq_clock+0x40a/0xd20, CPU#0: syz.3.243/7040 [ 82.768237][ T7040] Modules linked in: [ 82.769419][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.3.243 Not tainted syzkaller #0 PREEMPT(full) [ 82.772185][ T7040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.775170][ T7040] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 82.776841][ T7040] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 82.782596][ T7040] RSP: 0000:ffffc900040278b0 EFLAGS: 00010046 [ 82.784949][ T7040] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 82.788023][ T7040] RDX: 0000000000000046 RSI: ffffffff8e17ce80 RDI: ffffffff8c3fe580 [ 82.790970][ T7040] RBP: ffffc90004027a58 R08: 0000000000000001 R09: 0000000000000001 [ 82.793437][ T7040] R10: ffffffff9121bad7 R11: 0000000000000000 R12: ffffffff9121ee84 [ 82.795887][ T7040] R13: ffff88802b33c4e0 R14: ffff88801c34ca80 R15: ffff88802b23c198 [ 82.798208][ T7040] FS: 0000000000000000(0000) GS:ffff888096bf3000(0063) knlGS:00000000f54adb40 [ 82.800804][ T7040] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 82.802721][ T7040] CR2: 00000000f70bf000 CR3: 000000006de24000 CR4: 0000000000352ef0 [ 82.805046][ T7040] Call Trace: [ 82.806077][ T7040] [ 82.806986][ T7040] __schedule+0x1e2d/0x6730 [ 82.808341][ T7040] ? __lock_acquire+0x49f/0x1a40 [ 82.809813][ T7040] ? __pfx___schedule+0x10/0x10 [ 82.811260][ T7040] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 82.812908][ T7040] ? preempt_schedule_thunk+0x16/0x40 [ 82.814510][ T7040] preempt_schedule_common+0x42/0xc0 [ 82.816069][ T7040] preempt_schedule_thunk+0x16/0x40 [ 82.817595][ T7040] ? smp_call_function_single_async+0xa2/0xd0 [ 82.819384][ T7040] smp_call_function_single_async+0xa7/0xd0 [ 82.821163][ T7040] rdmsrq_safe_on_cpu+0x103/0x1b0 [ 82.822698][ T7040] ? __pfx_rdmsrq_safe_on_cpu+0x10/0x10 [ 82.824358][ T7040] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 82.826076][ T7040] ? _copy_to_user+0xaf/0xd0 [ 82.827490][ T7040] msr_read+0x18e/0x240 [ 82.828744][ T7040] ? __pfx_msr_read+0x10/0x10 [ 82.830192][ T7040] ? bpf_lsm_file_permission+0x9/0x10 [ 82.831781][ T7040] ? security_file_permission+0x76/0x210 [ 82.833442][ T7040] ? rw_verify_area+0xce/0x6d0 [ 82.834891][ T7040] ? __pfx_msr_read+0x10/0x10 [ 82.836318][ T7040] vfs_read+0x1e4/0xb40 [ 82.837553][ T7040] ? __pfx_vfs_read+0x10/0x10 [ 82.838934][ T7040] ? find_held_lock+0x2b/0x80 [ 82.840308][ T7040] ? __fget_files+0x215/0x3d0 [ 82.841738][ T7040] ? __fget_files+0x215/0x3d0 [ 82.843136][ T7040] ? __fget_files+0x21f/0x3d0 [ 82.844559][ T7040] ksys_read+0x12a/0x250 [ 82.845857][ T7040] ? __pfx_ksys_read+0x10/0x10 [ 82.847310][ T7040] ? trace_syscall_enter+0xd9/0x110 [ 82.848899][ T7040] __do_fast_syscall_32+0xe7/0x970 [ 82.850457][ T7040] ? lockdep_hardirqs_on+0x78/0x100 [ 82.852104][ T7040] do_fast_syscall_32+0x32/0x70 [ 82.853621][ T7040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.855553][ T7040] RIP: 0023:0xf70befec [ 82.856769][ T7040] Code: Unable to access opcode bytes at 0xf70befc2. [ 82.858838][ T7040] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 82.861466][ T7040] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080019680 [ 82.863931][ T7040] RDX: 0000000000018ff8 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.866440][ T7040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.868906][ T7040] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 82.871369][ T7040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.873834][ T7040] [ 82.874834][ T7040] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 82.877127][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.3.243 Not tainted syzkaller #0 PREEMPT(full) [ 82.879960][ T7040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.883090][ T7040] Call Trace: [ 82.884157][ T7040] [ 82.885097][ T7040] dump_stack_lvl+0x100/0x190 [ 82.886634][ T7040] vpanic+0x552/0x970 [ 82.887926][ T7040] ? __pfx_vpanic+0x10/0x10 [ 82.889361][ T7040] ? lock_release+0x24d/0x310 [ 82.890854][ T7040] panic+0xd1/0xe0 [ 82.892045][ T7040] ? __pfx_panic+0x10/0x10 [ 82.893576][ T7040] check_panic_on_warn.cold+0x19/0x34 [ 82.895280][ T7040] ? update_rq_clock+0x40a/0xd20 [ 82.896846][ T7040] __warn.cold+0x191/0x318 [ 82.898263][ T7040] __report_bug+0x30f/0x440 [ 82.899704][ T7040] ? update_rq_clock+0x40a/0xd20 [ 82.901261][ T7040] ? __pfx___report_bug+0x10/0x10 [ 82.902855][ T7040] ? __rb_reserve_next.constprop.0+0x6f6/0x1640 [ 82.904823][ T7040] ? update_rq_clock+0x40a/0xd20 [ 82.906427][ T7040] report_bug+0xb2/0x220 [ 82.907777][ T7040] ? update_rq_clock+0x40a/0xd20 [ 82.909346][ T7040] handle_bug+0x16a/0x2a0 [ 82.910722][ T7040] exc_invalid_op+0x17/0x50 [ 82.912168][ T7040] asm_exc_invalid_op+0x1a/0x20 [ 82.913709][ T7040] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 82.915480][ T7040] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 71 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 82.921444][ T7040] RSP: 0000:ffffc900040278b0 EFLAGS: 00010046 [ 82.923357][ T7040] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 82.925847][ T7040] RDX: 0000000000000046 RSI: ffffffff8e17ce80 RDI: ffffffff8c3fe580 [ 82.928337][ T7040] RBP: ffffc90004027a58 R08: 0000000000000001 R09: 0000000000000001 [ 82.930805][ T7040] R10: ffffffff9121bad7 R11: 0000000000000000 R12: ffffffff9121ee84 [ 82.933295][ T7040] R13: ffff88802b33c4e0 R14: ffff88801c34ca80 R15: ffff88802b23c198 [ 82.935805][ T7040] __schedule+0x1e2d/0x6730 [ 82.937237][ T7040] ? __lock_acquire+0x49f/0x1a40 [ 82.938799][ T7040] ? __pfx___schedule+0x10/0x10 [ 82.940329][ T7040] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 82.942082][ T7040] ? preempt_schedule_thunk+0x16/0x40 [ 82.943768][ T7040] preempt_schedule_common+0x42/0xc0 [ 82.945436][ T7040] preempt_schedule_thunk+0x16/0x40 [ 82.947085][ T7040] ? smp_call_function_single_async+0xa2/0xd0 [ 82.948999][ T7040] smp_call_function_single_async+0xa7/0xd0 [ 82.950851][ T7040] rdmsrq_safe_on_cpu+0x103/0x1b0 [ 82.952415][ T7040] ? __pfx_rdmsrq_safe_on_cpu+0x10/0x10 [ 82.954109][ T7040] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 82.955782][ T7040] ? _copy_to_user+0xaf/0xd0 [ 82.957238][ T7040] msr_read+0x18e/0x240 [ 82.958509][ T7040] ? __pfx_msr_read+0x10/0x10 [ 82.959941][ T7040] ? bpf_lsm_file_permission+0x9/0x10 [ 82.961540][ T7040] ? security_file_permission+0x76/0x210 [ 82.963253][ T7040] ? rw_verify_area+0xce/0x6d0 [ 82.964730][ T7040] ? __pfx_msr_read+0x10/0x10 [ 82.966164][ T7040] vfs_read+0x1e4/0xb40 [ 82.967419][ T7040] ? __pfx_vfs_read+0x10/0x10 [ 82.968911][ T7040] ? find_held_lock+0x2b/0x80 [ 82.970319][ T7040] ? __fget_files+0x215/0x3d0 [ 82.971745][ T7040] ? __fget_files+0x215/0x3d0 [ 82.973235][ T7040] ? __fget_files+0x21f/0x3d0 [ 82.974651][ T7040] ksys_read+0x12a/0x250 [ 82.975925][ T7040] ? __pfx_ksys_read+0x10/0x10 [ 82.977317][ T7040] ? trace_syscall_enter+0xd9/0x110 [ 82.978973][ T7040] __do_fast_syscall_32+0xe7/0x970 [ 82.980498][ T7040] ? lockdep_hardirqs_on+0x78/0x100 [ 82.982013][ T7040] do_fast_syscall_32+0x32/0x70 [ 82.983500][ T7040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.985358][ T7040] RIP: 0023:0xf70befec [ 82.986592][ T7040] Code: Unable to access opcode bytes at 0xf70befc2. [ 82.988545][ T7040] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 82.990950][ T7040] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080019680 [ 82.993342][ T7040] RDX: 0000000000018ff8 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.995725][ T7040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.998147][ T7040] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 83.000547][ T7040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.002877][ T7040] [ 84.083422][ T7040] Shutting down cpus with NMI [ 84.086202][ T7040] Kernel Offset: disabled [ 84.087872][ T7040] Rebooting in 86400 seconds..