last executing test programs: 9.267293353s ago: executing program 1 (id=412): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=@newlink={0x3c, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x204a9, 0x4c801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080c6}, 0x20040844) syz_emit_ethernet(0x7a, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442f00fc040000000000000000000000000000ff020000000000000000000000000001242088a800000003000008000000000000000000080022eb"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003020000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00037400000074032a162864547d097c3b8bdccf595dcee8746cdb782e847071617a982e662c2649aafd11440b6eda15cd10a6d8ff407b2d94aafa8a3778e47e722dd8cfcb68d13d2fa24fdc58a2c6450047c88aaf0a2213036c0ad1b862f16b5bfa1d1c5cefe5ab432317bec3a314a255a3318bc0bccb4dd99439a4b5aba60ef8bb704dc14d0e8920c0a11c517469d5db67bb14de5f94e7c62fef0b6ba2a4fb8b4ab399accbc3379028ee96e79ab489af4b6f8f2795f82ccf9e6a1399706e06249029125599f89d3214c398fbf3e1da15caf30d7a246f275632c2a027fd87f37db449312fdfd23b2dc95c8bbf37a6a66c9dce89152419526b93ab3d1e75accb4a5e2835e39a880ecc2b2c0bc4ada5381c86d6225a4b6d0c4631bfdf064c"], 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000001840), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000001880)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000018c0)=@usbdevfs_connect) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000200)={0x1, @pix_mp={0x5cec, 0x2, 0x3432564e, 0x3234564e, 0x0, [{0x0, 0xfffffffd}, {0xf, 0xe}, {0x7, 0x6c4}, {0x1, 0x3}, {0x9, 0xd9c}, {0x6, 0x6}, {0x282}, {0x2, 0x8cb}], 0x8, 0x8, 0x1, 0x0, 0x4}}) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffff8) r3 = syz_usb_connect(0x4, 0xce8, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0x6, 0x81, 0x3b, 0xff, 0x8f2, 0xce, 0x9dc9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd6, 0x3, 0x7, 0xfc, 0x60, 0x4, "", [{{0x9, 0x4, 0xa8, 0x2, 0x3, 0x5c, 0xfb, 0x17, 0xff, [@generic={0x81, 0x22, "e51eb2ba9d901754b86de0b31be15eb30b4131341c07030a23eaf65161f145bad681656ee49c13360b36e0d552dddd87343cfe7d8d06a658c86cb6aebc3882b02a53762cb179a3a1dc225e6ceea3b267e7f1348e59b028b3d451eba017c0dd97098f4b7471b2a33db9762c4de59ff12c6b7a1e4a528ed3c4e46252d2c389bf"}], [{{0x9, 0x5, 0x1f, 0x2, 0x400, 0x1, 0x5, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xd9c}, @generic={0x6a, 0x21, "f2ff9069c7ab63523de466c8194a0313b953849280d3dde2ba1b35504d7aee81f2d17968818774cab6470ac55e6b1a789d12515a92ccae75d9999d50f4780c0761bbf22cf6f8a61a5e4d8569b510c10eba8c7156351e868c5e75d2e20e346c9c7b0a5ca73baeabb3"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x0, 0x2, 0xcb, [@generic={0x89, 0x23, "36bf19d0ac04ed5475ce2a302634da557dd9cf42e25f74236379809843907b011c29bbe377d73366ccccc54682d106ef0475122b2ca39db8f1dc7741ebe0f1bf29fc07868b904b627df712406c4438d8e6b37cddadc5bcdb9b14dfddb6c037f884b74d51d0d8e791328ff78af524a91db81c7fe7f20fbc35d4d7c9cd9482291a86b4f2eaeb5394"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x4, 0x7, 0x49, [@generic={0x62, 0x30, "423653750f54f78e8863b8709be59627b326775a9649f2dae8f337ead269675ae7bbe0c7f52684e9fd823a8625d203534fbaa7ec571413bb6192e8a85e2b91a1f0e24c23772ebff192079e5198a92aab3b5fae24c31f31d7643ea37a94f23084"}]}}]}}, {{0x9, 0x4, 0xa6, 0xb7, 0xf, 0xb, 0xc4, 0x4e, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x48}, [@selector_unit={0xb, 0x24, 0x5, 0x6, 0x0, "57f7ade26a47"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x1, 0x1, [0x8]}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x400, 0x4, 0x2, 0x1}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x6, 0x1, [0xe], 0x5}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0x6, 0x40, "c8fa1d34a1"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x1ff, 0x4, 0x7, 0x6, 0x4}]}], [{{0x9, 0x5, 0x80, 0x2, 0x3ff, 0xff, 0x5, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x19, 0x2dfa}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xb, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x10, 0xecdc}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x6, 0x29, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x8855}]}}, {{0x9, 0x5, 0xe, 0x3, 0x208, 0x80, 0x2, 0x5, [@generic={0x31, 0x4, "1d5343bcc3100ad171f07068345b41b36d733d203d05caa0ea80486f047a269a9383bc2cf1be5d61db83a5203b8b55"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x81}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x7, 0x3, 0x80, [@generic={0x8f, 0x23, "abadfb657871d19c4814f4dd7b8b0ac6fc2f93470c16142c700a0339d8e78007c3c99e3893dd90e3e6704112392e307c2e4c3686fb2fe9b616a89119b9d3fbaf1dacb5e6b2d3c57f3e52856f7ee79fd4332063e1642d36a00be08ed2c9cd09a88d9692488e3362f90f5b4372b60b26f7a9e629e8b15bf9b3fddd0fd99db161bab26e9733b671ff57d34dba93bb"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x1, 0x7, 0x55, [@generic={0xff, 0x9, "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"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ef, 0x7, 0x3, 0x6, [@generic={0x3f, 0x9, "ec0d8d643260666fd48511b4cf28b0403f181a7f0424f8c814f7be60faddf898bd287c59c6fb52370debe2ec31afd9685d3f3931aef38bcb3a99e63ba5"}]}}, {{0x9, 0x5, 0x2, 0x14, 0x200, 0x1, 0x1, 0x4, [@generic={0xea, 0x2, "2bb3171f9c6f9ba8d6e19895a709ff86ab7ecd14b275d2e569a3647a46b521c9d760d4152b03eb1c74d4f1d838656dd2c4bc5661cc4d85f4c2d30ca1cacd5a8d9fa27704bf14df1aa196ac50134b2dad5053c90a21dd9605ba662a9098f1ce028ae4f0b38233c00af868f16decb32dd1c25d77bf3af29b0bcc2c0d647240326f99cb38c2b6a3377b307da5469127833b9397d920426cf900c7ef29f225f9b8520ead81953ded04843233f394b13ce7ed4d1e833d4d00020ea6559c30bbdd965a97124e1675fcd7eac66ebbc393bd12a5a34b3e324b9fc38d42fa8926ee8ad8e4aee758fe83c98aee"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0xc8, 0x4f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x20, 0xfa, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xb4, 0x9b8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x43, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x17, 0x4}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x7, 0xb, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x3}, @generic={0x84, 0x6, "2248f12216816977798483802a3fec367ae5f8d9487147777d5cc530d2aae1267bb1496f1f6d42da976549e148bf6e584e9ca3567f98b40edb2d80d17d0a0797afde3b997cc6d5d0c8642276322b4d01b5df378b63eddab54676881077362bd7a24b5395165de1532cba2546bbe0d9c45a3137faf38a0acab43354429b987ca66d16"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x1, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x3}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x4, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x8a}, @generic={0x24, 0x1, "cece89908e853ac8b91febf169db6d8ad748385badad78ada5f006bcdf598a01a0a4"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x1, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7f, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xffff}]}}]}}, {{0x9, 0x4, 0xf7, 0x3, 0xf, 0xff, 0x6, 0x65, 0x5, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "d4"}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x7ff, 0x80, 0xf}, {0x6, 0x24, 0x1a, 0x7ff, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x2, 0xe, 0xfe}]}], [{{0x9, 0x5, 0x80, 0x4, 0x8, 0x82, 0x4, 0x3, [@generic={0x30, 0x8, "4987c513cb4167c92ff262da70f0eb8277180718db7818a2ff961f9240fa391e1cabaac3056acf6acf99a86cb909"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x3, 0xc4, 0x2, [@generic={0x12, 0x22, "afc181fed706e94b4c0e58ba0541c337"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x5}]}}, {{0x9, 0x5, 0xa, 0x8, 0x10, 0xb9, 0x1, 0x0, [@generic={0x3b, 0x21, "0548bfd8610a49b9c3861ec2ee6ec12c2d529778495833b01df0aee0a1b07adea10ae5559665976f2748201a947125e8519fae54654afedf7f"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xf, 0x3ff}]}}, {{0x9, 0x5, 0x7, 0xd, 0x40, 0x8, 0x7c, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xffff}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x1, 0x5, 0x6, [@generic={0x15, 0x10, "8c3fffeab3e975728847ae9f26afbfab668a00"}, @generic={0x15, 0xd, "39becb35567753599129c406113b7e37f41206"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x7f, 0x6, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x0, 0xd, 0x2, [@generic={0x7a, 0xc, "9e914c6d837570fe6222383cbf6aa989ff0f944022b6aab0f80d24324c3171ea25747acfec21378abfcc52964f63d57b915b56ae93706ab657b428316344e56f947f2f12fe153ef22594c99371ea94e2dfffa154a2c0f6eae513cc706fcd61546c699c93c659a25a9fae3ed8963bd18c17bd9a5e0beb9b7d"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0xa, 0x7, 0xd0, [@generic={0x72, 0x21, "a0010120b097e9011834523d687ea5077859500c30909570053cedca70e0a54dd09d7fc0425db74214544634ce66dac7671892062d6b7faa9a233d1cfa6f8777822413cd4f510598637377c4b7472e35f9e2cba6d641d2dfab37ecdb553704e8895eb080e9f337415ca5a697d5c761a1"}, @generic={0xb3, 0x23, "b054776b2cd231931afc4d0483a3788eafefb9abfef497ef6d335231f76bf14d45eb1584be2401a8e4f3cef8eca31bd4486309d214bec4119f6484a864acae196db5e328e30f7d337faef6b9ecbed6690594885bac80f84d6cbfd39a7d7c7384e9f992e207c4878c927840901ed725459c7633e4ad0a8f4f650187c5a18a17584c4a9126b445f429ead658ae35b461a293a53ffcfc7f57be0dc89b76f583fbf09d6d2331e082b5e6f9cb057113fcb87786"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x0, 0x7, 0x4, [@generic={0x46, 0x2, "421e279d32e4be34d95132d2c564ddc7bf2968f4c518221d299a63096f3dfe16d36ff9fb9097dce828536c65e94d9c2ee1e812667ac071e7fdc1e264ed102ed6cfeff447"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x1, 0x35, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x87, 0xd}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9c, 0x6, 0x5c, [@generic={0x95, 0x2, "d1083c40d67f49f5b78356e2e2400bb1fbd52fda6eced977ca1d9e0e7e78009c0493afac21e0bb7bba9625f4cb3e7819a41f9a746e04140d5d51ebc05ba08ff4195022a92e75045f036c9a728057d7f00d91de3bf32c788149dfa6e9e79a19899911dd329294afaf579bbd1a5232c4f5f11a24385089f7b9bf299e5295561ddb69662402cc5b6dc6a1c245d149b2b399a09ff6"}, @generic={0xba, 0xa, "a9502bf881eddd66a75b05a10a0b9e5e4772195bb6819bdf7270f93aae88b535abebef97693e88c6a69b47161c5bfa188cbbaf3ab585b8e2cc2a70ad0a89ccea6f38d846430cefbb263e2233bf25ca15a0200200298915c35350dd2c67d348e3dfae648613a01a6da25fc356822bec04081ab82b3ad6b139f85516a9773e77a0ee358e2e3e7203216448b2ad1d6105089e8b38c9a4a2c1f865d87a899f08f75fc18d569e58802e3b0c718cd50ca2c1570c238af92debc1e8"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xa, 0xf, 0x40, [@generic={0x4, 0x9, "85f4"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x8, 0xa, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x4}]}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x3, 0x6, 0x3, [@generic={0x68, 0x31, "14be49386bb4fdd6b399b72a09b09d8b2c326296f4b90ae809344a03632249163aae9a6e483af0ab71ccce08670a7ecca0c91895cf1e56924e54f0e5607f04ffc8caae000ca4f59692e38c4a5afd3ac75783ffc8d552d90b9ac59163726f5c02905d17d8e9b1"}, @generic={0xc0, 0x9, "0d15aeccac8cecb60e8f796ddb6ef773e4cbf70d46498b9dda422ae7ac84eb0a644ec45d8c09389f76fa1a4090e669c4841943c72bbcf29de34524d7424caa25e664810e8637754f90bae3c92996743f315974940aaac61674dfce1ca3312a9b8d4aaa2cfb81d32857d149737b9fd94e39ea2917efdaa7067cae84f693700835577969392973e20d8060e583516c3a01c3c9a64533f2f04fa9a8029c21503e187310dd32db4c40150528cf34869490b10ca32d363d01f43c2b2443bfb5e6"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0xfa, 0xb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0xdaa3}]}}]}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x201, 0xd8, 0x37, 0x1, 0x10, 0x7}, 0x29, &(0x7f0000001380)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x50, 0x6, 0x1000, 0xf00f, 0x80, [0xff3e9e, 0xff0000, 0xf, 0xc0, 0xc000, 0xf]}]}, 0x2, [{0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x418}}]}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000001500)={0xfffffffffffffe46, &(0x7f0000001480)={0xd7bdf0937560082b, 0x21, 0x30, {0x30, 0xd, "6d79ca56544c77a05e513d48dfdc61b7eb417ee68bbe7921cf225daa0fd4f51bca9f685f7d2f4293d6e9fc617279"}}, &(0x7f00000014c0)={0x0, 0x3, 0x18, @string={0x18, 0x3, "f1537cbfe3264de4a286b5175fbe33f60abe2fe75290"}}}, &(0x7f0000001740)={0x24, &(0x7f0000001540)={0x0, 0x0, 0x30, "9d83e95e7c0f55c7b2c971dcfae7c966799aac73d05ead50cc8b809b229983c6c7b7e7871f1bac99a40cabee90c5236f"}, &(0x7f0000001580)={0x0, 0xa, 0x1}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000001600)={0x20, 0x81, 0x2, "a367"}, &(0x7f0000001640)={0x20, 0x82, 0x3, 'V#U'}, &(0x7f0000001680)={0x20, 0x83, 0x1, '\\'}, &(0x7f00000016c0)=ANY=[@ANYBLOB], &(0x7f0000001700)={0x20, 0x85, 0x3, "94cc45"}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c09425, &(0x7f0000002180)={"7ca448e9d2cddd222e164be10331598d", 0x0, 0x0, {0x2, 0x1}, {0x98, 0x2}, 0x63fc, [0x6, 0x8, 0x4, 0x3, 0xc9b, 0x6a, 0x81, 0x7, 0x5, 0x8, 0x7, 0x2, 0xfee, 0x7, 0xffffffffffffffff, 0x1eec206a]}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000380)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) 3.729357647s ago: executing program 1 (id=438): r0 = syz_io_uring_setup(0x111, &(0x7f0000000640)={0x0, 0x39c4, 0x1041, 0x4, 0xfffffffe}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000180)=[0x2, 0x920], 0x2) 3.680858101s ago: executing program 1 (id=439): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x1, &(0x7f00000004c0)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x48e02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000580)={r1, 0x15e, 0x4}) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000600)) timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000ac0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000b00)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000b80)={r3, r4+60000000}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000bc0)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 3.680416379s ago: executing program 3 (id=440): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r0, 0x8ce2b000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x100, 0xfe31, 0x8}, 'syz1\x00', 0x800016}) ioctl$UI_DEV_CREATE(r1, 0x5501) 3.590229192s ago: executing program 3 (id=441): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000480)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000500)={0x0, 0x600, 0x0, 0x0, &(0x7f0000000580)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x4, 0x29, 0x2000012, r2}}], 0x1c, 0x2400e044}, 0x6) 3.514199817s ago: executing program 3 (id=443): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x1}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close_range(r0, 0xffffffffffffffff, 0x0) 3.40693514s ago: executing program 3 (id=446): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x44090) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000006c0)=0xa0000) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000500), 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000700)={@hyper}) setns(0xc9, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4f24, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x44000840) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f757876656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000340)='./file0\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, 0x0, 0x129942, 0x18) fcntl$setlease(r3, 0x400, 0x1) openat(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x80000, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f00000004c0)='./file0\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x24048884) link(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000480)='./file0\x00', 0x25) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000bc0)={0x0, 0x0, 0x4}) 3.318585785s ago: executing program 3 (id=449): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/stat\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='rt_cache\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000940)=""/209, 0xd1, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000c500f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e6b3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7a29aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e17fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4314f244a94aa8e98b0b263f0083bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc06000000000000008fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e05000000d03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf2871ed2aa2a05e319374511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b22589f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b24464e0ff504b87c90697ec2a82bbfd1c31713190d3e6e502c434909d6ba06cd0361a0fd90552272f24519ea9938413947edd3a0a7aa780c1dcdddf13b46ca94f37c89664c9cc1857d64ca371fa1b6131"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) 2.920267783s ago: executing program 3 (id=457): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fd3f00000000000009011c008500000011000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f00000005c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40bc5311, &(0x7f0000000640)={0x83, 0x1}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000006c0)=0x6) sched_setaffinity(0x0, 0xfffffffffffffd59, &(0x7f0000000700)=0x2) ptrace$setregs(0xf, r3, 0x3, &(0x7f0000000740)="05b60da7e8cbb0315b4c5dabcf9b3db7ecaa22db501d91af7f5bed983421e9335f2028d4f433fbfe33651863f09cb8e949e169c9cfd0fbc1b3a76a31b59003389d64e463ddd06bcd37156aff0054c19e609715b21dfe0b4b37af7d7795f07e19cd1fc62bfd37e93c2ff6d36ce38e5b1aa6b063bed19743cf482cf2663c8e8f12a72bcda26fb008d3dd10cd2106a86b809b678e90d17bb732b8773db6bfce8514853bd09e16809257903a848ebf5d0ec7d9eeef15404a6e9b9a519092b78304cc2f8481a055f48e008e") r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r4, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/4103, 0x1007}], 0x1) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000001900)={0x7, 0x0, 0x2, 0xa, 0x4}) fsetxattr$security_capability(r1, &(0x7f0000001940), &(0x7f0000001980)=@v3={0x3000000, [{0x1, 0x9}, {0xd, 0xfffffff9}]}, 0x18, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000019c0)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000001a00)='lp', 0x2) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001a40)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xffffffffffffff61, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) setsockopt(r6, 0x84, 0x19, &(0x7f0000001b40)="1a00000002000000", 0x8) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r9, 0x560e, &(0x7f0000001b80)) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000001bc0)={0xc, 0x1, 0x9, 0x27}) dup2(r1, r1) socket$inet_mptcp(0x2, 0x1, 0x106) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000001c40)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="230000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB="0000210000000000000042be83d04f26ab2c821e", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="010000000300000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40), &(0x7f0000001d80), 0x5, r11}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x8, r11, 0x4}, 0x38) 2.887092139s ago: executing program 32 (id=457): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fd3f00000000000009011c008500000011000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f00000005c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40bc5311, &(0x7f0000000640)={0x83, 0x1}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000006c0)=0x6) sched_setaffinity(0x0, 0xfffffffffffffd59, &(0x7f0000000700)=0x2) ptrace$setregs(0xf, r3, 0x3, &(0x7f0000000740)="05b60da7e8cbb0315b4c5dabcf9b3db7ecaa22db501d91af7f5bed983421e9335f2028d4f433fbfe33651863f09cb8e949e169c9cfd0fbc1b3a76a31b59003389d64e463ddd06bcd37156aff0054c19e609715b21dfe0b4b37af7d7795f07e19cd1fc62bfd37e93c2ff6d36ce38e5b1aa6b063bed19743cf482cf2663c8e8f12a72bcda26fb008d3dd10cd2106a86b809b678e90d17bb732b8773db6bfce8514853bd09e16809257903a848ebf5d0ec7d9eeef15404a6e9b9a519092b78304cc2f8481a055f48e008e") r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r4, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/4103, 0x1007}], 0x1) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000001900)={0x7, 0x0, 0x2, 0xa, 0x4}) fsetxattr$security_capability(r1, &(0x7f0000001940), &(0x7f0000001980)=@v3={0x3000000, [{0x1, 0x9}, {0xd, 0xfffffff9}]}, 0x18, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000019c0)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000001a00)='lp', 0x2) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001a40)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xffffffffffffff61, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) setsockopt(r6, 0x84, 0x19, &(0x7f0000001b40)="1a00000002000000", 0x8) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r9, 0x560e, &(0x7f0000001b80)) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000001bc0)={0xc, 0x1, 0x9, 0x27}) dup2(r1, r1) socket$inet_mptcp(0x2, 0x1, 0x106) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000001c40)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="230000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB="0000210000000000000042be83d04f26ab2c821e", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="010000000300000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40), &(0x7f0000001d80), 0x5, r11}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x8, r11, 0x4}, 0x38) 2.835520146s ago: executing program 1 (id=461): syz_open_dev$sg(0x0, 0x0, 0x802) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', 0x0, 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x2, 0x4, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x37, '\x00', 0x0, 0x38}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x41, 0x0) 2.756883555s ago: executing program 2 (id=462): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x43e2, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x1593f67d6bbbc26) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) 2.755835736s ago: executing program 2 (id=464): socket(0x840000000002, 0x3, 0x100) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000001f40)='./file0\x00', 0x20842, 0x8e) write$P9_RLERRORu(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="d1cc67"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x2, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x890b, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r5, &(0x7f0000000540), 0x12) connect$x25(r5, &(0x7f0000000580)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) r6 = dup(r5) write$UHID_INPUT(r6, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f0000000740)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) 2.754701993s ago: executing program 1 (id=465): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000001c0)={'raw\x00', 0x4, "dc949c6f"}, &(0x7f0000000240)=0x28) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000ec0000000800000002000000000000005d082f46e89e8d21006d9e92b3089fb028254f19dc8bfda240861f51787fac435d61c3d7ce2f288eb179e109f8cb8e0fb286887ecd081fc00ad2cc712ac19a1d4f9e45964dc3220a1dd267540918e140ed24e3886c1ae7a2a632817de7f876602c38b37fed66cc56c5fa04ea5e733d647865d7dcdc4a894c31de384aa9ceb4bfc74fec84587ea4bf00c281f7ebd1e1bf5e185ca7393ed89353bf6b51b48f62ebfac998e59a126d4ff295956b233886058b563ee8ce57fa671a90d196", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, 0x0, 0x0}, 0x20) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) sched_setaffinity(r2, 0x8, &(0x7f0000000340)=0x2) fsopen(&(0x7f0000000040)='gfs2meta\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) io_setup(0x1, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_submit(0x0, 0x0, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x9, &(0x7f0000000280)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mount(0x0, 0x0, &(0x7f0000000480)='securityfs\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000002"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.547817478s ago: executing program 1 (id=467): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=@newlink={0x3c, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x204a9, 0x4c801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080c6}, 0x20040844) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442f00fc040000000000000000000000000000ff020000000000000000000000000001242088a800000003000008000000000000000000080022eb"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003020000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00037400000074032a162864547d097c3b8bdccf595dcee8746cdb782e847071617a982e662c2649aafd11440b6eda15cd10a6d8ff407b2d94aafa8a3778e47e722dd8cfcb68d13d2fa24fdc58a2c6450047c88aaf0a2213036c0ad1b862f16b5bfa1d1c5cefe5ab432317bec3a314a255a3318bc0bccb4dd99439a4b5aba60ef8bb704dc14d0e8920c0a11c517469d5db67bb14de5f94e7c62fef0b6ba2a4fb8b4ab399accbc3379028ee96e79ab489af4b6f8f2795f82ccf9e6a1399706e06249029125599f89d3214c398fbf3e1da15caf30d7a246f275632c2a027fd87f37db449312fdfd23b2dc95c8bbf37a6a66c9dce89152419526b93ab3d1e75accb4a5e2835e39a880ecc2b2c0bc4ada5381c86d6225a4b6d0c4631bfdf064c"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001840), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000001880)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000018c0)=@usbdevfs_connect) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000200)={0x1, @pix_mp={0x5cec, 0x2, 0x3432564e, 0x3234564e, 0x0, [{0x0, 0xfffffffd}, {0xf, 0xe}, {0x7, 0x6c4}, {0x1, 0x3}, {0x9, 0xd9c}, {0x6, 0x6}, {0x282}, {0x2, 0x8cb}], 0x8, 0x8, 0x1, 0x0, 0x4}}) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffff8) r2 = syz_usb_connect(0x4, 0xce8, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0x6, 0x81, 0x3b, 0xff, 0x8f2, 0xce, 0x9dc9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd6, 0x3, 0x7, 0xfc, 0x60, 0x4, "", [{{0x9, 0x4, 0xa8, 0x2, 0x3, 0x5c, 0xfb, 0x17, 0xff, [@generic={0x81, 0x22, "e51eb2ba9d901754b86de0b31be15eb30b4131341c07030a23eaf65161f145bad681656ee49c13360b36e0d552dddd87343cfe7d8d06a658c86cb6aebc3882b02a53762cb179a3a1dc225e6ceea3b267e7f1348e59b028b3d451eba017c0dd97098f4b7471b2a33db9762c4de59ff12c6b7a1e4a528ed3c4e46252d2c389bf"}], [{{0x9, 0x5, 0x1f, 0x2, 0x400, 0x1, 0x5, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xd9c}, @generic={0x6a, 0x21, "f2ff9069c7ab63523de466c8194a0313b953849280d3dde2ba1b35504d7aee81f2d17968818774cab6470ac55e6b1a789d12515a92ccae75d9999d50f4780c0761bbf22cf6f8a61a5e4d8569b510c10eba8c7156351e868c5e75d2e20e346c9c7b0a5ca73baeabb3"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x0, 0x2, 0xcb, [@generic={0x89, 0x23, "36bf19d0ac04ed5475ce2a302634da557dd9cf42e25f74236379809843907b011c29bbe377d73366ccccc54682d106ef0475122b2ca39db8f1dc7741ebe0f1bf29fc07868b904b627df712406c4438d8e6b37cddadc5bcdb9b14dfddb6c037f884b74d51d0d8e791328ff78af524a91db81c7fe7f20fbc35d4d7c9cd9482291a86b4f2eaeb5394"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x4, 0x7, 0x49, [@generic={0x62, 0x30, "423653750f54f78e8863b8709be59627b326775a9649f2dae8f337ead269675ae7bbe0c7f52684e9fd823a8625d203534fbaa7ec571413bb6192e8a85e2b91a1f0e24c23772ebff192079e5198a92aab3b5fae24c31f31d7643ea37a94f23084"}]}}]}}, {{0x9, 0x4, 0xa6, 0xb7, 0xf, 0xb, 0xc4, 0x4e, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x48}, [@selector_unit={0xb, 0x24, 0x5, 0x6, 0x0, "57f7ade26a47"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x1, 0x1, [0x8]}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x400, 0x4, 0x2, 0x1}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x6, 0x1, [0xe], 0x5}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0x6, 0x40, "c8fa1d34a1"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x1ff, 0x4, 0x7, 0x6, 0x4}]}], [{{0x9, 0x5, 0x80, 0x2, 0x3ff, 0xff, 0x5, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x19, 0x2dfa}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xb, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x10, 0xecdc}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x6, 0x29, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x8855}]}}, {{0x9, 0x5, 0xe, 0x3, 0x208, 0x80, 0x2, 0x5, [@generic={0x31, 0x4, "1d5343bcc3100ad171f07068345b41b36d733d203d05caa0ea80486f047a269a9383bc2cf1be5d61db83a5203b8b55"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x81}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x7, 0x3, 0x80, [@generic={0x8f, 0x23, "abadfb657871d19c4814f4dd7b8b0ac6fc2f93470c16142c700a0339d8e78007c3c99e3893dd90e3e6704112392e307c2e4c3686fb2fe9b616a89119b9d3fbaf1dacb5e6b2d3c57f3e52856f7ee79fd4332063e1642d36a00be08ed2c9cd09a88d9692488e3362f90f5b4372b60b26f7a9e629e8b15bf9b3fddd0fd99db161bab26e9733b671ff57d34dba93bb"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x1, 0x7, 0x55, [@generic={0xff, 0x9, "dee5fd9c6e95f44f7aa99fdddb8bcf92e4e3a94764120d845814f753a9134e819ddef1b2dbf18073d59c8b8050d67c46120c43e839bdda75d13bfa50ef0b86a84cc048fe8447e4c4cfcaa4e6660fefe715cf35b78858f7487d6cf57c47efd0638cb2ba4c3560360d41713bf9e6ce2fd737dae2fcb012bc8106927f4b296daade632c80e2eab3783bc31f3c9b6c2685078990dd1cc266d176b9162a339c2f2e982eea6369d83637eac71e6c74d132399f0d9c6656d1db521b6b15b00a529fa487dcefde4c154f921e54789387d61bce9d70d689f9e6eb0541e36a83eaf76a6178672e1200449aa2f6f6308645c6ae34c398627e0361e1b965b7616bd15e"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ef, 0x7, 0x3, 0x6, [@generic={0x3f, 0x9, "ec0d8d643260666fd48511b4cf28b0403f181a7f0424f8c814f7be60faddf898bd287c59c6fb52370debe2ec31afd9685d3f3931aef38bcb3a99e63ba5"}]}}, {{0x9, 0x5, 0x2, 0x14, 0x200, 0x1, 0x1, 0x4, [@generic={0xea, 0x2, "2bb3171f9c6f9ba8d6e19895a709ff86ab7ecd14b275d2e569a3647a46b521c9d760d4152b03eb1c74d4f1d838656dd2c4bc5661cc4d85f4c2d30ca1cacd5a8d9fa27704bf14df1aa196ac50134b2dad5053c90a21dd9605ba662a9098f1ce028ae4f0b38233c00af868f16decb32dd1c25d77bf3af29b0bcc2c0d647240326f99cb38c2b6a3377b307da5469127833b9397d920426cf900c7ef29f225f9b8520ead81953ded04843233f394b13ce7ed4d1e833d4d00020ea6559c30bbdd965a97124e1675fcd7eac66ebbc393bd12a5a34b3e324b9fc38d42fa8926ee8ad8e4aee758fe83c98aee"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0xc8, 0x4f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x20, 0xfa, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xb4, 0x9b8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x43, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x17, 0x4}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x7, 0xb, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x3}, @generic={0x84, 0x6, "2248f12216816977798483802a3fec367ae5f8d9487147777d5cc530d2aae1267bb1496f1f6d42da976549e148bf6e584e9ca3567f98b40edb2d80d17d0a0797afde3b997cc6d5d0c8642276322b4d01b5df378b63eddab54676881077362bd7a24b5395165de1532cba2546bbe0d9c45a3137faf38a0acab43354429b987ca66d16"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x1, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x3}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x4, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x8a}, @generic={0x24, 0x1, "cece89908e853ac8b91febf169db6d8ad748385badad78ada5f006bcdf598a01a0a4"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x1, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7f, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xffff}]}}]}}, {{0x9, 0x4, 0xf7, 0x3, 0xf, 0xff, 0x6, 0x65, 0x5, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "d4"}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x7ff, 0x80, 0xf}, {0x6, 0x24, 0x1a, 0x7ff, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x2, 0xe, 0xfe}]}], [{{0x9, 0x5, 0x80, 0x4, 0x8, 0x82, 0x4, 0x3, [@generic={0x30, 0x8, "4987c513cb4167c92ff262da70f0eb8277180718db7818a2ff961f9240fa391e1cabaac3056acf6acf99a86cb909"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x3, 0xc4, 0x2, [@generic={0x12, 0x22, "afc181fed706e94b4c0e58ba0541c337"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x5}]}}, {{0x9, 0x5, 0xa, 0x8, 0x10, 0xb9, 0x1, 0x0, [@generic={0x3b, 0x21, "0548bfd8610a49b9c3861ec2ee6ec12c2d529778495833b01df0aee0a1b07adea10ae5559665976f2748201a947125e8519fae54654afedf7f"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xf, 0x3ff}]}}, {{0x9, 0x5, 0x7, 0xd, 0x40, 0x8, 0x7c, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xffff}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x1, 0x5, 0x6, [@generic={0x15, 0x10, "8c3fffeab3e975728847ae9f26afbfab668a00"}, @generic={0x15, 0xd, "39becb35567753599129c406113b7e37f41206"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x7f, 0x6, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x0, 0xd, 0x2, [@generic={0x7a, 0xc, "9e914c6d837570fe6222383cbf6aa989ff0f944022b6aab0f80d24324c3171ea25747acfec21378abfcc52964f63d57b915b56ae93706ab657b428316344e56f947f2f12fe153ef22594c99371ea94e2dfffa154a2c0f6eae513cc706fcd61546c699c93c659a25a9fae3ed8963bd18c17bd9a5e0beb9b7d"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0xa, 0x7, 0xd0, [@generic={0x72, 0x21, "a0010120b097e9011834523d687ea5077859500c30909570053cedca70e0a54dd09d7fc0425db74214544634ce66dac7671892062d6b7faa9a233d1cfa6f8777822413cd4f510598637377c4b7472e35f9e2cba6d641d2dfab37ecdb553704e8895eb080e9f337415ca5a697d5c761a1"}, @generic={0xb3, 0x23, "b054776b2cd231931afc4d0483a3788eafefb9abfef497ef6d335231f76bf14d45eb1584be2401a8e4f3cef8eca31bd4486309d214bec4119f6484a864acae196db5e328e30f7d337faef6b9ecbed6690594885bac80f84d6cbfd39a7d7c7384e9f992e207c4878c927840901ed725459c7633e4ad0a8f4f650187c5a18a17584c4a9126b445f429ead658ae35b461a293a53ffcfc7f57be0dc89b76f583fbf09d6d2331e082b5e6f9cb057113fcb87786"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x0, 0x7, 0x4, [@generic={0x46, 0x2, "421e279d32e4be34d95132d2c564ddc7bf2968f4c518221d299a63096f3dfe16d36ff9fb9097dce828536c65e94d9c2ee1e812667ac071e7fdc1e264ed102ed6cfeff447"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x1, 0x35, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x87, 0xd}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9c, 0x6, 0x5c, [@generic={0x95, 0x2, "d1083c40d67f49f5b78356e2e2400bb1fbd52fda6eced977ca1d9e0e7e78009c0493afac21e0bb7bba9625f4cb3e7819a41f9a746e04140d5d51ebc05ba08ff4195022a92e75045f036c9a728057d7f00d91de3bf32c788149dfa6e9e79a19899911dd329294afaf579bbd1a5232c4f5f11a24385089f7b9bf299e5295561ddb69662402cc5b6dc6a1c245d149b2b399a09ff6"}, @generic={0xba, 0xa, "a9502bf881eddd66a75b05a10a0b9e5e4772195bb6819bdf7270f93aae88b535abebef97693e88c6a69b47161c5bfa188cbbaf3ab585b8e2cc2a70ad0a89ccea6f38d846430cefbb263e2233bf25ca15a0200200298915c35350dd2c67d348e3dfae648613a01a6da25fc356822bec04081ab82b3ad6b139f85516a9773e77a0ee358e2e3e7203216448b2ad1d6105089e8b38c9a4a2c1f865d87a899f08f75fc18d569e58802e3b0c718cd50ca2c1570c238af92debc1e8"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xa, 0xf, 0x40, [@generic={0x4, 0x9, "85f4"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x8, 0xa, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x4}]}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x3, 0x6, 0x3, [@generic={0x68, 0x31, "14be49386bb4fdd6b399b72a09b09d8b2c326296f4b90ae809344a03632249163aae9a6e483af0ab71ccce08670a7ecca0c91895cf1e56924e54f0e5607f04ffc8caae000ca4f59692e38c4a5afd3ac75783ffc8d552d90b9ac59163726f5c02905d17d8e9b1"}, @generic={0xc0, 0x9, "0d15aeccac8cecb60e8f796ddb6ef773e4cbf70d46498b9dda422ae7ac84eb0a644ec45d8c09389f76fa1a4090e669c4841943c72bbcf29de34524d7424caa25e664810e8637754f90bae3c92996743f315974940aaac61674dfce1ca3312a9b8d4aaa2cfb81d32857d149737b9fd94e39ea2917efdaa7067cae84f693700835577969392973e20d8060e583516c3a01c3c9a64533f2f04fa9a8029c21503e187310dd32db4c40150528cf34869490b10ca32d363d01f43c2b2443bfb5e6"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0xfa, 0xb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0xdaa3}]}}]}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x201, 0xd8, 0x37, 0x1, 0x10, 0x7}, 0x29, &(0x7f0000001380)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x50, 0x6, 0x1000, 0xf00f, 0x80, [0xff3e9e, 0xff0000, 0xf, 0xc0, 0xc000, 0xf]}]}, 0x2, [{0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x418}}]}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001500)={0xfffffffffffffe46, &(0x7f0000001480)={0xd7bdf0937560082b, 0x21, 0x30, {0x30, 0xd, "6d79ca56544c77a05e513d48dfdc61b7eb417ee68bbe7921cf225daa0fd4f51bca9f685f7d2f4293d6e9fc617279"}}, &(0x7f00000014c0)={0x0, 0x3, 0x18, @string={0x18, 0x3, "f1537cbfe3264de4a286b5175fbe33f60abe2fe75290"}}}, &(0x7f0000001740)={0x24, &(0x7f0000001540)={0x0, 0x0, 0x30, "9d83e95e7c0f55c7b2c971dcfae7c966799aac73d05ead50cc8b809b229983c6c7b7e7871f1bac99a40cabee90c5236f"}, &(0x7f0000001580)={0x0, 0xa, 0x1}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000001600)={0x20, 0x81, 0x2, "a367"}, &(0x7f0000001640)={0x20, 0x82, 0x3, 'V#U'}, &(0x7f0000001680)={0x20, 0x83, 0x1, '\\'}, &(0x7f00000016c0)=ANY=[@ANYBLOB], &(0x7f0000001700)={0x20, 0x85, 0x3, "94cc45"}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c09425, &(0x7f0000002180)={"7ca448e9d2cddd222e164be10331598d", 0x0, 0x0, {0x2, 0x1}, {0x98, 0x2}, 0x63fc, [0x6, 0x8, 0x4, 0x3, 0xc9b, 0x6a, 0x81, 0x7, 0x5, 0x8, 0x7, 0x2, 0xfee, 0x7, 0xffffffffffffffff, 0x1eec206a]}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000380)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) 1.857301792s ago: executing program 0 (id=468): syz_open_dev$sg(0x0, 0x0, 0x802) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000001c0)='proc\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x2, 0x4, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x37, '\x00', 0x0, 0x38}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x41, 0x0) 1.799104965s ago: executing program 2 (id=469): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000440)={0x6, @loopback, 0x1500, 0x0, 'lc\x00', 0x3d, 0x0, 0x36}, 0x2c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f00000005c0)={&(0x7f0000000600)=@hci, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0) sendmsg$tipc(r3, &(0x7f00000007c0)={0x0, 0x2, &(0x7f0000000800), 0x31}, 0x0) sendmsg$inet(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40040) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000480)={{0x6, @loopback, 0x1500, 0x0, 'rr\x00', 0x19}, {@loopback, 0x4908, 0x2, 0x1}}, 0x44) connect(r0, &(0x7f0000000500)=@in={0x2, 0x1500, @loopback}, 0x80) setxattr$system_posix_acl(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000100000000000000040000000020000010000000000000002000000000000000"], 0x24, 0x0) mkdir(&(0x7f0000000300)='./control\x00', 0x0) rmdir(&(0x7f0000000340)='./control\x00') r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="02180000020000002cbd700005dcdf25d5b0d4b17f493e313938aa87c2c921cd048af5f92ca87bbc9c9c21b3b29044b8e3881f24245a5513a47b5808da8585baecb885e5e09f062466908fd896f44f13d4ee60db852c758be1ee16cae5e78cb584059a9e471e0191b93b3b26c64736dd1f02176202b1f49687788f584228b5998e52dcfb4977e0b90472433822c2dbc0e21c254906706cbad6d37fd43d19a5e46ca944e81559a1f3ef72ee5eefabe3322a7421e4e463655a94b7ccba1cc4e2f2e7d79943823e5bfbfddf6990158f1ad00bc628ac38d0faec7d728e16"], 0x10}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000380)=0x0) timer_settime(r5, 0x1, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000400)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000008c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000900)='cdg', 0x3) connect$inet(r6, &(0x7f0000000940)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000dc0)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000f80)='htcp', 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000080)={'macvlan0\x00', 0x400}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[], 0x36) 1.797938368s ago: executing program 0 (id=470): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x1, 0x3c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0xdd, @private1, 0x10000}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000400)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000480)=0x8) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x4, 0x29, 0x2000012, r2}}], 0x1c, 0x2400e044}, 0x6) 1.721839281s ago: executing program 0 (id=471): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5308fe8e4c59ee609a5ab268afd855a0af46fd165c3e5d9682cbbf6e9668f0e92983a453b2148163ca78a8f3175179259f8a73fb28eecc49ac09149af80a1bc78c06a568003c63b463856b028f246c7796bf6fe12a23de95141e225d7b575139e6ef96648979cdbd1ea3de097a5726390f1063451b979150a3c829a7580c77629f6687f184d9db9d6789cbddf790504291218d8250e3fe4699643e61cdf7093fc1cf0c71b8ee6165f37dd93dd75d", 0xae}], 0x1, &(0x7f0000000480)=[@op={0xe, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x2}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0xafb}], 0x40, 0x80}], 0x1, 0x0) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x4e22, 0x9, @mcast1, 0x7}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x3a) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000193c0)) 1.625755181s ago: executing program 0 (id=472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) bind$inet6(r7, &(0x7f0000000080)={0xa, 0xe22, 0x0, @empty}, 0x1c) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000009c0)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xffff, 0xfffc}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x2, 0x140, 0x9cd0, 0x78e, 0x4000008, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x6, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0xfffffffe, 0x800, 0x7, 0xffffffff, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000003, 0xffff, 0x2, 0x1ff, 0x4, 0x781b2528, 0x8, 0x4, 0xf56e, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0x9, 0xf43, 0xa, 0x4, 0x5, 0x1, 0x8000, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffe, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x9, 0xc, 0x6, 0x2, 0x20, 0x5, 0xffffffdf, 0x389, 0x4, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1, 0x9, 0x4, 0x6, 0x2, 0x8, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x2, 0x3fed, 0x2, 0x4, 0x2, 0x8, 0xffffffff, 0x7, 0x240, 0x4, 0x5, 0x2, 0xfffffffb, 0x1, 0x800, 0x7ffffffb, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x5, 0x8, 0x4, 0x4, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0xfe, 0x6, 0x7, 0x7, 0x22c, 0x6, 0x3, 0x8, 0x9, 0xfffffffc, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x6, 0x7e2, 0x2, 0x2, 0x5, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x9ced, 0x400001, 0x4, 0x7, 0xb, 0x9, 0x0, 0x7, 0x2, 0x4000004, 0x20000, 0x2, 0x80000000, 0x4, 0xe, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0x0, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x3, 0xfff, 0x5, 0x7, 0x0, 0x7, 0x40, 0x80000001, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x570, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0x10, 0xd36, 0x4, 0x6bc, 0x80002, 0x7, 0x2000000f, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0xffffffff, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x82, 0x8, 0x2, 0x1, 0x20002, 0x9, 0x4f, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff4, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x1003, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0x5, 0x101, 0x2, 0x5, 0x7, 0x5, 0x1000, 0xb, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x5, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x4000009, 0x10, 0xceb6, 0x5, 0x7, 0x53c0, 0x9, 0x5, 0xd, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x8, 0xffffff7b, 0x15ef7157, 0xfffffffc, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x21af, 0x100, 0x7, 0x1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x1, 0x7f, 0xb, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x79, 0x40, 0x72e, 0x5c, 0x1, 0xffffffff, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x3, 0x200, 0x1, 0x1, 0x59ac, 0xebd7, 0x7, 0x10008, 0xff, 0x40000100, 0x0, 0x7, 0x138, 0xfff, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x56, 0x7, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x101, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0xfffeffff, 0xf, 0x8, 0x9, 0xc2b3, 0x7, 0x80000002, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x4000009, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x6, 0x4d2, 0x4000000, {0x8, 0x2, 0xa, 0x8, 0x8, 0xc}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x15f}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000001240)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001280)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000012c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000001300)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r10, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x6]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x21, 0x13, [{0xc, 0x1}, {0xc}, {0x4}, {0x4, 0x1}, {0x60}, {0x46}, {0x5, 0x1}, {0x48, 0x1}, {0x1b}, {0x36, 0x1}, {0x24}, {0x2, 0x1}, {0x9}, {0x16}, {0x36, 0x1}, {0x2}, {0x1b, 0x1}, {0x36, 0x1}, {0x18}, {0x24}, {0x76, 0x1}, {0x3, 0x1}, {0x18, 0x1}, {0x6}, {0x24}, {0xace8afbc9087f3ce}, {0x12, 0x1}, {0x18}, {0x6}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x5a, 0xbe, "6d6875f8b212b3d53bcacf8aea21bb35aa1f50aefee09e74266599deccc751479d84fbd8ff65abcbd95660a4479adafe6564855ea02d1bc183c361d6a5427ea216fb7feeaca819be70ff469ad71f9ea9280be368b413"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x769}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x18d}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40050}, 0x884) 1.48980548s ago: executing program 0 (id=473): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x1, &(0x7f0000000400)={{0x0, 0x989680}}, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x58, 0xc9, 0x6, 0xd5c2}}}, 0x9) modify_ldt$write2(0x11, &(0x7f0000000480)={0x1d30, 0x0, 0x4000, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000000500)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6d, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000580)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setresuid(0xee00, 0xee00, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FE_READ_STATUS(0xffffffffffffffff, 0x80046f45, &(0x7f0000000380)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000001480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000014c0), 0xfffffedf, 0x10, &(0x7f0000001500), 0xffffff95, 0x0, 0xffffffffffffffff, 0x10}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000015c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x2a020480) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r5) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 925.555507ms ago: executing program 2 (id=474): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000001c0)={'raw\x00', 0x4, "dc949c6f"}, &(0x7f0000000240)=0x28) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000ec0000000800000002000000000000005d082f46e89e8d21006d9e92b3089fb028254f19dc8bfda240861f51787fac435d61c3d7ce2f288eb179e109f8cb8e0fb286887ecd081fc00ad2cc712ac19a1d4f9e45964dc3220a1dd267540918e140ed24e3886c1ae7a2a632817de7f876602c38b37fed66cc56c5fa04ea5e733d647865d7dcdc4a894c31de384aa9ceb4bfc74fec84587ea4bf00c281f7ebd1e1bf5e185ca7393ed89353bf6b51b48f62ebfac998e59a126d4ff295956b233886058b563ee8ce57fa671a90d196", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, 0x0, 0x0}, 0x20) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) sched_setaffinity(r2, 0x8, &(0x7f0000000340)=0x2) fsopen(&(0x7f0000000040)='gfs2meta\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) io_setup(0x1, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_submit(0x0, 0x0, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x9, &(0x7f0000000280)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mount(0x0, 0x0, &(0x7f0000000480)='securityfs\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000002"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 801.045341ms ago: executing program 2 (id=475): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'batadv_slave_0\x00', 0x1000}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94) openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000740)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x11, 0x4, 0x0, 0x8, 0x1, 0x68, 0x7c, 0x80, 0x2f, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@ssrr={0x89, 0x23, 0x64, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, @local, @multicast1, @multicast2, @local, @empty, @multicast2]}, @lsrr={0x83, 0x7, 0xfd, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x1, &(0x7f0000000a00)=@raw=[@alu={0x4, 0x0, 0x3, 0x4, 0x6, 0x10, 0xfffffffffffffff0}], &(0x7f0000000a40)='syzkaller\x00', 0x6, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a80)=[{0x0, 0x2, 0xf, 0x6}], 0x10, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 800.831964ms ago: executing program 4 (id=458): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r3, &(0x7f0000000280)='27', 0x2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r4, 0x701, 0x70bd2b, 0x1, {0x5}}, 0x13}, 0x1, 0x0, 0x0, 0x20004074}, 0x841) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) 656.105478ms ago: executing program 4 (id=476): socket(0x840000000002, 0x3, 0x100) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000001f40)='./file0\x00', 0x20842, 0x8e) write$P9_RLERRORu(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="d1cc67"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x2, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x890b, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r5, &(0x7f0000000540), 0x12) connect$x25(r5, &(0x7f0000000580)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) r6 = dup(r5) write$UHID_INPUT(r6, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f0000000740)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) 577.358916ms ago: executing program 2 (id=477): socket(0x840000000002, 0x3, 0x100) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000001f40)='./file0\x00', 0x20842, 0x8e) write$P9_RLERRORu(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="d1cc67"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r2, 0x11, 0x1, 0x200, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0}, 0x40) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x890b, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') connect$x25(r6, &(0x7f0000000580)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) r7 = dup(r6) write$UHID_INPUT(r7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f0000000740)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@netkit={@void, @value=r7, @void, @void, r5}}, 0x1c) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) 0s ago: executing program 0 (id=478): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x1, &(0x7f0000000400)={{0x0, 0x989680}}, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x58, 0xc9, 0x6, 0xd5c2}}}, 0x9) modify_ldt$write2(0x11, &(0x7f0000000480)={0x1d30, 0x0, 0x4000, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000000500)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6d, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000580)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setresuid(0xee00, 0xee00, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FE_READ_STATUS(0xffffffffffffffff, 0x80046f45, &(0x7f0000000380)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000001480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000014c0), 0xfffffedf, 0x10, &(0x7f0000001500), 0xffffff95, 0x0, 0xffffffffffffffff, 0x10}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000015c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x2a020480) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r5) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) kernel console output (not intermixed with test programs): 0x34/0x3d0 [ 91.070883][ T6788] ? __pfx_vfs_read+0x10/0x10 [ 91.070895][ T6788] ? find_held_lock+0x2b/0x80 [ 91.070917][ T6788] ? __fget_files+0x215/0x3d0 [ 91.070937][ T6788] ? __fget_files+0x21f/0x3d0 [ 91.070960][ T6788] ksys_read+0x12a/0x250 [ 91.070974][ T6788] ? __pfx_ksys_read+0x10/0x10 [ 91.070995][ T6788] do_int80_emulation+0x166/0x650 [ 91.071018][ T6788] asm_int80_emulation+0x1a/0x20 [ 91.071034][ T6788] RIP: 0023:0xf71b77ab [ 91.071047][ T6788] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 91.071060][ T6788] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 91.071076][ T6788] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54765d0 [ 91.071086][ T6788] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 91.071096][ T6788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.071105][ T6788] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 91.071114][ T6788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.071146][ T6788] [ 91.210512][ T5902] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 91.214183][ T6790] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.218047][ T6790] netlink: 'syz.1.228': attribute type 12 has an invalid length. [ 91.245592][ T6793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.229'. [ 91.245608][ T6793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.229'. [ 91.360092][ T5902] usb 5-1: device descriptor read/64, error -71 [ 91.464287][ T6802] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.232'. [ 91.464304][ T6802] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.232'. [ 91.500081][ T2571] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 91.550047][ T5795] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.550085][ T5795] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.550108][ T5795] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.550285][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.600025][ T5902] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 91.661146][ T2571] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 91.662047][ T2571] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.662070][ T2571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.667428][ T2571] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 91.667636][ T2571] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 91.667665][ T2571] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 91.668242][ T2571] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 91.668276][ T2571] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 91.672293][ T2571] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 91.676034][ T2571] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 91.676069][ T2571] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 91.677205][ T2571] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 91.730204][ T5902] usb 5-1: device descriptor read/64, error -71 [ 91.841180][ T5902] usb usb5-port1: attempt power cycle [ 91.957831][ T5955] usb 6-1: USB disconnect, device number 10 [ 91.965594][ T5955] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 91.967647][ T5955] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 91.967920][ T5955] keyspan 6-1:1.0: device disconnected [ 92.180138][ T5902] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 92.200370][ T5902] usb 5-1: device descriptor read/8, error -71 [ 92.340074][ T857] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 92.439958][ T5902] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 92.460419][ T5902] usb 5-1: device descriptor read/8, error -71 [ 92.501718][ T857] usb 8-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 92.502675][ T857] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 92.502700][ T857] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 92.502729][ T857] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.508563][ T857] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 92.510927][ T857] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 92.525612][ T6816] FAULT_INJECTION: forcing a failure. [ 92.525612][ T6816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.525644][ T6816] CPU: 1 UID: 0 PID: 6816 Comm: syz.1.236 Not tainted syzkaller #0 PREEMPT(full) [ 92.525658][ T6816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.525664][ T6816] Call Trace: [ 92.525669][ T6816] [ 92.525673][ T6816] dump_stack_lvl+0x100/0x190 [ 92.525692][ T6816] should_fail_ex.cold+0x5/0xa [ 92.525707][ T6816] _copy_from_user+0x2e/0xd0 [ 92.525723][ T6816] get_compat_msghdr+0xb3/0x480 [ 92.525782][ T6816] ? __pfx_get_compat_msghdr+0x10/0x10 [ 92.525798][ T6816] ___sys_sendmsg+0x1b6/0x1e0 [ 92.525810][ T6816] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.525826][ T6816] ? find_held_lock+0x2b/0x80 [ 92.525849][ T6816] __sys_sendmsg+0x160/0x210 [ 92.525863][ T6816] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.525891][ T6816] __do_fast_syscall_32+0x14b/0x8c0 [ 92.525915][ T6816] ? lockdep_hardirqs_on+0x7d/0x110 [ 92.525935][ T6816] do_fast_syscall_32+0x32/0x70 [ 92.525953][ T6816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.525966][ T6816] RIP: 0023:0xf7fc8fbc [ 92.525976][ T6816] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 92.525986][ T6816] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 92.525997][ T6816] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 92.526003][ T6816] RDX: 0000000004000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.526009][ T6816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.526015][ T6816] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 92.526021][ T6816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.526034][ T6816] [ 92.572381][ T5902] usb usb5-port1: unable to enumerate USB device [ 92.880437][ T6812] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 92.880665][ T6812] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 92.880914][ T6812] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 92.900083][ T6829] FAULT_INJECTION: forcing a failure. [ 92.900083][ T6829] name failslab, interval 1, probability 0, space 0, times 0 [ 92.900101][ T6829] CPU: 2 UID: 0 PID: 6829 Comm: syz.1.240 Not tainted syzkaller #0 PREEMPT(full) [ 92.900114][ T6829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.900121][ T6829] Call Trace: [ 92.900125][ T6829] [ 92.900129][ T6829] dump_stack_lvl+0x100/0x190 [ 92.900151][ T6829] should_fail_ex.cold+0x5/0xa [ 92.900168][ T6829] should_failslab+0xc2/0x120 [ 92.900180][ T6829] __kmalloc_cache_noprof+0x91/0x6d0 [ 92.900208][ T6829] ? alloc_tty_struct+0x96/0x8e0 [ 92.900238][ T6829] alloc_tty_struct+0x96/0x8e0 [ 92.900251][ T6829] ? __kasan_kmalloc+0xaa/0xb0 [ 92.900262][ T6829] ? __pfx_alloc_tty_struct+0x10/0x10 [ 92.900275][ T6829] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 92.900289][ T6829] ? pty_common_install+0x10e/0xb30 [ 92.900303][ T6829] pty_common_install+0x1c7/0xb30 [ 92.900316][ T6829] ? __pfx_pty_unix98_install+0x10/0x10 [ 92.900328][ T6829] tty_init_dev.part.0+0x9e/0x470 [ 92.900345][ T6829] tty_init_dev+0x60/0x80 [ 92.900358][ T6829] ? __pfx_ptmx_open+0x10/0x10 [ 92.900368][ T6829] ptmx_open+0x128/0x360 [ 92.900377][ T6829] ? __pfx_ptmx_open+0x10/0x10 [ 92.900387][ T6829] chrdev_open+0x234/0x6a0 [ 92.900399][ T6829] ? __pfx_apparmor_file_open+0x10/0x10 [ 92.900412][ T6829] ? __pfx_chrdev_open+0x10/0x10 [ 92.900424][ T6829] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 92.900441][ T6829] do_dentry_open+0x674/0x1470 [ 92.900451][ T6829] ? __pfx_chrdev_open+0x10/0x10 [ 92.900465][ T6829] vfs_open_consume+0xcc/0x460 [ 92.900481][ T6829] path_openat+0x1547/0x23f0 [ 92.900495][ T6829] ? __pfx_path_openat+0x10/0x10 [ 92.900511][ T6829] do_file_open+0x20e/0x430 [ 92.900523][ T6829] ? __pfx_do_file_open+0x10/0x10 [ 92.900545][ T6829] ? _raw_spin_unlock+0x28/0x50 [ 92.900554][ T6829] ? alloc_fd+0x471/0x7a0 [ 92.900570][ T6829] do_sys_openat2+0x163/0x1d0 [ 92.900583][ T6829] ? __pfx_do_sys_openat2+0x10/0x10 [ 92.900602][ T6829] __ia32_compat_sys_openat+0x12d/0x210 [ 92.900617][ T6829] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 92.900637][ T6829] __do_fast_syscall_32+0x14b/0x8c0 [ 92.900652][ T6829] do_fast_syscall_32+0x32/0x70 [ 92.900665][ T6829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.900678][ T6829] RIP: 0023:0xf7fc8fbc [ 92.900687][ T6829] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 92.900697][ T6829] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 92.900708][ T6829] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800004c0 [ 92.900714][ T6829] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.900720][ T6829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.900726][ T6829] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 92.900732][ T6829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.900746][ T6829] [ 92.970797][ T6812] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 93.091919][ T6811] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 93.094527][ T857] usb 8-1: USB disconnect, device number 5 [ 93.099617][ T857] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 93.099988][ T857] spcp8x5 8-1:1.0: device disconnected [ 93.612282][ T42] audit: type=1326 audit(1793216919.572:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.1.240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fbc code=0x7fc00000 [ 93.713328][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.245'. [ 93.723069][ T6840] Cannot find add_set index 0 as target [ 93.735626][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.245'. [ 93.736472][ T6840] Cannot find add_set index 0 as target [ 94.351369][ T6860] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 94.367411][ T6860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.368312][ T6860] FAULT_INJECTION: forcing a failure. [ 94.368312][ T6860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.368328][ T6860] CPU: 2 UID: 0 PID: 6860 Comm: syz.0.249 Not tainted syzkaller #0 PREEMPT(full) [ 94.368340][ T6860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.368346][ T6860] Call Trace: [ 94.368350][ T6860] [ 94.368355][ T6860] dump_stack_lvl+0x100/0x190 [ 94.368375][ T6860] should_fail_ex.cold+0x5/0xa [ 94.368391][ T6860] _copy_from_user+0x2e/0xd0 [ 94.368407][ T6860] get_compat_msghdr+0xb3/0x480 [ 94.368419][ T6860] ? __pfx_get_compat_msghdr+0x10/0x10 [ 94.368436][ T6860] ___sys_sendmsg+0x1b6/0x1e0 [ 94.368447][ T6860] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.368464][ T6860] ? find_held_lock+0x2b/0x80 [ 94.368499][ T6860] __sys_sendmsg+0x160/0x210 [ 94.368516][ T6860] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.368537][ T6860] __do_fast_syscall_32+0x14b/0x8c0 [ 94.368550][ T6860] ? lockdep_hardirqs_on+0x7d/0x110 [ 94.368563][ T6860] do_fast_syscall_32+0x32/0x70 [ 94.368576][ T6860] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.368589][ T6860] RIP: 0023:0xf747efbc [ 94.368598][ T6860] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 94.368608][ T6860] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 94.368618][ T6860] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 94.368625][ T6860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.368630][ T6860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.368636][ T6860] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 94.368642][ T6860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.368656][ T6860] [ 95.291999][ T6869] Console: switching to colour dummy device 80x25 [ 95.423733][ T6877] FAULT_INJECTION: forcing a failure. [ 95.423733][ T6877] name failslab, interval 1, probability 0, space 0, times 0 [ 95.423758][ T6877] CPU: 3 UID: 0 PID: 6877 Comm: syz.0.253 Not tainted syzkaller #0 PREEMPT(full) [ 95.423773][ T6877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.423782][ T6877] Call Trace: [ 95.423787][ T6877] [ 95.423791][ T6877] dump_stack_lvl+0x100/0x190 [ 95.423812][ T6877] should_fail_ex.cold+0x5/0xa [ 95.423828][ T6877] should_failslab+0xc2/0x120 [ 95.423841][ T6877] __kmalloc_cache_noprof+0x91/0x6d0 [ 95.423863][ T6877] ? alloc_tty_struct+0x96/0x8e0 [ 95.423888][ T6877] alloc_tty_struct+0x96/0x8e0 [ 95.423911][ T6877] ? __kasan_kmalloc+0xaa/0xb0 [ 95.423928][ T6877] ? __pfx_alloc_tty_struct+0x10/0x10 [ 95.423945][ T6877] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 95.423959][ T6877] ? pty_common_install+0x10e/0xb30 [ 95.423972][ T6877] pty_common_install+0x1c7/0xb30 [ 95.423984][ T6877] ? __pfx_pty_unix98_install+0x10/0x10 [ 95.423996][ T6877] tty_init_dev.part.0+0x9e/0x470 [ 95.424028][ T6877] tty_init_dev+0x60/0x80 [ 95.424045][ T6877] ? __pfx_ptmx_open+0x10/0x10 [ 95.424056][ T6877] ptmx_open+0x128/0x360 [ 95.424067][ T6877] ? __pfx_ptmx_open+0x10/0x10 [ 95.424077][ T6877] chrdev_open+0x234/0x6a0 [ 95.424089][ T6877] ? __pfx_apparmor_file_open+0x10/0x10 [ 95.424103][ T6877] ? __pfx_chrdev_open+0x10/0x10 [ 95.424115][ T6877] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 95.424132][ T6877] do_dentry_open+0x674/0x1470 [ 95.424143][ T6877] ? __pfx_chrdev_open+0x10/0x10 [ 95.424156][ T6877] vfs_open_consume+0xcc/0x460 [ 95.424172][ T6877] path_openat+0x1547/0x23f0 [ 95.424186][ T6877] ? __pfx_path_openat+0x10/0x10 [ 95.424202][ T6877] do_file_open+0x20e/0x430 [ 95.424216][ T6877] ? __pfx_do_file_open+0x10/0x10 [ 95.424240][ T6877] ? _raw_spin_unlock+0x28/0x50 [ 95.424250][ T6877] ? alloc_fd+0x471/0x7a0 [ 95.424265][ T6877] do_sys_openat2+0x163/0x1d0 [ 95.424284][ T6877] ? __pfx_do_sys_openat2+0x10/0x10 [ 95.424304][ T6877] __ia32_compat_sys_openat+0x12d/0x210 [ 95.424319][ T6877] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 95.424339][ T6877] __do_fast_syscall_32+0x14b/0x8c0 [ 95.424355][ T6877] do_fast_syscall_32+0x32/0x70 [ 95.424369][ T6877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.424384][ T6877] RIP: 0023:0xf747efbc [ 95.424393][ T6877] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 95.424403][ T6877] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 95.424414][ T6877] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800004c0 [ 95.424420][ T6877] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.424426][ T6877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.424432][ T6877] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 95.424438][ T6877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.424452][ T6877] [ 95.437321][ T6873] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 95.462937][ T6873] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 95.463126][ T6873] pci 0000:00:01.0: BAR 2 [mem 0xfeaf6000-0xfeaf6fff] [ 95.463333][ T6873] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 95.463720][ T6873] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 95.488049][ T6873] pci 0000:00:01.0: Adding to iommu group 1 [ 95.494524][ T6873] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 95.494541][ T6873] pci 0000:00:01.0: vgaarb: bridge control possible [ 95.494552][ T6873] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 95.506071][ T6873] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 95.574420][ T6873] pci 0000:00:01.0: BAR 2 [mem 0x80200000-0x80200fff]: assigned [ 95.585165][ T6873] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 95.618494][ T6873] [drm] Found bochs VGA, ID 0xb0c5. [ 95.618506][ T6873] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80200000. [ 95.640939][ T5955] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 95.669497][ T6873] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 95.780046][ T5955] usb 8-1: device descriptor read/64, error -71 [ 95.886385][ T6873] Console: switching to colour frame buffer device 160x50 [ 95.940767][ T6873] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 96.039959][ T5955] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 96.140790][ T42] audit: type=1326 audit(1793216922.102:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.0.253" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7fc00000 [ 96.170837][ T5955] usb 8-1: device descriptor read/64, error -71 [ 96.280985][ T5955] usb usb8-port1: attempt power cycle [ 96.326446][ T6898] __nla_validate_parse: 4 callbacks suppressed [ 96.326459][ T6898] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.260'. [ 96.326468][ T6898] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.260'. [ 96.622980][ T5955] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 96.650715][ T5955] usb 8-1: device descriptor read/8, error -71 [ 96.899961][ T5955] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 96.921705][ T5955] usb 8-1: device descriptor read/8, error -71 [ 97.004316][ T6916] FAULT_INJECTION: forcing a failure. [ 97.004316][ T6916] name failslab, interval 1, probability 0, space 0, times 0 [ 97.004345][ T6916] CPU: 2 UID: 0 PID: 6916 Comm: syz.0.266 Not tainted syzkaller #0 PREEMPT(full) [ 97.004374][ T6916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.004381][ T6916] Call Trace: [ 97.004386][ T6916] [ 97.004390][ T6916] dump_stack_lvl+0x100/0x190 [ 97.004463][ T6916] should_fail_ex.cold+0x5/0xa [ 97.004480][ T6916] should_failslab+0xc2/0x120 [ 97.004519][ T6916] __kmalloc_cache_noprof+0x91/0x6d0 [ 97.004535][ T6916] ? pty_common_install+0x10e/0xb30 [ 97.004558][ T6916] pty_common_install+0x10e/0xb30 [ 97.004571][ T6916] ? __pfx_pty_unix98_install+0x10/0x10 [ 97.004583][ T6916] tty_init_dev.part.0+0x9e/0x470 [ 97.004600][ T6916] tty_init_dev+0x60/0x80 [ 97.004616][ T6916] ? __pfx_ptmx_open+0x10/0x10 [ 97.004625][ T6916] ptmx_open+0x128/0x360 [ 97.004635][ T6916] ? __pfx_ptmx_open+0x10/0x10 [ 97.004644][ T6916] chrdev_open+0x234/0x6a0 [ 97.004656][ T6916] ? __pfx_apparmor_file_open+0x10/0x10 [ 97.004677][ T6916] ? __pfx_chrdev_open+0x10/0x10 [ 97.004689][ T6916] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 97.004707][ T6916] do_dentry_open+0x674/0x1470 [ 97.004718][ T6916] ? __pfx_chrdev_open+0x10/0x10 [ 97.004732][ T6916] vfs_open_consume+0xcc/0x460 [ 97.004747][ T6916] path_openat+0x1547/0x23f0 [ 97.004763][ T6916] ? __pfx_path_openat+0x10/0x10 [ 97.004780][ T6916] do_file_open+0x20e/0x430 [ 97.004795][ T6916] ? __pfx_do_file_open+0x10/0x10 [ 97.004818][ T6916] ? _raw_spin_unlock+0x28/0x50 [ 97.004855][ T6916] ? alloc_fd+0x471/0x7a0 [ 97.004872][ T6916] do_sys_openat2+0x163/0x1d0 [ 97.004886][ T6916] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.004907][ T6916] __ia32_compat_sys_openat+0x12d/0x210 [ 97.004923][ T6916] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 97.004944][ T6916] __do_fast_syscall_32+0x14b/0x8c0 [ 97.004961][ T6916] do_fast_syscall_32+0x32/0x70 [ 97.004974][ T6916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.004987][ T6916] RIP: 0023:0xf747efbc [ 97.004997][ T6916] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 97.005007][ T6916] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 97.005018][ T6916] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800004c0 [ 97.005025][ T6916] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.005031][ T6916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.005037][ T6916] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 97.005043][ T6916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.005056][ T6916] [ 97.041610][ T5955] usb usb8-port1: unable to enumerate USB device [ 97.101559][ T6918] FAULT_INJECTION: forcing a failure. [ 97.101559][ T6918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.101581][ T6918] CPU: 2 UID: 0 PID: 6918 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT(full) [ 97.101597][ T6918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.101606][ T6918] Call Trace: [ 97.101611][ T6918] [ 97.101616][ T6918] dump_stack_lvl+0x100/0x190 [ 97.101642][ T6918] should_fail_ex.cold+0x5/0xa [ 97.101662][ T6918] _copy_from_user+0x2e/0xd0 [ 97.101682][ T6918] get_compat_msghdr+0xb3/0x480 [ 97.101747][ T6918] ? __pfx_get_compat_msghdr+0x10/0x10 [ 97.101768][ T6918] ___sys_sendmsg+0x1b6/0x1e0 [ 97.101783][ T6918] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.101805][ T6918] ? find_held_lock+0x2b/0x80 [ 97.101844][ T6918] __sys_sendmsg+0x160/0x210 [ 97.101861][ T6918] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.101889][ T6918] __do_fast_syscall_32+0x14b/0x8c0 [ 97.101905][ T6918] ? lockdep_hardirqs_on+0x7d/0x110 [ 97.101921][ T6918] do_fast_syscall_32+0x32/0x70 [ 97.101936][ T6918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.101953][ T6918] RIP: 0023:0xf7fc8fbc [ 97.101964][ T6918] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 97.101976][ T6918] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 97.101991][ T6918] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 97.102000][ T6918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.102008][ T6918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.102015][ T6918] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 97.102022][ T6918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.102041][ T6918] [ 97.360086][ T5955] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 97.530969][ T5955] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 97.531762][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.531777][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.531788][ T5955] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.531809][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.534281][ T5955] usb 6-1: config 0 descriptor?? [ 97.729043][ T42] audit: type=1326 audit(1793216923.682:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.0.266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7fc00000 [ 97.745869][ T6924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.765656][ T6924] syz.3.270 uses obsolete (PF_INET,SOCK_PACKET) [ 97.808712][ T6931] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.271'. [ 97.808728][ T6931] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.271'. [ 97.839136][ T6924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.270'. [ 97.953795][ T5955] hid_parser_main: 5 callbacks suppressed [ 97.953815][ T5955] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 97.953836][ T5955] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 97.953855][ T5955] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 97.953873][ T5955] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 97.953891][ T5955] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 97.953909][ T5955] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 97.953927][ T5955] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 97.953945][ T5955] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 97.953964][ T5955] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 97.953982][ T5955] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 97.966052][ T5955] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 98.498943][ T6977] FAULT_INJECTION: forcing a failure. [ 98.498943][ T6977] name failslab, interval 1, probability 0, space 0, times 0 [ 98.498961][ T6977] CPU: 3 UID: 0 PID: 6977 Comm: syz.0.281 Not tainted syzkaller #0 PREEMPT(full) [ 98.498974][ T6977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.498982][ T6977] Call Trace: [ 98.498985][ T6977] [ 98.498990][ T6977] dump_stack_lvl+0x100/0x190 [ 98.499010][ T6977] should_fail_ex.cold+0x5/0xa [ 98.499026][ T6977] should_failslab+0xc2/0x120 [ 98.499038][ T6977] __kmalloc_cache_noprof+0x91/0x6d0 [ 98.499053][ T6977] ? alloc_tty_struct+0x96/0x8e0 [ 98.499069][ T6977] alloc_tty_struct+0x96/0x8e0 [ 98.499081][ T6977] ? __kasan_kmalloc+0xaa/0xb0 [ 98.499092][ T6977] ? __pfx_alloc_tty_struct+0x10/0x10 [ 98.499104][ T6977] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 98.499118][ T6977] ? pty_common_install+0x10e/0xb30 [ 98.499132][ T6977] pty_common_install+0x1c7/0xb30 [ 98.499144][ T6977] ? __pfx_pty_unix98_install+0x10/0x10 [ 98.499155][ T6977] tty_init_dev.part.0+0x9e/0x470 [ 98.499171][ T6977] tty_init_dev+0x60/0x80 [ 98.499186][ T6977] ? __pfx_ptmx_open+0x10/0x10 [ 98.499195][ T6977] ptmx_open+0x128/0x360 [ 98.499205][ T6977] ? __pfx_ptmx_open+0x10/0x10 [ 98.499214][ T6977] chrdev_open+0x234/0x6a0 [ 98.499225][ T6977] ? __pfx_apparmor_file_open+0x10/0x10 [ 98.499238][ T6977] ? __pfx_chrdev_open+0x10/0x10 [ 98.499250][ T6977] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 98.499268][ T6977] do_dentry_open+0x674/0x1470 [ 98.499278][ T6977] ? __pfx_chrdev_open+0x10/0x10 [ 98.499292][ T6977] vfs_open_consume+0xcc/0x460 [ 98.499308][ T6977] path_openat+0x1547/0x23f0 [ 98.499321][ T6977] ? __pfx_path_openat+0x10/0x10 [ 98.499337][ T6977] do_file_open+0x20e/0x430 [ 98.499350][ T6977] ? __pfx_do_file_open+0x10/0x10 [ 98.499374][ T6977] ? _raw_spin_unlock+0x28/0x50 [ 98.499384][ T6977] ? alloc_fd+0x471/0x7a0 [ 98.499399][ T6977] do_sys_openat2+0x163/0x1d0 [ 98.499413][ T6977] ? __pfx_do_sys_openat2+0x10/0x10 [ 98.499432][ T6977] __ia32_compat_sys_openat+0x12d/0x210 [ 98.499447][ T6977] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 98.499467][ T6977] __do_fast_syscall_32+0x14b/0x8c0 [ 98.499482][ T6977] do_fast_syscall_32+0x32/0x70 [ 98.499495][ T6977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.499508][ T6977] RIP: 0023:0xf747efbc [ 98.499517][ T6977] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 98.499527][ T6977] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 98.499538][ T6977] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800004c0 [ 98.499544][ T6977] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.499550][ T6977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.499556][ T6977] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 98.499601][ T6977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.499621][ T6977] [ 98.855709][ T6981] hub 8-0:1.0: USB hub found [ 98.856135][ T6981] hub 8-0:1.0: 1 port detected [ 99.224132][ T42] audit: type=1326 audit(1793216925.182:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.0.281" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7fc00000 [ 99.491582][ T6995] FAULT_INJECTION: forcing a failure. [ 99.491582][ T6995] name failslab, interval 1, probability 0, space 0, times 0 [ 99.491608][ T6995] CPU: 3 UID: 0 PID: 6995 Comm: syz.3.285 Not tainted syzkaller #0 PREEMPT(full) [ 99.491627][ T6995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.491651][ T6995] Call Trace: [ 99.491658][ T6995] [ 99.491669][ T6995] dump_stack_lvl+0x100/0x190 [ 99.491701][ T6995] should_fail_ex.cold+0x5/0xa [ 99.491726][ T6995] should_failslab+0xc2/0x120 [ 99.491746][ T6995] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 99.491774][ T6995] ? proc_alloc_inode+0x25/0x200 [ 99.491799][ T6995] ? __pfx_proc_alloc_inode+0x10/0x10 [ 99.491823][ T6995] proc_alloc_inode+0x25/0x200 [ 99.491844][ T6995] alloc_inode+0x68/0x250 [ 99.491868][ T6995] new_inode+0x22/0x1c0 [ 99.491895][ T6995] proc_pid_make_inode+0x22/0x160 [ 99.491920][ T6995] proc_pident_instantiate+0x85/0x310 [ 99.491946][ T6995] proc_pident_lookup+0x1e3/0x270 [ 99.491974][ T6995] ? __pfx_proc_tid_base_lookup+0x10/0x10 [ 99.491997][ T6995] lookup_open+0xaff/0x1940 [ 99.492033][ T6995] path_openat+0xe75/0x23f0 [ 99.492056][ T6995] ? __pfx_path_openat+0x10/0x10 [ 99.492083][ T6995] do_file_open+0x20e/0x430 [ 99.492104][ T6995] ? __pfx_do_file_open+0x10/0x10 [ 99.492132][ T6995] ? __pfx_kfree_link+0x10/0x10 [ 99.492166][ T6995] ? _raw_spin_unlock+0x28/0x50 [ 99.492184][ T6995] ? alloc_fd+0x471/0x7a0 [ 99.492211][ T6995] do_sys_openat2+0x163/0x1d0 [ 99.492235][ T6995] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.492262][ T6995] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 99.492288][ T6995] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 99.492317][ T6995] __ia32_compat_sys_openat+0x12d/0x210 [ 99.492342][ T6995] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 99.492377][ T6995] do_int80_emulation+0x166/0x650 [ 99.492401][ T6995] asm_int80_emulation+0x1a/0x20 [ 99.492418][ T6995] RIP: 0023:0xf71077ab [ 99.492432][ T6995] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 99.492448][ T6995] RSP: 002b:00000000f53a54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 99.492465][ T6995] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f71d2589 [ 99.492476][ T6995] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.492486][ T6995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.492496][ T6995] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 99.492506][ T6995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.492531][ T6995] [ 99.652160][ T6998] FAULT_INJECTION: forcing a failure. [ 99.652160][ T6998] name fail_page_alloc, interval 1, probability 0, space 0, times 9 [ 99.652189][ T6998] CPU: 0 UID: 0 PID: 6998 Comm: syz.3.286 Not tainted syzkaller #0 PREEMPT(full) [ 99.652211][ T6998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.652223][ T6998] Call Trace: [ 99.652231][ T6998] [ 99.652239][ T6998] dump_stack_lvl+0x100/0x190 [ 99.652273][ T6998] should_fail_ex.cold+0x5/0xa [ 99.652302][ T6998] should_fail_alloc_page+0xeb/0x140 [ 99.652329][ T6998] prepare_alloc_pages+0x1f0/0x5b0 [ 99.652350][ T6998] ? rcu_is_watching+0x13/0xc0 [ 99.652396][ T6998] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 99.652424][ T6998] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 99.652448][ T6998] ? kernel_text_address+0x8d/0x100 [ 99.652476][ T6998] ? __kernel_text_address+0xd/0x30 [ 99.652504][ T6998] ? unwind_get_return_address+0x59/0xa0 [ 99.652532][ T6998] ? arch_stack_walk+0xa6/0xf0 [ 99.652561][ T6998] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 99.652586][ T6998] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 99.652615][ T6998] ? mas_next_node+0x29c/0x1020 [ 99.652648][ T6998] ? look_up_lock_class+0x55/0x120 [ 99.652681][ T6998] ? __lock_acquire+0x5c0/0x1f40 [ 99.652702][ T6998] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.652727][ T6998] ? policy_nodemask+0xed/0x5e0 [ 99.652754][ T6998] alloc_pages_mpol+0x201/0x560 [ 99.652785][ T6998] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 99.652810][ T6998] ? find_held_lock+0x2b/0x80 [ 99.652837][ T6998] ? __pud_alloc+0x4f6/0x690 [ 99.652857][ T6998] ? __pud_alloc+0x4f6/0x690 [ 99.652879][ T6998] alloc_pages_noprof+0x1a/0x160 [ 99.652907][ T6998] __pmd_alloc+0x3b/0x950 [ 99.652924][ T6998] ? __pud_alloc+0x4fb/0x690 [ 99.652947][ T6998] __handle_mm_fault+0xa9d/0x2f60 [ 99.652977][ T6998] ? __pfx___handle_mm_fault+0x10/0x10 [ 99.652999][ T6998] ? __pfx_mt_find+0x10/0x10 [ 99.653048][ T6998] handle_mm_fault+0x363/0xa20 [ 99.653076][ T6998] __get_user_pages+0x8a9/0x2c20 [ 99.653120][ T6998] ? __pfx___get_user_pages+0x10/0x10 [ 99.653147][ T6998] ? lock_acquire+0x1d1/0x380 [ 99.653168][ T6998] ? mmap_read_lock_maybe_expand+0x200/0x430 [ 99.653198][ T6998] get_user_pages_remote+0x3d2/0xb10 [ 99.653231][ T6998] ? __pfx_get_user_pages_remote+0x10/0x10 [ 99.653271][ T6998] get_arg_page+0xf4/0x310 [ 99.653302][ T6998] ? __pfx_get_arg_page+0x10/0x10 [ 99.653331][ T6998] ? do_raw_spin_lock+0x128/0x260 [ 99.653355][ T6998] ? alloc_bprm+0x549/0x9d0 [ 99.653381][ T6998] ? alloc_bprm+0x549/0x9d0 [ 99.653412][ T6998] copy_string_kernel+0x17d/0x3f0 [ 99.653441][ T6998] ? alloc_bprm+0x591/0x9d0 [ 99.653473][ T6998] do_execveat_common.isra.0+0x2de/0x580 [ 99.653507][ T6998] __ia32_compat_sys_execveat+0xe4/0x130 [ 99.653529][ T6998] __do_fast_syscall_32+0x14b/0x8c0 [ 99.653555][ T6998] do_fast_syscall_32+0x32/0x70 [ 99.653578][ T6998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.653601][ T6998] RIP: 0023:0xf7f14fbc [ 99.653632][ T6998] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 99.653653][ T6998] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 0000000000000166 [ 99.653675][ T6998] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 99.653689][ T6998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 99.653701][ T6998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.653713][ T6998] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 99.653727][ T6998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.653754][ T6998] [ 100.070299][ T7000] pim6reg: entered allmulticast mode [ 100.145337][ T10] usb 6-1: USB disconnect, device number 11 [ 100.174297][ T7003] 0: reclassify loop, rule prio 0, protocol 03 [ 100.299018][ T7009] FAULT_INJECTION: forcing a failure. [ 100.299018][ T7009] name failslab, interval 1, probability 0, space 0, times 0 [ 100.299036][ T7009] CPU: 1 UID: 0 PID: 7009 Comm: syz.1.289 Not tainted syzkaller #0 PREEMPT(full) [ 100.299049][ T7009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.299056][ T7009] Call Trace: [ 100.299060][ T7009] [ 100.299065][ T7009] dump_stack_lvl+0x100/0x190 [ 100.299085][ T7009] should_fail_ex.cold+0x5/0xa [ 100.299101][ T7009] should_failslab+0xc2/0x120 [ 100.299113][ T7009] __kmalloc_cache_noprof+0x91/0x6d0 [ 100.299128][ T7009] ? pty_common_install+0xdf/0xb30 [ 100.299142][ T7009] pty_common_install+0xdf/0xb30 [ 100.299154][ T7009] ? __pfx_pty_unix98_install+0x10/0x10 [ 100.299171][ T7009] tty_init_dev.part.0+0x9e/0x470 [ 100.299189][ T7009] tty_init_dev+0x60/0x80 [ 100.299202][ T7009] ? __pfx_ptmx_open+0x10/0x10 [ 100.299212][ T7009] ptmx_open+0x128/0x360 [ 100.299223][ T7009] ? __pfx_ptmx_open+0x10/0x10 [ 100.299234][ T7009] chrdev_open+0x234/0x6a0 [ 100.299245][ T7009] ? __pfx_apparmor_file_open+0x10/0x10 [ 100.299258][ T7009] ? __pfx_chrdev_open+0x10/0x10 [ 100.299270][ T7009] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 100.299287][ T7009] do_dentry_open+0x674/0x1470 [ 100.299297][ T7009] ? __pfx_chrdev_open+0x10/0x10 [ 100.299310][ T7009] vfs_open_consume+0xcc/0x460 [ 100.299325][ T7009] path_openat+0x1547/0x23f0 [ 100.299339][ T7009] ? __pfx_path_openat+0x10/0x10 [ 100.299375][ T7009] do_file_open+0x20e/0x430 [ 100.299388][ T7009] ? __pfx_do_file_open+0x10/0x10 [ 100.299411][ T7009] ? _raw_spin_unlock+0x28/0x50 [ 100.299422][ T7009] ? alloc_fd+0x471/0x7a0 [ 100.299438][ T7009] do_sys_openat2+0x163/0x1d0 [ 100.299453][ T7009] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.299473][ T7009] __ia32_compat_sys_openat+0x12d/0x210 [ 100.299489][ T7009] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 100.299510][ T7009] __do_fast_syscall_32+0x14b/0x8c0 [ 100.299525][ T7009] do_fast_syscall_32+0x32/0x70 [ 100.299537][ T7009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.299568][ T7009] RIP: 0023:0xf7fc8fbc [ 100.299580][ T7009] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 100.299592][ T7009] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 100.299603][ T7009] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800004c0 [ 100.299611][ T7009] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.299618][ T7009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.299625][ T7009] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.299631][ T7009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.299646][ T7009] [ 100.800020][ T857] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 100.960555][ T857] usb 8-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 100.961622][ T857] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 100.961636][ T857] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 100.961653][ T857] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.975611][ T857] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 100.981099][ T857] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 101.022221][ T42] audit: type=1326 audit(1793216926.982:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.1.289" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fbc code=0x7fc00000 [ 101.331964][ T7013] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 101.332525][ T7013] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 101.333140][ T7013] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 101.430482][ T7013] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 101.540489][ T7012] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 101.546818][ T857] usb 8-1: USB disconnect, device number 10 [ 101.554553][ T857] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 101.557351][ T857] spcp8x5 8-1:1.0: device disconnected [ 101.987431][ T7038] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 102.644509][ T7046] FAULT_INJECTION: forcing a failure. [ 102.644509][ T7046] name failslab, interval 1, probability 0, space 0, times 0 [ 102.644530][ T7046] CPU: 3 UID: 0 PID: 7046 Comm: syz.3.302 Not tainted syzkaller #0 PREEMPT(full) [ 102.644543][ T7046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.644549][ T7046] Call Trace: [ 102.644553][ T7046] [ 102.644558][ T7046] dump_stack_lvl+0x100/0x190 [ 102.644581][ T7046] should_fail_ex.cold+0x5/0xa [ 102.644598][ T7046] should_failslab+0xc2/0x120 [ 102.644610][ T7046] __kmalloc_cache_noprof+0x91/0x6d0 [ 102.644623][ T7046] ? ptmx_open+0x11a/0x360 [ 102.644633][ T7046] ? alloc_tty_struct+0x96/0x8e0 [ 102.644649][ T7046] alloc_tty_struct+0x96/0x8e0 [ 102.644663][ T7046] ? __pfx_alloc_tty_struct+0x10/0x10 [ 102.644681][ T7046] tty_init_dev.part.0+0x20/0x470 [ 102.644697][ T7046] tty_init_dev+0x60/0x80 [ 102.644710][ T7046] ? __pfx_ptmx_open+0x10/0x10 [ 102.644719][ T7046] ptmx_open+0x128/0x360 [ 102.644729][ T7046] ? __pfx_ptmx_open+0x10/0x10 [ 102.644739][ T7046] chrdev_open+0x234/0x6a0 [ 102.644750][ T7046] ? __pfx_apparmor_file_open+0x10/0x10 [ 102.644764][ T7046] ? __pfx_chrdev_open+0x10/0x10 [ 102.644775][ T7046] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 102.644792][ T7046] do_dentry_open+0x674/0x1470 [ 102.644803][ T7046] ? __pfx_chrdev_open+0x10/0x10 [ 102.644816][ T7046] vfs_open_consume+0xcc/0x460 [ 102.644831][ T7046] path_openat+0x1547/0x23f0 [ 102.644845][ T7046] ? __pfx_path_openat+0x10/0x10 [ 102.644860][ T7046] do_file_open+0x20e/0x430 [ 102.644872][ T7046] ? __pfx_do_file_open+0x10/0x10 [ 102.644893][ T7046] ? _raw_spin_unlock+0x28/0x50 [ 102.644904][ T7046] ? alloc_fd+0x471/0x7a0 [ 102.644919][ T7046] do_sys_openat2+0x163/0x1d0 [ 102.644932][ T7046] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.644951][ T7046] __ia32_compat_sys_openat+0x12d/0x210 [ 102.644966][ T7046] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 102.644985][ T7046] __do_fast_syscall_32+0x14b/0x8c0 [ 102.645000][ T7046] do_fast_syscall_32+0x32/0x70 [ 102.645013][ T7046] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.645027][ T7046] RIP: 0023:0xf7f14fbc [ 102.645037][ T7046] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 102.645047][ T7046] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 102.645058][ T7046] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800004c0 [ 102.645065][ T7046] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.645078][ T7046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.645085][ T7046] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 102.645091][ T7046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.645105][ T7046] [ 103.370861][ T42] audit: type=1326 audit(1793216929.332:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.3.302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14fbc code=0x7fc00000 [ 103.404994][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 103.785706][ T7069] FAULT_INJECTION: forcing a failure. [ 103.785706][ T7069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.785734][ T7069] CPU: 2 UID: 0 PID: 7069 Comm: syz.0.308 Not tainted syzkaller #0 PREEMPT(full) [ 103.785751][ T7069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.785761][ T7069] Call Trace: [ 103.785767][ T7069] [ 103.785774][ T7069] dump_stack_lvl+0x100/0x190 [ 103.785805][ T7069] should_fail_ex.cold+0x5/0xa [ 103.785829][ T7069] _copy_to_user+0x32/0xd0 [ 103.785851][ T7069] simple_read_from_buffer+0xcb/0x170 [ 103.785871][ T7069] proc_fail_nth_read+0x1af/0x230 [ 103.785891][ T7069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.785912][ T7069] ? rw_verify_area+0xce/0x6d0 [ 103.785933][ T7069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.785947][ T7069] vfs_read+0x1e4/0xb40 [ 103.785963][ T7069] ? lock_acquire+0x1d1/0x380 [ 103.785979][ T7069] ? __fget_files+0x34/0x3d0 [ 103.785996][ T7069] ? __pfx_vfs_read+0x10/0x10 [ 103.786010][ T7069] ? find_held_lock+0x2b/0x80 [ 103.786031][ T7069] ? __fget_files+0x215/0x3d0 [ 103.786047][ T7069] ? __fget_files+0x21f/0x3d0 [ 103.786070][ T7069] ksys_read+0x12a/0x250 [ 103.786085][ T7069] ? __pfx_ksys_read+0x10/0x10 [ 103.786109][ T7069] do_int80_emulation+0x166/0x650 [ 103.786131][ T7069] asm_int80_emulation+0x1a/0x20 [ 103.786143][ T7069] RIP: 0023:0xf71d77ab [ 103.786156][ T7069] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 103.786171][ T7069] RSP: 002b:00000000f54964bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 103.786188][ T7069] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54965d0 [ 103.786198][ T7069] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 103.786207][ T7069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.786216][ T7069] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 103.786227][ T7069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.786243][ T7069] [ 104.310087][ T857] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 104.470838][ T857] usb 5-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 104.471834][ T857] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 104.471858][ T857] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 104.471889][ T857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.476931][ T857] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 104.481589][ T857] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 104.590260][ T6751] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 104.741832][ T7084] FAULT_INJECTION: forcing a failure. [ 104.741832][ T7084] name failslab, interval 1, probability 0, space 0, times 0 [ 104.741850][ T7084] CPU: 3 UID: 0 PID: 7084 Comm: syz.1.314 Not tainted syzkaller #0 PREEMPT(full) [ 104.741863][ T7084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.741869][ T7084] Call Trace: [ 104.741873][ T7084] [ 104.741878][ T7084] dump_stack_lvl+0x100/0x190 [ 104.741897][ T7084] should_fail_ex.cold+0x5/0xa [ 104.741913][ T7084] should_failslab+0xc2/0x120 [ 104.741926][ T7084] __kmalloc_cache_noprof+0x91/0x6d0 [ 104.741940][ T7084] ? pty_common_install+0xdf/0xb30 [ 104.741953][ T7084] pty_common_install+0xdf/0xb30 [ 104.741966][ T7084] ? __pfx_pty_unix98_install+0x10/0x10 [ 104.741977][ T7084] tty_init_dev.part.0+0x9e/0x470 [ 104.742011][ T7084] tty_init_dev+0x60/0x80 [ 104.742024][ T7084] ? __pfx_ptmx_open+0x10/0x10 [ 104.742033][ T7084] ptmx_open+0x128/0x360 [ 104.742043][ T7084] ? __pfx_ptmx_open+0x10/0x10 [ 104.742053][ T7084] chrdev_open+0x234/0x6a0 [ 104.742064][ T7084] ? __pfx_apparmor_file_open+0x10/0x10 [ 104.742080][ T7084] ? __pfx_chrdev_open+0x10/0x10 [ 104.742092][ T7084] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 104.742109][ T7084] do_dentry_open+0x674/0x1470 [ 104.742121][ T7084] ? __pfx_chrdev_open+0x10/0x10 [ 104.742135][ T7084] vfs_open_consume+0xcc/0x460 [ 104.742151][ T7084] path_openat+0x1547/0x23f0 [ 104.742166][ T7084] ? __pfx_path_openat+0x10/0x10 [ 104.742183][ T7084] do_file_open+0x20e/0x430 [ 104.742197][ T7084] ? __pfx_do_file_open+0x10/0x10 [ 104.742227][ T7084] ? _raw_spin_unlock+0x28/0x50 [ 104.742242][ T7084] ? alloc_fd+0x471/0x7a0 [ 104.742267][ T7084] do_sys_openat2+0x163/0x1d0 [ 104.742282][ T7084] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.742303][ T7084] __ia32_compat_sys_openat+0x12d/0x210 [ 104.742319][ T7084] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 104.742341][ T7084] __do_fast_syscall_32+0x14b/0x8c0 [ 104.742356][ T7084] do_fast_syscall_32+0x32/0x70 [ 104.742371][ T7084] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.742391][ T7084] RIP: 0023:0xf7fc8fbc [ 104.742404][ T7084] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 104.742419][ T7084] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 104.742439][ T7084] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800004c0 [ 104.742449][ T7084] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.742459][ T7084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.742468][ T7084] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 104.742478][ T7084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.742502][ T7084] [ 104.743403][ T6751] usb 8-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 104.744338][ T6751] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.744373][ T6751] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.759163][ T6751] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 104.759328][ T6751] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 104.759377][ T6751] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 104.760401][ T6751] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 104.760474][ T6751] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 104.765080][ T6751] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 104.766285][ T6751] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 104.766344][ T6751] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 104.773464][ T6751] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 104.840509][ T7087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.315'. [ 104.840511][ T7086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.315'. [ 104.841175][ T7074] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 104.841422][ T7074] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 104.841646][ T7074] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 104.931099][ T7074] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 105.040215][ T7073] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 105.041199][ T6751] usb 5-1: USB disconnect, device number 8 [ 105.046775][ T6751] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 105.047033][ T6751] spcp8x5 5-1:1.0: device disconnected [ 105.247883][ T77] IPVS: starting estimator thread 0... [ 105.266496][ T7091] IPv6: addrconf: prefix option has invalid lifetime [ 105.340087][ T7092] IPVS: using max 43 ests per chain, 103200 per kthread [ 105.452626][ T42] audit: type=1326 audit(1793216931.412:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7082 comm="syz.1.314" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fbc code=0x7fc00000 [ 105.495274][ T7094] FAULT_INJECTION: forcing a failure. [ 105.495274][ T7094] name failslab, interval 1, probability 0, space 0, times 0 [ 105.495300][ T7094] CPU: 0 UID: 0 PID: 7094 Comm: syz.1.316 Not tainted syzkaller #0 PREEMPT(full) [ 105.495318][ T7094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.495327][ T7094] Call Trace: [ 105.495334][ T7094] [ 105.495341][ T7094] dump_stack_lvl+0x100/0x190 [ 105.495372][ T7094] should_fail_ex.cold+0x5/0xa [ 105.495395][ T7094] should_failslab+0xc2/0x120 [ 105.495414][ T7094] __kmalloc_noprof+0xfc/0x840 [ 105.495438][ T7094] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 105.495461][ T7094] kernfs_fop_write_iter+0x26a/0x5f0 [ 105.495480][ T7094] vfs_write+0x6af/0x1050 [ 105.495497][ T7094] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 105.495516][ T7094] ? __pfx_vfs_write+0x10/0x10 [ 105.495552][ T7094] ? find_held_lock+0x2b/0x80 [ 105.495592][ T7094] ksys_write+0x12a/0x250 [ 105.495607][ T7094] ? __pfx_ksys_write+0x10/0x10 [ 105.495630][ T7094] __do_fast_syscall_32+0x14b/0x8c0 [ 105.495657][ T7094] ? lockdep_hardirqs_on+0x7d/0x110 [ 105.495677][ T7094] do_fast_syscall_32+0x32/0x70 [ 105.495696][ T7094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.495716][ T7094] RIP: 0023:0xf7fc8fbc [ 105.495730][ T7094] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 105.495759][ T7094] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 105.495777][ T7094] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 105.495787][ T7094] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.495796][ T7094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.495806][ T7094] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 105.495816][ T7094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.495840][ T7094] [ 105.549461][ T7096] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 105.764370][ T7109] FAULT_INJECTION: forcing a failure. [ 105.764370][ T7109] name failslab, interval 1, probability 0, space 0, times 0 [ 105.764396][ T7109] CPU: 1 UID: 0 PID: 7109 Comm: syz.0.321 Not tainted syzkaller #0 PREEMPT(full) [ 105.764416][ T7109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.764428][ T7109] Call Trace: [ 105.764434][ T7109] [ 105.764441][ T7109] dump_stack_lvl+0x100/0x190 [ 105.764471][ T7109] should_fail_ex.cold+0x5/0xa [ 105.764497][ T7109] should_failslab+0xc2/0x120 [ 105.764517][ T7109] __kmalloc_cache_noprof+0x91/0x6d0 [ 105.764541][ T7109] ? alloc_tty_struct+0x96/0x8e0 [ 105.764589][ T7109] alloc_tty_struct+0x96/0x8e0 [ 105.764612][ T7109] ? __kasan_kmalloc+0xaa/0xb0 [ 105.764631][ T7109] ? __pfx_alloc_tty_struct+0x10/0x10 [ 105.764651][ T7109] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 105.764674][ T7109] ? pty_common_install+0x10e/0xb30 [ 105.764698][ T7109] pty_common_install+0x1c7/0xb30 [ 105.764720][ T7109] ? __pfx_pty_unix98_install+0x10/0x10 [ 105.764740][ T7109] tty_init_dev.part.0+0x9e/0x470 [ 105.764766][ T7109] tty_init_dev+0x60/0x80 [ 105.764789][ T7109] ? __pfx_ptmx_open+0x10/0x10 [ 105.764803][ T7109] ptmx_open+0x128/0x360 [ 105.764821][ T7109] ? __pfx_ptmx_open+0x10/0x10 [ 105.764836][ T7109] chrdev_open+0x234/0x6a0 [ 105.764855][ T7109] ? __pfx_apparmor_file_open+0x10/0x10 [ 105.764877][ T7109] ? __pfx_chrdev_open+0x10/0x10 [ 105.764898][ T7109] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 105.764927][ T7109] do_dentry_open+0x674/0x1470 [ 105.764947][ T7109] ? __pfx_chrdev_open+0x10/0x10 [ 105.764969][ T7109] vfs_open_consume+0xcc/0x460 [ 105.764995][ T7109] path_openat+0x1547/0x23f0 [ 105.765021][ T7109] ? __pfx_path_openat+0x10/0x10 [ 105.765047][ T7109] do_file_open+0x20e/0x430 [ 105.765069][ T7109] ? __pfx_do_file_open+0x10/0x10 [ 105.765106][ T7109] ? _raw_spin_unlock+0x28/0x50 [ 105.765124][ T7109] ? alloc_fd+0x471/0x7a0 [ 105.765151][ T7109] do_sys_openat2+0x163/0x1d0 [ 105.765174][ T7109] ? __pfx_do_sys_openat2+0x10/0x10 [ 105.765206][ T7109] __ia32_compat_sys_openat+0x12d/0x210 [ 105.765231][ T7109] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 105.765267][ T7109] __do_fast_syscall_32+0x14b/0x8c0 [ 105.765292][ T7109] do_fast_syscall_32+0x32/0x70 [ 105.765313][ T7109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.765336][ T7109] RIP: 0023:0xf747efbc [ 105.765351][ T7109] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 105.765366][ T7109] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 105.765385][ T7109] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800004c0 [ 105.765395][ T7109] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.765407][ T7109] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.765416][ T7109] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 105.765428][ T7109] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.765452][ T7109] [ 106.491324][ T42] audit: type=1326 audit(1793216932.452:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.0.321" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efbc code=0x7fc00000 [ 106.536922][ T7111] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.322'. [ 106.536938][ T7111] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.322'. [ 106.939461][ T7120] hsr0: entered promiscuous mode [ 107.028519][ T7117] hsr0: left promiscuous mode [ 107.371345][ T5955] usb 8-1: USB disconnect, device number 11 [ 107.482616][ T5955] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 107.484115][ T5955] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 107.484416][ T5955] keyspan 8-1:1.0: device disconnected [ 107.635393][ T42] audit: type=1326 audit(1793216933.592:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.2.329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43fbc code=0x7ffc0000 [ 107.635593][ T42] audit: type=1326 audit(1793216933.592:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.2.329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43fbc code=0x7ffc0000 [ 107.636198][ T42] audit: type=1326 audit(1793216933.592:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.2.329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43fbc code=0x7ffc0000 [ 107.636370][ T42] audit: type=1326 audit(1793216933.592:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.2.329" exe="/syz-executor" sig=0 arch=40000003 syscall=368 compat=1 ip=0xf7f43fbc code=0x7ffc0000 [ 107.637594][ T42] audit: type=1326 audit(1793216933.592:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.2.329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43fbc code=0x7ffc0000 [ 107.637854][ T7134] FAULT_INJECTION: forcing a failure. [ 107.637854][ T7134] name failslab, interval 1, probability 0, space 0, times 0 [ 107.637873][ T7134] CPU: 0 UID: 0 PID: 7134 Comm: syz.3.328 Not tainted syzkaller #0 PREEMPT(full) [ 107.637886][ T7134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.637892][ T7134] Call Trace: [ 107.637896][ T7134] [ 107.637901][ T7134] dump_stack_lvl+0x100/0x190 [ 107.637922][ T7134] should_fail_ex.cold+0x5/0xa [ 107.637938][ T7134] should_failslab+0xc2/0x120 [ 107.637950][ T7134] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 107.637966][ T7134] ? __alloc_skb+0x140/0x710 [ 107.637982][ T7134] __alloc_skb+0x140/0x710 [ 107.637994][ T7134] ? __alloc_skb+0x5b7/0x710 [ 107.638006][ T7134] ? __pfx___alloc_skb+0x10/0x10 [ 107.638018][ T7134] ? lock_acquire+0x1d1/0x380 [ 107.638029][ T7134] ? packet_sendmsg+0x203/0x4f30 [ 107.638056][ T7134] alloc_skb_with_frags+0xdb/0x750 [ 107.638070][ T7134] ? trace_contention_end+0x126/0x160 [ 107.638085][ T7134] sock_alloc_send_pskb+0x86a/0x9e0 [ 107.638114][ T7134] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 107.638127][ T7134] ? __pfx___mutex_lock+0x10/0x10 [ 107.638142][ T7134] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 107.638155][ T7134] ? find_held_lock+0x2b/0x80 [ 107.638169][ T7134] ? packet_cached_dev_get+0x14b/0x320 [ 107.638180][ T7134] ? packet_cached_dev_get+0x14b/0x320 [ 107.638190][ T7134] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.638205][ T7134] packet_sendmsg+0xbd4/0x4f30 [ 107.638223][ T7134] ? aa_sk_perm+0x2eb/0xa90 [ 107.638242][ T7134] ? __pfx_packet_sendmsg+0x10/0x10 [ 107.638255][ T7134] ? aa_sock_msg_perm+0x11e/0x200 [ 107.638268][ T7134] ? apparmor_socket_sendmsg+0x165/0x280 [ 107.638283][ T7134] sock_write_iter+0x560/0x5d0 [ 107.638298][ T7134] ? __pfx_packet_sendmsg+0x10/0x10 [ 107.638309][ T7134] ? __pfx_sock_write_iter+0x10/0x10 [ 107.638329][ T7134] ? bpf_lsm_file_permission+0x9/0x10 [ 107.638344][ T7134] ? security_file_permission+0x76/0x210 [ 107.638348][ T42] audit: type=1326 audit(1793216933.592:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.2.329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43fbc code=0x7ffc0000 [ 107.638360][ T7134] ? rw_verify_area+0xce/0x6d0 [ 107.638376][ T7134] vfs_write+0x6af/0x1050 [ 107.638386][ T42] audit: type=1326 audit(1793216933.592:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.2.329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43fbc code=0x7ffc0000 [ 107.638391][ T7134] ? __pfx_sock_write_iter+0x10/0x10 [ 107.638419][ T7134] ? __fget_files+0x34/0x3d0 [ 107.638420][ T42] audit: type=1326 audit(1793216933.592:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.2.329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43fbc code=0x7ffc0000 [ 107.638429][ T7134] ? __pfx_vfs_write+0x10/0x10 [ 107.638438][ T7134] ? find_held_lock+0x2b/0x80 [ 107.638461][ T7134] ksys_write+0x1f8/0x250 [ 107.638470][ T7134] ? __pfx_ksys_write+0x10/0x10 [ 107.638484][ T7134] __do_fast_syscall_32+0x14b/0x8c0 [ 107.638496][ T7134] ? lockdep_hardirqs_on+0x7d/0x110 [ 107.638509][ T7134] do_fast_syscall_32+0x32/0x70 [ 107.638521][ T7134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.638534][ T7134] RIP: 0023:0xf7f14fbc [ 107.638543][ T7134] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 107.638553][ T7134] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 107.638564][ T7134] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 107.638571][ T7134] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 107.638577][ T7134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.638582][ T7134] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 107.638588][ T7134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.638601][ T7134] [ 107.875147][ T7142] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.332'. [ 107.875164][ T7142] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.332'. [ 109.416602][ T7155] /dev/sg0: Can't lookup blockdev [ 109.600996][ T7159] bond0: Error: Cannot enslave bond to itself. [ 110.678291][ T7181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.850973][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 110.850986][ T42] audit: type=1800 audit(1793216936.802:192): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.343" name="file1" dev="sda1" ino=2039 res=0 errno=-22 [ 111.144231][ T7186] FAULT_INJECTION: forcing a failure. [ 111.144231][ T7186] name failslab, interval 1, probability 0, space 0, times 0 [ 111.144251][ T7186] CPU: 0 UID: 0 PID: 7186 Comm: syz.1.344 Not tainted syzkaller #0 PREEMPT(full) [ 111.144264][ T7186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.144272][ T7186] Call Trace: [ 111.144276][ T7186] [ 111.144281][ T7186] dump_stack_lvl+0x100/0x190 [ 111.144303][ T7186] should_fail_ex.cold+0x5/0xa [ 111.144319][ T7186] should_failslab+0xc2/0x120 [ 111.144331][ T7186] __kmalloc_noprof+0xfc/0x840 [ 111.144347][ T7186] ? hash_netportnet4_add+0x14f5/0x3230 [ 111.144364][ T7186] hash_netportnet4_add+0x14f5/0x3230 [ 111.144389][ T7186] ? __pfx_hash_netportnet4_add+0x10/0x10 [ 111.144402][ T7186] ? __pfx_ip_set_get_extensions+0x10/0x10 [ 111.144417][ T7186] ? ip_set_range_to_cidr+0xaf/0x110 [ 111.144433][ T7186] hash_netportnet4_uadt+0xcf7/0x17d0 [ 111.144447][ T7186] ? __pfx_hash_netportnet4_add+0x10/0x10 [ 111.144461][ T7186] ? __pfx_hash_netportnet4_uadt+0x10/0x10 [ 111.144476][ T7186] ? is_bpf_text_address+0x25/0x1a0 [ 111.144491][ T7186] ? is_bpf_text_address+0x8a/0x1a0 [ 111.144503][ T7186] ? is_bpf_text_address+0x8a/0x1a0 [ 111.144516][ T7186] ? bpf_ksym_find+0x124/0x1c0 [ 111.144527][ T7186] call_ad.isra.0+0x171/0x950 [ 111.144542][ T7186] ? __pfx_call_ad.isra.0+0x10/0x10 [ 111.144555][ T7186] ? __pfx___nla_validate_parse+0x10/0x10 [ 111.144575][ T7186] ? __nla_parse+0x40/0x60 [ 111.144590][ T7186] ip_set_ad.isra.0+0x3f1/0x8b0 [ 111.144606][ T7186] ? __pfx_ip_set_ad.isra.0+0x10/0x10 [ 111.144619][ T7186] ? trace_contention_end+0x126/0x160 [ 111.144641][ T7186] ? find_held_lock+0x2b/0x80 [ 111.144659][ T7186] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 111.144674][ T7186] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 111.144687][ T7186] ? kfree_skbmem+0x19f/0x210 [ 111.144712][ T7186] ? __pfx___dev_queue_xmit+0x10/0x10 [ 111.144725][ T7186] netlink_rcv_skb+0x159/0x420 [ 111.144739][ T7186] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 111.144751][ T7186] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.144770][ T7186] ? ns_capable+0xcd/0xf0 [ 111.144787][ T7186] nfnetlink_rcv+0x1b3/0x440 [ 111.144797][ T7186] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 111.144807][ T7186] ? netlink_deliver_tap+0x1ae/0xb50 [ 111.144823][ T7186] netlink_unicast+0x668/0x950 [ 111.144839][ T7186] ? __pfx_netlink_unicast+0x10/0x10 [ 111.144856][ T7186] netlink_sendmsg+0x9ac/0x10c0 [ 111.144872][ T7186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.144890][ T7186] ? apparmor_socket_sendmsg+0x165/0x280 [ 111.144904][ T7186] ? ____sys_sendmsg+0xa99/0xc30 [ 111.144913][ T7186] ____sys_sendmsg+0xa99/0xc30 [ 111.144922][ T7186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.144937][ T7186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.144953][ T7186] ___sys_sendmsg+0x190/0x1e0 [ 111.144964][ T7186] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.144974][ T7186] ? futex_wait+0x11e/0x370 [ 111.144989][ T7186] ? find_held_lock+0x2b/0x80 [ 111.145011][ T7186] __sys_sendmsg+0x160/0x210 [ 111.145025][ T7186] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.145045][ T7186] __do_fast_syscall_32+0x14b/0x8c0 [ 111.145058][ T7186] ? lockdep_hardirqs_on+0x7d/0x110 [ 111.145070][ T7186] do_fast_syscall_32+0x32/0x70 [ 111.145091][ T7186] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.145105][ T7186] RIP: 0023:0xf7fc8fbc [ 111.145116][ T7186] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 111.145128][ T7186] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 111.145139][ T7186] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 111.145145][ T7186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.145151][ T7186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.145157][ T7186] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.145163][ T7186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.145176][ T7186] [ 112.098616][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 112.175173][ T7216] FAULT_INJECTION: forcing a failure. [ 112.175173][ T7216] name fail_page_alloc, interval 1, probability 0, space 0, times 8 [ 112.175199][ T7216] CPU: 1 UID: 0 PID: 7216 Comm: syz.3.355 Not tainted syzkaller #0 PREEMPT(full) [ 112.175219][ T7216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.175229][ T7216] Call Trace: [ 112.175236][ T7216] [ 112.175243][ T7216] dump_stack_lvl+0x100/0x190 [ 112.175276][ T7216] should_fail_ex.cold+0x5/0xa [ 112.175301][ T7216] should_fail_alloc_page+0xeb/0x140 [ 112.175323][ T7216] prepare_alloc_pages+0x1f0/0x5b0 [ 112.175342][ T7216] ? is_bpf_text_address+0x94/0x1a0 [ 112.175368][ T7216] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 112.175395][ T7216] ? do_raw_spin_lock+0x128/0x260 [ 112.175418][ T7216] ? find_held_lock+0x2b/0x80 [ 112.175440][ T7216] ? stack_depot_save_flags+0x49a/0xa10 [ 112.175461][ T7216] ? rcu_is_watching+0x13/0xc0 [ 112.175485][ T7216] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 112.175524][ T7216] ? lockdep_hardirqs_on+0x7d/0x110 [ 112.175544][ T7216] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 112.175560][ T7216] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.175591][ T7216] ? kasan_save_stack+0x3f/0x50 [ 112.175605][ T7216] ? kasan_save_stack+0x30/0x50 [ 112.175618][ T7216] ? kasan_save_track+0x14/0x30 [ 112.175631][ T7216] ? __kasan_slab_alloc+0x89/0x90 [ 112.175647][ T7216] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 112.175671][ T7216] ? alloc_vmap_area+0x1829/0x2bc0 [ 112.175690][ T7216] ? __get_vm_area_node+0x1ed/0x350 [ 112.175699][ T7216] ? __vmalloc_node_range_noprof+0x2ad/0x1440 [ 112.175715][ T7216] ? __vmalloc_node_noprof+0xad/0xf0 [ 112.175730][ T7216] ? copy_process+0x80b/0x84c0 [ 112.175746][ T7216] ? kernel_clone+0x176/0x9d0 [ 112.175762][ T7216] ? __do_sys_clone3+0x214/0x290 [ 112.175779][ T7216] ? __do_fast_syscall_32+0x14b/0x8c0 [ 112.175799][ T7216] ? do_fast_syscall_32+0x32/0x70 [ 112.175817][ T7216] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.175851][ T7216] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.175874][ T7216] ? policy_nodemask+0xed/0x5e0 [ 112.175897][ T7216] alloc_pages_mpol+0x201/0x560 [ 112.175920][ T7216] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 112.175947][ T7216] alloc_pages_noprof+0x1a/0x160 [ 112.175970][ T7216] get_free_pages_noprof+0x10/0xb0 [ 112.175997][ T7216] __kasan_populate_vmalloc+0xa0/0x210 [ 112.176031][ T7216] alloc_vmap_area+0x963/0x2bc0 [ 112.176065][ T7216] ? kasan_save_track+0x14/0x30 [ 112.176080][ T7216] ? __kasan_kmalloc+0xaa/0xb0 [ 112.176097][ T7216] ? __pfx_alloc_vmap_area+0x10/0x10 [ 112.176123][ T7216] ? __get_vm_area_node+0x124/0x350 [ 112.176144][ T7216] __get_vm_area_node+0x1ed/0x350 [ 112.176166][ T7216] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 112.176184][ T7216] ? kernel_clone+0x176/0x9d0 [ 112.176201][ T7216] ? lock_acquire+0x1d1/0x380 [ 112.176219][ T7216] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 112.176246][ T7216] ? find_held_lock+0x2b/0x80 [ 112.176270][ T7216] ? rcu_read_unlock+0x17/0x60 [ 112.176293][ T7216] ? kernel_clone+0x176/0x9d0 [ 112.176314][ T7216] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 112.176341][ T7216] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 112.176363][ T7216] ? rcu_is_watching+0x13/0xc0 [ 112.176386][ T7216] ? trace_kmem_cache_alloc+0xdd/0x100 [ 112.176409][ T7216] ? kernel_clone+0x176/0x9d0 [ 112.176425][ T7216] __vmalloc_node_noprof+0xad/0xf0 [ 112.176444][ T7216] ? kernel_clone+0x176/0x9d0 [ 112.176464][ T7216] copy_process+0x80b/0x84c0 [ 112.176483][ T7216] ? _kstrtoull+0x144/0x200 [ 112.176501][ T7216] ? __pfx__kstrtoull+0x10/0x10 [ 112.176529][ T7216] ? __pfx_copy_process+0x10/0x10 [ 112.176553][ T7216] ? _copy_from_user+0x59/0xd0 [ 112.176587][ T7216] kernel_clone+0x176/0x9d0 [ 112.176603][ T7216] ? find_held_lock+0x2b/0x80 [ 112.176622][ T7216] ? get_pid_task+0xfc/0x250 [ 112.176641][ T7216] ? __pfx_kernel_clone+0x10/0x10 [ 112.176663][ T7216] ? proc_fail_nth_write+0x9f/0x220 [ 112.176681][ T7216] ? find_held_lock+0x2b/0x80 [ 112.176705][ T7216] __do_sys_clone3+0x214/0x290 [ 112.176721][ T7216] ? __pfx___do_sys_clone3+0x10/0x10 [ 112.176735][ T7216] ? find_held_lock+0x2b/0x80 [ 112.176754][ T7216] ? ksys_write+0x190/0x250 [ 112.176781][ T7216] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.176817][ T7216] __do_fast_syscall_32+0x14b/0x8c0 [ 112.176830][ T7216] ? lockdep_hardirqs_on+0x7d/0x110 [ 112.176848][ T7216] do_fast_syscall_32+0x32/0x70 [ 112.176866][ T7216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.176888][ T7216] RIP: 0023:0xf7f14fbc [ 112.176902][ T7216] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 112.176920][ T7216] RSP: 002b:00000000f53c63dc EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 112.176938][ T7216] RAX: ffffffffffffffda RBX: 00000000f53c6410 RCX: 0000000000000058 [ 112.176949][ T7216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 112.176959][ T7216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.176969][ T7216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.176980][ T7216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.177004][ T7216] [ 112.177040][ T7216] syz.3.355: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 112.177093][ T7216] CPU: 1 UID: 0 PID: 7216 Comm: syz.3.355 Not tainted syzkaller #0 PREEMPT(full) [ 112.177113][ T7216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.177123][ T7216] Call Trace: [ 112.177128][ T7216] [ 112.177135][ T7216] dump_stack_lvl+0x100/0x190 [ 112.177167][ T7216] warn_alloc.cold+0x9e/0xb2 [ 112.177206][ T7216] ? __pfx_warn_alloc+0x10/0x10 [ 112.177229][ T7216] ? lockdep_hardirqs_on+0x7d/0x110 [ 112.177251][ T7216] ? __get_vm_area_node+0x2f0/0x350 [ 112.177274][ T7216] ? __get_vm_area_node+0x22b/0x350 [ 112.177297][ T7216] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 112.177316][ T7216] ? lock_acquire+0x1d1/0x380 [ 112.177333][ T7216] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 112.177359][ T7216] ? find_held_lock+0x2b/0x80 [ 112.177383][ T7216] ? rcu_read_unlock+0x17/0x60 [ 112.177405][ T7216] ? kernel_clone+0x176/0x9d0 [ 112.177425][ T7216] ? __memcg_slab_post_alloc_hook+0x715/0x10b0 [ 112.177451][ T7216] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 112.177474][ T7216] ? rcu_is_watching+0x13/0xc0 [ 112.177496][ T7216] ? trace_kmem_cache_alloc+0xdd/0x100 [ 112.177518][ T7216] ? kernel_clone+0x176/0x9d0 [ 112.177535][ T7216] __vmalloc_node_noprof+0xad/0xf0 [ 112.177554][ T7216] ? kernel_clone+0x176/0x9d0 [ 112.177579][ T7216] copy_process+0x80b/0x84c0 [ 112.177597][ T7216] ? _kstrtoull+0x144/0x200 [ 112.177615][ T7216] ? __pfx__kstrtoull+0x10/0x10 [ 112.177640][ T7216] ? __pfx_copy_process+0x10/0x10 [ 112.177665][ T7216] ? _copy_from_user+0x59/0xd0 [ 112.177689][ T7216] kernel_clone+0x176/0x9d0 [ 112.177705][ T7216] ? find_held_lock+0x2b/0x80 [ 112.177725][ T7216] ? get_pid_task+0xfc/0x250 [ 112.177743][ T7216] ? __pfx_kernel_clone+0x10/0x10 [ 112.177767][ T7216] ? proc_fail_nth_write+0x9f/0x220 [ 112.177788][ T7216] ? find_held_lock+0x2b/0x80 [ 112.177812][ T7216] __do_sys_clone3+0x214/0x290 [ 112.177831][ T7216] ? __pfx___do_sys_clone3+0x10/0x10 [ 112.177847][ T7216] ? find_held_lock+0x2b/0x80 [ 112.177870][ T7216] ? ksys_write+0x190/0x250 [ 112.177899][ T7216] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.177939][ T7216] __do_fast_syscall_32+0x14b/0x8c0 [ 112.177960][ T7216] ? lockdep_hardirqs_on+0x7d/0x110 [ 112.177981][ T7216] do_fast_syscall_32+0x32/0x70 [ 112.178003][ T7216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.178023][ T7216] RIP: 0023:0xf7f14fbc [ 112.178036][ T7216] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 112.178053][ T7216] RSP: 002b:00000000f53c63dc EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 112.178070][ T7216] RAX: ffffffffffffffda RBX: 00000000f53c6410 RCX: 0000000000000058 [ 112.178080][ T7216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 112.178090][ T7216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.178100][ T7216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.178111][ T7216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.178134][ T7216] [ 112.178140][ T7216] Mem-Info: [ 112.178148][ T7216] active_anon:6170 inactive_anon:67 isolated_anon:0 [ 112.178148][ T7216] active_file:8197 inactive_file:34054 isolated_file:0 [ 112.178148][ T7216] unevictable:1000 dirty:715 writeback:0 [ 112.178148][ T7216] slab_reclaimable:7833 slab_unreclaimable:55407 [ 112.178148][ T7216] mapped:25203 shmem:1506 pagetables:1201 [ 112.178148][ T7216] sec_pagetables:306 bounce:0 [ 112.178148][ T7216] kernel_misc_reclaimable:0 [ 112.178148][ T7216] free:34559 free_pcp:14186 free_cma:0 [ 112.178187][ T7216] Node 0 active_anon:96kB inactive_anon:32kB active_file:52kB inactive_file:288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8608kB pagetables:1204kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 112.178227][ T7216] Node 1 active_anon:24584kB inactive_anon:236kB active_file:32736kB inactive_file:135928kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:100664kB dirty:2856kB writeback:0kB shmem:6024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5140kB pagetables:3600kB sec_pagetables:68kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 112.178260][ T7216] Node 0 DMA free:2336kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:76kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:196kB local_pcp:132kB free_cma:0kB [ 112.178289][ T7216] lowmem_reserve[]: 0 256 256 256 256 [ 112.178307][ T7216] Node 0 DMA32 free:16160kB boost:2048kB min:13596kB low:16480kB high:19364kB reserved_highatomic:0kB free_highatomic:0kB active_anon:96kB inactive_anon:32kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:4kB zspages:0kB present:1032196kB managed:262680kB mlocked:0kB bounce:0kB free_pcp:9880kB local_pcp:1988kB free_cma:0kB [ 112.178340][ T7216] lowmem_reserve[]: 0 0 0 0 0 [ 112.178362][ T7216] Node 1 DMA32 free:119740kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24584kB inactive_anon:236kB active_file:32736kB inactive_file:135928kB unevictable:4000kB writepending:2856kB zspages:1752kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:46668kB local_pcp:14608kB free_cma:0kB [ 112.178403][ T7216] lowmem_reserve[]: 0 0 0 0 0 [ 112.178430][ T7216] Node 0 DMA: 134*4kB (UE) 29*8kB (UE) 10*16kB (UE) 16*32kB (UE) 14*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2336kB [ 112.178500][ T7216] Node 0 DMA32: 42*4kB (UME) 65*8kB (UME) 45*16kB (UME) 97*32kB (UME) 50*64kB (UME) 14*128kB (UME) 8*256kB (UM) 7*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 16160kB [ 112.178579][ T7216] Node 1 DMA32: 58*4kB (U) 54*8kB (UM) 2*16kB (UM) 135*32kB (UE) 71*64kB (UME) 25*128kB (UME) 64*256kB (UME) 45*512kB (UME) 22*1024kB (M) 14*2048kB (UM) 4*4096kB (M) = 119768kB [ 112.178685][ T7216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.178698][ T7216] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.178712][ T7216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.178723][ T7216] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.178736][ T7216] 43927 total pagecache pages [ 112.178742][ T7216] 174 pages in swap cache [ 112.178748][ T7216] Free swap = 122288kB [ 112.178754][ T7216] Total swap = 124996kB [ 112.178761][ T7216] 524155 pages RAM [ 112.178767][ T7216] 0 pages HighMem/MovableOnly [ 112.178772][ T7216] 217593 pages reserved [ 112.178778][ T7216] 0 pages cma reserved [ 112.306959][ T7225] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.360'. [ 112.306982][ T7225] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.360'. [ 113.123950][ T7274] FAULT_INJECTION: forcing a failure. [ 113.123950][ T7274] name failslab, interval 1, probability 0, space 0, times 0 [ 113.123968][ T7274] CPU: 2 UID: 0 PID: 7274 Comm: syz.0.366 Not tainted syzkaller #0 PREEMPT(full) [ 113.123980][ T7274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.123987][ T7274] Call Trace: [ 113.123990][ T7274] [ 113.123995][ T7274] dump_stack_lvl+0x100/0x190 [ 113.124014][ T7274] should_fail_ex.cold+0x5/0xa [ 113.124030][ T7274] should_failslab+0xc2/0x120 [ 113.124042][ T7274] __kmalloc_noprof+0xfc/0x840 [ 113.124057][ T7274] ? rcu_is_watching+0x13/0xc0 [ 113.124071][ T7274] ? tomoyo_encode2+0xfb/0x3c0 [ 113.124095][ T7274] tomoyo_encode2+0xfb/0x3c0 [ 113.124113][ T7274] tomoyo_encode+0x29/0x50 [ 113.124128][ T7274] tomoyo_realpath_from_path+0x18c/0x690 [ 113.124148][ T7274] tomoyo_check_open_permission+0x2af/0x3c0 [ 113.124163][ T7274] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 113.124177][ T7274] ? do_fast_syscall_32+0x32/0x70 [ 113.124194][ T7274] ? hook_file_open+0x245/0x8e0 [ 113.124217][ T7274] ? lock_acquire+0x1d1/0x380 [ 113.124230][ T7274] ? __pfx_make_vfsuid+0x10/0x10 [ 113.124245][ T7274] ? lockref_get_not_dead+0x6a/0x80 [ 113.124261][ T7274] tomoyo_file_open+0x6b/0x90 [ 113.124273][ T7274] security_file_open+0xb5/0x1e0 [ 113.124289][ T7274] do_dentry_open+0x552/0x1470 [ 113.124303][ T7274] vfs_open_consume+0xcc/0x460 [ 113.124319][ T7274] path_openat+0x1547/0x23f0 [ 113.124333][ T7274] ? __pfx_path_openat+0x10/0x10 [ 113.124349][ T7274] do_file_open+0x20e/0x430 [ 113.124361][ T7274] ? __pfx_do_file_open+0x10/0x10 [ 113.124382][ T7274] ? _raw_spin_unlock+0x28/0x50 [ 113.124393][ T7274] ? alloc_fd+0x471/0x7a0 [ 113.124408][ T7274] do_sys_openat2+0x163/0x1d0 [ 113.124421][ T7274] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.124437][ T7274] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 113.124452][ T7274] __ia32_compat_sys_openat+0x12d/0x210 [ 113.124467][ T7274] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 113.124487][ T7274] __do_fast_syscall_32+0x14b/0x8c0 [ 113.124499][ T7274] ? lockdep_hardirqs_on+0x7d/0x110 [ 113.124511][ T7274] do_fast_syscall_32+0x32/0x70 [ 113.124524][ T7274] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.124537][ T7274] RIP: 0023:0xf747efbc [ 113.124546][ T7274] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 113.124556][ T7274] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 113.124567][ T7274] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 113.124573][ T7274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.124579][ T7274] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.124585][ T7274] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 113.124591][ T7274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.124605][ T7274] [ 113.124616][ T7274] ERROR: Out of memory at tomoyo_realpath_from_path. [ 113.811807][ T7294] FAULT_INJECTION: forcing a failure. [ 113.811807][ T7294] name failslab, interval 1, probability 0, space 0, times 0 [ 113.811826][ T7294] CPU: 0 UID: 0 PID: 7294 Comm: syz.0.371 Not tainted syzkaller #0 PREEMPT(full) [ 113.811839][ T7294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.811845][ T7294] Call Trace: [ 113.811849][ T7294] [ 113.811854][ T7294] dump_stack_lvl+0x100/0x190 [ 113.811874][ T7294] should_fail_ex.cold+0x5/0xa [ 113.811889][ T7294] should_failslab+0xc2/0x120 [ 113.811901][ T7294] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 113.811922][ T7294] ? __alloc_skb+0x140/0x710 [ 113.811949][ T7294] __alloc_skb+0x140/0x710 [ 113.811964][ T7294] ? __alloc_skb+0x5b7/0x710 [ 113.811976][ T7294] ? __pfx___alloc_skb+0x10/0x10 [ 113.811993][ T7294] tipc_nl_compat_dumpit+0x15d/0x840 [ 113.812024][ T7294] tipc_nl_compat_recv+0x6b0/0xc50 [ 113.812041][ T7294] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 113.812058][ T7294] ? __pfx_tipc_nl_compat_name_table_dump_header+0x10/0x10 [ 113.812074][ T7294] ? __pfx_tipc_nl_name_table_dump+0x10/0x10 [ 113.812088][ T7294] ? __pfx_tipc_nl_compat_name_table_dump+0x10/0x10 [ 113.812108][ T7294] ? trace_contention_end+0x126/0x160 [ 113.812120][ T7294] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 113.812140][ T7294] genl_family_rcv_msg_doit+0x214/0x300 [ 113.812157][ T7294] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 113.812173][ T7294] ? genl_get_cmd+0x3e7/0x760 [ 113.812192][ T7294] ? __radix_tree_lookup+0x217/0x2b0 [ 113.812207][ T7294] genl_rcv_msg+0x560/0x800 [ 113.812225][ T7294] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.812240][ T7294] ? __lock_acquire+0x5c0/0x1f40 [ 113.812250][ T7294] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 113.812272][ T7294] netlink_rcv_skb+0x159/0x420 [ 113.812286][ T7294] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.812302][ T7294] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 113.812322][ T7294] ? netlink_deliver_tap+0x1ae/0xb50 [ 113.812337][ T7294] genl_rcv+0x28/0x40 [ 113.812351][ T7294] netlink_unicast+0x668/0x950 [ 113.812367][ T7294] ? __pfx_netlink_unicast+0x10/0x10 [ 113.812380][ T7294] ? __build_skb_around+0x278/0x390 [ 113.812392][ T7294] ? is_vmalloc_addr+0x86/0xa0 [ 113.812407][ T7294] netlink_sendmsg+0x9ac/0x10c0 [ 113.812424][ T7294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.812441][ T7294] ? apparmor_socket_sendmsg+0x165/0x280 [ 113.812456][ T7294] ? ____sys_sendmsg+0xa99/0xc30 [ 113.812466][ T7294] ____sys_sendmsg+0xa99/0xc30 [ 113.812474][ T7294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.812490][ T7294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.812507][ T7294] ___sys_sendmsg+0x190/0x1e0 [ 113.812518][ T7294] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.812535][ T7294] ? find_held_lock+0x2b/0x80 [ 113.812558][ T7294] __sys_sendmsg+0x160/0x210 [ 113.812572][ T7294] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.812594][ T7294] __do_fast_syscall_32+0x14b/0x8c0 [ 113.812609][ T7294] ? lockdep_hardirqs_on+0x7d/0x110 [ 113.812628][ T7294] do_fast_syscall_32+0x32/0x70 [ 113.812646][ T7294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.812671][ T7294] RIP: 0023:0xf747efbc [ 113.812684][ T7294] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 113.812698][ T7294] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 113.812721][ T7294] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 113.812728][ T7294] RDX: 0000000020001000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.812734][ T7294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.812740][ T7294] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 113.812747][ T7294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.812761][ T7294] [ 114.714269][ T7308] FAULT_INJECTION: forcing a failure. [ 114.714269][ T7308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.714288][ T7308] CPU: 2 UID: 0 PID: 7308 Comm: syz.1.375 Not tainted syzkaller #0 PREEMPT(full) [ 114.714300][ T7308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.714307][ T7308] Call Trace: [ 114.714311][ T7308] [ 114.714315][ T7308] dump_stack_lvl+0x100/0x190 [ 114.714336][ T7308] should_fail_ex.cold+0x5/0xa [ 114.714351][ T7308] _copy_from_user+0x2e/0xd0 [ 114.714367][ T7308] get_compat_msghdr+0xb3/0x480 [ 114.714380][ T7308] ? __pfx_get_compat_msghdr+0x10/0x10 [ 114.714396][ T7308] ___sys_sendmsg+0x1b6/0x1e0 [ 114.714414][ T7308] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.714442][ T7308] ? find_held_lock+0x2b/0x80 [ 114.714479][ T7308] __sys_sendmsg+0x160/0x210 [ 114.714502][ T7308] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.714536][ T7308] __do_fast_syscall_32+0x14b/0x8c0 [ 114.714552][ T7308] ? lockdep_hardirqs_on+0x7d/0x110 [ 114.714566][ T7308] do_fast_syscall_32+0x32/0x70 [ 114.714590][ T7308] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.714610][ T7308] RIP: 0023:0xf7fc8fbc [ 114.714624][ T7308] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 114.714638][ T7308] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 114.714649][ T7308] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 114.714655][ T7308] RDX: 0000000000000880 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.714661][ T7308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.714667][ T7308] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 114.714673][ T7308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.714687][ T7308] [ 116.591114][ T7339] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.384'. [ 116.591134][ T7339] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.384'. [ 116.766009][ T7349] FAULT_INJECTION: forcing a failure. [ 116.766009][ T7349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.766035][ T7349] CPU: 2 UID: 0 PID: 7349 Comm: syz.3.386 Not tainted syzkaller #0 PREEMPT(full) [ 116.766053][ T7349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.766063][ T7349] Call Trace: [ 116.766069][ T7349] [ 116.766076][ T7349] dump_stack_lvl+0x100/0x190 [ 116.766105][ T7349] should_fail_ex.cold+0x5/0xa [ 116.766129][ T7349] _copy_from_user+0x2e/0xd0 [ 116.766155][ T7349] raw_setsockopt+0x1282/0x18d0 [ 116.766177][ T7349] ? __pfx_aa_sk_perm+0x10/0x10 [ 116.766202][ T7349] ? __pfx_raw_setsockopt+0x10/0x10 [ 116.766226][ T7349] ? aa_sock_opt_perm+0x114/0x1e0 [ 116.766245][ T7349] ? __pfx_raw_setsockopt+0x10/0x10 [ 116.766267][ T7349] do_sock_setsockopt+0xf3/0x1d0 [ 116.766295][ T7349] __sys_setsockopt+0x119/0x190 [ 116.766320][ T7349] __ia32_sys_setsockopt+0xbc/0x160 [ 116.766339][ T7349] ? __might_fault+0x111/0x140 [ 116.766359][ T7349] __do_fast_syscall_32+0x14b/0x8c0 [ 116.766379][ T7349] ? lockdep_hardirqs_on+0x7d/0x110 [ 116.766398][ T7349] do_fast_syscall_32+0x32/0x70 [ 116.766418][ T7349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.766438][ T7349] RIP: 0023:0xf7f14fbc [ 116.766451][ T7349] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 116.766466][ T7349] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 116.766483][ T7349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000065 [ 116.766494][ T7349] RDX: 0000000000000003 RSI: 00000000800005c0 RDI: 0000000000000004 [ 116.766503][ T7349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.766512][ T7349] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 116.766522][ T7349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.766544][ T7349] [ 116.902722][ T7354] Cannot find add_set index 0 as target [ 117.090829][ T7364] FAULT_INJECTION: forcing a failure. [ 117.090829][ T7364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.090853][ T7364] CPU: 0 UID: 0 PID: 7364 Comm: syz.1.391 Not tainted syzkaller #0 PREEMPT(full) [ 117.090867][ T7364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.090875][ T7364] Call Trace: [ 117.090879][ T7364] [ 117.090885][ T7364] dump_stack_lvl+0x100/0x190 [ 117.090908][ T7364] should_fail_ex.cold+0x5/0xa [ 117.090926][ T7364] _copy_from_user+0x2e/0xd0 [ 117.090945][ T7364] sk_setsockopt+0x2f2/0x5fc0 [ 117.090967][ T7364] ? __pfx_aa_unix_opt_perm+0x10/0x10 [ 117.090993][ T7364] ? __pfx_sk_setsockopt+0x10/0x10 [ 117.091035][ T7364] ? __lock_acquire+0x5c0/0x1f40 [ 117.091065][ T7364] unix_setsockopt+0xf9/0x340 [ 117.091092][ T7364] ? __pfx_unix_setsockopt+0x10/0x10 [ 117.091115][ T7364] ? aa_sock_opt_perm+0x114/0x1e0 [ 117.091134][ T7364] ? __pfx_unix_setsockopt+0x10/0x10 [ 117.091159][ T7364] do_sock_setsockopt+0xf3/0x1d0 [ 117.091185][ T7364] __sys_setsockopt+0x119/0x190 [ 117.091210][ T7364] __ia32_sys_setsockopt+0xbc/0x160 [ 117.091229][ T7364] ? __might_fault+0x111/0x140 [ 117.091249][ T7364] __do_fast_syscall_32+0x14b/0x8c0 [ 117.091269][ T7364] ? lockdep_hardirqs_on+0x7d/0x110 [ 117.091289][ T7364] do_fast_syscall_32+0x32/0x70 [ 117.091308][ T7364] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.091329][ T7364] RIP: 0023:0xf7fc8fbc [ 117.091341][ T7364] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 117.091353][ T7364] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 117.091367][ T7364] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 117.091374][ T7364] RDX: 0000000000000049 RSI: 0000000080001980 RDI: 0000000000000004 [ 117.091382][ T7364] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.091389][ T7364] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 117.091396][ T7364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.091412][ T7364] [ 117.879952][ T1353] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 118.040020][ T1353] usb 5-1: Using ep0 maxpacket: 8 [ 118.040526][ T1353] usb 5-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 118.041465][ T1353] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 118.041478][ T1353] usb 5-1: config 0 has no interface number 0 [ 118.041495][ T1353] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.041506][ T1353] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 118.041518][ T1353] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 118.041530][ T1353] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.041548][ T1353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.042833][ T1353] usb 5-1: config 0 descriptor?? [ 118.047850][ T1353] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 118.262997][ T7394] FAULT_INJECTION: forcing a failure. [ 118.262997][ T7394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.263017][ T7394] CPU: 2 UID: 0 PID: 7394 Comm: syz.1.399 Not tainted syzkaller #0 PREEMPT(full) [ 118.263030][ T7394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.263036][ T7394] Call Trace: [ 118.263041][ T7394] [ 118.263058][ T7394] dump_stack_lvl+0x100/0x190 [ 118.263082][ T7394] should_fail_ex.cold+0x5/0xa [ 118.263099][ T7394] _copy_from_user+0x2e/0xd0 [ 118.263116][ T7394] get_compat_msghdr+0xb3/0x480 [ 118.263135][ T7394] ? __pfx_get_compat_msghdr+0x10/0x10 [ 118.263152][ T7394] ___sys_sendmsg+0x1b6/0x1e0 [ 118.263164][ T7394] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.263183][ T7394] ? find_held_lock+0x2b/0x80 [ 118.263208][ T7394] __sys_sendmsg+0x160/0x210 [ 118.263222][ T7394] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.263243][ T7394] __do_fast_syscall_32+0x14b/0x8c0 [ 118.263256][ T7394] ? lockdep_hardirqs_on+0x7d/0x110 [ 118.263268][ T7394] do_fast_syscall_32+0x32/0x70 [ 118.263281][ T7394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.263294][ T7394] RIP: 0023:0xf7fc8fbc [ 118.263303][ T7394] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 118.263313][ T7394] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 118.263324][ T7394] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 118.263330][ T7394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.263336][ T7394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.263342][ T7394] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 118.263348][ T7394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.263362][ T7394] [ 118.342730][ T7399] FAULT_INJECTION: forcing a failure. [ 118.342730][ T7399] name failslab, interval 1, probability 0, space 0, times 0 [ 118.342756][ T7399] CPU: 3 UID: 0 PID: 7399 Comm: syz.1.400 Not tainted syzkaller #0 PREEMPT(full) [ 118.342777][ T7399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.342788][ T7399] Call Trace: [ 118.342794][ T7399] [ 118.342802][ T7399] dump_stack_lvl+0x100/0x190 [ 118.342833][ T7399] should_fail_ex.cold+0x5/0xa [ 118.342859][ T7399] should_failslab+0xc2/0x120 [ 118.342880][ T7399] __kmalloc_cache_noprof+0x91/0x6d0 [ 118.342925][ T7399] ? pty_common_install+0xdf/0xb30 [ 118.342950][ T7399] pty_common_install+0xdf/0xb30 [ 118.342973][ T7399] ? __pfx_pty_unix98_install+0x10/0x10 [ 118.342984][ T7396] rxe_eth0 speed is unknown, defaulting to 1000 [ 118.342994][ T7399] tty_init_dev.part.0+0x9e/0x470 [ 118.343021][ T7399] tty_init_dev+0x60/0x80 [ 118.343044][ T7399] ? __pfx_ptmx_open+0x10/0x10 [ 118.343061][ T7399] ptmx_open+0x128/0x360 [ 118.343080][ T7399] ? __pfx_ptmx_open+0x10/0x10 [ 118.343097][ T7399] chrdev_open+0x234/0x6a0 [ 118.343116][ T7399] ? __pfx_apparmor_file_open+0x10/0x10 [ 118.343139][ T7399] ? __pfx_chrdev_open+0x10/0x10 [ 118.343160][ T7399] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 118.343189][ T7399] do_dentry_open+0x674/0x1470 [ 118.343207][ T7399] ? __pfx_chrdev_open+0x10/0x10 [ 118.343231][ T7399] vfs_open_consume+0xcc/0x460 [ 118.343259][ T7399] path_openat+0x1547/0x23f0 [ 118.343283][ T7399] ? __pfx_path_openat+0x10/0x10 [ 118.343310][ T7399] do_file_open+0x20e/0x430 [ 118.343332][ T7399] ? __pfx_do_file_open+0x10/0x10 [ 118.343371][ T7399] ? _raw_spin_unlock+0x28/0x50 [ 118.343388][ T7399] ? alloc_fd+0x471/0x7a0 [ 118.343413][ T7399] do_sys_openat2+0x163/0x1d0 [ 118.343435][ T7399] ? __pfx_do_sys_openat2+0x10/0x10 [ 118.343466][ T7399] __ia32_compat_sys_openat+0x12d/0x210 [ 118.343518][ T7399] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 118.343554][ T7399] __do_fast_syscall_32+0x14b/0x8c0 [ 118.343573][ T7399] ? lockdep_hardirqs_on+0x7d/0x110 [ 118.343593][ T7399] do_fast_syscall_32+0x32/0x70 [ 118.343616][ T7399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.343637][ T7399] RIP: 0023:0xf7fc8fbc [ 118.343653][ T7399] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 118.343668][ T7399] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 118.343693][ T7399] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800004c0 [ 118.343705][ T7399] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.343715][ T7399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.343726][ T7399] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 118.343737][ T7399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.343764][ T7399] [ 118.374109][ T5955] usb 5-1: USB disconnect, device number 9 [ 118.374158][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 118.780049][ T24] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 118.785482][ T7416] netlink: 40 bytes leftover after parsing attributes in process `syz.2.405'. [ 118.948383][ T7424] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.409'. [ 118.948404][ T7424] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.409'. [ 118.957014][ T24] usb 8-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 118.957980][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.958004][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.958022][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.958052][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.961458][ T24] usb 8-1: config 0 descriptor?? [ 119.086264][ T7426] FAULT_INJECTION: forcing a failure. [ 119.086264][ T7426] name failslab, interval 1, probability 0, space 0, times 0 [ 119.086284][ T7426] CPU: 0 UID: 0 PID: 7426 Comm: syz.1.410 Not tainted syzkaller #0 PREEMPT(full) [ 119.086296][ T7426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.086303][ T7426] Call Trace: [ 119.086307][ T7426] [ 119.086312][ T7426] dump_stack_lvl+0x100/0x190 [ 119.086333][ T7426] should_fail_ex.cold+0x5/0xa [ 119.086348][ T7426] should_failslab+0xc2/0x120 [ 119.086361][ T7426] __kmalloc_cache_noprof+0x91/0x6d0 [ 119.086375][ T7426] ? pty_common_install+0xdf/0xb30 [ 119.086389][ T7426] pty_common_install+0xdf/0xb30 [ 119.086401][ T7426] ? __pfx_pty_unix98_install+0x10/0x10 [ 119.086412][ T7426] tty_init_dev.part.0+0x9e/0x470 [ 119.086428][ T7426] tty_init_dev+0x60/0x80 [ 119.086441][ T7426] ? __pfx_ptmx_open+0x10/0x10 [ 119.086450][ T7426] ptmx_open+0x128/0x360 [ 119.086459][ T7426] ? __pfx_ptmx_open+0x10/0x10 [ 119.086469][ T7426] chrdev_open+0x234/0x6a0 [ 119.086480][ T7426] ? __pfx_apparmor_file_open+0x10/0x10 [ 119.086493][ T7426] ? __pfx_chrdev_open+0x10/0x10 [ 119.086505][ T7426] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 119.086526][ T7426] do_dentry_open+0x674/0x1470 [ 119.086536][ T7426] ? __pfx_chrdev_open+0x10/0x10 [ 119.086551][ T7426] vfs_open_consume+0xcc/0x460 [ 119.086567][ T7426] path_openat+0x1547/0x23f0 [ 119.086582][ T7426] ? __pfx_path_openat+0x10/0x10 [ 119.086597][ T7426] do_file_open+0x20e/0x430 [ 119.086609][ T7426] ? __pfx_do_file_open+0x10/0x10 [ 119.086631][ T7426] ? _raw_spin_unlock+0x28/0x50 [ 119.086642][ T7426] ? alloc_fd+0x471/0x7a0 [ 119.086658][ T7426] do_sys_openat2+0x163/0x1d0 [ 119.086672][ T7426] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.086690][ T7426] __ia32_compat_sys_openat+0x12d/0x210 [ 119.086705][ T7426] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 119.086725][ T7426] __do_fast_syscall_32+0x14b/0x8c0 [ 119.086740][ T7426] do_fast_syscall_32+0x32/0x70 [ 119.086753][ T7426] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.086767][ T7426] RIP: 0023:0xf7fc8fbc [ 119.086775][ T7426] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 119.086786][ T7426] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 119.086796][ T7426] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800004c0 [ 119.086803][ T7426] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.086809][ T7426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.086815][ T7426] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 119.086820][ T7426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.086834][ T7426] [ 119.102354][ T55] IPVS: starting estimator thread 0... [ 119.210062][ T7429] IPVS: using max 44 ests per chain, 105600 per kthread [ 119.359980][ T1043] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 119.510764][ T1043] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 119.511920][ T1043] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.511945][ T1043] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.511963][ T1043] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.511995][ T1043] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.514305][ T1043] usb 6-1: config 0 descriptor?? [ 120.636596][ T5955] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 121.240243][ T34] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 121.390865][ T34] usb 5-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 121.392121][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 121.392141][ T34] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 121.392170][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.402769][ T34] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 121.413423][ T34] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 121.791153][ T7447] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 121.791573][ T7447] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 121.791975][ T7447] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 121.829363][ T7454] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.419'. [ 121.829450][ T7454] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.419'. [ 121.885772][ T7447] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 121.990249][ T7446] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 121.993408][ T5884] usb 5-1: USB disconnect, device number 10 [ 121.999584][ T5884] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 122.002041][ T5884] spcp8x5 5-1:1.0: device disconnected [ 122.181549][ T7466] netlink: 67 bytes leftover after parsing attributes in process `syz.2.425'. [ 122.765767][ T7473] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.428'. [ 122.765783][ T7473] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.428'. [ 124.060041][ T2571] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 124.220867][ T2571] usb 5-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 124.221845][ T2571] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 124.221867][ T2571] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 124.221897][ T2571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.242929][ T2571] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 124.247874][ T2571] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 124.420389][ T24] usbhid 8-1:0.0: can't add hid device: -32 [ 124.420450][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 124.436219][ T10] usb 8-1: USB disconnect, device number 12 [ 124.479416][ T7502] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.437'. [ 124.479462][ T7502] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.437'. [ 124.600305][ T7491] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 124.600545][ T7491] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 124.600837][ T7491] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 124.667178][ T1043] usbhid 6-1:0.0: can't add hid device: -71 [ 124.667233][ T1043] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 124.670560][ T1043] usb 6-1: USB disconnect, device number 12 [ 124.694355][ T7491] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 124.751405][ T7508] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 124.802451][ T7490] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 124.808368][ T24] usb 5-1: USB disconnect, device number 11 [ 124.813009][ T24] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 124.816961][ T24] spcp8x5 5-1:1.0: device disconnected [ 125.021802][ T42] audit: type=1804 audit(1793216950.982:193): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.446" name="/newroot/86/file0/file0" dev="9p" ino=71827785 res=1 errno=0 [ 125.033018][ T7530] batman_adv: batadv0: Adding interface: dummy0 [ 125.033028][ T7530] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.033043][ T7530] batman_adv: batadv0: Interface activated: dummy0 [ 125.087427][ T7528] netlink: 'syz.2.448': attribute type 10 has an invalid length. [ 125.087473][ T7528] netlink: 40 bytes leftover after parsing attributes in process `syz.2.448'. [ 125.088882][ T7528] batadv0: entered promiscuous mode [ 125.088900][ T7528] batadv0: entered allmulticast mode [ 125.089528][ T7528] bridge0: port 3(batadv0) entered blocking state [ 125.089785][ T7528] bridge0: port 3(batadv0) entered disabled state [ 125.094633][ T7528] bridge0: port 3(batadv0) entered blocking state [ 125.094681][ T7528] bridge0: port 3(batadv0) entered forwarding state [ 125.107425][ T7527] batadv0: mtu less than device minimum [ 125.108271][ T7527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.109083][ T7527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.109830][ T7527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.110689][ T7527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.111512][ T7527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.112282][ T7527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.113208][ T7527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.114123][ T7527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.115040][ T7527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.398996][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.469153][ T7554] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.503888][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.550378][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 125.550391][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 125.576916][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.602623][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.605540][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.606108][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.606712][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.607097][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.638165][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.737683][ T7578] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.465'. [ 125.737699][ T7578] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.465'. [ 125.759110][ T12] bridge_slave_1: left allmulticast mode [ 125.759135][ T12] bridge_slave_1: left promiscuous mode [ 125.759963][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.764336][ T12] bridge_slave_0: left allmulticast mode [ 125.764351][ T12] bridge_slave_0: left promiscuous mode [ 125.764445][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.953229][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.959278][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.964755][ T12] bond0 (unregistering): Released all slaves [ 126.042457][ T7565] rxe_eth0 speed is unknown, defaulting to 1000 [ 126.080973][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 126.147338][ T5506] 8021q: adding VLAN 0 to HW filter on device eth2 [ 126.250406][ T24] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 126.251400][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.251415][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.251426][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.251476][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.255226][ T24] usb 6-1: config 0 descriptor?? [ 126.354305][ T5506] 8021q: adding VLAN 0 to HW filter on device eth3 [ 126.389582][ T12] hsr_slave_0: left promiscuous mode [ 126.395388][ T12] hsr_slave_1: left promiscuous mode [ 126.395854][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.395874][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.397225][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.397240][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.411802][ T12] veth1_macvtap: left promiscuous mode [ 126.411857][ T12] veth0_macvtap: left promiscuous mode [ 126.411935][ T12] veth1_vlan: left promiscuous mode [ 126.412441][ T12] veth0_vlan: left promiscuous mode [ 126.534606][ T12] team0 (unregistering): Port device team_slave_1 removed [ 126.539343][ T12] team0 (unregistering): Port device team_slave_0 removed [ 126.616917][ T7565] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.617006][ T7565] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.617069][ T7565] bridge_slave_0: entered allmulticast mode [ 126.617734][ T7565] bridge_slave_0: entered promiscuous mode [ 126.619695][ T7565] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.619737][ T7565] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.619807][ T7565] bridge_slave_1: entered allmulticast mode [ 126.621021][ T7565] bridge_slave_1: entered promiscuous mode [ 126.657498][ T7565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.659579][ T7565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.664853][ T24] hid_parser_main: 5 callbacks suppressed [ 126.664869][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 126.664886][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 126.664898][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 126.664909][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 126.664920][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 126.664932][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 126.664943][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 126.664954][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 126.664966][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 126.664977][ T24] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 126.687013][ T24] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 126.704078][ T7565] team0: Port device team_slave_0 added [ 126.716561][ T7565] team0: Port device team_slave_1 added [ 126.731255][ T7565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.731266][ T7565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.731279][ T7565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.733926][ T7565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.733939][ T7565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.733959][ T7565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.757658][ T7565] hsr_slave_0: entered promiscuous mode [ 126.758079][ T7565] hsr_slave_1: entered promiscuous mode [ 126.761746][ T7629] syzkaller0: entered promiscuous mode [ 126.761757][ T7629] syzkaller0: entered allmulticast mode [ 126.880606][ T5506] 8021q: adding VLAN 0 to HW filter on device eth4 [ 126.921782][ T7565] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 126.927307][ T7565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.928026][ T7565] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 126.931192][ T7565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.932026][ T7565] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 126.935079][ T7565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.935581][ T7565] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 126.939154][ T7565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.944741][ T12] IPVS: stop unused estimator thread 0... [ 126.955140][ T7565] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.955185][ T7565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.955288][ T7565] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.955332][ T7565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.980473][ T7565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.987795][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.988423][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.008147][ T7565] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.019268][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.019317][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.023993][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.024039][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.100322][ T5506] 8021q: adding VLAN 0 to HW filter on device eth5 [ 127.255236][ T7565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.389316][ T7565] veth0_vlan: entered promiscuous mode [ 127.393865][ T7565] veth1_vlan: entered promiscuous mode [ 127.409854][ T7565] veth0_macvtap: entered promiscuous mode [ 127.412660][ T7565] veth1_macvtap: entered promiscuous mode [ 127.419173][ T7565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.425671][ T7565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.451854][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.452057][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.452087][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.452115][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.462836][ T7676] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.474'. [ 127.462853][ T7676] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.474'. [ 127.475714][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.475727][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.499349][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.499364][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.569607][ T7680] hub 8-0:1.0: USB hub found [ 127.569832][ T7680] hub 8-0:1.0: 1 port detected [ 127.587746][ T7682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.615650][ T7684] FAULT_INJECTION: forcing a failure. [ 127.615650][ T7684] name failslab, interval 1, probability 0, space 0, times 0 [ 127.615676][ T7684] CPU: 3 UID: 0 PID: 7684 Comm: syz.4.458 Not tainted syzkaller #0 PREEMPT(full) [ 127.615694][ T7684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.615702][ T7684] Call Trace: [ 127.615708][ T7684] [ 127.615716][ T7684] dump_stack_lvl+0x100/0x190 [ 127.615746][ T7684] should_fail_ex.cold+0x5/0xa [ 127.615789][ T7684] should_failslab+0xc2/0x120 [ 127.615809][ T7684] __kmalloc_cache_noprof+0x91/0x6d0 [ 127.615832][ T7684] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 127.615855][ T7684] ? kvm_set_irq_routing+0x24f/0x960 [ 127.615890][ T7684] kvm_set_irq_routing+0x24f/0x960 [ 127.615924][ T7684] kvm_arch_vm_ioctl+0xe32/0x1650 [ 127.615947][ T7684] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 127.615981][ T7684] ? __lock_acquire+0x5c0/0x1f40 [ 127.616008][ T7684] ? __lock_acquire+0x5c0/0x1f40 [ 127.616032][ T7684] ? __lock_acquire+0x5c0/0x1f40 [ 127.616057][ T7684] ? __lock_acquire+0x5c0/0x1f40 [ 127.616093][ T7684] ? lock_acquire+0x1d1/0x380 [ 127.616111][ T7684] ? is_bpf_text_address+0x25/0x1a0 [ 127.616135][ T7684] ? find_held_lock+0x2b/0x80 [ 127.616159][ T7684] ? is_bpf_text_address+0x8a/0x1a0 [ 127.616181][ T7684] ? is_bpf_text_address+0x8a/0x1a0 [ 127.616204][ T7684] ? bpf_ksym_find+0x124/0x1c0 [ 127.616223][ T7684] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 127.616245][ T7684] ? is_bpf_text_address+0x94/0x1a0 [ 127.616267][ T7684] ? kernel_text_address+0x8d/0x100 [ 127.616293][ T7684] ? __pfx_widen_string+0x10/0x10 [ 127.616320][ T7684] ? __kernel_text_address+0xd/0x30 [ 127.616347][ T7684] ? unwind_get_return_address+0x59/0xa0 [ 127.616374][ T7684] ? arch_stack_walk+0xa6/0xf0 [ 127.616406][ T7684] ? tomoyo_path_number_perm+0x46d/0x580 [ 127.616433][ T7684] ? stack_trace_save+0x8e/0xc0 [ 127.616450][ T7684] ? __pfx_stack_trace_save+0x10/0x10 [ 127.616470][ T7684] ? stack_depot_save_flags+0x27/0xa10 [ 127.616496][ T7684] kvm_vm_ioctl+0xdca/0x2950 [ 127.616516][ T7684] ? kasan_save_stack+0x3f/0x50 [ 127.616533][ T7684] ? kasan_save_stack+0x30/0x50 [ 127.616551][ T7684] ? kasan_save_track+0x14/0x30 [ 127.616567][ T7684] ? kasan_save_free_info+0x3b/0x70 [ 127.616590][ T7684] ? __kasan_slab_free+0x5f/0x80 [ 127.616607][ T7684] ? kfree+0x22b/0x6d0 [ 127.616627][ T7684] ? tomoyo_path_number_perm+0x46d/0x580 [ 127.616650][ T7684] ? security_file_ioctl_compat+0xd3/0x230 [ 127.616675][ T7684] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 127.616698][ T7684] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 127.616753][ T7684] ? kasan_quarantine_put+0x104/0x240 [ 127.616780][ T7684] ? lockdep_hardirqs_on+0x7d/0x110 [ 127.616799][ T7684] ? find_held_lock+0x2b/0x80 [ 127.616821][ T7684] ? tomoyo_path_number_perm+0x28f/0x580 [ 127.616844][ T7684] ? tomoyo_path_number_perm+0x28f/0x580 [ 127.616873][ T7684] ? tomoyo_path_number_perm+0x188/0x580 [ 127.616899][ T7684] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 127.616922][ T7684] ? futex_wait+0x11e/0x370 [ 127.616948][ T7684] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 127.616972][ T7684] ? do_vfs_ioctl+0x226/0x13e0 [ 127.617000][ T7684] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 127.617027][ T7684] kvm_vm_compat_ioctl+0x2f7/0x410 [ 127.617049][ T7684] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 127.617069][ T7684] ? __fget_files+0x34/0x3d0 [ 127.617094][ T7684] ? find_held_lock+0x2b/0x80 [ 127.617118][ T7684] ? __fget_files+0x215/0x3d0 [ 127.617136][ T7684] ? hook_file_ioctl_common+0x140/0x440 [ 127.617166][ T7684] ? __fget_files+0x21f/0x3d0 [ 127.617189][ T7684] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 127.617211][ T7684] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 127.617272][ T7684] __do_fast_syscall_32+0x14b/0x8c0 [ 127.617295][ T7684] ? lockdep_hardirqs_on+0x7d/0x110 [ 127.617320][ T7684] do_fast_syscall_32+0x32/0x70 [ 127.617345][ T7684] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.617368][ T7684] RIP: 0023:0xf741efbc [ 127.617383][ T7684] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 127.617401][ T7684] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 127.617420][ T7684] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae60 [ 127.617433][ T7684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.617444][ T7684] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.617456][ T7684] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 127.617468][ T7684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.617494][ T7684] [ 127.630927][ T67] Bluetooth: hci0: command tx timeout [ 128.420682][ C3] [ 128.421502][ C3] ================================ [ 128.423103][ C3] WARNING: inconsistent lock state [ 128.424736][ C3] syzkaller #0 Not tainted [ 128.426109][ C3] -------------------------------- [ 128.427626][ C3] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 128.429623][ C3] ksoftirqd/3/33 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 128.432436][ C3] ffff88805b82e260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x168/0x280 [ 128.435282][ C3] {SOFTIRQ-ON-W} state was registered at: [ 128.436966][ C3] lock_acquire+0x1d1/0x380 [ 128.438341][ C3] lock_sock_nested+0x41/0xf0 [ 128.439780][ C3] x25_release+0xba/0x440 [ 128.441251][ C3] __sock_release+0xb3/0x260 [ 128.442903][ C3] sock_close+0x1c/0x30 [ 128.444151][ C3] __fput+0x3fb/0xb50 [ 128.445380][ C3] fput_close_sync+0x118/0x250 [ 128.446820][ C3] filp_close_sync+0x75/0xa0 [ 128.448209][ C3] __range_close+0x4a6/0x8b0 [ 128.449644][ C3] __ia32_sys_close_range+0x1f8/0x430 [ 128.451471][ C3] __do_fast_syscall_32+0x14b/0x8c0 [ 128.453143][ C3] do_fast_syscall_32+0x32/0x70 [ 128.454603][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.456488][ C3] irq event stamp: 1178732 [ 128.457804][ C3] hardirqs last enabled at (1178732): [] __local_bh_enable_ip+0xa5/0x120 [ 128.460700][ C3] hardirqs last disabled at (1178731): [] __local_bh_enable_ip+0xce/0x120 [ 128.463712][ C3] softirqs last enabled at (1178530): [] run_ksoftirqd+0x38/0x60 [ 128.466472][ C3] softirqs last disabled at (1178535): [] run_ksoftirqd+0x38/0x60 [ 128.469162][ C3] [ 128.469162][ C3] other info that might help us debug this: [ 128.471502][ C3] Possible unsafe locking scenario: [ 128.471502][ C3] [ 128.473630][ C3] CPU0 [ 128.474604][ C3] ---- [ 128.475608][ C3] lock(sk_lock-AF_X25); [ 128.476895][ C3] [ 128.477922][ C3] lock(sk_lock-AF_X25); [ 128.479251][ C3] [ 128.479251][ C3] *** DEADLOCK *** [ 128.479251][ C3] [ 128.481812][ C3] locks held by ksoftirqd/3/33: 1, last CPU#3: [ 128.483629][ C3] #0: ffffffff8ffeb320 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x25/0x1a0 [ 128.486702][ C3] [ 128.486702][ C3] stack backtrace: [ 128.488465][ C3] CPU: 3 UID: 0 PID: 33 Comm: ksoftirqd/3 Not tainted syzkaller #0 PREEMPT(full) [ 128.491221][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.494174][ C3] Call Trace: [ 128.495219][ C3] [ 128.496116][ C3] dump_stack_lvl+0x100/0x190 [ 128.497524][ C3] print_usage_bug.part.0+0x258/0x340 [ 128.499113][ C3] mark_lock+0x956/0x1020 [ 128.500411][ C3] ? mark_lock+0x69a/0x1020 [ 128.502273][ C3] __lock_acquire+0x7f1/0x1f40 [ 128.503760][ C3] lock_acquire+0x1d1/0x380 [ 128.505384][ C3] ? x25_kill_by_neigh+0x168/0x280 [ 128.506903][ C3] ? find_held_lock+0x2b/0x80 [ 128.508298][ C3] ? x25_kill_by_neigh+0x15e/0x280 [ 128.509796][ C3] lock_sock_nested+0x41/0xf0 [ 128.511210][ C3] ? x25_kill_by_neigh+0x168/0x280 [ 128.512805][ C3] x25_kill_by_neigh+0x168/0x280 [ 128.514313][ C3] x25_lapb_receive_frame+0x4b1/0x1000 [ 128.515943][ C3] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 128.517692][ C3] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 128.519444][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 128.521445][ C3] ? netif_receive_skb_core+0x25/0x1a0 [ 128.523062][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 128.524801][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 128.526330][ C3] netif_receive_skb_core+0x5a/0x1a0 [ 128.527854][ C3] lapbeth_napi_poll+0x42/0xc0 [ 128.529286][ C3] __napi_poll.constprop.0+0xaf/0x450 [ 128.530927][ C3] net_rx_action+0xa40/0xf20 [ 128.532399][ C3] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 128.534173][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 128.535736][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 128.537361][ C3] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 128.539204][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 128.540772][ C3] ? sched_clock+0x3a/0x60 [ 128.542122][ C3] ? sched_clock_cpu+0x6c/0x570 [ 128.543615][ C3] ? rcu_is_watching+0x13/0xc0 [ 128.545087][ C3] handle_softirqs+0x216/0xa20 [ 128.546616][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 128.548280][ C3] ? run_ksoftirqd+0x56/0x60 [ 128.549687][ C3] ? rcu_is_watching+0x13/0xc0 [ 128.551297][ C3] run_ksoftirqd+0x38/0x60 [ 128.552821][ C3] smpboot_thread_fn+0x41f/0xb90 [ 128.554336][ C3] ? kthread+0x13a/0x450 [ 128.555639][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 128.557325][ C3] kthread+0x373/0x450 [ 128.558573][ C3] ? __pfx_kthread+0x10/0x10 [ 128.559980][ C3] ret_from_fork+0x730/0xd60 [ 128.561565][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 128.563121][ C3] ? __switch_to+0x800/0x10e0 [ 128.564585][ C3] ? __pfx_kthread+0x10/0x10 [ 128.565955][ C3] ret_from_fork_asm+0x1a/0x30 [ 128.567407][ C3] [ 128.568663][ C3] BUG: sleeping function called from invalid context at net/core/sock.c:3910 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 128.568672][ C3] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 33, name: ksoftirqd/3 [ 128.568680][ C3] preempt_count: 100, expected: 0 [ 128.568685][ C3] RCU nest depth: 1, expected: 0 [ 128.568690][ C3] INFO: lockdep is turned off. [ 128.568693][ C3] Preemption disabled at: [ 128.568696][ C3] [] handle_softirqs+0x79d/0xa20 [ 128.568712][ C3] CPU: 3 UID: 0 PID: 33 Comm: ksoftirqd/3 Not tainted syzkaller #0 PREEMPT(full) [ 128.568724][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.568731][ C3] Call Trace: [ 128.568735][ C3] [ 128.568739][ C3] dump_stack_lvl+0x100/0x190 [ 128.568754][ C3] __might_resched.cold+0x1dc/0x222 [ 128.568768][ C3] ? __pfx___might_resched+0x10/0x10 [ 128.568782][ C3] ? find_held_lock+0x2b/0x80 [ 128.568795][ C3] ? x25_kill_by_neigh+0x15e/0x280 [ 128.568821][ C3] lock_sock_nested+0x52/0xf0 [ 128.568833][ C3] ? x25_kill_by_neigh+0x168/0x280 [ 128.568846][ C3] x25_kill_by_neigh+0x168/0x280 [ 128.568858][ C3] x25_lapb_receive_frame+0x4b1/0x1000 [ 128.568872][ C3] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 128.568884][ C3] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 128.568896][ C3] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 128.568908][ C3] ? netif_receive_skb_core+0x25/0x1a0 [ 128.568920][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 128.568930][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 128.568942][ C3] netif_receive_skb_core+0x5a/0x1a0 [ 128.568954][ C3] lapbeth_napi_poll+0x42/0xc0 [ 128.568975][ C3] __napi_poll.constprop.0+0xaf/0x450 [ 128.568987][ C3] net_rx_action+0xa40/0xf20 [ 128.568999][ C3] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 128.569011][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 128.569022][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 128.569032][ C3] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 128.569043][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 128.569052][ C3] ? sched_clock+0x3a/0x60 [ 128.569061][ C3] ? sched_clock_cpu+0x6c/0x570 [ 128.569072][ C3] ? rcu_is_watching+0x13/0xc0 [ 128.569087][ C3] handle_softirqs+0x216/0xa20 [ 128.569097][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 128.569106][ C3] ? run_ksoftirqd+0x56/0x60 [ 128.569114][ C3] ? rcu_is_watching+0x13/0xc0 [ 128.569127][ C3] run_ksoftirqd+0x38/0x60 [ 128.569136][ C3] smpboot_thread_fn+0x41f/0xb90 [ 128.569148][ C3] ? kthread+0x13a/0x450 [ 128.569160][ C3] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 128.569172][ C3] kthread+0x373/0x450 [ 128.569184][ C3] ? __pfx_kthread+0x10/0x10 [ 128.569196][ C3] ret_from_fork+0x730/0xd60 [ 128.569207][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 128.569217][ C3] ? __switch_to+0x800/0x10e0 [ 128.569231][ C3] ? __pfx_kthread+0x10/0x10 [ 128.569244][ C3] ret_from_fork_asm+0x1a/0x30 [ 128.569257][ C3] [ 128.966513][ T5891] usb 6-1: USB disconnect, device number 13 [ 129.004483][ T5871] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.093968][ T5871] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.172989][ T5871] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.242523][ T5871] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.374755][ T5871] bridge_slave_1: left allmulticast mode [ 129.374772][ T5871] bridge_slave_1: left promiscuous mode [ 129.374841][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.375462][ T5871] bridge_slave_0: left allmulticast mode [ 129.375476][ T5871] bridge_slave_0: left promiscuous mode [ 129.375547][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.444433][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.445317][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.445816][ T5871] bond0 (unregistering): Released all slaves [ 129.544512][ T5506] 8021q: adding VLAN 0 to HW filter on device eth6 [ 129.612727][ T5871] hsr_slave_0: left promiscuous mode [ 129.613039][ T5871] hsr_slave_1: left promiscuous mode [ 129.613306][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.613315][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.613663][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.613671][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.615298][ T5871] veth1_macvtap: left promiscuous mode [ 129.615320][ T5871] veth0_macvtap: left promiscuous mode [ 129.615362][ T5871] veth1_vlan: left promiscuous mode [ 129.615456][ T5871] veth0_vlan: left promiscuous mode [ 129.667324][ T5871] team0 (unregistering): Port device team_slave_1 removed [ 129.669482][ T5871] team0 (unregistering): Port device team_slave_0 removed [ 129.688478][ T5506] 8021q: adding VLAN 0 to HW filter on device eth7 [ 129.783303][ T5506] 8021q: adding VLAN 0 to HW filter on device eth8 [ 129.885789][ T5506] 8021q: adding VLAN 0 to HW filter on device eth9 [ 130.005510][ T5871] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.054766][ T5871] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.105046][ T5871] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.145058][ T5871] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.210813][ T5871] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.269021][ T5871] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.301108][ T5506] 8021q: adding VLAN 0 to HW filter on device eth10 [ 130.318692][ T5871] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.367580][ T5871] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.406278][ T5871] bridge_slave_1: left allmulticast mode [ 130.406294][ T5871] bridge_slave_1: left promiscuous mode [ 130.406378][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.407936][ T5871] bridge_slave_0: left allmulticast mode [ 130.407949][ T5871] bridge_slave_0: left promiscuous mode [ 130.408043][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.417621][ T5871] bridge0: port 3(batadv0) entered disabled state [ 130.422521][ T5871] bridge_slave_1: left allmulticast mode [ 130.422540][ T5871] bridge_slave_1: left promiscuous mode [ 130.422645][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.426032][ T5871] bridge_slave_0: left allmulticast mode [ 130.426048][ T5871] bridge_slave_0: left promiscuous mode [ 130.426138][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.435144][ T5871] pim6reg: left allmulticast mode [ 130.488309][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.489452][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.492523][ T5871] bond0 (unregistering): Released all slaves [ 130.493665][ T5871] bond1 (unregistering): Released all slaves [ 130.550571][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.552173][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.552759][ T5871] bond0 (unregistering): Released all slaves [ 130.554534][ T5506] 8021q: adding VLAN 0 to HW filter on device eth11 [ 130.646802][ T5506] 8021q: adding VLAN 0 to HW filter on device eth12 [ 130.670131][ T5846] net_ratelimit: 34 callbacks suppressed [ 130.670145][ T5846] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 130.670157][ T5846] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 130.670168][ T5846] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 130.670177][ T5846] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 130.733575][ T5506] 8021q: adding VLAN 0 to HW filter on device eth13 [ 130.837545][ T5506] 8021q: adding VLAN 0 to HW filter on device eth14 [ 130.895026][ T5871] hsr_slave_0: left promiscuous mode [ 130.895322][ T5871] hsr_slave_1: left promiscuous mode [ 130.895559][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.895568][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.895820][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.895828][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.898058][ T5871] hsr_slave_0: left promiscuous mode [ 130.898470][ T5871] hsr_slave_1: left promiscuous mode [ 130.898882][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.899346][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.899358][ T5871] batadv0: mtu less than device minimum [ 130.899772][ T5871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.900224][ T5871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.900609][ T5871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.900993][ T5871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.901380][ T5871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.907314][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.908797][ T5871] batman_adv: batadv0: Interface deactivated: dummy0 [ 130.908808][ T5871] batman_adv: batadv0: Removing interface: dummy0 [ 130.913651][ T5871] veth1_macvtap: left promiscuous mode [ 130.913676][ T5871] veth0_macvtap: left promiscuous mode [ 130.913728][ T5871] veth1_vlan: left promiscuous mode [ 130.913757][ T5871] veth0_vlan: left promiscuous mode [ 130.919852][ T5871] veth1_macvtap: left promiscuous mode [ 130.920108][ T5871] veth0_macvtap: left promiscuous mode [ 130.920215][ T5871] veth1_vlan: left promiscuous mode [ 130.920246][ T5871] veth0_vlan: left promiscuous mode [ 131.001823][ T5871] team0 (unregistering): Port device team_slave_1 removed [ 131.003831][ T5871] team0 (unregistering): Port device team_slave_0 removed [ 131.074165][ T5871] team0 (unregistering): Port device team_slave_1 removed [ 131.076202][ T5871] team0 (unregistering): Port device team_slave_0 removed [ 131.097688][ T5506] 8021q: adding VLAN 0 to HW filter on device eth15 [ 131.179111][ T5506] 8021q: adding VLAN 0 to HW filter on device eth17 [ 131.269012][ T5506] 8021q: adding VLAN 0 to HW filter on device eth16 [ 131.523444][ T5871] IPVS: stop unused estimator thread 0... [ 131.555147][ T5871] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.593680][ T5871] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.643028][ T5871] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.713186][ T5871] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.785024][ T5871] bridge_slave_1: left allmulticast mode [ 131.785039][ T5871] bridge_slave_1: left promiscuous mode [ 131.785106][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.785794][ T5871] bridge_slave_0: left allmulticast mode [ 131.785808][ T5871] bridge_slave_0: left promiscuous mode [ 131.785888][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.818148][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.819128][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.819818][ T5871] bond0 (unregistering): Released all slaves [ 131.924408][ T5506] 8021q: adding VLAN 0 to HW filter on device eth18 [ 132.038316][ T5506] 8021q: adding VLAN 0 to HW filter on device eth20 [ 132.096926][ T5871] hsr_slave_0: left promiscuous mode [ 132.097305][ T5871] hsr_slave_1: left promiscuous mode [ 132.097521][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.097530][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.097787][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.097795][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.099201][ T5871] veth1_macvtap: left promiscuous mode [ 132.099224][ T5871] veth0_macvtap: left promiscuous mode [ 132.099313][ T5871] veth1_vlan: left promiscuous mode [ 132.099342][ T5871] veth0_vlan: left promiscuous mode [ 132.167252][ T5871] team0 (unregistering): Port device team_slave_1 removed [ 132.169171][ T5871] team0 (unregistering): Port device team_slave_0 removed [ 132.195518][ T5506] 8021q: adding VLAN 0 to HW filter on device eth19 [ 132.292439][ T5506] 8021q: adding VLAN 0 to HW filter on device eth21 [ 132.421450][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.421489][ T1447] ieee802154 phy1 wpan1: encryption failed: -22