last executing test programs: 1m27.980661005s ago: executing program 0 (id=23): capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x5a}], 0x49}}], 0x1, 0x4044800) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x80) r3 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) mq_timedreceive(r3, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r3, &(0x7f0000000640)=""/158, 0x9e, 0x4, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, &(0x7f00000000c0)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4080000}, 0x4080) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r6) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_tcp(0xa, 0x1, 0x0) 1m26.980758392s ago: executing program 0 (id=34): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x200, {0x0, 0x0, 0x12, 0x0, {0x7, 0xd}, {0xffe0, 0x3}, {0x3, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4000854, 0x1ff, 0x43ff, 0x1, 0x8005}, 0xb9be, 0x10000000, 0x2, 0x5, 0x6, 0x18, 0x13, 0xa, 0x0, 0xffffffff, {0x0, 0x2521, 0xff, 0x9, 0x81, 0xa}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x1, 0x2c9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40000, 0x3, 0x0, 0x0, r2}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000080)={r8, @in6={{0xa, 0x4e20, 0xff, @empty, 0x19}}, 0x6, 0x400}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={r8, @in={{0x2, 0x4e21, @remote}}, 0x7b3d, 0xc40d}, 0x88) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003"], 0x10c}}, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000140), 0x4) 1m26.730555606s ago: executing program 0 (id=35): syz_io_uring_setup(0x7fbf, &(0x7f0000000140)={0x0, 0x3237, 0x800, 0x0, 0x3c1}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0x200001ff, 0x1, 0x1}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r1 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'veth0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}) write$tun(r2, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x12d, 0xb29, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x7f1, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x640100ff, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1b, 0x0, 0x6}]}}, {0x4e20, 0x4e24, 0x7d9, 0x0, @wg=@data={0x4, 0x202, 0x10001, "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"}}}}, 0x7ff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) syz_io_uring_setup(0x7fbf, &(0x7f0000000140)={0x0, 0x3237, 0x800, 0x0, 0x3c1}, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0x200001ff, 0x1, 0x1}, 0x1c) (async) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) (async) syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setpriority(0x2, r1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'veth0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}) (async) write$tun(r2, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x12d, 0xb29, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x7f1, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x640100ff, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1b, 0x0, 0x6}]}}, {0x4e20, 0x4e24, 0x7d9, 0x0, @wg=@data={0x4, 0x202, 0x10001, "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"}}}}, 0x7ff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) (async) 1m26.460602339s ago: executing program 0 (id=38): creat(&(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}, 0x4000841) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}, 0x4000841) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x40) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x40) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0), 0x106}}, 0x20) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x3203, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x2ff}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit$UBLK(r5, r6, r7, &(0x7f0000000200)=@ublk_add_dev_sqe={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000800000)=@new_dev={0x5, 0xa81, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0xa}}}) mprotect(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x1) (async) mprotect(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x1) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) 1m25.561011753s ago: executing program 0 (id=42): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101a80) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) accept4(r3, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000040)={{}, {0xa0, 0xfc}, 0x0, 0x4}) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0xa8200, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000340)) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)=""/250, 0xfa}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x3f01) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) sendto$inet(r2, &(0x7f0000000540)="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", 0x1000, 0x77f8a11217fcdfdf, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000000)='0\x00', 0x2) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000280)={0x5, 0x5, 0x8, 0x0, 0x5, 0x4, 0xa}) close(r1) 1m25.231294823s ago: executing program 0 (id=44): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x82) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x694, 0x13c, 0x13c, 0x13c, 0x504, 0x0, 0x5cc, 0x5cc, 0x5cc, 0x5cc, 0x5cc, 0x6, 0x0, {[{{@uncond, 0x0, 0x118, 0x13c, 0x0, {0x7a00000010000000}, [@common=@unspec=@cluster={{0x30}, {0x4, 0xb, 0x5}}, @common=@unspec=@helper={{0x44}, {0x1, 'syz0\x00'}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {}, {0x2, 0x0, 0x7}, 0x800003, 0xfffffffe}}}, {{@uncond, 0x0, 0x200, 0x228, 0x48000000, {}, [@inet=@rpfilter={{0x24}, {0xb}}, @common=@rt={{0x138}, {0x7, [0x7, 0x2], 0x1, 0x2, 0x1, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @empty, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x38}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @empty, @dev={0xfe, 0x80, '\x00', 0x29}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], 0xd}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8fd, 0x5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @local, [0xff, 0xffffffff, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff000000], '\x00', 'sit0\x00', {0xff}, {0xff}, 0x88, 0x4, 0x2, 0x2}, 0x0, 0xa4, 0xc8}, @HL={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6f0) syz_open_dev$radio(0x0, 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x161281) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0xe, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x4, 0x3fd]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x17000000, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x17, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe4]}, @TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r6 = dup(r4) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 1m25.170238392s ago: executing program 32 (id=44): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x82) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x694, 0x13c, 0x13c, 0x13c, 0x504, 0x0, 0x5cc, 0x5cc, 0x5cc, 0x5cc, 0x5cc, 0x6, 0x0, {[{{@uncond, 0x0, 0x118, 0x13c, 0x0, {0x7a00000010000000}, [@common=@unspec=@cluster={{0x30}, {0x4, 0xb, 0x5}}, @common=@unspec=@helper={{0x44}, {0x1, 'syz0\x00'}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {}, {0x2, 0x0, 0x7}, 0x800003, 0xfffffffe}}}, {{@uncond, 0x0, 0x200, 0x228, 0x48000000, {}, [@inet=@rpfilter={{0x24}, {0xb}}, @common=@rt={{0x138}, {0x7, [0x7, 0x2], 0x1, 0x2, 0x1, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @empty, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x38}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @empty, @dev={0xfe, 0x80, '\x00', 0x29}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], 0xd}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8fd, 0x5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @local, [0xff, 0xffffffff, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff000000], '\x00', 'sit0\x00', {0xff}, {0xff}, 0x88, 0x4, 0x2, 0x2}, 0x0, 0xa4, 0xc8}, @HL={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6f0) syz_open_dev$radio(0x0, 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x161281) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0xe, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x4, 0x3fd]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x17000000, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x17, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe4]}, @TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r6 = dup(r4) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1f50d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) 2.675961063s ago: executing program 4 (id=578): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x4c83, &(0x7f0000000400)={0x0, 0xfeda, 0x0, 0x0, 0x4f}, &(0x7f0000000180), 0x0, 0x0) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f0000000000), 0x4) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 64) ioctl$DVB_DVR_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000040)={0x1, 0x20000000, 0x9, 0xb, 0x9, 0x6}) (rerun: 64) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000045c0)=ANY=[@ANYBLOB="200000002f00090027bd7000fcdbdf25040000000c00"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) (async, rerun: 32) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16], 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 32) r6 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000002c0)={0x3c, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @ra, @calipso={0x7, 0x8, {0x0, 0x0, 0x7f, 0x9}}, @ra={0x5, 0x2, 0x7}]}, 0x28) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80) (async, rerun: 32) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.625744724s ago: executing program 1 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x8000, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x33) ioctl$BLKZEROOUT(r1, 0xc01070ce, &(0x7f0000000040)={0x1, 0xffff}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r1) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/mnt\x00') sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="08002abd7000fbdbdf250300000008000400ac1414bb08000700", @ANYRES32=r3, @ANYBLOB="14000c7a8bf779d44163278f0000000000000000000000000000000108000500ac1414bb080007001b1c8e579ca3c8317a4f28f5453d428c8948dced224d7492722a2100bfcb8da73a5b4a48cc", @ANYRES32=r1, @ANYBLOB="14000c00ff01000000000000000000000000000114000c00fc0100000000000000000000000000000600060002000000080009000200000014000b00fc0100"/76], 0x94}, 0x1, 0x0, 0x0, 0x15}, 0x4ed5adafa9822df7) 2.622803889s ago: executing program 1 (id=580): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x100058d1}, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b)<', @ANYRES32=0x0, @ANYBLOB="0c009900fdffffff6b000000"], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r4, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x815) 2.555822869s ago: executing program 1 (id=581): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x80000000, @empty}, 0x1c) socket(0x2, 0x80805, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0), 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) mkdir(&(0x7f0000000080)='./sys_mount/block/nullb0/queue/rotational\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='pvfs2\x00', 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x54c40, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0xe4a40, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000100)=@echo=0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x38, 0x40004) r7 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./sys_mount\x00', 0x400082, 0x1a9) write(r7, &(0x7f00000003c0)="0005000000d8f7359286de32088cbb0100010000000000604772b98fc06f543c82b1091ae4c4bcbe3642ae6c4baa187a1acdc5a26994253e23130332beac8203d100000000000000000000000000000000a756095b8f6dd08d2fbf75a8a09fa1824d9d1a3d7b01fb5962facde66acad1c691f3f8ef066777cb55b7e7d947b43e996ca5c1c3a1b13b463cc2bed00ebde2cd5a28050bcf6609634878733b9e35132c7dca2cd400"/176, 0xb0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000400), 0x8, 0x1000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRESOCT=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4000814}, 0x488d0) ioctl$BLKRESETZONE(r8, 0x40101283, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r1, r6, 0x2ed85027beeb6be6) pread64(r3, &(0x7f00000002c0)=""/7, 0x7, 0x9) 1.872299084s ago: executing program 3 (id=587): prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101880, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r1, @ANYRES8=0x0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000900)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/fs/cifs/Stats\x00', 0x0, 0x0) read(r8, &(0x7f0000000c00), 0x1000) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0xb0000019}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f00000001c0)=0x1) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0xb, 0xd, 0x0, 0x109, 0x4, 0x4002004c4, 0x1008, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x8000000b3, 0x8d], 0xeeee8000, 0x14d3}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)={0x8, 0x0, [{0x1, 0x10001, 0x8, 0x2, 0x3}, {0x40000000, 0x400, 0x25, 0x5, 0x10}, {0x40000000, 0x0, 0x7, 0xf, 0x7fffffff}, {0xc0000000, 0x9, 0x3a10, 0x6, 0x564}, {0xc0000000, 0xfffff800, 0x8cbb, 0x1}, {0x1, 0xf, 0x9, 0x3, 0xc81}, {0x80000001, 0x40, 0x5, 0x4, 0x7ea1}, {0x1, 0x10, 0x6, 0x8, 0x7fffffff}]}) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000017f30072d60000000000b6156fca430500000012560bc741ef31dd0623bffb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1.74365054s ago: executing program 2 (id=589): mmap$IORING_OFF_SQ_RING(0x0, 0xd5, 0x6000002, 0xb0071, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}}}]}, 0x40}}, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) 1.742564041s ago: executing program 2 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000bc0)={0x2020, 0x0, 0x0}, 0x2020) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES8=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x7, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x4, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x8, 0x8, 0xca14, 0x1, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7c, 0x80d}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0x3, 0x99, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x2}, {0xffff, 0xc22, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0x8, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x8, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0x1e38000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x4, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d53888e", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4c) r14 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r14, 0x40045567, 0x28) 1.742382056s ago: executing program 3 (id=591): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008094}, 0x8894) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) close_range(r0, 0xffffffffffffffff, 0x0) 1.625978235s ago: executing program 3 (id=592): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f00000d9000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'geneve1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x7fff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) sendmmsg$inet(r3, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="f1168cfd72e8ff25ae2eb5ecdc41136c49a3c9039a13db0fa92d37c7f1e968bd5b8a91b2ccd751d7003b7e0758bd6de18777282d6966206c58fd3e9f47adbd2ad4ee277425b7da8b9b7edd597f4e92b0560c48974738da5308a6db5a555e9da204834cf283826fa09a4a443f529f446f933b363af8268c7e4edf0c5d0e138568d9eb7859c6b6b4c3d30f0b4dbed18738e72b38d54985b664e5e23d16b38e189a90906624ec212cea2b9b849d0135da8719fc", 0xb2}, {0x0}, {0x0}], 0x3}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0xc048aeca, &(0x7f0000000180)={0x1, 0x0, [{0xb88, 0x0, 0x9}]}) 1.575695368s ago: executing program 2 (id=593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000310000085000000860000008500000011000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0xb, 0x2, 0x11, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @loopback, 0x7800, 0x7800, 0x1, 0x81}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./control\x00', 0x100, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xc, 0x1, 0x101, 0x6, 0x1100, r4, 0x2b000000, '\x00', r3, r4, 0x1, 0x5, 0x2}, 0x50) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0xd97, 0x7630, 0x9, 0x4012, r1, 0x2, '\x00', r3, r4, 0x8, 0x5, 0x3, 0xe}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000000c0)={0x83d9f762074edbc7}) getsockopt$IP_VS_SO_GET_VERSION(r9, 0x0, 0x480, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$dvb_dvr(&(0x7f0000000100), 0x8, 0x1) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) syz_open_dev$loop(&(0x7f00000003c0), 0x1fd, 0x12f382) 1.57514209s ago: executing program 4 (id=594): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x6e6bb1, 0x0, 0x1}, [@tmpl={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xfffe, 0x0, 0x2, 0x1, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, @in=@broadcast, 0x6c, 0x1, 0x0, 0x3507, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x5, r4, 0x1}) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f0000000200)='S', 0x1) r8 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000100)) r9 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r9, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r6}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, [@printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xa0}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd2}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000040)=[{r3, 0x4000}], 0x1, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r11, &(0x7f00000001c0)='jiffies', 0x7) ioctl$VIDIOC_G_SELECTION(r11, 0xc040565e, &(0x7f0000000140)={0x4, 0x1, 0x4, {0x2, 0x5000, 0x0, 0x2}}) r12 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x4000000000, 0x5e12, 0x22, 0x13, 0x100000000, 0x106c, 0x3, 0x10, 0x80000004000085, 0x0, 0x6, 0x0, 0x5, 0x8, 0x2], 0xdddd1000}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r6, 0xc0405519, &(0x7f0000000180)={0x7, 0x4, 0x200, 0x1, 'syz0\x00', 0x1}) 1.435260087s ago: executing program 2 (id=595): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x18, 0x3, 0x0) epoll_create1(0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000018000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000f9ffffffffffffff"], 0x50) r2 = syz_open_dev$radio(&(0x7f0000000500), 0x2, 0x2) ppoll(&(0x7f0000000c00)=[{r2, 0x4013}], 0x1, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e2, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) munlock(&(0x7f0000280000/0x8000)=nil, 0x8000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r11 = getpid() process_vm_readv(r11, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.334590407s ago: executing program 4 (id=596): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@rand_addr, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001600c6502bbd04000000df250a1f20fd", @ANYRES32=r1, @ANYBLOB="080008000000000008000800800000001400060000000100283d0000ed050000ffffffff"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000001000000000000000000000d64f030300000000080001000300000006000300010000002c6cbafadeaf7af8540000001c000c80060001000400000008000200000000000800030000000000"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e00010025bd7000fcdbdf250000000048d7e7d33b61e963915a497072c39ae2adc0a8bc8208252b9b14208e373340bdc5523e7d567687c3ca77fd992f2c2e17b073ca6fe5a60b70d644b1dd2a7a76b62a4c7fab3facc32d65323f1ba9f8dec1d10924685094fd62d319cf1918f57e27c164d4f8a29002f192b863c932156bf6f9955b385a2daa04d3ea1fd60436197baa10fc2fe7e2a29427ad31c0803bda64481814808d54861c7fd0fc4966a68a01ba67870d94ebbff6964bb7679ac5c73c0bdd88292abc22ab170f35d21067ec41", @ANYRES32=r1, @ANYBLOB="03000000"], 0x1c}}, 0x0) close(0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f00000000c0), 0x9, 0x619040) r2 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000680)={0x1000, [[0xffffffff, 0x9, 0xffffffff, 0x1, 0x8000001, 0xfffffffc, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0x1, 0xd74], [0x0, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac43, 0xac44, 0x0, 0x0, 0x1}, {0x7fffffff, 0x186a0, 0x0, 0x0, 0x1}, {0x101, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101002, 0x0, 0x0, 0x1}, {0x2000002, 0x106, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x9, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x400}) socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="de6900000d001c00020000004ca5e3024cca6d913c0a0002000000000fdcb5d3ce9cc0acb5d57b010000addcca2f48f008b1126598912d74dedae480153b0bc4b031f9ac6941237ccb7b7ec63cf5493a59cea6bcfcef8693b885eb63d41f2189a1a71764c33d4a97c492fc8d9d15d93997c3a332cabe332bac96638638800adadd25537ba2e23eb5b3938ce6aeb952cf9f52e4e005000000cc5d335d98a2c548e699cf83e0cd7110c5e1b4fca9ff16a9f51a9ff1c06acbf5567c0febdad07ffcb557c1976cd669e896"], 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(0x0, 0x0) ioctl(r5, 0x9, &(0x7f0000000180)="058b188d56db9426239f153e650276552a7210c0adc623094dd4cd8809b7fcdb020f33c654435d37d5ffa9977b1b9e05fb74c7bfb86d40e6d4759495a4d0e8f31e6f4337f06284c35e872efbbf311ed54c3062ee5131de91df35013e7529b28cca2c5fd320a99d7a171b1462332061c4dec1dfdabd5a9ff1d590f6f0aa16898e4fb9b8eb890a5326d83b0fdbd5") mkdirat(r4, &(0x7f0000000000)='./sys\x00', 0x0) 1.085647177s ago: executing program 1 (id=597): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x140f, 0x502, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x240040c0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) write(r0, &(0x7f0000000180)="7351acd1226acd0cd77aabae9dfaa700e8d08f7d18a9db59f5c294d89fa8cd7976ded9951c135c48d6d07b8d1c3e6df4bf5b38c2a3d2170a69329f0b64c4d8ca295b233ef74876b801489072d95881ac8fb00cb77274c9415d1caba1c1d73f6bcbbde598b243f1e2f75f44d988596abc148fed82806f2ed5d2c181ecafb4b32e32d277c1", 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000280)) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x1, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000004c0)=@get={0x1, &(0x7f00000003c0)=""/244, 0x185d}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xb0, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4880}, 0x800) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f00000006c0)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x0}}, './file0\x00'}) getresuid(&(0x7f0000000740), &(0x7f0000000780)=0x0, &(0x7f00000007c0)) write$P9_RSTATu(r0, &(0x7f0000000800)={0x60, 0x7d, 0x1, {{0x0, 0x41, 0x4, 0x7, {0x40, 0x1}, 0x200000, 0x4, 0x2, 0x6, 0x4, 'cma\x00', 0x3, ':.\'', 0x5, '%^{#/', 0x2, '[%'}, 0xa, 'netdevsim\x00', r4, 0xee01, r5}}, 0x60) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x4000, r1}, 0x14) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000940)=@o_path={&(0x7f0000000880)='./file0\x00', r6, 0x4000, r0}, 0x14) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000000980)={0x1, 0x100, 0x4000000}) r7 = openat$nvram(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) io_uring_setup(0x7fe1, &(0x7f0000000a00)={0x0, 0x381d, 0x800, 0x3, 0x1a2}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000a80)={0x0, @in6={{0xa, 0x4e21, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}, &(0x7f0000000b40)=0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000b80)=@assoc_value={r8, 0x4}, 0x8) ioctl$OCFS2_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000bc0)={0x0, 0x2, 0x8, 0xf4d1, 0x0, 0x2}) listns(&(0x7f0000000c00)={0x20, 0x0, 0x401, 0x0, 0x0, 0x5}, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0) r9 = syz_clone(0x48000, &(0x7f0000000c80)="565906276e613f869aedb717bcd7ed950465d64308a355b33ded781912b9a4093b4651acc3b0289f294f87d88d8a", 0x2e, &(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)="cfe2fd6a3a4d810a31c04f2c2feaf5680c521604af") sched_setaffinity(r9, 0x8, &(0x7f0000000d80)=0xabea) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_NAPI(r10, 0x1c, &(0x7f0000000e00), 0x1) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r7) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0xa8, r11, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x88, 0x3, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x7e, 0x1, "73329e668bac745a115cc7195bbd8dcd94f841fab8573f553ff6d84a9b926b7e7521d332ae749328222ee399d1b83a9587c1508a1e1ba54e5416f1882382d5a451f8f12d83fec1192c19acd87ee5a2b852b2d4384ba62f992df303e31125ddacfb75ce2678c12cabef106009389e69a691a86a69540edae6c683"}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10008015}, 0x4000) 1.085137645s ago: executing program 1 (id=598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000c00)={0x0, 0x2, 0x82, 0x40000000000000, 0x0, 0xf0}) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000040)={0x10001}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4c0c0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xffefcc5c, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r5, 0x4, &(0x7f00000003c0)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = add_key$user(&(0x7f0000000380), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000600)="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") ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, &(0x7f0000000480)}) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x247, 0xfffffffffffffffd) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000400)='squashfs\x00', 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r8, 0x0, 0x0, 0x0) r9 = add_key$user(&(0x7f0000006400), 0x0, &(0x7f0000000980)="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", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r9, r9}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}, 0x0, 0x58}) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11f031bf8ed2", 0x35, 0xfffffffffffffffe) 915.206923ms ago: executing program 2 (id=599): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x8000000) write(r0, &(0x7f0000000400)='1', 0x1) 759.876638ms ago: executing program 3 (id=600): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) 583.465754ms ago: executing program 2 (id=601): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a80)=@security={'security\x00', 0x44, 0x4, 0x4ac, 0xffffffff, 0x0, 0x31c, 0x150, 0xffffffff, 0xffffffff, 0x3e4, 0x3e4, 0x3e4, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7b}}, [0xffffff00, 0xff, 0x0, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0x7e5debfdf7c2f28d], 'nr0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x3a, 0xf, 0x0, 0x4}, 0x203, 0x12c, 0x150, 0x8502, {}, [@common=@unspec=@connlimit={{0x40}, {[0xffffffff, 0xff000000, 0xff000000, 0xffffffff], 0x0, 0x0, {0x2}}}, @common=@hbh={{0x48}, {0x5, 0x2, 0x1, [0x8007, 0xfffd, 0x8000, 0x9f, 0x8200, 0xb4f3, 0xffff, 0x6, 0x41, 0x7, 0xfffc, 0x6, 0x8, 0x1, 0x8, 0xd], 0x10}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xffffffff, 0xff000000, 0xffffff00], [0xff, 0x0, 0xffffffff, 0xffffff00], 'macvtap0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x89, 0x5, 0x4, 0x20}, 0x0, 0xa4, 0x1cc}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x200000, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x508) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000300)={&(0x7f0000000440)=@ll={0x11, 0x17, r8, 0x1, 0xc, 0x6, @multicast}, 0x80, &(0x7f0000002080)=[{&(0x7f00000002c0)="0f50", 0x2}], 0x1}, 0x4008041) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r9, &(0x7f0000000000)=@orangefs_parent={0x28, 0x2, {{"66aea8f615f44155093443da4feb05a7", 0xaf8f}, {"9999373d99425dd09b0f4db922a68910", 0x4}}}, 0x202000) r10 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f00000000c0)={0x980914, 0x800}) 326.091645ms ago: executing program 4 (id=602): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r1, 0x0) 325.694382ms ago: executing program 3 (id=603): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x10, 0xe000}, 0x5}], 0x1, 0x0) (async) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002940), 0x0, 0x10002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r1, 0x80) r3 = dup3(r2, r1, 0x80000) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x1, 0x0, 0x8, r4, 0x6}, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) (async) read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x70402, 0x28) write(r6, &(0x7f0000000000)='3', 0x4e) ioctl$UDMABUF_CREATE(r6, 0x40187542, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x15, "23f29c552f866e9eb030f524e626a0ce3e965c3f10"}, &(0x7f00000002c0)=0x1d) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x15, "23f29c552f866e9eb030f524e626a0ce3e965c3f10"}, &(0x7f00000002c0)=0x1d) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000340)={r7, 0xfffeffff}, &(0x7f0000000380)=0x8) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000340)={r7, 0xfffeffff}, &(0x7f0000000380)=0x8) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl(r9, 0x4048aec9, &(0x7f0000000100)="0100000000000000ffffffffffffffff") open$dir(&(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2000, 0x123) (async) open$dir(&(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2000, 0x123) syz_clone(0x21000400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 255.363414ms ago: executing program 4 (id=604): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x6384, &(0x7f0000000180)={0x0, 0xbf56, 0x11000, 0x8003, 0x2d0}, &(0x7f0000001040), &(0x7f0000000080), &(0x7f0000000000)) io_uring_enter(r1, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$MRT(r2, 0x0, 0xce, 0x0, 0x0) r3 = openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="190000001000000000000000", @ANYRES32=r0, @ANYBLOB="7decd572c7f982f85b3b62429f474aef4e9b1e1266a4e504a62128e41f9ce25897aa0724456dfb8da1c0b52fc842034f3fdfa4c3528db36de59818ce0004497f2ef664d12f06684979e46e096f3d2660cf10de2bdf7b042f5f2eee402f115578a36228455d3d14d2c5700f8d10dd6d280a35084c858ea5781fbf1cfee1ba99d91972cf8e8698366f", @ANYRES64=0x0], 0x20) r4 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr(0x69, &(0x7f0000000e40)=ANY=[@ANYBLOB="680000000000009a24000000000000002000"/32], 0x20, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg1\x00'}) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffff0}}, {{0xa, 0x0, 0x6, @private1={0xfc, 0x1, '\x00', 0x8}, 0x1ff}}}, 0x104) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x9, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, 0x0, 0x0) writev(r8, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r9, 0xc0389424, &(0x7f00000004c0)={0x3ff, 0x0, '\x00', 0x1, 0x0}) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') 1.355004ms ago: executing program 1 (id=605): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 197.402µs ago: executing program 3 (id=606): r0 = socket$kcm(0x10, 0x2, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x54, r4, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x20000000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) bind$802154_raw(r6, &(0x7f0000000100), 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0) splice(r7, 0x0, r10, 0x0, 0x25a5, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_sctp_SCTP_RTOINFO(r11, 0x84, 0x0, 0x0, 0x0) write(r6, &(0x7f00000008c0)="0a92deaedae7", 0x6) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="5d0e15d62b2047bfd5d5c1b97efe06bf19b7d494d58b9ba324c5bd0b24d9dde3e9a0e3446e4938f1dea302b0314645db19c03b5f06a119248b7e4b9ee81ae0278f4b37a25cf7af609f57850125afe89e07d31c8b65b0978b37dbd354cc9eed408ec3496a1f5101d5c757c894643e1dd8b624acf82bde2b7a79ba87643488cbc4caaa67df35cc890fbac137d0aba384a670d42d748c636489fee377ecf9bf39add018e5cd39d8db242c06d84d809312f8195c375e", 0xb4}, {&(0x7f0000000180)="e0dc4cd4e65632dc97fc8c64a743d22e86d30c24f66e27ad1f2c0ad7ac2289524917ebce42ef3b818a4fa20901def96bd54e3871c8cb56c314ade629ca689c0539ca3f60ccdfe38b446230e31394f831d4d7b99c9c8ea59945f186d7caee485ee526a73fc08a85b4607d303839b299e98738772ed8a7816563f99cd3a4060fed3ca14873e9bbd0e3dfb7beae621eff42dfc6245f2ac7", 0x96}], 0x2}, 0x60044084) openat$cgroup_int(r6, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) 0s ago: executing program 4 (id=607): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @private0, 0x5e}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3, 0x6, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x80, 0x12000}}) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x100, 0x0, 0x3, 0x0, 0x8, 0x8c}, 0x20) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @empty, @local}, &(0x7f0000000140)=0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): ll be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.179983][ T6100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.199777][ T5452] 8021q: adding VLAN 0 to HW filter on device eth3 [ 50.204421][ T5748] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 50.213430][ T6100] hsr_slave_0: entered promiscuous mode [ 50.214127][ T6100] hsr_slave_1: entered promiscuous mode [ 50.214648][ T6100] debugfs: 'hsr0' already exists in 'hsr' [ 50.214661][ T6100] Cannot create hsr debugfs directory [ 50.218343][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 50.241521][ T25] usb 7-1: unable to get BOS descriptor or descriptor too short [ 50.241558][ T25] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 50.242352][ T25] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 50.242364][ T25] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 50.242374][ T25] usb 7-1: config 14 has no interface number 0 [ 50.242382][ T25] usb 7-1: config 14 has no interface number 1 [ 50.242407][ T25] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 50.242418][ T25] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 50.242430][ T25] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 50.242442][ T25] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 50.242460][ T25] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 50.242472][ T25] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 50.242485][ T25] usb 7-1: config 14 interface 57 has no altsetting 0 [ 50.242493][ T25] usb 7-1: config 14 interface 228 has no altsetting 0 [ 50.245756][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.245768][ T25] usb 7-1: Product: syz [ 50.245775][ T25] usb 7-1: Manufacturer: syz [ 50.245782][ T25] usb 7-1: SerialNumber: syz [ 50.331183][ T6100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.335752][ T6100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.336683][ T6100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.341129][ T6100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.342061][ T6100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.350336][ T6100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.351160][ T6100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.354818][ T6100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.376754][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.376805][ T6100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.377179][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.377224][ T6100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.380434][ T5748] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 50.381633][ T5748] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 50.381692][ T5748] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.381702][ T5748] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 50.381722][ T5748] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.383551][ T5748] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 50.383563][ T5748] usb 6-1: Product: syz [ 50.383570][ T5748] usb 6-1: Manufacturer: syz [ 50.392476][ T5748] cdc_wdm 6-1:1.0: skipping garbage [ 50.392487][ T5748] cdc_wdm 6-1:1.0: skipping garbage [ 50.398548][ T5748] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 50.398559][ T5748] cdc_wdm 6-1:1.0: Unknown control protocol [ 50.424913][ T5452] 8021q: adding VLAN 0 to HW filter on device eth4 [ 50.439161][ T6100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.450194][ T193] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.451648][ T193] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.458681][ T6100] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.479472][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.479518][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.490539][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.490583][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.580414][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 51.089417][ T6180] syz.2.56 (6180): drop_caches: 2 [ 51.170040][ T25] legousbtower 7-1:14.57: interrupt endpoints not found [ 51.186619][ T5754] Bluetooth: hci0: command tx timeout [ 51.505493][ T5748] e1000 0000:00:06.0 eth0: Reset adapter [ 51.507806][ T5746] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 51.511681][ T25] legousbtower 7-1:14.228: get version request failed: -71 [ 51.511751][ T25] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 51.517538][ T25] usb 7-1: USB disconnect, device number 3 [ 51.536850][ T6173] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 51.567070][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 51.593074][ T1473] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 51.617424][ T1473] usb 6-1: USB disconnect, device number 4 [ 51.645925][ T6189] syz.2.59: vmalloc error: size 3449536512, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 51.645999][ T6189] CPU: 1 UID: 0 PID: 6189 Comm: syz.2.59 Not tainted syzkaller #0 PREEMPT(full) [ 51.646013][ T6189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.646020][ T6189] Call Trace: [ 51.646024][ T6189] [ 51.646036][ T6189] dump_stack_lvl+0x100/0x190 [ 51.646056][ T6189] warn_alloc.cold+0x9e/0xb2 [ 51.646069][ T6189] ? __pfx_warn_alloc+0x10/0x10 [ 51.646080][ T6189] ? kasan_save_stack+0x3f/0x50 [ 51.646094][ T6189] ? kasan_save_track+0x14/0x30 [ 51.646108][ T6189] ? vb2_vmalloc_alloc+0xf9/0x410 [ 51.646122][ T6189] ? __vb2_queue_alloc+0x8d5/0x1160 [ 51.646136][ T6189] ? vidioc_create_bufs+0x7d/0xf0 [ 51.646151][ T6189] ? v4l_create_bufs+0x17d/0x270 [ 51.646166][ T6189] ? __video_do_ioctl+0xb2a/0xdf0 [ 51.646183][ T6189] ? video_usercopy+0x3d3/0x14c0 [ 51.646200][ T6189] ? v4l2_ioctl+0x1bd/0x250 [ 51.646210][ T6189] ? v4l2_compat_ioctl32+0x20f/0x2d0 [ 51.646225][ T6189] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 51.646243][ T6189] ? __do_fast_syscall_32+0x13a/0x8b0 [ 51.646270][ T6189] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.646289][ T6189] __vmalloc_node_range_noprof+0x123b/0x1420 [ 51.646310][ T6189] ? vb2_vmalloc_alloc+0x135/0x410 [ 51.646328][ T6189] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 51.646350][ T6189] ? __kasan_kmalloc+0xaa/0xb0 [ 51.646395][ T6189] ? vb2_vmalloc_alloc+0x135/0x410 [ 51.646416][ T6189] vmalloc_user_noprof+0x9e/0xe0 [ 51.646442][ T6189] ? vb2_vmalloc_alloc+0x135/0x410 [ 51.646462][ T6189] vb2_vmalloc_alloc+0x135/0x410 [ 51.646611][ T6189] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 51.646639][ T6189] __vb2_queue_alloc+0x8d5/0x1160 [ 51.646676][ T6189] vb2_core_create_bufs+0x5fa/0xa30 [ 51.646703][ T6189] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 51.646732][ T6189] ? lock_acquire+0x1d1/0x380 [ 51.646757][ T6189] ? __video_do_ioctl+0x50f/0xdf0 [ 51.646790][ T6189] vb2_create_bufs+0x40c/0x830 [ 51.646816][ T6189] ? __pfx_vb2_create_bufs+0x10/0x10 [ 51.646837][ T6189] ? v4l_sanitize_colorspace+0x220/0x410 [ 51.646864][ T6189] vb2_ioctl_create_bufs+0x244/0x3e0 [ 51.646885][ T6189] ? v4l2_compat_get_user+0x883/0x11f0 [ 51.646909][ T6189] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.646938][ T6189] vidioc_create_bufs+0x7d/0xf0 [ 51.646966][ T6189] v4l_create_bufs+0x17d/0x270 [ 51.646995][ T6189] __video_do_ioctl+0xb2a/0xdf0 [ 51.647038][ T6189] ? __pfx___video_do_ioctl+0x10/0x10 [ 51.647070][ T6189] ? video_usercopy+0x145/0x14c0 [ 51.647104][ T6189] video_usercopy+0x3d3/0x14c0 [ 51.647136][ T6189] ? __pfx___video_do_ioctl+0x10/0x10 [ 51.647167][ T6189] ? __pfx_video_usercopy+0x10/0x10 [ 51.647205][ T6189] ? __fget_files+0x215/0x3d0 [ 51.647224][ T6189] ? hook_file_ioctl_common+0x140/0x440 [ 51.647260][ T6189] v4l2_ioctl+0x1bd/0x250 [ 51.647280][ T6189] v4l2_compat_ioctl32+0x20f/0x2d0 [ 51.647306][ T6189] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 51.647332][ T6189] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 51.647366][ T6189] __do_fast_syscall_32+0x13a/0x8b0 [ 51.647400][ T6189] do_fast_syscall_32+0x32/0x70 [ 51.647429][ T6189] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.647453][ T6189] RIP: 0023:0xf7f82fec [ 51.647474][ T6189] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 51.647483][ T6189] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 51.647501][ T6189] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0f8565c [ 51.647513][ T6189] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.647525][ T6189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.647535][ T6189] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.647546][ T6189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.647572][ T6189] [ 51.654206][ T6189] Mem-Info: [ 51.654235][ T6189] active_anon:5549 inactive_anon:232 isolated_anon:0 [ 51.654235][ T6189] active_file:50 inactive_file:60813 isolated_file:0 [ 51.654235][ T6189] unevictable:1000 dirty:96 writeback:0 [ 51.654235][ T6189] slab_reclaimable:9324 slab_unreclaimable:47642 [ 51.654235][ T6189] mapped:23495 shmem:1485 pagetables:1049 [ 51.654235][ T6189] sec_pagetables:292 bounce:0 [ 51.654235][ T6189] kernel_misc_reclaimable:0 [ 51.654235][ T6189] free:28057 free_pcp:18812 free_cma:0 [ 51.654263][ T6189] Node 0 active_anon:108kB inactive_anon:132kB active_file:200kB inactive_file:688kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:416kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8992kB pagetables:1552kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 51.654290][ T6189] Node 1 active_anon:22088kB inactive_anon:796kB active_file:0kB inactive_file:242564kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:93564kB dirty:372kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4308kB pagetables:2644kB sec_pagetables:60kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 51.654316][ T6189] Node 0 DMA free:2044kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:4kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:280kB local_pcp:0kB free_cma:0kB [ 51.654344][ T6189] lowmem_reserve[]: 0 277 277 277 277 [ 51.654363][ T6189] Node 0 DMA32 free:16304kB boost:2048kB min:14676kB low:17832kB high:20988kB reserved_highatomic:0kB free_highatomic:0kB active_anon:108kB inactive_anon:132kB active_file:84kB inactive_file:684kB unevictable:2000kB writepending:8kB zspages:0kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:11104kB local_pcp:1472kB free_cma:0kB [ 51.654392][ T6189] lowmem_reserve[]: 0 0 0 0 0 [ 51.654408][ T6189] Node 1 DMA32 free:93880kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22088kB inactive_anon:796kB active_file:0kB inactive_file:242564kB unevictable:2000kB writepending:372kB zspages:1988kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:63860kB local_pcp:15944kB free_cma:0kB [ 51.654437][ T6189] lowmem_reserve[]: 0 0 0 0 0 [ 51.654454][ T6189] Node 0 DMA: 39*4kB (UE) 0*8kB 4*16kB (UE) 15*32kB (U) 3*64kB (UE) 1*128kB (E) 0*256kB 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 2044kB [ 51.654559][ T6189] Node 0 DMA32: 120*4kB (UE) 34*8kB (UME) 44*16kB (UME) 68*32kB (UME) 40*64kB (UME) 25*128kB (UM) 9*256kB (UM) 7*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 16304kB [ 51.654635][ T6189] Node 1 DMA32: 60*4kB (UME) 146*8kB (UME) 27*16kB (UME) 93*32kB (UME) 19*64kB (UME) 16*128kB (UM) 25*256kB (UM) 27*512kB (UME) 14*1024kB (UME) 7*2048kB (ME) 9*4096kB (M) = 93840kB [ 51.654715][ T6189] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 51.654723][ T6189] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 51.654731][ T6189] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 51.654739][ T6189] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 51.654747][ T6189] 62646 total pagecache pages [ 51.654750][ T6189] 301 pages in swap cache [ 51.654754][ T6189] Free swap = 120204kB [ 51.654758][ T6189] Total swap = 124996kB [ 51.654761][ T6189] 524155 pages RAM [ 51.654765][ T6189] 0 pages HighMem/MovableOnly [ 51.654768][ T6189] 212121 pages reserved [ 51.654772][ T6189] 0 pages cma reserved [ 51.707731][ T5748] e1000 0000:00:06.0 eth0: Reset adapter [ 51.918023][ T55] IPVS: starting estimator thread 0... [ 52.006506][ T6206] IPVS: using max 42 ests per chain, 100800 per kthread [ 52.224139][ T6100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.420074][ T6100] veth0_vlan: entered promiscuous mode [ 52.425421][ T6100] veth1_vlan: entered promiscuous mode [ 52.445678][ T6100] veth0_macvtap: entered promiscuous mode [ 52.450530][ T6100] veth1_macvtap: entered promiscuous mode [ 52.462485][ T6100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.467648][ T6100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.525076][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.525097][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.543157][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.543171][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.556506][ T5611] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.556562][ T5611] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.556582][ T5611] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.556624][ T5611] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.639109][ T6252] nbd0: detected capacity change from 0 to 32 [ 52.641133][ T65] block nbd0: Receive control failed (result -22) [ 52.657454][ T5110] block nbd0: Dead connection, failed to find a fallback [ 52.657469][ T5110] block nbd0: shutting down sockets [ 52.657494][ T5110] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.657529][ T5110] Buffer I/O error on dev nbd0, logical block 0, async page read [ 52.658041][ T5110] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.658056][ T5110] Buffer I/O error on dev nbd0, logical block 0, async page read [ 52.658227][ T5110] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.658241][ T5110] Buffer I/O error on dev nbd0, logical block 0, async page read [ 52.658288][ T5110] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.658301][ T5110] Buffer I/O error on dev nbd0, logical block 0, async page read [ 52.658347][ T5110] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.658360][ T5110] Buffer I/O error on dev nbd0, logical block 0, async page read [ 52.658417][ T5110] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.658429][ T5110] Buffer I/O error on dev nbd0, logical block 0, async page read [ 52.658483][ T5110] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.658495][ T5110] Buffer I/O error on dev nbd0, logical block 0, async page read [ 52.658543][ T5110] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.658555][ T5110] Buffer I/O error on dev nbd0, logical block 0, async page read [ 52.658569][ T5747] ldm_validate_partition_table(): Disk read failed. [ 52.658607][ T5110] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.658620][ T5110] Buffer I/O error on dev nbd0, logical block 0, async page read [ 52.658664][ T5110] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.658676][ T5110] Buffer I/O error on dev nbd0, logical block 0, async page read [ 52.658769][ T5747] Dev nbd0: unable to read RDB block 0 [ 52.658982][ T5747] nbd0: unable to read partition table [ 52.691670][ T5747] ldm_validate_partition_table(): Disk read failed. [ 52.691954][ T5747] Dev nbd0: unable to read RDB block 0 [ 52.693697][ T5747] nbd0: unable to read partition table [ 53.266651][ T5754] Bluetooth: hci0: command tx timeout [ 53.907522][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 55.346375][ T5754] Bluetooth: hci0: command tx timeout [ 57.426256][ T5754] Bluetooth: hci0: command tx timeout [ 65.223010][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 65.264810][ T6329] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 65.684070][ T6353] netlink: 'syz.1.72': attribute type 1 has an invalid length. [ 65.688118][ T6353] netlink: 84 bytes leftover after parsing attributes in process `syz.1.72'. [ 65.884765][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.77'. [ 65.925685][ T853] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 66.065764][ T42] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 66.079504][ T853] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 66.081451][ T853] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.081488][ T853] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.084513][ T853] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.084533][ T853] usb 9-1: Product: syz [ 66.084544][ T853] usb 9-1: Manufacturer: syz [ 66.084557][ T853] usb 9-1: SerialNumber: syz [ 66.454643][ T42] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 66.464506][ T42] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 66.464527][ T42] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 66.464545][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.484843][ T6363] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 66.493751][ T42] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.646154][ T43] audit: type=1800 audit(1789797670.199:2): pid=6377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.80" name="bus" dev="9p" ino=74743347 res=0 errno=0 [ 66.756658][ T9] usb 9-1: USB disconnect, device number 2 [ 66.830605][ T1473] usb 7-1: USB disconnect, device number 4 [ 67.083511][ T6390] MTD: Couldn't look up './file0': -15 [ 67.084159][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'. [ 67.118124][ T6390] ieee802154 phy0 wpan0: encryption failed: -22 [ 67.230539][ T6393] fuse: Bad value for 'rootmode' [ 67.230991][ T6393] fuse: Unknown parameter 'OtBR>)x R 8ssL~X&ʜW%ݷQ' [ 67.337576][ T6399] comedi comedi3: pcl730: I/O base address not correctly aligned [ 68.099884][ T6409] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 68.103832][ T6410] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 68.103875][ T6410] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 68.171830][ T6413] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 68.404025][ T6429] fuse: Unknown parameter 'p' [ 69.195455][ T5530] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 69.225646][ T43] audit: type=1326 audit(1789797672.780:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 69.228957][ T43] audit: type=1326 audit(1789797672.790:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 69.228982][ T43] audit: type=1326 audit(1789797672.790:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 69.229001][ T43] audit: type=1326 audit(1789797672.790:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 69.230843][ T43] audit: type=1326 audit(1789797672.790:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 69.230950][ T43] audit: type=1326 audit(1789797672.790:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.101" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 69.231674][ T43] audit: type=1326 audit(1789797672.790:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 69.231775][ T43] audit: type=1326 audit(1789797672.790:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 69.232028][ T43] audit: type=1326 audit(1789797672.790:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6fec code=0x7ffc0000 [ 69.238389][ T6439] warning: `syz.3.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.301683][ T6444] FAULT_INJECTION: forcing a failure. [ 69.301683][ T6444] name failslab, interval 1, probability 0, space 0, times 0 [ 69.301744][ T6444] CPU: 2 UID: 0 PID: 6444 Comm: syz.3.103 Not tainted syzkaller #0 PREEMPT(full) [ 69.301769][ T6444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.301781][ T6444] Call Trace: [ 69.301789][ T6444] [ 69.301798][ T6444] dump_stack_lvl+0x100/0x190 [ 69.301831][ T6444] should_fail_ex.cold+0x5/0xa [ 69.301857][ T6444] should_failslab+0xc2/0x120 [ 69.301882][ T6444] kmem_cache_alloc_noprof+0x92/0x6a0 [ 69.301908][ T6444] ? skb_clone+0x190/0x400 [ 69.301941][ T6444] skb_clone+0x190/0x400 [ 69.301976][ T6444] netlink_deliver_tap+0xaed/0xcc0 [ 69.302007][ T6444] netlink_unicast+0x6a5/0x850 [ 69.302036][ T6444] ? __pfx_netlink_unicast+0x10/0x10 [ 69.302070][ T6444] tipc_nl_compat_recv+0x3a1/0xc40 [ 69.302101][ T6444] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 69.302127][ T6444] ? __pfx_tipc_nl_node_reset_link_stats+0x10/0x10 [ 69.302160][ T6444] ? __pfx_tipc_nl_compat_link_reset_stats+0x10/0x10 [ 69.302187][ T6444] ? lock_acquire+0x1d1/0x380 [ 69.302225][ T6444] ? trace_contention_end+0x126/0x160 [ 69.302255][ T6444] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 69.302289][ T6444] genl_family_rcv_msg_doit+0x214/0x300 [ 69.302320][ T6444] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 69.302349][ T6444] ? genl_get_cmd+0x3e7/0x760 [ 69.302384][ T6444] ? __dev_queue_xmit+0xa33/0x4970 [ 69.302407][ T6444] ? __radix_tree_lookup+0x217/0x2b0 [ 69.302444][ T6444] genl_rcv_msg+0x560/0x800 [ 69.302474][ T6444] ? __pfx_genl_rcv_msg+0x10/0x10 [ 69.302502][ T6444] ? __lock_acquire+0x5c0/0x1f40 [ 69.302530][ T6444] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 69.302567][ T6444] netlink_rcv_skb+0x159/0x420 [ 69.302591][ T6444] ? __pfx_genl_rcv_msg+0x10/0x10 [ 69.302615][ T6444] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 69.302645][ T6444] ? netlink_deliver_tap+0x1ae/0xcc0 [ 69.302668][ T6444] genl_rcv+0x28/0x40 [ 69.302708][ T6444] netlink_unicast+0x585/0x850 [ 69.302732][ T6444] ? __pfx_netlink_unicast+0x10/0x10 [ 69.302768][ T6444] netlink_sendmsg+0x8b0/0xda0 [ 69.302798][ T6444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.302827][ T6444] ? apparmor_socket_sendmsg+0x165/0x280 [ 69.302862][ T6444] ____sys_sendmsg+0xa4d/0xbe0 [ 69.302882][ T6444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.302910][ T6444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.302946][ T6444] ___sys_sendmsg+0x190/0x1e0 [ 69.302979][ T6444] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.303017][ T6444] ? find_held_lock+0x2b/0x80 [ 69.303059][ T6444] __sys_sendmsg+0x160/0x210 [ 69.303091][ T6444] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.303128][ T6444] ? __pfx_ksys_write+0x10/0x10 [ 69.303159][ T6444] __do_fast_syscall_32+0x13a/0x8b0 [ 69.303190][ T6444] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.303223][ T6444] do_fast_syscall_32+0x32/0x70 [ 69.303255][ T6444] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.303282][ T6444] RIP: 0023:0xf7fb6fec [ 69.303307][ T6444] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 69.303316][ T6444] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 69.303337][ T6444] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 69.303351][ T6444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.303363][ T6444] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.303376][ T6444] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.303386][ T6444] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.303408][ T6444] [ 69.369676][ T5530] usb 7-1: Using ep0 maxpacket: 32 [ 69.372947][ T6446] overlayfs: missing 'lowerdir' [ 69.374885][ T5530] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 69.382413][ T5530] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 69.382428][ T5530] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 69.382438][ T5530] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 69.382458][ T5530] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 69.382469][ T5530] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 69.382480][ T5530] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 69.382499][ T5530] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.447986][ T5530] usb 7-1: config 0 descriptor?? [ 69.477661][ T6449] FAULT_INJECTION: forcing a failure. [ 69.477661][ T6449] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.477682][ T6449] CPU: 0 UID: 0 PID: 6449 Comm: syz.1.105 Not tainted syzkaller #0 PREEMPT(full) [ 69.477695][ T6449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.477719][ T6449] Call Trace: [ 69.477723][ T6449] [ 69.477728][ T6449] dump_stack_lvl+0x100/0x190 [ 69.477760][ T6449] should_fail_ex.cold+0x5/0xa [ 69.477775][ T6449] _copy_from_user+0x2e/0xd0 [ 69.477789][ T6449] do_seccomp+0x622/0x2730 [ 69.477801][ T6449] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 69.477820][ T6449] ? __pfx_do_seccomp+0x10/0x10 [ 69.477832][ T6449] ? xfd_validate_state+0x129/0x190 [ 69.477856][ T6449] __do_fast_syscall_32+0x13a/0x8b0 [ 69.477872][ T6449] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.477888][ T6449] do_fast_syscall_32+0x32/0x70 [ 69.477905][ T6449] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.477919][ T6449] RIP: 0023:0xf709efec [ 69.477932][ T6449] Code: Unable to access opcode bytes at 0xf709efc2. [ 69.477936][ T6449] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 69.477947][ T6449] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000001 [ 69.477953][ T6449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.477959][ T6449] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.477965][ T6449] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.477971][ T6449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.477984][ T6449] [ 69.542738][ T6452] netlink: 'syz.1.106': attribute type 1 has an invalid length. [ 69.544991][ T6452] netlink: 84 bytes leftover after parsing attributes in process `syz.1.106'. [ 69.557635][ T6454] program syz.4.107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.660671][ T5530] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 69.670001][ T5530] usb 7-1: USB disconnect, device number 5 [ 69.680224][ T5530] usblp0: removed [ 69.755995][ T1171] IPVS: starting estimator thread 0... [ 69.807371][ T6462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.814869][ T6462] netlink: 'syz.4.108': attribute type 39 has an invalid length. [ 69.845484][ T6460] IPVS: using max 25 ests per chain, 60000 per kthread [ 69.866713][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.866735][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.867720][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.867737][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.911592][ T6464] FAULT_INJECTION: forcing a failure. [ 69.911592][ T6464] name failslab, interval 1, probability 0, space 0, times 0 [ 69.911612][ T6464] CPU: 3 UID: 0 PID: 6464 Comm: syz.1.111 Not tainted syzkaller #0 PREEMPT(full) [ 69.911624][ T6464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.911630][ T6464] Call Trace: [ 69.911634][ T6464] [ 69.911638][ T6464] dump_stack_lvl+0x100/0x190 [ 69.911656][ T6464] should_fail_ex.cold+0x5/0xa [ 69.911673][ T6464] should_failslab+0xc2/0x120 [ 69.911691][ T6464] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 69.911705][ T6464] ? __kasan_kmalloc+0xaa/0xb0 [ 69.911718][ T6464] ? __request_module+0x2d5/0x6a0 [ 69.911733][ T6464] kstrdup+0x51/0xe0 [ 69.911744][ T6464] __request_module+0x2d5/0x6a0 [ 69.911755][ T6464] ? __pfx___request_module+0x10/0x10 [ 69.911766][ T6464] ? rcu_is_watching+0x13/0xc0 [ 69.911781][ T6464] ? __wake_up+0x3f/0x60 [ 69.911794][ T6464] ? rcu_is_watching+0x13/0xc0 [ 69.911805][ T6464] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.911824][ T6464] netlink_create+0x458/0x610 [ 69.911838][ T6464] __sock_create+0x339/0x860 [ 69.911851][ T6464] __sys_socket+0x14d/0x260 [ 69.911862][ T6464] ? xfd_validate_state+0x129/0x190 [ 69.911886][ T6464] ? __pfx___sys_socket+0x10/0x10 [ 69.911905][ T6464] __ia32_sys_socket+0x72/0xb0 [ 69.911916][ T6464] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.911933][ T6464] __do_fast_syscall_32+0x13a/0x8b0 [ 69.911953][ T6464] do_fast_syscall_32+0x32/0x70 [ 69.911971][ T6464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.911986][ T6464] RIP: 0023:0xf709efec [ 69.911999][ T6464] Code: Unable to access opcode bytes at 0xf709efc2. [ 69.912004][ T6464] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 69.912015][ T6464] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 69.912022][ T6464] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 69.912028][ T6464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.912033][ T6464] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 69.912039][ T6464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.912052][ T6464] [ 70.155534][ T5530] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 70.316252][ T6475] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 70.325516][ T5530] usb 7-1: Using ep0 maxpacket: 32 [ 70.326047][ T5530] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 70.329058][ T5530] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 70.329073][ T5530] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 70.329082][ T5530] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 70.329105][ T5530] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.329115][ T5530] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 70.329127][ T5530] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 70.329146][ T5530] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.333766][ T5530] usb 7-1: config 0 descriptor?? [ 70.442117][ T6481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.116'. [ 70.443083][ T6481] Bluetooth: MGMT ver 1.23 [ 70.539323][ T5530] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 70.844777][ C1] usblp0: nonzero read bulk status received: -71 [ 70.846262][ T42] usb 7-1: USB disconnect, device number 6 [ 70.847090][ T6491] usblp0: error -71 reading from printer [ 70.860014][ T6437] usblp0: error -19 reading from printer [ 70.871749][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.871799][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.912446][ T1345] cfg80211: failed to load regulatory.db [ 71.395420][ T42] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 71.555394][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 71.559119][ T42] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 71.559948][ T42] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 71.559962][ T42] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 71.559971][ T42] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 71.559993][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.560004][ T42] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 71.560015][ T42] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 71.560034][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.561288][ T42] usb 7-1: config 0 descriptor?? [ 71.970084][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.971652][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.002441][ T6493] usblp0: removed [ 73.007855][ T42] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 73.015093][ T42] usb 7-1: USB disconnect, device number 7 [ 73.022643][ T42] usblp0: removed [ 73.569414][ T6507] netlink: 5 bytes leftover after parsing attributes in process `syz.2.123'. [ 73.569543][ T6507] 1{X: renamed from 30{X (while UP) [ 73.578939][ T6507] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 73.667319][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'. [ 74.610750][ T6536] binder: 6535:6536 ioctl c00c6211 0 returned -14 [ 74.614391][ T6538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.136'. [ 74.615213][ T6538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.136'. [ 75.882412][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'. [ 76.187297][ T6587] Bluetooth: ISO socket layer initialized [ 76.246570][ T6589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.146'. [ 76.338648][ T6556] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.338665][ T6556] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 76.355270][ T6556] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.355296][ T6556] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 76.361634][ T6556] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.361655][ T6556] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 76.371557][ T6556] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.371571][ T6556] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 77.017269][ T6616] FAULT_INJECTION: forcing a failure. [ 77.017269][ T6616] name failslab, interval 1, probability 0, space 0, times 0 [ 77.017406][ T6616] CPU: 1 UID: 0 PID: 6616 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT(full) [ 77.017426][ T6616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.017435][ T6616] Call Trace: [ 77.017441][ T6616] [ 77.017447][ T6616] dump_stack_lvl+0x100/0x190 [ 77.017473][ T6616] should_fail_ex.cold+0x5/0xa [ 77.017496][ T6616] should_failslab+0xc2/0x120 [ 77.017517][ T6616] __kmalloc_noprof+0xfc/0x840 [ 77.017535][ T6616] ? __might_fault+0xc5/0x140 [ 77.017559][ T6616] ? set_mcast_msfilter+0x3d/0x340 [ 77.017588][ T6616] set_mcast_msfilter+0x3d/0x340 [ 77.017618][ T6616] do_ip_setsockopt+0x1970/0x3200 [ 77.017639][ T6616] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 77.017658][ T6616] ? __lock_acquire+0x5c0/0x1f40 [ 77.017712][ T6616] ? lock_acquire+0x1d1/0x380 [ 77.017737][ T6616] ip_setsockopt+0x5a/0xf0 [ 77.017755][ T6616] udp_setsockopt+0x64/0xb0 [ 77.017777][ T6616] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 77.017805][ T6616] do_sock_setsockopt+0xf3/0x1d0 [ 77.017834][ T6616] __sys_setsockopt+0x119/0x190 [ 77.017860][ T6616] __ia32_sys_setsockopt+0xbc/0x160 [ 77.017882][ T6616] __do_fast_syscall_32+0x13a/0x8b0 [ 77.017911][ T6616] do_fast_syscall_32+0x32/0x70 [ 77.017943][ T6616] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.017966][ T6616] RIP: 0023:0xf7f82fec [ 77.017984][ T6616] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 77.017992][ T6616] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 77.018009][ T6616] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 77.018020][ T6616] RDX: 0000000000000030 RSI: 00000000800005c0 RDI: 000000000000008c [ 77.018031][ T6616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.018041][ T6616] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.018050][ T6616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.018072][ T6616] [ 77.401132][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 77.707337][ T6629] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 77.707359][ T6629] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 77.710068][ T6629] vhci_hcd vhci_hcd.0: Device attached [ 77.907035][ T6630] vhci_hcd: connection closed [ 77.917756][ T5611] vhci_hcd vhci_hcd.4: stop threads [ 77.918452][ T5611] vhci_hcd vhci_hcd.4: release socket [ 77.919149][ T5611] vhci_hcd vhci_hcd.4: disconnect device [ 77.975043][ T5530] usb 46-1: enqueue for inactive port 0 [ 77.995637][ T6646] FAULT_INJECTION: forcing a failure. [ 77.995637][ T6646] name failslab, interval 1, probability 0, space 0, times 0 [ 77.995658][ T6646] CPU: 2 UID: 0 PID: 6646 Comm: syz.2.164 Not tainted syzkaller #0 PREEMPT(full) [ 77.995671][ T6646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.995677][ T6646] Call Trace: [ 77.995680][ T6646] [ 77.995685][ T6646] dump_stack_lvl+0x100/0x190 [ 77.995703][ T6646] should_fail_ex.cold+0x5/0xa [ 77.995719][ T6646] should_failslab+0xc2/0x120 [ 77.995734][ T6646] __kmalloc_noprof+0xfc/0x840 [ 77.995746][ T6646] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 77.995765][ T6646] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 77.995784][ T6646] genl_family_rcv_msg_doit+0xc7/0x300 [ 77.995800][ T6646] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 77.995814][ T6646] ? genl_get_cmd+0x3e7/0x760 [ 77.995831][ T6646] ? bpf_lsm_capable+0x9/0x10 [ 77.995847][ T6646] ? security_capable+0x80/0x260 [ 77.995861][ T6646] ? ns_capable+0xd2/0xf0 [ 77.995878][ T6646] genl_rcv_msg+0x560/0x800 [ 77.995894][ T6646] ? __pfx_genl_rcv_msg+0x10/0x10 [ 77.995908][ T6646] ? __lock_acquire+0x5c0/0x1f40 [ 77.995923][ T6646] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 77.995941][ T6646] ? __pfx_nl80211_set_station+0x10/0x10 [ 77.995952][ T6646] ? __pfx_nl80211_post_doit+0x10/0x10 [ 77.995973][ T6646] netlink_rcv_skb+0x159/0x420 [ 77.995986][ T6646] ? __pfx_genl_rcv_msg+0x10/0x10 [ 77.996001][ T6646] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 77.996019][ T6646] ? netlink_deliver_tap+0x1ae/0xcc0 [ 77.996033][ T6646] genl_rcv+0x28/0x40 [ 77.996046][ T6646] netlink_unicast+0x585/0x850 [ 77.996060][ T6646] ? __pfx_netlink_unicast+0x10/0x10 [ 77.996077][ T6646] netlink_sendmsg+0x8b0/0xda0 [ 77.996092][ T6646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.996106][ T6646] ? apparmor_socket_sendmsg+0x165/0x280 [ 77.996125][ T6646] ____sys_sendmsg+0xa4d/0xbe0 [ 77.996135][ T6646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.996149][ T6646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.996165][ T6646] ___sys_sendmsg+0x190/0x1e0 [ 77.996177][ T6646] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.996195][ T6646] ? find_held_lock+0x2b/0x80 [ 77.996214][ T6646] __sys_sendmsg+0x160/0x210 [ 77.996229][ T6646] ? __pfx___sys_sendmsg+0x10/0x10 [ 77.996248][ T6646] ? __pfx_ksys_write+0x10/0x10 [ 77.996262][ T6646] __do_fast_syscall_32+0x13a/0x8b0 [ 77.996279][ T6646] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.996298][ T6646] do_fast_syscall_32+0x32/0x70 [ 77.996315][ T6646] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.996329][ T6646] RIP: 0023:0xf7f82fec [ 77.996342][ T6646] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 77.996346][ T6646] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 77.996357][ T6646] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 77.996364][ T6646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.996370][ T6646] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.996376][ T6646] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 77.996382][ T6646] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.996395][ T6646] [ 78.209755][ T6650] batadv_slave_1: entered promiscuous mode [ 78.210313][ T6650] batadv_slave_1: left promiscuous mode [ 79.126477][ T5530] usb usb46-port1: attempt power cycle [ 79.278233][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 79.284815][ T6668] syz.1.171 uses obsolete (PF_INET,SOCK_PACKET) [ 79.483147][ T6677] netlink: 'syz.1.174': attribute type 1 has an invalid length. [ 79.483168][ T6677] netlink: 84 bytes leftover after parsing attributes in process `syz.1.174'. [ 79.517666][ T6681] netlink: 132 bytes leftover after parsing attributes in process `syz.3.173'. [ 79.532491][ T6681] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 79.545059][ T6678] overlayfs: maximum fs stacking depth exceeded [ 79.556188][ T6681] overlayfs: maximum fs stacking depth exceeded [ 79.563047][ T6680] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 79.563064][ T6680] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.571884][ T6680] vhci_hcd vhci_hcd.0: Device attached [ 79.700592][ T5530] usb usb46-port1: unable to enumerate USB device [ 79.755148][ T1345] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 79.835113][ T9] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 79.865177][ T1345] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 80.035516][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.036053][ T9] usb 6-1: config 0 has no interfaces? [ 80.036077][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.039980][ T9] usb 6-1: config 0 descriptor?? [ 80.243829][ T6685] usb 39-1: recv xbuf, 0 [ 80.244046][ T5844] vhci_hcd vhci_hcd.1: stop threads [ 80.244055][ T5844] vhci_hcd vhci_hcd.1: release socket [ 80.244450][ T5844] vhci_hcd vhci_hcd.1: disconnect device [ 80.248104][ T9] usb 6-1: USB disconnect, device number 5 [ 80.283079][ T6702] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 80.297840][ T6702] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.306960][ T6702] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.307330][ T6702] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 80.307729][ T6702] bond1: (slave gre1): Error -95 calling set_mac_address [ 80.315177][ T1345] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 80.358745][ T6704] gretap0: entered promiscuous mode [ 80.363008][ T6704] bond1: (slave gretap0): making interface the new active one [ 80.363596][ T6704] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 80.390946][ T6704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.393330][ T6704] bond1: (slave bond2): Enslaving as an active interface with a down link [ 80.409741][ T6702] bond1 (unregistering): (slave gretap0): Releasing active interface [ 80.415249][ T6702] bond1 (unregistering): (slave bond2): Releasing active interface [ 80.423033][ T6702] bond1 (unregistering): Released all slaves [ 80.687875][ T6715] Console: switching to colour dummy device 80x25 [ 80.750352][ T6716] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 80.757178][ T6716] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 80.757316][ T6716] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 80.757553][ T6716] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 80.758277][ T6716] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 80.768881][ T6716] pci 0000:00:01.0: Adding to iommu group 1 [ 80.772282][ T6716] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 80.772295][ T6716] pci 0000:00:01.0: vgaarb: bridge control possible [ 80.772302][ T6716] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 80.781385][ T6716] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 80.786689][ T6716] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 80.789989][ T6716] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 80.799365][ T6716] [drm] Found bochs VGA, ID 0xb0c5. [ 80.799376][ T6716] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 80.812020][ T6716] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 80.821884][ T6719] zonefs (nullb0) ERROR: Not a zoned block device [ 80.958554][ T6716] Console: switching to colour frame buffer device 160x50 [ 81.007551][ T6716] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 81.141956][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'. [ 82.154638][ T6760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.198'. [ 82.154769][ T6760] netlink: 48 bytes leftover after parsing attributes in process `syz.4.198'. [ 82.154777][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.198'. [ 82.159353][ T6761] ipip0: entered allmulticast mode [ 82.314805][ T9] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 82.404363][ T6770] trusted_key: encrypted_key: master key parameter 'dHfault' is invalid [ 82.435862][ T6774] netlink: 68 bytes leftover after parsing attributes in process `syz.3.201'. [ 82.443124][ T6770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.454899][ T9] usb 6-1: device descriptor read/64, error -71 [ 82.602252][ T6784] Could not find key with description: [syz] [ 82.602267][ T6784] process_request_key_err: No key [ 82.602275][ T6784] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.602284][ T6784] One or more global auth toks could not properly register; rc = [-2] [ 82.602320][ T6784] Error validating options; rc = [-2] [ 82.714760][ T9] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 82.854798][ T9] usb 6-1: device descriptor read/64, error -71 [ 82.965097][ T9] usb usb6-port1: attempt power cycle [ 83.304713][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 83.325243][ T9] usb 6-1: device descriptor read/8, error -71 [ 83.469094][ T6799] fuse-io-uring is disabled by module parameter [ 83.565218][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 83.566753][ T6822] syzkaller0: entered promiscuous mode [ 83.566765][ T6822] syzkaller0: entered allmulticast mode [ 83.587214][ T9] usb 6-1: device descriptor read/8, error -71 [ 83.694766][ T9] usb usb6-port1: unable to enumerate USB device [ 84.378658][ T6843] netlink: 48 bytes leftover after parsing attributes in process `syz.2.215'. [ 84.646585][ T6847] netlink: 'syz.3.217': attribute type 1 has an invalid length. [ 84.646599][ T6847] netlink: 224 bytes leftover after parsing attributes in process `syz.3.217'. [ 84.747593][ T6862] vcan0: tx address claim with broadcast sa [ 84.781237][ T6864] FAULT_INJECTION: forcing a failure. [ 84.781237][ T6864] name failslab, interval 1, probability 0, space 0, times 0 [ 84.781264][ T6864] CPU: 0 UID: 0 PID: 6864 Comm: syz.4.220 Not tainted syzkaller #0 PREEMPT(full) [ 84.781283][ T6864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.781294][ T6864] Call Trace: [ 84.781300][ T6864] [ 84.781307][ T6864] dump_stack_lvl+0x100/0x190 [ 84.781396][ T6864] should_fail_ex.cold+0x5/0xa [ 84.781418][ T6864] should_failslab+0xc2/0x120 [ 84.781466][ T6864] __kmalloc_cache_noprof+0x91/0x6d0 [ 84.781493][ T6864] ? copy_mount_options+0x55/0x190 [ 84.781523][ T6864] copy_mount_options+0x55/0x190 [ 84.781550][ T6864] __ia32_sys_mount+0x1ab/0x310 [ 84.781574][ T6864] ? __pfx___ia32_sys_mount+0x10/0x10 [ 84.781597][ T6864] ? ksys_write+0x1ac/0x250 [ 84.781615][ T6864] ? __pfx_ksys_write+0x10/0x10 [ 84.781668][ T6864] __do_fast_syscall_32+0x13a/0x8b0 [ 84.781720][ T6864] ? lockdep_hardirqs_on+0x7d/0x110 [ 84.781747][ T6864] do_fast_syscall_32+0x32/0x70 [ 84.781789][ T6864] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.781812][ T6864] RIP: 0023:0xf708efec [ 84.781831][ T6864] Code: Unable to access opcode bytes at 0xf708efc2. [ 84.781839][ T6864] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 84.781857][ T6864] RAX: ffffffffffffffda RBX: 0000000080000400 RCX: 0000000080000000 [ 84.781868][ T6864] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000080000500 [ 84.781878][ T6864] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.781888][ T6864] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 84.781898][ T6864] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.781920][ T6864] [ 84.782744][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 85.024866][ T853] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 85.164628][ T853] usb 7-1: device descriptor read/64, error -71 [ 85.182589][ T6876] random: crng reseeded on system resumption [ 85.404590][ T853] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 85.534603][ T853] usb 7-1: device descriptor read/64, error -71 [ 85.645035][ T853] usb usb7-port1: attempt power cycle [ 86.004639][ T853] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 86.005431][ T6889] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 86.027486][ T853] usb 7-1: device descriptor read/8, error -71 [ 86.161094][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 86.213286][ T43] kauditd_printk_skb: 80 callbacks suppressed [ 86.213302][ T43] audit: type=1326 audit(1789797689.771:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.230" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb6fec code=0x0 [ 86.284631][ T853] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 86.305149][ T853] usb 7-1: device descriptor read/8, error -71 [ 86.414586][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 86.414920][ T853] usb usb7-port1: unable to enumerate USB device [ 86.564561][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 86.565290][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 86.566257][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 86.566277][ T9] usb 6-1: config 0 has no interface number 0 [ 86.566303][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 86.566321][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 86.566339][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 86.566359][ T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.566390][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.568673][ T9] usb 6-1: config 0 descriptor?? [ 86.575863][ T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 86.833468][ T6907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.838319][ T6907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.346582][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 87.506612][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 87.507229][ T25] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 87.508939][ T25] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 87.508952][ T25] usb 8-1: config 0 has no interface number 0 [ 87.508970][ T25] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.508982][ T25] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 87.510517][ T25] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 87.510529][ T25] usb 8-1: Product: syz [ 87.510536][ T25] usb 8-1: SerialNumber: syz [ 87.513739][ T25] usb 8-1: config 0 descriptor?? [ 87.521755][ T25] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 87.548805][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input12 [ 87.742848][ T6947] rnbd_client L127: Can't parse path i: -93 [ 87.748545][ T6947] block nbd0: reconnected socket [ 87.748985][ T65] block nbd0: Receive control failed (result -32) [ 88.186864][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 88.189815][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 88.190701][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 88.192482][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 89.274897][ T9] usb 6-1: USB disconnect, device number 10 [ 89.279397][ T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 89.385858][ T6981] syzkaller0: entered promiscuous mode [ 89.385872][ T6981] syzkaller0: entered allmulticast mode [ 89.749661][ T7002] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 89.791521][ T7005] IPv6: NLM_F_REPLACE set, but no existing node found! [ 89.824793][ T1345] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 89.830033][ T7007] Bluetooth: MGMT ver 1.23 [ 89.830411][ T7009] netlink: 'syz.4.257': attribute type 1 has an invalid length. [ 89.830425][ T7009] netlink: 200 bytes leftover after parsing attributes in process `syz.4.257'. [ 89.830434][ T7009] netlink: 'syz.4.257': attribute type 1 has an invalid length. [ 89.831881][ T7009] netlink: 'syz.4.257': attribute type 1 has an invalid length. [ 89.831895][ T7009] netlink: 200 bytes leftover after parsing attributes in process `syz.4.257'. [ 89.831907][ T7009] netlink: 'syz.4.257': attribute type 1 has an invalid length. [ 89.892710][ T7013] syzkaller0: entered promiscuous mode [ 89.892729][ T7013] syzkaller0: entered allmulticast mode [ 89.977677][ T1345] usb 6-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 89.979231][ T1345] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2080, setting to 64 [ 89.979249][ T1345] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 89.979269][ T1345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.980728][ T1345] usb 6-1: config 0 descriptor?? [ 90.148859][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 90.150986][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 90.151001][ C2] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 90.151043][ T9] usb 8-1: USB disconnect, device number 2 [ 90.319953][ T6995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.321089][ T6995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.519792][ T1345] usb 6-1: string descriptor 0 read error: -71 [ 91.072469][ T9] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 91.078922][ T1345] usbhid 6-1:0.0: can't add hid device: -71 [ 91.078973][ T1345] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 91.082155][ T1345] usb 6-1: USB disconnect, device number 11 [ 91.144897][ T7030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.147243][ T7031] netlink: 'syz.1.264': attribute type 21 has an invalid length. [ 91.147287][ T7031] netlink: 132 bytes leftover after parsing attributes in process `syz.1.264'. [ 91.148410][ T7030] fuse: Unknown parameter '0x0000000000000005' [ 91.253477][ T7038] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 91.254103][ T7038] syzkaller0: entered promiscuous mode [ 91.254114][ T7038] syzkaller0: entered allmulticast mode [ 91.504990][ T853] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 91.634288][ T853] usb 7-1: device descriptor read/64, error -71 [ 91.874289][ T853] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 92.007273][ T853] usb 7-1: device descriptor read/64, error -71 [ 92.009272][ T7047] netlink: 36 bytes leftover after parsing attributes in process `syz.4.268'. [ 92.013244][ T7040] i2c i2c-1: dtv_property_process_set: SET cmd 0xffffffff undefined [ 92.040157][ T7049] 9pnet_virtio: no channels available for device syz [ 92.124443][ T853] usb usb7-port1: attempt power cycle [ 92.474315][ T853] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 92.508464][ T853] usb 7-1: device descriptor read/8, error -71 [ 92.754228][ T853] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 92.787570][ T853] usb 7-1: device descriptor read/8, error -71 [ 92.894319][ T853] usb usb7-port1: unable to enumerate USB device [ 92.970376][ T7069] mmap: syz.1.277 (7069) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.278415][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 93.727495][ T7085] netlink: 16 bytes leftover after parsing attributes in process `syz.4.283'. [ 93.729292][ T7085] netlink: 16 bytes leftover after parsing attributes in process `syz.4.283'. [ 93.733235][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 94.963907][ T7100] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 95.071573][ T7102] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 95.366433][ T43] audit: type=1326 audit(1789797698.921:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.4.293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 95.366698][ T43] audit: type=1326 audit(1789797698.921:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.4.293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 95.366919][ T43] audit: type=1326 audit(1789797698.921:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.4.293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 95.367030][ T43] audit: type=1326 audit(1789797698.921:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.4.293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 95.367514][ T43] audit: type=1326 audit(1789797698.921:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.4.293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 95.367596][ T43] audit: type=1326 audit(1789797698.921:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.4.293" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf708efec code=0x7ffc0000 [ 95.367763][ T43] audit: type=1326 audit(1789797698.921:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.4.293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 95.368297][ T43] audit: type=1326 audit(1789797698.931:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.4.293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 95.368733][ T43] audit: type=1326 audit(1789797698.931:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.4.293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 95.368856][ T43] audit: type=1326 audit(1789797698.921:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.4.293" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 96.463048][ T7145] FAULT_INJECTION: forcing a failure. [ 96.463048][ T7145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.463078][ T7145] CPU: 0 UID: 0 PID: 7145 Comm: syz.2.299 Not tainted syzkaller #0 PREEMPT(full) [ 96.463099][ T7145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.463109][ T7145] Call Trace: [ 96.463116][ T7145] [ 96.463123][ T7145] dump_stack_lvl+0x100/0x190 [ 96.463167][ T7145] should_fail_ex.cold+0x5/0xa [ 96.463191][ T7145] strncpy_from_user+0x3b/0x2d0 [ 96.463231][ T7145] do_getname+0x78/0x390 [ 96.463260][ T7145] path_setxattrat+0x360/0x3b0 [ 96.463281][ T7145] ? __pfx_path_setxattrat+0x10/0x10 [ 96.463297][ T7145] ? rcu_read_lock_any_held+0x6a/0x90 [ 96.463309][ T7145] ? find_held_lock+0x2b/0x80 [ 96.463331][ T7145] ? fput+0x7c/0x100 [ 96.463345][ T7145] ? ksys_write+0x1ac/0x250 [ 96.463357][ T7145] __ia32_sys_setxattr+0xc4/0x140 [ 96.463371][ T7145] ? __do_fast_syscall_32+0xb3/0x8b0 [ 96.463393][ T7145] ? lockdep_hardirqs_on+0x7d/0x110 [ 96.463408][ T7145] __do_fast_syscall_32+0x13a/0x8b0 [ 96.463424][ T7145] ? lockdep_hardirqs_on+0x7d/0x110 [ 96.463441][ T7145] do_fast_syscall_32+0x32/0x70 [ 96.463458][ T7145] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.463471][ T7145] RIP: 0023:0xf7f82fec [ 96.463485][ T7145] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 96.463489][ T7145] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000000e2 [ 96.463501][ T7145] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000080000180 [ 96.463507][ T7145] RDX: 0000000080000580 RSI: 000000000000002c RDI: 0000000000000002 [ 96.463513][ T7145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.463519][ T7145] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.463525][ T7145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.463538][ T7145] [ 96.539725][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 97.821443][ T7168] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 97.821474][ T7168] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 97.821507][ T7168] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 97.830368][ T7168] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.848261][ T7168] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 97.886931][ T7170] fuse: Bad value for 'fd' [ 98.098868][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 99.768848][ T7204] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 100.026359][ T7227] netlink: 'syz.3.320': attribute type 13 has an invalid length. [ 101.355842][ T7277] fuse: Bad value for 'fd' [ 101.580670][ T7280] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 101.933039][ T7293] bond1: Removing last arp target with arp_interval on [ 101.937794][ T7293] openvswitch: netlink: Message has 4 unknown bytes. [ 102.017377][ T7299] netlink: 'syz.1.335': attribute type 33 has an invalid length. [ 102.018376][ T7299] netlink: 72 bytes leftover after parsing attributes in process `syz.1.335'. [ 102.155811][ T7301] openvswitch: netlink: Message has 4 unknown bytes. [ 102.207318][ T7297] bond3: Removing last arp target with arp_interval on [ 105.232427][ T7324] nvme nvme0: rdma_resolve_addr failed (-19). [ 105.631452][ T7339] program syz.4.345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.821297][ T7324] syz.3.339 (7324) used greatest stack depth: 19256 bytes left [ 105.860513][ T7346] gre1: entered promiscuous mode [ 106.012844][ T7357] binfmt_misc: register: failed to install interpreter ./file0 [ 106.057955][ T7363] netlink: 256 bytes leftover after parsing attributes in process `syz.2.356'. [ 106.122454][ T7369] netlink: 36 bytes leftover after parsing attributes in process `syz.3.351'. [ 106.316713][ T43] kauditd_printk_skb: 327 callbacks suppressed [ 106.317714][ T43] audit: type=1326 audit(1789797709.882:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 106.317758][ T43] audit: type=1326 audit(1789797709.882:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 106.318437][ T43] audit: type=1326 audit(1789797709.882:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.361" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 106.318460][ T43] audit: type=1326 audit(1789797709.882:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 106.318575][ T43] audit: type=1326 audit(1789797709.882:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 106.319192][ T43] audit: type=1326 audit(1789797709.882:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.361" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 106.320073][ T43] audit: type=1326 audit(1789797709.882:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 106.320685][ T43] audit: type=1326 audit(1789797709.882:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 106.322783][ T43] audit: type=1326 audit(1789797709.882:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.361" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 106.323068][ T43] audit: type=1326 audit(1789797709.882:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz.2.361" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82fec code=0x7ffc0000 [ 106.458904][ T7381] FAULT_INJECTION: forcing a failure. [ 106.458904][ T7381] name failslab, interval 1, probability 0, space 0, times 0 [ 106.458927][ T7381] CPU: 2 UID: 0 PID: 7381 Comm: syz.2.362 Not tainted syzkaller #0 PREEMPT(full) [ 106.458940][ T7381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.458947][ T7381] Call Trace: [ 106.458951][ T7381] [ 106.458956][ T7381] dump_stack_lvl+0x100/0x190 [ 106.458974][ T7381] should_fail_ex.cold+0x5/0xa [ 106.458988][ T7381] should_failslab+0xc2/0x120 [ 106.459005][ T7381] __kmalloc_cache_noprof+0x91/0x6d0 [ 106.459024][ T7381] ? __io_uring_add_tctx_node+0x179/0x4f0 [ 106.459040][ T7381] __io_uring_add_tctx_node+0x179/0x4f0 [ 106.459051][ T7381] ? security_inode_init_security_anon+0x51/0x230 [ 106.459068][ T7381] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 106.459081][ T7381] ? __anon_inode_getfile+0x17c/0x280 [ 106.459099][ T7381] io_uring_setup.cold+0x1998/0x1c5e [ 106.459119][ T7381] ? __pfx_io_uring_setup+0x10/0x10 [ 106.459137][ T7381] ? __pfx_do_futex+0x10/0x10 [ 106.459154][ T7381] ? xfd_validate_state+0x129/0x190 [ 106.459174][ T7381] __ia32_sys_io_uring_setup+0xc2/0x170 [ 106.459190][ T7381] __do_fast_syscall_32+0x13a/0x8b0 [ 106.459206][ T7381] ? lockdep_hardirqs_on+0x7d/0x110 [ 106.459223][ T7381] do_fast_syscall_32+0x32/0x70 [ 106.459240][ T7381] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.459253][ T7381] RIP: 0023:0xf7f82fec [ 106.459266][ T7381] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 106.459271][ T7381] RSP: 002b:00000000f54464bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 106.459285][ T7381] RAX: ffffffffffffffda RBX: 0000000000001e10 RCX: 0000000080000380 [ 106.459292][ T7381] RDX: 00000000f71b0fd7 RSI: 0000000000000001 RDI: 00000000f544653c [ 106.459298][ T7381] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.459304][ T7381] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 106.459310][ T7381] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.459324][ T7381] [ 106.607727][ T7389] netlink: 'syz.2.363': attribute type 4 has an invalid length. [ 106.807775][ T7408] binfmt_misc: register: failed to install interpreter ./file0 [ 106.848951][ T7410] bridge_slave_0: left allmulticast mode [ 106.848968][ T7410] bridge_slave_0: left promiscuous mode [ 106.850860][ T7410] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.853513][ T7410] bridge_slave_1: left allmulticast mode [ 106.853558][ T7410] bridge_slave_1: left promiscuous mode [ 106.853725][ T7410] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.868012][ T7410] bond0: (slave bond_slave_0): Releasing backup interface [ 106.870900][ T7410] bond0: (slave bond_slave_1): Releasing backup interface [ 106.880141][ T7410] team0: Port device team_slave_0 removed [ 106.885694][ T7410] team0: Port device team_slave_1 removed [ 106.886149][ T7410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.886161][ T7410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.887083][ T7410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.887094][ T7410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.887981][ T7410] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.941048][ T7412] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.953456][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 107.023419][ T1473] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 107.104152][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.107054][ T9] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 107.107092][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.107112][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 107.107129][ T9] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.107160][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.122990][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.125352][ T9] usb 9-1: invalid MIDI out EP 0 [ 107.183395][ T1473] usb 7-1: Using ep0 maxpacket: 32 [ 107.186197][ T1473] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 107.188913][ T1473] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 107.188938][ T1473] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 107.188960][ T1473] usb 7-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 107.188978][ T1473] usb 7-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 107.188996][ T1473] usb 7-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 107.191417][ T1473] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.191431][ T1473] usb 7-1: Product: ᰁ [ 107.191438][ T1473] usb 7-1: Manufacturer: 彲肆岂헌릳ꂺ呥⺙᭼琿嗖ḱ [ 107.191447][ T1473] usb 7-1: SerialNumber: Ђ [ 107.242892][ T9] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 107.327103][ T5748] usb 9-1: USB disconnect, device number 3 [ 107.634776][ T1473] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.634805][ T1473] usb 7-1: MIDIStreaming interface descriptor not found [ 107.834347][ T853] usb 7-1: USB disconnect, device number 16 [ 107.997797][ T7428] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 108.016948][ T7428] bond1: (slave geneve2): making interface the new active one [ 108.018363][ T7428] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 108.033612][ T5611] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 108.033855][ T5611] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 108.033881][ T5611] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 108.033903][ T5611] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 108.962885][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 108.980973][ T7449] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 108.980989][ T7449] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 109.246309][ T7461] netlink: 32 bytes leftover after parsing attributes in process `syz.3.386'. [ 109.250052][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 109.435399][ T7468] xt_cgroup: invalid path, errno=-2 [ 109.602164][ T7477] dlm: plock device version mismatch: kernel (1.2.0), user (2227959591.3024829116.1683162433) [ 109.647709][ T7480] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 109.699425][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 109.700566][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 109.701291][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 109.701909][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 109.949834][ T7490] FAULT_INJECTION: forcing a failure. [ 109.949834][ T7490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.949854][ T7490] CPU: 3 UID: 0 PID: 7490 Comm: syz.4.397 Not tainted syzkaller #0 PREEMPT(full) [ 109.949867][ T7490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.949874][ T7490] Call Trace: [ 109.949878][ T7490] [ 109.949883][ T7490] dump_stack_lvl+0x100/0x190 [ 109.949901][ T7490] should_fail_ex.cold+0x5/0xa [ 109.949917][ T7490] _copy_from_user+0x2e/0xd0 [ 109.949931][ T7490] comedi_compat_ioctl+0x30c/0xe20 [ 109.949984][ T7490] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 109.950001][ T7490] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.950017][ T7490] ? do_vfs_ioctl+0x226/0x13e0 [ 109.950035][ T7490] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 109.950054][ T7490] ? __fget_files+0x34/0x3d0 [ 109.950067][ T7490] ? find_held_lock+0x2b/0x80 [ 109.950079][ T7490] ? __fget_files+0x215/0x3d0 [ 109.950090][ T7490] ? hook_file_ioctl_common+0x140/0x440 [ 109.950109][ T7490] ? __fget_files+0x21f/0x3d0 [ 109.950124][ T7490] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 109.950142][ T7490] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 109.950161][ T7490] __do_fast_syscall_32+0x13a/0x8b0 [ 109.950179][ T7490] ? lockdep_hardirqs_on+0x7d/0x110 [ 109.950196][ T7490] do_fast_syscall_32+0x32/0x70 [ 109.950212][ T7490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.950226][ T7490] RIP: 0023:0xf708efec [ 109.950240][ T7490] Code: Unable to access opcode bytes at 0xf708efc2. [ 109.950245][ T7490] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 109.950256][ T7490] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008008640b [ 109.950263][ T7490] RDX: 000000008017edc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.950269][ T7490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.950275][ T7490] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 109.950282][ T7490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.950294][ T7490] [ 109.993235][ T5748] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 110.007542][ T7494] netlink: 20 bytes leftover after parsing attributes in process `syz.4.399'. [ 110.052364][ T7496] syzkaller0: entered promiscuous mode [ 110.052383][ T7496] syzkaller0: entered allmulticast mode [ 110.154294][ T5748] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 110.159448][ T5748] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.159470][ T5748] usb 7-1: Product: 㐊 [ 110.159482][ T5748] usb 7-1: Manufacturer: 䠊 [ 110.159493][ T5748] usb 7-1: SerialNumber: syz [ 110.200226][ T7500] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.350553][ T7506] FAULT_INJECTION: forcing a failure. [ 110.350553][ T7506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.350634][ T7506] CPU: 2 UID: 0 PID: 7506 Comm: syz.4.403 Not tainted syzkaller #0 PREEMPT(full) [ 110.350654][ T7506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.350664][ T7506] Call Trace: [ 110.350670][ T7506] [ 110.350676][ T7506] dump_stack_lvl+0x100/0x190 [ 110.350702][ T7506] should_fail_ex.cold+0x5/0xa [ 110.350724][ T7506] _copy_from_user+0x2e/0xd0 [ 110.350763][ T7506] get_compat_msghdr+0xb3/0x480 [ 110.350790][ T7506] ? __pfx_get_compat_msghdr+0x10/0x10 [ 110.350823][ T7506] ___sys_sendmsg+0x1b6/0x1e0 [ 110.350842][ T7506] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.350869][ T7506] ? find_held_lock+0x2b/0x80 [ 110.350901][ T7506] __sys_sendmsg+0x160/0x210 [ 110.350924][ T7506] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.350952][ T7506] ? __pfx_ksys_write+0x10/0x10 [ 110.350974][ T7506] __do_fast_syscall_32+0x13a/0x8b0 [ 110.351000][ T7506] ? lockdep_hardirqs_on+0x7d/0x110 [ 110.351025][ T7506] do_fast_syscall_32+0x32/0x70 [ 110.351050][ T7506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.351071][ T7506] RIP: 0023:0xf708efec [ 110.351093][ T7506] Code: Unable to access opcode bytes at 0xf708efc2. [ 110.351103][ T7506] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 110.351123][ T7506] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 110.351135][ T7506] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.351155][ T7506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.351166][ T7506] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 110.351178][ T7506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.351204][ T7506] [ 110.382194][ T7488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.382487][ T7488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.397829][ T5748] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.397870][ T5748] usb 7-1: MIDIStreaming interface descriptor not found [ 110.443326][ T5748] usb 7-1: USB disconnect, device number 17 [ 110.497207][ T7423] udevd[7423]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.550982][ T7517] syz.3.406: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 110.551071][ T7517] CPU: 3 UID: 0 PID: 7517 Comm: syz.3.406 Not tainted syzkaller #0 PREEMPT(full) [ 110.551084][ T7517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.551090][ T7517] Call Trace: [ 110.551094][ T7517] [ 110.551113][ T7517] dump_stack_lvl+0x100/0x190 [ 110.551133][ T7517] warn_alloc.cold+0x9e/0xb2 [ 110.551145][ T7517] ? __pfx_warn_alloc+0x10/0x10 [ 110.551169][ T7517] __vmalloc_node_range_noprof+0x123b/0x1420 [ 110.551185][ T7517] ? unwind_next_frame+0x3be/0x2090 [ 110.551198][ T7517] ? rcu_is_watching+0x13/0xc0 [ 110.551210][ T7517] ? __kasan_check_byte+0x13/0x50 [ 110.551225][ T7517] ? do_replace+0x1c6/0x490 [ 110.551237][ T7517] ? rcu_is_watching+0x13/0xc0 [ 110.551248][ T7517] ? lock_release+0x24d/0x310 [ 110.551264][ T7517] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 110.551279][ T7517] ? __lock_acquire+0x5c0/0x1f40 [ 110.551294][ T7517] ? unwind_get_return_address+0x59/0xa0 [ 110.551309][ T7517] ? do_replace+0x1c6/0x490 [ 110.551321][ T7517] __vmalloc_node_noprof+0xad/0xf0 [ 110.551335][ T7517] ? do_replace+0x1c6/0x490 [ 110.551349][ T7517] __vmalloc_noprof+0xa3/0x120 [ 110.551363][ T7517] ? __pfx___vmalloc_noprof+0x10/0x10 [ 110.551383][ T7517] do_replace+0x1c6/0x490 [ 110.551396][ T7517] ? __pfx_do_replace+0x10/0x10 [ 110.551418][ T7517] compat_do_replace+0x589/0x7a0 [ 110.551433][ T7517] ? __pfx_compat_do_replace+0x10/0x10 [ 110.551454][ T7517] ? bpf_lsm_capable+0x9/0x10 [ 110.551470][ T7517] ? security_capable+0x80/0x260 [ 110.551485][ T7517] do_ebt_set_ctl+0x3f4/0x4a0 [ 110.551499][ T7517] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 110.551514][ T7517] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 110.551524][ T7517] ? futex_wake+0x4ea/0x5e0 [ 110.551538][ T7517] ? nf_sockopt_find.isra.0+0x222/0x290 [ 110.551555][ T7517] nf_setsockopt+0x8d/0xf0 [ 110.551571][ T7517] ip_setsockopt+0xcb/0xf0 [ 110.551583][ T7517] tcp_setsockopt+0xa7/0x100 [ 110.551597][ T7517] smc_setsockopt+0x1b6/0xa40 [ 110.551610][ T7517] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 110.551628][ T7517] ? __pfx_smc_setsockopt+0x10/0x10 [ 110.551643][ T7517] ? aa_sock_opt_perm+0x114/0x1e0 [ 110.551662][ T7517] ? __pfx_smc_setsockopt+0x10/0x10 [ 110.551676][ T7517] do_sock_setsockopt+0xf3/0x1d0 [ 110.551695][ T7517] __sys_setsockopt+0x119/0x190 [ 110.551712][ T7517] __ia32_sys_setsockopt+0xbc/0x160 [ 110.551726][ T7517] ? __do_fast_syscall_32+0xb3/0x8b0 [ 110.551744][ T7517] ? lockdep_hardirqs_on+0x7d/0x110 [ 110.551760][ T7517] __do_fast_syscall_32+0x13a/0x8b0 [ 110.551777][ T7517] ? lockdep_hardirqs_on+0x7d/0x110 [ 110.551793][ T7517] do_fast_syscall_32+0x32/0x70 [ 110.551810][ T7517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.551824][ T7517] RIP: 0023:0xf7fb6fec [ 110.551837][ T7517] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 110.551842][ T7517] RSP: 002b:00000000f53cb50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 110.551853][ T7517] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000000000 [ 110.551860][ T7517] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 110.551867][ T7517] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.551874][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.551881][ T7517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.551896][ T7517] [ 110.552637][ T7517] Mem-Info: [ 110.552645][ T7517] active_anon:6001 inactive_anon:257 isolated_anon:0 [ 110.552645][ T7517] active_file:7680 inactive_file:45512 isolated_file:0 [ 110.552645][ T7517] unevictable:2024 dirty:64 writeback:0 [ 110.552645][ T7517] slab_reclaimable:6100 slab_unreclaimable:53862 [ 110.552645][ T7517] mapped:24306 shmem:2531 pagetables:1186 [ 110.552645][ T7517] sec_pagetables:297 bounce:0 [ 110.552645][ T7517] kernel_misc_reclaimable:0 [ 110.552645][ T7517] free:28863 free_pcp:13087 free_cma:0 [ 110.552680][ T7517] Node 0 active_anon:20kB inactive_anon:68kB active_file:116kB inactive_file:4kB unevictable:460kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9312kB pagetables:1716kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 110.552710][ T7517] Node 1 active_anon:23984kB inactive_anon:960kB active_file:30604kB inactive_file:182044kB unevictable:7636kB isolated(anon):0kB isolated(file):0kB mapped:97196kB dirty:256kB writeback:0kB shmem:9664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5208kB pagetables:3028kB sec_pagetables:80kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 110.552740][ T7517] Node 0 DMA free:2056kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:288kB local_pcp:176kB free_cma:0kB [ 110.552772][ T7517] lowmem_reserve[]: 0 277 277 277 277 [ 110.552792][ T7517] Node 0 DMA32 free:15772kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20kB inactive_anon:68kB active_file:0kB inactive_file:4kB unevictable:460kB writepending:0kB zspages:0kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:10740kB local_pcp:2996kB free_cma:0kB [ 110.552822][ T7517] lowmem_reserve[]: 0 0 0 0 0 [ 110.552840][ T7517] Node 1 DMA32 free:97624kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23984kB inactive_anon:960kB active_file:30604kB inactive_file:182044kB unevictable:7636kB writepending:256kB zspages:2092kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:41320kB local_pcp:15512kB free_cma:0kB [ 110.552869][ T7517] lowmem_reserve[]: 0 0 0 0 0 [ 110.552887][ T7517] Node 0 DMA: 10*4kB (UM) 6*8kB (UM) 7*16kB (UM) 20*32kB (UM) 5*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2056kB [ 110.555926][ T7517] Node 0 DMA32: 7*4kB (ME) 38*8kB (E) 7*16kB (UE) 91*32kB (UME) 62*64kB (UME) 10*128kB (UME) 2*256kB (UM) 5*512kB (M) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 15772kB [ 110.556013][ T7517] Node 1 DMA32: 174*4kB (U) 140*8kB (U) 47*16kB (U) 8*32kB (UE) 242*64kB (UME) 132*128kB (UME) 50*256kB (UME) 17*512kB (UME) 12*1024kB (UME) 6*2048kB (M) 4*4096kB (UM) = 97672kB [ 110.556097][ T7517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.556105][ T7517] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.556113][ T7517] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.556121][ T7517] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.556129][ T7517] 56165 total pagecache pages [ 110.556133][ T7517] 445 pages in swap cache [ 110.556137][ T7517] Free swap = 119780kB [ 110.556140][ T7517] Total swap = 124996kB [ 110.556144][ T7517] 524155 pages RAM [ 110.556147][ T7517] 0 pages HighMem/MovableOnly [ 110.556151][ T7517] 212121 pages reserved [ 110.556154][ T7517] 0 pages cma reserved [ 110.634429][ T7519] fuse: Bad value for 'fd' [ 110.939657][ T7528] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 111.030645][ T7533] kvm: apic: phys broadcast and lowest prio [ 111.047616][ T7534] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.519027][ T7564] netlink: 'syz.4.424': attribute type 11 has an invalid length. [ 111.527266][ T7568] __nla_validate_parse: 2 callbacks suppressed [ 111.527285][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 111.844038][ T7579] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 111.844445][ T7579] exFAT-fs (nbd4): unable to read boot sector [ 111.844477][ T7579] exFAT-fs (nbd4): failed to read boot sector [ 111.845088][ T7579] exFAT-fs (nbd4): failed to recognize exfat type [ 112.027378][ T7539] orangefs_mount: mount request failed with -4 [ 112.068526][ T7586] syzkaller0: entered promiscuous mode [ 112.068540][ T7586] syzkaller0: entered allmulticast mode [ 112.236737][ T7589] FAULT_INJECTION: forcing a failure. [ 112.236737][ T7589] name failslab, interval 1, probability 0, space 0, times 0 [ 112.236757][ T7589] CPU: 1 UID: 0 PID: 7589 Comm: syz.4.431 Not tainted syzkaller #0 PREEMPT(full) [ 112.236770][ T7589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.236777][ T7589] Call Trace: [ 112.236781][ T7589] [ 112.236785][ T7589] dump_stack_lvl+0x100/0x190 [ 112.236805][ T7589] should_fail_ex.cold+0x5/0xa [ 112.236821][ T7589] should_failslab+0xc2/0x120 [ 112.236839][ T7589] __kmalloc_cache_noprof+0x91/0x6d0 [ 112.236858][ T7589] ? vim2m_open+0xad/0x830 [ 112.236877][ T7589] vim2m_open+0xad/0x830 [ 112.236895][ T7589] v4l2_open+0x1d2/0x490 [ 112.236906][ T7589] ? __pfx_v4l2_open+0x10/0x10 [ 112.236917][ T7589] chrdev_open+0x234/0x6a0 [ 112.236930][ T7589] ? __pfx_apparmor_file_open+0x10/0x10 [ 112.236947][ T7589] ? __pfx_chrdev_open+0x10/0x10 [ 112.236960][ T7589] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 112.236978][ T7589] do_dentry_open+0x6ab/0x14d0 [ 112.236990][ T7589] ? __pfx_chrdev_open+0x10/0x10 [ 112.237006][ T7589] vfs_open+0x82/0x3f0 [ 112.237022][ T7589] path_openat+0x19fa/0x2440 [ 112.237037][ T7589] ? __pfx_path_openat+0x10/0x10 [ 112.237057][ T7589] do_file_open+0x20e/0x430 [ 112.237072][ T7589] ? __pfx_do_file_open+0x10/0x10 [ 112.237094][ T7589] ? _raw_spin_unlock+0x28/0x50 [ 112.237141][ T7589] ? alloc_fd+0x471/0x7a0 [ 112.237160][ T7589] do_sys_openat2+0x10f/0x1e0 [ 112.237177][ T7589] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.237200][ T7589] __ia32_compat_sys_openat+0x12d/0x210 [ 112.237219][ T7589] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 112.237243][ T7589] __do_fast_syscall_32+0x13a/0x8b0 [ 112.237259][ T7589] ? lockdep_hardirqs_on+0x7d/0x110 [ 112.237278][ T7589] do_fast_syscall_32+0x32/0x70 [ 112.237296][ T7589] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.237311][ T7589] RIP: 0023:0xf708efec [ 112.237325][ T7589] Code: Unable to access opcode bytes at 0xf708efc2. [ 112.237330][ T7589] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 112.237341][ T7589] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 112.237348][ T7589] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.237354][ T7589] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.237360][ T7589] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 112.237366][ T7589] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.237380][ T7589] [ 112.239787][ T7589] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 112.934697][ T7610] process 'syz.2.438' launched './file0' with NULL argv: empty string added [ 113.235422][ T7614] syz.2.439: attempt to access beyond end of device [ 113.235422][ T7614] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 113.235482][ T7614] gfs2: error -5 reading superblock [ 113.891639][ T7602] team_slave_1: Caught tx_queue_len zero misconfig [ 113.996353][ T7627] SET target dimension over the limit! [ 114.010832][ T7630] netlink: 44 bytes leftover after parsing attributes in process `syz.1.444'. [ 114.050908][ T7635] FAULT_INJECTION: forcing a failure. [ 114.050908][ T7635] name failslab, interval 1, probability 0, space 0, times 0 [ 114.050930][ T7635] CPU: 2 UID: 0 PID: 7635 Comm: syz.2.446 Not tainted syzkaller #0 PREEMPT(full) [ 114.050943][ T7635] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.050949][ T7635] Call Trace: [ 114.050953][ T7635] [ 114.050957][ T7635] dump_stack_lvl+0x100/0x190 [ 114.050975][ T7635] should_fail_ex.cold+0x5/0xa [ 114.050990][ T7635] should_failslab+0xc2/0x120 [ 114.051006][ T7635] kmem_cache_alloc_noprof+0x92/0x6a0 [ 114.051019][ T7635] ? skb_clone+0x190/0x400 [ 114.051036][ T7635] skb_clone+0x190/0x400 [ 114.051050][ T7635] nfnetlink_rcv_batch+0x1c8/0x2880 [ 114.051068][ T7635] ? kmem_cache_free+0x127/0x6c0 [ 114.051091][ T7635] ? kfree_skbmem+0x19f/0x210 [ 114.051104][ T7635] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 114.051120][ T7635] ? find_held_lock+0x2b/0x80 [ 114.051132][ T7635] ? __dev_queue_xmit+0xa12/0x4970 [ 114.051145][ T7635] ? __local_bh_enable_ip+0xa5/0x120 [ 114.051161][ T7635] ? lockdep_hardirqs_on+0x7d/0x110 [ 114.051177][ T7635] ? __dev_queue_xmit+0xa12/0x4970 [ 114.051194][ T7635] ? __asan_memset+0x23/0x50 [ 114.051205][ T7635] ? __nla_validate_parse+0x1e7/0x28b0 [ 114.051221][ T7635] ? __pfx___nla_validate_parse+0x10/0x10 [ 114.051232][ T7635] ? rcu_is_watching+0x13/0xc0 [ 114.051243][ T7635] ? apparmor_capable+0x1d7/0x4d0 [ 114.051261][ T7635] ? __nla_parse+0x40/0x60 [ 114.051273][ T7635] nfnetlink_rcv+0x3bd/0x440 [ 114.051289][ T7635] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 114.051309][ T7635] netlink_unicast+0x585/0x850 [ 114.051324][ T7635] ? __pfx_netlink_unicast+0x10/0x10 [ 114.051336][ T7635] ? aa_sk_perm+0x389/0xab0 [ 114.051354][ T7635] netlink_sendmsg+0x8b0/0xda0 [ 114.051369][ T7635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.051384][ T7635] ? apparmor_socket_sendmsg+0x165/0x280 [ 114.051400][ T7635] ____sys_sendmsg+0xa4d/0xbe0 [ 114.051409][ T7635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.051423][ T7635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.051440][ T7635] ___sys_sendmsg+0x190/0x1e0 [ 114.051452][ T7635] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.051469][ T7635] ? find_held_lock+0x2b/0x80 [ 114.051488][ T7635] __sys_sendmsg+0x160/0x210 [ 114.051504][ T7635] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.051522][ T7635] ? __pfx_ksys_write+0x10/0x10 [ 114.051536][ T7635] __do_fast_syscall_32+0x13a/0x8b0 [ 114.051553][ T7635] ? lockdep_hardirqs_on+0x7d/0x110 [ 114.051569][ T7635] do_fast_syscall_32+0x32/0x70 [ 114.051591][ T7635] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.051605][ T7635] RIP: 0023:0xf7f82fec [ 114.051618][ T7635] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 114.051624][ T7635] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 114.051635][ T7635] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 114.051642][ T7635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.051662][ T7635] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.051668][ T7635] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 114.051674][ T7635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.051687][ T7635] [ 114.369479][ T7646] netlink: 108 bytes leftover after parsing attributes in process `syz.1.450'. [ 114.369591][ T7646] netlink: 108 bytes leftover after parsing attributes in process `syz.1.450'. [ 114.564087][ T7654] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 114.687460][ T7661] netlink: 256 bytes leftover after parsing attributes in process `syz.1.454'. [ 114.725384][ T7664] FAULT_INJECTION: forcing a failure. [ 114.725384][ T7664] name failslab, interval 1, probability 0, space 0, times 0 [ 114.725414][ T7664] CPU: 0 UID: 0 PID: 7664 Comm: syz.4.455 Not tainted syzkaller #0 PREEMPT(full) [ 114.725433][ T7664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.725442][ T7664] Call Trace: [ 114.725447][ T7664] [ 114.725454][ T7664] dump_stack_lvl+0x100/0x190 [ 114.725473][ T7664] should_fail_ex.cold+0x5/0xa [ 114.725508][ T7664] should_failslab+0xc2/0x120 [ 114.725525][ T7664] __kmalloc_cache_noprof+0x91/0x6d0 [ 114.725543][ T7664] ? copy_mount_options+0x55/0x190 [ 114.725562][ T7664] copy_mount_options+0x55/0x190 [ 114.725579][ T7664] __ia32_sys_mount+0x1ab/0x310 [ 114.725595][ T7664] ? __pfx___ia32_sys_mount+0x10/0x10 [ 114.725614][ T7664] __do_fast_syscall_32+0x13a/0x8b0 [ 114.725633][ T7664] do_fast_syscall_32+0x32/0x70 [ 114.725650][ T7664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.725664][ T7664] RIP: 0023:0xf708efec [ 114.725676][ T7664] Code: Unable to access opcode bytes at 0xf708efc2. [ 114.725682][ T7664] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 114.725693][ T7664] RAX: ffffffffffffffda RBX: 0000000080000780 RCX: 0000000080000b00 [ 114.725700][ T7664] RDX: 0000000080000b40 RSI: 0000000000000000 RDI: 0000000080000280 [ 114.725706][ T7664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.725713][ T7664] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 114.725721][ T7664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.725734][ T7664] [ 114.933094][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 114.983364][ T7669] netlink: 32 bytes leftover after parsing attributes in process `syz.3.457'. [ 115.065049][ T9] usb 6-1: device descriptor read/64, error -71 [ 115.223223][ T7681] cgroup: fork rejected by pids controller in /syz2 [ 115.303096][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 115.432893][ T9] usb 6-1: device descriptor read/64, error -71 [ 115.543561][ T9] usb usb6-port1: attempt power cycle [ 115.636197][ T7721] syzkaller0: entered promiscuous mode [ 115.636213][ T7721] syzkaller0: entered allmulticast mode [ 115.769935][ T7726] loop9: detected capacity change from 0 to 255852544 [ 115.882860][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 115.903302][ T9] usb 6-1: device descriptor read/8, error -71 [ 116.143887][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 116.165164][ T9] usb 6-1: device descriptor read/8, error -71 [ 116.280816][ T9] usb usb6-port1: unable to enumerate USB device [ 116.707997][ T7748] netlink: 'syz.2.475': attribute type 2 has an invalid length. [ 116.803269][ T7752] FAULT_INJECTION: forcing a failure. [ 116.803269][ T7752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.803297][ T7752] CPU: 3 UID: 0 PID: 7752 Comm: syz.4.476 Not tainted syzkaller #0 PREEMPT(full) [ 116.803317][ T7752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.803328][ T7752] Call Trace: [ 116.803334][ T7752] [ 116.803341][ T7752] dump_stack_lvl+0x100/0x190 [ 116.803369][ T7752] should_fail_ex.cold+0x5/0xa [ 116.803390][ T7752] _copy_to_user+0x32/0xd0 [ 116.803413][ T7752] simple_read_from_buffer+0xcb/0x170 [ 116.803433][ T7752] proc_fail_nth_read+0x1af/0x230 [ 116.803453][ T7752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.803472][ T7752] ? rw_verify_area+0xce/0x6d0 [ 116.803496][ T7752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.803514][ T7752] vfs_read+0x1e4/0xb40 [ 116.803532][ T7752] ? lock_acquire+0x1d1/0x380 [ 116.803554][ T7752] ? __fget_files+0x34/0x3d0 [ 116.803572][ T7752] ? __pfx_vfs_read+0x10/0x10 [ 116.803587][ T7752] ? find_held_lock+0x2b/0x80 [ 116.803604][ T7752] ? __fget_files+0x215/0x3d0 [ 116.803632][ T7752] ? __fget_files+0x21f/0x3d0 [ 116.803656][ T7752] ksys_read+0x12a/0x250 [ 116.803673][ T7752] ? __pfx_ksys_read+0x10/0x10 [ 116.803697][ T7752] do_int80_emulation+0x166/0x650 [ 116.803725][ T7752] asm_int80_emulation+0x1a/0x20 [ 116.803742][ T7752] RIP: 0023:0xf71c75ab [ 116.803756][ T7752] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 116.803771][ T7752] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 116.803788][ T7752] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f547d5d0 [ 116.803798][ T7752] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 116.803808][ T7752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.803817][ T7752] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 116.803827][ T7752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.803849][ T7752] [ 116.885691][ T7756] netlink: 'syz.4.477': attribute type 10 has an invalid length. [ 116.890024][ T7756] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 117.544316][ T7764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.794491][ T65] block nbd3: Receive control failed (result -107) [ 117.851327][ T6348] block nbd3: shutting down sockets [ 118.034685][ T7788] fuse: Bad value for 'fd' [ 118.424740][ T7802] input: syz1 as /devices/virtual/input/input13 [ 118.667642][ T7805] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 120.298530][ T7859] kvm: apic: phys broadcast and lowest prio [ 121.341634][ T43] kauditd_printk_skb: 116 callbacks suppressed [ 121.341652][ T43] audit: type=1326 audit(1789797724.903:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.1.512" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 122.941963][ T7902] Config c/1 of g1 needs at least one function. [ 122.942229][ T7902] udc dummy_udc.0: failed to start g1: -22 [ 122.942250][ T7902] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 122.947456][ T7902] UDC core: g1: couldn't find an available UDC or it's busy [ 123.196636][ T43] audit: type=1400 audit(1789797726.763:557): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7907 comm="syz.2.520" [ 124.054610][ T7918] binder_alloc: 7917: pid 7917 spamming oneway? 1 buffers allocated for a total size of 4096 [ 124.260070][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.526'. [ 124.354231][ T7929] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 124.390405][ T7929] overlay: Unknown parameter 'fowner<00000000000000000000' [ 125.119471][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.527'. [ 125.119712][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.527'. [ 125.221382][ T7945] netlink: 'syz.2.532': attribute type 10 has an invalid length. [ 125.221473][ T7945] FAULT_INJECTION: forcing a failure. [ 125.221473][ T7945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.221491][ T7945] CPU: 2 UID: 0 PID: 7945 Comm: syz.2.532 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.221506][ T7945] Tainted: [L]=SOFTLOCKUP [ 125.221510][ T7945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.221516][ T7945] Call Trace: [ 125.221520][ T7945] [ 125.221525][ T7945] dump_stack_lvl+0x100/0x190 [ 125.221542][ T7945] should_fail_ex.cold+0x5/0xa [ 125.221557][ T7945] _copy_from_user+0x2e/0xd0 [ 125.221572][ T7945] kstrtouint_from_user+0xd6/0x1d0 [ 125.221588][ T7945] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 125.221609][ T7945] ? lock_acquire+0x1d1/0x380 [ 125.221629][ T7945] proc_fail_nth_write+0x83/0x220 [ 125.221641][ T7945] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 125.221657][ T7945] vfs_write+0x2aa/0x1050 [ 125.221669][ T7945] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 125.221680][ T7945] ? lock_acquire+0x1d1/0x380 [ 125.221694][ T7945] ? __fget_files+0x34/0x3d0 [ 125.221706][ T7945] ? __pfx_vfs_write+0x10/0x10 [ 125.221716][ T7945] ? find_held_lock+0x2b/0x80 [ 125.221728][ T7945] ? __fget_files+0x215/0x3d0 [ 125.221742][ T7945] ? __fget_files+0x21f/0x3d0 [ 125.221758][ T7945] ksys_write+0x12a/0x250 [ 125.221769][ T7945] ? __pfx_ksys_write+0x10/0x10 [ 125.221784][ T7945] do_int80_emulation+0x166/0x650 [ 125.221803][ T7945] asm_int80_emulation+0x1a/0x20 [ 125.221814][ T7945] RIP: 0023:0xf71875ab [ 125.221824][ T7945] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 125.221834][ T7945] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 125.221846][ T7945] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54465d0 [ 125.221852][ T7945] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.221859][ T7945] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.221865][ T7945] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 125.221871][ T7945] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.221885][ T7945] [ 125.404965][ T7950] FAULT_INJECTION: forcing a failure. [ 125.404965][ T7950] name failslab, interval 1, probability 0, space 0, times 0 [ 125.404997][ T7950] CPU: 0 UID: 0 PID: 7950 Comm: syz.2.534 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.405017][ T7950] Tainted: [L]=SOFTLOCKUP [ 125.405023][ T7950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.405034][ T7950] Call Trace: [ 125.405040][ T7950] [ 125.405047][ T7950] dump_stack_lvl+0x100/0x190 [ 125.405076][ T7950] should_fail_ex.cold+0x5/0xa [ 125.405101][ T7950] should_failslab+0xc2/0x120 [ 125.405124][ T7950] __kmalloc_cache_noprof+0x91/0x6d0 [ 125.405150][ T7950] ? find_held_lock+0x2b/0x80 [ 125.405168][ T7950] ? alloc_pipe_info+0x10e/0x590 [ 125.405193][ T7950] alloc_pipe_info+0x10e/0x590 [ 125.405216][ T7950] splice_direct_to_actor+0x78f/0xa30 [ 125.405239][ T7950] ? __lock_acquire+0x5c0/0x1f40 [ 125.405261][ T7950] ? __pfx_direct_splice_actor+0x10/0x10 [ 125.405280][ T7950] ? __pfx_aa_file_perm+0x10/0x10 [ 125.405299][ T7950] ? find_held_lock+0x2b/0x80 [ 125.405317][ T7950] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 125.405341][ T7950] ? lock_acquire+0x1d1/0x380 [ 125.405367][ T7950] do_splice_direct+0x174/0x240 [ 125.405392][ T7950] ? __pfx_do_splice_direct+0x10/0x10 [ 125.405413][ T7950] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 125.405465][ T7950] ? rw_verify_area+0xce/0x6d0 [ 125.405498][ T7950] do_sendfile+0xadc/0xe20 [ 125.405522][ T7950] ? __pfx_do_sendfile+0x10/0x10 [ 125.405539][ T7950] ? do_raw_spin_unlock+0x145/0x1e0 [ 125.405559][ T7950] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 125.405583][ T7950] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 125.405607][ T7950] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 125.405642][ T7950] __do_fast_syscall_32+0x13a/0x8b0 [ 125.405672][ T7950] ? lockdep_hardirqs_on+0x7d/0x110 [ 125.405701][ T7950] do_fast_syscall_32+0x32/0x70 [ 125.405729][ T7950] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.405751][ T7950] RIP: 0023:0xf7f82fec [ 125.405770][ T7950] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 125.405777][ T7950] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 125.405795][ T7950] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000006 [ 125.405806][ T7950] RDX: 0000000000000000 RSI: 0000000000000453 RDI: 0000000000000000 [ 125.405816][ T7950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.405826][ T7950] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 125.405836][ T7950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.405851][ T7950] [ 125.813369][ T5748] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 125.974310][ T5748] usb 7-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 125.974755][ T5748] usb 7-1: config 0 has no interfaces? [ 125.974773][ T5748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.976071][ T5748] usb 7-1: config 0 descriptor?? [ 126.178747][ T1345] usb 7-1: USB disconnect, device number 18 [ 126.477006][ T7993] netlink: 'syz.1.548': attribute type 10 has an invalid length. [ 126.511785][ T43] audit: type=1326 audit(1789797730.073:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.549" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709efec code=0x0 [ 127.207895][ T8002] FAULT_INJECTION: forcing a failure. [ 127.207895][ T8002] name fail_futex, interval 1, probability 0, space 0, times 1 [ 127.207944][ T8002] CPU: 3 UID: 0 PID: 8002 Comm: syz.4.551 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.207962][ T8002] Tainted: [L]=SOFTLOCKUP [ 127.207966][ T8002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.207972][ T8002] Call Trace: [ 127.207977][ T8002] [ 127.207982][ T8002] dump_stack_lvl+0x100/0x190 [ 127.208003][ T8002] should_fail_ex.cold+0x5/0xa [ 127.208017][ T8002] get_futex_key+0x293/0x14f0 [ 127.208036][ T8002] ? __pfx_get_futex_key+0x10/0x10 [ 127.208053][ T8002] ? __mutex_unlock_slowpath+0x35d/0x930 [ 127.208074][ T8002] futex_wake+0xf4/0x5e0 [ 127.208088][ T8002] ? __pfx_futex_wake+0x10/0x10 [ 127.208104][ T8002] ? detach_task_ctx_data+0x83/0x490 [ 127.208122][ T8002] do_futex+0x2b2/0x440 [ 127.208133][ T8002] ? __pfx_do_futex+0x10/0x10 [ 127.208143][ T8002] ? __might_fault+0xc5/0x140 [ 127.208163][ T8002] mm_exit_exec_release+0x256/0x2f0 [ 127.208181][ T8002] do_exit+0x707/0x2ae0 [ 127.208195][ T8002] ? __pfx_do_exit+0x10/0x10 [ 127.208207][ T8002] ? do_raw_spin_lock+0x128/0x260 [ 127.208224][ T8002] ? find_held_lock+0x2b/0x80 [ 127.208235][ T8002] ? get_signal+0x7e0/0x21e0 [ 127.208257][ T8002] do_group_exit+0xd5/0x2a0 [ 127.208272][ T8002] get_signal+0x1ec7/0x21e0 [ 127.208294][ T8002] ? __pfx_get_signal+0x10/0x10 [ 127.208312][ T8002] ? do_futex+0x190/0x440 [ 127.208323][ T8002] arch_do_signal_or_restart+0x91/0x7a0 [ 127.208340][ T8002] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 127.208359][ T8002] ? fput+0x7c/0x100 [ 127.208375][ T8002] exit_to_user_mode_loop+0x139/0x700 [ 127.208392][ T8002] ? rcu_is_watching+0x13/0xc0 [ 127.208404][ T8002] __do_fast_syscall_32+0x59f/0x8b0 [ 127.208421][ T8002] ? lockdep_hardirqs_on+0x7d/0x110 [ 127.208438][ T8002] do_fast_syscall_32+0x32/0x70 [ 127.208455][ T8002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.208471][ T8002] RIP: 0023:0xf708efec [ 127.208485][ T8002] Code: Unable to access opcode bytes at 0xf708efc2. [ 127.208490][ T8002] RSP: 002b:00000000f547d5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 127.208509][ T8002] RAX: fffffffffffffe00 RBX: 00000000f7484f88 RCX: 0000000000000080 [ 127.208518][ T8002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7484f8c [ 127.208528][ T8002] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 127.208536][ T8002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.208545][ T8002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.208563][ T8002] [ 127.520806][ T8006] FAULT_INJECTION: forcing a failure. [ 127.520806][ T8006] name failslab, interval 1, probability 0, space 0, times 0 [ 127.520868][ T8006] CPU: 2 UID: 0 PID: 8006 Comm: syz.4.552 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.520895][ T8006] Tainted: [L]=SOFTLOCKUP [ 127.520902][ T8006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.520913][ T8006] Call Trace: [ 127.520920][ T8006] [ 127.520927][ T8006] dump_stack_lvl+0x100/0x190 [ 127.520957][ T8006] should_fail_ex.cold+0x5/0xa [ 127.520983][ T8006] should_failslab+0xc2/0x120 [ 127.521010][ T8006] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 127.521031][ T8006] ? alloc_fd+0x471/0x7a0 [ 127.521052][ T8006] ? alloc_inode+0x183/0x250 [ 127.521083][ T8006] alloc_inode+0x183/0x250 [ 127.521110][ T8006] alloc_anon_inode+0x2a/0x3e0 [ 127.521135][ T8006] anon_inode_make_secure_inode+0x2f/0x140 [ 127.521167][ T8006] __do_sys_memfd_secret+0xd7/0x570 [ 127.521196][ T8006] __do_fast_syscall_32+0x13a/0x8b0 [ 127.521223][ T8006] ? lockdep_hardirqs_on+0x7d/0x110 [ 127.521255][ T8006] do_fast_syscall_32+0x32/0x70 [ 127.521285][ T8006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.521309][ T8006] RIP: 0023:0xf708efec [ 127.521329][ T8006] Code: Unable to access opcode bytes at 0xf708efc2. [ 127.521337][ T8006] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001bf [ 127.521355][ T8006] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 127.521367][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.521377][ T8006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.521389][ T8006] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 127.521400][ T8006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.521425][ T8006] [ 128.422722][ T35] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 128.545688][ T8020] netlink: 392 bytes leftover after parsing attributes in process `syz.2.557'. [ 128.573015][ T35] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 128.573887][ T35] usb 6-1: config 0 has no interfaces? [ 128.573914][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.576159][ T35] usb 6-1: config 0 descriptor?? [ 128.687018][ T8021] gretap0: left promiscuous mode [ 128.689733][ T8021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.700257][ T8021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.720905][ T8021] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.794785][ T5748] usb 6-1: USB disconnect, device number 16 [ 128.795702][ T8018] FAULT_INJECTION: forcing a failure. [ 128.795702][ T8018] name failslab, interval 1, probability 0, space 0, times 0 [ 128.795726][ T8018] CPU: 2 UID: 0 PID: 8018 Comm: syz.1.556 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.795750][ T8018] Tainted: [L]=SOFTLOCKUP [ 128.795755][ T8018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.795765][ T8018] Call Trace: [ 128.795771][ T8018] [ 128.795777][ T8018] dump_stack_lvl+0x100/0x190 [ 128.795802][ T8018] should_fail_ex.cold+0x5/0xa [ 128.795822][ T8018] should_failslab+0xc2/0x120 [ 128.795841][ T8018] __kmalloc_noprof+0xfc/0x840 [ 128.795875][ T8018] ? raw_event_queue_add+0x82/0x220 [ 128.795898][ T8018] raw_event_queue_add+0x82/0x220 [ 128.795916][ T8018] gadget_disconnect+0x58/0xd0 [ 128.795935][ T8018] usb_gadget_disconnect_locked+0x20d/0x4e0 [ 128.795953][ T8018] gadget_unbind_driver+0xd8/0x4f0 [ 128.795972][ T8018] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 128.795991][ T8018] device_remove+0xcb/0x180 [ 128.796010][ T8018] device_release_driver_internal+0x44e/0x620 [ 128.796033][ T8018] driver_detach+0xd8/0x1b0 [ 128.796053][ T8018] bus_remove_driver+0x13b/0x2e0 [ 128.796070][ T8018] driver_unregister+0x76/0xb0 [ 128.796090][ T8018] usb_gadget_unregister_driver+0x49/0x70 [ 128.796107][ T8018] raw_release+0x19b/0x260 [ 128.796123][ T8018] ? __pfx_raw_release+0x10/0x10 [ 128.796137][ T8018] __fput+0x3ff/0xb50 [ 128.796159][ T8018] fput_close_sync+0x118/0x250 [ 128.796179][ T8018] ? __pfx_fput_close_sync+0x10/0x10 [ 128.796203][ T8018] __ia32_sys_close+0x8b/0x120 [ 128.796223][ T8018] __do_fast_syscall_32+0x13a/0x8b0 [ 128.796246][ T8018] ? lockdep_hardirqs_on+0x7d/0x110 [ 128.796267][ T8018] do_fast_syscall_32+0x32/0x70 [ 128.796288][ T8018] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.796306][ T8018] RIP: 0023:0xf709efec [ 128.796323][ T8018] Code: Unable to access opcode bytes at 0xf709efc2. [ 128.796329][ T8018] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000006 [ 128.796344][ T8018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 128.796354][ T8018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.796363][ T8018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.796372][ T8018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.796381][ T8018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.796400][ T8018] [ 128.796471][ T8018] raw-gadget.0 gadget.1: failed to queue disconnect event [ 128.871244][ T8023] netlink: 144 bytes leftover after parsing attributes in process `syz.4.558'. [ 129.099533][ T8028] bond_slave_0: Caught tx_queue_len zero misconfig [ 129.101025][ T8032] FAULT_INJECTION: forcing a failure. [ 129.101025][ T8032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.101045][ T8032] CPU: 2 UID: 0 PID: 8032 Comm: syz.4.561 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.101060][ T8032] Tainted: [L]=SOFTLOCKUP [ 129.101064][ T8032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.101070][ T8032] Call Trace: [ 129.101074][ T8032] [ 129.101081][ T8032] dump_stack_lvl+0x100/0x190 [ 129.101101][ T8032] should_fail_ex.cold+0x5/0xa [ 129.101115][ T8032] strncpy_from_user+0x3b/0x2d0 [ 129.101132][ T8032] do_getname+0x78/0x390 [ 129.101149][ T8032] path_setxattrat+0x360/0x3b0 [ 129.101164][ T8032] ? __pfx_path_setxattrat+0x10/0x10 [ 129.101180][ T8032] ? rcu_read_lock_any_held+0x6a/0x90 [ 129.101192][ T8032] ? find_held_lock+0x2b/0x80 [ 129.101214][ T8032] ? fput+0x7c/0x100 [ 129.101228][ T8032] ? ksys_write+0x1ac/0x250 [ 129.101241][ T8032] __ia32_sys_setxattr+0xc4/0x140 [ 129.101261][ T8032] ? __do_fast_syscall_32+0xb3/0x8b0 [ 129.101285][ T8032] ? lockdep_hardirqs_on+0x7d/0x110 [ 129.101301][ T8032] __do_fast_syscall_32+0x13a/0x8b0 [ 129.101317][ T8032] ? lockdep_hardirqs_on+0x7d/0x110 [ 129.101333][ T8032] do_fast_syscall_32+0x32/0x70 [ 129.101351][ T8032] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 129.101365][ T8032] RIP: 0023:0xf708efec [ 129.101378][ T8032] Code: Unable to access opcode bytes at 0xf708efc2. [ 129.101382][ T8032] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000e2 [ 129.101394][ T8032] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000080000180 [ 129.101401][ T8032] RDX: 0000000080000580 RSI: 000000000000002c RDI: 0000000000000002 [ 129.101407][ T8032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.101417][ T8032] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 129.101446][ T8032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.101460][ T8032] [ 130.292437][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 130.308910][ T8069] FAULT_INJECTION: forcing a failure. [ 130.308910][ T8069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.308980][ T8069] CPU: 1 UID: 0 PID: 8069 Comm: syz.4.568 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.308997][ T8069] Tainted: [L]=SOFTLOCKUP [ 130.309001][ T8069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.309007][ T8069] Call Trace: [ 130.309011][ T8069] [ 130.309016][ T8069] dump_stack_lvl+0x100/0x190 [ 130.309035][ T8069] should_fail_ex.cold+0x5/0xa [ 130.309050][ T8069] _copy_from_user+0x2e/0xd0 [ 130.309064][ T8069] kstrtouint_from_user+0xd6/0x1d0 [ 130.309081][ T8069] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 130.309101][ T8069] ? lock_acquire+0x1d1/0x380 [ 130.309119][ T8069] proc_fail_nth_write+0x83/0x220 [ 130.309131][ T8069] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.309146][ T8069] vfs_write+0x2aa/0x1050 [ 130.309158][ T8069] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.309169][ T8069] ? lock_acquire+0x1d1/0x380 [ 130.309185][ T8069] ? __fget_files+0x34/0x3d0 [ 130.309197][ T8069] ? __pfx_vfs_write+0x10/0x10 [ 130.309207][ T8069] ? find_held_lock+0x2b/0x80 [ 130.309219][ T8069] ? __fget_files+0x215/0x3d0 [ 130.309233][ T8069] ? __fget_files+0x21f/0x3d0 [ 130.309249][ T8069] ksys_write+0x12a/0x250 [ 130.309260][ T8069] ? __pfx_ksys_write+0x10/0x10 [ 130.309275][ T8069] do_int80_emulation+0x166/0x650 [ 130.309294][ T8069] asm_int80_emulation+0x1a/0x20 [ 130.309305][ T8069] RIP: 0023:0xf71c75ab [ 130.309314][ T8069] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 130.309325][ T8069] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 130.309337][ T8069] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f547d5d0 [ 130.309343][ T8069] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.309349][ T8069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.309355][ T8069] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 130.309362][ T8069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.309375][ T8069] [ 130.311403][ T8066] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 130.422446][ T8078] overlayfs: overlapping lowerdir path [ 130.449272][ T8077] block nbd1: NBD_DISCONNECT [ 131.528755][ T8103] capability: warning: `syz.1.580' uses deprecated v2 capabilities in a way that may be insecure [ 131.677856][ T8108] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 131.678060][ T8108] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 131.678169][ T8108] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 131.678272][ T8108] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 131.678376][ T8108] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 131.678479][ T8108] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 131.678584][ T8108] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 131.679532][ T8108] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 131.681604][ T8108] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 131.831952][ T1473] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 132.012457][ T1473] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 132.013533][ T1473] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 132.013569][ T1473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.013588][ T1473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.013605][ T1473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 132.015289][ T1473] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 132.015306][ T1473] usb 6-1: Manufacturer: syz [ 132.018214][ T1473] usb 6-1: config 0 descriptor?? [ 132.309979][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.310049][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.427001][ T8105] syz_tun: entered allmulticast mode [ 132.435971][ T8104] syz_tun: left allmulticast mode [ 132.438783][ T1473] usbhid 6-1:0.0: can't add hid device: -71 [ 132.438863][ T1473] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 132.445480][ T1473] usb 6-1: USB disconnect, device number 17 [ 132.447946][ T8132] tc action pedit offset must be on 32 bit boundaries [ 133.523109][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 133.536196][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 133.549931][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 133.551677][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 133.582110][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 133.605459][ T8165] SQUASHFS error: Failed to read block 0x0: -5 [ 133.605503][ T8165] unable to read squashfs_super_block [ 133.907835][ T8170] xt_SECMARK: invalid mode: 0 [ 133.914256][ T8170] syzkaller0: entered promiscuous mode [ 133.914275][ T8170] syzkaller0: entered allmulticast mode [ 134.416628][ T8186] [ 134.417704][ T8186] ====================================================== [ 134.419995][ T8186] WARNING: possible circular locking dependency detected [ 134.422473][ T8186] syzkaller #0 Tainted: G L [ 134.425008][ T8186] ------------------------------------------------------ [ 134.428063][ T8186] syz.3.606/8186 is trying to acquire lock: [ 134.430335][ T8186] ffff8880278a4118 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x1c/0x300 [ 134.433300][ T8186] [ 134.433300][ T8186] but task is already holding lock: [ 134.436364][ T8186] ffff88802712e2a8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530 [ 134.440334][ T8186] [ 134.440334][ T8186] which lock already depends on the new lock. [ 134.440334][ T8186] [ 134.444655][ T8186] [ 134.444655][ T8186] the existing dependency chain (in reverse order) is: [ 134.448292][ T8186] [ 134.448292][ T8186] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 134.451444][ T8186] lock_acquire+0x1d1/0x380 [ 134.453054][ T8186] __mutex_lock+0x1a4/0x1bd0 [ 134.454667][ T8186] elevator_change+0x1bc/0x530 [ 134.456314][ T8186] elevator_set_none+0x92/0xf0 [ 134.458042][ T8186] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 134.460079][ T8186] nbd_start_device+0x1a6/0xbd0 [ 134.462095][ T8186] nbd_genl_connect+0xfc2/0x1760 [ 134.464061][ T8186] genl_family_rcv_msg_doit+0x214/0x300 [ 134.466003][ T8186] genl_rcv_msg+0x560/0x800 [ 134.467651][ T8186] netlink_rcv_skb+0x159/0x420 [ 134.469546][ T8186] genl_rcv+0x28/0x40 [ 134.471530][ T8186] netlink_unicast+0x585/0x850 [ 134.473918][ T8186] netlink_sendmsg+0x8b0/0xda0 [ 134.476332][ T8186] ____sys_sendmsg+0xa4d/0xbe0 [ 134.478563][ T8186] ___sys_sendmsg+0x190/0x1e0 [ 134.480736][ T8186] __sys_sendmsg+0x160/0x210 [ 134.482828][ T8186] __do_fast_syscall_32+0x13a/0x8b0 [ 134.484994][ T8186] do_fast_syscall_32+0x32/0x70 [ 134.486805][ T8186] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.489578][ T8186] [ 134.489578][ T8186] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 134.493001][ T8186] lock_acquire+0x1d1/0x380 [ 134.494768][ T8186] blk_alloc_queue+0x610/0x790 [ 134.496579][ T8186] blk_mq_alloc_queue+0x174/0x290 [ 134.498757][ T8186] __blk_mq_alloc_disk+0x29/0x120 [ 134.500941][ T8186] nbd_dev_add+0x491/0xb10 [ 134.503038][ T8186] nbd_init+0x2c5/0x2e0 [ 134.505042][ T8186] do_one_initcall+0x11c/0x6f0 [ 134.507301][ T8186] kernel_init_freeable+0x6ea/0x7b0 [ 134.509625][ T8186] kernel_init+0x21/0x1e0 [ 134.511641][ T8186] ret_from_fork+0x730/0xd60 [ 134.513810][ T8186] ret_from_fork_asm+0x1a/0x30 [ 134.515909][ T8186] [ 134.515909][ T8186] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 134.518887][ T8186] lock_acquire+0x1d1/0x380 [ 134.520970][ T8186] fs_reclaim_acquire+0xc4/0x100 [ 134.523223][ T8186] __kmalloc_cache_node_noprof+0x66/0x720 [ 134.525550][ T8186] create_worker+0x110/0x750 [ 134.527168][ T8186] workqueue_prepare_cpu+0xb5/0x160 [ 134.528981][ T8186] cpuhp_invoke_callback+0x3b4/0x9a0 [ 134.530921][ T8186] __cpuhp_invoke_callback_range+0x158/0x1d0 [ 134.532922][ T8186] _cpu_up+0x3f6/0x960 [ 134.534413][ T8186] cpu_up+0x1ba/0x230 [ 134.535841][ T8186] cpuhp_bringup_mask+0xf8/0x180 [ 134.537593][ T8186] bringup_nonboot_cpus+0xd9/0x1b0 [ 134.539335][ T8186] smp_init+0x32/0x150 [ 134.540874][ T8186] kernel_init_freeable+0x44b/0x7b0 [ 134.542655][ T8186] kernel_init+0x21/0x1e0 [ 134.544172][ T8186] ret_from_fork+0x730/0xd60 [ 134.545778][ T8186] ret_from_fork_asm+0x1a/0x30 [ 134.547444][ T8186] [ 134.547444][ T8186] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 134.549911][ T8186] lock_acquire+0x1d1/0x380 [ 134.551969][ T8186] cpus_read_lock+0x42/0x170 [ 134.553590][ T8186] static_key_slow_inc+0x12/0x30 [ 134.555275][ T8186] nbd_genl_reconnect_sock_cb+0x39f/0x990 [ 134.557201][ T8186] nbd_genl_foreach_sock+0x2ab/0x3e0 [ 134.559023][ T8186] nbd_genl_reconfigure+0x861/0xde0 [ 134.560840][ T8186] genl_family_rcv_msg_doit+0x214/0x300 [ 134.562818][ T8186] genl_rcv_msg+0x560/0x800 [ 134.564392][ T8186] netlink_rcv_skb+0x159/0x420 [ 134.566039][ T8186] genl_rcv+0x28/0x40 [ 134.567479][ T8186] netlink_unicast+0x585/0x850 [ 134.569126][ T8186] netlink_sendmsg+0x8b0/0xda0 [ 134.571068][ T8186] ____sys_sendmsg+0xa4d/0xbe0 [ 134.572711][ T8186] ___sys_sendmsg+0x190/0x1e0 [ 134.574341][ T8186] __sys_sendmsg+0x160/0x210 [ 134.575931][ T8186] __do_fast_syscall_32+0x13a/0x8b0 [ 134.577725][ T8186] do_fast_syscall_32+0x32/0x70 [ 134.579473][ T8186] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.581741][ T8186] [ 134.581741][ T8186] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 134.584106][ T8186] lock_acquire+0x1d1/0x380 [ 134.585684][ T8186] __mutex_lock+0x1a4/0x1bd0 [ 134.587274][ T8186] nbd_queue_rq+0x42d/0xfa0 [ 134.588844][ T8186] blk_mq_dispatch_rq_list+0x428/0x1e60 [ 134.590836][ T8186] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 134.592938][ T8186] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 134.594945][ T8186] blk_mq_run_work_fn+0x135/0x380 [ 134.596659][ T8186] process_one_work+0xac7/0x1b10 [ 134.598379][ T8186] worker_thread+0x5ef/0xe50 [ 134.600079][ T8186] kthread+0x373/0x450 [ 134.601614][ T8186] ret_from_fork+0x730/0xd60 [ 134.603235][ T8186] ret_from_fork_asm+0x1a/0x30 [ 134.604867][ T8186] [ 134.604867][ T8186] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 134.607094][ T8186] lock_acquire+0x1d1/0x380 [ 134.608693][ T8186] __mutex_lock+0x1a4/0x1bd0 [ 134.610350][ T8186] nbd_queue_rq+0xba/0xfa0 [ 134.611894][ T8186] blk_mq_dispatch_rq_list+0x428/0x1e60 [ 134.613788][ T8186] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 134.615894][ T8186] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 134.617920][ T8186] blk_mq_run_work_fn+0x135/0x380 [ 134.619650][ T8186] process_one_work+0xac7/0x1b10 [ 134.621427][ T8186] worker_thread+0x5ef/0xe50 [ 134.623011][ T8186] kthread+0x373/0x450 [ 134.624455][ T8186] ret_from_fork+0x730/0xd60 [ 134.626084][ T8186] ret_from_fork_asm+0x1a/0x30 [ 134.627750][ T8186] [ 134.627750][ T8186] -> #0 (set->srcu){.+.+}-{0:0}: [ 134.630058][ T8186] check_prev_add+0xeb/0xe60 [ 134.631657][ T8186] __lock_acquire+0x1528/0x1f40 [ 134.633338][ T8186] lock_sync+0xb5/0x120 [ 134.634819][ T8186] __synchronize_srcu+0xa2/0x300 [ 134.636515][ T8186] blk_mq_quiesce_queue+0x149/0x1c0 [ 134.638319][ T8186] elevator_switch+0x353/0x7e0 [ 134.640084][ T8186] elevator_change+0x352/0x530 [ 134.642340][ T8186] elevator_set_none+0x92/0xf0 [ 134.644195][ T8186] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 134.646171][ T8186] nbd_start_device+0x1a6/0xbd0 [ 134.647868][ T8186] nbd_genl_connect+0xfc2/0x1760 [ 134.649582][ T8186] genl_family_rcv_msg_doit+0x214/0x300 [ 134.651514][ T8186] genl_rcv_msg+0x560/0x800 [ 134.653088][ T8186] netlink_rcv_skb+0x159/0x420 [ 134.654737][ T8186] genl_rcv+0x28/0x40 [ 134.656165][ T8186] netlink_unicast+0x585/0x850 [ 134.657827][ T8186] netlink_sendmsg+0x8b0/0xda0 [ 134.659473][ T8186] ____sys_sendmsg+0xa4d/0xbe0 [ 134.661377][ T8186] ___sys_sendmsg+0x190/0x1e0 [ 134.663004][ T8186] __sys_sendmsg+0x160/0x210 [ 134.664594][ T8186] __do_fast_syscall_32+0x13a/0x8b0 [ 134.666373][ T8186] do_fast_syscall_32+0x32/0x70 [ 134.668058][ T8186] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.670408][ T8186] [ 134.670408][ T8186] other info that might help us debug this: [ 134.670408][ T8186] [ 134.673598][ T8186] Chain exists of: [ 134.673598][ T8186] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 134.673598][ T8186] [ 134.677925][ T8186] Possible unsafe locking scenario: [ 134.677925][ T8186] [ 134.680389][ T8186] CPU0 CPU1 [ 134.682300][ T8186] ---- ---- [ 134.684030][ T8186] lock(&q->elevator_lock); [ 134.685505][ T8186] lock(&q->q_usage_counter(io)#50); [ 134.688541][ T8186] lock(&q->elevator_lock); [ 134.691189][ T8186] sync(set->srcu); [ 134.692848][ T8186] [ 134.692848][ T8186] *** DEADLOCK *** [ 134.692848][ T8186] [ 134.696212][ T8186] locks held by syz.3.606/8186: 7, last CPU#3: [ 134.698838][ T8186] #0: ffffffff90d83ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 134.702279][ T8186] #1: ffffffff90d83fa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 134.706090][ T8186] #2: ffff888027a071c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x9d/0x15f0 [ 134.710204][ T8186] #3: ffff888027a070d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb0/0x15f0 [ 134.714893][ T8186] #4: ffff88802712dd80 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 134.719751][ T8186] #5: ffff88802712ddb8 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 134.724624][ T8186] #6: ffff88802712e2a8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530 [ 134.728649][ T8186] [ 134.728649][ T8186] stack backtrace: [ 134.731123][ T8186] CPU: 3 UID: 0 PID: 8186 Comm: syz.3.606 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.735143][ T8186] Tainted: [L]=SOFTLOCKUP [ 134.736583][ T8186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.739927][ T8186] Call Trace: [ 134.741325][ T8186] [ 134.742459][ T8186] dump_stack_lvl+0x100/0x190 [ 134.744320][ T8186] print_circular_bug.cold+0x178/0x1be [ 134.746544][ T8186] check_noncircular+0x146/0x160 [ 134.748135][ T8186] check_prev_add+0xeb/0xe60 [ 134.749793][ T8186] ? check_noncircular+0x97/0x160 [ 134.751912][ T8186] __lock_acquire+0x1528/0x1f40 [ 134.753583][ T8186] ? __synchronize_srcu+0x1c/0x300 [ 134.755258][ T8186] lock_sync+0xb5/0x120 [ 134.756578][ T8186] ? __synchronize_srcu+0x1c/0x300 [ 134.758290][ T8186] __synchronize_srcu+0xa2/0x300 [ 134.759929][ T8186] ? __pfx___synchronize_srcu+0x10/0x10 [ 134.761669][ T8186] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 134.763406][ T8186] ? synchronize_srcu+0xa8/0x380 [ 134.764970][ T8186] blk_mq_quiesce_queue+0x149/0x1c0 [ 134.766601][ T8186] elevator_switch+0x353/0x7e0 [ 134.768154][ T8186] elevator_change+0x352/0x530 [ 134.769822][ T8186] elevator_set_none+0x92/0xf0 [ 134.771620][ T8186] ? __pfx_elevator_set_none+0x10/0x10 [ 134.773411][ T8186] ? blk_mq_unregister_hctx.part.0+0x1ba/0x230 [ 134.775352][ T8186] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 134.777165][ T8186] ? print_kernel_ident+0x17/0x40 [ 134.778753][ T8186] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 134.780875][ T8186] ? sysfs_create_file_ns+0x14c/0x1e0 [ 134.782555][ T8186] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 134.784463][ T8186] nbd_start_device+0x1a6/0xbd0 [ 134.785991][ T8186] nbd_genl_connect+0xfc2/0x1760 [ 134.787574][ T8186] ? __pfx_nbd_genl_connect+0x10/0x10 [ 134.789265][ T8186] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 134.791459][ T8186] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 134.793590][ T8186] genl_family_rcv_msg_doit+0x214/0x300 [ 134.795357][ T8186] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 134.797317][ T8186] ? genl_get_cmd+0x3e7/0x760 [ 134.798856][ T8186] ? netlink_sendmsg+0x680/0xda0 [ 134.800655][ T8186] ? ____sys_sendmsg+0xa4d/0xbe0 [ 134.802344][ T8186] ? __radix_tree_lookup+0x217/0x2b0 [ 134.804023][ T8186] genl_rcv_msg+0x560/0x800 [ 134.805473][ T8186] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.807057][ T8186] ? __lock_acquire+0x5c0/0x1f40 [ 134.808687][ T8186] ? __pfx_nbd_genl_connect+0x10/0x10 [ 134.810538][ T8186] ? __lock_acquire+0x5c0/0x1f40 [ 134.812201][ T8186] netlink_rcv_skb+0x159/0x420 [ 134.813777][ T8186] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.815839][ T8186] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.817548][ T8186] ? netlink_deliver_tap+0x1ae/0xcc0 [ 134.819189][ T8186] genl_rcv+0x28/0x40 [ 134.820508][ T8186] netlink_unicast+0x585/0x850 [ 134.822022][ T8186] ? __pfx_netlink_unicast+0x10/0x10 [ 134.823693][ T8186] ? aa_sk_perm+0x389/0xab0 [ 134.825185][ T8186] netlink_sendmsg+0x8b0/0xda0 [ 134.826783][ T8186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.828566][ T8186] ? apparmor_socket_sendmsg+0x165/0x280 [ 134.830549][ T8186] ____sys_sendmsg+0xa4d/0xbe0 [ 134.832147][ T8186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.834453][ T8186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.836486][ T8186] ___sys_sendmsg+0x190/0x1e0 [ 134.838015][ T8186] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.839681][ T8186] ? futex_wait+0x11e/0x370 [ 134.841566][ T8186] ? find_held_lock+0x2b/0x80 [ 134.843498][ T8186] __sys_sendmsg+0x160/0x210 [ 134.844959][ T8186] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.846571][ T8186] __do_fast_syscall_32+0x13a/0x8b0 [ 134.848216][ T8186] ? lockdep_hardirqs_on+0x7d/0x110 [ 134.850079][ T8186] do_fast_syscall_32+0x32/0x70 [ 134.851780][ T8186] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.853951][ T8186] RIP: 0023:0xf7fb6fec [ 134.855289][ T8186] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 134.857456][ T8186] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 134.860237][ T8186] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000400 [ 134.863513][ T8186] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.866037][ T8186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.868528][ T8186] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 134.871025][ T8186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.873505][ T8186]