last executing test programs: 1m12.158477883s ago: executing program 3 (id=229): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 1m11.98877847s ago: executing program 3 (id=234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000001000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca", 0xe) 1m11.879736132s ago: executing program 3 (id=238): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x6, 0xfffffffc, 0x7d, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x5eaa) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x6, 0x4, 0x9, 0xd, 0x9, "0100000000e409878000000040000000000018"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 1m10.943291168s ago: executing program 3 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x181) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1141099, 0x0) chroot(&(0x7f0000000240)='./file0/../file0\x00') mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000940)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) stat(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000380)) 1m10.791751866s ago: executing program 3 (id=254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@x86={0x9, 0x16, 0x1, 0x0, 0x3, 0x8, 0x49, 0x2, 0x5, 0x4, 0xec, 0xd5, 0x0, 0x426, 0x9, 0x0, 0xa0, 0x5, 0xd, '\x00', 0x4, 0x9}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m10.13071393s ago: executing program 3 (id=257): pipe2(&(0x7f0000000040), 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x12, r0, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x20) 1m10.104392889s ago: executing program 32 (id=257): pipe2(&(0x7f0000000040), 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x12, r0, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595e, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x1, {0x2, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x20) 15.646211319s ago: executing program 1 (id=1030): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, 0xa0117e908a83e382}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x7fff, 0x4, 0x0, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.470200179s ago: executing program 1 (id=1032): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) 15.470141246s ago: executing program 1 (id=1033): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000900)='27', 0x2) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./trace\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) 15.390096957s ago: executing program 1 (id=1034): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 15.340014092s ago: executing program 1 (id=1036): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) open(&(0x7f0000000480)='./bus\x00', 0x414302, 0x366f51e70c1e6269) 15.160246033s ago: executing program 1 (id=1038): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000) read$FUSE(r0, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2d, 0x410, 0x10000000, 0x8001, 0x63, 0x18, 0x6, 0x0, 0x0, 0x80, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002dc0)="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", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x6438207, 0xfffd, 0xffff, 0x0, 0xf84}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) 15.102986287s ago: executing program 33 (id=1038): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000) read$FUSE(r0, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2d, 0x410, 0x10000000, 0x8001, 0x63, 0x18, 0x6, 0x0, 0x0, 0x80, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002dc0)="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", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x6438207, 0xfffd, 0xffff, 0x0, 0xf84}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) 14.885733447s ago: executing program 0 (id=1042): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x8000, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x670}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='3', 0x4e) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 14.830224685s ago: executing program 0 (id=1043): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) 14.640006354s ago: executing program 0 (id=1044): r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2843, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x101000, 0x100) lseek(r2, 0x3, 0x0) lseek(r2, 0x0, 0x0) 14.639815291s ago: executing program 0 (id=1045): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 14.579981811s ago: executing program 0 (id=1048): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='27', 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) memfd_create(&(0x7f00000007c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\x00\x00\x00\x00\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\x02\xc1\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\x03\x00\x00\x00\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1\xa1\xcc!\x16\xfc\x92oB/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xcf\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\x01\x98\x96c\xda7\t,\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x95\xf7F\vDlW{\xe3\x8f\x8e\xcf\xd3}m\x03z\xf1\x85\xd9\xbaM\xb2\nO\xdfRE\x10\xc4\xe85\xf7\x81\xbe\xb8#~N\xc7\xc8\xb8\xd2\x8bu\x9f(\xa5CC|\xff\x7f\xfcT\x97\x80H\xcbeh&\x03\xb5D\xaaFV(\xad\x84-\x970\xcau;6\xe5\xf9\xd6\xad\x05\xd9\b\x14\xd6|\xc6\xba\xf3\xb9\x00\x83\x8a\x80w\xc7\"\x03\xb8\xb7\'\x02l\xc0\xdd\xa7^\x00\xd5:\xc4\xa5\xf2*e\xe1\x92\xd2a\xe8\xf9<\x92,\xb2\bZ\xaa\xdf\xcfS\b\xe5\xcb,\xf3y\x14!\xbd\fo\xc2\x1d\x95\x8f\xef\xe2@M\x1b\xa90\xfe\xcc\xb2c\xa7X\xc9\xd7j\n\xe0X*!\xc8\b\x01\x82\x1c\xf0\x0f\x8a\x03\xa7P\xd2B\xc9^O_T?R\xa1.\x99\xd9\x16~\ah\xf2\x8a\xe6\'\x85\\\x92\x02\xca\xca\x93\x10\xfd\x04\xa1<\x1aZ\xccq\xb3\x8f\x8a\r\x97\xfd\xee\x8fx\xdaA\x84\xd7\xb7\x8d\xe7x\x00\xb1Z\xfa\xd3;v\xfd\x8a\x1d\xc9\x01\\\xe5x\x90\x8d\xf2\xe1\xb8W\x95\xb8\xa5\xaf\xd2\x8d\xa8\x1c[(\x84\xb2?\xf2\x10\xa5\x8a\xbd\xa2qziX\x91\xc3\xc6\x8d\x9f\xaf\x89$:\n\xe3\xacB\xdcx\x13\xf7\xac\x87kz\xb4\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) 14.509976086s ago: executing program 0 (id=1050): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x4000040) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r2], 0x58}}, 0x0) 14.434068672s ago: executing program 34 (id=1050): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x4000040) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r2], 0x58}}, 0x0) 12.710289548s ago: executing program 6 (id=1073): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000003400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000005400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0) 11.829973855s ago: executing program 6 (id=1079): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 11.646685498s ago: executing program 6 (id=1085): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x100000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) 11.539765137s ago: executing program 6 (id=1087): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 11.539529223s ago: executing program 6 (id=1088): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000020c0)=@svm={0x104, 0x1, 0x1080, {0x0, 0xfff}, {"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"}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000001000)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002000)={[], 0x0, 0x20002}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.719924035s ago: executing program 6 (id=1093): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000440)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000004c0)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'wg2\x00', &(0x7f0000000900)=@ethtool_gfeatures}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) 9.589864006s ago: executing program 35 (id=1093): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000440)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000004c0)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'wg2\x00', &(0x7f0000000900)=@ethtool_gfeatures}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) 6.980379673s ago: executing program 7 (id=1112): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 6.658804969s ago: executing program 7 (id=1113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000011}, 0x10) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, {0xa, 0x4e22, 0xbc, @local, 0x2}, 0x0, {[0x7, 0x3a9, 0x507, 0x5, 0xd1f, 0x4eb, 0x8, 0x8]}}, 0x5c) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000040)=0x2c, 0x4) 6.54869827s ago: executing program 7 (id=1114): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6.548492407s ago: executing program 7 (id=1115): r0 = syz_io_uring_setup(0x111, &(0x7f0000001740)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001880)='n', 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) socket(0x21, 0x3, 0x0) 3.509086115s ago: executing program 7 (id=1145): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f00000008c0)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x0, &(0x7f00000009c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000a00)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000a80)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000ac0)) timer_settime(0x0, 0x0, &(0x7f0000000b00)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 2.930311945s ago: executing program 5 (id=1157): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.887217254s ago: executing program 5 (id=1159): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="5766b1b827f6003300", 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) shutdown(r0, 0x0) 2.468605116s ago: executing program 7 (id=1167): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x467, 0xfffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x5}) 2.031354125s ago: executing program 5 (id=1171): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="0408"], 0x7) 1.959502576s ago: executing program 4 (id=1173): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9900, 0x0, 0x0) socket(0x2, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) 1.958698844s ago: executing program 4 (id=1174): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f0000000280)={0x1d, 0x0, 0x0, {0x0, 0xff}}, 0x18, &(0x7f00000002c0)={&(0x7f0000000300)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x4406f) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x4, 0x1}, {0x5, 0x10}, {0x10, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x80000c4) 1.819992063s ago: executing program 4 (id=1175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183042, 0x20) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,,ser=root,pass=root,port=445,vers=3.0\x00') r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800011000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x82}}, 0x0) 940.357875ms ago: executing program 4 (id=1177): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42, 0x1ff) write(r2, &(0x7f00000002c0)="0f", 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="85000000ae00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x14, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000480)='./file0\x00', &(0x7f00000008c0)=[0x0], 0x0, 0x0, 0x200000000000017b}}, 0x40) 887.586545ms ago: executing program 4 (id=1179): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffffa, 0x6, 0x3a, 0x7fff, 0x0, 0x3, 0x2}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 719.824876ms ago: executing program 2 (id=1181): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x203f, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20100, 0x44) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000001440)={0x1, 0x3, 0x1000, 0xffffffffffffffbc, 0x0, 0x0, 0x0, 0x0}) 656.316228ms ago: executing program 2 (id=1182): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000880), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300)=r2, 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 649.779165ms ago: executing program 5 (id=1183): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000240)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000280)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f00000002c0)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000400)='P', 0x1, 0x1e8000) r1 = syz_open_dev$loop(&(0x7f0000000580), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 580.198909ms ago: executing program 2 (id=1184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @empty, @loopback={0x57}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {0x8, 0x88be, 0x1ff}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x6}}}}}}}}}, 0x0) 480.393971ms ago: executing program 2 (id=1185): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='27', 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 480.220767ms ago: executing program 5 (id=1186): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) truncate(&(0x7f00000000c0)='./file0\x00', 0x3) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 480.12724ms ago: executing program 2 (id=1187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000380), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000480)=@gcm_128={{0x303}, "4eb83f00042c16fe", "070000000000000098dd161211559266", "64a46961", "fdffffff7b8c3c99"}, 0x15) 400.014007ms ago: executing program 2 (id=1188): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f00000008c0)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x0, &(0x7f00000009c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000a00)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000a80)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000ac0)) timer_settime(0x0, 0x0, &(0x7f0000000b00)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 399.674237ms ago: executing program 5 (id=1189): lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, &(0x7f00000003c0)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="000b0200000002"], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 0s ago: executing program 4 (id=1190): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) sigaltstack(0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, &(0x7f00000003c0)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="000b0200000002"], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000900)={0xc, &(0x7f0000000680)={0x40, 0x21, 0x6, {0x6, 0x30, "b87a9f2c"}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): 0xa [ 85.095274][ T7957] should_failslab+0xc2/0x120 [ 85.095295][ T7957] kmem_cache_alloc_noprof+0x92/0x6a0 [ 85.095325][ T7957] ? security_file_alloc+0x34/0x2c0 [ 85.095363][ T7957] security_file_alloc+0x34/0x2c0 [ 85.095390][ T7957] init_file+0x95/0x480 [ 85.095435][ T7957] alloc_empty_file+0x79/0x1c0 [ 85.095462][ T7957] alloc_file_pseudo+0x17e/0x290 [ 85.095489][ T7957] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 85.095523][ T7957] create_pipe_files+0x33a/0x930 [ 85.095549][ T7957] do_pipe2+0xbd/0x1e0 [ 85.095569][ T7957] ? lock_acquire+0x1d1/0x380 [ 85.095588][ T7957] ? __pfx_do_pipe2+0x10/0x10 [ 85.095609][ T7957] ? find_held_lock+0x2b/0x80 [ 85.095633][ T7957] ? __might_fault+0xc5/0x140 [ 85.095661][ T7957] __ia32_sys_pipe2+0x53/0x80 [ 85.095683][ T7957] __do_fast_syscall_32+0x14b/0x8c0 [ 85.095709][ T7957] do_fast_syscall_32+0x32/0x70 [ 85.095732][ T7957] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.095754][ T7957] RIP: 0023:0xf747efbc [ 85.095769][ T7957] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 85.095786][ T7957] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 000000000000014b [ 85.095804][ T7957] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 85.095816][ T7957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.095827][ T7957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.095837][ T7957] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.095847][ T7957] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.095872][ T7957] [ 85.447792][ T7964] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.448001][ T7964] block device autoloading is deprecated and will be removed. [ 85.524600][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.525231][ T5793] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.608216][ T7964] md/raid1:md4: active with 1 out of 1 mirrors [ 85.609298][ T7964] md4: detected capacity change from 0 to 4096 [ 85.688337][ T7978] netlink: 'syz.4.695': attribute type 4 has an invalid length. [ 85.734724][ T7984] lo: entered allmulticast mode [ 85.738086][ T7983] lo: left allmulticast mode [ 85.778390][ T7986] FAULT_INJECTION: forcing a failure. [ 85.778390][ T7986] name failslab, interval 1, probability 0, space 0, times 0 [ 85.778412][ T7986] CPU: 3 UID: 0 PID: 7986 Comm: syz.4.699 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.778427][ T7986] Tainted: [L]=SOFTLOCKUP [ 85.778431][ T7986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.778437][ T7986] Call Trace: [ 85.778442][ T7986] [ 85.778447][ T7986] dump_stack_lvl+0x100/0x190 [ 85.778467][ T7986] should_fail_ex.cold+0x5/0xa [ 85.778484][ T7986] should_failslab+0xc2/0x120 [ 85.778498][ T7986] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 85.778513][ T7986] ? __lock_acquire+0x5c0/0x1f40 [ 85.778524][ T7986] ? __alloc_skb+0x140/0x710 [ 85.778540][ T7986] __alloc_skb+0x140/0x710 [ 85.778567][ T7986] ? __pfx___alloc_skb+0x10/0x10 [ 85.778583][ T7986] ? lock_acquire+0x1d1/0x380 [ 85.778595][ T7986] ? do_raw_write_lock+0x11e/0x260 [ 85.778610][ T7986] tipc_buf_acquire+0x26/0xf0 [ 85.778622][ T7986] named_prepare_buf+0x29/0x170 [ 85.778635][ T7986] tipc_named_withdraw+0x206/0x680 [ 85.778648][ T7986] tipc_nametbl_withdraw+0x174/0x3e0 [ 85.778662][ T7986] ? look_up_lock_class+0x55/0x120 [ 85.778675][ T7986] tipc_sk_withdraw+0x547/0x7c0 [ 85.778690][ T7986] ? __pfx_tipc_sk_withdraw+0x10/0x10 [ 85.778707][ T7986] tipc_sk_leave+0x13d/0x1c0 [ 85.778720][ T7986] ? __pfx_tipc_sk_leave+0x10/0x10 [ 85.778757][ T7986] ? __pfx_woken_wake_function+0x10/0x10 [ 85.778779][ T7986] ? tipc_sk_filtering+0x47d/0x590 [ 85.778797][ T7986] tipc_release+0x11f/0x1650 [ 85.778813][ T7986] ? down_write+0x141/0x1f0 [ 85.778826][ T7986] ? __pfx_down_write+0x10/0x10 [ 85.778841][ T7986] ? __pfx_locks_remove_file+0x10/0x10 [ 85.778859][ T7986] __sock_release+0xb3/0x260 [ 85.778872][ T7986] ? __pfx_sock_close+0x10/0x10 [ 85.778885][ T7986] sock_close+0x1c/0x30 [ 85.778897][ T7986] __fput+0x3fb/0xb50 [ 85.778913][ T7986] fput_close_sync+0x118/0x250 [ 85.778927][ T7986] ? __pfx_fput_close_sync+0x10/0x10 [ 85.778944][ T7986] filp_close_sync+0x75/0xa0 [ 85.778959][ T7986] __range_close+0x4a6/0x8b0 [ 85.778975][ T7986] __ia32_sys_close_range+0x1f8/0x430 [ 85.778989][ T7986] ? __pfx___ia32_sys_close_range+0x10/0x10 [ 85.779006][ T7986] __do_fast_syscall_32+0x14b/0x8c0 [ 85.779020][ T7986] do_fast_syscall_32+0x32/0x70 [ 85.779032][ T7986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.779045][ T7986] RIP: 0023:0xf7fb5fbc [ 85.779054][ T7986] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 85.779064][ T7986] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 85.779075][ T7986] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000ffffffff [ 85.779081][ T7986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.779087][ T7986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.779093][ T7986] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.779099][ T7986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.779113][ T7986] [ 85.779155][ T7986] tipc: Withdrawal distribution failure [ 85.837450][ T7992] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 85.881737][ T42] audit: type=1326 audit(1793358590.327:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fbc code=0x7ffc0000 [ 85.881784][ T42] audit: type=1326 audit(1793358590.327:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fbc code=0x7ffc0000 [ 85.882485][ T42] audit: type=1326 audit(1793358590.327:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.702" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f06fbc code=0x7ffc0000 [ 85.882525][ T42] audit: type=1326 audit(1793358590.327:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fbc code=0x7ffc0000 [ 85.882629][ T42] audit: type=1326 audit(1793358590.327:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fbc code=0x7ffc0000 [ 85.882840][ T42] audit: type=1326 audit(1793358590.327:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.702" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f06fbc code=0x7ffc0000 [ 85.882877][ T42] audit: type=1326 audit(1793358590.327:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fbc code=0x7ffc0000 [ 85.883048][ T42] audit: type=1326 audit(1793358590.327:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.702" exe="/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf7f06fbc code=0x7ffc0000 [ 85.883154][ T42] audit: type=1326 audit(1793358590.327:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fbc code=0x7ffc0000 [ 85.909887][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'. [ 86.337773][ T8025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.708'. [ 86.463078][ T8031] syz.0.710 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 86.508286][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 86.568252][ T8033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.574807][ T8033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.026069][ T8064] netlink: 20 bytes leftover after parsing attributes in process `syz.4.719'. [ 87.104993][ T8072] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.105013][ T8072] block device autoloading is deprecated and will be removed. [ 87.343117][ T8081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.343139][ T8081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.589446][ T8093] FAULT_INJECTION: forcing a failure. [ 87.589446][ T8093] name failslab, interval 1, probability 0, space 0, times 0 [ 87.589479][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.1.732 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.589504][ T8093] Tainted: [L]=SOFTLOCKUP [ 87.589511][ T8093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.589522][ T8093] Call Trace: [ 87.589528][ T8093] [ 87.589536][ T8093] dump_stack_lvl+0x100/0x190 [ 87.589570][ T8093] should_fail_ex.cold+0x5/0xa [ 87.589599][ T8093] should_failslab+0xc2/0x120 [ 87.589621][ T8093] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 87.589650][ T8093] ? __lock_acquire+0x5c0/0x1f40 [ 87.589669][ T8093] ? __alloc_skb+0x140/0x710 [ 87.589695][ T8093] __alloc_skb+0x140/0x710 [ 87.589717][ T8093] ? __pfx___alloc_skb+0x10/0x10 [ 87.589740][ T8093] ? lock_acquire+0x1d1/0x380 [ 87.589762][ T8093] ? do_raw_write_lock+0x11e/0x260 [ 87.589790][ T8093] tipc_buf_acquire+0x26/0xf0 [ 87.589808][ T8093] named_prepare_buf+0x29/0x170 [ 87.589831][ T8093] tipc_named_withdraw+0x206/0x680 [ 87.589855][ T8093] tipc_nametbl_withdraw+0x174/0x3e0 [ 87.589879][ T8093] ? look_up_lock_class+0x55/0x120 [ 87.589903][ T8093] tipc_sk_withdraw+0x547/0x7c0 [ 87.589930][ T8093] ? __pfx_tipc_sk_withdraw+0x10/0x10 [ 87.589961][ T8093] tipc_sk_leave+0x13d/0x1c0 [ 87.589984][ T8093] ? __pfx_tipc_sk_leave+0x10/0x10 [ 87.590005][ T8093] ? __pfx_woken_wake_function+0x10/0x10 [ 87.590032][ T8093] ? tipc_sk_filtering+0x47d/0x590 [ 87.590063][ T8093] tipc_release+0x11f/0x1650 [ 87.590090][ T8093] ? down_write+0x141/0x1f0 [ 87.590112][ T8093] ? __pfx_down_write+0x10/0x10 [ 87.590135][ T8093] ? __pfx_locks_remove_file+0x10/0x10 [ 87.590165][ T8093] __sock_release+0xb3/0x260 [ 87.590189][ T8093] ? __pfx_sock_close+0x10/0x10 [ 87.590211][ T8093] sock_close+0x1c/0x30 [ 87.590229][ T8093] __fput+0x3fb/0xb50 [ 87.590256][ T8093] fput_close_sync+0x118/0x250 [ 87.590280][ T8093] ? __pfx_fput_close_sync+0x10/0x10 [ 87.590319][ T8093] filp_close_sync+0x75/0xa0 [ 87.590349][ T8093] __range_close+0x4a6/0x8b0 [ 87.590379][ T8093] __ia32_sys_close_range+0x1f8/0x430 [ 87.590404][ T8093] ? __pfx___ia32_sys_close_range+0x10/0x10 [ 87.590436][ T8093] __do_fast_syscall_32+0x14b/0x8c0 [ 87.590461][ T8093] do_fast_syscall_32+0x32/0x70 [ 87.590484][ T8093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.590506][ T8093] RIP: 0023:0xf7f06fbc [ 87.590519][ T8093] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 87.590534][ T8093] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 87.590552][ T8093] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000ffffffff [ 87.590564][ T8093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.590575][ T8093] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.590587][ T8093] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 87.590616][ T8093] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.590643][ T8093] [ 87.590679][ T8093] tipc: Withdrawal distribution failure [ 87.607377][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.607407][ T5793] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.657052][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'. [ 87.737268][ T8101] FAULT_INJECTION: forcing a failure. [ 87.737268][ T8101] name failslab, interval 1, probability 0, space 0, times 0 [ 87.737288][ T8101] CPU: 1 UID: 0 PID: 8101 Comm: syz.0.735 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.737307][ T8101] Tainted: [L]=SOFTLOCKUP [ 87.737311][ T8101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.737317][ T8101] Call Trace: [ 87.737321][ T8101] [ 87.737326][ T8101] dump_stack_lvl+0x100/0x190 [ 87.737346][ T8101] should_fail_ex.cold+0x5/0xa [ 87.737363][ T8101] should_failslab+0xc2/0x120 [ 87.737376][ T8101] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 87.737394][ T8101] ? bpf_fs_alloc_inode+0x26/0x130 [ 87.737406][ T8101] ? __pfx_bpf_fs_alloc_inode+0x10/0x10 [ 87.737417][ T8101] bpf_fs_alloc_inode+0x26/0x130 [ 87.737428][ T8101] ? __pfx_bpf_fs_alloc_inode+0x10/0x10 [ 87.737437][ T8101] alloc_inode+0x68/0x250 [ 87.737452][ T8101] new_inode+0x22/0x1c0 [ 87.737469][ T8101] bpf_get_inode+0x7b/0xf0 [ 87.737482][ T8101] bpf_mkobj_ops+0xa0/0x2a0 [ 87.737496][ T8101] bpf_fill_super+0x5e1/0x960 [ 87.737508][ T8101] ? __pfx_bpf_fill_super+0x10/0x10 [ 87.737519][ T8101] ? hook_capable+0x1bc/0x500 [ 87.737536][ T8101] ? rcu_is_watching+0x13/0xc0 [ 87.737551][ T8101] ? apparmor_capable+0x1d7/0x4d0 [ 87.737565][ T8101] ? __pfx_bpf_fill_super+0x10/0x10 [ 87.737575][ T8101] get_tree_nodev+0xdd/0x190 [ 87.737587][ T8101] vfs_get_tree+0x92/0x320 [ 87.737602][ T8101] vfs_cmd_create+0xd7/0x2a0 [ 87.737618][ T8101] __do_sys_fsconfig+0x55a/0xcb0 [ 87.737634][ T8101] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 87.737657][ T8101] __do_fast_syscall_32+0x14b/0x8c0 [ 87.737672][ T8101] do_fast_syscall_32+0x32/0x70 [ 87.737684][ T8101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.737697][ T8101] RIP: 0023:0xf747efbc [ 87.737706][ T8101] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 87.737716][ T8101] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 87.737727][ T8101] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 87.737733][ T8101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.737738][ T8101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.737744][ T8101] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 87.737750][ T8101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.737764][ T8101] [ 87.797332][ T8103] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.797346][ T8103] block device autoloading is deprecated and will be removed. [ 87.951352][ T8103] md/raid1:md1: active with 1 out of 1 mirrors [ 87.951833][ T8103] md1: detected capacity change from 0 to 4096 [ 88.032634][ T8117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'. [ 88.094399][ T5734] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 88.275784][ T5734] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 88.276560][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.276576][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.276586][ T5734] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.276606][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.277779][ T5734] usb 5-1: config 0 descriptor?? [ 88.329652][ T5793] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 88.618474][ T8144] batman_adv: batadv0: Adding interface: syz_tun [ 88.618485][ T8144] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.618500][ T8144] batman_adv: batadv0: Interface activated: syz_tun [ 88.725490][ T5734] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 88.796188][ T8153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.755'. [ 88.947849][ T5865] usb 5-1: USB disconnect, device number 8 [ 89.651548][ T8175] netlink: 'syz.1.763': attribute type 1 has an invalid length. [ 89.672052][ T8175] bond1: entered promiscuous mode [ 89.672355][ T8175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.707055][ T8175] bond1: (slave bridge1): making interface the new active one [ 89.707080][ T8175] bridge1: entered promiscuous mode [ 89.708534][ T8175] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 89.719109][ T8180] netlink: 48 bytes leftover after parsing attributes in process `syz.2.765'. [ 89.738007][ T8180] bond1: peer notification delay (2365) is not a multiple of miimon (20), value rounded to 2360 ms [ 89.755496][ T8180] netlink: 48 bytes leftover after parsing attributes in process `syz.2.765'. [ 89.755523][ T8180] bond1: peer notification delay (2365) is not a multiple of miimon (20), value rounded to 2360 ms [ 89.901536][ T8191] FAULT_INJECTION: forcing a failure. [ 89.901536][ T8191] name failslab, interval 1, probability 0, space 0, times 0 [ 89.901557][ T8191] CPU: 0 UID: 0 PID: 8191 Comm: syz.4.770 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.901573][ T8191] Tainted: [L]=SOFTLOCKUP [ 89.901577][ T8191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.901584][ T8191] Call Trace: [ 89.901588][ T8191] [ 89.901593][ T8191] dump_stack_lvl+0x100/0x190 [ 89.901614][ T8191] should_fail_ex.cold+0x5/0xa [ 89.901630][ T8191] should_failslab+0xc2/0x120 [ 89.901643][ T8191] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 89.901667][ T8191] ? alloc_pwq+0x58c/0x1450 [ 89.901687][ T8191] alloc_pwq+0x58c/0x1450 [ 89.901704][ T8191] ? wqattrs_pod_type+0x107/0x200 [ 89.901733][ T8191] apply_wqattrs_prepare+0x6cf/0x980 [ 89.901765][ T8191] __alloc_workqueue+0xdae/0x1900 [ 89.901792][ T8191] alloc_workqueue_noprof+0xc7/0x130 [ 89.901806][ T8191] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 89.901823][ T8191] ? __ceph_monc_want_map+0x189/0x360 [ 89.901841][ T8191] ceph_get_tree+0x43d/0x1fd0 [ 89.901853][ T8191] ? security_capable+0x80/0x260 [ 89.901865][ T8191] vfs_get_tree+0x92/0x320 [ 89.901879][ T8191] path_mount+0x7d0/0x2850 [ 89.901911][ T8191] ? __pfx_path_mount+0x10/0x10 [ 89.901925][ T8191] ? lockdep_hardirqs_on+0x7d/0x110 [ 89.901939][ T8191] ? putname+0xb1/0x110 [ 89.901952][ T8191] ? kmem_cache_free+0x127/0x6c0 [ 89.901972][ T8191] ? __ia32_sys_mount+0x292/0x310 [ 89.901986][ T8191] __ia32_sys_mount+0x292/0x310 [ 89.902001][ T8191] ? __pfx___ia32_sys_mount+0x10/0x10 [ 89.902020][ T8191] __do_fast_syscall_32+0x14b/0x8c0 [ 89.902034][ T8191] do_fast_syscall_32+0x32/0x70 [ 89.902047][ T8191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.902060][ T8191] RIP: 0023:0xf7fb5fbc [ 89.902069][ T8191] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 89.902079][ T8191] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 89.902090][ T8191] RAX: ffffffffffffffda RBX: 0000000080002840 RCX: 0000000080002880 [ 89.902097][ T8191] RDX: 00000000800028c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.902103][ T8191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.902109][ T8191] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.902115][ T8191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.902129][ T8191] [ 90.242399][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 90.242416][ T42] audit: type=1326 audit(1793358594.687:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efbc code=0x7ffc0000 [ 90.242468][ T42] audit: type=1326 audit(1793358594.687:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efbc code=0x7ffc0000 [ 90.244601][ T42] audit: type=1326 audit(1793358594.687:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf740efbc code=0x7ffc0000 [ 90.244625][ T42] audit: type=1326 audit(1793358594.697:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efbc code=0x7ffc0000 [ 90.244645][ T42] audit: type=1326 audit(1793358594.697:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efbc code=0x7ffc0000 [ 90.247085][ T42] audit: type=1326 audit(1793358594.697:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf740efbc code=0x7ffc0000 [ 90.247389][ T42] audit: type=1326 audit(1793358594.697:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efbc code=0x7ffc0000 [ 90.248097][ T42] audit: type=1326 audit(1793358594.697:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efbc code=0x7ffc0000 [ 90.249123][ T42] audit: type=1326 audit(1793358594.697:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740efbc code=0x7ffc0000 [ 90.249255][ T42] audit: type=1326 audit(1793358594.697:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.2.785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efbc code=0x7ffc0000 [ 90.250101][ T8222] netfs: Cache "CacheFiles" added (type cachefiles) [ 90.250123][ T8222] CacheFiles: File cache on CacheFiles registered [ 90.250582][ T8221] CacheFiles: File cache on CacheFiles unregistering [ 90.250592][ T8221] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 90.379433][ T8233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.789'. [ 90.406301][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 90.463219][ T8236] device-mapper: table: 248:1: mirror: Device lookup failure (-EBUSY) [ 90.463877][ T8236] device-mapper: ioctl: error adding target to table [ 90.574597][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 90.578262][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 90.578300][ T10] usb 6-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 90.579464][ T10] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 90.579485][ T10] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 90.579500][ T10] usb 6-1: config 14 has no interface number 0 [ 90.579513][ T10] usb 6-1: config 14 has no interface number 1 [ 90.579561][ T10] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 90.579581][ T10] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 90.579600][ T10] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 90.579619][ T10] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 90.579638][ T10] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 90.579660][ T10] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.579680][ T10] usb 6-1: config 14 interface 57 has no altsetting 0 [ 90.579694][ T10] usb 6-1: config 14 interface 228 has no altsetting 0 [ 90.581616][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.581635][ T10] usb 6-1: Product: syz [ 90.581647][ T10] usb 6-1: Manufacturer: syz [ 90.581658][ T10] usb 6-1: SerialNumber: syz [ 90.991065][ T10] legousbtower 6-1:14.57: interrupt endpoints not found [ 91.393513][ T10] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 91.399690][ T10] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 92.154495][ T29] usb 6-1: USB disconnect, device number 9 [ 92.188063][ T29] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 92.415778][ T5793] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 92.415933][ T5793] Bluetooth: hci2: Injecting HCI hardware error event [ 92.417308][ T5802] Bluetooth: hci2: hardware error 0x00 [ 92.866876][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 92.872323][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.803'. [ 93.124375][ T5876] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 93.280162][ T5876] usb 6-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 93.290811][ T5876] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.291800][ T5876] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.293943][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.293961][ T5876] usb 6-1: Product: syz [ 93.293972][ T5876] usb 6-1: Manufacturer: syz [ 93.293983][ T5876] usb 6-1: SerialNumber: syz [ 93.308352][ T5876] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 93.323620][ T5876] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 93.327252][ T8285] af_packet: tpacket_rcv: packet too big, clamped from 78 to 4294967286. macoff=82 [ 93.327839][ T5876] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 93.380850][ T8289] FAULT_INJECTION: forcing a failure. [ 93.380850][ T8289] name failslab, interval 1, probability 0, space 0, times 0 [ 93.380872][ T8289] CPU: 0 UID: 0 PID: 8289 Comm: syz.0.811 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.380887][ T8289] Tainted: [L]=SOFTLOCKUP [ 93.380892][ T8289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.380899][ T8289] Call Trace: [ 93.380903][ T8289] [ 93.380908][ T8289] dump_stack_lvl+0x100/0x190 [ 93.380929][ T8289] should_fail_ex.cold+0x5/0xa [ 93.380946][ T8289] should_failslab+0xc2/0x120 [ 93.380963][ T8289] __kmalloc_noprof+0xfc/0x840 [ 93.380985][ T8289] ? __pfx___up_read+0x10/0x10 [ 93.381002][ T8289] ? led_trigger_register+0x46a/0x540 [ 93.381022][ T8289] ? ieee80211_txq_setup_flows+0x208/0xdf0 [ 93.381047][ T8289] ieee80211_txq_setup_flows+0x208/0xdf0 [ 93.381079][ T8289] ieee80211_register_hw+0x23ea/0x45c0 [ 93.381103][ T8289] ? mark_held_locks+0x31/0x70 [ 93.381125][ T8289] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 93.381141][ T8289] ? __pfx___debug_object_init+0x10/0x10 [ 93.381163][ T8289] ? find_held_lock+0x2b/0x80 [ 93.381187][ T8289] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 93.381210][ T8289] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 93.381227][ T8289] ? __hrtimer_setup+0x208/0x330 [ 93.381251][ T8289] mac80211_hwsim_new_radio+0x2b01/0x66f0 [ 93.381275][ T8289] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 93.381299][ T8289] hwsim_new_radio_nl+0xc6b/0x13f0 [ 93.381312][ T8289] ? trace_kmalloc+0xeb/0x110 [ 93.381325][ T8289] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 93.381342][ T8289] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 93.381360][ T8289] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 93.381379][ T8289] genl_family_rcv_msg_doit+0x214/0x300 [ 93.381395][ T8289] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 93.381410][ T8289] ? genl_get_cmd+0x3e7/0x760 [ 93.381428][ T8289] ? bpf_lsm_capable+0x9/0x10 [ 93.381439][ T8289] ? security_capable+0x80/0x260 [ 93.381450][ T8289] ? ns_capable+0xcd/0xf0 [ 93.381468][ T8289] genl_rcv_msg+0x560/0x800 [ 93.381485][ T8289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.381499][ T8289] ? __lock_acquire+0x5c0/0x1f40 [ 93.381509][ T8289] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 93.381527][ T8289] netlink_rcv_skb+0x159/0x420 [ 93.381540][ T8289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.381556][ T8289] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.381575][ T8289] ? netlink_deliver_tap+0x1ae/0xb50 [ 93.381590][ T8289] genl_rcv+0x28/0x40 [ 93.381603][ T8289] netlink_unicast+0x668/0x950 [ 93.381618][ T8289] ? __pfx_netlink_unicast+0x10/0x10 [ 93.381636][ T8289] netlink_sendmsg+0x9ac/0x10c0 [ 93.381652][ T8289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.381668][ T8289] ? apparmor_socket_sendmsg+0x165/0x280 [ 93.381682][ T8289] ? ____sys_sendmsg+0xa99/0xc30 [ 93.381697][ T8289] ____sys_sendmsg+0xa99/0xc30 [ 93.381712][ T8289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.381726][ T8289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.381749][ T8289] ___sys_sendmsg+0x190/0x1e0 [ 93.381765][ T8289] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.381782][ T8289] ? futex_wait+0x11e/0x370 [ 93.381798][ T8289] ? find_held_lock+0x2b/0x80 [ 93.381821][ T8289] __sys_sendmsg+0x160/0x210 [ 93.381835][ T8289] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.381857][ T8289] __do_fast_syscall_32+0x14b/0x8c0 [ 93.381869][ T8289] ? lockdep_hardirqs_on+0x7d/0x110 [ 93.381882][ T8289] do_fast_syscall_32+0x32/0x70 [ 93.381894][ T8289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.381908][ T8289] RIP: 0023:0xf747efbc [ 93.381917][ T8289] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 93.381928][ T8289] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 93.381938][ T8289] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000500 [ 93.381945][ T8289] RDX: 0000000004080040 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.381951][ T8289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.381956][ T8289] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 93.381962][ T8289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.381976][ T8289] [ 93.502970][ T8295] tipc: Started in network mode [ 93.502995][ T8295] tipc: Node identity ac1414aa, cluster identity 4711 [ 93.506574][ T8295] tipc: New replicast peer: 172.20.20.187 [ 93.509643][ T8295] tipc: Enabled bearer , priority 10 [ 93.697278][ T8306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.819'. [ 93.746202][ T8309] Illegal XDP return value 4294967274 on prog (id 124) dev syz_tun, expect packet loss! [ 93.887762][ T8315] loop2: detected capacity change from 0 to 7 [ 93.892899][ T8315] Dev loop2: unable to read RDB block 7 [ 93.892932][ T8315] loop2: unable to read partition table [ 93.893104][ T8315] loop2: partition table beyond EOD, truncated [ 93.893120][ T8315] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 93.957928][ T8321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.826'. [ 94.399199][ T6062] IPVS: starting estimator thread 0... [ 94.401985][ T8336] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 94.494509][ T8337] IPVS: using max 44 ests per chain, 105600 per kthread [ 94.500105][ T5802] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 94.506204][ T5876] tipc: Node number set to 2886997162 [ 94.728677][ T8351] gre2: entered promiscuous mode [ 95.164405][ T5734] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 95.206207][ T8273] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 95.211732][ T5895] usb 6-1: USB disconnect, device number 10 [ 95.227026][ T5895] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 95.231655][ T5895] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 95.233315][ T5895] ti_usb_3410_5052 6-1:2.0: device disconnected [ 95.336618][ T5734] usb 9-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 95.337515][ T5734] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.337530][ T5734] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.337541][ T5734] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.337561][ T5734] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.338738][ T5734] usb 9-1: config 0 descriptor?? [ 95.556990][ T8390] FAULT_INJECTION: forcing a failure. [ 95.556990][ T8390] name failslab, interval 1, probability 0, space 0, times 0 [ 95.557011][ T8390] CPU: 1 UID: 0 PID: 8390 Comm: syz.0.842 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.557026][ T8390] Tainted: [L]=SOFTLOCKUP [ 95.557030][ T8390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.557037][ T8390] Call Trace: [ 95.557041][ T8390] [ 95.557046][ T8390] dump_stack_lvl+0x100/0x190 [ 95.557081][ T8390] should_fail_ex.cold+0x5/0xa [ 95.557097][ T8390] should_failslab+0xc2/0x120 [ 95.557111][ T8390] __kmalloc_cache_node_noprof+0x94/0x710 [ 95.557124][ T8390] ? __kmalloc_cache_node_noprof+0x30c/0x710 [ 95.557136][ T8390] ? bdi_alloc+0x44/0x140 [ 95.557151][ T8390] bdi_alloc+0x44/0x140 [ 95.557164][ T8390] __alloc_disk_node+0xac/0x730 [ 95.557181][ T8390] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 95.557200][ T8390] __blk_alloc_disk+0xd2/0x170 [ 95.557215][ T8390] ? __pfx___blk_alloc_disk+0x10/0x10 [ 95.557230][ T8390] ? mark_held_locks+0x40/0x70 [ 95.557249][ T8390] ? lockdep_init_map_type+0x5c/0x250 [ 95.557262][ T8390] ? lockdep_init_map_type+0x5c/0x250 [ 95.557276][ T8390] dm_create+0x5e8/0x1530 [ 95.557293][ T8390] dev_create+0x121/0x2a0 [ 95.557303][ T8390] ? __pfx_dev_create+0x10/0x10 [ 95.557316][ T8390] ctl_ioctl+0x4d2/0xcc0 [ 95.557331][ T8390] ? __pfx_dev_create+0x10/0x10 [ 95.557341][ T8390] ? __pfx_ctl_ioctl+0x10/0x10 [ 95.557371][ T8390] ? __fget_files+0x21f/0x3d0 [ 95.557384][ T8390] dm_compat_ctl_ioctl+0x23/0x30 [ 95.557401][ T8390] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 95.557423][ T8390] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 95.557442][ T8390] __do_fast_syscall_32+0x14b/0x8c0 [ 95.557458][ T8390] do_fast_syscall_32+0x32/0x70 [ 95.557471][ T8390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.557485][ T8390] RIP: 0023:0xf747efbc [ 95.557495][ T8390] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 95.557505][ T8390] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 95.557516][ T8390] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c138fd03 [ 95.557522][ T8390] RDX: 0000000080001880 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.557528][ T8390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.557534][ T8390] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 95.557539][ T8390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.557553][ T8390] [ 95.762613][ T5734] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 95.769388][ T8395] loop5: detected capacity change from 0 to 7 [ 95.775730][ T8395] Dev loop5: unable to read RDB block 7 [ 95.775749][ T8395] loop5: AHDI p1 p2 p3 [ 95.775760][ T8395] loop5: partition table partially beyond EOD, truncated [ 95.775879][ T8395] loop5: p1 start 1818582900 is beyond EOD, truncated [ 95.775890][ T8395] loop5: p3 start 335544320 is beyond EOD, truncated [ 95.857015][ T8400] FAULT_INJECTION: forcing a failure. [ 95.857015][ T8400] name failslab, interval 1, probability 0, space 0, times 0 [ 95.857036][ T8400] CPU: 0 UID: 0 PID: 8400 Comm: syz.1.847 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.857053][ T8400] Tainted: [L]=SOFTLOCKUP [ 95.857057][ T8400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.857068][ T8400] Call Trace: [ 95.857074][ T8400] [ 95.857080][ T8400] dump_stack_lvl+0x100/0x190 [ 95.857111][ T8400] should_fail_ex.cold+0x5/0xa [ 95.857138][ T8400] should_failslab+0xc2/0x120 [ 95.857159][ T8400] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 95.857188][ T8400] ? alloc_pwq+0x58c/0x1450 [ 95.857206][ T8400] alloc_pwq+0x58c/0x1450 [ 95.857217][ T8400] ? wqattrs_pod_type+0x107/0x200 [ 95.857235][ T8400] apply_wqattrs_prepare+0x6cf/0x980 [ 95.857247][ T8400] __alloc_workqueue+0xdae/0x1900 [ 95.857265][ T8400] alloc_workqueue_noprof+0xc7/0x130 [ 95.857278][ T8400] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 95.857294][ T8400] ? __ceph_monc_want_map+0x189/0x360 [ 95.857311][ T8400] ceph_get_tree+0x43d/0x1fd0 [ 95.857324][ T8400] ? security_capable+0x80/0x260 [ 95.857337][ T8400] vfs_get_tree+0x92/0x320 [ 95.857352][ T8400] path_mount+0x7d0/0x2850 [ 95.857368][ T8400] ? __pfx_path_mount+0x10/0x10 [ 95.857381][ T8400] ? lockdep_hardirqs_on+0x7d/0x110 [ 95.857394][ T8400] ? putname+0xb1/0x110 [ 95.857405][ T8400] ? kmem_cache_free+0x127/0x6c0 [ 95.857424][ T8400] ? __ia32_sys_mount+0x292/0x310 [ 95.857437][ T8400] __ia32_sys_mount+0x292/0x310 [ 95.857452][ T8400] ? __pfx___ia32_sys_mount+0x10/0x10 [ 95.857470][ T8400] __do_fast_syscall_32+0x14b/0x8c0 [ 95.857484][ T8400] do_fast_syscall_32+0x32/0x70 [ 95.857497][ T8400] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.857510][ T8400] RIP: 0023:0xf7f06fbc [ 95.857519][ T8400] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 95.857529][ T8400] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 95.857540][ T8400] RAX: ffffffffffffffda RBX: 0000000080002840 RCX: 0000000080002880 [ 95.857546][ T8400] RDX: 00000000800028c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.857552][ T8400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.857558][ T8400] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 95.857564][ T8400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.857577][ T8400] [ 95.997429][ T8406] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.035699][ T5865] usb 9-1: USB disconnect, device number 5 [ 96.074665][ T5734] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 96.224418][ T5734] usb 5-1: Using ep0 maxpacket: 16 [ 96.226054][ T5734] usb 5-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 96.227058][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 96.228920][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.228942][ T5734] usb 5-1: Product: syz [ 96.228954][ T5734] usb 5-1: Manufacturer: syz [ 96.228966][ T5734] usb 5-1: SerialNumber: syz [ 96.233688][ T5734] usb 5-1: config 0 descriptor?? [ 96.235343][ T5734] hub 5-1:0.0: bad descriptor, ignoring hub [ 96.235363][ T5734] hub 5-1:0.0: probe with driver hub failed with error -5 [ 96.241838][ T5734] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 96.596841][ T7160] usb 5-1: USB disconnect, device number 9 [ 96.815666][ T8429] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 97.041055][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.861'. [ 97.587263][ T8460] FAULT_INJECTION: forcing a failure. [ 97.587263][ T8460] name failslab, interval 1, probability 0, space 0, times 0 [ 97.587294][ T8460] CPU: 3 UID: 0 PID: 8460 Comm: syz.4.868 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.587318][ T8460] Tainted: [L]=SOFTLOCKUP [ 97.587324][ T8460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.587332][ T8460] Call Trace: [ 97.587338][ T8460] [ 97.587344][ T8460] dump_stack_lvl+0x100/0x190 [ 97.587375][ T8460] should_fail_ex.cold+0x5/0xa [ 97.587403][ T8460] should_failslab+0xc2/0x120 [ 97.587424][ T8460] __kmalloc_cache_noprof+0x91/0x6d0 [ 97.587450][ T8460] ? ipv6_flowlabel_opt+0x593/0x3330 [ 97.587481][ T8460] ipv6_flowlabel_opt+0x593/0x3330 [ 97.587509][ T8460] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 97.587533][ T8460] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 97.587562][ T8460] ? __local_bh_enable_ip+0xa5/0x120 [ 97.587584][ T8460] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 97.587602][ T8460] do_ipv6_setsockopt+0x2b80/0x3a00 [ 97.587627][ T8460] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 97.587648][ T8460] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 97.587677][ T8460] ? find_held_lock+0x2b/0x80 [ 97.587699][ T8460] ? futex_wake+0x4ea/0x5e0 [ 97.587723][ T8460] ? futex_wait+0x11e/0x370 [ 97.587742][ T8460] ? __lock_acquire+0x5c0/0x1f40 [ 97.587763][ T8460] ? percpu_counter_add_batch+0xb9/0x230 [ 97.587790][ T8460] ? errseq_sample+0x51/0x70 [ 97.587821][ T8460] ? ipv6_setsockopt+0xcb/0x170 [ 97.587846][ T8460] ipv6_setsockopt+0xcb/0x170 [ 97.587869][ T8460] tcp_setsockopt+0xa7/0x100 [ 97.587895][ T8460] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 97.587924][ T8460] do_sock_setsockopt+0xf3/0x1d0 [ 97.587968][ T8460] __sys_setsockopt+0x119/0x190 [ 97.587996][ T8460] __ia32_sys_setsockopt+0xbc/0x160 [ 97.588016][ T8460] ? __might_fault+0x111/0x140 [ 97.588039][ T8460] __do_fast_syscall_32+0x14b/0x8c0 [ 97.588064][ T8460] do_fast_syscall_32+0x32/0x70 [ 97.588085][ T8460] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.588106][ T8460] RIP: 0023:0xf7fb5fbc [ 97.588120][ T8460] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 97.588136][ T8460] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 97.588155][ T8460] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000029 [ 97.588165][ T8460] RDX: 0000000000000020 RSI: 0000000080000080 RDI: 0000000000000020 [ 97.588175][ T8460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.588185][ T8460] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 97.588195][ T8460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.588219][ T8460] [ 97.674811][ T8464] FAULT_INJECTION: forcing a failure. [ 97.674811][ T8464] name failslab, interval 1, probability 0, space 0, times 0 [ 97.674845][ T8464] CPU: 3 UID: 0 PID: 8464 Comm: syz.4.869 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.674869][ T8464] Tainted: [L]=SOFTLOCKUP [ 97.674876][ T8464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.674887][ T8464] Call Trace: [ 97.674894][ T8464] [ 97.674900][ T8464] dump_stack_lvl+0x100/0x190 [ 97.674935][ T8464] should_fail_ex.cold+0x5/0xa [ 97.674963][ T8464] should_failslab+0xc2/0x120 [ 97.674984][ T8464] __kmalloc_cache_noprof+0x91/0x6d0 [ 97.675008][ T8464] ? cec_open+0xdb/0x690 [ 97.675037][ T8464] cec_open+0xdb/0x690 [ 97.675061][ T8464] ? hook_file_open+0x245/0x8e0 [ 97.675087][ T8464] ? __pfx_cec_open+0x10/0x10 [ 97.675114][ T8464] ? lock_acquire+0x1d1/0x380 [ 97.675135][ T8464] ? do_raw_spin_lock+0x128/0x260 [ 97.675157][ T8464] ? find_held_lock+0x2b/0x80 [ 97.675181][ T8464] ? chrdev_open+0x589/0x6a0 [ 97.675202][ T8464] ? chrdev_open+0x589/0x6a0 [ 97.675226][ T8464] ? __pfx_cec_open+0x10/0x10 [ 97.675248][ T8464] chrdev_open+0x234/0x6a0 [ 97.675265][ T8464] ? __pfx_chrdev_open+0x10/0x10 [ 97.675284][ T8464] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 97.675313][ T8464] do_dentry_open+0x674/0x1470 [ 97.675330][ T8464] ? __pfx_chrdev_open+0x10/0x10 [ 97.675355][ T8464] vfs_open_consume+0xcc/0x460 [ 97.675377][ T8464] path_openat+0x1547/0x23f0 [ 97.675400][ T8464] ? __pfx_path_openat+0x10/0x10 [ 97.675441][ T8464] do_file_open+0x20e/0x430 [ 97.675466][ T8464] ? __pfx_do_file_open+0x10/0x10 [ 97.675502][ T8464] ? _raw_spin_unlock+0x28/0x50 [ 97.675528][ T8464] ? alloc_fd+0x471/0x7a0 [ 97.675557][ T8464] do_sys_openat2+0x163/0x1d0 [ 97.675579][ T8464] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.675600][ T8464] ? __local_bh_enable_ip+0xa5/0x120 [ 97.675623][ T8464] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 97.675650][ T8464] __ia32_compat_sys_openat+0x12d/0x210 [ 97.675675][ T8464] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 97.675710][ T8464] do_int80_emulation+0x166/0x650 [ 97.675734][ T8464] asm_int80_emulation+0x1a/0x20 [ 97.675752][ T8464] RIP: 0023:0xf71a77ab [ 97.675766][ T8464] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 97.675781][ T8464] RSP: 002b:00000000f546603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 97.675800][ T8464] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5466100 [ 97.675812][ T8464] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.675823][ T8464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.675840][ T8464] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 97.675851][ T8464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.675876][ T8464] [ 98.653649][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 99.178406][ T8506] netlink: 'syz.2.885': attribute type 1 has an invalid length. [ 99.217602][ T8506] bond2: (slave bridge4): making interface the new active one [ 99.218228][ T8506] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 99.600484][ T8511] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.601231][ T8511] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.695003][ T8511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.814439][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.814483][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.814513][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.814542][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.944717][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.893'. [ 99.994635][ T8524] netlink: 92 bytes leftover after parsing attributes in process `syz.0.893'. [ 100.016789][ T8530] netlink: 'syz.1.896': attribute type 1 has an invalid length. [ 100.052313][ T8530] bond2: (slave bridge2): making interface the new active one [ 100.052741][ T8530] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 100.373500][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'. [ 101.002369][ T8560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.906'. [ 101.015926][ T8560] netlink: 92 bytes leftover after parsing attributes in process `syz.1.906'. [ 101.543024][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.920'. [ 101.552237][ T8575] netlink: 'syz.4.910': attribute type 1 has an invalid length. [ 101.608913][ T8575] bond1: (slave bridge1): making interface the new active one [ 101.609361][ T8575] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 101.662149][ T8580] netlink: 156 bytes leftover after parsing attributes in process `syz.0.912'. [ 101.670349][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 101.670428][ T8582] bridge_slave_1: left allmulticast mode [ 101.670621][ T8582] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.686121][ T8582] bridge_slave_0: left allmulticast mode [ 101.686338][ T8582] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.749153][ T8589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.918'. [ 101.781963][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'. [ 101.985489][ T8595] batman_adv: batadv0: Interface deactivated: syz_tun [ 101.989604][ T8595] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.990093][ T8595] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.046232][ T8595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.051982][ T8595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.146536][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.146578][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.184602][ T5862] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.184629][ T5862] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.325026][ T5802] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.124675][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 103.124688][ T42] audit: type=1326 audit(1793358607.567:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8619 comm="syz.2.938" exe="/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf740efbc code=0x0 [ 103.154768][ T8625] bridge_slave_1: left allmulticast mode [ 103.154784][ T8625] bridge_slave_1: left promiscuous mode [ 103.154923][ T8625] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.157515][ T8625] bridge_slave_0: left allmulticast mode [ 103.157534][ T8625] bridge_slave_0: left promiscuous mode [ 103.157688][ T8625] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.993534][ T8639] FAULT_INJECTION: forcing a failure. [ 103.993534][ T8639] name failslab, interval 1, probability 0, space 0, times 0 [ 103.993564][ T8639] CPU: 3 UID: 0 PID: 8639 Comm: syz.0.946 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.993590][ T8639] Tainted: [L]=SOFTLOCKUP [ 103.993597][ T8639] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.993609][ T8639] Call Trace: [ 103.993616][ T8639] [ 103.993622][ T8639] dump_stack_lvl+0x100/0x190 [ 103.993655][ T8639] should_fail_ex.cold+0x5/0xa [ 103.993684][ T8639] should_failslab+0xc2/0x120 [ 103.993705][ T8639] __kmalloc_cache_noprof+0x91/0x6d0 [ 103.993733][ T8639] ? tcf_exts_init_ex+0x113/0x690 [ 103.993770][ T8639] tcf_exts_init_ex+0x113/0x690 [ 103.993809][ T8639] basic_change+0x261/0x1250 [ 103.993838][ T8639] ? __pfx_basic_change+0x10/0x10 [ 103.993858][ T8639] ? __mutex_unlock_slowpath+0x35d/0x930 [ 103.993894][ T8639] ? __pfx_basic_change+0x10/0x10 [ 103.993916][ T8639] tc_new_tfilter+0x9e2/0x24e0 [ 103.993952][ T8639] ? kasan_quarantine_put+0x104/0x240 [ 103.993984][ T8639] ? __pfx_tc_new_tfilter+0x10/0x10 [ 103.994007][ T8639] ? kfree_skbmem+0x19a/0x210 [ 103.994027][ T8639] ? skb_release_data+0x69d/0x860 [ 103.994055][ T8639] ? __lock_acquire+0x5c0/0x1f40 [ 103.994085][ T8639] ? lock_acquire+0x1d1/0x380 [ 103.994104][ T8639] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 103.994132][ T8639] ? find_held_lock+0x2b/0x80 [ 103.994158][ T8639] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 103.994185][ T8639] ? __pfx_tc_new_tfilter+0x10/0x10 [ 103.994209][ T8639] rtnetlink_rcv_msg+0x95e/0xe90 [ 103.994239][ T8639] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.994298][ T8639] netlink_rcv_skb+0x159/0x420 [ 103.994325][ T8639] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.994354][ T8639] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.994389][ T8639] ? netlink_deliver_tap+0x1ae/0xb50 [ 103.994417][ T8639] netlink_unicast+0x668/0x950 [ 103.994446][ T8639] ? __pfx_netlink_unicast+0x10/0x10 [ 103.994478][ T8639] netlink_sendmsg+0x9ac/0x10c0 [ 103.994506][ T8639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.994537][ T8639] ? apparmor_socket_sendmsg+0x165/0x280 [ 103.994564][ T8639] ? ____sys_sendmsg+0xa99/0xc30 [ 103.994591][ T8639] ____sys_sendmsg+0xa99/0xc30 [ 103.994618][ T8639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.994666][ T8639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.994711][ T8639] ___sys_sendmsg+0x190/0x1e0 [ 103.994740][ T8639] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.994770][ T8639] ? futex_wait+0x11e/0x370 [ 103.994807][ T8639] ? find_held_lock+0x2b/0x80 [ 103.994852][ T8639] __sys_sendmsg+0x160/0x210 [ 103.994878][ T8639] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.994917][ T8639] __do_fast_syscall_32+0x14b/0x8c0 [ 103.994944][ T8639] do_fast_syscall_32+0x32/0x70 [ 103.994967][ T8639] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.994991][ T8639] RIP: 0023:0xf747efbc [ 103.995005][ T8639] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 103.995022][ T8639] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 103.995040][ T8639] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000b00 [ 103.995053][ T8639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.995064][ T8639] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.995076][ T8639] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.995087][ T8639] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.995114][ T8639] [ 104.206415][ T8653] FAULT_INJECTION: forcing a failure. [ 104.206415][ T8653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 104.206446][ T8653] CPU: 1 UID: 0 PID: 8653 Comm: syz.1.943 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.206473][ T8653] Tainted: [L]=SOFTLOCKUP [ 104.206480][ T8653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.206491][ T8653] Call Trace: [ 104.206498][ T8653] [ 104.206505][ T8653] dump_stack_lvl+0x100/0x190 [ 104.206536][ T8653] should_fail_ex.cold+0x5/0xa [ 104.206561][ T8653] should_fail_alloc_page+0xeb/0x140 [ 104.206582][ T8653] prepare_alloc_pages+0x1f0/0x5b0 [ 104.206604][ T8653] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 104.206629][ T8653] ? __kernel_text_address+0xd/0x30 [ 104.206680][ T8653] ? unwind_get_return_address+0x59/0xa0 [ 104.206702][ T8653] ? arch_stack_walk+0xa6/0xf0 [ 104.206729][ T8653] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 104.206763][ T8653] ? __pfx_stack_trace_save+0x10/0x10 [ 104.206779][ T8653] ? stack_depot_save_flags+0x27/0xa10 [ 104.206793][ T8653] ? do_splice_direct+0x174/0x240 [ 104.206808][ T8653] ? do_sendfile+0xadc/0xe20 [ 104.206827][ T8653] ? __ia32_compat_sys_sendfile+0x1e5/0x220 [ 104.206842][ T8653] ? __do_fast_syscall_32+0x14b/0x8c0 [ 104.206860][ T8653] ? kasan_save_stack+0x3f/0x50 [ 104.206873][ T8653] ? kasan_save_stack+0x30/0x50 [ 104.206885][ T8653] ? kasan_save_track+0x14/0x30 [ 104.206896][ T8653] ? __kasan_kmalloc+0xaa/0xb0 [ 104.206909][ T8653] ? __kmalloc_noprof+0x32f/0x840 [ 104.206927][ T8653] ? copy_splice_read+0x1a3/0xbb0 [ 104.206941][ T8653] ? do_splice_read+0x2bd/0x370 [ 104.206954][ T8653] ? splice_direct_to_actor+0x29d/0xa30 [ 104.206969][ T8653] ? do_splice_direct+0x174/0x240 [ 104.206983][ T8653] ? do_sendfile+0xadc/0xe20 [ 104.207014][ T8653] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 104.207040][ T8653] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 104.207059][ T8653] ? rcu_is_watching+0x13/0xc0 [ 104.207082][ T8653] ? copy_splice_read+0x1a3/0xbb0 [ 104.207100][ T8653] copy_splice_read+0x1e1/0xbb0 [ 104.207120][ T8653] ? __pfx_copy_splice_read+0x10/0x10 [ 104.207142][ T8653] ? find_held_lock+0x2b/0x80 [ 104.207163][ T8653] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 104.207178][ T8653] do_splice_read+0x2bd/0x370 [ 104.207196][ T8653] splice_direct_to_actor+0x29d/0xa30 [ 104.207213][ T8653] ? __pfx_direct_splice_actor+0x10/0x10 [ 104.207231][ T8653] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 104.207250][ T8653] ? lock_acquire+0x1d1/0x380 [ 104.207265][ T8653] do_splice_direct+0x174/0x240 [ 104.207281][ T8653] ? __pfx_do_splice_direct+0x10/0x10 [ 104.207298][ T8653] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 104.207317][ T8653] ? rw_verify_area+0xce/0x6d0 [ 104.207342][ T8653] do_sendfile+0xadc/0xe20 [ 104.207370][ T8653] ? __pfx_do_sendfile+0x10/0x10 [ 104.207393][ T8653] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.207430][ T8653] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 104.207451][ T8653] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 104.207481][ T8653] __do_fast_syscall_32+0x14b/0x8c0 [ 104.207505][ T8653] do_fast_syscall_32+0x32/0x70 [ 104.207523][ T8653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.207544][ T8653] RIP: 0023:0xf7f06fbc [ 104.207558][ T8653] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 104.207573][ T8653] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 104.207589][ T8653] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000004 [ 104.207599][ T8653] RDX: 0000000000000000 RSI: 000000007fffffff RDI: 0000000000000000 [ 104.207608][ T8653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.207617][ T8653] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 104.207628][ T8653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.207651][ T8653] [ 104.277974][ T8662] bridge_slave_0: left allmulticast mode [ 104.277997][ T8662] bridge_slave_0: left promiscuous mode [ 104.278202][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.283719][ T8662] bridge_slave_1: left allmulticast mode [ 104.283743][ T8662] bridge_slave_1: left promiscuous mode [ 104.283919][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.300692][ T8662] bond0: (slave bond_slave_0): Releasing backup interface [ 104.316853][ T8662] bond0: (slave bond_slave_1): Releasing backup interface [ 104.341727][ T8662] team0: Port device team_slave_0 removed [ 104.360910][ T8662] team0: Port device team_slave_1 removed [ 104.361462][ T8662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.361475][ T8662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.367847][ T8662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.367860][ T8662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.372728][ T8662] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 104.378713][ T8666] team0: Mode changed to "activebackup" [ 104.404849][ T5802] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.495471][ T8694] __nla_validate_parse: 1 callbacks suppressed [ 105.495483][ T8694] netlink: 32 bytes leftover after parsing attributes in process `syz.1.958'. [ 105.791231][ T8712] overlayfs: failed to clone lowerpath [ 105.793680][ T8712] overlayfs: failed to clone upperpath [ 105.932276][ T8721] FAULT_INJECTION: forcing a failure. [ 105.932276][ T8721] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 105.932306][ T8721] CPU: 2 UID: 0 PID: 8721 Comm: syz.1.971 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.932329][ T8721] Tainted: [L]=SOFTLOCKUP [ 105.932336][ T8721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.932346][ T8721] Call Trace: [ 105.932352][ T8721] [ 105.932359][ T8721] dump_stack_lvl+0x100/0x190 [ 105.932392][ T8721] should_fail_ex.cold+0x5/0xa [ 105.932417][ T8721] should_fail_alloc_page+0xeb/0x140 [ 105.932439][ T8721] prepare_alloc_pages+0x1f0/0x5b0 [ 105.932465][ T8721] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 105.932495][ T8721] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 105.932523][ T8721] ? lockdep_hardirqs_on+0x7d/0x110 [ 105.932543][ T8721] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 105.932572][ T8721] ? stack_depot_save_flags+0x49a/0xa10 [ 105.932597][ T8721] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 105.932620][ T8721] ? kasan_save_stack+0x30/0x50 [ 105.932639][ T8721] ? __kasan_kmalloc+0xaa/0xb0 [ 105.932655][ T8721] ? snd_pcm_attach_substream+0x436/0xd20 [ 105.932680][ T8721] ? snd_pcm_open_substream+0x90/0x1850 [ 105.932710][ T8721] ? snd_pcm_open+0x2a3/0x6e0 [ 105.932732][ T8721] ? snd_pcm_playback_open+0x69/0xc0 [ 105.932752][ T8721] ? snd_open+0x201/0x450 [ 105.932768][ T8721] ? chrdev_open+0x234/0x6a0 [ 105.932786][ T8721] ? do_dentry_open+0x674/0x1470 [ 105.932803][ T8721] ? vfs_open_consume+0xcc/0x460 [ 105.932823][ T8721] ? path_openat+0x1547/0x23f0 [ 105.932841][ T8721] ? do_file_open+0x20e/0x430 [ 105.932858][ T8721] ? do_sys_openat2+0x163/0x1d0 [ 105.932880][ T8721] ? __ia32_compat_sys_openat+0x12d/0x210 [ 105.932904][ T8721] ? do_int80_emulation+0x166/0x650 [ 105.932926][ T8721] ? asm_int80_emulation+0x1a/0x20 [ 105.932961][ T8721] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.932986][ T8721] ? policy_nodemask+0xed/0x5e0 [ 105.933011][ T8721] alloc_pages_mpol+0x201/0x560 [ 105.933034][ T8721] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 105.933055][ T8721] ? __kasan_kmalloc+0xaa/0xb0 [ 105.933078][ T8721] alloc_pages_noprof+0x1a/0x160 [ 105.933102][ T8721] alloc_pages_exact_noprof+0x32/0xf0 [ 105.933125][ T8721] snd_pcm_attach_substream+0x45d/0xd20 [ 105.933159][ T8721] snd_pcm_open_substream+0x90/0x1850 [ 105.933184][ T8721] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 105.933207][ T8721] ? rcu_is_watching+0x13/0xc0 [ 105.933233][ T8721] snd_pcm_open+0x2a3/0x6e0 [ 105.933261][ T8721] ? __pfx_snd_pcm_open+0x10/0x10 [ 105.933288][ T8721] ? __pfx_default_wake_function+0x10/0x10 [ 105.933317][ T8721] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 105.933343][ T8721] snd_pcm_playback_open+0x69/0xc0 [ 105.933365][ T8721] snd_open+0x201/0x450 [ 105.933385][ T8721] ? __pfx_snd_open+0x10/0x10 [ 105.933402][ T8721] chrdev_open+0x234/0x6a0 [ 105.933425][ T8721] ? __pfx_chrdev_open+0x10/0x10 [ 105.933448][ T8721] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 105.933479][ T8721] do_dentry_open+0x674/0x1470 [ 105.933498][ T8721] ? __pfx_chrdev_open+0x10/0x10 [ 105.933524][ T8721] vfs_open_consume+0xcc/0x460 [ 105.933554][ T8721] path_openat+0x1547/0x23f0 [ 105.933581][ T8721] ? __pfx_path_openat+0x10/0x10 [ 105.933609][ T8721] do_file_open+0x20e/0x430 [ 105.933633][ T8721] ? __pfx_do_file_open+0x10/0x10 [ 105.933673][ T8721] ? _raw_spin_unlock+0x28/0x50 [ 105.933699][ T8721] ? alloc_fd+0x471/0x7a0 [ 105.933733][ T8721] do_sys_openat2+0x163/0x1d0 [ 105.933756][ T8721] ? __pfx_do_sys_openat2+0x10/0x10 [ 105.933782][ T8721] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 105.933810][ T8721] __ia32_compat_sys_openat+0x12d/0x210 [ 105.933835][ T8721] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 105.933868][ T8721] do_int80_emulation+0x166/0x650 [ 105.933893][ T8721] asm_int80_emulation+0x1a/0x20 [ 105.933911][ T8721] RIP: 0023:0xf70f77ab [ 105.933924][ T8721] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 105.933940][ T8721] RSP: 002b:00000000f53b603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 105.933959][ T8721] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53b6100 [ 105.933972][ T8721] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.933980][ T8721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.933990][ T8721] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 105.933999][ T8721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.934023][ T8721] [ 106.134040][ T8733] netlink: 'syz.2.976': attribute type 29 has an invalid length. [ 106.164755][ T5862] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.164799][ T5862] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.164829][ T5862] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.164845][ T5862] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.167238][ T8735] Bluetooth: ISO socket layer initialized [ 106.355457][ T8750] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 106.355473][ T8750] block device autoloading is deprecated and will be removed. [ 106.367954][ T8749] kvm: user requested TSC rate below hardware speed [ 106.368642][ T8749] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 106.368654][ T8749] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 107.220940][ T8788] fuse: fd is not a fuse device [ 107.558909][ T8800] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 107.806322][ T34] wiimote 0005:057E:0306.0004: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 107.808419][ T34] wiimote 0005:057E:0306.0004: New device registered (Wiimote 1) [ 108.034367][ T57] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 108.189548][ T34] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) (1) [ 108.194269][ T57] usb 9-1: unable to get BOS descriptor or descriptor too short [ 108.195215][ T57] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 108.196048][ T57] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 108.196074][ T57] usb 9-1: can't read configurations, error -71 [ 108.202414][ T8808] wiimote 0005:057E:0306.0004: Device removed [ 108.232327][ T34] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input15 [ 108.243154][ T34] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input16 [ 108.256711][ T34] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input14 [ 108.442162][ T8816] FAULT_INJECTION: forcing a failure. [ 108.442162][ T8816] name failslab, interval 1, probability 0, space 0, times 0 [ 108.442183][ T8816] CPU: 2 UID: 0 PID: 8816 Comm: syz.1.1008 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.442198][ T8816] Tainted: [L]=SOFTLOCKUP [ 108.442202][ T8816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.442210][ T8816] Call Trace: [ 108.442214][ T8816] [ 108.442218][ T8816] dump_stack_lvl+0x100/0x190 [ 108.442241][ T8816] should_fail_ex.cold+0x5/0xa [ 108.442258][ T8816] should_failslab+0xc2/0x120 [ 108.442272][ T8816] __kmalloc_node_noprof+0xff/0x870 [ 108.442289][ T8816] ? crypto_create_tfm_node+0x8d/0x3b0 [ 108.442308][ T8816] crypto_create_tfm_node+0x8d/0x3b0 [ 108.442325][ T8816] crypto_alloc_tfm_node+0x102/0x260 [ 108.442343][ T8816] x509_get_sig_params+0x2f7/0x710 [ 108.442355][ T8816] ? __asan_memcpy+0x3c/0x60 [ 108.442372][ T8816] x509_cert_parse+0x4e9/0x910 [ 108.442384][ T8816] x509_key_preparse+0x65/0x9c0 [ 108.442399][ T8816] asymmetric_key_preparse+0xce/0x1d0 [ 108.442416][ T8816] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 108.442433][ T8816] __key_create_or_update+0x3f6/0xe10 [ 108.442449][ T8816] ? __pfx___key_create_or_update+0x10/0x10 [ 108.442463][ T8816] ? lookup_user_key+0x58c/0x14f0 [ 108.442477][ T8816] ? __pfx_lookup_user_key+0x10/0x10 [ 108.442500][ T8816] key_create_or_update+0x42/0x60 [ 108.442516][ T8816] __do_sys_add_key+0x2e8/0x460 [ 108.442533][ T8816] ? __might_fault+0xc5/0x140 [ 108.442545][ T8816] ? __pfx___do_sys_add_key+0x10/0x10 [ 108.442566][ T8816] __do_fast_syscall_32+0x14b/0x8c0 [ 108.442581][ T8816] do_fast_syscall_32+0x32/0x70 [ 108.442594][ T8816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.442607][ T8816] RIP: 0023:0xf7f06fbc [ 108.442616][ T8816] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 108.442654][ T8816] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 108.442667][ T8816] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 108.442674][ T8816] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 108.442681][ T8816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.442687][ T8816] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 108.442694][ T8816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.442709][ T8816] [ 108.507460][ T8820] ufs: You didn't specify the type of your ufs filesystem [ 108.507460][ T8820] [ 108.507460][ T8820] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 108.507460][ T8820] [ 108.507460][ T8820] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 108.507491][ T8820] ufs: ufstype=old is supported read-only [ 108.508917][ T8820] ufs: ufs_fill_super(): bad magic number [ 108.832651][ T8831] FAULT_INJECTION: forcing a failure. [ 108.832651][ T8831] name failslab, interval 1, probability 0, space 0, times 0 [ 108.832680][ T8831] CPU: 3 UID: 0 PID: 8831 Comm: syz.1.1015 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.832706][ T8831] Tainted: [L]=SOFTLOCKUP [ 108.832712][ T8831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.832723][ T8831] Call Trace: [ 108.832731][ T8831] [ 108.832739][ T8831] dump_stack_lvl+0x100/0x190 [ 108.832772][ T8831] should_fail_ex.cold+0x5/0xa [ 108.832800][ T8831] should_failslab+0xc2/0x120 [ 108.832822][ T8831] __kmalloc_noprof+0xfc/0x840 [ 108.832851][ T8831] ? nla_strdup+0xc3/0x150 [ 108.832877][ T8831] nla_strdup+0xc3/0x150 [ 108.832902][ T8831] nf_tables_newset+0x2560/0x4250 [ 108.832936][ T8831] ? net_generic+0xea/0x2a0 [ 108.832963][ T8831] ? __pfx_nf_tables_newset+0x10/0x10 [ 108.832991][ T8831] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.833014][ T8831] ? __nla_validate_parse+0x1e7/0x28b0 [ 108.833047][ T8831] ? lock_acquire+0x1d1/0x380 [ 108.833064][ T8831] ? net_generic+0x25/0x2a0 [ 108.833087][ T8831] ? __nla_parse+0x40/0x60 [ 108.833113][ T8831] nfnetlink_rcv_batch+0x1410/0x2880 [ 108.833145][ T8831] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 108.833166][ T8831] ? __dev_queue_xmit+0xa2e/0x48d0 [ 108.833189][ T8831] ? lockdep_hardirqs_on+0x7d/0x110 [ 108.833208][ T8831] ? __dev_queue_xmit+0xa2e/0x48d0 [ 108.833226][ T8831] ? __local_bh_enable_ip+0xa5/0x120 [ 108.833284][ T8831] ? __nla_parse+0x40/0x60 [ 108.833310][ T8831] nfnetlink_rcv+0x3bd/0x440 [ 108.833328][ T8831] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 108.833354][ T8831] netlink_unicast+0x668/0x950 [ 108.833392][ T8831] ? __pfx_netlink_unicast+0x10/0x10 [ 108.833424][ T8831] netlink_sendmsg+0x9ac/0x10c0 [ 108.833455][ T8831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.833486][ T8831] ? apparmor_socket_sendmsg+0x165/0x280 [ 108.833512][ T8831] ? ____sys_sendmsg+0xa99/0xc30 [ 108.833538][ T8831] ____sys_sendmsg+0xa99/0xc30 [ 108.833564][ T8831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.833592][ T8831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.833634][ T8831] ___sys_sendmsg+0x190/0x1e0 [ 108.833665][ T8831] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.833694][ T8831] ? futex_wait+0x11e/0x370 [ 108.833723][ T8831] ? find_held_lock+0x2b/0x80 [ 108.833767][ T8831] __sys_sendmsg+0x160/0x210 [ 108.833792][ T8831] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.833832][ T8831] __do_fast_syscall_32+0x14b/0x8c0 [ 108.833857][ T8831] do_fast_syscall_32+0x32/0x70 [ 108.833879][ T8831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.833902][ T8831] RIP: 0023:0xf7f06fbc [ 108.833918][ T8831] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 108.833936][ T8831] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 108.833954][ T8831] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 108.833966][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.833977][ T8831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.833987][ T8831] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 108.833998][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.834023][ T8831] [ 110.030033][ T8850] fuse: fd is not a fuse device [ 110.291787][ T8861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1026'. [ 110.396834][ T8868] FAULT_INJECTION: forcing a failure. [ 110.396834][ T8868] name failslab, interval 1, probability 0, space 0, times 0 [ 110.396854][ T8868] CPU: 1 UID: 0 PID: 8868 Comm: syz.1.1029 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.396868][ T8868] Tainted: [L]=SOFTLOCKUP [ 110.396872][ T8868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.396878][ T8868] Call Trace: [ 110.396882][ T8868] [ 110.396886][ T8868] dump_stack_lvl+0x100/0x190 [ 110.396909][ T8868] should_fail_ex.cold+0x5/0xa [ 110.396927][ T8868] should_failslab+0xc2/0x120 [ 110.396940][ T8868] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 110.396956][ T8868] ? __alloc_skb+0x5b7/0x710 [ 110.396969][ T8868] ? __alloc_skb+0x140/0x710 [ 110.396983][ T8868] __alloc_skb+0x140/0x710 [ 110.396995][ T8868] ? __alloc_skb+0x5b7/0x710 [ 110.397008][ T8868] ? __pfx___alloc_skb+0x10/0x10 [ 110.397021][ T8868] ? aa_sock_msg_perm+0x11e/0x200 [ 110.397033][ T8868] pfkey_sendmsg+0x161/0x840 [ 110.397050][ T8868] ____sys_sendmsg+0xa99/0xc30 [ 110.397065][ T8868] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 110.397080][ T8868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.397102][ T8868] ___sys_sendmsg+0x190/0x1e0 [ 110.397119][ T8868] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.397136][ T8868] ? futex_wait+0x11e/0x370 [ 110.397153][ T8868] ? find_held_lock+0x2b/0x80 [ 110.397176][ T8868] __sys_sendmsg+0x160/0x210 [ 110.397190][ T8868] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.397211][ T8868] __do_fast_syscall_32+0x14b/0x8c0 [ 110.397246][ T8868] do_fast_syscall_32+0x32/0x70 [ 110.397261][ T8868] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.397275][ T8868] RIP: 0023:0xf7f06fbc [ 110.397284][ T8868] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 110.397295][ T8868] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 110.397305][ T8868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 110.397313][ T8868] RDX: 0000000000040080 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.397319][ T8868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.397325][ T8868] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 110.397332][ T8868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.397352][ T8868] [ 110.409029][ T8866] kvm: apic: phys broadcast and lowest prio [ 110.546995][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1031'. [ 110.590681][ T8877] FAULT_INJECTION: forcing a failure. [ 110.590681][ T8877] name failslab, interval 1, probability 0, space 0, times 0 [ 110.590710][ T8877] CPU: 3 UID: 0 PID: 8877 Comm: syz.1.1033 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.590731][ T8877] Tainted: [L]=SOFTLOCKUP [ 110.590737][ T8877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.590747][ T8877] Call Trace: [ 110.590753][ T8877] [ 110.590759][ T8877] dump_stack_lvl+0x100/0x190 [ 110.590790][ T8877] should_fail_ex.cold+0x5/0xa [ 110.590823][ T8877] should_failslab+0xc2/0x120 [ 110.590846][ T8877] __kmalloc_cache_noprof+0x91/0x6d0 [ 110.590870][ T8877] ? find_held_lock+0x2b/0x80 [ 110.590890][ T8877] ? alloc_fs_context+0x57/0xf40 [ 110.590916][ T8877] alloc_fs_context+0x57/0xf40 [ 110.590941][ T8877] ? __get_fs_type+0xe3/0x200 [ 110.590971][ T8877] path_mount+0xf59/0x2850 [ 110.590996][ T8877] ? __pfx_path_mount+0x10/0x10 [ 110.591010][ T8877] ? lockdep_hardirqs_on+0x7d/0x110 [ 110.591024][ T8877] ? putname+0xb1/0x110 [ 110.591036][ T8877] ? kmem_cache_free+0x127/0x6c0 [ 110.591054][ T8877] ? __ia32_sys_mount+0x292/0x310 [ 110.591068][ T8877] __ia32_sys_mount+0x292/0x310 [ 110.591081][ T8877] ? __pfx___ia32_sys_mount+0x10/0x10 [ 110.591100][ T8877] __do_fast_syscall_32+0x14b/0x8c0 [ 110.591114][ T8877] do_fast_syscall_32+0x32/0x70 [ 110.591127][ T8877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.591141][ T8877] RIP: 0023:0xf7f06fbc [ 110.591150][ T8877] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 110.591160][ T8877] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 110.591170][ T8877] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000400 [ 110.591176][ T8877] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.591182][ T8877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.591188][ T8877] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 110.591194][ T8877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.591207][ T8877] [ 110.638182][ T8879] IPVS: set_ctl: invalid protocol: 41 100.1.1.5:20003 [ 111.028962][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.032621][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.033711][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.042351][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.043483][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.160589][ T8899] FAULT_INJECTION: forcing a failure. [ 111.160589][ T8899] name failslab, interval 1, probability 0, space 0, times 0 [ 111.160610][ T8899] CPU: 2 UID: 0 PID: 8899 Comm: syz.0.1042 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.160624][ T8899] Tainted: [L]=SOFTLOCKUP [ 111.160628][ T8899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.160634][ T8899] Call Trace: [ 111.160638][ T8899] [ 111.160643][ T8899] dump_stack_lvl+0x100/0x190 [ 111.160663][ T8899] should_fail_ex.cold+0x5/0xa [ 111.160680][ T8899] should_failslab+0xc2/0x120 [ 111.160693][ T8899] __kmalloc_cache_noprof+0x91/0x6d0 [ 111.160708][ T8899] ? userfaultfd_unmap_prep+0x208/0x4f0 [ 111.160727][ T8899] userfaultfd_unmap_prep+0x208/0x4f0 [ 111.160745][ T8899] vms_gather_munmap_vmas+0x8db/0x1720 [ 111.160764][ T8899] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 111.160777][ T8899] ? mtree_range_walk+0x72b/0xb70 [ 111.160804][ T8899] ? mas_walk+0x260/0x310 [ 111.160826][ T8899] __mmap_region+0x4d4/0x3940 [ 111.160850][ T8899] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 111.160877][ T8899] ? look_up_lock_class+0x55/0x120 [ 111.160893][ T8899] ? __pfx___mmap_region+0x10/0x10 [ 111.160908][ T8899] ? find_held_lock+0x2b/0x80 [ 111.160924][ T8899] ? ima_match_policy+0x8c4/0x23f0 [ 111.160939][ T8899] ? ima_match_policy+0x8c4/0x23f0 [ 111.160955][ T8899] ? __lock_acquire+0x5c0/0x1f40 [ 111.160974][ T8899] ? __lock_acquire+0x5c0/0x1f40 [ 111.160995][ T8899] ? do_raw_spin_lock+0x128/0x260 [ 111.161010][ T8899] ? __lock_acquire+0x5c0/0x1f40 [ 111.161022][ T8899] ? do_raw_spin_unlock+0x145/0x1e0 [ 111.161035][ T8899] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 111.161055][ T8899] ? rcu_is_watching+0x13/0xc0 [ 111.161070][ T8899] ? trace_hrtimer_start+0x77/0x220 [ 111.161087][ T8899] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 111.161107][ T8899] ? find_held_lock+0x2b/0x80 [ 111.161123][ T8899] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 111.161155][ T8899] ? find_held_lock+0x2b/0x80 [ 111.161172][ T8899] mmap_region+0x3db/0x6d0 [ 111.161188][ T8899] ? __pfx_mmap_region+0x10/0x10 [ 111.161204][ T8899] ? cap_mmap_addr+0x4b/0x120 [ 111.161214][ T8899] ? bpf_lsm_mmap_addr+0x9/0x30 [ 111.161229][ T8899] ? security_mmap_addr+0x71/0x1e0 [ 111.161243][ T8899] ? __get_unmapped_area+0x255/0x3e0 [ 111.161280][ T8899] do_mmap+0x12c7/0x1c30 [ 111.161301][ T8899] ? lock_acquire+0x1d1/0x380 [ 111.161312][ T8899] ? __pfx_do_mmap+0x10/0x10 [ 111.161329][ T8899] ? __pfx___might_resched+0x10/0x10 [ 111.161350][ T8899] ? futex_wait+0x11e/0x370 [ 111.161364][ T8899] ? __pfx_down_write_killable+0x10/0x10 [ 111.161380][ T8899] vm_mmap_pgoff+0x283/0x490 [ 111.161398][ T8899] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 111.161419][ T8899] ksys_mmap_pgoff+0xe4/0x610 [ 111.161437][ T8899] ? find_held_lock+0x2b/0x80 [ 111.161452][ T8899] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 111.161477][ T8899] __do_fast_syscall_32+0x14b/0x8c0 [ 111.161498][ T8899] do_fast_syscall_32+0x32/0x70 [ 111.161516][ T8899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.161537][ T8899] RIP: 0023:0xf747efbc [ 111.161554][ T8899] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 111.161572][ T8899] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 111.161588][ T8899] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000fff002 [ 111.161596][ T8899] RDX: 0000000000000000 RSI: 0000000000000032 RDI: 00000000ffffffff [ 111.161602][ T8899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.161608][ T8899] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.161614][ T8899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.161628][ T8899] [ 111.252645][ T8890] rxe_eth0 speed is unknown, defaulting to 1000 [ 111.413709][ T8910] fuse: fd is not a fuse device [ 111.472205][ T5787] bond0: (slave syz_tun): Releasing backup interface [ 111.550313][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.550392][ T8890] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.550453][ T8890] bridge_slave_0: entered allmulticast mode [ 111.551152][ T8890] bridge_slave_0: entered promiscuous mode [ 111.552422][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.552462][ T8890] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.552682][ T8890] bridge_slave_1: entered allmulticast mode [ 111.553317][ T8890] bridge_slave_1: entered promiscuous mode [ 111.574129][ T8890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.576813][ T8890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.597084][ T8890] team0: Port device team_slave_0 added [ 111.599336][ T8890] team0: Port device team_slave_1 added [ 111.618115][ T8890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.618129][ T8890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.618148][ T8890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.619835][ T8890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.619847][ T8890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.619864][ T8890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.652644][ T8890] hsr_slave_0: entered promiscuous mode [ 111.653328][ T8890] hsr_slave_1: entered promiscuous mode [ 111.653838][ T8890] debugfs: 'hsr0' already exists in 'hsr' [ 111.653854][ T8890] Cannot create hsr debugfs directory [ 111.694600][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.698382][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.701047][ T8931] fuse: fd is not a fuse device [ 111.701127][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.712281][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.712674][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.776543][ T8890] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.778753][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.779473][ T8890] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.783109][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.783903][ T8890] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.794246][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.796170][ T8890] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.798158][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.813943][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.813990][ T8890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.814092][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.814136][ T8890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.848535][ T8890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.858711][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.859364][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.866117][ T8890] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.879491][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.879576][ T6046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.890906][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.890987][ T6046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.931015][ T8928] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.151678][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.151811][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.152111][ T8928] bridge_slave_0: entered allmulticast mode [ 112.153235][ T8928] bridge_slave_0: entered promiscuous mode [ 112.158203][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.158279][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.158360][ T8928] bridge_slave_1: entered allmulticast mode [ 112.161753][ T8928] bridge_slave_1: entered promiscuous mode [ 112.187588][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.190382][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.192233][ T8890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.207046][ T8928] team0: Port device team_slave_0 added [ 112.208389][ T8928] team0: Port device team_slave_1 added [ 112.220423][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.220433][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.220446][ T8928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.222810][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.222818][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.222831][ T8928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.243218][ T8928] hsr_slave_0: entered promiscuous mode [ 112.243900][ T8928] hsr_slave_1: entered promiscuous mode [ 112.245106][ T8928] debugfs: 'hsr0' already exists in 'hsr' [ 112.245124][ T8928] Cannot create hsr debugfs directory [ 112.389455][ T8928] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 112.392582][ T8928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.393330][ T8928] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 112.397162][ T8928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.397784][ T8890] veth0_vlan: entered promiscuous mode [ 112.398277][ T8928] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 112.401459][ T8928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.402686][ T8928] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 112.405500][ T8928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.410368][ T8890] veth1_vlan: entered promiscuous mode [ 112.438578][ T8890] veth0_macvtap: entered promiscuous mode [ 112.442699][ T8890] veth1_macvtap: entered promiscuous mode [ 112.462306][ T8890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.472481][ T8890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.495483][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.496211][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.514493][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.518149][ T8928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.532363][ T4496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.532375][ T4496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.536946][ T8928] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.542772][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.542816][ T6047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.558489][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.558535][ T6047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.566010][ T6047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.566022][ T6047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.576297][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.731267][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 112.850980][ T8928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.888511][ T9014] device-mapper: table: 248:3: linear: Device lookup failed (-ENOENT) [ 112.888525][ T9014] device-mapper: ioctl: error adding target to table [ 113.018172][ T8928] veth0_vlan: entered promiscuous mode [ 113.032094][ T8928] veth1_vlan: entered promiscuous mode [ 113.049410][ T8928] veth0_macvtap: entered promiscuous mode [ 113.052533][ T8928] veth1_macvtap: entered promiscuous mode [ 113.067653][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.070871][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.096515][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.101576][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.101601][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.101619][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.118295][ T6069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.118307][ T6069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.120648][ T9039] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1069'. [ 113.125130][ T5802] Bluetooth: hci3: command tx timeout [ 113.133240][ T6047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.133257][ T6047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.248885][ T9050] loop4: detected capacity change from 0 to 2640 [ 113.254921][ T9050] buffer_io_error: 25 callbacks suppressed [ 113.254933][ T9050] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 113.254949][ T9050] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 113.254962][ T9050] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 113.254974][ T9050] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 113.254986][ T9050] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 113.254998][ T9050] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 113.255010][ T9050] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 113.255022][ T9050] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 113.255034][ T9050] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 113.255046][ T9050] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 113.405828][ T9055] Bluetooth: Short BCSP packet [ 113.415453][ T5802] Bluetooth: hci4: sending frame failed (-49) [ 113.417578][ T5793] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 113.775812][ T5793] Bluetooth: hci0: command tx timeout [ 114.208529][ T9072] fuse: fd is not a fuse device [ 114.332856][ T9080] overlayfs: failed to clone upperpath [ 115.204467][ T5793] Bluetooth: hci3: command tx timeout [ 116.319905][ T5891] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.531517][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.535587][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.536331][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.537101][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.537588][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.809509][ T9098] rxe_eth0 speed is unknown, defaulting to 1000 [ 117.108215][ T5891] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.116789][ T9139] fuse: fd is not a fuse device [ 117.201988][ T9142] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.202282][ T9142] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.247829][ T9142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.251328][ T9142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.294864][ T5793] Bluetooth: hci3: command tx timeout [ 117.338990][ T5891] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.347917][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.347995][ T9098] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.348066][ T9098] bridge_slave_0: entered allmulticast mode [ 117.348796][ T9098] bridge_slave_0: entered promiscuous mode [ 117.360610][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.360776][ T9098] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.360838][ T9098] bridge_slave_1: entered allmulticast mode [ 117.361550][ T9098] bridge_slave_1: entered promiscuous mode [ 117.417480][ T5891] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.424918][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.424967][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.424990][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.425006][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.426304][ T9098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.430091][ T9098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.459416][ T9098] team0: Port device team_slave_0 added [ 117.463276][ T9098] team0: Port device team_slave_1 added [ 117.493256][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.493267][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.493280][ T9098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.494497][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.494509][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.494530][ T9098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.558717][ T5891] bridge_slave_1: left allmulticast mode [ 117.558733][ T5891] bridge_slave_1: left promiscuous mode [ 117.558865][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.560782][ T5891] bridge_slave_0: left allmulticast mode [ 117.560795][ T5891] bridge_slave_0: left promiscuous mode [ 117.560890][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.652074][ T5891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.654135][ T5891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.662529][ T5891] bond0 (unregistering): Released all slaves [ 117.673894][ T9098] hsr_slave_0: entered promiscuous mode [ 117.675126][ T9098] hsr_slave_1: entered promiscuous mode [ 117.675420][ T9098] debugfs: 'hsr0' already exists in 'hsr' [ 117.675431][ T9098] Cannot create hsr debugfs directory [ 117.946469][ T9098] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 117.951728][ T9098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.952935][ T9098] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 117.960357][ T9098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.961252][ T9098] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 117.968351][ T9098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.979050][ T5505] 8021q: adding VLAN 0 to HW filter on device eth6 [ 117.979786][ T9098] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 117.983258][ T9098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.060831][ T5891] hsr_slave_0: left promiscuous mode [ 118.061858][ T5891] hsr_slave_1: left promiscuous mode [ 118.062626][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.062644][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.063782][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.063797][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.080441][ T5891] veth1_macvtap: left promiscuous mode [ 118.080504][ T5891] veth0_macvtap: left promiscuous mode [ 118.080663][ T5891] veth1_vlan: left promiscuous mode [ 118.080819][ T5891] veth0_vlan: left promiscuous mode [ 118.222804][ T5891] team0 (unregistering): Port device team_slave_1 removed [ 118.232202][ T5891] team0 (unregistering): Port device team_slave_0 removed [ 118.293365][ T5505] 8021q: adding VLAN 0 to HW filter on device eth8 [ 118.306506][ T9098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.316909][ T9098] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.322364][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.322451][ T6057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.332362][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.332439][ T6057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.527473][ T5505] 8021q: adding VLAN 0 to HW filter on device eth7 [ 118.644499][ T5793] Bluetooth: hci0: command tx timeout [ 118.645119][ T9098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.695428][ T5505] 8021q: adding VLAN 0 to HW filter on device eth9 [ 118.812516][ T9098] veth0_vlan: entered promiscuous mode [ 118.820038][ T9098] veth1_vlan: entered promiscuous mode [ 118.841036][ T9098] veth0_macvtap: entered promiscuous mode [ 118.843288][ T9098] veth1_macvtap: entered promiscuous mode [ 118.850064][ T9098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.853774][ T9098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.881658][ T5891] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.881697][ T5891] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.881725][ T5891] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.881760][ T5891] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.913096][ T4592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.913109][ T4592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.923686][ T4592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.923703][ T4592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.010040][ T42] audit: type=1326 audit(1793358623.457:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.7.1094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 119.010271][ T42] audit: type=1326 audit(1793358623.457:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.7.1094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 119.011060][ T42] audit: type=1326 audit(1793358623.457:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.7.1094" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 119.011097][ T42] audit: type=1326 audit(1793358623.457:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.7.1094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 119.011130][ T42] audit: type=1326 audit(1793358623.457:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.7.1094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 119.011403][ T42] audit: type=1326 audit(1793358623.457:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.7.1094" exe="/syz-executor" sig=0 arch=40000003 syscall=275 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 119.011679][ T42] audit: type=1326 audit(1793358623.457:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.7.1094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 119.011856][ T42] audit: type=1326 audit(1793358623.457:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.7.1094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 119.012162][ T42] audit: type=1326 audit(1793358623.457:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.7.1094" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 119.012452][ T42] audit: type=1326 audit(1793358623.457:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.7.1094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745efbc code=0x7ffc0000 [ 119.364639][ T5793] Bluetooth: hci3: command tx timeout [ 120.055223][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1122'. [ 120.055951][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1122'. [ 120.101325][ T9264] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1124'. [ 120.343203][ T9275] FAULT_INJECTION: forcing a failure. [ 120.343203][ T9275] name failslab, interval 1, probability 0, space 0, times 0 [ 120.343225][ T9275] CPU: 2 UID: 0 PID: 9275 Comm: syz.4.1128 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.343239][ T9275] Tainted: [L]=SOFTLOCKUP [ 120.343243][ T9275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.343249][ T9275] Call Trace: [ 120.343252][ T9275] [ 120.343257][ T9275] dump_stack_lvl+0x100/0x190 [ 120.343278][ T9275] should_fail_ex.cold+0x5/0xa [ 120.343294][ T9275] should_failslab+0xc2/0x120 [ 120.343308][ T9275] __kmalloc_noprof+0xfc/0x840 [ 120.343324][ T9275] ? trace_kmalloc+0xeb/0x110 [ 120.343335][ T9275] ? lsm_blob_alloc+0x68/0x90 [ 120.343354][ T9275] lsm_blob_alloc+0x68/0x90 [ 120.343369][ T9275] security_sk_alloc+0x2d/0x290 [ 120.343383][ T9275] sk_prot_alloc+0x12a/0x2a0 [ 120.343414][ T9275] sk_alloc+0x36/0xe80 [ 120.343427][ T9275] af_alg_accept+0xd1/0x610 [ 120.343440][ T9275] ? apparmor_socket_accept+0x133/0x210 [ 120.343455][ T9275] do_accept+0x340/0x530 [ 120.343467][ T9275] ? __pfx_do_accept+0x10/0x10 [ 120.343490][ T9275] __sys_accept4+0x15f/0x1f0 [ 120.343502][ T9275] ? __pfx___sys_accept4+0x10/0x10 [ 120.343513][ T9275] ? find_held_lock+0x2b/0x80 [ 120.343528][ T9275] ? __might_fault+0xc5/0x140 [ 120.343543][ T9275] __ia32_sys_accept4+0x94/0x100 [ 120.343555][ T9275] __do_fast_syscall_32+0x14b/0x8c0 [ 120.343570][ T9275] do_fast_syscall_32+0x32/0x70 [ 120.343582][ T9275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.343596][ T9275] RIP: 0023:0xf7fb5fbc [ 120.343605][ T9275] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 120.343615][ T9275] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 120.343625][ T9275] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 120.343632][ T9275] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 120.343639][ T9275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.343646][ T9275] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 120.343653][ T9275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.343668][ T9275] [ 120.409488][ T9277] FAULT_INJECTION: forcing a failure. [ 120.409488][ T9277] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 120.409507][ T9277] CPU: 2 UID: 0 PID: 9277 Comm: syz.5.1129 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.409521][ T9277] Tainted: [L]=SOFTLOCKUP [ 120.409525][ T9277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.409531][ T9277] Call Trace: [ 120.409535][ T9277] [ 120.409539][ T9277] dump_stack_lvl+0x100/0x190 [ 120.409560][ T9277] should_fail_ex.cold+0x5/0xa [ 120.409575][ T9277] should_fail_alloc_page+0xeb/0x140 [ 120.409588][ T9277] prepare_alloc_pages+0x1f0/0x5b0 [ 120.409602][ T9277] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 120.409618][ T9277] ? rcu_is_watching+0x13/0xc0 [ 120.409632][ T9277] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 120.409648][ T9277] ? lockdep_hardirqs_on+0x7d/0x110 [ 120.409660][ T9277] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 120.409676][ T9277] ? stack_depot_save_flags+0x49a/0xa10 [ 120.409690][ T9277] ? kasan_save_stack+0x3f/0x50 [ 120.409699][ T9277] ? kasan_save_stack+0x30/0x50 [ 120.409709][ T9277] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 120.409723][ T9277] ? system_heap_allocate+0x11e/0x11f0 [ 120.409737][ T9277] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 120.409760][ T9277] ? do_fast_syscall_32+0x32/0x70 [ 120.409771][ T9277] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.409797][ T9277] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.409811][ T9277] ? policy_nodemask+0xed/0x5e0 [ 120.409825][ T9277] alloc_pages_mpol+0x201/0x560 [ 120.409838][ T9277] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 120.409851][ T9277] ? lockdep_init_map_type+0x5c/0x250 [ 120.409865][ T9277] alloc_pages_noprof+0x1a/0x160 [ 120.409879][ T9277] system_heap_allocate+0x329/0x11f0 [ 120.409896][ T9277] ? __pfx_system_heap_allocate+0x10/0x10 [ 120.409911][ T9277] ? __might_fault+0xc5/0x140 [ 120.409929][ T9277] dma_heap_ioctl+0x3a0/0x6d0 [ 120.409945][ T9277] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 120.409957][ T9277] ? find_held_lock+0x2b/0x80 [ 120.409978][ T9277] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 120.409991][ T9277] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 120.410008][ T9277] __do_fast_syscall_32+0x14b/0x8c0 [ 120.410022][ T9277] do_fast_syscall_32+0x32/0x70 [ 120.410034][ T9277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.410046][ T9277] RIP: 0023:0xf748efbc [ 120.410055][ T9277] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 120.410064][ T9277] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 120.410075][ T9277] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0184800 [ 120.410081][ T9277] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.410087][ T9277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.410093][ T9277] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 120.410099][ T9277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.410112][ T9277] [ 120.487289][ T9284] FAULT_INJECTION: forcing a failure. [ 120.487289][ T9284] name failslab, interval 1, probability 0, space 0, times 0 [ 120.487314][ T9284] CPU: 1 UID: 0 PID: 9284 Comm: syz.4.1130 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.487335][ T9284] Tainted: [L]=SOFTLOCKUP [ 120.487340][ T9284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.487349][ T9284] Call Trace: [ 120.487355][ T9284] [ 120.487361][ T9284] dump_stack_lvl+0x100/0x190 [ 120.487388][ T9284] should_fail_ex.cold+0x5/0xa [ 120.487411][ T9284] should_failslab+0xc2/0x120 [ 120.487430][ T9284] kmem_cache_alloc_noprof+0x92/0x6a0 [ 120.487453][ T9284] ? can_rx_register+0x58f/0x700 [ 120.487475][ T9284] can_rx_register+0x58f/0x700 [ 120.487489][ T9284] ? __pfx_raw_rcv+0x10/0x10 [ 120.487508][ T9284] ? __pfx_can_rx_register+0x10/0x10 [ 120.487523][ T9284] ? lock_acquire+0x1d1/0x380 [ 120.487541][ T9284] ? find_held_lock+0x2b/0x80 [ 120.487560][ T9284] ? __might_fault+0xc5/0x140 [ 120.487576][ T9284] ? __might_fault+0xc5/0x140 [ 120.487599][ T9284] raw_enable_filters+0xe0/0x210 [ 120.487626][ T9284] raw_setsockopt+0x15bc/0x18d0 [ 120.487646][ T9284] ? __pfx_aa_sk_perm+0x10/0x10 [ 120.487668][ T9284] ? __pfx_raw_setsockopt+0x10/0x10 [ 120.487688][ T9284] ? aa_sock_opt_perm+0x114/0x1e0 [ 120.487704][ T9284] ? __pfx_raw_setsockopt+0x10/0x10 [ 120.487723][ T9284] do_sock_setsockopt+0xf3/0x1d0 [ 120.487746][ T9284] __sys_setsockopt+0x119/0x190 [ 120.487768][ T9284] __ia32_sys_setsockopt+0xbc/0x160 [ 120.487786][ T9284] ? __might_fault+0x111/0x140 [ 120.487804][ T9284] __do_fast_syscall_32+0x14b/0x8c0 [ 120.487824][ T9284] do_fast_syscall_32+0x32/0x70 [ 120.487840][ T9284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.487859][ T9284] RIP: 0023:0xf7fb5fbc [ 120.487871][ T9284] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 120.487884][ T9284] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 120.487898][ T9284] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000065 [ 120.487907][ T9284] RDX: 0000000000000001 RSI: 00000000800000c0 RDI: 0000000000000f00 [ 120.487915][ T9284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.487923][ T9284] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 120.487931][ T9284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.487951][ T9284] [ 120.488129][ T9283] rxe_eth0 speed is unknown, defaulting to 1000 [ 120.600837][ T9286] br_netfilter no longer supported in user namespaces [ 120.672213][ T9286] rxe_eth0 speed is unknown, defaulting to 1000 [ 120.736583][ T5801] Bluetooth: hci0: command tx timeout [ 120.900434][ T9296] FAULT_INJECTION: forcing a failure. [ 120.900434][ T9296] name failslab, interval 1, probability 0, space 0, times 0 [ 120.900457][ T9296] CPU: 3 UID: 0 PID: 9296 Comm: syz.5.1134 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.900472][ T9296] Tainted: [L]=SOFTLOCKUP [ 120.900476][ T9296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.900483][ T9296] Call Trace: [ 120.900487][ T9296] [ 120.900491][ T9296] dump_stack_lvl+0x100/0x190 [ 120.900512][ T9296] should_fail_ex.cold+0x5/0xa [ 120.900530][ T9296] should_failslab+0xc2/0x120 [ 120.900543][ T9296] __kmalloc_cache_noprof+0x91/0x6d0 [ 120.900559][ T9296] ? allocate_cgrp_cset_links+0xca/0x230 [ 120.900575][ T9296] allocate_cgrp_cset_links+0xca/0x230 [ 120.900589][ T9296] find_css_set+0x949/0x1ec0 [ 120.900608][ T9296] ? __pfx_find_css_set+0x10/0x10 [ 120.900623][ T9296] ? __lock_acquire+0x5c0/0x1f40 [ 120.900646][ T9296] cgroup_migrate_prepare_dst+0x10b/0x7f0 [ 120.900666][ T9296] cgroup_attach_task+0x3e4/0x770 [ 120.900684][ T9296] ? __pfx_cgroup_attach_task+0x10/0x10 [ 120.900701][ T9296] ? lock_acquire+0x1d1/0x380 [ 120.900718][ T9296] ? get_task_cred+0x189/0x360 [ 120.900735][ T9296] __cgroup1_procs_write.isra.0+0x2ce/0x420 [ 120.900753][ T9296] ? __pfx___cgroup1_procs_write.isra.0+0x10/0x10 [ 120.900770][ T9296] ? kernfs_root+0xf8/0x2a0 [ 120.900787][ T9296] cgroup_file_write+0x1e6/0x8a0 [ 120.900800][ T9296] ? __pfx_cgroup1_procs_write+0x10/0x10 [ 120.900833][ T9296] ? __pfx_cgroup_file_write+0x10/0x10 [ 120.900848][ T9296] ? __kmalloc_noprof+0x350/0x840 [ 120.900870][ T9296] kernfs_fop_write_iter+0x3e0/0x5f0 [ 120.900881][ T9296] ? __pfx_cgroup_file_write+0x10/0x10 [ 120.900897][ T9296] vfs_write+0x6af/0x1050 [ 120.900909][ T9296] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 120.900921][ T9296] ? __pfx_vfs_write+0x10/0x10 [ 120.900931][ T9296] ? find_held_lock+0x2b/0x80 [ 120.900957][ T9296] ksys_write+0x12a/0x250 [ 120.900967][ T9296] ? __pfx_ksys_write+0x10/0x10 [ 120.900982][ T9296] __do_fast_syscall_32+0x14b/0x8c0 [ 120.900997][ T9296] do_fast_syscall_32+0x32/0x70 [ 120.901010][ T9296] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.901023][ T9296] RIP: 0023:0xf748efbc [ 120.901032][ T9296] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 120.901042][ T9296] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 120.901052][ T9296] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000580 [ 120.901060][ T9296] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.901067][ T9296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.901074][ T9296] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 120.901081][ T9296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.901096][ T9296] [ 121.381784][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 121.393827][ T9301] bond0: (slave syz_tun): Releasing backup interface [ 121.919284][ T9325] FAULT_INJECTION: forcing a failure. [ 121.919284][ T9325] name failslab, interval 1, probability 0, space 0, times 0 [ 121.919314][ T9325] CPU: 2 UID: 0 PID: 9325 Comm: syz.5.1141 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.919337][ T9325] Tainted: [L]=SOFTLOCKUP [ 121.919343][ T9325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.919353][ T9325] Call Trace: [ 121.919360][ T9325] [ 121.919367][ T9325] dump_stack_lvl+0x100/0x190 [ 121.919397][ T9325] should_fail_ex.cold+0x5/0xa [ 121.919424][ T9325] should_failslab+0xc2/0x120 [ 121.919445][ T9325] __kmalloc_cache_noprof+0x91/0x6d0 [ 121.919461][ T9325] ? io_cache_alloc_new+0x45/0xe0 [ 121.919473][ T9325] ? io_queue_sqe_fallback.cold+0x62/0x38f [ 121.919487][ T9325] io_queue_sqe_fallback.cold+0x62/0x38f [ 121.919500][ T9325] io_submit_sqes+0x2098/0x2760 [ 121.919521][ T9325] __do_sys_io_uring_enter+0xa88/0x1b10 [ 121.919536][ T9325] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 121.919565][ T9325] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 121.919580][ T9325] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 121.919597][ T9325] ? lock_acquire+0x1d1/0x380 [ 121.919609][ T9325] ? __might_fault+0xc5/0x140 [ 121.919623][ T9325] ? find_held_lock+0x2b/0x80 [ 121.919638][ T9325] ? __might_fault+0xc5/0x140 [ 121.919650][ T9325] ? __might_fault+0xc5/0x140 [ 121.919668][ T9325] __do_fast_syscall_32+0x14b/0x8c0 [ 121.919684][ T9325] do_fast_syscall_32+0x32/0x70 [ 121.919697][ T9325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.919709][ T9325] RIP: 0023:0xf748efbc [ 121.919720][ T9325] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 121.919730][ T9325] RSP: 002b:00000000f54a64ac EFLAGS: 00000282 ORIG_RAX: 00000000000001aa [ 121.919741][ T9325] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 121.919747][ T9325] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 121.919753][ T9325] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 121.919759][ T9325] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 121.919765][ T9325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.919779][ T9325] [ 121.974084][ T9328] FAULT_INJECTION: forcing a failure. [ 121.974084][ T9328] name failslab, interval 1, probability 0, space 0, times 0 [ 121.974114][ T9328] CPU: 0 UID: 0 PID: 9328 Comm: syz.5.1142 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.974147][ T9328] Tainted: [L]=SOFTLOCKUP [ 121.974154][ T9328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.974174][ T9328] Call Trace: [ 121.974181][ T9328] [ 121.974190][ T9328] dump_stack_lvl+0x100/0x190 [ 121.974222][ T9328] should_fail_ex.cold+0x5/0xa [ 121.974250][ T9328] should_failslab+0xc2/0x120 [ 121.974271][ T9328] __kmalloc_cache_noprof+0x91/0x6d0 [ 121.974312][ T9328] ? create_filter_start.constprop.0+0x1c4/0x310 [ 121.974340][ T9328] create_filter_start.constprop.0+0x1c4/0x310 [ 121.974368][ T9328] apply_subsystem_event_filter+0x188/0x17a0 [ 121.974394][ T9328] ? __might_fault+0xc5/0x140 [ 121.974417][ T9328] ? __might_fault+0xc5/0x140 [ 121.974441][ T9328] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 121.974470][ T9328] ? _copy_from_user+0x59/0xd0 [ 121.974499][ T9328] subsystem_filter_write+0x95/0x120 [ 121.974524][ T9328] vfs_write+0x2aa/0x1050 [ 121.974544][ T9328] ? __pfx_subsystem_filter_write+0x10/0x10 [ 121.974593][ T9328] ? lock_acquire+0x1d1/0x380 [ 121.974612][ T9328] ? __fget_files+0x34/0x3d0 [ 121.974633][ T9328] ? __pfx_vfs_write+0x10/0x10 [ 121.974650][ T9328] ? find_held_lock+0x2b/0x80 [ 121.974675][ T9328] ? __fget_files+0x215/0x3d0 [ 121.974700][ T9328] ? __fget_files+0x21f/0x3d0 [ 121.974728][ T9328] ksys_write+0x12a/0x250 [ 121.974747][ T9328] ? __pfx_ksys_write+0x10/0x10 [ 121.974782][ T9328] __do_fast_syscall_32+0x14b/0x8c0 [ 121.974815][ T9328] do_fast_syscall_32+0x32/0x70 [ 121.974838][ T9328] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.974868][ T9328] RIP: 0023:0xf748efbc [ 121.974885][ T9328] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 121.974903][ T9328] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 121.974921][ T9328] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 121.974933][ T9328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.974944][ T9328] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.974955][ T9328] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 121.974966][ T9328] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.974992][ T9328] [ 122.070720][ T9335] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.511735][ T9248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.557522][ T9338] netlink: 'syz.2.1147': attribute type 10 has an invalid length. [ 122.557545][ T9338] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 122.558393][ T9338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.558850][ T9338] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 122.559439][ T9338] team0: Port device netdevsim1 added [ 122.804762][ T5801] Bluetooth: hci0: command 0x040f tx timeout [ 122.822365][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1154'. [ 122.827819][ T9358] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 122.831321][ T9358] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 122.876082][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1154'. [ 122.878879][ T9359] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 122.879666][ T9359] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 123.611429][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 123.711385][ T9414] batman_adv: batadv0: Adding interface: syzkaller0 [ 123.711401][ T9414] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.711425][ T9414] batman_adv: batadv0: Interface activated: syzkaller0 [ 123.836178][ T9413] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 123.844876][ T9413] batman_adv: batadv0: Removing interface: syzkaller0 [ 124.086231][ T5801] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.113038][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'. [ 124.210853][ T9428] CIFS: Attempting to mount //127.0.0.1/share,ser=root [ 124.263455][ T9430] virt_wifi0 speed is unknown, defaulting to 1000 [ 124.263509][ T9430] virt_wifi0 speed is unknown, defaulting to 1000 [ 124.264715][ T9430] virt_wifi0 speed is unknown, defaulting to 1000 [ 124.265534][ T9430] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 124.265561][ T9430] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 124.265593][ T9430] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 124.279977][ T9430] virt_wifi0 speed is unknown, defaulting to 1000 [ 124.281287][ T9430] virt_wifi0 speed is unknown, defaulting to 1000 [ 124.282362][ T9430] virt_wifi0 speed is unknown, defaulting to 1000 [ 124.283606][ T9430] virt_wifi0 speed is unknown, defaulting to 1000 [ 124.284812][ T9430] virt_wifi0 speed is unknown, defaulting to 1000 [ 124.285923][ T9430] virt_wifi0 speed is unknown, defaulting to 1000 [ 124.884432][ T5801] Bluetooth: hci0: command 0x040f tx timeout [ 125.048911][ T9428] CIFS: VFS: Error connecting to socket. Aborting operation. [ 125.048958][ T9428] CIFS: VFS: cifs_mount failed w/return code = -4 [ 125.318447][ T9443] overlayfs: failed to clone upperpath [ 125.358882][ T9445] fuse: fd is not a fuse device [ 125.424085][ T9450] loop0: detected capacity change from 0 to 3904 [ 125.496964][ T9450] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 125.496982][ T9450] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 125.497011][ T9450] loop0: [ 125.904405][ T64] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 126.074365][ T64] usb 10-1: Using ep0 maxpacket: 8 [ 126.075047][ T64] usb 10-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.076928][ T64] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 126.076962][ T64] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.076974][ T64] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.076985][ T64] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.076996][ T64] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.077014][ T64] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.164606][ T5801] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.244600][ T5802] Bluetooth: hci3: command 0x2016 tx timeout [ 126.246799][ T5802] ------------[ cut here ]------------ [ 126.246810][ T5802] refcnt < 0 [ 126.246816][ T5802] WARNING: net/bluetooth/hci_conn.c:649 at hci_conn_timeout+0x16a/0x230, CPU#3: kworker/u34:7/5802 [ 126.257668][ T5802] Modules linked in: [ 126.260189][ T5802] CPU: 3 UID: 0 PID: 5802 Comm: kworker/u34:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.263911][ T5802] Tainted: [L]=SOFTLOCKUP [ 126.264401][ T9222] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 126.268374][ T5802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.272671][ T5802] Workqueue: hci3 hci_conn_timeout [ 126.275188][ T5802] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 126.277667][ T5802] Code: 44 0f b6 2d 6b 68 87 07 31 ff 41 83 e5 40 44 89 ee e8 7a 02 2f f7 45 84 ed 0f 84 02 ff ff ff e9 85 81 94 f6 e8 57 08 2f f7 90 <0f> 0b 90 e8 4e 08 2f f7 48 8d bb ed f5 ff ff 48 b8 00 00 00 00 00 [ 126.281677][ T64] usb 10-1: usb_control_msg returned -32 [ 126.281711][ T64] usbtmc 10-1:16.0: can't read capabilities [ 126.292354][ T5802] RSP: 0000:ffffc9000615fbf8 EFLAGS: 00010293 [ 126.295466][ T5802] RAX: 0000000000000000 RBX: ffff8880709a4a50 RCX: 0000000000000000 [ 126.299143][ T5802] RDX: ffff8880279b2580 RSI: ffffffff8adeb869 RDI: 0000000000000005 [ 126.302608][ T5802] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00000000ffffffff [ 126.306167][ T5802] R10: ffff8880709a4013 R11: 000000000000775b R12: ffff8880709a4000 [ 126.309628][ T5802] R13: ffff8880279b2a44 R14: 0000000000000000 R15: ffff888025db6c00 [ 126.312984][ T5802] FS: 0000000000000000(0000) GS:ffff888095583000(0000) knlGS:0000000000000000 [ 126.317050][ T5802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.319891][ T5802] CR2: 00000000f514d39d CR3: 0000000050c02000 CR4: 0000000000352ef0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 126.323414][ T5802] Call Trace: [ 126.325283][ T5802] [ 126.326635][ T5802] process_one_work+0xac7/0x1b10 [ 126.330129][ T5802] ? __pfx_process_one_work+0x10/0x10 [ 126.332886][ T5802] ? lock_acquire+0x1d1/0x380 [ 126.336210][ T5802] ? __pfx_hci_conn_timeout+0x10/0x10 [ 126.339251][ T5802] worker_thread+0x5ef/0xe50 [ 126.341957][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 126.344847][ T5802] ? kthread+0x13a/0x450 [ 126.346706][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 126.349977][ T5802] kthread+0x373/0x450 [ 126.352798][ T5802] ? __pfx_kthread+0x10/0x10 [ 126.356477][ T5802] ret_from_fork+0x730/0xd60 [ 126.359558][ T5802] ? __pfx_ret_from_fork+0x10/0x10 [ 126.362576][ T5802] ? __switch_to+0x800/0x10e0 [ 126.365739][ T5802] ? __pfx_kthread+0x10/0x10 [ 126.367874][ T5802] ret_from_fork_asm+0x1a/0x30 [ 126.369932][ T5802] [ 126.371336][ T5802] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.374447][ T5802] CPU: 3 UID: 0 PID: 5802 Comm: kworker/u34:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.379201][ T5802] Tainted: [L]=SOFTLOCKUP [ 126.381053][ T5802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.385407][ T5802] Workqueue: hci3 hci_conn_timeout [ 126.387717][ T5802] Call Trace: [ 126.389185][ T5802] [ 126.390493][ T5802] dump_stack_lvl+0x100/0x190 [ 126.392518][ T5802] vpanic+0x2dc/0x6f8 [ 126.394363][ T5802] panic+0xd1/0xe0 [ 126.396014][ T5802] ? __pfx_panic+0x10/0x10 [ 126.397931][ T5802] check_panic_on_warn.cold+0x19/0x34 [ 126.400305][ T5802] ? hci_conn_timeout+0x16a/0x230 [ 126.402560][ T5802] __warn.cold+0x191/0x321 [ 126.404482][ T5802] __report_bug+0x30f/0x440 [ 126.406447][ T5802] ? hci_conn_timeout+0x16a/0x230 [ 126.408695][ T5802] ? __pfx___report_bug+0x10/0x10 [ 126.411027][ T5802] ? add_lock_to_list+0x9d/0x1d0 [ 126.413123][ T5802] ? check_prev_add+0x354/0xe60 [ 126.415296][ T5802] ? __lock_acquire+0x5c0/0x1f40 [ 126.417407][ T5802] ? hci_conn_timeout+0x16a/0x230 [ 126.419672][ T5802] report_bug+0xb3/0x220 [ 126.421524][ T5802] ? hci_conn_timeout+0x16a/0x230 [ 126.423765][ T5802] handle_bug+0x16a/0x2a0 [ 126.425619][ T5802] exc_invalid_op+0x17/0x50 [ 126.427698][ T5802] asm_exc_invalid_op+0x1a/0x20 [ 126.429776][ T5802] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 126.432260][ T5802] Code: 44 0f b6 2d 6b 68 87 07 31 ff 41 83 e5 40 44 89 ee e8 7a 02 2f f7 45 84 ed 0f 84 02 ff ff ff e9 85 81 94 f6 e8 57 08 2f f7 90 <0f> 0b 90 e8 4e 08 2f f7 48 8d bb ed f5 ff ff 48 b8 00 00 00 00 00 [ 126.440342][ T5802] RSP: 0000:ffffc9000615fbf8 EFLAGS: 00010293 [ 126.443001][ T5802] RAX: 0000000000000000 RBX: ffff8880709a4a50 RCX: 0000000000000000 [ 126.446378][ T5802] RDX: ffff8880279b2580 RSI: ffffffff8adeb869 RDI: 0000000000000005 [ 126.450021][ T5802] RBP: 00000000ffffffff R08: 0000000000000000 R09: 00000000ffffffff [ 126.453407][ T5802] R10: ffff8880709a4013 R11: 000000000000775b R12: ffff8880709a4000 [ 126.456831][ T5802] R13: ffff8880279b2a44 R14: 0000000000000000 R15: ffff888025db6c00 [ 126.460226][ T5802] ? hci_conn_timeout+0x169/0x230 [ 126.462467][ T5802] ? hci_conn_timeout+0x169/0x230 [ 126.464622][ T5802] process_one_work+0xac7/0x1b10 [ 126.466884][ T5802] ? __pfx_process_one_work+0x10/0x10 [ 126.469105][ T5802] ? lock_acquire+0x1d1/0x380 [ 126.471277][ T5802] ? __pfx_hci_conn_timeout+0x10/0x10 [ 126.473627][ T5802] worker_thread+0x5ef/0xe50 [ 126.475622][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 126.477908][ T5802] ? kthread+0x13a/0x450 [ 126.479757][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 126.482055][ T5802] kthread+0x373/0x450 [ 126.483890][ T5802] ? __pfx_kthread+0x10/0x10 [ 126.485976][ T5802] ret_from_fork+0x730/0xd60 [ 126.488000][ T5802] ? __pfx_ret_from_fork+0x10/0x10 [ 126.490298][ T5802] ? __switch_to+0x800/0x10e0 [ 126.492337][ T5802] ? __pfx_kthread+0x10/0x10 [ 126.494384][ T5802] ret_from_fork_asm+0x1a/0x30 [ 126.496442][ T5802] [ 126.498634][ T5802] Kernel Offset: disabled [ 126.500501][ T5802] Rebooting in 86400 seconds..