last executing test programs: 3m37.494893458s ago: executing program 0 (id=562): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = fsopen(&(0x7f0000000480)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xa) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x40000000, 0x0, 0x7, 0x40000001, 0x4b4d564b, 0x564b4d56, 0x4d}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r2, &(0x7f0000000000)='270', 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='common_pid', 0xa) 3m37.330952869s ago: executing program 0 (id=563): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r1, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) 3m37.277212116s ago: executing program 0 (id=564): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x88, 0x30, 0x58f, 0x0, 0x0, {}, [{0x74, 0x1, [@m_skbedit={0x70, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8001, 0x20000000, 0x3, 0x80000001}}]}, {0x24, 0x6, "07000000000000009be53fb4b05b4d0e5aa711dee3d64a2ccd5f42f46444fcbe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 3m37.104951084s ago: executing program 0 (id=565): syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x2703) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) move_pages(0x0, 0x1efe, &(0x7f0000000240), 0x0, &(0x7f0000000280), 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e040a260c"], 0x7) 3m36.542751849s ago: executing program 0 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d02, &(0x7f0000000740)="8c29ac") ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0xb, 0x1, 0x4, 0x0, 0x7}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='fd/3\x00') read(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TCSETS(r4, 0x8926, &(0x7f0000000340)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) write(r3, &(0x7f0000000200), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r5, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x138, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xba, 0xa8, @random="9d38286f2af27c8aec5b1634ced6718e36d2392b4ff2b6361cf687522a486b46902b2ce07304be40bfe3e1e3a56b087726c40e3121d6fcb66c12e8035e21e5d57597751364e956c3c77bd1e3a09f758e1da52055ab6d4f05adcd2d7414473f023ce968efdc34af24fa10bccde0ffd6dcff2399172e07760ea0b24090da784086a4a3ea7b709b9208a7cf6bf6389171fb1525b478fc4ba7ee39b54978e24261483110ced2233240770427cf3f838ced89ed881a0d8a99"}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) ioctl(r5, 0x40140921, &(0x7f0000000420)="0100000001000000000100000006") ioctl(r5, 0x400c0930, 0x0) syz_clone(0x2000, &(0x7f0000000780)="a9d53ca74e061e554fe74e0042204e6ba47f9e647befa93a00e383fbadac7f8bc3c35f833de170d53f98ebef4e967ccc3ab6c825176b83e915eb08c6c80499e5594708fefff6e3fee4c0aac023d8dec9c0f0c835c2a2ad109e95af51568d777220f4d7df8e49899909a42b2e296ac573f91afd0953b4f68ce0df153d1a98a2c08db84e929533ec18f4b6ef7fe1efac481c410dd530916451408a482cedb37e9f1bb39777de9b48eef5aaf1", 0xab, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="46d510fb41aad6ba7fdccbe734ad8d4e8089b143501ba429fe9b0ab42975d42c6550bb6c864885b50fc95cde990d7797b51c856bacdca04f5f0b406d5611c069dbaa787d579e082b5de3e27f08f51c4a703dbee2a71b10b80c") 3m36.374611696s ago: executing program 0 (id=567): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000f8ffffff0000000000000000eebd0000360000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xd82, 0x0, 0x0, 0x1000, 0x100003, 0x0, 0x0, 0x162}}}, &(0x7f0000000500)=0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x34) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_delvlan={0x28, 0x56, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x0, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8}}}]}, 0x28}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={r6, 0x2}, 0x8) syz_ublk_setup_queues(r5, r0, 0x0, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9825, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2b, 0x80, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7, 0x1, 0x1, 0x2000033d}}], 0x1, 0x0, 0x0) 3m21.051908565s ago: executing program 32 (id=567): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000f8ffffff0000000000000000eebd0000360000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xd82, 0x0, 0x0, 0x1000, 0x100003, 0x0, 0x0, 0x162}}}, &(0x7f0000000500)=0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x34) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_delvlan={0x28, 0x56, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x0, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8}}}]}, 0x28}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0)={r6, 0x2}, 0x8) syz_ublk_setup_queues(r5, r0, 0x0, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9825, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2b, 0x80, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7, 0x1, 0x1, 0x2000033d}}], 0x1, 0x0, 0x0) 986.798294ms ago: executing program 2 (id=2552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 986.657566ms ago: executing program 2 (id=2553): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000008c0)=0xffdffffc, 0x4) bind$inet6(r0, &(0x7f0000000900)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000a80)={0xa, 0x4e20, 0x23e, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000ac0)) 943.644827ms ago: executing program 2 (id=2563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbbbbbbbbbbbbb88a84d008100660008004519001c00e4000008"], 0x36) 823.847654ms ago: executing program 2 (id=2559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x2d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x19, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03e57e"}}}}, 0x3b) 714.232459ms ago: executing program 2 (id=2561): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x1684, &(0x7f0000000040)={0x0, 0x3a2b, 0x8, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 707.94754ms ago: executing program 1 (id=2571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) write$tun(r0, &(0x7f0000000640)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xb09, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@generic={0x7, 0x3, "aa"}]}}, {0x4e24, 0x4e20, 0xaf1, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "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"}}}}, 0xb17) 677.812665ms ago: executing program 4 (id=2562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, r1, 0x6a98047402e98331, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x48c6) 655.264025ms ago: executing program 2 (id=2564): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x8004) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7, 0x100, @val=0x80}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 439.515166ms ago: executing program 3 (id=2565): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x13, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}], 0x1}, 0x20000804) 434.555061ms ago: executing program 4 (id=2575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) write$tun(r0, &(0x7f0000000640)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xb09, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@generic={0x7, 0x3, "aa"}]}}, {0x4e24, 0x4e20, 0xaf1, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "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"}}}}, 0xb17) 432.959643ms ago: executing program 1 (id=2566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000605000100070000000900020073797a300000000014000780080006000000000008001340000000000500050002000000050004000400000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x84) 405.003986ms ago: executing program 1 (id=2567): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@loopback, 0x51, r2}) 354.498602ms ago: executing program 3 (id=2568): syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x70, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x33, 0x7, @initdev={0xac, 0x1e, 0x5, 0x0}, @rand_addr=0x640100fe, {[@cipso={0x86, 0x6, 0x3}, @cipso={0x86, 0x37, 0xffffffffffffffff, [{0x7, 0x12, "2e4d5a85862f4d7074fd4f95390f8ed5"}, {0x6, 0x2}, {0x0, 0x7, "eeac79bf85"}, {0x1, 0x6, "160be1b1"}, {0x2, 0x10, "83cad9db417a65edfe1da2365650"}]}]}}}}}}}, 0x0) 347.202069ms ago: executing program 1 (id=2569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbbbbbbbbbbbbb88a84d008100660008004519001c00e4000008"], 0x36) 326.701552ms ago: executing program 4 (id=2572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x2d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x19, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03e57e"}}}}, 0x3b) 326.265948ms ago: executing program 3 (id=2573): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000002cc0)={0xa, 0x4e33, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002d80)="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", 0x353}, {&(0x7f0000003100)="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", 0x14a}, {&(0x7f0000003280)="dd8ad35a05f68247883f33637734e01a1ea22d623005c50c3ff46bbed74a12cf717914cb4a307931a5fe143b9a14445961406bdbadf61009fde24fccf2021d7aeae1d6425bb23c63", 0x48}, {&(0x7f0000000d40)="cef630eda921cbed97adbad453556e05899dd1984423a16217f977b0af37470370048991ae14603d70c2a7f41e4863a52c1bbacf4e0330e321cb87d66d3e2f0aa47fdd9dede1b5852a39188358e6d77e3ad6bbecbf31b457a2bb1ef2b79b7eb795bc91fde42169ad5c0c4d393e3d8e4ac81db2580a9684683ffafa1209c65c27014aa0d967f4940dbee8b60700000000000000100085", 0x96}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x840) 287.720539ms ago: executing program 3 (id=2574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 260.693659ms ago: executing program 1 (id=2576): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8414, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 192.597863ms ago: executing program 4 (id=2577): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000140)='N', 0x1, 0x24000045, &(0x7f0000000180)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r0, 0x1) 93.092484ms ago: executing program 4 (id=2578): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f0000000400)={0x0, 0xfff, 0x245b1f2a, 0x8000, 0x10000}, 0x3c, 0x1000) 92.895354ms ago: executing program 3 (id=2579): unshare(0x22020600) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) 23.816332ms ago: executing program 4 (id=2580): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 23.647483ms ago: executing program 3 (id=2581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) write$tun(r0, &(0x7f0000000640)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xb09, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@generic={0x7, 0x3, "aa"}]}}, {0x4e24, 0x4e20, 0xaf1, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "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"}}}}, 0xb17) 0s ago: executing program 1 (id=2582): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'veth0_macvtap\x00'}, 0x18) kernel console output (not intermixed with test programs): ilslab, interval 1, probability 0, space 0, times 0 [ 452.825582][T10634] CPU: 1 UID: 0 PID: 10634 Comm: syz.4.1265 Not tainted syzkaller #0 PREEMPT(full) [ 452.825597][T10634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 452.825606][T10634] Call Trace: [ 452.825611][T10634] [ 452.825616][T10634] dump_stack_lvl+0x100/0x190 [ 452.825636][T10634] should_fail_ex.cold+0x5/0xa [ 452.825652][T10634] should_failslab+0xc2/0x120 [ 452.825671][T10634] __kvmalloc_node_noprof+0x113/0x9b0 [ 452.825689][T10634] ? bpf_check_cfg+0xb4/0x990 [ 452.825705][T10634] bpf_check_cfg+0xb4/0x990 [ 452.825717][T10634] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 452.825759][T10634] bpf_check+0x7d45/0xac70 [ 452.825781][T10634] ? __css_rstat_updated+0x1ce/0x590 [ 452.825792][T10634] ? __lock_acquire+0x5c0/0x1f40 [ 452.825812][T10634] ? __pfx___css_rstat_updated+0x10/0x10 [ 452.825833][T10634] ? __pfx_bpf_check+0x10/0x10 [ 452.825850][T10634] ? lock_acquire+0x1d1/0x380 [ 452.825867][T10634] ? find_held_lock+0x2b/0x80 [ 452.825881][T10634] ? bpf_prog_load+0x1a27/0x2ab0 [ 452.825901][T10634] ? __asan_memset+0x23/0x50 [ 452.825918][T10634] ? bpf_prog_load+0x1ae1/0x2ab0 [ 452.825935][T10634] bpf_prog_load+0x1ae1/0x2ab0 [ 452.825956][T10634] ? __pfx_bpf_prog_load+0x10/0x10 [ 452.825972][T10634] ? lock_acquire+0x1d1/0x380 [ 452.826001][T10634] __sys_bpf+0x1f46/0x4a30 [ 452.826018][T10634] ? __pfx___sys_bpf+0x10/0x10 [ 452.826031][T10634] ? find_held_lock+0x2b/0x80 [ 452.826043][T10634] ? futex_wake+0x4ea/0x5e0 [ 452.826069][T10634] ? rcu_read_lock_any_held+0x6a/0x90 [ 452.826084][T10634] ? find_held_lock+0x2b/0x80 [ 452.826097][T10634] ? ksys_write+0x190/0x250 [ 452.826111][T10634] ? ksys_write+0x190/0x250 [ 452.826134][T10634] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 452.826150][T10634] ? xfd_validate_state+0x129/0x190 [ 452.826171][T10634] ? __ia32_sys_bpf+0xcc/0x170 [ 452.826184][T10634] __ia32_sys_bpf+0xcc/0x170 [ 452.826198][T10634] ? __do_fast_syscall_32+0xb3/0x8b0 [ 452.826212][T10634] __do_fast_syscall_32+0x13a/0x8b0 [ 452.826226][T10634] do_fast_syscall_32+0x32/0x70 [ 452.826238][T10634] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.826253][T10634] RIP: 0023:0xf742efec [ 452.826266][T10634] Code: Unable to access opcode bytes at 0xf742efc2. [ 452.826276][T10634] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 452.826289][T10634] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000a40 [ 452.826297][T10634] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.826304][T10634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.826311][T10634] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 452.826320][T10634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.826335][T10634] [ 453.176943][T10665] netlink: 'syz.2.1281': attribute type 1 has an invalid length. [ 453.187952][T10665] 8021q: adding VLAN 0 to HW filter on device bond2 [ 453.191625][T10663] syzkaller0: entered promiscuous mode [ 453.191640][T10663] syzkaller0: entered allmulticast mode [ 453.206433][T10665] bond2: (slave geneve2): making interface the new active one [ 453.207436][T10665] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 453.501902][T10679] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1287'. [ 453.501922][T10679] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1287'. [ 453.691942][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 453.691954][ T43] audit: type=1326 audit(1792039455.181:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 453.692056][ T43] audit: type=1326 audit(1792039455.181:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 453.692293][ T43] audit: type=1326 audit(1792039455.181:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 453.692385][ T43] audit: type=1326 audit(1792039455.181:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf744efec code=0x7ffc0000 [ 453.692473][ T43] audit: type=1326 audit(1792039455.181:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 453.692569][ T43] audit: type=1326 audit(1792039455.181:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 453.692691][ T43] audit: type=1326 audit(1792039455.181:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 453.724055][ T43] audit: type=1326 audit(1792039455.201:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf744efec code=0x7ffc0000 [ 453.724119][ T43] audit: type=1326 audit(1792039455.211:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.1.1289" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf744efec code=0x7ffc0000 [ 453.847011][T10709] FAULT_INJECTION: forcing a failure. [ 453.847011][T10709] name failslab, interval 1, probability 0, space 0, times 0 [ 453.847038][T10709] CPU: 0 UID: 0 PID: 10709 Comm: syz.1.1301 Not tainted syzkaller #0 PREEMPT(full) [ 453.847058][T10709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 453.847069][T10709] Call Trace: [ 453.847075][T10709] [ 453.847082][T10709] dump_stack_lvl+0x100/0x190 [ 453.847110][T10709] should_fail_ex.cold+0x5/0xa [ 453.847132][T10709] should_failslab+0xc2/0x120 [ 453.847159][T10709] __kmalloc_noprof+0xfc/0x840 [ 453.847183][T10709] ? mpi_resize+0x1ac/0x250 [ 453.847203][T10709] mpi_resize+0x1ac/0x250 [ 453.847221][T10709] mpi_sub_ui+0x173/0x910 [ 453.847250][T10709] rsa_check_payload+0x58/0xc0 [ 453.847267][T10709] rsa_enc+0x198/0x3b0 [ 453.847283][T10709] ? __pfx_rsa_enc+0x10/0x10 [ 453.847298][T10709] ? __virt_addr_valid+0x239/0x430 [ 453.847321][T10709] ? sg_init_one+0xf5/0x1b0 [ 453.847346][T10709] rsassa_pkcs1_verify+0x4eb/0xc20 [ 453.847377][T10709] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 453.847407][T10709] ? rsa_max_size+0xd/0x70 [ 453.847421][T10709] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 453.847442][T10709] public_key_verify_signature+0x5ee/0x910 [ 453.847471][T10709] ? __pfx_public_key_verify_signature+0x10/0x10 [ 453.847506][T10709] ? asymmetric_key_generate_id+0x7e/0x180 [ 453.847533][T10709] x509_check_for_self_signed+0x325/0x510 [ 453.847562][T10709] x509_cert_parse+0x60c/0x910 [ 453.847590][T10709] x509_key_preparse+0x65/0x9c0 [ 453.847640][T10709] asymmetric_key_preparse+0xce/0x1d0 [ 453.847663][T10709] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 453.847685][T10709] __key_create_or_update+0x413/0xe30 [ 453.847711][T10709] ? __pfx___key_create_or_update+0x10/0x10 [ 453.847734][T10709] ? lookup_user_key+0x3f3/0x1300 [ 453.847782][T10709] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 453.847801][T10709] ? __pfx_keyring_search_iterator+0x10/0x10 [ 453.847826][T10709] key_create_or_update+0x42/0x60 [ 453.847850][T10709] __do_sys_add_key+0x2e8/0x460 [ 453.847877][T10709] ? __pfx___do_sys_add_key+0x10/0x10 [ 453.847912][T10709] __do_fast_syscall_32+0x13a/0x8b0 [ 453.847931][T10709] do_fast_syscall_32+0x32/0x70 [ 453.847948][T10709] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 453.847967][T10709] RIP: 0023:0xf744efec [ 453.847984][T10709] Code: Unable to access opcode bytes at 0xf744efc2. [ 453.847992][T10709] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 453.848009][T10709] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 453.848019][T10709] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 0000000022e80354 [ 453.848029][T10709] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 453.848039][T10709] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 453.848048][T10709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 453.848069][T10709] [ 453.895701][T10714] FAULT_INJECTION: forcing a failure. [ 453.895701][T10714] name failslab, interval 1, probability 0, space 0, times 0 [ 453.895727][T10714] CPU: 0 UID: 0 PID: 10714 Comm: syz.3.1305 Not tainted syzkaller #0 PREEMPT(full) [ 453.895745][T10714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 453.895755][T10714] Call Trace: [ 453.895761][T10714] [ 453.895768][T10714] dump_stack_lvl+0x100/0x190 [ 453.895795][T10714] should_fail_ex.cold+0x5/0xa [ 453.895819][T10714] should_failslab+0xc2/0x120 [ 453.895846][T10714] __kmalloc_cache_noprof+0x91/0x6d0 [ 453.895866][T10714] ? __kasan_kmalloc+0xaa/0xb0 [ 453.895888][T10714] ? init_pseudo+0x48/0x1b0 [ 453.895933][T10714] init_pseudo+0x48/0x1b0 [ 453.895959][T10714] sockfs_init_fs_context+0x1a/0xc0 [ 453.895984][T10714] alloc_fs_context+0x60c/0xf40 [ 453.896006][T10714] __ia32_sys_fsopen+0xef/0x230 [ 453.896027][T10714] __do_fast_syscall_32+0x13a/0x8b0 [ 453.896049][T10714] do_fast_syscall_32+0x32/0x70 [ 453.896065][T10714] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 453.896088][T10714] RIP: 0023:0xf7f36fec [ 453.896107][T10714] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 453.896115][T10714] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 453.896131][T10714] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000000000001 [ 453.896142][T10714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 453.896152][T10714] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 453.896162][T10714] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 453.896171][T10714] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 453.896194][T10714] [ 454.534898][T10741] FAULT_INJECTION: forcing a failure. [ 454.534898][T10741] name failslab, interval 1, probability 0, space 0, times 0 [ 454.534920][T10741] CPU: 1 UID: 0 PID: 10741 Comm: syz.4.1318 Not tainted syzkaller #0 PREEMPT(full) [ 454.534934][T10741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 454.534941][T10741] Call Trace: [ 454.534946][T10741] [ 454.534952][T10741] dump_stack_lvl+0x100/0x190 [ 454.534972][T10741] should_fail_ex.cold+0x5/0xa [ 454.534990][T10741] should_failslab+0xc2/0x120 [ 454.535010][T10741] kmem_cache_alloc_noprof+0x92/0x6a0 [ 454.535028][T10741] ? ioctx_alloc+0x1b9/0x21a0 [ 454.535085][T10741] ioctx_alloc+0x1b9/0x21a0 [ 454.535103][T10741] ? lock_acquire+0x1d1/0x380 [ 454.535120][T10741] ? __might_fault+0xc5/0x140 [ 454.535133][T10741] ? find_held_lock+0x2b/0x80 [ 454.535147][T10741] ? __pfx_ioctx_alloc+0x10/0x10 [ 454.535163][T10741] __ia32_compat_sys_io_setup+0xc8/0x220 [ 454.535178][T10741] __do_fast_syscall_32+0x13a/0x8b0 [ 454.535193][T10741] do_fast_syscall_32+0x32/0x70 [ 454.535205][T10741] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 454.535220][T10741] RIP: 0023:0xf742efec [ 454.535234][T10741] Code: Unable to access opcode bytes at 0xf742efc2. [ 454.535239][T10741] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 454.535251][T10741] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000000 [ 454.535263][T10741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 454.535270][T10741] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 454.535277][T10741] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 454.535284][T10741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 454.535300][T10741] [ 455.006585][T10760] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 455.115003][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 455.760383][T10778] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 455.760401][T10778] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 455.761733][T10777] batman_adv: batadv0: Adding interface: syzkaller0 [ 455.761746][T10777] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.761773][T10777] batman_adv: batadv0: Interface activated: syzkaller0 [ 455.963240][T10783] tipc: Started in network mode [ 455.963253][T10783] tipc: Node identity 1000001, cluster identity 4711 [ 455.963263][T10783] tipc: Node number set to 16777217 [ 455.963609][T10783] tipc: Cannot configure node identity twice [ 456.068215][T10775] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 456.094694][T10775] batman_adv: batadv0: Removing interface: syzkaller0 [ 456.167003][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 456.377541][T10824] FAULT_INJECTION: forcing a failure. [ 456.377541][T10824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.377569][T10824] CPU: 0 UID: 0 PID: 10824 Comm: syz.2.1353 Not tainted syzkaller #0 PREEMPT(full) [ 456.377587][T10824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 456.377597][T10824] Call Trace: [ 456.377603][T10824] [ 456.377610][T10824] dump_stack_lvl+0x100/0x190 [ 456.377636][T10824] should_fail_ex.cold+0x5/0xa [ 456.377656][T10824] _copy_from_user+0x2e/0xd0 [ 456.377674][T10824] __ia32_sys_epoll_ctl+0x130/0x1e0 [ 456.377694][T10824] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 456.377717][T10824] __do_fast_syscall_32+0x13a/0x8b0 [ 456.377739][T10824] do_fast_syscall_32+0x32/0x70 [ 456.377755][T10824] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.377777][T10824] RIP: 0023:0xf747efec [ 456.377795][T10824] Code: Unable to access opcode bytes at 0xf747efc2. [ 456.377802][T10824] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 456.377819][T10824] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000000001 [ 456.377830][T10824] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 456.377840][T10824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.377849][T10824] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 456.377858][T10824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.377879][T10824] [ 456.506204][T10836] Illegal XDP return value 4294967294 on prog (id 93) dev syz_tun, expect packet loss! [ 456.533830][T10839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1361'. [ 456.621390][T10850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1366'. [ 456.692072][T10858] usb 1-1: USB disconnect, device number 3 [ 456.870041][T10872] process 'syz.2.1377' launched './file0' with NULL argv: empty string added [ 456.970284][T10882] netlink: 'syz.3.1382': attribute type 1 has an invalid length. [ 456.988349][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1379'. [ 457.600095][T10904] netlink: 'syz.4.1391': attribute type 1 has an invalid length. [ 457.618093][T10904] 8021q: adding VLAN 0 to HW filter on device bond2 [ 457.853469][T10909] device-mapper: table: 248:0: zero-length target [ 457.853541][T10909] device-mapper: ioctl: error adding target to table [ 458.040254][T10924] tap0: tun_chr_ioctl cmd 2147767520 [ 458.140454][T10930] sg_write: data in/out 197376/1 bytes for SCSI command 0x51-- guessing data in; [ 458.140454][T10930] program syz.4.1404 not setting count and/or reply_len properly [ 458.190141][T10934] device-mapper: table: 248:0: zero-length target [ 458.190237][T10934] device-mapper: ioctl: error adding target to table [ 458.422896][T10031] usb 1-1: new high-speed USB device number 4 using ehci-pci [ 458.447831][T10959] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 458.470374][T10959] 8021q: adding VLAN 0 to HW filter on device bond2 [ 458.593827][T10031] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 458.607340][T10031] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 458.607363][T10031] usb 1-1: Product: QEMU USB Tablet [ 458.607377][T10031] usb 1-1: Manufacturer: QEMU [ 458.607389][T10031] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 458.620863][T10031] usbtest 1-1:1.0: Interface 0 is not authorized for usage [ 458.621326][T10031] usbhid 1-1:1.0: Interface 0 is not authorized for usage [ 458.630122][T10941] usb 1-1: USB disconnect, device number 4 [ 458.849270][T10985] netlink: 'syz.4.1429': attribute type 1 has an invalid length. [ 458.997077][T11004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1438'. [ 459.046514][T11008] netlink: 'syz.2.1440': attribute type 1 has an invalid length. [ 459.339185][T11033] netlink: 'syz.4.1452': attribute type 1 has an invalid length. [ 459.665125][T11061] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.1456' sets config #0 [ 459.687566][T11061] rxe_eth0 speed is unknown, defaulting to 1000 [ 459.893556][T11064] rxe_eth0 speed is unknown, defaulting to 1000 [ 460.308607][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'. [ 460.618768][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1490'. [ 460.823043][T11131] netlink: 'syz.4.1494': attribute type 4 has an invalid length. [ 460.870643][T11131] netlink: 'syz.4.1494': attribute type 4 has an invalid length. [ 460.959644][T11140] netlink: 'syz.4.1498': attribute type 1 has an invalid length. [ 460.981767][T11140] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.085858][T11150] sg_write: data in/out 197376/1 bytes for SCSI command 0x51-- guessing data in; [ 461.085858][T11150] program syz.2.1502 not setting count and/or reply_len properly [ 461.262224][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1506'. [ 461.275297][T11162] syzkaller0: entered promiscuous mode [ 461.275318][T11162] syzkaller0: entered allmulticast mode [ 461.276865][ T5616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.276878][ T5616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.279750][T11162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.383842][T11165] netlink: 'syz.2.1510': attribute type 1 has an invalid length. [ 461.399700][T11165] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.860084][T11190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1521'. [ 461.925462][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1523'. [ 462.089540][T11207] netlink: 'syz.4.1529': attribute type 1 has an invalid length. [ 462.137981][T11207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 462.220236][T11219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1534'. [ 462.288990][T11230] netlink: 'syz.2.1540': attribute type 1 has an invalid length. [ 462.311467][T11230] 8021q: adding VLAN 0 to HW filter on device bond4 [ 462.364948][ T43] audit: type=1326 audit(1792039463.831:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.3.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 462.373727][ T43] audit: type=1326 audit(1792039463.831:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.3.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 462.373921][ T43] audit: type=1326 audit(1792039463.841:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.3.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 462.374056][ T43] audit: type=1326 audit(1792039463.841:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.3.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 462.374219][ T43] audit: type=1326 audit(1792039463.841:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.3.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 462.374350][ T43] audit: type=1326 audit(1792039463.841:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.3.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 462.374480][ T43] audit: type=1326 audit(1792039463.841:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.3.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 462.376608][T11240] FAULT_INJECTION: forcing a failure. [ 462.376608][T11240] name failslab, interval 1, probability 0, space 0, times 0 [ 462.376636][T11240] CPU: 1 UID: 0 PID: 11240 Comm: syz.2.1543 Not tainted syzkaller #0 PREEMPT(full) [ 462.376657][T11240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 462.376668][T11240] Call Trace: [ 462.376675][T11240] [ 462.376682][T11240] dump_stack_lvl+0x100/0x190 [ 462.376714][T11240] should_fail_ex.cold+0x5/0xa [ 462.376740][T11240] should_failslab+0xc2/0x120 [ 462.376772][T11240] kmem_cache_alloc_noprof+0x92/0x6a0 [ 462.376799][T11240] ? prepare_creds+0x2c/0x950 [ 462.376848][T11240] prepare_creds+0x2c/0x950 [ 462.376879][T11240] __sys_setreuid+0x109/0xb00 [ 462.376921][T11240] __do_fast_syscall_32+0x13a/0x8b0 [ 462.376948][T11240] do_fast_syscall_32+0x32/0x70 [ 462.376968][T11240] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 462.376993][T11240] RIP: 0023:0xf747efec [ 462.377013][T11240] Code: Unable to access opcode bytes at 0xf747efc2. [ 462.377022][T11240] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000046 [ 462.377042][T11240] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 462.377054][T11240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 462.377067][T11240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 462.377079][T11240] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 462.377091][T11240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 462.377116][T11240] [ 462.397978][ T43] audit: type=1326 audit(1792039463.841:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.3.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 462.398042][ T43] audit: type=1326 audit(1792039463.841:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.3.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 462.398106][ T43] audit: type=1326 audit(1792039463.841:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.3.1542" exe="/syz-executor" sig=0 arch=40000003 syscall=305 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 462.451416][T11248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1546'. [ 462.549376][T11257] netlink: 'syz.2.1551': attribute type 1 has an invalid length. [ 463.310487][T11257] 8021q: adding VLAN 0 to HW filter on device bond5 [ 463.385839][T11269] FAULT_INJECTION: forcing a failure. [ 463.385839][T11269] name failslab, interval 1, probability 0, space 0, times 0 [ 463.385861][T11269] CPU: 0 UID: 0 PID: 11269 Comm: syz.4.1556 Not tainted syzkaller #0 PREEMPT(full) [ 463.385875][T11269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 463.385882][T11269] Call Trace: [ 463.385886][T11269] [ 463.385891][T11269] dump_stack_lvl+0x100/0x190 [ 463.385910][T11269] should_fail_ex.cold+0x5/0xa [ 463.385927][T11269] should_failslab+0xc2/0x120 [ 463.385946][T11269] kmem_cache_alloc_noprof+0x92/0x6a0 [ 463.385963][T11269] ? prepare_creds+0x2c/0x950 [ 463.385980][T11269] prepare_creds+0x2c/0x950 [ 463.385996][T11269] __sys_setreuid+0x109/0xb00 [ 463.386036][T11269] __do_fast_syscall_32+0x13a/0x8b0 [ 463.386052][T11269] do_fast_syscall_32+0x32/0x70 [ 463.386064][T11269] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 463.386081][T11269] RIP: 0023:0xf742efec [ 463.386094][T11269] Code: Unable to access opcode bytes at 0xf742efc2. [ 463.386100][T11269] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000046 [ 463.386111][T11269] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 463.386120][T11269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 463.386127][T11269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 463.386135][T11269] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 463.386143][T11269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 463.386158][T11269] [ 463.413012][T11271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1557'. [ 463.527485][T11283] netlink: 'syz.4.1563': attribute type 1 has an invalid length. [ 463.543316][T11283] 8021q: adding VLAN 0 to HW filter on device bond5 [ 463.587881][T11290] FAULT_INJECTION: forcing a failure. [ 463.587881][T11290] name failslab, interval 1, probability 0, space 0, times 0 [ 463.587902][T11290] CPU: 0 UID: 0 PID: 11290 Comm: syz.3.1567 Not tainted syzkaller #0 PREEMPT(full) [ 463.587916][T11290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 463.587923][T11290] Call Trace: [ 463.587927][T11290] [ 463.587932][T11290] dump_stack_lvl+0x100/0x190 [ 463.587952][T11290] should_fail_ex.cold+0x5/0xa [ 463.587970][T11290] should_failslab+0xc2/0x120 [ 463.588008][T11290] kmem_cache_alloc_noprof+0x92/0x6a0 [ 463.588026][T11290] ? prepare_creds+0x2c/0x950 [ 463.588044][T11290] prepare_creds+0x2c/0x950 [ 463.588064][T11290] __sys_setreuid+0x109/0xb00 [ 463.588085][T11290] __do_fast_syscall_32+0x13a/0x8b0 [ 463.588100][T11290] do_fast_syscall_32+0x32/0x70 [ 463.588112][T11290] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 463.588127][T11290] RIP: 0023:0xf7f36fec [ 463.588140][T11290] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 463.588145][T11290] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000046 [ 463.588158][T11290] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 463.588166][T11290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 463.588173][T11290] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 463.588180][T11290] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 463.588188][T11290] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 463.588225][T11290] [ 463.625191][T11294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1569'. [ 463.729256][T11305] netlink: 'syz.3.1574': attribute type 1 has an invalid length. [ 463.751082][T11305] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.975851][T11333] netlink: 'syz.1.1587': attribute type 1 has an invalid length. [ 464.023834][T11333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 464.127135][T11344] __nla_validate_parse: 1 callbacks suppressed [ 464.127149][T11344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1590'. [ 464.276176][T11354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1597'. [ 464.367795][T11362] netlink: 'syz.1.1600': attribute type 1 has an invalid length. [ 464.403375][T11362] 8021q: adding VLAN 0 to HW filter on device bond4 [ 464.707728][T11376] loop5: detected capacity change from 0 to 7 [ 464.826972][T11383] netlink: 'syz.3.1610': attribute type 1 has an invalid length. [ 464.848257][T11383] 8021q: adding VLAN 0 to HW filter on device bond3 [ 464.888734][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 465.189536][T11406] netlink: 'syz.2.1620': attribute type 1 has an invalid length. [ 465.204631][T11406] 8021q: adding VLAN 0 to HW filter on device bond6 [ 465.229785][T11376] Dev loop5: unable to read RDB block 7 [ 465.229808][T11376] loop5: unable to read partition table [ 465.229913][T11376] loop5: partition table beyond EOD, truncated [ 465.229936][T11376] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 465.315607][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1621'. [ 465.316571][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1621'. [ 466.180305][T11494] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1662'. [ 466.192059][T11494] syzkaller1: entered promiscuous mode [ 466.192073][T11494] syzkaller1: entered allmulticast mode [ 466.810322][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1679'. [ 467.518106][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1684'. [ 467.520643][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1684'. [ 467.568354][T11551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1689'. [ 467.626959][T11559] netlink: 'syz.1.1692': attribute type 1 has an invalid length. [ 467.646510][T11559] 8021q: adding VLAN 0 to HW filter on device bond5 [ 467.812024][T11588] netlink: 'syz.1.1706': attribute type 10 has an invalid length. [ 467.816637][T11588] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 467.816886][T11588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.932083][T11599] netlink: 'syz.3.1707': attribute type 1 has an invalid length. [ 467.986859][T11599] 8021q: adding VLAN 0 to HW filter on device bond4 [ 467.990596][ T43] kauditd_printk_skb: 59 callbacks suppressed [ 467.990612][ T43] audit: type=1326 audit(1792039469.481:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.4.1710" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 467.998594][ T43] audit: type=1326 audit(1792039469.491:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.4.1710" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 467.998637][ T43] audit: type=1326 audit(1792039469.491:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.4.1710" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 467.998671][ T43] audit: type=1326 audit(1792039469.491:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.4.1710" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 468.001703][ T43] audit: type=1326 audit(1792039469.491:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.4.1710" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf742efec code=0x7ffc0000 [ 468.001744][ T43] audit: type=1326 audit(1792039469.491:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.4.1710" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 468.001779][ T43] audit: type=1326 audit(1792039469.491:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.4.1710" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 468.001814][ T43] audit: type=1326 audit(1792039469.491:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.4.1710" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 468.001850][ T43] audit: type=1326 audit(1792039469.491:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.4.1710" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 468.001884][ T43] audit: type=1326 audit(1792039469.491:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.4.1710" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742efec code=0x7ffc0000 [ 468.309771][T11627] netlink: 'syz.2.1723': attribute type 1 has an invalid length. [ 468.328218][T11627] 8021q: adding VLAN 0 to HW filter on device bond7 [ 468.730287][T11654] netlink: 'syz.4.1734': attribute type 1 has an invalid length. [ 468.745847][T11654] 8021q: adding VLAN 0 to HW filter on device bond6 [ 469.186645][T11679] __nla_validate_parse: 11 callbacks suppressed [ 469.186686][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1745'. [ 469.187986][T11680] netlink: 'syz.3.1744': attribute type 1 has an invalid length. [ 469.192232][T11679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1745'. [ 469.200656][T11680] 8021q: adding VLAN 0 to HW filter on device bond5 [ 469.323685][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1753'. [ 469.515633][T11707] netlink: 'syz.3.1757': attribute type 1 has an invalid length. [ 469.532605][T11707] 8021q: adding VLAN 0 to HW filter on device bond6 [ 469.549066][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1763'. [ 469.616569][T11722] FAULT_INJECTION: forcing a failure. [ 469.616569][T11722] name failslab, interval 1, probability 0, space 0, times 0 [ 469.616602][T11722] CPU: 0 UID: 0 PID: 11722 Comm: syz.3.1764 Not tainted syzkaller #0 PREEMPT(full) [ 469.616628][T11722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 469.616640][T11722] Call Trace: [ 469.616648][T11722] [ 469.616657][T11722] dump_stack_lvl+0x100/0x190 [ 469.616689][T11722] should_fail_ex.cold+0x5/0xa [ 469.616716][T11722] should_failslab+0xc2/0x120 [ 469.616755][T11722] kmem_cache_alloc_noprof+0x92/0x6a0 [ 469.616783][T11722] ? __kernfs_new_node+0xd2/0xa10 [ 469.616807][T11722] __kernfs_new_node+0xd2/0xa10 [ 469.616831][T11722] ? __pfx___kernfs_new_node+0x10/0x10 [ 469.616854][T11722] ? lock_acquire+0x1d1/0x380 [ 469.616882][T11722] ? kernfs_root+0x23/0x2a0 [ 469.616910][T11722] ? find_held_lock+0x2b/0x80 [ 469.616932][T11722] ? kernfs_root+0xee/0x2a0 [ 469.616958][T11722] ? kernfs_root+0xee/0x2a0 [ 469.616992][T11722] kernfs_new_node+0x117/0x150 [ 469.617016][T11722] __kernfs_create_file+0x53/0x350 [ 469.617044][T11722] sysfs_add_file_mode_ns+0x207/0x3c0 [ 469.617079][T11722] internal_create_group+0x593/0xfb0 [ 469.617115][T11722] ? __pfx_internal_create_group+0x10/0x10 [ 469.617149][T11722] ? kernfs_create_link+0x1bd/0x240 [ 469.617177][T11722] internal_create_groups+0x9d/0x150 [ 469.617210][T11722] device_add+0xf60/0x1970 [ 469.617238][T11722] ? __pfx_device_add+0x10/0x10 [ 469.617265][T11722] ? lockdep_init_map_type+0x5c/0x250 [ 469.617296][T11722] ? __init_waitqueue_head+0xca/0x150 [ 469.617322][T11722] netdev_register_kobject+0x1df/0x410 [ 469.617356][T11722] register_netdevice+0x15b6/0x25a0 [ 469.617387][T11722] ? __pfx_register_netdevice+0x10/0x10 [ 469.617414][T11722] ? slip_open+0xb49/0x1120 [ 469.617433][T11722] ? kfree+0x1e5/0x6d0 [ 469.617453][T11722] ? __local_bh_enable_ip+0xa5/0x120 [ 469.617486][T11722] slip_open+0xb8a/0x1120 [ 469.617513][T11722] ? __pfx_slip_open+0x10/0x10 [ 469.617536][T11722] ? down_write+0x146/0x1f0 [ 469.617561][T11722] ? __pfx_slip_open+0x10/0x10 [ 469.617581][T11722] tty_ldisc_open+0xa2/0x120 [ 469.617611][T11722] tty_set_ldisc+0x325/0x740 [ 469.617634][T11722] tty_ioctl+0x695/0x1800 [ 469.617657][T11722] ? __pfx_tty_ioctl+0x10/0x10 [ 469.617676][T11722] ? do_vfs_ioctl+0x226/0x13e0 [ 469.617699][T11722] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 469.617734][T11722] ? __fget_files+0x34/0x3d0 [ 469.617762][T11722] ? find_held_lock+0x2b/0x80 [ 469.617785][T11722] ? __fget_files+0x215/0x3d0 [ 469.617810][T11722] ? hook_file_ioctl_common+0x140/0x440 [ 469.617842][T11722] ? __fget_files+0x21f/0x3d0 [ 469.617872][T11722] tty_compat_ioctl+0x2b3/0x420 [ 469.617895][T11722] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 469.617918][T11722] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 469.617946][T11722] __do_fast_syscall_32+0x13a/0x8b0 [ 469.617972][T11722] do_fast_syscall_32+0x32/0x70 [ 469.617994][T11722] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.618021][T11722] RIP: 0023:0xf7f36fec [ 469.618042][T11722] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 469.618051][T11722] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 469.618072][T11722] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000005423 [ 469.618085][T11722] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.618098][T11722] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.618111][T11722] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 469.618124][T11722] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.618153][T11722] [ 469.817602][T11722] veth3: entered allmulticast mode [ 470.088322][T11745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1779'. [ 470.139458][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1773'. [ 470.318399][T11752] netlink: 'syz.3.1772': attribute type 1 has an invalid length. [ 470.347509][T11752] 8021q: adding VLAN 0 to HW filter on device bond7 [ 470.540530][T11774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1782'. [ 470.582243][T11776] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1783'. [ 470.747202][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1790'. [ 470.803995][T11791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1791'. [ 471.179547][T11807] netlink: 'syz.1.1798': attribute type 1 has an invalid length. [ 471.197857][T11807] 8021q: adding VLAN 0 to HW filter on device bond6 [ 471.537287][T11834] netlink: 'syz.3.1810': attribute type 1 has an invalid length. [ 471.560192][T11834] 8021q: adding VLAN 0 to HW filter on device bond8 [ 473.856397][T11855] syz.1.1818 (11855) used greatest stack depth: 19104 bytes left [ 474.216720][T11862] __nla_validate_parse: 7 callbacks suppressed [ 474.216735][T11862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1822'. [ 474.217026][T11864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1823'. [ 474.217081][T11864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1823'. [ 474.272648][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 474.279942][T11870] gre2: entered promiscuous mode [ 474.279955][T11870] gre2: entered allmulticast mode [ 474.387893][T11874] validate_nla: 1 callbacks suppressed [ 474.387906][T11874] netlink: 'syz.1.1828': attribute type 1 has an invalid length. [ 474.559912][T11890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1835'. [ 475.320687][T11874] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 475.334914][T11892] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1836'. [ 475.475368][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 475.475386][ T43] audit: type=1326 audit(1792039476.971:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11896 comm="syz.1.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 475.475544][ T43] audit: type=1326 audit(1792039476.971:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11896 comm="syz.1.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 475.476168][ T43] audit: type=1326 audit(1792039476.971:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11896 comm="syz.1.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 475.476390][ T43] audit: type=1326 audit(1792039476.971:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11896 comm="syz.1.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf744efec code=0x7ffc0000 [ 475.476537][ T43] audit: type=1326 audit(1792039476.971:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11896 comm="syz.1.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 475.476680][ T43] audit: type=1326 audit(1792039476.971:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11896 comm="syz.1.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 475.476881][ T43] audit: type=1326 audit(1792039476.971:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11896 comm="syz.1.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 475.477015][ T43] audit: type=1326 audit(1792039476.971:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11896 comm="syz.1.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 475.477412][ T43] audit: type=1326 audit(1792039476.971:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11896 comm="syz.1.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 475.477565][ T43] audit: type=1326 audit(1792039476.971:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11896 comm="syz.1.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf744efec code=0x7ffc0000 [ 475.628090][T11916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1845'. [ 475.628121][T11916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1845'. [ 475.638747][T11919] netlink: 'syz.1.1846': attribute type 1 has an invalid length. [ 475.650431][T11919] 8021q: adding VLAN 0 to HW filter on device bond7 [ 475.713662][T11922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1848'. [ 475.735855][T11916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1845'. [ 476.008627][T11940] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.1850' sets config #0 [ 476.031442][T11940] rxe_eth0 speed is unknown, defaulting to 1000 [ 476.034460][T11942] netlink: 'syz.4.1856': attribute type 1 has an invalid length. [ 476.074947][T11942] 8021q: adding VLAN 0 to HW filter on device bond7 [ 476.211639][T11946] rxe_eth0 speed is unknown, defaulting to 1000 [ 476.838802][T11974] netlink: 'syz.2.1866': attribute type 1 has an invalid length. [ 476.863896][T11974] 8021q: adding VLAN 0 to HW filter on device bond8 [ 477.234619][T12004] netlink: 'syz.2.1875': attribute type 1 has an invalid length. [ 477.261176][T12004] 8021q: adding VLAN 0 to HW filter on device bond9 [ 477.989998][T12036] netlink: 'syz.3.1886': attribute type 1 has an invalid length. [ 478.006505][T12036] 8021q: adding VLAN 0 to HW filter on device bond9 [ 478.362907][ T5761] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 478.362919][ T5763] Bluetooth: hci2: command 0x1003 tx timeout [ 478.453479][T12060] netlink: 'syz.4.1895': attribute type 1 has an invalid length. [ 478.465619][T12060] 8021q: adding VLAN 0 to HW filter on device bond8 [ 480.131702][ C2] vxcan0: j1939_tp_rxtimer: 0xffff88806210bc00: rx timeout, send abort [ 480.137457][ C2] vxcan0: j1939_xtp_rx_abort_one: 0xffff88806210bc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 480.683440][T12119] __nla_validate_parse: 22 callbacks suppressed [ 480.683454][T12119] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1921'. [ 481.203088][T12049] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.301976][T12135] netlink: 'syz.3.1926': attribute type 1 has an invalid length. [ 481.321951][T12135] 8021q: adding VLAN 0 to HW filter on device bond10 [ 482.303293][T12154] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 482.397098][T12169] netlink: 'syz.3.1942': attribute type 1 has an invalid length. [ 482.416373][T12169] 8021q: adding VLAN 0 to HW filter on device bond11 [ 482.985132][T12195] netlink: 'syz.1.1953': attribute type 1 has an invalid length. [ 483.056189][T12195] 8021q: adding VLAN 0 to HW filter on device bond8 [ 483.168668][T12211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1959'. [ 483.421932][T12223] netlink: 'syz.3.1964': attribute type 1 has an invalid length. [ 483.437458][T12223] 8021q: adding VLAN 0 to HW filter on device bond12 [ 484.759406][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88802b24a400: rx timeout, send abort [ 484.763368][ C3] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802b24a400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 484.812070][T12246] netlink: 'syz.1.1973': attribute type 1 has an invalid length. [ 484.828672][T12246] 8021q: adding VLAN 0 to HW filter on device bond9 [ 485.709665][T12262] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 485.762137][T12264] FAULT_INJECTION: forcing a failure. [ 485.762137][T12264] name failslab, interval 1, probability 0, space 0, times 0 [ 485.762317][T12264] CPU: 3 UID: 0 PID: 12264 Comm: syz.4.1980 Not tainted syzkaller #0 PREEMPT(full) [ 485.762332][T12264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 485.762339][T12264] Call Trace: [ 485.762344][T12264] [ 485.762349][T12264] dump_stack_lvl+0x100/0x190 [ 485.762369][T12264] should_fail_ex.cold+0x5/0xa [ 485.762386][T12264] should_failslab+0xc2/0x120 [ 485.762406][T12264] kmem_cache_alloc_noprof+0x92/0x6a0 [ 485.762423][T12264] ? prepare_creds+0x2c/0x950 [ 485.762441][T12264] prepare_creds+0x2c/0x950 [ 485.762458][T12264] __sys_setreuid+0x109/0xb00 [ 485.762478][T12264] __do_fast_syscall_32+0x13a/0x8b0 [ 485.762494][T12264] do_fast_syscall_32+0x32/0x70 [ 485.762506][T12264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.762521][T12264] RIP: 0023:0xf742efec [ 485.762534][T12264] Code: Unable to access opcode bytes at 0xf742efc2. [ 485.762540][T12264] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000046 [ 485.762553][T12264] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 485.762561][T12264] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 485.762569][T12264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 485.762576][T12264] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 485.762584][T12264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 485.762600][T12264] [ 485.846191][T12268] netlink: 'syz.4.1982': attribute type 1 has an invalid length. [ 485.860429][T12268] 8021q: adding VLAN 0 to HW filter on device bond9 [ 486.027939][T12200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 486.081747][T12281] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 486.125589][T12287] FAULT_INJECTION: forcing a failure. [ 486.125589][T12287] name failslab, interval 1, probability 0, space 0, times 0 [ 486.125610][T12287] CPU: 0 UID: 0 PID: 12287 Comm: syz.1.1989 Not tainted syzkaller #0 PREEMPT(full) [ 486.125624][T12287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 486.125631][T12287] Call Trace: [ 486.125636][T12287] [ 486.125641][T12287] dump_stack_lvl+0x100/0x190 [ 486.125660][T12287] should_fail_ex.cold+0x5/0xa [ 486.125678][T12287] should_failslab+0xc2/0x120 [ 486.125697][T12287] kmem_cache_alloc_noprof+0x92/0x6a0 [ 486.125716][T12287] ? prepare_creds+0x2c/0x950 [ 486.125734][T12287] prepare_creds+0x2c/0x950 [ 486.125751][T12287] __sys_setreuid+0x109/0xb00 [ 486.125771][T12287] __do_fast_syscall_32+0x13a/0x8b0 [ 486.125787][T12287] do_fast_syscall_32+0x32/0x70 [ 486.125799][T12287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 486.125813][T12287] RIP: 0023:0xf744efec [ 486.125826][T12287] Code: Unable to access opcode bytes at 0xf744efc2. [ 486.125832][T12287] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000046 [ 486.125845][T12287] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 486.125857][T12287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 486.125865][T12287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.125871][T12287] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 486.125878][T12287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.125898][T12287] [ 486.180337][T12291] FAULT_INJECTION: forcing a failure. [ 486.180337][T12291] name fail_futex, interval 1, probability 0, space 0, times 0 [ 486.180357][T12291] CPU: 2 UID: 0 PID: 12291 Comm: syz.1.1990 Not tainted syzkaller #0 PREEMPT(full) [ 486.180370][T12291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 486.180378][T12291] Call Trace: [ 486.180382][T12291] [ 486.180387][T12291] dump_stack_lvl+0x100/0x190 [ 486.180407][T12291] should_fail_ex.cold+0x5/0xa [ 486.180422][T12291] ? mt_find+0x728/0x9b0 [ 486.180452][T12291] get_futex_key+0x1d0/0x14f0 [ 486.180467][T12291] ? __pfx_get_futex_key+0x10/0x10 [ 486.180478][T12291] ? bsearch+0x9e/0xd0 [ 486.180490][T12291] ? __pfx_cmp_ex_search+0x10/0x10 [ 486.180505][T12291] ? search_extable+0x82/0xb0 [ 486.180520][T12291] futex_wake+0xf4/0x5e0 [ 486.180535][T12291] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.180555][T12291] ? __pfx_futex_wake+0x10/0x10 [ 486.180572][T12291] ? kernelmode_fixup_or_oops.isra.0+0x80/0xf0 [ 486.180587][T12291] ? __bad_area_nosemaphore+0x320/0x3f0 [ 486.180603][T12291] do_futex+0x2b2/0x440 [ 486.180618][T12291] ? __pfx_do_futex+0x10/0x10 [ 486.180631][T12291] ? lockdep_hardirqs_on+0x7d/0x110 [ 486.180649][T12291] ? irqentry_exit+0x24d/0xa10 [ 486.180661][T12291] __ia32_sys_futex_time32+0x2f4/0x470 [ 486.180679][T12291] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 486.180694][T12291] ? __might_fault+0x111/0x140 [ 486.180711][T12291] __do_fast_syscall_32+0x13a/0x8b0 [ 486.180725][T12291] do_fast_syscall_32+0x32/0x70 [ 486.180736][T12291] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 486.180751][T12291] RIP: 0023:0xf744efec [ 486.180764][T12291] Code: Unable to access opcode bytes at 0xf744efc2. [ 486.180769][T12291] RSP: 002b:00000000f54665cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 486.180780][T12291] RAX: ffffffffffffffda RBX: 00000000f7474f8c RCX: 0000000000000081 [ 486.180788][T12291] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 486.180795][T12291] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 486.180802][T12291] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 486.180809][T12291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.180823][T12291] [ 486.241176][T12294] netlink: 'syz.4.1991': attribute type 1 has an invalid length. [ 486.285074][T12294] 8021q: adding VLAN 0 to HW filter on device bond10 [ 486.455342][T12314] FAULT_INJECTION: forcing a failure. [ 486.455342][T12314] name failslab, interval 1, probability 0, space 0, times 0 [ 486.455375][T12314] CPU: 1 UID: 0 PID: 12314 Comm: syz.1.1998 Not tainted syzkaller #0 PREEMPT(full) [ 486.455398][T12314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 486.455410][T12314] Call Trace: [ 486.455417][T12314] [ 486.455426][T12314] dump_stack_lvl+0x100/0x190 [ 486.455458][T12314] should_fail_ex.cold+0x5/0xa [ 486.455487][T12314] should_failslab+0xc2/0x120 [ 486.455516][T12314] kmem_cache_alloc_noprof+0x92/0x6a0 [ 486.455543][T12314] ? prepare_creds+0x2c/0x950 [ 486.455575][T12314] prepare_creds+0x2c/0x950 [ 486.455602][T12314] __sys_setreuid+0x109/0xb00 [ 486.455637][T12314] __do_fast_syscall_32+0x13a/0x8b0 [ 486.455661][T12314] do_fast_syscall_32+0x32/0x70 [ 486.455681][T12314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 486.455704][T12314] RIP: 0023:0xf744efec [ 486.455725][T12314] Code: Unable to access opcode bytes at 0xf744efc2. [ 486.455733][T12314] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000046 [ 486.455753][T12314] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 486.455767][T12314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 486.455779][T12314] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.455792][T12314] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 486.455805][T12314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.455833][T12314] [ 486.518053][T12322] FAULT_INJECTION: forcing a failure. [ 486.518053][T12322] name fail_futex, interval 1, probability 0, space 0, times 0 [ 486.518083][T12322] CPU: 2 UID: 0 PID: 12322 Comm: syz.1.2001 Not tainted syzkaller #0 PREEMPT(full) [ 486.518106][T12322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 486.518117][T12322] Call Trace: [ 486.518125][T12322] [ 486.518134][T12322] dump_stack_lvl+0x100/0x190 [ 486.518163][T12322] should_fail_ex.cold+0x5/0xa [ 486.518183][T12322] ? mt_find+0x728/0x9b0 [ 486.518205][T12322] get_futex_key+0x1d0/0x14f0 [ 486.518229][T12322] ? __pfx_get_futex_key+0x10/0x10 [ 486.518253][T12322] ? bsearch+0x9e/0xd0 [ 486.518273][T12322] ? __pfx_cmp_ex_search+0x10/0x10 [ 486.518297][T12322] ? search_extable+0x82/0xb0 [ 486.518319][T12322] futex_wake+0xf4/0x5e0 [ 486.518349][T12322] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.518381][T12322] ? __pfx_futex_wake+0x10/0x10 [ 486.518409][T12322] ? kernelmode_fixup_or_oops.isra.0+0x80/0xf0 [ 486.518433][T12322] ? __bad_area_nosemaphore+0x320/0x3f0 [ 486.518458][T12322] do_futex+0x2b2/0x440 [ 486.518480][T12322] ? __pfx_do_futex+0x10/0x10 [ 486.518501][T12322] ? lockdep_hardirqs_on+0x7d/0x110 [ 486.518531][T12322] ? irqentry_exit+0x24d/0xa10 [ 486.518552][T12322] __ia32_sys_futex_time32+0x2f4/0x470 [ 486.518578][T12322] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 486.518603][T12322] ? __might_fault+0x111/0x140 [ 486.518627][T12322] __do_fast_syscall_32+0x13a/0x8b0 [ 486.518649][T12322] do_fast_syscall_32+0x32/0x70 [ 486.518667][T12322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 486.518692][T12322] RIP: 0023:0xf744efec [ 486.518714][T12322] Code: Unable to access opcode bytes at 0xf744efc2. [ 486.518723][T12322] RSP: 002b:00000000f54665cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 486.518748][T12322] RAX: ffffffffffffffda RBX: 00000000f7474f8c RCX: 0000000000000081 [ 486.518761][T12322] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 486.518773][T12322] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 486.518785][T12322] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 486.518798][T12322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.518822][T12322] [ 486.641471][T12325] netlink: 'syz.4.2002': attribute type 1 has an invalid length. [ 486.653699][T12325] 8021q: adding VLAN 0 to HW filter on device bond11 [ 486.917112][T12350] netlink: 'syz.1.2013': attribute type 1 has an invalid length. [ 486.935027][T12350] 8021q: adding VLAN 0 to HW filter on device bond10 [ 487.017914][T12358] syzkaller1: entered promiscuous mode [ 487.018012][T12358] syzkaller1: entered allmulticast mode [ 487.780288][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2020'. [ 487.967693][T12372] netlink: 'syz.4.2023': attribute type 1 has an invalid length. [ 487.984665][T12372] 8021q: adding VLAN 0 to HW filter on device bond12 [ 488.194612][T12404] sg_write: process 839 (syz.4.2034) changed security contexts after opening file descriptor, this is not allowed. [ 488.341303][T12413] netlink: 'syz.1.2038': attribute type 1 has an invalid length. [ 488.354913][T12413] 8021q: adding VLAN 0 to HW filter on device bond11 [ 488.545226][T12424] FAULT_INJECTION: forcing a failure. [ 488.545226][T12424] name failslab, interval 1, probability 0, space 0, times 0 [ 488.545255][T12424] CPU: 1 UID: 0 PID: 12424 Comm: syz.4.2043 Not tainted syzkaller #0 PREEMPT(full) [ 488.545277][T12424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 488.545289][T12424] Call Trace: [ 488.545296][T12424] [ 488.545302][T12424] dump_stack_lvl+0x100/0x190 [ 488.545321][T12424] should_fail_ex.cold+0x5/0xa [ 488.545337][T12424] should_failslab+0xc2/0x120 [ 488.545362][T12424] __kmalloc_noprof+0xfc/0x840 [ 488.545378][T12424] ? __pfx_dynamic_dname+0x10/0x10 [ 488.545393][T12424] ? tomoyo_encode2+0xfb/0x3c0 [ 488.545412][T12424] tomoyo_encode2+0xfb/0x3c0 [ 488.545430][T12424] tomoyo_encode+0x29/0x50 [ 488.545445][T12424] tomoyo_realpath_from_path+0x18c/0x690 [ 488.545465][T12424] tomoyo_path_number_perm+0x23c/0x580 [ 488.545479][T12424] ? tomoyo_path_number_perm+0x22e/0x580 [ 488.545493][T12424] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 488.545506][T12424] ? futex_wait+0x11e/0x370 [ 488.545527][T12424] ? __lock_acquire+0x5c0/0x1f40 [ 488.545551][T12424] ? __fget_files+0x34/0x3d0 [ 488.545567][T12424] ? find_held_lock+0x2b/0x80 [ 488.545580][T12424] ? __fget_files+0x215/0x3d0 [ 488.545595][T12424] ? hook_file_ioctl_common+0x140/0x440 [ 488.545609][T12424] ? __fget_files+0x215/0x3d0 [ 488.545626][T12424] ? __fget_files+0x21f/0x3d0 [ 488.545644][T12424] security_file_ioctl_compat+0xd3/0x230 [ 488.545659][T12424] __ia32_compat_sys_ioctl+0xc2/0x360 [ 488.545675][T12424] __do_fast_syscall_32+0x13a/0x8b0 [ 488.545689][T12424] do_fast_syscall_32+0x32/0x70 [ 488.545702][T12424] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 488.545716][T12424] RIP: 0023:0xf742efec [ 488.545730][T12424] Code: Unable to access opcode bytes at 0xf742efc2. [ 488.545735][T12424] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 488.545775][T12424] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008933 [ 488.545789][T12424] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 488.545801][T12424] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 488.545813][T12424] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 488.545822][T12424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 488.545843][T12424] [ 488.545891][T12424] ERROR: Out of memory at tomoyo_realpath_from_path. [ 488.670971][T12434] netlink: 'syz.1.2047': attribute type 1 has an invalid length. [ 488.682286][T12434] 8021q: adding VLAN 0 to HW filter on device bond12 [ 488.870916][ T333] IPVS: starting estimator thread 0... [ 488.922165][T12462] netlink: 'syz.3.2058': attribute type 1 has an invalid length. [ 488.949108][T12462] 8021q: adding VLAN 0 to HW filter on device bond13 [ 488.956869][T12456] IPVS: using max 43 ests per chain, 103200 per kthread [ 489.004799][T12471] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2062'. [ 489.004819][T12471] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2062'. [ 489.067455][T12478] geneve3: entered allmulticast mode [ 489.083257][ T5616] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 489.083322][ T5616] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 489.083451][ T5616] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 489.083582][ T5616] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 489.102555][T12481] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.2066'. [ 489.102694][T12481] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 489.110062][T12481] FAULT_INJECTION: forcing a failure. [ 489.110062][T12481] name failslab, interval 1, probability 0, space 0, times 0 [ 489.110083][T12481] CPU: 2 UID: 0 PID: 12481 Comm: syz.1.2066 Not tainted syzkaller #0 PREEMPT(full) [ 489.110099][T12481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 489.110107][T12481] Call Trace: [ 489.110112][T12481] [ 489.110118][T12481] dump_stack_lvl+0x100/0x190 [ 489.110138][T12481] should_fail_ex.cold+0x5/0xa [ 489.110155][T12481] should_failslab+0xc2/0x120 [ 489.110175][T12481] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 489.110198][T12481] ? __alloc_skb+0x140/0x710 [ 489.110215][T12481] __alloc_skb+0x140/0x710 [ 489.110227][T12481] ? __alloc_skb+0x5b7/0x710 [ 489.110241][T12481] ? __pfx___alloc_skb+0x10/0x10 [ 489.110255][T12481] ? lock_acquire+0x1d1/0x380 [ 489.110272][T12481] ? ib_device_get_by_netdev+0x89/0x530 [ 489.110290][T12481] rtmsg_ifa+0x16a/0x270 [ 489.110305][T12481] ? __pfx_rtmsg_ifa+0x10/0x10 [ 489.110325][T12481] inetdev_event+0xd51/0x17f0 [ 489.110344][T12481] ? ib_netdevice_event+0xfc/0x330 [ 489.110358][T12481] ? __pfx_inetdev_event+0x10/0x10 [ 489.110374][T12481] ? cfg802154_netdev_notifier_call+0x17a/0xad0 [ 489.110387][T12481] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 489.110407][T12481] notifier_call_chain+0x99/0x3f0 [ 489.110421][T12481] ? __pfx___might_resched+0x10/0x10 [ 489.110438][T12481] call_netdevice_notifiers_info+0xbe/0x110 [ 489.110456][T12481] netif_change_name+0x4d9/0x830 [ 489.110472][T12481] ? __pfx_netif_change_name+0x10/0x10 [ 489.110485][T12481] ? __pfx_validate_linkmsg+0x10/0x10 [ 489.110501][T12481] ? __asan_memset+0x23/0x50 [ 489.110518][T12481] do_setlink.isra.0+0x31e4/0x3e60 [ 489.110537][T12481] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 489.110554][T12481] ? __lock_acquire+0x5c0/0x1f40 [ 489.110571][T12481] ? ___ratelimit+0x642/0xae0 [ 489.110588][T12481] ? find_held_lock+0x2b/0x80 [ 489.110601][T12481] ? ___ratelimit+0x77b/0xae0 [ 489.110621][T12481] ? lock_acquire+0x1d1/0x380 [ 489.110637][T12481] ? rtnl_setlink+0x4dd/0xac0 [ 489.110654][T12481] ? rcu_is_watching+0x13/0xc0 [ 489.110667][T12481] ? trace_contention_end+0x126/0x160 [ 489.110686][T12481] ? __mutex_lock+0x26c/0x1bd0 [ 489.110697][T12481] ? rtnl_setlink+0x4dd/0xac0 [ 489.110710][T12481] ? __nla_validate_parse+0x1e7/0x28b0 [ 489.110730][T12481] ? __pfx___mutex_lock+0x10/0x10 [ 489.110741][T12481] ? rcu_is_watching+0x13/0xc0 [ 489.110754][T12481] ? apparmor_capable+0x1d7/0x4d0 [ 489.110773][T12481] ? netlink_ns_capable+0xfa/0x130 [ 489.110792][T12481] rtnl_setlink+0x5fd/0xac0 [ 489.110809][T12481] ? __pfx_rtnl_setlink+0x10/0x10 [ 489.110823][T12481] ? __kasan_slab_free+0x5f/0x80 [ 489.110842][T12481] ? __dev_queue_xmit+0x1c25/0x4a40 [ 489.110852][T12481] ? netlink_deliver_tap+0xa4d/0xcc0 [ 489.110870][T12481] ? netlink_unicast+0x62b/0x850 [ 489.110881][T12481] ? netlink_sendmsg+0x8b0/0xda0 [ 489.110893][T12481] ? sock_write_iter+0x53a/0x5b0 [ 489.110932][T12481] ? __lock_acquire+0x5c0/0x1f40 [ 489.110951][T12481] ? find_held_lock+0x2b/0x80 [ 489.110967][T12481] ? lock_acquire+0x1d1/0x380 [ 489.110983][T12481] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 489.110998][T12481] ? find_held_lock+0x2b/0x80 [ 489.111011][T12481] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 489.111026][T12481] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 489.111042][T12481] ? __pfx_rtnl_setlink+0x10/0x10 [ 489.111057][T12481] rtnetlink_rcv_msg+0x95e/0xe90 [ 489.111079][T12481] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 489.111107][T12481] ? ref_tracker_free+0x37e/0x6c0 [ 489.111133][T12481] netlink_rcv_skb+0x159/0x420 [ 489.111152][T12481] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 489.111184][T12481] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 489.111218][T12481] ? netlink_deliver_tap+0x1ae/0xcc0 [ 489.111257][T12481] netlink_unicast+0x585/0x850 [ 489.111281][T12481] ? __pfx_netlink_unicast+0x10/0x10 [ 489.111298][T12481] ? __build_skb_around+0x278/0x390 [ 489.111327][T12481] ? is_vmalloc_addr+0x86/0xa0 [ 489.111352][T12481] netlink_sendmsg+0x8b0/0xda0 [ 489.111375][T12481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.111397][T12481] ? apparmor_socket_sendmsg+0x165/0x280 [ 489.111421][T12481] sock_write_iter+0x53a/0x5b0 [ 489.111445][T12481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.111464][T12481] ? __pfx_sock_write_iter+0x10/0x10 [ 489.111504][T12481] do_iter_readv_writev+0x6f7/0x930 [ 489.111530][T12481] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 489.111550][T12481] ? common_file_perm+0x266/0x500 [ 489.111575][T12481] ? bpf_lsm_file_permission+0x9/0x10 [ 489.111602][T12481] ? security_file_permission+0x76/0x210 [ 489.111628][T12481] ? rw_verify_area+0xce/0x6d0 [ 489.111651][T12481] vfs_writev+0x360/0xdd0 [ 489.111674][T12481] ? __lock_acquire+0x5c0/0x1f40 [ 489.111704][T12481] ? __pfx_vfs_writev+0x10/0x10 [ 489.111730][T12481] ? lock_acquire+0x1d1/0x380 [ 489.111755][T12481] ? __fget_files+0x34/0x3d0 [ 489.111786][T12481] ? __fget_files+0x21f/0x3d0 [ 489.111815][T12481] ? do_writev+0x28a/0x340 [ 489.111835][T12481] do_writev+0x28a/0x340 [ 489.111858][T12481] ? __pfx_do_writev+0x10/0x10 [ 489.111886][T12481] __do_fast_syscall_32+0x13a/0x8b0 [ 489.111909][T12481] do_fast_syscall_32+0x32/0x70 [ 489.111929][T12481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 489.111951][T12481] RIP: 0023:0xf744efec [ 489.111971][T12481] Code: Unable to access opcode bytes at 0xf744efc2. [ 489.111980][T12481] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 489.111999][T12481] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 489.112011][T12481] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 489.112023][T12481] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 489.112035][T12481] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 489.112046][T12481] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 489.112096][T12481] [ 489.114259][T12481] 0ªX¹¦Dö»: entered allmulticast mode [ 489.336618][T12495] netlink: 'syz.3.2070': attribute type 1 has an invalid length. [ 489.351003][T12495] 8021q: adding VLAN 0 to HW filter on device bond14 [ 489.930414][T12516] netlink: 'syz.2.2079': attribute type 1 has an invalid length. [ 489.943517][T12516] 8021q: adding VLAN 0 to HW filter on device bond10 [ 490.219618][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804efd2c00: rx timeout, send abort [ 490.219843][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88804efd2c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 490.304428][T12538] netlink: 'syz.2.2088': attribute type 1 has an invalid length. [ 490.318368][T12538] 8021q: adding VLAN 0 to HW filter on device bond11 [ 490.705977][T12562] netlink: 'syz.1.2097': attribute type 1 has an invalid length. [ 490.749274][T12562] 8021q: adding VLAN 0 to HW filter on device bond13 [ 490.851686][T12571] FAULT_INJECTION: forcing a failure. [ 490.851686][T12571] name failslab, interval 1, probability 0, space 0, times 0 [ 490.851716][T12571] CPU: 1 UID: 0 PID: 12571 Comm: syz.1.2101 Not tainted syzkaller #0 PREEMPT(full) [ 490.851734][T12571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 490.851745][T12571] Call Trace: [ 490.851752][T12571] [ 490.851765][T12571] dump_stack_lvl+0x100/0x190 [ 490.851797][T12571] should_fail_ex.cold+0x5/0xa [ 490.851823][T12571] should_failslab+0xc2/0x120 [ 490.851852][T12571] __kmalloc_noprof+0xfc/0x840 [ 490.851874][T12571] ? tomoyo_encode2+0xfb/0x3c0 [ 490.851903][T12571] tomoyo_encode2+0xfb/0x3c0 [ 490.851932][T12571] tomoyo_encode+0x29/0x50 [ 490.851955][T12571] tomoyo_realpath_from_path+0x18c/0x690 [ 490.851980][T12571] tomoyo_path_number_perm+0x23c/0x580 [ 490.852001][T12571] ? tomoyo_path_number_perm+0x22e/0x580 [ 490.852025][T12571] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 490.852055][T12571] ? d_splice_alias_ops+0x626/0x15b0 [ 490.852103][T12571] ? d_splice_alias_ops+0x626/0x15b0 [ 490.852137][T12571] ? kernfs_iop_lookup+0x234/0x2d0 [ 490.852165][T12571] ? current_check_access_path+0x262/0x420 [ 490.852192][T12571] ? __pfx_current_check_access_path+0x10/0x10 [ 490.852220][T12571] ? kernfs_iop_lookup+0x247/0x2d0 [ 490.852245][T12571] ? lookup_one_qstr_excl+0xaf/0x250 [ 490.852267][T12571] tomoyo_path_mkdir+0x9b/0xe0 [ 490.852295][T12571] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 490.852324][T12571] ? lock_acquire+0x1d1/0x380 [ 490.852346][T12571] security_path_mkdir+0x154/0x2e0 [ 490.852363][T12571] filename_mkdirat+0x168/0x5e0 [ 490.852386][T12571] ? __pfx_filename_mkdirat+0x10/0x10 [ 490.852412][T12571] ? strncpy_from_user+0x19d/0x2d0 [ 490.852436][T12571] ? do_getname+0x191/0x390 [ 490.852454][T12571] __ia32_sys_mkdirat+0x88/0xc0 [ 490.852478][T12571] __do_fast_syscall_32+0x13a/0x8b0 [ 490.852502][T12571] do_fast_syscall_32+0x32/0x70 [ 490.852521][T12571] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 490.852544][T12571] RIP: 0023:0xf744efec [ 490.852563][T12571] Code: Unable to access opcode bytes at 0xf744efc2. [ 490.852572][T12571] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 490.852587][T12571] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800003c0 [ 490.852599][T12571] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 490.852610][T12571] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 490.852623][T12571] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 490.852635][T12571] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 490.852662][T12571] [ 490.852682][T12571] ERROR: Out of memory at tomoyo_realpath_from_path. [ 490.916673][T12578] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2102'. [ 490.923196][T12578] syzkaller1: entered promiscuous mode [ 490.923215][T12578] syzkaller1: entered allmulticast mode [ 491.678985][T12590] 8021q: adding VLAN 0 to HW filter on device bond13 [ 491.777158][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2114'. [ 491.874540][T12604] tmpfs: Bad value for 'mpol' [ 492.272809][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802b24bc00: rx timeout, send abort [ 492.273167][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802b24bc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 492.329623][T12618] infiniband syz0: set active [ 492.329688][T12618] infiniband syz0: added bond0 [ 492.337880][T12618] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 492.337902][T12618] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 492.337925][T12618] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 492.352151][T12618] RDS/IB: syz0: added [ 492.352193][T12618] smc: adding ib device syz0 with port count 1 [ 492.352209][T12618] smc: ib device syz0 port 1 has no pnetid [ 492.867162][T12630] validate_nla: 1 callbacks suppressed [ 492.867177][T12630] netlink: 'syz.4.2121': attribute type 1 has an invalid length. [ 492.894341][T12630] 8021q: adding VLAN 0 to HW filter on device bond14 [ 493.285389][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2129'. [ 493.288952][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2129'. [ 493.341635][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 493.341682][ T43] audit: type=1800 audit(1792039495.837:499): pid=12656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2127" name=08 dev="sda1" ino=2040 res=0 errno=0 [ 493.399724][T12659] netlink: 'syz.4.2133': attribute type 1 has an invalid length. [ 493.418211][T12659] 8021q: adding VLAN 0 to HW filter on device bond15 [ 493.626427][T12667] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2132'. [ 493.709793][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2135'. [ 493.957110][T12685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2142'. [ 493.977438][T12687] netlink: 'syz.1.2143': attribute type 1 has an invalid length. [ 493.989916][T12687] 8021q: adding VLAN 0 to HW filter on device bond14 qemu-system-x86_64: vtd_iova_to_slpte: detected slpte permission error (iova=0xbe080000, level=0x1, slpte=0x5a810002, write=0, pasid=0xffffffff) qemu-system-x86_64: vtd_iommu_translate: detected translation failure (dev=00:1f:02, iova=0xbe080000) qemu-system-x86_64: New fault is not recorded due to compression of faults [ 494.037547][ C2] DMAR: DRHD: handling fault status reg 2 [ 494.040636][ C2] DMAR: [DMA Read NO_PASID] Request device [0000:00:1f.2] fault addr 0xbe080000 [fault reason 0x06] PTE Read access is not set [ 494.041369][T12696] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2145'. [ 494.044442][ C2] DMAR: [DMA Read NO_PASID] Request device [0000:00:1f.2] fault addr 0xbe086000 [fault reason 0x06] PTE Read access is not set [ 494.046385][ C2] DMAR: [DMA Read NO_PASID] Request device [0000:00:1f.2] fault addr 0xbe08c000 [fault reason 0x06] PTE Read access is not set [ 494.047160][ C2] DMAR: DRHD: handling fault status reg 2 [ 494.049151][ C2] DMAR: [DMA Read NO_PASID] Request device [0000:00:1f.2] fault addr 0xbe08f000 [fault reason 0x06] PTE Read access is not set [ 494.240508][ T43] audit: type=1326 audit(1792039496.737:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.4.2149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 494.240604][ T43] audit: type=1326 audit(1792039496.737:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.4.2149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 494.240768][ T43] audit: type=1326 audit(1792039496.737:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.4.2149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 494.240964][ T43] audit: type=1326 audit(1792039496.737:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.4.2149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 494.241098][ T43] audit: type=1326 audit(1792039496.737:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.4.2149" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf742efec code=0x7ffc0000 [ 494.241392][ T43] audit: type=1326 audit(1792039496.737:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.4.2149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 494.241650][ T43] audit: type=1326 audit(1792039496.737:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.4.2149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 494.241886][ T43] audit: type=1326 audit(1792039496.737:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.4.2149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 494.242076][ T43] audit: type=1326 audit(1792039496.737:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12704 comm="syz.4.2149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 494.286887][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2151'. [ 494.599860][ T9] input: syz0 as /devices/virtual/misc/uhid/0002:1B1C:0C10.0039/input/input121 [ 494.613793][ T9] hid-generic 0002:1B1C:0C10.0039: input,hidraw0: HID v0.00 Device [syz0] on syz0 [ 495.112758][T12734] fido_id[12734]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 495.164344][T12741] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2158'. [ 495.178144][T12745] netlink: 'syz.4.2161': attribute type 1 has an invalid length. [ 495.200502][T12745] 8021q: adding VLAN 0 to HW filter on device bond16 [ 495.945111][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2168'. [ 496.100399][T12771] netlink: 'syz.1.2170': attribute type 1 has an invalid length. [ 496.120333][T12771] 8021q: adding VLAN 0 to HW filter on device bond15 [ 497.304491][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 497.504020][ T5616] tipc: Subscription rejected, illegal request [ 497.884696][T12840] syzkaller0: entered promiscuous mode [ 497.884710][T12840] syzkaller0: entered allmulticast mode [ 497.887490][T12840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.887500][T12840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.896057][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.898870][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.504835][T12860] __nla_validate_parse: 1 callbacks suppressed [ 498.504847][T12860] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2205'. [ 498.652736][T12878] FAULT_INJECTION: forcing a failure. [ 498.652736][T12878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.652778][T12878] CPU: 0 UID: 0 PID: 12878 Comm: syz.2.2211 Not tainted syzkaller #0 PREEMPT(full) [ 498.652801][T12878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 498.652813][T12878] Call Trace: [ 498.652821][T12878] [ 498.652831][T12878] dump_stack_lvl+0x100/0x190 [ 498.652862][T12878] should_fail_ex.cold+0x5/0xa [ 498.652888][T12878] _copy_to_user+0x32/0xd0 [ 498.652910][T12878] bpf_mprog_query+0x1fb/0x800 [ 498.652937][T12878] ? __pfx___mutex_lock+0x10/0x10 [ 498.652957][T12878] ? lock_acquire+0x1d1/0x380 [ 498.652991][T12878] ? __pfx_bpf_mprog_query+0x10/0x10 [ 498.653031][T12878] tcx_prog_query+0x169/0x370 [ 498.653055][T12878] __sys_bpf+0x3124/0x4a30 [ 498.653086][T12878] ? __pfx___sys_bpf+0x10/0x10 [ 498.653107][T12878] ? find_held_lock+0x2b/0x80 [ 498.653129][T12878] ? futex_wake+0x4ea/0x5e0 [ 498.653183][T12878] ? rcu_read_lock_any_held+0x6a/0x90 [ 498.653209][T12878] ? find_held_lock+0x2b/0x80 [ 498.653234][T12878] ? ksys_write+0x190/0x250 [ 498.653260][T12878] ? ksys_write+0x190/0x250 [ 498.653305][T12878] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 498.653333][T12878] ? xfd_validate_state+0x129/0x190 [ 498.653370][T12878] ? __ia32_sys_bpf+0xcc/0x170 [ 498.653393][T12878] __ia32_sys_bpf+0xcc/0x170 [ 498.653418][T12878] ? __do_fast_syscall_32+0xb3/0x8b0 [ 498.653441][T12878] __do_fast_syscall_32+0x13a/0x8b0 [ 498.653466][T12878] do_fast_syscall_32+0x32/0x70 [ 498.653488][T12878] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 498.653513][T12878] RIP: 0023:0xf747efec [ 498.653533][T12878] Code: Unable to access opcode bytes at 0xf747efc2. [ 498.653543][T12878] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 498.653563][T12878] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000800018c0 [ 498.653576][T12878] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 498.653588][T12878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 498.653600][T12878] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 498.653612][T12878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 498.653637][T12878] [ 498.912891][T12887] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2215'. [ 498.914029][T12887] netlink: 'syz.4.2215': attribute type 1 has an invalid length. [ 498.936456][T12887] 8021q: adding VLAN 0 to HW filter on device bond17 [ 499.271105][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'. [ 499.271267][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'. [ 499.282011][T12906] netlink: 'syz.1.2224': attribute type 1 has an invalid length. [ 499.307792][T12906] 8021q: adding VLAN 0 to HW filter on device bond16 [ 499.319366][T12909] syzkaller0: entered promiscuous mode [ 499.319387][T12909] syzkaller0: entered allmulticast mode [ 499.478268][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'. [ 499.633730][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 499.633779][ T43] audit: type=1326 audit(1792039502.137:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12921 comm="syz.4.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 499.633862][ T43] audit: type=1326 audit(1792039502.137:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12921 comm="syz.4.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 499.635652][ T43] audit: type=1326 audit(1792039502.137:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12921 comm="syz.4.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 499.635890][ T43] audit: type=1326 audit(1792039502.137:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12921 comm="syz.4.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 499.636186][ T43] audit: type=1326 audit(1792039502.137:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12921 comm="syz.4.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf742efec code=0x7ffc0000 [ 499.636318][ T43] audit: type=1326 audit(1792039502.137:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12921 comm="syz.4.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 499.636482][ T43] audit: type=1326 audit(1792039502.137:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12921 comm="syz.4.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 499.638407][ T43] audit: type=1326 audit(1792039502.137:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12921 comm="syz.4.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 499.638579][ T43] audit: type=1326 audit(1792039502.137:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12921 comm="syz.4.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 499.638803][ T43] audit: type=1326 audit(1792039502.137:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12921 comm="syz.4.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf742efec code=0x7ffc0000 [ 499.669176][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2231'. [ 499.694342][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'. [ 499.694359][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'. [ 499.701460][T12926] netlink: 'syz.1.2233': attribute type 1 has an invalid length. [ 499.719113][T12926] 8021q: adding VLAN 0 to HW filter on device bond17 [ 499.760667][T12929] syzkaller1: entered promiscuous mode [ 499.760683][T12929] syzkaller1: entered allmulticast mode [ 499.976392][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2241'. [ 500.205616][T12957] syzkaller1: entered promiscuous mode [ 500.205639][T12957] syzkaller1: entered allmulticast mode [ 500.295721][T12959] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 500.375895][T12967] netlink: 'syz.2.2250': attribute type 1 has an invalid length. [ 500.395563][T12967] 8021q: adding VLAN 0 to HW filter on device bond12 [ 500.753705][T12984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 501.921608][T13029] syzkaller1: entered promiscuous mode [ 501.921623][T13029] syzkaller1: entered allmulticast mode [ 502.452723][T13059] syzkaller1: entered promiscuous mode [ 502.452738][T13059] syzkaller1: entered allmulticast mode [ 502.866684][T13084] netlink: 'syz.4.2298': attribute type 1 has an invalid length. [ 503.063917][T13084] 8021q: adding VLAN 0 to HW filter on device bond18 [ 503.131834][T13088] syzkaller1: entered promiscuous mode [ 503.131856][T13088] syzkaller1: entered allmulticast mode [ 503.443940][T13111] sg_write: data in/out 19942/1 bytes for SCSI command 0x32-- guessing data in; [ 503.443940][T13111] program syz.2.2308 not setting count and/or reply_len properly [ 503.934942][T13124] 8021q: adding VLAN 0 to HW filter on device bond18 [ 503.939178][T13124] __nla_validate_parse: 5 callbacks suppressed [ 503.939196][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2312'. [ 503.939211][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2312'. [ 504.225400][T13138] netlink: 'syz.2.2318': attribute type 1 has an invalid length. [ 504.244711][T13138] 8021q: adding VLAN 0 to HW filter on device bond13 [ 504.961739][ T45] kernel read not supported for file /vcs (pid: 45 comm: kworker/2:1) [ 505.369480][T13169] netlink: 'syz.4.2330': attribute type 1 has an invalid length. [ 505.398644][T13169] 8021q: adding VLAN 0 to HW filter on device bond19 [ 505.727018][T13177] FAULT_INJECTION: forcing a failure. [ 505.727018][T13177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.727039][T13177] CPU: 2 UID: 0 PID: 13177 Comm: syz.3.2335 Not tainted syzkaller #0 PREEMPT(full) [ 505.727053][T13177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 505.727061][T13177] Call Trace: [ 505.727065][T13177] [ 505.727070][T13177] dump_stack_lvl+0x100/0x190 [ 505.727090][T13177] should_fail_ex.cold+0x5/0xa [ 505.727107][T13177] _copy_from_user+0x2e/0xd0 [ 505.727120][T13177] bpf_prog_load+0x14b6/0x2ab0 [ 505.727143][T13177] ? __pfx_bpf_prog_load+0x10/0x10 [ 505.727161][T13177] ? lock_acquire+0x1d1/0x380 [ 505.727198][T13177] __sys_bpf+0x1f46/0x4a30 [ 505.727217][T13177] ? __pfx___sys_bpf+0x10/0x10 [ 505.727231][T13177] ? find_held_lock+0x2b/0x80 [ 505.727245][T13177] ? futex_wake+0x4ea/0x5e0 [ 505.727275][T13177] ? rcu_read_lock_any_held+0x6a/0x90 [ 505.727309][T13177] ? find_held_lock+0x2b/0x80 [ 505.727323][T13177] ? ksys_write+0x190/0x250 [ 505.727339][T13177] ? ksys_write+0x190/0x250 [ 505.727363][T13177] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 505.727381][T13177] ? xfd_validate_state+0x129/0x190 [ 505.727403][T13177] ? __ia32_sys_bpf+0xcc/0x170 [ 505.727417][T13177] __ia32_sys_bpf+0xcc/0x170 [ 505.727433][T13177] ? __do_fast_syscall_32+0xb3/0x8b0 [ 505.727446][T13177] __do_fast_syscall_32+0x13a/0x8b0 [ 505.727460][T13177] do_fast_syscall_32+0x32/0x70 [ 505.727471][T13177] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.727486][T13177] RIP: 0023:0xf7f36fec [ 505.727500][T13177] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 505.727506][T13177] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 505.727534][T13177] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 505.727542][T13177] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 505.727549][T13177] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 505.727556][T13177] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 505.727563][T13177] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 505.727578][T13177] [ 506.288067][T13193] syzkaller1: entered promiscuous mode [ 506.288083][T13193] syzkaller1: entered allmulticast mode [ 506.461396][ T5763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 506.465079][ T5763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 506.467344][ T5763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 506.469800][ T5763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 506.470110][ T5763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 506.492598][T13202] netlink: 'syz.3.2341': attribute type 1 has an invalid length. [ 506.520845][T13202] 8021q: adding VLAN 0 to HW filter on device bond15 [ 506.813903][T13224] usbip-vudc usbip-vudc.0: gadget not bound [ 506.858881][T13198] rxe_eth0 speed is unknown, defaulting to 1000 [ 506.900250][T13231] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2349'. [ 506.901549][T13231] syzkaller1: entered promiscuous mode [ 506.901561][T13231] syzkaller1: entered allmulticast mode [ 507.049008][T13083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.049030][T13083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 507.137774][T13083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.137808][T13083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 507.210967][T13083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.210990][T13083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 507.324999][T13083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.325022][T13083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 507.386971][T13198] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.387047][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.387102][T13198] bridge_slave_0: entered allmulticast mode [ 507.387871][T13198] bridge_slave_0: entered promiscuous mode [ 507.389986][T13198] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.390089][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.390142][T13198] bridge_slave_1: entered allmulticast mode [ 507.390836][T13198] bridge_slave_1: entered promiscuous mode [ 507.408621][T13198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.410102][T13198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.422984][T13198] team0: Port device team_slave_0 added [ 507.425003][T13198] team0: Port device team_slave_1 added [ 507.443600][T13198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.443611][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.443625][T13198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.478424][T13198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.478435][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.478450][T13198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.561857][T13198] hsr_slave_0: entered promiscuous mode [ 507.562319][T13198] hsr_slave_1: entered promiscuous mode [ 507.562621][T13198] debugfs: 'hsr0' already exists in 'hsr' [ 507.562633][T13198] Cannot create hsr debugfs directory [ 507.618296][T13083] bridge_slave_1: left allmulticast mode [ 507.618324][T13083] bridge_slave_1: left promiscuous mode [ 507.618519][T13083] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.620570][T13083] bridge_slave_0: left allmulticast mode [ 507.620590][T13083] bridge_slave_0: left promiscuous mode [ 507.621133][T13083] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.730091][T13262] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2358'. [ 507.812111][ T37] smc: removing ib device syz0 [ 507.824501][T13083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.824972][T13083] bond_slave_0: left promiscuous mode [ 507.872299][T13083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.880065][T13083] bond_slave_1: left promiscuous mode [ 507.880601][T13083] bond0 (unregistering): Released all slaves [ 507.885717][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.885745][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.897836][T13083] bond1 (unregistering): Released all slaves [ 507.908010][T13083] bond2 (unregistering): Released all slaves [ 507.918881][T13083] bond3 (unregistering): Released all slaves [ 507.930361][T13083] bond4 (unregistering): Released all slaves [ 507.940605][T13083] bond5 (unregistering): Released all slaves [ 507.951684][T13083] bond6 (unregistering): Released all slaves [ 507.965944][T13083] bond7 (unregistering): Released all slaves [ 507.978852][T13083] bond8 (unregistering): Released all slaves [ 507.989870][T13083] bond9 (unregistering): Released all slaves [ 508.003930][T13083] bond10 (unregistering): Released all slaves [ 508.020462][T13083] bond11 (unregistering): Released all slaves [ 508.028523][T13083] bond12 (unregistering): Released all slaves [ 508.034513][T13083] bond13 (unregistering): Released all slaves [ 508.044225][T13083] bond14 (unregistering): Released all slaves [ 508.054462][T13083] bond15 (unregistering): Released all slaves [ 508.059830][T13083] bond16 (unregistering): Released all slaves [ 508.067151][T13083] bond17 (unregistering): Released all slaves [ 508.072523][T13083] bond18 (unregistering): Released all slaves [ 508.111905][T13265] syzkaller1: entered promiscuous mode [ 508.111921][T13265] syzkaller1: entered allmulticast mode [ 508.163891][T13278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2361'. [ 508.203282][ T37] smbdirect: ib_dev[syz0] removed [ 508.522955][ T5763] Bluetooth: hci2: command tx timeout [ 508.607482][T13296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2369'. [ 508.655295][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 508.655314][ T43] audit: type=1326 audit(1792039511.147:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13297 comm="syz.3.2370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 508.655358][ T43] audit: type=1326 audit(1792039511.147:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13297 comm="syz.3.2370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 508.655398][ T43] audit: type=1326 audit(1792039511.147:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13297 comm="syz.3.2370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 508.655438][ T43] audit: type=1326 audit(1792039511.147:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13297 comm="syz.3.2370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 508.655478][ T43] audit: type=1326 audit(1792039511.157:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13297 comm="syz.3.2370" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 508.655516][ T43] audit: type=1326 audit(1792039511.157:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13297 comm="syz.3.2370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 508.655555][ T43] audit: type=1326 audit(1792039511.157:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13297 comm="syz.3.2370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 508.655595][ T43] audit: type=1326 audit(1792039511.157:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13297 comm="syz.3.2370" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 508.655635][ T43] audit: type=1326 audit(1792039511.157:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13297 comm="syz.3.2370" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f36fec code=0x7ffc0000 [ 509.334504][T13317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2377'. [ 509.509086][ T5452] 8021q: adding VLAN 0 to HW filter on device eth7 [ 509.877958][T13198] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 510.067362][T13198] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.068121][T13198] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 510.104830][T13198] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.105652][T13198] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 510.147172][T13198] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 510.238286][T13198] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 510.470166][T13198] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.527639][ T111] IPVS: starting estimator thread 0... [ 510.612959][ T5763] Bluetooth: hci2: command tx timeout [ 510.632933][T13363] IPVS: using max 28 ests per chain, 67200 per kthread [ 510.874653][T13368] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2393'. [ 510.875462][T13368] syzkaller1: entered promiscuous mode [ 510.875477][T13368] syzkaller1: entered allmulticast mode [ 510.999888][T13198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.012498][T13198] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.017917][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.018000][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.031043][T13198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 511.031058][T13198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 511.038221][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.038273][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.191130][T13083] hsr_slave_0: left promiscuous mode [ 511.191550][T13083] hsr_slave_1: left promiscuous mode [ 511.198316][T13083] veth1_macvtap: left promiscuous mode [ 511.198352][T13083] veth0_macvtap: left promiscuous mode [ 511.198425][T13083] veth1_vlan: left promiscuous mode [ 511.198475][T13083] veth0_vlan: left promiscuous mode [ 511.355158][T13405] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2402'. [ 511.426129][T13083] team0 (unregistering): Port device team_slave_1 removed [ 511.433196][T13083] team0 (unregistering): Port device team_slave_0 removed [ 511.553167][T13408] syzkaller1: entered promiscuous mode [ 511.553190][T13408] syzkaller1: entered allmulticast mode [ 511.669429][ T5925] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 511.674596][ T5925] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 511.785985][T13416] fido_id[13416]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 511.899074][T13423] netlink: 'syz.3.2411': attribute type 1 has an invalid length. [ 511.959081][T13423] 8021q: adding VLAN 0 to HW filter on device bond16 [ 512.408275][T13439] FAULT_INJECTION: forcing a failure. [ 512.408275][T13439] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 512.408308][T13439] CPU: 2 UID: 0 PID: 13439 Comm: syz.3.2415 Not tainted syzkaller #0 PREEMPT(full) [ 512.408330][T13439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 512.408343][T13439] Call Trace: [ 512.408351][T13439] [ 512.408360][T13439] dump_stack_lvl+0x100/0x190 [ 512.408394][T13439] should_fail_ex.cold+0x5/0xa [ 512.408418][T13439] ? prepare_alloc_pages+0x16d/0x5b0 [ 512.408457][T13439] should_fail_alloc_page+0xeb/0x140 [ 512.408491][T13439] prepare_alloc_pages+0x1f0/0x5b0 [ 512.408524][T13439] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 512.408549][T13439] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 512.408579][T13439] ? is_bpf_text_address+0x94/0x1a0 [ 512.408625][T13439] ? kernel_text_address+0x8d/0x100 [ 512.408652][T13439] ? __kernel_text_address+0xd/0x30 [ 512.408679][T13439] ? unwind_get_return_address+0x59/0xa0 [ 512.408707][T13439] ? arch_stack_walk+0xa6/0xf0 [ 512.408735][T13439] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 512.408760][T13439] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 512.408788][T13439] ? mas_next_node+0x29c/0x1020 [ 512.408809][T13439] ? stack_trace_save+0x8e/0xc0 [ 512.408842][T13439] ? look_up_lock_class+0x55/0x120 [ 512.408871][T13439] ? mt_validate_nulls+0x22f/0xae0 [ 512.408896][T13439] ? __lock_acquire+0x5c0/0x1f40 [ 512.408931][T13439] ? __lock_acquire+0x5c0/0x1f40 [ 512.408960][T13439] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 512.408993][T13439] ? policy_nodemask+0xed/0x4f0 [ 512.409032][T13439] alloc_pages_mpol+0x201/0x550 [ 512.409056][T13439] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 512.409089][T13439] ? find_held_lock+0x2b/0x80 [ 512.409113][T13439] ? __pud_alloc+0x4f6/0x690 [ 512.409143][T13439] ? __pud_alloc+0x4f6/0x690 [ 512.409174][T13439] alloc_pages_noprof+0x1a/0x160 [ 512.409198][T13439] __pmd_alloc+0x3b/0x950 [ 512.409226][T13439] ? __pud_alloc+0x4fb/0x690 [ 512.409256][T13439] __handle_mm_fault+0xa9d/0x2f60 [ 512.409285][T13439] ? __pfx___handle_mm_fault+0x10/0x10 [ 512.409305][T13439] ? __pfx_mt_find+0x10/0x10 [ 512.409349][T13439] handle_mm_fault+0x363/0xa20 [ 512.409378][T13439] __get_user_pages+0x8ae/0x2c30 [ 512.409416][T13439] ? __pfx___get_user_pages+0x10/0x10 [ 512.409445][T13439] ? lock_acquire+0x1d1/0x380 [ 512.409473][T13439] ? mmap_read_lock_maybe_expand+0x1e2/0x3d0 [ 512.409513][T13439] get_user_pages_remote+0x3d2/0xb10 [ 512.409545][T13439] ? __pfx_get_user_pages_remote+0x10/0x10 [ 512.409581][T13439] get_arg_page+0xf4/0x310 [ 512.409604][T13439] ? __pfx_get_arg_page+0x10/0x10 [ 512.409626][T13439] ? do_raw_spin_lock+0x128/0x260 [ 512.409647][T13439] ? alloc_bprm+0x54e/0x9e0 [ 512.409670][T13439] ? alloc_bprm+0x54e/0x9e0 [ 512.409692][T13439] copy_string_kernel+0x17d/0x3f0 [ 512.409717][T13439] ? alloc_bprm+0x596/0x9e0 [ 512.409743][T13439] do_execveat_common.isra.0+0x2e6/0x580 [ 512.409775][T13439] __ia32_compat_sys_execveat+0xe4/0x130 [ 512.409803][T13439] __do_fast_syscall_32+0x13a/0x8b0 [ 512.409829][T13439] do_fast_syscall_32+0x32/0x70 [ 512.409851][T13439] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.409876][T13439] RIP: 0023:0xf7f36fec [ 512.409899][T13439] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 512.409909][T13439] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000166 [ 512.409931][T13439] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 512.409943][T13439] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 512.409954][T13439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 512.409966][T13439] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 512.409980][T13439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 512.410007][T13439] [ 512.521151][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 512.541634][T13198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.588962][T13198] veth0_vlan: entered promiscuous mode [ 512.592690][T13198] veth1_vlan: entered promiscuous mode [ 512.608632][T13198] veth0_macvtap: entered promiscuous mode [ 512.642075][T13448] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2418'. [ 512.649325][T13198] veth1_macvtap: entered promiscuous mode [ 512.654614][T13448] syzkaller1: entered promiscuous mode [ 512.654628][T13448] syzkaller1: entered allmulticast mode [ 512.682942][ T5763] Bluetooth: hci2: command tx timeout [ 512.705448][T13198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.729709][T13198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.913685][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.925244][ T5616] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.925283][ T5616] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.925313][ T5616] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.989284][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.989298][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.011410][T13455] process '/newroot/464/file0' started with executable stack [ 513.056325][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.056339][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.124832][T13460] netlink: 'syz.3.2422': attribute type 1 has an invalid length. [ 513.146777][T13460] 8021q: adding VLAN 0 to HW filter on device bond17 [ 513.245740][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2425'. [ 513.331694][ T5761] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 513.339055][ T5761] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 513.347305][ T5761] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 513.355070][ T5761] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 513.355760][ T5761] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 513.692464][T13493] netlink: 'syz.2.2434': attribute type 1 has an invalid length. [ 513.696932][T10604] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.819061][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2436'. [ 513.834809][T10604] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.864322][T13474] rxe_eth0 speed is unknown, defaulting to 1000 [ 513.948130][T10604] bond0: (slave netdevsim1): Releasing backup interface [ 513.967379][T10604] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.170592][T10604] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.437590][T10604] bridge_slave_1: left allmulticast mode [ 514.437607][T10604] bridge_slave_1: left promiscuous mode [ 514.437705][T10604] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.440310][T10604] bridge_slave_0: left allmulticast mode [ 514.440330][T10604] bridge_slave_0: left promiscuous mode [ 514.440476][T10604] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.545807][ C2] vxcan0: j1939_tp_rxtimer: 0xffff88801484c000: rx timeout, send abort [ 514.545979][ C2] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801484c000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 514.589116][T10604] bond1 (unregistering): (slave geneve2): Releasing active interface [ 514.609210][T10604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.611724][T10604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.612749][T10604] bond0 (unregistering): Released all slaves [ 514.619221][T10604] bond1 (unregistering): Released all slaves [ 514.623871][T13520] netlink: 'syz.1.2442': attribute type 1 has an invalid length. [ 514.625196][T10604] bond2 (unregistering): Released all slaves [ 514.630492][T10604] bond3 (unregistering): Released all slaves [ 514.638097][T10604] bond4 (unregistering): Released all slaves [ 514.645684][T10604] bond5 (unregistering): Released all slaves [ 514.651664][T10604] bond6 (unregistering): Released all slaves [ 514.657696][T10604] bond7 (unregistering): Released all slaves [ 514.663055][T10604] bond8 (unregistering): Released all slaves [ 514.668681][T10604] bond9 (unregistering): Released all slaves [ 514.674584][T10604] bond10 (unregistering): Released all slaves [ 514.682101][T10604] bond11 (unregistering): Released all slaves [ 514.691006][T10604] bond12 (unregistering): Released all slaves [ 514.696983][T10604] bond13 (unregistering): Released all slaves [ 514.707595][T10604] bond14 (unregistering): Released all slaves [ 514.712964][T10604] bond15 (unregistering): Released all slaves [ 514.718299][T10604] bond16 (unregistering): Released all slaves [ 514.725712][T10604] bond17 (unregistering): Released all slaves [ 514.763530][ T5763] Bluetooth: hci2: command tx timeout [ 514.854519][T13474] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.854633][T13474] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.854690][T13474] bridge_slave_0: entered allmulticast mode [ 514.855528][T13474] bridge_slave_0: entered promiscuous mode [ 514.869942][T13474] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.870059][T13474] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.870150][T13474] bridge_slave_1: entered allmulticast mode [ 514.871432][T13474] bridge_slave_1: entered promiscuous mode [ 514.892312][T10604] tipc: Left network mode [ 514.909918][T13474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.912577][T13474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.939238][T13474] team0: Port device team_slave_0 added [ 514.940473][T13474] team0: Port device team_slave_1 added [ 514.958555][T13474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.958566][T13474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.958580][T13474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.959379][T13474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.959387][T13474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.959400][T13474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.046450][T13474] hsr_slave_0: entered promiscuous mode [ 515.047059][T13474] hsr_slave_1: entered promiscuous mode [ 515.047452][T13474] debugfs: 'hsr0' already exists in 'hsr' [ 515.047465][T13474] Cannot create hsr debugfs directory [ 515.244519][ T5452] 8021q: adding VLAN 0 to HW filter on device eth7 [ 515.402999][ T5763] Bluetooth: hci1: command tx timeout [ 515.405613][T10604] hsr_slave_0: left promiscuous mode [ 515.406044][T10604] hsr_slave_1: left promiscuous mode [ 515.406420][T10604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.406431][T10604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.406883][T10604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.406893][T10604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.411089][T10604] veth1_macvtap: left promiscuous mode [ 515.411125][T10604] veth0_macvtap: left promiscuous mode [ 515.411199][T10604] veth1_vlan: left promiscuous mode [ 515.411224][T10604] veth0_vlan: left promiscuous mode [ 515.576089][T10604] team0 (unregistering): Port device team_slave_1 removed [ 515.594667][T10604] team0 (unregistering): Port device team_slave_0 removed [ 515.680286][ T5452] 8021q: adding VLAN 0 to HW filter on device eth8 [ 515.976511][T10604] IPVS: stop unused estimator thread 0... [ 516.124252][T13474] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 516.126527][T13474] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 516.127252][T13474] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 516.128765][T13474] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 516.129287][T13474] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 516.130903][T13474] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 516.131401][T13474] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 516.133541][T13474] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 516.180246][T13474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.196645][T13474] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.200523][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.200614][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.212914][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.212961][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.458281][T13474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.479174][T13474] veth0_vlan: entered promiscuous mode [ 516.484344][T13474] veth1_vlan: entered promiscuous mode [ 516.497906][T13474] veth0_macvtap: entered promiscuous mode [ 516.500191][T13474] veth1_macvtap: entered promiscuous mode [ 516.508795][T13474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.516201][T13474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.582287][ T333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.582300][ T333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.613267][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.614599][ T333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.614614][ T333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.635078][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.636515][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.636707][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.706712][T13576] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2426'. [ 516.709719][T13576] syzkaller1: entered promiscuous mode [ 516.709738][T13576] syzkaller1: entered allmulticast mode [ 516.800717][ T5761] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 516.802402][ T5761] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 516.809912][ T5761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 516.815080][ T5761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 516.816609][ T5761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 517.134821][T13577] rxe_eth0 speed is unknown, defaulting to 1000 [ 517.234476][T13606] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2455'. [ 517.234926][T13606] syzkaller1: entered promiscuous mode [ 517.234937][T13606] syzkaller1: entered allmulticast mode [ 517.314627][T13612] binfmt_misc: register: failed to install interpreter ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 517.424553][T13577] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.424678][T13577] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.424771][T13577] bridge_slave_0: entered allmulticast mode [ 517.425685][T13577] bridge_slave_0: entered promiscuous mode [ 517.427755][T13577] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.427869][T13577] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.428014][T13577] bridge_slave_1: entered allmulticast mode [ 517.429270][T13577] bridge_slave_1: entered promiscuous mode [ 517.451700][T13577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.454981][T13577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.479290][T13577] team0: Port device team_slave_0 added [ 517.481465][T13577] team0: Port device team_slave_1 added [ 517.482877][ T5763] Bluetooth: hci1: command tx timeout [ 517.506250][T13577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.506267][T13577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.506287][T13577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.507792][T13577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.507804][T13577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.507826][T13577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.540373][T13577] hsr_slave_0: entered promiscuous mode [ 517.541089][T13577] hsr_slave_1: entered promiscuous mode [ 517.541608][T13577] debugfs: 'hsr0' already exists in 'hsr' [ 517.541627][T13577] Cannot create hsr debugfs directory [ 517.664918][T13577] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.756357][T13577] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.839365][T13577] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.921875][T13577] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.951804][T13635] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 518.239855][T13577] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 518.250632][T13577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 518.251112][T13577] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 518.252719][T13577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 518.254574][T13577] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 518.264424][T13577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 518.267244][T13577] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 518.276472][T13577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.319619][T13577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.327775][T13577] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.330943][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.331028][ T9595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.336088][ T9595] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.336187][ T9595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.688695][T13577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.720180][T13577] veth0_vlan: entered promiscuous mode [ 518.725233][T13577] veth1_vlan: entered promiscuous mode [ 518.757413][T13577] veth0_macvtap: entered promiscuous mode [ 518.759749][T13577] veth1_macvtap: entered promiscuous mode [ 518.769435][T13577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.775535][T13577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.793753][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.793854][T11483] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.793886][T11483] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.793916][T11483] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.864983][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.864996][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.874396][ T9595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.874415][ T9595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.923019][ T5763] Bluetooth: hci0: command tx timeout [ 518.931526][T13683] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2477'. [ 518.932306][T13683] syzkaller1: entered promiscuous mode [ 518.932322][T13683] syzkaller1: entered allmulticast mode [ 519.347021][T13714] sg_write: data in/out 417756/136 bytes for SCSI command 0x0-- guessing data in; [ 519.347021][T13714] program syz.4.2492 not setting count and/or reply_len properly [ 519.385828][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2494'. [ 519.385848][T13718] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2494'. [ 519.562881][ T5763] Bluetooth: hci1: command tx timeout [ 519.568404][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2500'. [ 519.569232][T13732] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2500'. [ 519.569244][T13732] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2500'. [ 519.726296][ T43] audit: type=1804 audit(1792039522.227:553): pid=13736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2501" name="/newroot/488/trace/events/dwc3/dwc3_ctrl_req/inject" dev="tracefs" ino=19680823 res=1 errno=0 [ 520.127685][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2508'. [ 520.127707][T13751] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2508'. [ 520.394933][T13768] syzkaller1: entered promiscuous mode [ 520.394949][T13768] syzkaller1: entered allmulticast mode [ 521.012882][ T5763] Bluetooth: hci0: command tx timeout [ 521.529896][T13793] syzkaller1: entered promiscuous mode [ 521.529915][T13793] syzkaller1: entered allmulticast mode [ 521.643620][ T5763] Bluetooth: hci1: command tx timeout [ 521.690966][ T43] audit: type=1326 audit(1792039524.187:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.4.2530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 521.691029][ T43] audit: type=1326 audit(1792039524.187:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.4.2530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 521.691994][ T43] audit: type=1326 audit(1792039524.187:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.4.2530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 521.692074][ T43] audit: type=1326 audit(1792039524.187:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.4.2530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 521.692213][ T43] audit: type=1326 audit(1792039524.187:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.4.2530" exe="/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf742efec code=0x7ffc0000 [ 521.692287][ T43] audit: type=1326 audit(1792039524.187:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.4.2530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 521.692361][ T43] audit: type=1326 audit(1792039524.187:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.4.2530" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742efec code=0x7ffc0000 [ 521.692578][ T43] audit: type=1326 audit(1792039524.187:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.4.2530" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf742efec code=0x7ffc0000 [ 521.692634][ T43] audit: type=1326 audit(1792039524.187:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13801 comm="syz.4.2530" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf742efec code=0x7ffc0000 [ 521.737409][T13804] __nla_validate_parse: 3 callbacks suppressed [ 521.737422][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 521.737437][T13804] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2531'. [ 521.870454][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888061c99400: rx timeout, send abort [ 521.870616][ C3] vxcan0: j1939_xtp_rx_abort_one: 0xffff888061c99400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 522.018908][T13817] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2537'. [ 522.019574][T13817] syzkaller1: entered promiscuous mode [ 522.019586][T13817] syzkaller1: entered allmulticast mode [ 522.270432][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2540'. [ 522.270454][T13826] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2540'. [ 522.622021][T13843] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2548'. [ 522.622678][T13843] syzkaller1: entered promiscuous mode [ 522.622691][T13843] syzkaller1: entered allmulticast mode [ 522.687133][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2550'. [ 522.687154][T13847] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2550'. [ 522.834355][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2563'. [ 522.834378][T13857] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2563'. [ 522.950743][T13867] syzkaller1: entered promiscuous mode [ 522.950763][T13867] syzkaller1: entered allmulticast mode [ 522.962444][T13869] Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! [ 523.092919][ T5763] Bluetooth: hci0: command tx timeout [ 523.461040][T13895] syzkaller1: entered promiscuous mode [ 523.461061][T13895] syzkaller1: entered allmulticast mode [ 523.698189][T13910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 523.700951][T13910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 523.701044][T13910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 523.701118][T13910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 523.701191][T13910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 523.701263][T13910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 523.701335][T13910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 523.701457][T13910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 523.701538][T13910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 523.701617][T13910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 523.753176][ T8758] ------------[ cut here ]------------ [ 523.753190][ T8758] DEBUG_LOCKS_WARN_ON(l->owner) [ 523.753198][ T8758] WARNING: ./include/linux/local_lock_internal.h:47 at gro_cell_poll+0x5aa/0x6c0, CPU#0: napi/gre0-0/8758 [ 523.762234][ T8758] Modules linked in: [ 523.764145][ T8758] CPU: 0 UID: 0 PID: 8758 Comm: napi/gre0-0 Not tainted syzkaller #0 PREEMPT(full) [ 523.768152][ T8758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 523.772385][ T8758] RIP: 0010:gro_cell_poll+0x5b1/0x6c0 [ 523.774787][ T8758] Code: 8d 3d c3 3a 99 08 48 c7 c6 c0 08 3d 8d 67 48 0f b9 3a e9 59 fe ff ff e8 3d 54 50 f8 48 8d 3d b6 3a 99 08 48 c7 c6 80 08 3d 8d <67> 48 0f b9 3a eb be 31 db e9 88 fd ff ff 48 8b 7c 24 20 e8 f7 9b [ 523.782659][ T8758] RSP: 0018:ffffc90002eafb70 EFLAGS: 00010293 [ 523.785275][ T8758] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000200 [ 523.788545][ T8758] RDX: ffff888027a78000 RSI: ffffffff8d3d0880 RDI: ffffffff925488f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 523.791862][ T8758] RBP: ffffe8ffac18a698 R08: 0000000000000005 R09: 0000000000000000 [ 523.795397][ T8758] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 523.798714][ T8758] R13: ffffffff9c9ad5c0 R14: 0000000000000005 R15: 0000000000000000 [ 523.802194][ T8758] FS: 0000000000000000(0000) GS:ffff88809574a000(0000) knlGS:0000000000000000 [ 523.805958][ T8758] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.808709][ T8758] CR2: 0000000080000340 CR3: 00000000530ef000 CR4: 0000000000352ef0 [ 523.812089][ T8758] Call Trace: [ 523.813577][ T8758] [ 523.814835][ T8758] ? lockdep_hardirqs_on+0x7d/0x110 [ 523.817048][ T8758] __napi_poll.constprop.0+0xaf/0x450 [ 523.819352][ T8758] napi_threaded_poll_loop+0x52f/0x870 [ 523.821697][ T8758] ? napi_threaded_poll_loop+0xfe/0x870 [ 523.824146][ T8758] ? __pfx_napi_threaded_poll_loop+0x10/0x10 [ 523.826704][ T8758] napi_threaded_poll+0x3a8/0x4b0 [ 523.828869][ T8758] ? napi_threaded_poll+0xac/0x4b0 [ 523.831081][ T8758] ? __pfx_napi_threaded_poll+0x10/0x10 [ 523.833550][ T8758] ? __kthread_parkme+0x18f/0x230 [ 523.835725][ T8758] ? kthread+0x13a/0x450 [ 523.837623][ T8758] ? __pfx_napi_threaded_poll+0x10/0x10 [ 523.840035][ T8758] kthread+0x373/0x450 [ 523.841784][ T8758] ? __pfx_kthread+0x10/0x10 [ 523.843845][ T8758] ret_from_fork+0x730/0xd60 [ 523.845805][ T8758] ? __pfx_ret_from_fork+0x10/0x10 [ 523.848018][ T8758] ? __switch_to+0x800/0x10f0 [ 523.850028][ T8758] ? __pfx_kthread+0x10/0x10 [ 523.852005][ T8758] ret_from_fork_asm+0x1a/0x30 [ 523.854178][ T8758] [ 523.855505][ T8758] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 523.858532][ T8758] CPU: 0 UID: 0 PID: 8758 Comm: napi/gre0-0 Not tainted syzkaller #0 PREEMPT(full) [ 523.862391][ T8758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 523.866583][ T8758] Call Trace: [ 523.868034][ T8758] [ 523.869302][ T8758] dump_stack_lvl+0x100/0x190 [ 523.871315][ T8758] vpanic+0x553/0x970 [ 523.873036][ T8758] ? __pfx_vpanic+0x10/0x10 [ 523.874970][ T8758] ? lock_release+0x24d/0x310 [ 523.876986][ T8758] panic+0xd1/0xe0 [ 523.878585][ T8758] ? __pfx_panic+0x10/0x10 [ 523.880505][ T8758] check_panic_on_warn.cold+0x19/0x34 [ 523.882770][ T8758] ? gro_cell_poll+0x5aa/0x6c0 [ 523.884803][ T8758] __warn.cold+0x191/0x318 [ 523.886738][ T8758] __report_bug+0x30f/0x440 [ 523.888749][ T8758] ? gro_cell_poll+0x5aa/0x6c0 [ 523.890799][ T8758] ? __pfx___report_bug+0x10/0x10 [ 523.892980][ T8758] ? __lock_acquire+0x5c0/0x1f40 [ 523.895105][ T8758] report_bug_entry+0xe2/0x290 [ 523.897151][ T8758] ? gro_cell_poll+0x5b1/0x6c0 [ 523.899168][ T8758] handle_bug+0x1cd/0x2a0 [ 523.901022][ T8758] exc_invalid_op+0x17/0x50 [ 523.902920][ T8758] asm_exc_invalid_op+0x1a/0x20 [ 523.904960][ T8758] RIP: 0010:gro_cell_poll+0x5b1/0x6c0 [ 523.907224][ T8758] Code: 8d 3d c3 3a 99 08 48 c7 c6 c0 08 3d 8d 67 48 0f b9 3a e9 59 fe ff ff e8 3d 54 50 f8 48 8d 3d b6 3a 99 08 48 c7 c6 80 08 3d 8d <67> 48 0f b9 3a eb be 31 db e9 88 fd ff ff 48 8b 7c 24 20 e8 f7 9b [ 523.915177][ T8758] RSP: 0018:ffffc90002eafb70 EFLAGS: 00010293 [ 523.917800][ T8758] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000200 [ 523.921107][ T8758] RDX: ffff888027a78000 RSI: ffffffff8d3d0880 RDI: ffffffff925488f0 [ 523.924203][ T8758] RBP: ffffe8ffac18a698 R08: 0000000000000005 R09: 0000000000000000 [ 523.927054][ T8758] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 523.930218][ T8758] R13: ffffffff9c9ad5c0 R14: 0000000000000005 R15: 0000000000000000 [ 523.933540][ T8758] ? lockdep_hardirqs_on+0x7d/0x110 [ 523.935731][ T8758] __napi_poll.constprop.0+0xaf/0x450 [ 523.938015][ T8758] napi_threaded_poll_loop+0x52f/0x870 [ 523.940300][ T8758] ? napi_threaded_poll_loop+0xfe/0x870 [ 523.942615][ T8758] ? __pfx_napi_threaded_poll_loop+0x10/0x10 [ 523.945147][ T8758] napi_threaded_poll+0x3a8/0x4b0 [ 523.947254][ T8758] ? napi_threaded_poll+0xac/0x4b0 [ 523.949404][ T8758] ? __pfx_napi_threaded_poll+0x10/0x10 [ 523.951700][ T8758] ? __kthread_parkme+0x18f/0x230 [ 523.953824][ T8758] ? kthread+0x13a/0x450 [ 523.955602][ T8758] ? __pfx_napi_threaded_poll+0x10/0x10 [ 523.957936][ T8758] kthread+0x373/0x450 [ 523.959637][ T8758] ? __pfx_kthread+0x10/0x10 [ 523.961613][ T8758] ret_from_fork+0x730/0xd60 [ 523.963571][ T8758] ? __pfx_ret_from_fork+0x10/0x10 [ 523.965733][ T8758] ? __switch_to+0x800/0x10f0 [ 523.967704][ T8758] ? __pfx_kthread+0x10/0x10 [ 523.969595][ T8758] ret_from_fork_asm+0x1a/0x30 [ 523.971611][ T8758] [ 523.973667][ T8758] Kernel Offset: disabled [ 523.975507][ T8758] Rebooting in 86400 seconds..