last executing test programs: 2m21.881713102s ago: executing program 2 (id=466): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000540)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a4a2297653ac0c62201010000881a8789adddd1ca89ebd8632972a4f65ad1505ed06b6779ed03ef849c46e3dedf604c01fae7c32f782dd9a45993a0798444d6ba181f2546b88893bf12575b27c1af55a55c55ca8855d5dc89db3e110430d10f429c47ae9e2d61cef42747f527474516636d08a4116ad33e22e585daddc304a16cedea9ebf71a10676e78b2a256147758b4a13be2f4bb1c3e8e987c4bca7e1a2bee4d56d3a8b9d8db1df4800fe34284d6f745002c3500589c157f28944d09d7d4a147f6143f5c6d8a46b7dff4c9e", 0xf3}], 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0x11, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r5, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x5, 0x13, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x4c) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x200004, 0x3}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="2a000200010078", 0x7) r8 = openat$cgroup_pressure(r2, 0x0, 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r10) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000080)=0xfd, 0x4) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ae86ce5d", @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf25010000000500010000000000"], 0x1c}, 0x1, 0x2000000, 0x0, 0x800}, 0x4000080) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000ffff000100060000008c8c23f64e2b3e856900f08d1f379bfb18a900000000000015000000000000"], 0x1c}}, 0x0) recvmmsg(r9, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESHEX=r9, @ANYRESDEC=r9, @ANYRESOCT], 0x7) 2m21.731627486s ago: executing program 2 (id=470): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000006c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0xffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x9, 0x7, 0x9, 0x2, 0x3, 0xffffffffffffffff, 0xfffffffffffffffa, 0x34f}, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f2, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000400)={0x11, 0x37, &(0x7f0000000140)="e869d103c424f13ab905a26926f6a6d4cef24256f12eff56fb414ea047dc286747e516902b6eae980d04b1160f006921126cca133fdd22"}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2m20.524751612s ago: executing program 2 (id=473): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) 2m20.442434527s ago: executing program 2 (id=474): syz_usb_connect$midi(0x6, 0x2b, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000/0x14000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e6, 0x1c402, 0x2, 0x1e1}) syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_emit_vhci(0x0, 0x102) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) recvmmsg(r0, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_debugfs/asoc/components\x00', 0x0, 0x0) read(r4, &(0x7f0000000500), 0x400) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) 2m16.284796256s ago: executing program 2 (id=490): socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='./config\x00', &(0x7f0000000380)='./config\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) 2m14.19166165s ago: executing program 2 (id=496): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000500)) socket$kcm(0xa, 0x5, 0x0) close(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newchain={0x3c, 0x64, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xf, 0x19}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0x8}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x10001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000810}, 0x40c0004) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) unlink(&(0x7f0000000340)='./file0\x00') bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002700090025bd7800fddbdf25100000001400010002"], 0x28}}, 0x4000080) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="07000000000000000000050000001c000380080004001a0000000800020020000000080005007180bbda180001801400020073797a5f74756e000000000000210000050006"], 0x50}, 0x1, 0x0, 0x0, 0x4000820}, 0x2000c000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2m13.595603596s ago: executing program 32 (id=496): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000500)) socket$kcm(0xa, 0x5, 0x0) close(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newchain={0x3c, 0x64, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xf, 0x19}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0x8}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x10001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000810}, 0x40c0004) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) unlink(&(0x7f0000000340)='./file0\x00') bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002700090025bd7800fddbdf25100000001400010002"], 0x28}}, 0x4000080) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="07000000000000000000050000001c000380080004001a0000000800020020000000080005007180bbda180001801400020073797a5f74756e000000000000210000050006"], 0x50}, 0x1, 0x0, 0x0, 0x4000820}, 0x2000c000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 7.099560564s ago: executing program 4 (id=1136): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00') syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81c}]}]}, 0x5c}}, 0x84000) socket$nl_netfilter(0x10, 0x3, 0xc) 5.753305975s ago: executing program 4 (id=1146): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='pids.current\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="3800000040c1a7859899d3551f1ca0ec32f8e6b410c53a45617768780b3a7aee3190b8b5ed3e483a888c2da5692922d02991ee1a613829bacfd54f280abb23770c940043ff4488d64bdd2b45c09fa656adecf1f4576f3d25c762d3f9e53791a49faf5a76cd92e1e7fef42e3acb48f65fad39b66fd5b8479ea979f475cce3c51ab7811e614186a9062bd28c9f8b56e0ac4cdb940b6f55bb273f1ecda7341033", @ANYRES16=r1, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007800800050004"], 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/233) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000004c0)={{0x1, 0x0, 0x3d3, 0x3, 0x9}}) ioctl$PPPIOCSFLAGS1(r3, 0x80047455, 0x0) 5.670981397s ago: executing program 4 (id=1147): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) close(r4) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='\xb8\xd4g\xd4$\xdci\x9f\xccS\x1cdm\x7f\xafZ\x19\xda@\"\xc3\xe4\xf1\xf6\xba\x9c\x89\xeb\xb8[\xa0\x9b\xde\x14m\tT\x1d\xee\xf2\xc23\x1d\xf0\xce\xc8\xf9\x06\x00\x00\x00\x00\x00\x00\x00M\x10\x92d\xeedP\xb2\x9e\xfa\xf1F\x8c\xfc\xc1C\x8a\x03\b\x01\xda\b\x9b\xac\xf3\xddo\x11:\x19\xae\x92\xabQ\x8cS\x14\x8ef8\n\x01\x1a4\xa6:\xbc&\xa6~\xeb\x82\xd9E\xe70\xcc5\xbf\xb6O\x99z(\x190\x9a\x030\t\xd7a>\x80\x13-\xf1\xf6.s\xf2\xb1\x81v\t#\x955\xe1C\x14\xa3\a\x06\x11\xe24N1\xab\x9f%I5\x1b\xdb\xae\x93l\xc2=\xfd>C\x11\\Lz\xe4%j', &(0x7f0000000680)='c:::\x00\v\xee\xbb\xe6H}`\x06\xc6\xf0t\xb1\xa1P\xc3\x00\xeb\x8f\x06\x00\x01\xf9\v!\xa5\x82V\x9751\xa7\x00\xb4|T\xc0\xe8\xb1\xb2\x1b\x00/L\xc8\x1d\xdb\r\xee\x91\xd1&\xe8\xdb\x1c\x12\xf5R\x19\xaa@\xbb\xba@,Xm\xeb{\n\x95\x03\x00\xd0\xba\xdcw\xed]\x02\x96\xf1\xa0!4hA\xc5\xc8\x16U\xdc\x9b\x82O\xbeoK\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280)) poll(&(0x7f00000002c0)=[{r5, 0x80ad}], 0x1, 0x2) io_setup(0xc, &(0x7f0000000040)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) io_pgetevents(r6, 0x3, 0x3, &(0x7f0000000180)=[{}, {}, {}], &(0x7f0000000000)={0x0, 0x989680}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000700)={r7, 0xbc, "6a47c2633dec51bc710fdf5e3a4332ebba2e37164f2ab38043f4bd491f3031cfc901ead5efd0222219edcc733ed37792c415844bc5646218869af677aa65c4f7b5efe0d22e8a85bc3409e6b21ffc6d65f8df930e9fb820bde7a14ef092e89a3f0299a30c6db39e2cfca2a2fe03851dc634eb83147cbad8c4dbf9cb957d755daaccb409cc5db0321464a5df8a9c3ffb2c401042ccbe3b907c3763033d3b1a776fd9ea9f534d0c8b3e7be10c4cbb7ea12a2ccc21a36fe2657e29afeefb"}, &(0x7f0000000800)=0xc4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xfffffe3b, 0x0, &(0x7f00000005c0)=[@decrefs={0x40046307, 0x2}, @enter_looper, @decrefs={0x40046307, 0x1}, @enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={@fda={0x66646185, 0x7, 0x0, 0x6}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x0, 0x31}}, &(0x7f0000000580)}}], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0xfffffffc}, @release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) fsopen(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) 4.509910678s ago: executing program 4 (id=1154): syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08060001080006040001ffffffe89a98332ef71a1d915819000000020000364c8b3ea3d1a3d448dd4f980efccc9fc7a7ff69b3a80ab995b17bd2f5f27c70c031f774facec609a5c8904bbb391faf19edb9c5f2b676bbf7473e2c65cb5335cc729eb93ade1a0aff38eadcb01d4c2d430575bdb6f76c7ac87eacd77946d50b727943664d3da80d7493b993691204c1b278550e094f7f1a4d8fdc93bc1c8fc4ff88350321778c566f3d7b5d28a88e0c0dcc51c664c01ba1e4bb2e6b1ee9a2fbc6a537284b6c262739fab37cd0dfbc39d5b35ebb3e"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='dummy_udc.0', 0xb) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='dummy_udc.0', 0xb) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040021}, 0x30) r7 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000180)={0x0, "f1ffffffffff63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee04200"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRESDEC=r0, @ANYRESHEX=r7], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0xfffffff8, 0x2003) 4.261666735s ago: executing program 1 (id=1155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x4, 0x8, 0xf8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x4a, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="04fb008646dc3f0adf33c9f7b986", 0x0, 0x5, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1c) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}]}, 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x800) 3.335087335s ago: executing program 1 (id=1158): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000540)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a4a2297653ac0c62201010000881a8789adddd1ca89ebd8632972a4f65ad1505ed06b6779ed03ef849c46e3dedf604c01fae7c32f782dd9a45993a0798444d6ba181f2546b88893bf12575b27c1af55a55c55ca8855d5dc89db3e110430d10f429c47ae9e2d61cef42747f527474516636d08a4116ad33e22e585daddc304a16cedea9ebf71a10676e78b2a256147758b4a13be2f4bb1c3e8e987c4bca7e1a2bee4d56d3a8b9d8db1df4800fe34284d6f745002c3500589c157f28944d09d7d4a147f6143f5c6d8a46b7dff4c9e", 0xf3}], 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0x11, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r5, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x5, 0x13, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x4c) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x200004, 0x3}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="2a000200", 0x4) r8 = openat$cgroup_pressure(r2, 0x0, 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r10) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000080)=0xfd, 0x4) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ae86ce5d", @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf25010000000500010000000000"], 0x1c}, 0x1, 0x2000000, 0x0, 0x800}, 0x4000080) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000ffff000100060000008c8c23f64e2b3e856900f08d1f379bfb18a900000000000015000000000000"], 0x1c}}, 0x0) recvmmsg(r9, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRESHEX=r9, @ANYRESDEC=r9, @ANYRESOCT], 0x7) 2.634326982s ago: executing program 1 (id=1165): syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08060001080006040001ffffffe89a98332ef71a1d915819000000020000364c8b3ea3d1a3d448dd4f980efccc9fc7a7ff69b3a80ab995b17bd2f5f27c70c031f774facec609a5c8904bbb391faf19edb9c5f2b676bbf7473e2c65cb5335cc729eb93ade1a0aff38eadcb01d4c2d430575bdb6f76c7ac87eacd77946d50b727943664d3da80d7493b993691204c1b278550e094f7f1a4d8fdc93bc1c8fc4ff88350321778c566f3d7b5d28a88e0c0dcc51c664c01ba1e4bb2e6b1ee9a2fbc6a537284b6c262739fab37cd0dfbc39d5b35ebb3e"], 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) 2.438107095s ago: executing program 0 (id=1168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) ioctl$CDROMPLAYBLK(r1, 0x5317, 0x0) lseek(0xffffffffffffffff, 0xaeb, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$kcm(0x29, 0x7, 0x0) clock_gettime(0x0, &(0x7f0000000140)) 2.379550549s ago: executing program 4 (id=1169): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xfffffee2) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioperm(0x8001, 0x0, 0x7fff) landlock_restrict_self(0xffffffffffffffff, 0xc) (fail_nth: 1) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x90004) accept4(r3, 0x0, 0x0, 0x800) timer_delete(r2) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4050}, 0x8000) r5 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b6, 0x800, 0x1, 0x2db}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x737, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r5, 0x8, 0x0, 0x91a, 0x2}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$TIOCCBRK(r4, 0x5428) 2.020896469s ago: executing program 0 (id=1170): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x800000002, 0x800000000000208, 0x8000000, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000003, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000680)={0x80, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1ff, 0x30}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={r2, 0x5}, &(0x7f00000001c0)=0x8) 1.657864722s ago: executing program 0 (id=1171): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xfffffee2) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioperm(0x8001, 0x0, 0x7fff) landlock_restrict_self(0xffffffffffffffff, 0xc) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_newrule={0x30, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1000000000000}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x30}, 0x1, 0x0, 0x0, 0x42812}, 0x0) setns(0xc9, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x90004) accept4(r3, 0x0, 0x0, 0x800) timer_delete(r2) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4050}, 0x8000) r7 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b6, 0x800, 0x1, 0x2db}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x737, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r7, 0x8, 0x0, 0x91a, 0x2}) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$TIOCCBRK(r6, 0x5428) 1.643923428s ago: executing program 1 (id=1172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.446628749s ago: executing program 4 (id=1173): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) (fail_nth: 4) 1.439255844s ago: executing program 1 (id=1174): openat$nci(0xffffff9c, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.374891798s ago: executing program 3 (id=1175): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6faa, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x93}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x3505}}, 0xe4) close(0x3) 1.366659169s ago: executing program 3 (id=1176): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x58, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x80) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x58, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x80) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x168, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x51, 0xa9, @random="5032243df0ba166b9db02ada0dc758bd429e39bd64661636b0aa3d39eb8d4a529ed9113fdea62ca19b7a22ee1ee2fe81b1502dde3505a874401bca1f3b5f1b414810879c17bd850d2f12e3dbac"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xcc, 0xa8, @random="1975547092fb9f84348390a52d0e704f127a1a6ade7f1d4a08f32cf567f84e96b9ee1eaee2a8866e274215c3c3cf4b493b6579f8b80ffb8a8d6cff43d5009a0c15b91f8ac8f91ca14e9f566300406b09410cdb3e880972aa32cb2bf9df9a10ac06876de592874077e377fc472eeaea6f1c94d26da278c72d02556175635de568216ad6439e90b1b618f31660766314a7b08a108350618de018797752d49a6d3ec8b8de27d4e4e65c08d2b92668318821f6fb6a195f22837a761349b6c52ee8f10cb7e4956523fad0"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x168}, 0x1, 0x0, 0x0, 0x40c0}, 0x880) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r4, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) socket(0x1e, 0x4, 0x0) (async) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x400110, &(0x7f0000000480)={0x0, 0xc7f8, 0x200, 0x3, 0x1bd, 0x0, r4}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000440)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) close(r7) (async) close(r7) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, 0x0, 0x0) (async) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r10, @ANYBLOB="dc196c174c0f622e019df2d7fcc0c6e67e55dd353e5b54dbb5c89c1e1f4a22120475c8cdd9a545554eab5c90c9583f399da9afac43bb3186c0baf3fa64ff2c4c70f0c0ea424307be53"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg$unix(r5, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 995.799411ms ago: executing program 3 (id=1177): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap(&(0x7f0000717000/0x1000)=nil, 0x1000, 0xb635773f05ebbeec, 0x8031, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x2e, 0x7, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3800000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xca1, 0x0, 0x0, 0x1000, 0x8, r1, 0x0, 0x40}}}, &(0x7f0000000580)) ioctl$UBLK_U_CMD_START_DEV(r3, 0xc0207506, &(0x7f00000005c0)={0x0, 0xffff, 0x0, 0x0, r1}) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_clone3(&(0x7f0000000440)={0x66010800, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0, {0x5}, &(0x7f0000000200)=""/80, 0x50, &(0x7f0000000280)=""/245, &(0x7f0000000400)=[r1, 0x0, r4, r1], 0x4, {r5}}, 0x58) process_vm_writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x1, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/233, 0xe9}], 0x1, 0x0) syz_clone3(&(0x7f0000000880)={0x42400, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000640), {0x24}, &(0x7f0000000680)=""/220, 0xdc, &(0x7f0000000780)=""/150, &(0x7f0000000840)=[r6, r7], 0x2, {r2}}, 0x58) 433.043632ms ago: executing program 1 (id=1178): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$DVB_DVR_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000040)={0x1, 0x20000000, 0x9, 0xb, 0x8, 0x6}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)={0x3c, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @ra, @calipso={0x7, 0x18, {0x0, 0x4, 0x7f, 0x9, [0x9, 0x100000000]}}, @ra={0x5, 0x2, 0x7}]}, 0x38) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r6, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000001c0)={0x9, r1, 'id1\x00'}) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 430.273334ms ago: executing program 0 (id=1179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}]}, 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x800) 430.138859ms ago: executing program 3 (id=1180): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x15, &(0x7f0000000040), 0x10) 429.967828ms ago: executing program 3 (id=1181): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x15, &(0x7f0000000040), 0x10) (fail_nth: 1) 359.746515ms ago: executing program 0 (id=1182): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/instances/inst1/set_event\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000300)="4b8068047e7def32e135821274d26f082ef5bfe95082019b12ca05594c886743b690c3a20765f83362868fef121862cb5fbafa696a63220001304ef56e8bc2", 0x3f) 90.105084ms ago: executing program 0 (id=1183): openat$nci(0xffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=1184): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6faa, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x93}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x3505}}, 0xe4) close(0x3) kernel console output (not intermixed with test programs): 524155 pages RAM [ 255.438901][ T9522] 0 pages HighMem/MovableOnly [ 255.440640][ T9522] 211540 pages reserved [ 255.442036][ T9522] 0 pages cma reserved [ 255.470109][ T44] audit: type=1800 audit(1785615301.653:595): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=173267 res=0 errno=0 [ 255.512823][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.514867][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.521348][ T44] audit: type=1800 audit(1785615301.703:596): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 255.544051][ T9530] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.808'. [ 255.549297][ T44] audit: type=1800 audit(1785615301.703:597): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=173282 res=0 errno=0 [ 255.563425][ T44] audit: type=1800 audit(1785615301.753:598): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 255.579025][ T44] audit: type=1800 audit(1785615301.763:599): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35096 res=0 errno=0 [ 255.595937][ T44] audit: type=1800 audit(1785615301.763:600): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35119 res=0 errno=0 [ 255.605587][ T9521] mmap: syz.3.807 (9521) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 255.713128][ T44] audit: type=1800 audit(1785615301.903:601): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 255.809908][ T6122] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 255.878864][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.813'. [ 255.960494][ T6122] usb 9-1: Using ep0 maxpacket: 32 [ 255.966582][ T6122] usb 9-1: config index 0 descriptor too short (expected 15270, got 18) [ 255.977642][ T6122] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 255.985052][ T6122] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.987631][ T6122] usb 9-1: Product: syz [ 255.988972][ T6122] usb 9-1: Manufacturer: syz [ 256.003171][ T6122] usb 9-1: SerialNumber: syz [ 256.025229][ T6122] usb 9-1: config 0 descriptor?? [ 256.032907][ T6122] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 256.036431][ T6122] dvb-usb: bulk message failed: -22 (4/0) [ 256.038207][ T6122] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 256.042593][ T6122] dvb-usb: bulk message failed: -22 (5/0) [ 256.044970][ T6122] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 256.057344][ T6122] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 256.062463][ T6122] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 256.066093][ T6122] usb 9-1: media controller created [ 256.078303][ T6122] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.095477][ T6122] usb 9-1: selecting invalid altsetting 3 [ 256.097356][ T6122] ttusb2: set interface to alts=3 failed [ 256.116093][ T6122] DVB: Unable to find symbol tda10086_attach() [ 256.118109][ T6122] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 256.128959][ T6122] dvb-usb: bulk message failed: -22 (4/0) [ 256.138457][ T6122] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 256.143466][ T6122] dvb-usb: bulk message failed: -22 (5/0) [ 256.158967][ T6122] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 256.165335][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 256.169729][ T6122] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 256.239009][ T9537] dvb-usb: bulk message failed: -22 (7/0) [ 256.248469][ T9537] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 256.256616][ T9537] ttusb2: i2c transfer failed. [ 256.260562][ T9537] netlink: 'syz.4.811': attribute type 21 has an invalid length. [ 256.263121][ T9537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 256.266580][ T9537] IPv6: NLM_F_CREATE should be set when creating new route [ 256.269570][ T9537] IPv6: NLM_F_CREATE should be set when creating new route [ 256.272209][ T9537] IPv6: NLM_F_CREATE should be set when creating new route [ 256.287095][ T9537] netlink: 'syz.4.811': attribute type 21 has an invalid length. [ 256.290211][ T9537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 256.551390][ T9566] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 256.554422][ T9566] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 256.595496][ T9566] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 256.598527][ T9566] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 256.613722][ T9566] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 256.616753][ T9566] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 256.680772][ T9571] can0: slcan on ttyS3. [ 256.689403][ T9566] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 256.692563][ T9566] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 256.760315][ T8334] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 256.770692][ T8334] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.780318][ T8334] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 256.789279][ T8334] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.800023][ T8334] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 256.817414][ T8334] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.829024][ T8334] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 256.849631][ T8334] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.859131][ T6122] usb 9-1: USB disconnect, device number 5 [ 256.891770][ T9575] netlink: 'syz.1.822': attribute type 1 has an invalid length. [ 256.901495][ T9575] netlink: 212 bytes leftover after parsing attributes in process `syz.1.822'. [ 256.979733][ T6122] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 257.438525][ T9593] netlink: 28 bytes leftover after parsing attributes in process `syz.4.823'. [ 257.444038][ T9593] netlink: 28 bytes leftover after parsing attributes in process `syz.4.823'. [ 257.713968][ T9601] can0 (unregistered): slcan off ttyS3. [ 257.757214][ T9610] FAULT_INJECTION: forcing a failure. [ 257.757214][ T9610] name failslab, interval 1, probability 0, space 0, times 0 [ 257.766190][ T9610] CPU: 2 UID: 0 PID: 9610 Comm: syz.0.829 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.766212][ T9610] Tainted: [L]=SOFTLOCKUP [ 257.766216][ T9610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.766223][ T9610] Call Trace: [ 257.766227][ T9610] [ 257.766232][ T9610] dump_stack_lvl+0x100/0x190 [ 257.766265][ T9610] should_fail_ex.cold+0x5/0xa [ 257.766279][ T9610] should_failslab+0xc2/0x120 [ 257.766296][ T9610] __kmalloc_cache_noprof+0x91/0x6c0 [ 257.766309][ T9610] ? rtnl_newlink+0x126/0x2380 [ 257.766329][ T9610] ? __pfx_rtnl_newlink+0x10/0x10 [ 257.766346][ T9610] rtnl_newlink+0x126/0x2380 [ 257.766367][ T9610] ? __pfx_rtnl_newlink+0x10/0x10 [ 257.766384][ T9610] ? rcu_is_watching+0x12/0xc0 [ 257.766398][ T9610] ? kasan_quarantine_put+0x104/0x240 [ 257.766411][ T9610] ? lockdep_hardirqs_on+0x78/0x100 [ 257.766429][ T9610] ? kfree_skbmem+0x19a/0x210 [ 257.766442][ T9610] ? kmem_cache_free+0x127/0x6b0 [ 257.766456][ T9610] ? __lock_acquire+0x49f/0x1a40 [ 257.766480][ T9610] ? find_held_lock+0x2b/0x80 [ 257.766498][ T9610] ? find_held_lock+0x2b/0x80 [ 257.766511][ T9610] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 257.766527][ T9610] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 257.766545][ T9610] ? __pfx_rtnl_newlink+0x10/0x10 [ 257.766561][ T9610] rtnetlink_rcv_msg+0x95e/0xe90 [ 257.766579][ T9610] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 257.766600][ T9610] ? ref_tracker_free+0x37e/0x6c0 [ 257.766628][ T9610] netlink_rcv_skb+0x159/0x420 [ 257.766644][ T9610] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 257.766662][ T9610] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 257.766679][ T9610] ? netlink_deliver_tap+0x1ae/0xcc0 [ 257.766693][ T9610] netlink_unicast+0x585/0x850 [ 257.766707][ T9610] ? __pfx_netlink_unicast+0x10/0x10 [ 257.766723][ T9610] netlink_sendmsg+0x8b0/0xda0 [ 257.766738][ T9610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.766753][ T9610] ? apparmor_socket_sendmsg+0x15b/0x270 [ 257.766768][ T9610] ____sys_sendmsg+0xa4d/0xbe0 [ 257.766780][ T9610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.766793][ T9610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.766811][ T9610] ___sys_sendmsg+0x190/0x1e0 [ 257.766824][ T9610] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.766842][ T9610] ? find_held_lock+0x2b/0x80 [ 257.766864][ T9610] __sys_sendmsg+0x160/0x210 [ 257.766881][ T9610] ? __pfx___sys_sendmsg+0x10/0x10 [ 257.766900][ T9610] ? __pfx_ksys_write+0x10/0x10 [ 257.766914][ T9610] __do_fast_syscall_32+0xe7/0x970 [ 257.766930][ T9610] ? lockdep_hardirqs_on+0x78/0x100 [ 257.766945][ T9610] do_fast_syscall_32+0x32/0x70 [ 257.766961][ T9610] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.766976][ T9610] RIP: 0023:0xf701efec [ 257.766989][ T9610] Code: Unable to access opcode bytes at 0xf701efc2. [ 257.766995][ T9610] RSP: 002b:00000000f53ec50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 257.767006][ T9610] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 257.767013][ T9610] RDX: 00000000200080c4 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.767019][ T9610] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.767025][ T9610] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 257.767031][ T9610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.767045][ T9610] [ 258.634094][ T9621] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 258.637182][ T9621] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 258.688199][ T9621] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 258.691440][ T9621] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 258.749229][ T9621] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 258.752394][ T9621] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 258.788441][ T9621] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 258.791990][ T9621] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 258.826007][ T9633] e1000e 0000:00:02.0 eth1: removed PHC [ 258.892315][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 259.007078][ T9633] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 259.431022][ T8505] usb 46-1: device descriptor read/8, error -110 [ 259.820449][ T8505] usb usb46-port1: attempt power cycle [ 259.973485][ T44] kauditd_printk_skb: 45 callbacks suppressed [ 259.973497][ T44] audit: type=1800 audit(1785615305.157:647): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 260.019748][ T9666] 9pnet_fd: Insufficient options for proto=fd [ 260.058972][ T9666] netlink: 'syz.4.836': attribute type 10 has an invalid length. [ 260.067406][ T9666] syz_tun: entered promiscuous mode [ 260.103001][ T44] audit: type=1800 audit(1785615305.287:648): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 260.242276][ T44] audit: type=1800 audit(1785615305.427:649): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 260.380564][ T8505] usb usb46-port1: unable to enumerate USB device [ 260.557466][ T44] audit: type=1800 audit(1785615305.737:650): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 260.740290][ T44] audit: type=1800 audit(1785615305.927:651): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 260.750683][ T8334] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 260.759919][ T8334] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 260.765476][ T8334] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 260.778835][ T8334] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 260.790904][ T8334] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 260.799598][ T8334] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 260.808455][ T8334] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 260.817886][ T8334] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 260.830858][ T9701] netlink: 'syz.3.840': attribute type 34 has an invalid length. [ 260.839571][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 260.898099][ T44] audit: type=1800 audit(1785615306.077:652): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 260.991508][ T44] audit: type=1800 audit(1785615306.177:653): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 261.147024][ T44] audit: type=1800 audit(1785615306.327:654): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 261.175861][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'. [ 261.227581][ T44] audit: type=1800 audit(1785615306.407:655): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 261.294245][ T44] audit: type=1800 audit(1785615306.477:656): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 261.854567][ T9729] netlink: 'syz.4.848': attribute type 4 has an invalid length. [ 263.093077][ T9767] FAULT_INJECTION: forcing a failure. [ 263.093077][ T9767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.100781][ T9767] CPU: 0 UID: 0 PID: 9767 Comm: syz.3.857 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.100807][ T9767] Tainted: [L]=SOFTLOCKUP [ 263.100813][ T9767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.100822][ T9767] Call Trace: [ 263.100829][ T9767] [ 263.100835][ T9767] dump_stack_lvl+0x100/0x190 [ 263.100862][ T9767] should_fail_ex.cold+0x5/0xa [ 263.100880][ T9767] ? prepare_alloc_pages+0x16d/0x5f0 [ 263.100907][ T9767] should_fail_alloc_page+0xeb/0x140 [ 263.100929][ T9767] prepare_alloc_pages+0x1f0/0x5f0 [ 263.100952][ T9767] ? __kernel_text_address+0xd/0x30 [ 263.100980][ T9767] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 263.101002][ T9767] ? find_held_lock+0x2b/0x80 [ 263.101019][ T9767] ? mark_held_locks+0x40/0x70 [ 263.101036][ T9767] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 263.101050][ T9767] ? lockdep_hardirqs_on+0x78/0x100 [ 263.101064][ T9767] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 263.101077][ T9767] ? stack_depot_save_flags+0x479/0x9d0 [ 263.101097][ T9767] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 263.101111][ T9767] ? kasan_save_stack+0x3f/0x50 [ 263.101125][ T9767] ? kasan_save_stack+0x30/0x50 [ 263.101138][ T9767] ? kasan_save_track+0x14/0x30 [ 263.101151][ T9767] ? __kasan_kmalloc+0xaa/0xb0 [ 263.101163][ T9767] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 263.101174][ T9767] ? netfs_folioq_alloc+0x9e/0x3b0 [ 263.101193][ T9767] ? rolling_buffer_init+0x26/0xb0 [ 263.101209][ T9767] ? netfs_create_write_req+0x110/0x780 [ 263.101220][ T9767] ? netfs_begin_writethrough+0xd1/0x1d0 [ 263.101231][ T9767] ? netfs_perform_write+0x14c7/0x25a0 [ 263.101245][ T9767] ? netfs_buffered_write_iter_locked+0x224/0x2c0 [ 263.101260][ T9767] ? netfs_file_write_iter+0x1da/0x4a0 [ 263.101273][ T9767] ? v9fs_file_write_iter+0x9b/0x100 [ 263.101323][ T9767] ? do_iter_readv_writev+0x6f7/0x930 [ 263.101339][ T9767] ? vfs_writev+0x360/0xdd0 [ 263.101354][ T9767] ? do_pwritev+0x1ac/0x270 [ 263.101370][ T9767] ? __ia32_compat_sys_pwritev2+0x121/0x1b0 [ 263.101383][ T9767] ? __do_fast_syscall_32+0xe7/0x970 [ 263.101398][ T9767] ? do_fast_syscall_32+0x32/0x70 [ 263.101417][ T9767] ? __lock_acquire+0x49f/0x1a40 [ 263.101443][ T9767] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 263.101461][ T9767] ? policy_nodemask+0xed/0x4f0 [ 263.101478][ T9767] alloc_pages_mpol+0x1fb/0x540 [ 263.101495][ T9767] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 263.101511][ T9767] ? filemap_get_entry+0x22d/0x450 [ 263.101523][ T9767] ? filemap_get_entry+0x22d/0x450 [ 263.101536][ T9767] folio_alloc_noprof+0x22/0x250 [ 263.101548][ T9767] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 263.101572][ T9767] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 263.101596][ T9767] ? iov_iter_folio_queue+0x3e/0x1f0 [ 263.101618][ T9767] ? fault_in_readable+0x14c/0x190 [ 263.101635][ T9767] __filemap_get_folio_mpol+0x653/0x1320 [ 263.101659][ T9767] netfs_perform_write+0x3e4/0x25a0 [ 263.101683][ T9767] ? check_prev_add+0xfe/0xe60 [ 263.101710][ T9767] ? __lock_acquire+0xd5b/0x1a40 [ 263.101737][ T9767] ? __pfx_netfs_perform_write+0x10/0x10 [ 263.101801][ T9767] ? file_update_time_flags+0x373/0x500 [ 263.101827][ T9767] netfs_buffered_write_iter_locked+0x224/0x2c0 [ 263.101851][ T9767] netfs_file_write_iter+0x1da/0x4a0 [ 263.101872][ T9767] v9fs_file_write_iter+0x9b/0x100 [ 263.101898][ T9767] do_iter_readv_writev+0x6f7/0x930 [ 263.101924][ T9767] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 263.101953][ T9767] vfs_writev+0x360/0xdd0 [ 263.101983][ T9767] ? __pfx_vfs_writev+0x10/0x10 [ 263.102009][ T9767] ? find_held_lock+0x2b/0x80 [ 263.102038][ T9767] ? __fget_files+0x21f/0x3d0 [ 263.102058][ T9767] ? do_pwritev+0x1ac/0x270 [ 263.102081][ T9767] do_pwritev+0x1ac/0x270 [ 263.102106][ T9767] ? __pfx_do_pwritev+0x10/0x10 [ 263.102130][ T9767] ? fput+0x79/0x100 [ 263.102148][ T9767] __ia32_compat_sys_pwritev2+0x121/0x1b0 [ 263.102170][ T9767] __do_fast_syscall_32+0xe7/0x970 [ 263.102191][ T9767] ? lockdep_hardirqs_on+0x78/0x100 [ 263.102213][ T9767] do_fast_syscall_32+0x32/0x70 [ 263.102235][ T9767] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.102253][ T9767] RIP: 0023:0xf7fd7fec [ 263.102273][ T9767] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 263.102280][ T9767] RSP: 002b:00000000f545450c EFLAGS: 00000292 ORIG_RAX: 000000000000017b [ 263.102297][ T9767] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000680 [ 263.102307][ T9767] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000007 [ 263.102315][ T9767] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 263.102325][ T9767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.102334][ T9767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.102350][ T9767] [ 263.260344][ T9770] 9pnet_virtio: no channels available for device syz [ 263.304489][ T846] kernel read not supported for file [fscontext] (pid: 846 comm: kworker/2:2) [ 263.507656][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 264.598988][ T9807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.870'. [ 264.700080][ T5594] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.021231][ T44] kauditd_printk_skb: 25 callbacks suppressed [ 265.021245][ T44] audit: type=1800 audit(1785615310.207:682): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 265.219766][ T44] audit: type=1800 audit(1785615310.227:683): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=176512 res=0 errno=0 [ 265.423368][ T44] audit: type=1800 audit(1785615310.607:684): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 265.570436][ T44] audit: type=1800 audit(1785615310.747:685): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.874" name="attach" dev="sysfs" ino=36642 res=0 errno=0 [ 265.580986][ T9828] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 265.582985][ T9828] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 265.594889][ T9828] vhci_hcd vhci_hcd.0: Device attached [ 265.618592][ T44] audit: type=1800 audit(1785615310.797:686): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 265.681050][ T9828] wg2 speed is unknown, defaulting to 1000 [ 265.714391][ T44] audit: type=1800 audit(1785615310.897:687): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=176564 res=0 errno=0 [ 265.727204][ T9828] wg2 speed is unknown, defaulting to 1000 [ 265.779962][ T9828] wg2 speed is unknown, defaulting to 1000 [ 265.860282][ T44] audit: type=1800 audit(1785615311.037:688): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.872" name="/" dev="fuse" ino=1 res=0 errno=0 [ 265.900033][ T5749] usb 40-1: SetAddress Request (2) to port 0 [ 265.907126][ T5749] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 266.053493][ T44] audit: type=1800 audit(1785615311.237:689): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 266.266110][ T9829] vhci_hcd: connection reset by peer [ 266.280701][ T5594] vhci_hcd vhci_hcd.1: stop threads [ 266.284271][ T5594] vhci_hcd vhci_hcd.1: release socket [ 266.290296][ T5594] vhci_hcd vhci_hcd.1: disconnect device [ 266.344249][ T6122] wg2 speed is unknown, defaulting to 1000 [ 266.350505][ T9828] infiniband syz2: set active [ 266.353824][ T9828] infiniband syz2: added wg2 [ 266.371315][ T9828] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 266.376887][ T9828] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 266.382533][ T9828] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 266.416236][ T44] audit: type=1800 audit(1785615311.597:690): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180532 res=0 errno=0 [ 266.442640][ T44] audit: type=1800 audit(1785615311.627:691): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 266.457597][ T9828] RDS/IB: syz2: added [ 266.468416][ T9828] smc: adding ib device syz2 with port count 1 [ 266.475673][ T9828] smc: ib device syz2 port 1 has no pnetid [ 266.488098][ T24] wg2 speed is unknown, defaulting to 1000 [ 266.629977][ T9828] wg2 speed is unknown, defaulting to 1000 [ 266.750398][ T9845] FAULT_INJECTION: forcing a failure. [ 266.750398][ T9845] name failslab, interval 1, probability 0, space 0, times 0 [ 266.760295][ T9845] CPU: 2 UID: 0 PID: 9845 Comm: syz.0.879 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.760317][ T9845] Tainted: [L]=SOFTLOCKUP [ 266.760322][ T9845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.760329][ T9845] Call Trace: [ 266.760333][ T9845] [ 266.760338][ T9845] dump_stack_lvl+0x100/0x190 [ 266.760358][ T9845] should_fail_ex.cold+0x5/0xa [ 266.760372][ T9845] should_failslab+0xc2/0x120 [ 266.760391][ T9845] kmem_cache_alloc_noprof+0x91/0x6a0 [ 266.760407][ T9845] ? io_submit_one+0x124/0x1fb0 [ 266.760423][ T9845] io_submit_one+0x124/0x1fb0 [ 266.760436][ T9845] ? __lock_acquire+0x49f/0x1a40 [ 266.760455][ T9845] ? lockdep_hardirqs_on+0x78/0x100 [ 266.760472][ T9845] ? __pfx_io_submit_one+0x10/0x10 [ 266.760488][ T9845] ? __might_fault+0xc5/0x140 [ 266.760503][ T9845] ? __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 266.760516][ T9845] __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 266.760529][ T9845] ? __fget_files+0x21f/0x3d0 [ 266.760541][ T9845] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 266.760556][ T9845] ? ksys_write+0x1ac/0x250 [ 266.760567][ T9845] ? __pfx_ksys_write+0x10/0x10 [ 266.760580][ T9845] __do_fast_syscall_32+0xe7/0x970 [ 266.760595][ T9845] ? lockdep_hardirqs_on+0x78/0x100 [ 266.760628][ T9845] do_fast_syscall_32+0x32/0x70 [ 266.760644][ T9845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.760658][ T9845] RIP: 0023:0xf701efec [ 266.760672][ T9845] Code: Unable to access opcode bytes at 0xf701efc2. [ 266.760677][ T9845] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8 [ 266.760688][ T9845] RAX: ffffffffffffffda RBX: 00000000f53c3000 RCX: 0000000000000001 [ 266.760695][ T9845] RDX: 0000000080000700 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.760702][ T9845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.760708][ T9845] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 266.760714][ T9845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.760728][ T9845] [ 266.901768][ T9828] wg2 speed is unknown, defaulting to 1000 [ 267.107507][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'. [ 267.753927][ T9861] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.052496][ T9828] wg2 speed is unknown, defaulting to 1000 [ 268.100330][ T5752] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 268.174152][ T9828] wg2 speed is unknown, defaulting to 1000 [ 268.249916][ T5752] usb 9-1: Using ep0 maxpacket: 16 [ 268.254489][ T5752] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.261893][ T5752] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 268.268024][ T5752] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.271395][ T9828] wg2 speed is unknown, defaulting to 1000 [ 268.283258][ T5752] usb 9-1: config 0 descriptor?? [ 268.384512][ T9828] wg2 speed is unknown, defaulting to 1000 [ 268.502066][ T9864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.526674][ T9864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.549031][ T9864] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 268.565994][ T64] Bluetooth: hci0: Malformed LE Event: 0x0d [ 269.036519][ T5752] usb 9-1: USB disconnect, device number 6 [ 269.073162][ T9872] wg2 speed is unknown, defaulting to 1000 [ 269.292820][ T9876] wg2 speed is unknown, defaulting to 1000 [ 269.817156][ T9889] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 270.107845][ T44] kauditd_printk_skb: 26 callbacks suppressed [ 270.107859][ T44] audit: type=1800 audit(1785615315.287:718): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 270.950034][ T5749] usb 40-1: device descriptor read/8, error -110 [ 271.462494][ T5749] usb usb40-port1: attempt power cycle [ 271.490830][ T44] audit: type=1800 audit(1785615316.677:719): pid=9902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.895" name="unbind" dev="sysfs" ino=29918 res=0 errno=0 [ 271.571890][ T44] audit: type=1800 audit(1785615316.757:720): pid=9905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.895" name="bind" dev="sysfs" ino=29919 res=0 errno=0 [ 271.631072][ T44] audit: type=1800 audit(1785615316.787:721): pid=8091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207167 res=0 errno=0 [ 271.683574][ T44] audit: type=1800 audit(1785615316.787:722): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207144 res=0 errno=0 [ 271.743518][ T44] audit: type=1800 audit(1785615316.917:723): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 271.960553][ T44] audit: type=1800 audit(1785615317.137:724): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 272.012798][ T44] audit: type=1800 audit(1785615317.187:725): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 272.066563][ T44] audit: type=1800 audit(1785615317.247:726): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 272.173320][ T44] audit: type=1800 audit(1785615317.357:727): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 272.370969][ T5749] usb usb40-port1: unable to enumerate USB device [ 272.507064][ T9925] wg2 speed is unknown, defaulting to 1000 [ 273.236271][ T9942] syzkaller0: entered promiscuous mode [ 273.244321][ T9942] syzkaller0: entered allmulticast mode [ 273.260927][ T9942] tipc: Started in network mode [ 273.268387][ T9942] tipc: Node identity 4692f5b1e454, cluster identity 4711 [ 273.283810][ T9942] tipc: Enabled bearer , priority 0 [ 273.289035][ T9946] netlink: 32 bytes leftover after parsing attributes in process `syz.1.910'. [ 273.297036][ T9942] tipc: Resetting bearer [ 273.303916][ T9940] tipc: Resetting bearer [ 273.364808][ T9940] tipc: Disabling bearer [ 274.280117][ T5752] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 274.389451][ T9972] wg2 speed is unknown, defaulting to 1000 [ 274.430123][ T5752] usb 6-1: Using ep0 maxpacket: 8 [ 274.433243][ T5752] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 274.437502][ T5752] usb 6-1: config 0 has no interface number 0 [ 274.439771][ T5752] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 274.444047][ T5752] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 274.448205][ T5752] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.452105][ T5752] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 274.456326][ T5752] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 274.459227][ T5752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.488957][ T5752] usb 6-1: config 0 descriptor?? [ 274.510322][ T5752] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 274.598969][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 274.613971][ T9986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.922'. [ 274.616901][ T9986] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 274.960865][ T9998] wg2 speed is unknown, defaulting to 1000 [ 275.372425][ T44] kauditd_printk_skb: 32 callbacks suppressed [ 275.372497][ T44] audit: type=1800 audit(1785615320.557:760): pid=10009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.927" name="unbind" dev="sysfs" ino=29918 res=0 errno=0 [ 275.451069][ T44] audit: type=1800 audit(1785615320.607:761): pid=10009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.927" name="bind" dev="sysfs" ino=29919 res=0 errno=0 [ 275.531886][ T44] audit: type=1800 audit(1785615320.647:762): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219507 res=0 errno=0 [ 275.590911][ T44] audit: type=1800 audit(1785615320.667:763): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219484 res=0 errno=0 [ 275.847120][ T44] audit: type=1800 audit(1785615321.017:764): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 275.937879][T10014] FAULT_INJECTION: forcing a failure. [ 275.937879][T10014] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 275.947166][T10014] CPU: 2 UID: 0 PID: 10014 Comm: syz.0.929 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.947187][T10014] Tainted: [L]=SOFTLOCKUP [ 275.947191][T10014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.947197][T10014] Call Trace: [ 275.947202][T10014] [ 275.947207][T10014] dump_stack_lvl+0x100/0x190 [ 275.947227][T10014] should_fail_ex.cold+0x5/0xa [ 275.947238][T10014] ? prepare_alloc_pages+0x16d/0x5f0 [ 275.947256][T10014] should_fail_alloc_page+0xeb/0x140 [ 275.947274][T10014] prepare_alloc_pages+0x1f0/0x5f0 [ 275.947290][T10014] ? __kernel_text_address+0xd/0x30 [ 275.947309][T10014] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 275.947327][T10014] ? stack_trace_save+0x8e/0xc0 [ 275.947343][T10014] ? __pfx_stack_trace_save+0x10/0x10 [ 275.947359][T10014] ? stack_depot_save_flags+0x27/0x9d0 [ 275.947377][T10014] ? is_bpf_text_address+0x94/0x1a0 [ 275.947394][T10014] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 275.947408][T10014] ? kasan_save_stack+0x3f/0x50 [ 275.947422][T10014] ? kasan_save_stack+0x30/0x50 [ 275.947437][T10014] ? kasan_save_track+0x14/0x30 [ 275.947450][T10014] ? __kasan_slab_alloc+0x89/0x90 [ 275.947464][T10014] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 275.947478][T10014] ? alloc_vmap_area+0x640/0x2bb0 [ 275.947492][T10014] ? __get_vm_area_node+0x1ca/0x330 [ 275.947507][T10014] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 275.947523][T10014] ? __vmalloc_node_noprof+0xad/0xf0 [ 275.947539][T10014] ? __vmalloc_noprof+0xa3/0x120 [ 275.947554][T10014] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 275.947569][T10014] ? bpf_prog_alloc+0x3b/0x200 [ 275.947582][T10014] ? bpf_prog_load+0xf69/0x2fa0 [ 275.947593][T10014] ? __sys_bpf+0x18dc/0x4e80 [ 275.947603][T10014] ? __ia32_sys_bpf+0xcc/0x170 [ 275.947615][T10014] ? __do_fast_syscall_32+0xe7/0x970 [ 275.947631][T10014] ? do_fast_syscall_32+0x32/0x70 [ 275.947646][T10014] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.947665][T10014] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 275.947683][T10014] ? policy_nodemask+0xed/0x4f0 [ 275.947727][T10014] alloc_pages_mpol+0x1fb/0x540 [ 275.947748][T10014] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 275.947777][T10014] alloc_pages_noprof+0x1a/0x160 [ 275.947789][T10014] get_free_pages_noprof+0x10/0xb0 [ 275.947804][T10014] __kasan_populate_vmalloc+0xa0/0x210 [ 275.947820][T10014] alloc_vmap_area+0x95d/0x2bb0 [ 275.947839][T10014] ? kasan_save_track+0x14/0x30 [ 275.947852][T10014] ? __kasan_kmalloc+0xaa/0xb0 [ 275.947865][T10014] ? __pfx_alloc_vmap_area+0x10/0x10 [ 275.947881][T10014] ? __get_vm_area_node+0x101/0x330 [ 275.947898][T10014] __get_vm_area_node+0x1ca/0x330 [ 275.947916][T10014] __vmalloc_node_range_noprof+0x228/0x1630 [ 275.947938][T10014] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 275.947954][T10014] ? kasan_quarantine_put+0x104/0x240 [ 275.947969][T10014] ? process_measurement+0x1070/0x2350 [ 275.947984][T10014] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 275.948003][T10014] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.948022][T10014] ? __lock_acquire+0x49f/0x1a40 [ 275.948043][T10014] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 275.948058][T10014] __vmalloc_node_noprof+0xad/0xf0 [ 275.948075][T10014] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 275.948091][T10014] __vmalloc_noprof+0xa3/0x120 [ 275.948108][T10014] ? __pfx___vmalloc_noprof+0x10/0x10 [ 275.948126][T10014] ? __fget_files+0x21f/0x3d0 [ 275.948138][T10014] bpf_prog_alloc_no_stats+0x58/0x640 [ 275.948155][T10014] bpf_prog_alloc+0x3b/0x200 [ 275.948171][T10014] bpf_prog_load+0xf69/0x2fa0 [ 275.948186][T10014] ? __pfx_bpf_prog_load+0x10/0x10 [ 275.948198][T10014] ? __lock_acquire+0x49f/0x1a40 [ 275.948226][T10014] __sys_bpf+0x18dc/0x4e80 [ 275.948242][T10014] ? __pfx___sys_bpf+0x10/0x10 [ 275.948254][T10014] ? find_held_lock+0x2b/0x80 [ 275.948267][T10014] ? get_pid_task+0xfc/0x250 [ 275.948281][T10014] ? get_pid_task+0xfc/0x250 [ 275.948299][T10014] ? proc_fail_nth_write+0x9f/0x220 [ 275.948316][T10014] ? find_held_lock+0x2b/0x80 [ 275.948332][T10014] ? rcu_read_lock_any_held+0x6a/0xa0 [ 275.948347][T10014] ? find_held_lock+0x2b/0x80 [ 275.948360][T10014] ? ksys_write+0x190/0x250 [ 275.948370][T10014] ? ksys_write+0x190/0x250 [ 275.948389][T10014] ? fput+0x79/0x100 [ 275.948403][T10014] ? __ia32_sys_bpf+0xcc/0x170 [ 275.948414][T10014] __ia32_sys_bpf+0xcc/0x170 [ 275.948427][T10014] ? __do_fast_syscall_32+0x98/0x970 [ 275.948443][T10014] __do_fast_syscall_32+0xe7/0x970 [ 275.948458][T10014] ? lockdep_hardirqs_on+0x78/0x100 [ 275.948473][T10014] do_fast_syscall_32+0x32/0x70 [ 275.948488][T10014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.948502][T10014] RIP: 0023:0xf701efec [ 275.948517][T10014] Code: Unable to access opcode bytes at 0xf701efc2. [ 275.948522][T10014] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 275.948533][T10014] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800006c0 [ 275.948552][T10014] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.948559][T10014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 275.948565][T10014] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 275.948572][T10014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.948586][T10014] [ 276.109612][T10014] syz.0.929: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 276.115234][T10014] CPU: 2 UID: 0 PID: 10014 Comm: syz.0.929 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.115252][T10014] Tainted: [L]=SOFTLOCKUP [ 276.115256][T10014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 276.115263][T10014] Call Trace: [ 276.115267][T10014] [ 276.115271][T10014] dump_stack_lvl+0x100/0x190 [ 276.115291][T10014] warn_alloc.cold+0x94/0xa8 [ 276.115304][T10014] ? __pfx_warn_alloc+0x10/0x10 [ 276.115316][T10014] ? lockdep_hardirqs_on+0x78/0x100 [ 276.115334][T10014] ? __get_vm_area_node+0x2cd/0x330 [ 276.115353][T10014] ? __get_vm_area_node+0x208/0x330 [ 276.115371][T10014] __vmalloc_node_range_noprof+0xccd/0x1630 [ 276.115390][T10014] ? kasan_quarantine_put+0x104/0x240 [ 276.115405][T10014] ? process_measurement+0x1070/0x2350 [ 276.115421][T10014] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 276.115441][T10014] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 276.115461][T10014] ? __lock_acquire+0x49f/0x1a40 [ 276.115482][T10014] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 276.115497][T10014] __vmalloc_node_noprof+0xad/0xf0 [ 276.115513][T10014] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 276.115530][T10014] __vmalloc_noprof+0xa3/0x120 [ 276.115547][T10014] ? __pfx___vmalloc_noprof+0x10/0x10 [ 276.115565][T10014] ? __fget_files+0x21f/0x3d0 [ 276.115578][T10014] bpf_prog_alloc_no_stats+0x58/0x640 [ 276.115595][T10014] bpf_prog_alloc+0x3b/0x200 [ 276.115610][T10014] bpf_prog_load+0xf69/0x2fa0 [ 276.115625][T10014] ? __pfx_bpf_prog_load+0x10/0x10 [ 276.115637][T10014] ? __lock_acquire+0x49f/0x1a40 [ 276.115666][T10014] __sys_bpf+0x18dc/0x4e80 [ 276.115681][T10014] ? __pfx___sys_bpf+0x10/0x10 [ 276.115714][T10014] ? find_held_lock+0x2b/0x80 [ 276.115728][T10014] ? get_pid_task+0xfc/0x250 [ 276.115743][T10014] ? get_pid_task+0xfc/0x250 [ 276.115760][T10014] ? proc_fail_nth_write+0x9f/0x220 [ 276.115776][T10014] ? find_held_lock+0x2b/0x80 [ 276.115792][T10014] ? rcu_read_lock_any_held+0x6a/0xa0 [ 276.115808][T10014] ? find_held_lock+0x2b/0x80 [ 276.115821][T10014] ? ksys_write+0x190/0x250 [ 276.115831][T10014] ? ksys_write+0x190/0x250 [ 276.115851][T10014] ? fput+0x79/0x100 [ 276.115865][T10014] ? __ia32_sys_bpf+0xcc/0x170 [ 276.115876][T10014] __ia32_sys_bpf+0xcc/0x170 [ 276.115889][T10014] ? __do_fast_syscall_32+0x98/0x970 [ 276.115906][T10014] __do_fast_syscall_32+0xe7/0x970 [ 276.115921][T10014] ? lockdep_hardirqs_on+0x78/0x100 [ 276.115940][T10014] do_fast_syscall_32+0x32/0x70 [ 276.115956][T10014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 276.115971][T10014] RIP: 0023:0xf701efec [ 276.115986][T10014] Code: Unable to access opcode bytes at 0xf701efc2. [ 276.115992][T10014] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 276.116002][T10014] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800006c0 [ 276.116009][T10014] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 276.116016][T10014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.116022][T10014] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 276.116028][T10014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.116041][T10014] [ 276.116046][T10014] Mem-Info: [ 276.212968][T10014] active_anon:8693 inactive_anon:8681 isolated_anon:0 [ 276.212968][T10014] active_file:852 inactive_file:37992 isolated_file:0 [ 276.212968][T10014] unevictable:2636 dirty:213 writeback:2 [ 276.212968][T10014] slab_reclaimable:8004 slab_unreclaimable:63608 [ 276.212968][T10014] mapped:29946 shmem:15040 pagetables:1312 [ 276.212968][T10014] sec_pagetables:304 bounce:0 [ 276.212968][T10014] kernel_misc_reclaimable:0 [ 276.212968][T10014] free:27260 free_pcp:8390 free_cma:0 [ 276.226708][T10014] Node 0 active_anon:324kB inactive_anon:52kB active_file:4kB inactive_file:4kB unevictable:3284kB isolated(anon):0kB isolated(file):0kB mapped:224kB dirty:8kB writeback:0kB shmem:3480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8736kB pagetables:1652kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 276.236797][T10014] Node 1 active_anon:34448kB inactive_anon:34672kB active_file:3404kB inactive_file:151964kB unevictable:7260kB isolated(anon):0kB isolated(file):0kB mapped:119560kB dirty:844kB writeback:8kB shmem:56680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6284kB pagetables:3596kB sec_pagetables:60kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 276.247171][T10014] Node 0 DMA free:2000kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:820kB local_pcp:380kB free_cma:0kB [ 276.256330][T10014] lowmem_reserve[]: 0 280 280 280 280 [ 276.258119][T10014] Node 0 DMA32 free:15504kB boost:0kB min:12772kB low:15964kB high:19156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:324kB inactive_anon:48kB active_file:0kB inactive_file:4kB unevictable:3284kB writepending:4kB zspages:52kB present:1032196kB managed:286888kB mlocked:0kB bounce:0kB free_pcp:15368kB local_pcp:7564kB free_cma:0kB [ 276.267986][T10014] lowmem_reserve[]: 0 0 0 0 0 [ 276.269565][T10014] Node 1 DMA32 free:91252kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34448kB inactive_anon:34672kB active_file:3404kB inactive_file:151964kB unevictable:7260kB writepending:852kB zspages:3348kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:17748kB local_pcp:16384kB free_cma:0kB [ 276.279957][T10014] lowmem_reserve[]: 0 0 0 0 0 [ 276.281458][T10014] Node 0 DMA: 28*4kB (UM) 2*8kB (UM) 3*16kB (UM) 5*32kB (U) 6*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2000kB [ 276.285910][T10014] Node 0 DMA32: 498*4kB (UE) 203*8kB (UE) 55*16kB (UME) 28*32kB (UME) 28*64kB (ME) 9*128kB (UM) 4*256kB (ME) 4*512kB (M) 4*1024kB (UM) 0*2048kB 0*4096kB = 15504kB [ 276.291090][T10014] Node 1 DMA32: 67*4kB (ME) 273*8kB (UME) 30*16kB (UME) 106*32kB (UME) 117*64kB (UME) 59*128kB (ME) 45*256kB (ME) 28*512kB (ME) 9*1024kB (M) 17*2048kB (UM) 0*4096kB = 91252kB [ 276.296687][T10014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.299676][T10014] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 276.302764][T10014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.305757][T10014] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 276.308646][T10014] 54754 total pagecache pages [ 276.310267][T10014] 873 pages in swap cache [ 276.311674][T10014] Free swap = 114772kB [ 276.313052][T10014] Total swap = 124996kB [ 276.314392][T10014] 524155 pages RAM [ 276.315585][T10014] 0 pages HighMem/MovableOnly [ 276.317080][T10014] 211540 pages reserved [ 276.318404][T10014] 0 pages cma reserved [ 276.410711][ T44] audit: type=1800 audit(1785615321.587:765): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 276.467594][ T44] audit: type=1800 audit(1785615321.647:766): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 276.504676][T10020] netlink: 'syz.3.930': attribute type 1 has an invalid length. [ 276.527589][T10020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.930'. [ 276.630622][ T44] audit: type=1800 audit(1785615321.817:767): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 276.689445][T10022] afs: Unknown parameter 'dyn€|' [ 276.721665][ T44] audit: type=1800 audit(1785615321.907:768): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 276.777419][ T44] audit: type=1326 audit(1785615321.947:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10021 comm="syz.3.932" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000 [ 277.382237][ T5752] usb 6-1: USB disconnect, device number 14 [ 277.463009][ T5752] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 277.809293][T10029] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 277.920402][T10029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.934'. [ 278.435164][T10056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.941'. [ 278.521976][T10060] FAULT_INJECTION: forcing a failure. [ 278.521976][T10060] name failslab, interval 1, probability 0, space 0, times 0 [ 278.535758][T10060] CPU: 2 UID: 0 PID: 10060 Comm: syz.3.943 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.535779][T10060] Tainted: [L]=SOFTLOCKUP [ 278.535783][T10060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.535790][T10060] Call Trace: [ 278.535795][T10060] [ 278.535800][T10060] dump_stack_lvl+0x100/0x190 [ 278.535820][T10060] should_fail_ex.cold+0x5/0xa [ 278.535831][T10060] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 278.535845][T10060] should_failslab+0xc2/0x120 [ 278.535862][T10060] kmem_cache_alloc_noprof+0x91/0x6a0 [ 278.535891][T10060] ? skb_clone+0x190/0x400 [ 278.535911][T10060] skb_clone+0x190/0x400 [ 278.535927][T10060] netlink_deliver_tap+0xaed/0xcc0 [ 278.535943][T10060] netlink_unicast+0x62b/0x850 [ 278.535958][T10060] ? __pfx_netlink_unicast+0x10/0x10 [ 278.535974][T10060] netlink_sendmsg+0x8b0/0xda0 [ 278.535989][T10060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.536008][T10060] ? apparmor_socket_sendmsg+0x15b/0x270 [ 278.536023][T10060] ____sys_sendmsg+0xa4d/0xbe0 [ 278.536035][T10060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.536049][T10060] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.536067][T10060] ___sys_sendmsg+0x190/0x1e0 [ 278.536080][T10060] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.536099][T10060] ? find_held_lock+0x2b/0x80 [ 278.536122][T10060] __sys_sendmsg+0x160/0x210 [ 278.536139][T10060] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.536158][T10060] ? __pfx_ksys_write+0x10/0x10 [ 278.536172][T10060] __do_fast_syscall_32+0xe7/0x970 [ 278.536188][T10060] ? lockdep_hardirqs_on+0x78/0x100 [ 278.536204][T10060] do_fast_syscall_32+0x32/0x70 [ 278.536219][T10060] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.536234][T10060] RIP: 0023:0xf7fd7fec [ 278.536248][T10060] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 278.536253][T10060] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 278.536264][T10060] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 278.536271][T10060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.536277][T10060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.536283][T10060] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 278.536289][T10060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.536303][T10060] [ 278.537800][T10060] netlink: 'syz.3.943': attribute type 2 has an invalid length. [ 278.547320][T10058] wg2 speed is unknown, defaulting to 1000 [ 278.728392][T10063] afs: Unknown parameter 'dyn€|' [ 278.941539][T10067] cgroup: name respecified [ 279.644824][T10086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.948'. [ 279.675448][T10086] netlink: 'syz.1.948': attribute type 10 has an invalid length. [ 279.695145][T10086] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 280.274687][T10094] afs: Unknown parameter 'dyn€|' [ 280.306817][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'. [ 280.445604][ T44] kauditd_printk_skb: 185 callbacks suppressed [ 280.445624][ T44] audit: type=1326 audit(1785615325.627:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10095 comm="syz.3.953" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7fd7fec code=0x7ffc0000 [ 280.523717][T10102] wg2 speed is unknown, defaulting to 1000 [ 280.683592][T10107] FAULT_INJECTION: forcing a failure. [ 280.683592][T10107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.687836][T10107] CPU: 0 UID: 0 PID: 10107 Comm: syz.1.956 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.687854][T10107] Tainted: [L]=SOFTLOCKUP [ 280.687858][T10107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.687869][T10107] Call Trace: [ 280.687874][T10107] [ 280.687878][T10107] dump_stack_lvl+0x100/0x190 [ 280.687897][T10107] should_fail_ex.cold+0x5/0xa [ 280.687911][T10107] _copy_from_iter+0x1f4/0x1690 [ 280.687932][T10107] ? __asan_memset+0x23/0x50 [ 280.687945][T10107] ? __pfx__copy_from_iter+0x10/0x10 [ 280.687962][T10107] ? __pfx___alloc_skb+0x10/0x10 [ 280.687983][T10107] netlink_sendmsg+0x808/0xda0 [ 280.687999][T10107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.688014][T10107] ? apparmor_socket_sendmsg+0x15b/0x270 [ 280.688029][T10107] ____sys_sendmsg+0xa4d/0xbe0 [ 280.688041][T10107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.688054][T10107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.688072][T10107] ___sys_sendmsg+0x190/0x1e0 [ 280.688085][T10107] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.688103][T10107] ? find_held_lock+0x2b/0x80 [ 280.688126][T10107] __sys_sendmsg+0x160/0x210 [ 280.688142][T10107] ? __pfx___sys_sendmsg+0x10/0x10 [ 280.688162][T10107] ? __pfx_ksys_write+0x10/0x10 [ 280.688176][T10107] __do_fast_syscall_32+0xe7/0x970 [ 280.688193][T10107] ? lockdep_hardirqs_on+0x78/0x100 [ 280.688208][T10107] do_fast_syscall_32+0x32/0x70 [ 280.688224][T10107] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.688239][T10107] RIP: 0023:0xf7fe5fec [ 280.688253][T10107] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 280.688258][T10107] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 280.688269][T10107] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 280.688276][T10107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.688282][T10107] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.688288][T10107] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 280.688295][T10107] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.688308][T10107] [ 281.566873][ T44] audit: type=1800 audit(1785615326.747:956): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 281.606257][ T44] audit: type=1800 audit(1785615326.787:957): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 281.741500][ T44] audit: type=1800 audit(1785615326.927:958): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 281.868919][ T44] audit: type=1800 audit(1785615327.047:959): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 281.998291][ T44] audit: type=1800 audit(1785615327.177:960): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 282.257533][ T44] audit: type=1800 audit(1785615327.397:961): pid=10139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.964" name="pm_freeze_timeout" dev="sysfs" ino=587 res=0 errno=0 [ 282.381545][ T44] audit: type=1800 audit(1785615327.557:962): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 282.613949][T10148] can0: slcan on ttyS3. [ 282.616473][ T44] audit: type=1800 audit(1785615327.797:963): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227631 res=0 errno=0 [ 282.638875][ T44] audit: type=1800 audit(1785615327.797:964): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=227635 res=0 errno=0 [ 283.160394][T10138] can0 (unregistered): slcan off ttyS3. [ 283.352684][T10182] wg2 speed is unknown, defaulting to 1000 [ 283.595174][T10193] Bluetooth: MGMT ver 1.23 [ 283.655493][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'. [ 283.843013][T10202] bond1: (slave dummy0): Releasing active interface [ 284.321061][T10216] FAULT_INJECTION: forcing a failure. [ 284.321061][T10216] name failslab, interval 1, probability 0, space 0, times 0 [ 284.337098][T10216] CPU: 2 UID: 0 PID: 10216 Comm: syz.3.982 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.337119][T10216] Tainted: [L]=SOFTLOCKUP [ 284.337124][T10216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.337131][T10216] Call Trace: [ 284.337135][T10216] [ 284.337140][T10216] dump_stack_lvl+0x100/0x190 [ 284.337159][T10216] should_fail_ex.cold+0x5/0xa [ 284.337184][T10216] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 284.337199][T10216] should_failslab+0xc2/0x120 [ 284.337216][T10216] kmem_cache_alloc_noprof+0x91/0x6a0 [ 284.337232][T10216] ? skb_clone+0x190/0x400 [ 284.337252][T10216] skb_clone+0x190/0x400 [ 284.337267][T10216] netlink_deliver_tap+0xaed/0xcc0 [ 284.337284][T10216] netlink_unicast+0x62b/0x850 [ 284.337299][T10216] ? __pfx_netlink_unicast+0x10/0x10 [ 284.337316][T10216] netlink_sendmsg+0x8b0/0xda0 [ 284.337333][T10216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.337348][T10216] ? apparmor_socket_sendmsg+0x15b/0x270 [ 284.337363][T10216] ____sys_sendmsg+0xa4d/0xbe0 [ 284.337375][T10216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.337389][T10216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.337407][T10216] ___sys_sendmsg+0x190/0x1e0 [ 284.337420][T10216] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.337439][T10216] ? find_held_lock+0x2b/0x80 [ 284.337463][T10216] __sys_sendmsg+0x160/0x210 [ 284.337480][T10216] ? __pfx___sys_sendmsg+0x10/0x10 [ 284.337500][T10216] ? __pfx_ksys_write+0x10/0x10 [ 284.337514][T10216] __do_fast_syscall_32+0xe7/0x970 [ 284.337531][T10216] ? lockdep_hardirqs_on+0x78/0x100 [ 284.337546][T10216] do_fast_syscall_32+0x32/0x70 [ 284.337576][T10216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 284.337592][T10216] RIP: 0023:0xf7fd7fec [ 284.337605][T10216] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 284.337611][T10216] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 284.337622][T10216] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 284.337629][T10216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.337635][T10216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 284.337641][T10216] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 284.337647][T10216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 284.337661][T10216] [ 284.424979][T10218] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 285.122561][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'. [ 285.504819][T10246] xt_policy: too many policy elements [ 285.930797][T10252] wg2 speed is unknown, defaulting to 1000 [ 286.027489][T10253] wg2 speed is unknown, defaulting to 1000 [ 286.317506][ T44] kauditd_printk_skb: 84 callbacks suppressed [ 286.317520][ T44] audit: type=1800 audit(1785615331.497:1049): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 286.409512][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'. [ 286.837943][ T44] audit: type=1800 audit(1785615332.017:1050): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 286.901591][ T44] audit: type=1800 audit(1785615332.077:1051): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 286.949264][ T44] audit: type=1800 audit(1785615332.127:1052): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 287.081992][ T44] audit: type=1800 audit(1785615332.267:1053): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 287.307587][T10282] wg2 speed is unknown, defaulting to 1000 [ 287.454962][T10283] wg2 speed is unknown, defaulting to 1000 [ 287.499965][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 287.542766][ T44] audit: type=1800 audit(1785615332.727:1054): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 287.655762][T10287] syzkaller0: entered promiscuous mode [ 287.658078][T10287] syzkaller0: entered allmulticast mode [ 287.660118][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 287.667928][ T24] usb 6-1: config index 0 descriptor too short (expected 15270, got 18) [ 287.679258][ T24] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 287.686027][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.704483][ T24] usb 6-1: Product: syz [ 287.705879][ T24] usb 6-1: Manufacturer: syz [ 287.710560][ T24] usb 6-1: SerialNumber: syz [ 287.716648][ T24] usb 6-1: config 0 descriptor?? [ 287.723314][ T44] audit: type=1800 audit(1785615332.907:1055): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245936 res=0 errno=0 [ 287.739150][ T24] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 287.741850][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 287.742999][ T44] audit: type=1800 audit(1785615332.917:1056): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=245968 res=0 errno=0 [ 287.747050][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 287.758201][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 287.768683][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 287.770650][ T44] audit: type=1800 audit(1785615332.937:1057): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=245943 res=0 errno=0 [ 287.773946][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 287.778814][ T44] audit: type=1800 audit(1785615332.937:1058): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=245944 res=0 errno=0 [ 287.782518][ T24] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 287.790159][ T24] usb 6-1: media controller created [ 287.810824][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.832113][ T24] usb 6-1: selecting invalid altsetting 3 [ 287.834268][ T24] ttusb2: set interface to alts=3 failed [ 287.856153][ T24] DVB: Unable to find symbol tda10086_attach() [ 287.858390][ T24] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 287.861895][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 287.863763][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 287.868273][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 287.872341][ T24] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 287.881795][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 287.918145][T10291] afs: Unknown parameter 'dyn€|' [ 287.930195][T10277] dvb-usb: bulk message failed: -22 (7/0) [ 287.932447][T10277] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 287.941537][T10277] ttusb2: i2c transfer failed. [ 287.953906][T10277] netlink: 'syz.1.998': attribute type 21 has an invalid length. [ 287.963260][T10277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.977920][T10277] netlink: 'syz.1.998': attribute type 21 has an invalid length. [ 287.984485][T10277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.304209][T10296] can0: slcan on ttyS3. [ 288.605104][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 288.614521][ T846] usb 6-1: USB disconnect, device number 15 [ 288.683663][ T846] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 288.961009][T10293] can0 (unregistered): slcan off ttyS3. [ 288.996535][T10322] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 288.998654][T10322] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 289.021465][T10322] vhci_hcd vhci_hcd.0: Device attached [ 289.214287][T10322] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 289.320595][ T846] usb 46-1: SetAddress Request (6) to port 0 [ 289.328913][ T846] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 289.539986][ T5749] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 289.584303][T10324] vhci_hcd: connection reset by peer [ 289.587970][ T8337] vhci_hcd vhci_hcd.4: stop threads [ 289.590482][ T8337] vhci_hcd vhci_hcd.4: release socket [ 289.597802][ T8337] vhci_hcd vhci_hcd.4: disconnect device [ 289.675944][T10340] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 289.685005][T10340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1009'. [ 289.699966][ T5749] usb 8-1: Using ep0 maxpacket: 32 [ 289.706686][ T5749] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 289.710009][ T5749] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 289.713520][ T5749] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 289.717082][ T5749] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 289.731918][ T5749] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 289.744226][ T5749] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.753709][ T5749] usb 8-1: Product: syz [ 289.755181][ T5749] usb 8-1: Manufacturer: syz [ 289.762298][ T5749] usb 8-1: SerialNumber: syz [ 289.780005][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 289.791575][ T5749] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input12 [ 289.854775][T10351] syzkaller0: entered promiscuous mode [ 289.857039][T10351] syzkaller0: entered allmulticast mode [ 289.920574][T10349] wg2 speed is unknown, defaulting to 1000 [ 290.009897][ T5749] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 290.016162][ T5749] (id 0x00) [ 290.030959][T10354] syzkaller0: entered promiscuous mode [ 290.035480][T10354] syzkaller0: entered allmulticast mode [ 290.043179][T10354] FAULT_INJECTION: forcing a failure. [ 290.043179][T10354] name failslab, interval 1, probability 0, space 0, times 0 [ 290.057293][T10354] CPU: 0 UID: 0 PID: 10354 Comm: syz.0.1012 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.057316][T10354] Tainted: [L]=SOFTLOCKUP [ 290.057320][T10354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 290.057327][T10354] Call Trace: [ 290.057333][T10354] [ 290.057338][T10354] dump_stack_lvl+0x100/0x190 [ 290.057357][T10354] should_fail_ex.cold+0x5/0xa [ 290.057371][T10354] should_failslab+0xc2/0x120 [ 290.057388][T10354] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 290.057404][T10354] ? __alloc_skb+0x5b7/0x710 [ 290.057420][T10354] ? __alloc_skb+0x140/0x710 [ 290.057436][T10354] __alloc_skb+0x140/0x710 [ 290.057450][T10354] ? __alloc_skb+0x5b7/0x710 [ 290.057464][T10354] ? __pfx___alloc_skb+0x10/0x10 [ 290.057482][T10354] alloc_skb_with_frags+0xdd/0x760 [ 290.057500][T10354] ? __might_fault+0xc5/0x140 [ 290.057512][T10354] ? __might_fault+0xc5/0x140 [ 290.057534][T10354] sock_alloc_send_pskb+0x801/0x980 [ 290.057550][T10354] ? _copy_from_iter+0x270/0x1690 [ 290.057572][T10354] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 290.057587][T10354] ? find_held_lock+0x2b/0x80 [ 290.057601][T10354] ? dev_get_by_index+0x180/0x380 [ 290.057617][T10354] ? dev_get_by_index+0x180/0x380 [ 290.057636][T10354] packet_sendmsg+0x1eda/0x5100 [ 290.057670][T10354] ? __pfx___might_resched+0x10/0x10 [ 290.057690][T10354] ? aa_sk_perm+0x309/0xaa0 [ 290.057707][T10354] ? __pfx_aa_sk_perm+0x10/0x10 [ 290.057722][T10354] ? __pfx_packet_sendmsg+0x10/0x10 [ 290.057740][T10354] ? apparmor_socket_sendmsg+0x15b/0x270 [ 290.057755][T10354] ____sys_sendmsg+0xa4d/0xbe0 [ 290.057766][T10354] ? __pfx_packet_sendmsg+0x10/0x10 [ 290.057782][T10354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.057802][T10354] ___sys_sendmsg+0x190/0x1e0 [ 290.057816][T10354] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.057834][T10354] ? find_held_lock+0x2b/0x80 [ 290.057855][T10354] __sys_sendmsg+0x160/0x210 [ 290.057872][T10354] ? __pfx___sys_sendmsg+0x10/0x10 [ 290.057891][T10354] ? __pfx_ksys_write+0x10/0x10 [ 290.057905][T10354] __do_fast_syscall_32+0xe7/0x970 [ 290.057922][T10354] ? lockdep_hardirqs_on+0x78/0x100 [ 290.057937][T10354] do_fast_syscall_32+0x32/0x70 [ 290.057953][T10354] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 290.057967][T10354] RIP: 0023:0xf701efec [ 290.057982][T10354] Code: Unable to access opcode bytes at 0xf701efc2. [ 290.057987][T10354] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 290.057998][T10354] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 290.058005][T10354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 290.058011][T10354] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 290.058017][T10354] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 290.058024][T10354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 290.058037][T10354] [ 290.189973][ T5749] rc_core: IR keymap rc-imon-pad not found [ 290.191868][ T5749] Registered IR keymap rc-empty [ 290.193480][ T5749] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 290.196956][ T5749] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 290.224286][ T5749] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 290.228819][ T5749] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input13 [ 290.236451][ T5749] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:16> initialized [ 290.536358][T10334] imon:send_packet: task interrupted [ 290.541979][T10334] imon:send_packet: packet tx failed (-512) [ 290.549556][T10368] wg2 speed is unknown, defaulting to 1000 [ 290.550805][T10334] imon:vfd_write: send packet #0 failed [ 290.638007][T10364] imon:vfd_write: invalid payload size [ 290.744335][T10334] bond3: entered allmulticast mode [ 290.761079][ T24] usb 8-1: USB disconnect, device number 16 [ 290.843534][T10378] syzkaller0: entered promiscuous mode [ 290.846607][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'. [ 290.848381][T10378] syzkaller0: entered allmulticast mode [ 291.079747][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1020'. [ 291.138201][T10381] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 291.151238][T10381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1019'. [ 291.342474][ T44] kauditd_printk_skb: 130 callbacks suppressed [ 291.342488][ T44] audit: type=1800 audit(1785615336.527:1189): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 291.744418][ T44] audit: type=1800 audit(1785615336.927:1190): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=255648 res=0 errno=0 [ 291.750781][ T24] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 291.910833][ T24] usb 6-1: device descriptor read/64, error -71 [ 292.150037][ T24] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 292.280643][ T24] usb 6-1: device descriptor read/64, error -71 [ 292.287279][ T44] audit: type=1800 audit(1785615337.467:1191): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 292.314339][ T44] audit: type=1800 audit(1785615337.497:1192): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 292.380749][ T44] audit: type=1800 audit(1785615337.567:1193): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 292.391717][ T24] usb usb6-port1: attempt power cycle [ 292.444934][T10405] syzkaller0: entered promiscuous mode [ 292.446716][T10405] syzkaller0: entered allmulticast mode [ 292.517662][ T44] audit: type=1800 audit(1785615337.697:1194): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 292.553254][ T44] audit: type=1800 audit(1785615337.737:1195): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 292.692659][ T44] audit: type=1800 audit(1785615337.877:1196): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 292.765355][ T44] audit: type=1800 audit(1785615337.947:1197): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 292.804216][T10412] netlink: 'syz.0.1030': attribute type 10 has an invalid length. [ 292.810505][T10412] syz_tun: entered promiscuous mode [ 292.823046][T10412] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 292.874173][ T44] audit: type=1800 audit(1785615338.057:1198): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 292.918875][T10414] FAULT_INJECTION: forcing a failure. [ 292.918875][T10414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.930178][T10414] CPU: 0 UID: 0 PID: 10414 Comm: syz.0.1031 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.930199][T10414] Tainted: [L]=SOFTLOCKUP [ 292.930203][T10414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 292.930209][T10414] Call Trace: [ 292.930214][T10414] [ 292.930218][T10414] dump_stack_lvl+0x100/0x190 [ 292.930239][T10414] should_fail_ex.cold+0x5/0xa [ 292.930253][T10414] _copy_from_iter+0x1f4/0x1690 [ 292.930274][T10414] ? __asan_memset+0x23/0x50 [ 292.930288][T10414] ? __pfx__copy_from_iter+0x10/0x10 [ 292.930305][T10414] ? __pfx___alloc_skb+0x10/0x10 [ 292.930327][T10414] netlink_sendmsg+0x808/0xda0 [ 292.930343][T10414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.930358][T10414] ? apparmor_socket_sendmsg+0x15b/0x270 [ 292.930374][T10414] ____sys_sendmsg+0xa4d/0xbe0 [ 292.930386][T10414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.930400][T10414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.930417][T10414] ___sys_sendmsg+0x190/0x1e0 [ 292.930431][T10414] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.930449][T10414] ? find_held_lock+0x2b/0x80 [ 292.930473][T10414] __sys_sendmsg+0x160/0x210 [ 292.930489][T10414] ? __pfx___sys_sendmsg+0x10/0x10 [ 292.930509][T10414] ? __pfx_ksys_write+0x10/0x10 [ 292.930523][T10414] __do_fast_syscall_32+0xe7/0x970 [ 292.930541][T10414] ? lockdep_hardirqs_on+0x78/0x100 [ 292.930556][T10414] do_fast_syscall_32+0x32/0x70 [ 292.930572][T10414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.930586][T10414] RIP: 0023:0xf701efec [ 292.930601][T10414] Code: Unable to access opcode bytes at 0xf701efc2. [ 292.930606][T10414] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 292.930617][T10414] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002400 [ 292.930624][T10414] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 292.930631][T10414] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 292.930637][T10414] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 292.930643][T10414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.930656][T10414] [ 293.659970][ T24] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 294.292267][ T24] usb 6-1: device descriptor read/8, error -71 [ 294.354820][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1033'. [ 294.389932][ T846] usb 46-1: device descriptor read/8, error -110 [ 294.618456][T10435] syzkaller0: entered promiscuous mode [ 294.626008][T10435] syzkaller0: entered allmulticast mode [ 294.775065][T10433] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.778131][T10433] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 294.783532][ T846] usb usb46-port1: attempt power cycle [ 294.875567][T10433] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.878655][T10433] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 294.923448][T10433] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.926487][T10433] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 294.962524][T10433] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.965708][T10433] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 295.049239][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 295.052161][ T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.062407][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 295.072589][ T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.084189][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 295.099958][ T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.103548][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 295.106286][ T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.185877][T10443] fuse: Bad value for 'user_id' [ 295.189127][T10443] fuse: Bad value for 'user_id' [ 295.372980][ T846] usb usb46-port1: unable to enumerate USB device [ 295.767323][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 295.854012][T10461] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 295.856816][T10461] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 295.867711][T10461] vhci_hcd vhci_hcd.0: Device attached [ 296.140129][ T2320] usb 38-1: SetAddress Request (6) to port 0 [ 296.144987][ T2320] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 296.271755][T10462] vhci_hcd: connection reset by peer [ 296.279251][ T12] vhci_hcd vhci_hcd.0: stop threads [ 296.282290][ T12] vhci_hcd vhci_hcd.0: release socket [ 296.290356][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 296.798645][ T44] kauditd_printk_skb: 22 callbacks suppressed [ 296.798659][ T44] audit: type=1800 audit(1785615341.977:1221): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 296.911994][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1045'. [ 296.921849][T10472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.930835][T10472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.029139][T10472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.045990][T10472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.182869][ T44] audit: type=1800 audit(1785615342.367:1222): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 297.209494][ T44] audit: type=1800 audit(1785615342.387:1223): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 297.233313][ T44] audit: type=1800 audit(1785615342.417:1224): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 297.240798][T10479] afs: Unknown parameter 'dyn€|' [ 297.254482][ T44] audit: type=1326 audit(1785615342.427:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.0.1048" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 297.261474][ T44] audit: type=1326 audit(1785615342.427:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.0.1048" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 297.268290][ T44] audit: type=1326 audit(1785615342.427:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.0.1048" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 297.275867][ T44] audit: type=1326 audit(1785615342.427:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.0.1048" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 297.282629][ T44] audit: type=1326 audit(1785615342.427:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.0.1048" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 297.289406][ T44] audit: type=1326 audit(1785615342.437:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.0.1048" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 297.306696][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1047'. [ 297.739157][T10482] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.886228][T10482] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.940686][T10482] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.998911][T10482] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.310036][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.322155][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.366699][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.400394][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.938329][T10494] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 298.960396][T10494] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 299.099392][T10494] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 299.135327][T10494] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 299.206178][T10506] afs: Unknown parameter 'dyn€|' [ 299.252420][T10494] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 299.264497][T10494] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 299.358221][T10494] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 299.370212][T10494] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 299.479987][ T8333] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 299.484675][ T8333] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 299.491233][ T8333] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 299.496107][ T8333] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 299.501391][ T8333] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 299.506562][ T8333] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 299.512966][ T8333] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 299.517746][ T8333] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 300.079208][T10529] FAULT_INJECTION: forcing a failure. [ 300.079208][T10529] name failslab, interval 1, probability 0, space 0, times 0 [ 300.084222][T10529] CPU: 0 UID: 0 PID: 10529 Comm: syz.3.1064 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.084241][T10529] Tainted: [L]=SOFTLOCKUP [ 300.084245][T10529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 300.084264][T10529] Call Trace: [ 300.084268][T10529] [ 300.084273][T10529] dump_stack_lvl+0x100/0x190 [ 300.084293][T10529] should_fail_ex.cold+0x5/0xa [ 300.084304][T10529] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 300.084318][T10529] should_failslab+0xc2/0x120 [ 300.084335][T10529] kmem_cache_alloc_noprof+0x91/0x6a0 [ 300.084350][T10529] ? skb_clone+0x190/0x400 [ 300.084369][T10529] skb_clone+0x190/0x400 [ 300.084385][T10529] netlink_deliver_tap+0xaed/0xcc0 [ 300.084401][T10529] netlink_unicast+0x62b/0x850 [ 300.084416][T10529] ? __pfx_netlink_unicast+0x10/0x10 [ 300.084437][T10529] netlink_sendmsg+0x8b0/0xda0 [ 300.084452][T10529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.084467][T10529] ? apparmor_socket_sendmsg+0x15b/0x270 [ 300.084482][T10529] ____sys_sendmsg+0xa4d/0xbe0 [ 300.084494][T10529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.084508][T10529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.084537][T10529] ___sys_sendmsg+0x190/0x1e0 [ 300.084552][T10529] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.084571][T10529] ? find_held_lock+0x2b/0x80 [ 300.084595][T10529] __sys_sendmsg+0x160/0x210 [ 300.084612][T10529] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.084631][T10529] ? __pfx_ksys_write+0x10/0x10 [ 300.084645][T10529] __do_fast_syscall_32+0xe7/0x970 [ 300.084662][T10529] ? lockdep_hardirqs_on+0x78/0x100 [ 300.084678][T10529] do_fast_syscall_32+0x32/0x70 [ 300.084693][T10529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.084709][T10529] RIP: 0023:0xf7fd7fec [ 300.084722][T10529] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 300.084727][T10529] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 300.084738][T10529] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000180 [ 300.084745][T10529] RDX: 0000000000000804 RSI: 0000000000000000 RDI: 0000000000000000 [ 300.084752][T10529] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 300.084758][T10529] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 300.084764][T10529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 300.084778][T10529] [ 300.258473][T10536] afs: Unknown parameter 'dyn€|' [ 300.867458][T10549] can0: slcan on ttyS3. [ 301.190332][ T2320] usb 38-1: device descriptor read/8, error -110 [ 301.240920][T10538] can0 (unregistered): slcan off ttyS3. [ 301.586279][ T2320] usb usb38-port1: attempt power cycle [ 301.705005][T10564] wg2 speed is unknown, defaulting to 1000 [ 301.802643][T10588] afs: Unknown parameter 'dyn€|' [ 301.816670][ T44] kauditd_printk_skb: 120 callbacks suppressed [ 301.816686][ T44] audit: type=1326 audit(1785615346.997:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000 [ 301.840812][ T44] audit: type=1326 audit(1785615346.997:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000 [ 301.860596][ T44] audit: type=1326 audit(1785615347.017:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000 [ 301.884204][ T44] audit: type=1326 audit(1785615347.017:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000 [ 301.902795][ T44] audit: type=1326 audit(1785615347.017:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000 [ 301.923985][ T44] audit: type=1326 audit(1785615347.017:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000 [ 301.948640][ T44] audit: type=1326 audit(1785615347.017:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000 [ 301.976063][ T44] audit: type=1326 audit(1785615347.017:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000 [ 301.995147][ T44] audit: type=1326 audit(1785615347.017:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7fd7fec code=0x7ffc0000 [ 302.008224][ T44] audit: type=1326 audit(1785615347.017:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.3.1076" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000 [ 302.152540][ T2320] usb usb38-port1: unable to enumerate USB device [ 302.170189][T10584] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1075'. [ 302.273173][T10580] wg2 speed is unknown, defaulting to 1000 [ 302.743733][T10607] netlink: 'syz.1.1081': attribute type 10 has an invalid length. [ 302.749692][T10607] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1081'. [ 302.761735][T10607] dummy0: entered promiscuous mode [ 302.767718][T10607] bridge0: port 3(dummy0) entered blocking state [ 302.773206][T10607] bridge0: port 3(dummy0) entered disabled state [ 302.788680][T10607] bridge0: port 3(dummy0) entered blocking state [ 302.790924][T10607] bridge0: port 3(dummy0) entered forwarding state [ 303.726315][T10618] afs: Unknown parameter 'dyn€|' [ 304.018062][T10629] Cannot find set identified by id 2 to match [ 304.066353][T10634] FAULT_INJECTION: forcing a failure. [ 304.066353][T10634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.081191][ T5752] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 304.096127][T10634] CPU: 0 UID: 0 PID: 10634 Comm: syz.4.1091 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.096161][T10634] Tainted: [L]=SOFTLOCKUP [ 304.096165][T10634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 304.096171][T10634] Call Trace: [ 304.096176][T10634] [ 304.096181][T10634] dump_stack_lvl+0x100/0x190 [ 304.096200][T10634] should_fail_ex.cold+0x5/0xa [ 304.096214][T10634] _copy_from_user+0x2e/0xd0 [ 304.096234][T10634] kstrtouint_from_user+0xd6/0x1d0 [ 304.096248][T10634] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 304.096260][T10634] ? __lock_acquire+0x49f/0x1a40 [ 304.096285][T10634] proc_fail_nth_write+0x83/0x220 [ 304.096302][T10634] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 304.096321][T10634] vfs_write+0x2aa/0x1050 [ 304.096333][T10634] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 304.096349][T10634] ? __pfx_vfs_write+0x10/0x10 [ 304.096358][T10634] ? find_held_lock+0x2b/0x80 [ 304.096372][T10634] ? __fget_files+0x215/0x3d0 [ 304.096385][T10634] ? __fget_files+0x21f/0x3d0 [ 304.096399][T10634] ksys_write+0x12a/0x250 [ 304.096409][T10634] ? __pfx_ksys_write+0x10/0x10 [ 304.096424][T10634] do_int80_emulation+0x14b/0x720 [ 304.096443][T10634] asm_int80_emulation+0x1a/0x20 [ 304.096455][T10634] RIP: 0023:0xf71d73eb [ 304.096464][T10634] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 304.096475][T10634] RSP: 002b:00000000f54964bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 304.096487][T10634] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54965d0 [ 304.096494][T10634] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.096500][T10634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.096506][T10634] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 304.096513][T10634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.096526][T10634] [ 304.212105][T10638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1092'. [ 304.251275][ T5752] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.254402][ T5752] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 304.257593][ T5752] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.274711][ T5752] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 304.277737][ T5752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 304.302533][ T5752] usb 6-1: Product: syz [ 304.303964][ T5752] usb 6-1: Manufacturer: syz [ 304.305594][ T5752] usb 6-1: SerialNumber: syz [ 304.495249][ T9] libceph: connect (1)[c::]:6789 error -101 [ 304.497609][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 304.538180][ T5752] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 304.745938][T10622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.755337][T10622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.762630][ T5752] libceph: connect (1)[c::]:6789 error -101 [ 304.764600][ T5752] libceph: mon0 (1)[c::]:6789 connect error [ 304.795008][T10629] ceph: No mds server is up or the cluster is laggy [ 304.863139][ T9] usb 6-1: USB disconnect, device number 20 [ 304.900970][ T9] usblp0: removed [ 305.486956][T10662] comedi comedi3: pcl818: I/O base address or length out of range [ 305.829887][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 306.683663][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 306.686453][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.688884][ T9] usb 6-1: Product: syz [ 306.690313][ T9] usb 6-1: Manufacturer: syz [ 306.692175][ T9] usb 6-1: SerialNumber: syz [ 306.829568][ T44] kauditd_printk_skb: 80 callbacks suppressed [ 306.829582][ T44] audit: type=1800 audit(1785615352.007:1441): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 306.839223][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 307.011260][T10685] syzkaller0: entered promiscuous mode [ 307.013133][T10685] syzkaller0: entered allmulticast mode [ 307.367367][ T44] audit: type=1800 audit(1785615352.097:1442): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 307.373446][ T44] audit: type=1800 audit(1785615352.267:1443): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=265393 res=0 errno=0 [ 307.379373][ T44] audit: type=1800 audit(1785615352.277:1444): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=265425 res=0 errno=0 [ 307.385952][ T44] audit: type=1800 audit(1785615352.277:1445): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=265400 res=0 errno=0 [ 307.393592][ T44] audit: type=1800 audit(1785615352.277:1446): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 307.400383][ T44] audit: type=1800 audit(1785615352.277:1447): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=265401 res=0 errno=0 [ 307.406671][ T44] audit: type=1800 audit(1785615352.287:1448): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=265422 res=0 errno=0 [ 307.418979][ T44] audit: type=1800 audit(1785615352.287:1449): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=265423 res=0 errno=0 [ 307.426430][ T44] audit: type=1800 audit(1785615352.287:1450): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=265402 res=0 errno=0 [ 307.910465][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 307.913301][ T9] ath9k_htc: Failed to initialize the device [ 307.921201][T10700] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 307.932378][T10700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1113'. [ 307.967977][ T9] usb 6-1: ath9k_htc: USB layer deinitialized [ 308.454373][T10710] netlink: 'syz.4.1116': attribute type 1 has an invalid length. [ 308.577071][ T5752] usb 6-1: USB disconnect, device number 21 [ 308.606561][T10713] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 308.621438][T10713] bond1 (unregistering): Released all slaves [ 308.647376][T10710] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1116'. [ 308.689001][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a6aec00: rx timeout, send abort [ 309.189694][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d78a000: rx timeout, send abort [ 309.193178][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a6aec00: abort rx timeout. Force session deactivation [ 309.692386][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d78a000: abort rx timeout. Force session deactivation [ 310.392944][T10734] overlay: ./file0 is not a directory [ 310.517361][T10737] wg2 speed is unknown, defaulting to 1000 [ 310.819277][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 311.387576][T10753] ptrace attach of "/syz-executor exec"[5742] was attempted by " [ 311.500233][T10755] syzkaller0: entered promiscuous mode [ 311.530663][T10755] syzkaller0: entered allmulticast mode [ 311.767449][T10765] syzkaller0: entered promiscuous mode [ 311.774317][T10765] syzkaller0: entered allmulticast mode [ 311.780595][T10767] netlink: 'syz.3.1133': attribute type 12 has an invalid length. [ 311.782504][T10765] FAULT_INJECTION: forcing a failure. [ 311.782504][T10765] name failslab, interval 1, probability 0, space 0, times 0 [ 311.787361][T10767] netlink: 'syz.3.1133': attribute type 29 has an invalid length. [ 311.791727][T10767] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1133'. [ 311.796190][T10765] CPU: 0 UID: 0 PID: 10765 Comm: syz.4.1132 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.796208][T10765] Tainted: [L]=SOFTLOCKUP [ 311.796212][T10765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 311.796219][T10765] Call Trace: [ 311.796223][T10765] [ 311.796228][T10765] dump_stack_lvl+0x100/0x190 [ 311.796247][T10765] should_fail_ex.cold+0x5/0xa [ 311.796260][T10765] should_failslab+0xc2/0x120 [ 311.796277][T10765] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 311.796292][T10765] ? __alloc_skb+0x5b7/0x710 [ 311.796308][T10765] ? __alloc_skb+0x140/0x710 [ 311.796324][T10765] __alloc_skb+0x140/0x710 [ 311.796338][T10765] ? __alloc_skb+0x5b7/0x710 [ 311.796353][T10765] ? __pfx___alloc_skb+0x10/0x10 [ 311.796371][T10765] alloc_skb_with_frags+0xdd/0x760 [ 311.796388][T10765] ? __might_fault+0xc5/0x140 [ 311.796401][T10765] ? __might_fault+0xc5/0x140 [ 311.796415][T10765] sock_alloc_send_pskb+0x801/0x980 [ 311.796430][T10765] ? _copy_from_iter+0x270/0x1690 [ 311.796451][T10765] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 311.796466][T10765] ? find_held_lock+0x2b/0x80 [ 311.796480][T10765] ? dev_get_by_index+0x180/0x380 [ 311.796496][T10765] ? dev_get_by_index+0x180/0x380 [ 311.796515][T10765] packet_sendmsg+0x1eda/0x5100 [ 311.796535][T10765] ? __pfx___might_resched+0x10/0x10 [ 311.796556][T10765] ? aa_sk_perm+0x309/0xaa0 [ 311.796574][T10765] ? __pfx_aa_sk_perm+0x10/0x10 [ 311.796588][T10765] ? __pfx_packet_sendmsg+0x10/0x10 [ 311.796607][T10765] ? apparmor_socket_sendmsg+0x15b/0x270 [ 311.796621][T10765] ____sys_sendmsg+0xa4d/0xbe0 [ 311.796633][T10765] ? __pfx_packet_sendmsg+0x10/0x10 [ 311.796648][T10765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.796666][T10765] ___sys_sendmsg+0x190/0x1e0 [ 311.796684][T10765] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.796703][T10765] ? find_held_lock+0x2b/0x80 [ 311.796725][T10765] __sys_sendmsg+0x160/0x210 [ 311.796741][T10765] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.796761][T10765] ? __pfx_ksys_write+0x10/0x10 [ 311.796775][T10765] __do_fast_syscall_32+0xe7/0x970 [ 311.796792][T10765] ? lockdep_hardirqs_on+0x78/0x100 [ 311.796808][T10765] do_fast_syscall_32+0x32/0x70 [ 311.796823][T10765] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.796838][T10765] RIP: 0023:0xf7fd3fec [ 311.796851][T10765] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 311.796857][T10765] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 311.796868][T10765] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 311.796875][T10765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.796881][T10765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.796887][T10765] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 311.796894][T10765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.796907][T10765] [ 311.798146][T10767] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1133'. [ 312.204788][ T44] kauditd_printk_skb: 30 callbacks suppressed [ 312.204805][ T44] audit: type=1800 audit(1785615356.389:1481): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=270233 res=0 errno=0 [ 312.259203][ T44] audit: type=1800 audit(1785615356.439:1482): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 312.320558][ T44] audit: type=1800 audit(1785615356.489:1483): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 312.526642][ T44] audit: type=1800 audit(1785615356.709:1484): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 312.770584][T10779] Mass Storage Function, version: 2009/09/11 [ 312.784331][T10779] LUN: removable file: (no medium) [ 312.795203][T10776] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 312.809945][T10776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1134'. [ 312.821402][ T44] audit: type=1800 audit(1785615356.999:1485): pid=10779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1136" name="num_buffers" dev="configfs" ino=38594 res=0 errno=0 [ 312.824124][ T44] audit: type=1800 audit(1785615357.009:1486): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=270252 res=0 errno=0 [ 312.832336][ T44] audit: type=1800 audit(1785615357.019:1487): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=270264 res=0 errno=0 [ 312.845958][ T44] audit: type=1800 audit(1785615357.029:1488): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=270276 res=0 errno=0 [ 313.157474][ T44] audit: type=1800 audit(1785615357.339:1489): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 313.346155][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1138'. [ 313.402905][T10806] FAULT_INJECTION: forcing a failure. [ 313.402905][T10806] name failslab, interval 1, probability 0, space 0, times 0 [ 313.418315][T10806] CPU: 0 UID: 0 PID: 10806 Comm: syz.1.1141 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.418338][T10806] Tainted: [L]=SOFTLOCKUP [ 313.418341][T10806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 313.418349][T10806] Call Trace: [ 313.418353][T10806] [ 313.418358][T10806] dump_stack_lvl+0x100/0x190 [ 313.418378][T10806] should_fail_ex.cold+0x5/0xa [ 313.418403][T10806] should_failslab+0xc2/0x120 [ 313.418421][T10806] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 313.418436][T10806] ? start_dirop+0x79/0xb0 [ 313.418454][T10806] ? alloc_inode+0x68/0x250 [ 313.418470][T10806] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 313.418506][T10806] alloc_inode+0x68/0x250 [ 313.418521][T10806] new_inode+0x22/0x1c0 [ 313.418536][T10806] __debugfs_create_file+0x105/0x4f0 [ 313.418555][T10806] debugfs_create_file_full+0x41/0x60 [ 313.418573][T10806] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 313.418586][T10806] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 313.418609][T10806] ? lockdep_init_map_type+0x5c/0x250 [ 313.418623][T10806] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 313.418639][T10806] alloc_netdev_mqs+0x314/0x15c0 [ 313.418660][T10806] ip6gre_tunnel_siocdevprivate+0x6db/0x1150 [ 313.418679][T10806] ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 313.418698][T10806] ? __do_fast_syscall_32+0xe7/0x970 [ 313.418715][T10806] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.418735][T10806] ? full_name_hash+0xbc/0x100 [ 313.418748][T10806] ? netdev_name_node_lookup+0x107/0x150 [ 313.418764][T10806] dev_ifsioc+0xc2f/0x1f10 [ 313.418792][T10806] ? __pfx_dev_ifsioc+0x10/0x10 [ 313.418806][T10806] ? __pfx___mutex_lock+0x10/0x10 [ 313.418826][T10806] ? dev_load+0x8e/0x240 [ 313.418840][T10806] ? dev_load+0x8e/0x240 [ 313.418861][T10806] dev_ioctl+0x70e/0x1070 [ 313.418878][T10806] sock_ioctl+0x494/0x6b0 [ 313.418892][T10806] ? __pfx_sock_ioctl+0x10/0x10 [ 313.418908][T10806] ? do_vfs_ioctl+0x226/0x13e0 [ 313.418924][T10806] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 313.418941][T10806] compat_sock_ioctl+0x400/0x760 [ 313.418956][T10806] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 313.418968][T10806] ? hook_file_ioctl_common+0x140/0x440 [ 313.418986][T10806] ? __fget_files+0x21f/0x3d0 [ 313.418999][T10806] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 313.419012][T10806] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 313.419030][T10806] __do_fast_syscall_32+0xe7/0x970 [ 313.419045][T10806] ? lockdep_hardirqs_on+0x78/0x100 [ 313.419061][T10806] do_fast_syscall_32+0x32/0x70 [ 313.419077][T10806] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.419091][T10806] RIP: 0023:0xf7fe5fec [ 313.419106][T10806] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 313.419110][T10806] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 313.419122][T10806] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000000089f1 [ 313.419129][T10806] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.419135][T10806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.419141][T10806] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 313.419147][T10806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.419161][T10806] [ 313.514139][T10806] debugfs: out of free dentries, can not create file 'netdev@ffff88802a116700' [ 313.534163][ T44] audit: type=1800 audit(1785615357.609:1490): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172359 res=0 errno=0 [ 313.769746][T10818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'. [ 314.009757][T10816] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 314.024067][T10816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1145'. [ 314.135437][T10828] binder: 10822:10828 ioctl c0306201 800003c0 returned -14 [ 314.741890][T10838] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 314.777333][T10838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1150'. [ 315.775001][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1157'. [ 315.790321][T10867] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 315.794419][T10867] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 315.799223][T10867] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 315.803717][T10867] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 315.812093][T10867] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 315.836607][T10867] FAULT_INJECTION: forcing a failure. [ 315.836607][T10867] name failslab, interval 1, probability 0, space 0, times 0 [ 315.841160][T10867] CPU: 2 UID: 0 PID: 10867 Comm: syz.3.1157 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.841179][T10867] Tainted: [L]=SOFTLOCKUP [ 315.841183][T10867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 315.841190][T10867] Call Trace: [ 315.841194][T10867] [ 315.841198][T10867] dump_stack_lvl+0x100/0x190 [ 315.841218][T10867] should_fail_ex.cold+0x5/0xa [ 315.841232][T10867] should_failslab+0xc2/0x120 [ 315.841248][T10867] __kmalloc_cache_noprof+0x91/0x6c0 [ 315.841260][T10867] ? __queue_work+0x45e/0x12b0 [ 315.841277][T10867] ? kobject_uevent_env+0x263/0x18b0 [ 315.841294][T10867] kobject_uevent_env+0x263/0x18b0 [ 315.841308][T10867] ? queue_work_on+0x11b/0x1e0 [ 315.841323][T10867] ? lockdep_hardirqs_on+0x78/0x100 [ 315.841341][T10867] rfkill_set_block+0x3b6/0x510 [ 315.841357][T10867] rfkill_fop_write+0x2c0/0x580 [ 315.841370][T10867] ? __pfx_rfkill_fop_write+0x10/0x10 [ 315.841383][T10867] ? __pfx_bpf_lsm_file_permission+0x10/0x10 [ 315.841394][T10867] ? security_file_permission+0x76/0x210 [ 315.841412][T10867] ? rw_verify_area+0xce/0x6d0 [ 315.841430][T10867] vfs_write+0x2aa/0x1050 [ 315.841441][T10867] ? __pfx_rfkill_fop_write+0x10/0x10 [ 315.841455][T10867] ? __pfx_vfs_write+0x10/0x10 [ 315.841464][T10867] ? find_held_lock+0x2b/0x80 [ 315.841478][T10867] ? __fget_files+0x215/0x3d0 [ 315.841488][T10867] ? __fget_files+0x215/0x3d0 [ 315.841500][T10867] ? __fget_files+0x21f/0x3d0 [ 315.841514][T10867] ksys_write+0x1f8/0x250 [ 315.841524][T10867] ? __pfx_ksys_write+0x10/0x10 [ 315.841534][T10867] ? ksys_write+0x1ac/0x250 [ 315.841544][T10867] ? __pfx_ksys_write+0x10/0x10 [ 315.841557][T10867] __do_fast_syscall_32+0xe7/0x970 [ 315.841572][T10867] ? lockdep_hardirqs_on+0x78/0x100 [ 315.841587][T10867] do_fast_syscall_32+0x32/0x70 [ 315.841606][T10867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.841620][T10867] RIP: 0023:0xf7fd7fec [ 315.841635][T10867] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 315.841640][T10867] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 315.841651][T10867] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080000080 [ 315.841658][T10867] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.841664][T10867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.841670][T10867] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 315.841676][T10867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.841689][T10867] [ 316.107719][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 316.386082][T10878] afs: Unknown parameter 'dyn€|' [ 316.953403][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.955631][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.027087][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1164'. [ 317.034765][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1164'. [ 317.194758][T10907] afs: Unknown parameter 'dyn€|' [ 317.210707][ T44] kauditd_printk_skb: 57 callbacks suppressed [ 317.210719][ T44] audit: type=1326 audit(1785615361.399:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10906 comm="syz.0.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 317.234916][ T44] audit: type=1326 audit(1785615361.409:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10906 comm="syz.0.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 317.257369][ T44] audit: type=1326 audit(1785615361.409:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10906 comm="syz.0.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 317.279106][ T44] audit: type=1326 audit(1785615361.409:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10906 comm="syz.0.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 317.289246][ T44] audit: type=1326 audit(1785615361.409:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10906 comm="syz.0.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701efec code=0x7ffc0000 [ 317.305913][ T44] audit: type=1326 audit(1785615361.409:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10906 comm="syz.0.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 317.315053][T10912] FAULT_INJECTION: forcing a failure. [ 317.315053][T10912] name failslab, interval 1, probability 0, space 0, times 0 [ 317.323117][T10912] CPU: 0 UID: 0 PID: 10912 Comm: syz.4.1169 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.323137][T10912] Tainted: [L]=SOFTLOCKUP [ 317.323141][T10912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.323148][T10912] Call Trace: [ 317.323152][T10912] [ 317.323157][T10912] dump_stack_lvl+0x100/0x190 [ 317.323178][T10912] should_fail_ex.cold+0x5/0xa [ 317.323192][T10912] should_failslab+0xc2/0x120 [ 317.323209][T10912] kmem_cache_alloc_noprof+0x91/0x6a0 [ 317.323224][T10912] ? rcu_is_watching+0x12/0xc0 [ 317.323239][T10912] ? prepare_creds+0x2c/0x950 [ 317.323258][T10912] prepare_creds+0x2c/0x950 [ 317.323276][T10912] __do_sys_landlock_restrict_self+0x65b/0x9e0 [ 317.323295][T10912] __do_fast_syscall_32+0xe7/0x970 [ 317.323313][T10912] ? lockdep_hardirqs_on+0x78/0x100 [ 317.323329][T10912] do_fast_syscall_32+0x32/0x70 [ 317.323345][T10912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.323361][T10912] RIP: 0023:0xf7fd3fec [ 317.323371][T10912] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 317.323382][T10912] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 00000000000001be [ 317.323394][T10912] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 000000000000000c [ 317.323401][T10912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.323407][T10912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.323414][T10912] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 317.323421][T10912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.323434][T10912] [ 317.325896][ T44] audit: type=1326 audit(1785615361.409:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10906 comm="syz.0.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 317.466048][ T44] audit: type=1326 audit(1785615361.409:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10906 comm="syz.0.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 317.481030][ T44] audit: type=1326 audit(1785615361.409:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10906 comm="syz.0.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 317.496183][ T44] audit: type=1326 audit(1785615361.409:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10906 comm="syz.0.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf701efec code=0x7ffc0000 [ 317.664120][T10914] wg2 speed is unknown, defaulting to 1000 [ 318.164064][T10925] netlink: 'syz.0.1171': attribute type 12 has an invalid length. [ 319.081404][T10947] sock: sock_set_timeout: `syz.3.1180' (pid 10947) tries to set negative timeout [ 319.202879][T10950] FAULT_INJECTION: forcing a failure. [ 319.202879][T10950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.216193][T10950] CPU: 0 UID: 0 PID: 10950 Comm: syz.3.1181 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.216216][T10950] Tainted: [L]=SOFTLOCKUP [ 319.216220][T10950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.216227][T10950] Call Trace: [ 319.216232][T10950] [ 319.216237][T10950] dump_stack_lvl+0x100/0x190 [ 319.216258][T10950] should_fail_ex.cold+0x5/0xa [ 319.216272][T10950] _copy_from_user+0x2e/0xd0 [ 319.216292][T10950] sk_setsockopt+0x2f2/0x5d80 [ 319.216315][T10950] ? __pfx_sk_setsockopt+0x10/0x10 [ 319.216333][T10950] ? rcu_read_lock_any_held+0x6a/0xa0 [ 319.216353][T10950] ? find_held_lock+0x2b/0x80 [ 319.216369][T10950] ? aa_sock_opt_perm+0xfe/0x1b0 [ 319.216384][T10950] do_sock_setsockopt+0x193/0x1d0 [ 319.216406][T10950] __sys_setsockopt+0x119/0x190 [ 319.216446][T10950] __ia32_sys_setsockopt+0xbc/0x160 [ 319.216462][T10950] ? __do_fast_syscall_32+0x98/0x970 [ 319.216481][T10950] ? lockdep_hardirqs_on+0x78/0x100 [ 319.216496][T10950] __do_fast_syscall_32+0xe7/0x970 [ 319.216512][T10950] ? lockdep_hardirqs_on+0x78/0x100 [ 319.216528][T10950] do_fast_syscall_32+0x32/0x70 [ 319.216544][T10950] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.216559][T10950] RIP: 0023:0xf7fd7fec [ 319.216575][T10950] Code: Unable to access opcode bytes at 0xf7fd7fc2. [ 319.216580][T10950] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 319.216592][T10950] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 319.216599][T10950] RDX: 0000000000000015 RSI: 0000000080000040 RDI: 0000000000000010 [ 319.216605][T10950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.216612][T10950] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 319.216618][T10950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.216631][T10950] [ 319.345134][T10940] FAULT_INJECTION: forcing a failure. [ 319.345134][T10940] name failslab, interval 1, probability 0, space 0, times 0 [ 319.356893][T10940] CPU: 0 UID: 0 PID: 10940 Comm: syz.4.1173 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.356916][T10940] Tainted: [L]=SOFTLOCKUP [ 319.356919][T10940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.356926][T10940] Call Trace: [ 319.356931][T10940] [ 319.356936][T10940] dump_stack_lvl+0x100/0x190 [ 319.356956][T10940] should_fail_ex.cold+0x5/0xa [ 319.356969][T10940] should_failslab+0xc2/0x120 [ 319.356986][T10940] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 319.357003][T10940] ? kvasprintf_const+0x66/0x1a0 [ 319.357018][T10940] kvasprintf+0xbc/0x150 [ 319.357036][T10940] ? __pfx_kvasprintf+0x10/0x10 [ 319.357054][T10940] ? acpi_dev_for_each_child+0x88/0xc0 [ 319.357085][T10940] ? find_held_lock+0x2b/0x80 [ 319.357102][T10940] kvasprintf_const+0x66/0x1a0 [ 319.357113][T10940] kobject_set_name_vargs+0x5a/0x140 [ 319.357126][T10940] dev_set_name+0xc7/0x100 [ 319.357167][T10940] ? __pfx_dev_set_name+0x10/0x10 [ 319.357182][T10940] ? set_primary_fwnode+0x11a/0x2a0 [ 319.357192][T10940] ? pci_dev_assign_slot+0x151/0x1b0 [ 319.357212][T10940] pci_setup_device+0x5f5/0x2500 [ 319.357229][T10940] ? __pfx_pci_setup_device+0x10/0x10 [ 319.357243][T10940] ? kasan_save_track+0x14/0x30 [ 319.357257][T10940] ? __kasan_kmalloc+0xaa/0xb0 [ 319.357271][T10940] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 319.357284][T10940] ? lockdep_init_map_type+0x5c/0x250 [ 319.357295][T10940] ? __raw_spin_lock_init+0x3a/0x110 [ 319.357309][T10940] pci_scan_single_device+0x1ac/0x240 [ 319.357323][T10940] ? __pfx_pci_scan_single_device+0x10/0x10 [ 319.357336][T10940] ? lockdep_hardirqs_on+0x78/0x100 [ 319.357355][T10940] pci_scan_slot+0x1c9/0x7c0 [ 319.357369][T10940] ? __pfx_pci_scan_slot+0x10/0x10 [ 319.357383][T10940] ? rcu_is_watching+0x12/0xc0 [ 319.357412][T10940] pci_scan_child_bus_extend+0x6b/0x7b0 [ 319.357426][T10940] ? pci_find_next_bus+0x60/0xb0 [ 319.357444][T10940] pci_rescan_bus+0x18/0x40 [ 319.357457][T10940] rescan_store+0xfb/0x130 [ 319.357472][T10940] ? __pfx_rescan_store+0x10/0x10 [ 319.357485][T10940] ? sysfs_file_kobj+0xe4/0x290 [ 319.357502][T10940] ? __pfx_rescan_store+0x10/0x10 [ 319.357514][T10940] bus_attr_store+0x74/0xb0 [ 319.357526][T10940] ? __pfx_bus_attr_store+0x10/0x10 [ 319.357537][T10940] sysfs_kf_write+0xf2/0x150 [ 319.357553][T10940] kernfs_fop_write_iter+0x3e0/0x5f0 [ 319.357566][T10940] ? __pfx_sysfs_kf_write+0x10/0x10 [ 319.357582][T10940] vfs_write+0x6ac/0x1050 [ 319.357594][T10940] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 319.357609][T10940] ? __pfx_vfs_write+0x10/0x10 [ 319.357618][T10940] ? find_held_lock+0x2b/0x80 [ 319.357640][T10940] ksys_write+0x12a/0x250 [ 319.357651][T10940] ? __pfx_ksys_write+0x10/0x10 [ 319.357660][T10940] ? ksys_write+0x1ac/0x250 [ 319.357670][T10940] ? __pfx_ksys_write+0x10/0x10 [ 319.357683][T10940] __do_fast_syscall_32+0xe7/0x970 [ 319.357699][T10940] ? lockdep_hardirqs_on+0x78/0x100 [ 319.357714][T10940] do_fast_syscall_32+0x32/0x70 [ 319.357730][T10940] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.357745][T10940] RIP: 0023:0xf7fd3fec [ 319.357760][T10940] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 319.357765][T10940] RSP: 002b:00000000f545450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 319.357777][T10940] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000800001c0 [ 319.357784][T10940] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.357790][T10940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.357796][T10940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.357802][T10940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.357816][T10940] [ 319.357949][T10940] pci (null): [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 319.527119][T10940] pci (null): BAR 0 [mem 0x80000000-0x80ffffff pref] [ 319.529508][T10940] pci (null): BAR 2 [mem 0x81000000-0x81000fff] [ 319.537892][T10945] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 319.544788][T10945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1178'. [ 319.570843][T10940] pci (null): ROM [mem 0xfeae0000-0xfeaeffff pref] [ 319.577123][T10940] pci (null): Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 319.587489][T10940] pci (null): pci_fixup_video+0x0/0x280 took 10261 usecs [ 319.597904][T10940] ------------[ cut here ]------------ [ 319.599762][T10940] ret < 0 [ 319.599947][T10940] WARNING: drivers/pci/probe.c:2768 at pci_device_add+0x133b/0x1810, CPU#0: syz.4.1173/10940 [ 319.604276][T10940] Modules linked in: [ 319.608202][T10940] CPU: 0 UID: 0 PID: 10940 Comm: syz.4.1173 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.611846][T10940] Tainted: [L]=SOFTLOCKUP [ 319.613281][T10940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.616507][T10940] RIP: 0010:pci_device_add+0x133b/0x1810 [ 319.618424][T10940] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 28 f4 ff ff e8 38 3a b0 fc 90 0f 0b 90 90 0f 0b 90 e9 0e f7 ff ff e8 26 3a b0 fc 90 <0f> 0b 90 e9 7e fa ff ff e8 18 3a b0 fc 90 0f 0b 90 e9 11 fa ff ff [ 319.624573][T10940] RSP: 0018:ffffc90002d7f910 EFLAGS: 00010293 [ 319.626567][T10940] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: ffffffff85596e59 [ 319.629100][T10940] RDX: ffff888026382540 RSI: ffffffff855973da RDI: ffff888026382540 [ 319.631724][T10940] RBP: ffff88801c2e5000 R08: 0000000000000005 R09: 0000000000000000 [ 319.634310][T10940] R10: 00000000ffffffea R11: 0000000000000000 R12: ffff888021546028 [ 319.636775][T10940] R13: ffff888021546000 R14: 0000000000000001 R15: ffff88801e2c0000 [ 319.639448][T10940] FS: 0000000000000000(0000) GS:ffff888096bdf000(0063) knlGS:00000000f5454b40 [ 319.642350][T10940] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 319.644441][T10940] CR2: 0000000000000000 CR3: 00000000745e3000 CR4: 0000000000352ef0 [ 319.646970][T10940] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 319.649492][T10940] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 319.652037][T10940] Call Trace: [ 319.653051][T10940] [ 319.653993][T10940] ? __pfx_pci_device_add+0x10/0x10 [ 319.655628][T10940] ? __raw_spin_lock_init+0x3a/0x110 [ 319.657341][T10940] pci_scan_single_device+0x1d0/0x240 [ 319.659041][T10940] ? __pfx_pci_scan_single_device+0x10/0x10 [ 319.661016][T10940] ? lockdep_hardirqs_on+0x78/0x100 [ 319.662724][T10940] pci_scan_slot+0x1c9/0x7c0 [ 319.664238][T10940] ? __pfx_pci_scan_slot+0x10/0x10 [ 319.665852][T10940] ? rcu_is_watching+0x12/0xc0 [ 319.667373][T10940] pci_scan_child_bus_extend+0x6b/0x7b0 [ 319.669185][T10940] ? pci_find_next_bus+0x60/0xb0 [ 319.670899][T10940] pci_rescan_bus+0x18/0x40 [ 319.672311][T10940] rescan_store+0xfb/0x130 [ 319.673735][T10940] ? __pfx_rescan_store+0x10/0x10 [ 319.675317][T10940] ? sysfs_file_kobj+0xe4/0x290 [ 319.676884][T10940] ? __pfx_rescan_store+0x10/0x10 [ 319.678633][T10940] bus_attr_store+0x74/0xb0 [ 319.680253][T10940] ? __pfx_bus_attr_store+0x10/0x10 [ 319.681897][T10940] sysfs_kf_write+0xf2/0x150 [ 319.683384][T10940] kernfs_fop_write_iter+0x3e0/0x5f0 [ 319.685109][T10940] ? __pfx_sysfs_kf_write+0x10/0x10 [ 319.686787][T10940] vfs_write+0x6ac/0x1050 [ 319.688232][T10940] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 319.690294][T10940] ? __pfx_vfs_write+0x10/0x10 [ 319.691812][T10940] ? find_held_lock+0x2b/0x80 [ 319.693313][T10940] ksys_write+0x12a/0x250 [ 319.694696][T10940] ? __pfx_ksys_write+0x10/0x10 [ 319.696304][T10940] ? ksys_write+0x1ac/0x250 [ 319.697753][T10940] ? __pfx_ksys_write+0x10/0x10 [ 319.699316][T10940] __do_fast_syscall_32+0xe7/0x970 [ 319.701026][T10940] ? lockdep_hardirqs_on+0x78/0x100 [ 319.702663][T10940] do_fast_syscall_32+0x32/0x70 [ 319.704262][T10940] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.706262][T10940] RIP: 0023:0xf7fd3fec [ 319.707620][T10940] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 319.709738][T10940] RSP: 002b:00000000f545450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 319.712414][T10940] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000800001c0 [ 319.714942][T10940] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.717417][T10940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.720004][T10940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.722482][T10940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.724996][T10940] [ 319.725999][T10940] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 319.728287][T10940] CPU: 0 UID: 0 PID: 10940 Comm: syz.4.1173 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.731717][T10940] Tainted: [L]=SOFTLOCKUP [ 319.733114][T10940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.736275][T10940] Call Trace: [ 319.737346][T10940] [ 319.738300][T10940] dump_stack_lvl+0x100/0x190 [ 319.739828][T10940] vpanic+0x552/0x970 [ 319.741169][T10940] ? __pfx_vpanic+0x10/0x10 [ 319.742602][T10940] panic+0xd1/0xe0 [ 319.743815][T10940] ? __pfx_panic+0x10/0x10 [ 319.745216][T10940] ? check_panic_on_warn+0x1f/0x90 [ 319.746818][T10940] check_panic_on_warn.cold+0x19/0x34 [ 319.748494][T10940] ? pci_device_add+0x133b/0x1810 [ 319.750089][T10940] __warn.cold+0x191/0x318 [ 319.751485][T10940] __report_bug+0x30f/0x440 [ 319.752930][T10940] ? pci_device_add+0x133b/0x1810 [ 319.754521][T10940] ? __pfx___report_bug+0x10/0x10 [ 319.756108][T10940] ? kasan_quarantine_put+0x104/0x240 [ 319.757789][T10940] ? lockdep_hardirqs_on+0x78/0x100 [ 319.759460][T10940] ? device_add+0x2c0/0x1970 [ 319.760923][T10940] ? pci_device_add+0x133b/0x1810 [ 319.762495][T10940] report_bug+0xb2/0x220 [ 319.763868][T10940] ? pci_device_add+0x133b/0x1810 [ 319.765374][T10940] handle_bug+0x16a/0x2a0 [ 319.766697][T10940] exc_invalid_op+0x17/0x50 [ 319.768088][T10940] asm_exc_invalid_op+0x1a/0x20 [ 319.769604][T10940] RIP: 0010:pci_device_add+0x133b/0x1810 [ 319.771363][T10940] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 28 f4 ff ff e8 38 3a b0 fc 90 0f 0b 90 90 0f 0b 90 e9 0e f7 ff ff e8 26 3a b0 fc 90 <0f> 0b 90 e9 7e fa ff ff e8 18 3a b0 fc 90 0f 0b 90 e9 11 fa ff ff [ 319.777195][T10940] RSP: 0018:ffffc90002d7f910 EFLAGS: 00010293 [ 319.779102][T10940] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: ffffffff85596e59 [ 319.781574][T10940] RDX: ffff888026382540 RSI: ffffffff855973da RDI: ffff888026382540 [ 319.784046][T10940] RBP: ffff88801c2e5000 R08: 0000000000000005 R09: 0000000000000000 [ 319.786541][T10940] R10: 00000000ffffffea R11: 0000000000000000 R12: ffff888021546028 [ 319.789166][T10940] R13: ffff888021546000 R14: 0000000000000001 R15: ffff88801e2c0000 [ 319.791732][T10940] ? pci_device_add+0xdb9/0x1810 [ 319.793339][T10940] ? pci_device_add+0x133a/0x1810 [ 319.795049][T10940] ? __pfx_pci_device_add+0x10/0x10 [ 319.796758][T10940] ? __raw_spin_lock_init+0x3a/0x110 [ 319.798464][T10940] pci_scan_single_device+0x1d0/0x240 [ 319.800185][T10940] ? __pfx_pci_scan_single_device+0x10/0x10 [ 319.802153][T10940] ? lockdep_hardirqs_on+0x78/0x100 [ 319.803834][T10940] pci_scan_slot+0x1c9/0x7c0 [ 319.805307][T10940] ? __pfx_pci_scan_slot+0x10/0x10 [ 319.806930][T10940] ? rcu_is_watching+0x12/0xc0 [ 319.808466][T10940] pci_scan_child_bus_extend+0x6b/0x7b0 [ 319.810246][T10940] ? pci_find_next_bus+0x60/0xb0 [ 319.811845][T10940] pci_rescan_bus+0x18/0x40 [ 319.813291][T10940] rescan_store+0xfb/0x130 [ 319.814716][T10940] ? __pfx_rescan_store+0x10/0x10 [ 319.816373][T10940] ? sysfs_file_kobj+0xe4/0x290 [ 319.818040][T10940] ? __pfx_rescan_store+0x10/0x10 [ 319.819698][T10940] bus_attr_store+0x74/0xb0 [ 319.821144][T10940] ? __pfx_bus_attr_store+0x10/0x10 [ 319.822844][T10940] sysfs_kf_write+0xf2/0x150 [ 319.824430][T10940] kernfs_fop_write_iter+0x3e0/0x5f0 [ 319.826093][T10940] ? __pfx_sysfs_kf_write+0x10/0x10 [ 319.827746][T10940] vfs_write+0x6ac/0x1050 [ 319.829117][T10940] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 319.830971][T10940] ? __pfx_vfs_write+0x10/0x10 [ 319.832489][T10940] ? find_held_lock+0x2b/0x80 [ 319.834059][T10940] ksys_write+0x12a/0x250 [ 319.835457][T10940] ? __pfx_ksys_write+0x10/0x10 [ 319.837061][T10940] ? ksys_write+0x1ac/0x250 [ 319.838539][T10940] ? __pfx_ksys_write+0x10/0x10 [ 319.840145][T10940] __do_fast_syscall_32+0xe7/0x970 [ 319.841761][T10940] ? lockdep_hardirqs_on+0x78/0x100 [ 319.843403][T10940] do_fast_syscall_32+0x32/0x70 [ 319.844963][T10940] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.846952][T10940] RIP: 0023:0xf7fd3fec [ 319.848274][T10940] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 319.850388][T10940] RSP: 002b:00000000f545450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 319.852848][T10940] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000800001c0 [ 319.855339][T10940] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.857874][T10940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.860385][T10940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.862970][T10940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.865653][T10940] [ 319.867295][T10940] Kernel Offset: disabled [ 319.868724][T10940] Rebooting in 86400 seconds..