last executing test programs: 2m52.102871911s ago: executing program 0 (id=511): mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000005c40)="000000000902090001010080ed110100020000004000800000000000000001", 0x1f) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x5, 0x582, 0x3}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000005480)={0x0, 0x8, 0x3cdb, {0x0, 0x10000}}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000035c0)={'veth1_to_hsr\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x8}}) landlock_restrict_self(r6, 0xe) setuid(0xee00) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_GETDRIVER(r9, 0x41045508, &(0x7f00000018c0)={0x0, "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"}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="59cfa6ff00000100000008"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) read$snapshot(r5, 0x0, 0x0) 2m51.379091804s ago: executing program 0 (id=517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)) mkdir(&(0x7f00000002c0)='./cgroup.cpu/test/file0\x00', 0x1ff) 2m51.090596117s ago: executing program 0 (id=519): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x3f) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m51.00784506s ago: executing program 0 (id=520): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1000000016140176"], 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4004) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000"], 0x48) write(r0, &(0x7f0000000180)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x802, 0xd8) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000002c0)={0x40, 0x40, 0xfff8, 0x5, 0x7}) getsockname(r0, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000380)=0x80) write(r3, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) setns(0xc9, 0x0) socket$packet(0x11, 0x2, 0x300) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) 2m50.610890679s ago: executing program 0 (id=522): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x334, 0x103502) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vnet(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000016c0)={0x8, 0x0, [{0x70000, 0x1000, &(0x7f0000000300)=""/4096}, {0xfec00000, 0xb8, &(0x7f0000001300)=""/184}, {0x231d3800, 0x7c, &(0x7f00000013c0)=""/124}, {0xffffffff, 0x5d, &(0x7f0000001440)=""/93}, {0x2, 0x32, &(0x7f00000014c0)=""/50}, {0x54000, 0xb1, &(0x7f0000001500)=""/177}, {0xdddd0000, 0x0, &(0x7f00000015c0)}, {0x5000, 0x9b, &(0x7f0000001600)=""/155}]}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 2m49.56281262s ago: executing program 0 (id=527): rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20014000000020"], 0x0}) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="20012900000005"], 0x0}) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) setitimer(0x0, &(0x7f00000002c0)={{0x0, 0xea60}, {0x77359400}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x13, 0x4, 0x8, 0xb}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000440), r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000100)={0xa0000003}) epoll_pwait2(r5, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r2, &(0x7f0000000080)={0x8000004}) 2m49.502632314s ago: executing program 32 (id=527): rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20014000000020"], 0x0}) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="20012900000005"], 0x0}) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) setitimer(0x0, &(0x7f00000002c0)={{0x0, 0xea60}, {0x77359400}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x13, 0x4, 0x8, 0xb}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000440), r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000100)={0xa0000003}) epoll_pwait2(r5, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r2, &(0x7f0000000080)={0x8000004}) 2m20.106532912s ago: executing program 2 (id=655): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0xfffd}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xb838}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x9301}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000041}, 0x2008044) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r0, 0x80000) 2m19.880321063s ago: executing program 2 (id=656): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000040)=',}#})$\x00', 0x440400, &(0x7f00000000c0)={@align=0x80000000, {0xd7, 0x8, 0x8, 0x8000000000000001}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x9}, {[0xffffffff, 0x5, 0x6, 0x5]}, 0x800000, 0xd0, &(0x7f0000000180)=""/208}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8044) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x8044) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x60, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x4000001, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x4923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0x6cb, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x7, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x5, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x1, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0x8, 0x3, 0xd, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x9, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc0, 0x14c6, 0x4, 0x2, 0xfffff800, 0x103d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x6, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x1000004, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x5, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0xa, 0xe122, 0xc, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x4, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x101, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 2m18.801535499s ago: executing program 2 (id=658): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x80, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x60, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x88d82fc5699c01fb}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m18.686174074s ago: executing program 2 (id=660): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf250a0000003c0001801400020070696d72656700000000000000000000080003000100000008000100", @ANYRES32=r1, @ANYBLOB="140019000000006800000000"], 0x50}, 0x1, 0x0, 0x0, 0x40400d4}, 0x44800) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r5 = eventfd2(0x42, 0x80801) r6 = dup2(r5, r4) write$eventfd(r5, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000000)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r6}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=5,nr_blhcks=2,\x00']) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xec}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48) 2m17.799606774s ago: executing program 2 (id=661): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), 0x0, 0x4, 0x0, 0x0, r0}}, 0x3c) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = open(&(0x7f00000002c0)='.\x00', 0x101800, 0x1d2) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) listen(r2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x600c800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r4, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000140), 0x4) 2m17.740762011s ago: executing program 2 (id=663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2m11.439395025s ago: executing program 4 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='dwc3\x00', 0x5) (async) write(r0, &(0x7f00000000c0)='dwc3\x00', 0x5) syz_clone(0x80008211, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x80008211, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x60000000) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0) socket$packet(0x11, 0x3, 0x300) write(0xffffffffffffffff, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffd8ef, @local}, 0x10) listen(0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0xfffc, 0x0, 0x3, 0x0, 0x1, 0x100, 0x0, 0x803, 0xf, 0x0, 0x10000, 0x6, 0x0, "427f4d0561864078b7f90008000082b77841a567db00494f41002000"}}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/serial8250/unbind\x00', 0x40001, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/serial8250/unbind\x00', 0x40001, 0x0) write(r4, &(0x7f0000000140)='serial8250\x00', 0xb) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/dwc3/bind\x00', 0x1, 0x0) 2m10.758695499s ago: executing program 4 (id=692): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r6 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(r6, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x5, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x1, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 2m8.91017149s ago: executing program 4 (id=705): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101302, 0x0) pipe2(&(0x7f0000000c40), 0x4800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000200)=ANY=[@ANYRES8=0x0], 0x48) socket$packet(0x11, 0x3, 0x300) mq_open(0x0, 0x40, 0x1f0, 0x0) r0 = add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$negate(0xd, r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newtaction={0x170, 0x30, 0x200, 0x0, 0x0, {}, [{0x15c, 0x1, [@m_skbmod={0xa4, 0x15, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x10000, 0x1ff, 0x8, 0x1ff}, 0xd}}]}, {0x55, 0x6, "068910fc85744f4516d71fb05fbb0d2ee6f671181b34e40bc90fdab4ed2db2820d905997406e5f370052852c491251e50e0bb593e7f7785fdf38789c9acde7f01acc9fe29dc0d65cccc51edf83457b5862"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0xb4, 0x3, 0x0, 0x0, {{0x7}, {0x4}, {0x8b, 0x6, "0118229c0a7ac97a00092f3e97f3b2d313235183f09eae223f30d3bab16124b074d29317f5f4cba84542236a7f43d5ae749849d65827612ff4d50621597c2e11ebf4e26baaab5074b3ccf3d9a5bef552ca8fb1ce555f2fb8cf358ad9a30cb93abb1e7101b99f4fa6793e87090000002c09d4eed31c9bc04e3ae6ace8f76b436730242af2000000"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000300), 0x10, 0x2) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000001c0)='./control\x00', 0xa4000c71) rmdir(&(0x7f0000000280)='./control\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2m7.078900448s ago: executing program 4 (id=715): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x3, 0x2f) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001802900010068617368000000001c000280080002400000000a080001400000000908000340000000d40900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(0xffffffffffffffff, 0x0) r4 = syz_usbip_server_init(0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000050000000400000001000000", @ANYRES32, @ANYBLOB="000000000000000000cf00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20) write$usbip_server(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x1ffffffe) 2m5.277426548s ago: executing program 4 (id=721): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000fe1216d98e33e40e00040000000000cfcf8a70516a52addefa6762f5cb3093e0f62ac6201d82050debe92230b85ba79f004f25849eb95f604c611bbec184c8", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0xc000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cpuinfo\x00', 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r0, 0x20, &(0x7f0000000780)={&(0x7f0000000500)=""/191, 0xbf, 0x0, &(0x7f0000000700)=""/116, 0x74}}, 0x10) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x3, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000600)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x19) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001400000008000a00", @ANYRES32=r5, @ANYBLOB="a2ae0000"], 0x24}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) 2m5.088938823s ago: executing program 4 (id=722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)="62043c", 0x3}], 0x1}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x9, 0x9bfb, {{0x2b, 0x4, 0x2, 0x9, 0xac, 0x66, 0x0, 0xfb, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1b, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @private=0xa010102, @local, @broadcast]}, @cipso={0x86, 0x1d, 0x2, [{0x1, 0x5, "0f6070"}, {0x1, 0x5, '.?\a'}, {0x5, 0xa, "27cd4f41801f73e3"}, {0x5, 0x3, "ff"}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x5, [{@private=0xa010101, 0x4}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@local, 0x7}, {@multicast1, 0x609929f6}, {@private=0xa010101, 0x5}]}, @lsrr={0x83, 0x27, 0xc2, [@local, @broadcast, @private=0xa010102, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0xca, 0x1, 0x10, @loopback, @mcast1, 0x7, 0x1, 0x7ff, 0x9}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r8, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x0) listen(r7, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 2m4.97290447s ago: executing program 33 (id=722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)="62043c", 0x3}], 0x1}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x9, 0x9bfb, {{0x2b, 0x4, 0x2, 0x9, 0xac, 0x66, 0x0, 0xfb, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1b, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @private=0xa010102, @local, @broadcast]}, @cipso={0x86, 0x1d, 0x2, [{0x1, 0x5, "0f6070"}, {0x1, 0x5, '.?\a'}, {0x5, 0xa, "27cd4f41801f73e3"}, {0x5, 0x3, "ff"}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x5, [{@private=0xa010101, 0x4}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@local, 0x7}, {@multicast1, 0x609929f6}, {@private=0xa010101, 0x5}]}, @lsrr={0x83, 0x27, 0xc2, [@local, @broadcast, @private=0xa010102, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0xca, 0x1, 0x10, @loopback, @mcast1, 0x7, 0x1, 0x7ff, 0x9}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r8, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x0) listen(r7, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 2m2.463706217s ago: executing program 34 (id=663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 4.938885041s ago: executing program 3 (id=1316): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000240)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@private1, 0x0}, &(0x7f00000000c0)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0xc, @void}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty=0x1000000}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x24080040}, 0x24000000) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='TH', 0x2) write$FUSE_STATX(r5, &(0x7f0000000340)={0x130, 0xfffffffffffffffe, 0x0, {0x7e40, 0x0, 0x0, '\x00', {0x40, 0x3ff, 0x4621d334, 0x3, 0xee00, 0x0, 0xc000, '\x00', 0x80000000, 0x40, 0x0, 0x8, {0x4be, 0x6}, {0xac0f, 0x5}, {0x8, 0x3}, {0x3, 0x5}, 0x200, 0xd, 0x3, 0x3}}}, 0xe) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracefs/instances/foo/events/mygroup/myevent/enable\x00', 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 4.519638304s ago: executing program 3 (id=1321): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) mprotect(&(0x7f000026f000/0x3000)=nil, 0x3000, 0x200000c) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="00000000090244000000000000000000204000000000100000000001", 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffcf2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$binfmt_misc(r3, &(0x7f00000000c0)="2d50f5451f", 0x5) 4.407558856s ago: executing program 3 (id=1324): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000003340)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000002f40)="d37bc3c934a3b68a830e58975f340b2659f84503aac0aabb0e907533c0788fe9e24f2ffe5bb6bf69c2432762afe76e02f2a13ecb85a82a9476c304dad045f5da256611595359d15bae6c9aa83e5709b5e445873726cb25fa43fb778e2cfc13eb8952ecf25bafe8fbd8992f9c32cd38f4ede71e110973fe86", 0x78, 0x0, 0x0, 0x3}]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='bfs\x00', 0x2208004, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010829bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e2002000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x4, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e00000006000000630000007367000004000100", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300030025000000000b0000000000000000", @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000005000000060000000600000019c80600", @ANYRES32=r5, @ANYBLOB="06000000000000000000000000e9000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$kvm(0xffffffffffffff9c, 0x0, 0x8ab43, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r7 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg$unix(r8, &(0x7f0000003480)=[{{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/60, 0x3c}, {&(0x7f0000001500)=""/168, 0xa8}], 0x3}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000002740)=[{&(0x7f0000001680)=""/171, 0xab}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2, &(0x7f0000002780)=[@cred={{0x18}}, @cred={{0x18}}], 0x30}}, {{&(0x7f00000027c0), 0x6e, &(0x7f0000002900)=[{&(0x7f0000002840)=""/78, 0x4e}, {&(0x7f00000028c0)=""/29, 0x1d}], 0x2}}, {{&(0x7f0000002940)=@abs, 0x6e, &(0x7f0000002b00)=[{&(0x7f00000029c0)=""/230, 0xe6}, {&(0x7f0000002ac0)=""/49, 0x31}], 0x2, &(0x7f0000002b40)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x74}}, {{&(0x7f0000002bc0), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002c40)=""/73, 0x49}, {&(0x7f0000002cc0)=""/102, 0x66}, {&(0x7f0000002d40)=""/68, 0x44}], 0x3, &(0x7f0000002e00)=[@cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x108}}, {{&(0x7f00000031c0), 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003240)=""/227, 0xe3}, {&(0x7f0000003340)}], 0x2, &(0x7f0000003400)}}], 0x6, 0x2061, &(0x7f00000035c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="dfeb010018000000000000000c0000000c000000020000000000000000000013040000000000"], 0x0, 0x26}, 0x20) 4.157970831s ago: executing program 6 (id=1327): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$full(0xffffff9c, &(0x7f0000000140), 0x214000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xbdf7, 0x3, 0xa19, 0x0, 0x5ba, 0x0, 0x7580}, 0x1c) (async) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xbdf7, 0x3, 0xa19, 0x0, 0x5ba, 0x0, 0x7580}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r4, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) socket(0x1e, 0x4, 0x0) (async) socket(0x1e, 0x4, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x11700}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d010}, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x12a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast2, 0x0, "01ceaac82ab7d944e84b6fb4c020d47e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x3, 0x4}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast2, 0x0, "01ceaac82ab7d944e84b6fb4c020d47e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x3, 0x4}, 0x3c) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x11) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r7, 0x8949, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r7, 0x8949, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0xc3) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0xc3) 3.746988879s ago: executing program 6 (id=1329): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000180)=0x12) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000080)=0xd0) socket$nl_route(0x10, 0x3, 0x0) 3.746643562s ago: executing program 6 (id=1331): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x8, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r3, 0x110, 0x5, 0x0, 0xfffffe91) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000180)={0x10, 0xfffffff5, 0x3}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000238000/0x2000)=nil, 0x2000, 0x19) lseek(r5, 0x2004, 0x0) 3.746454576s ago: executing program 1 (id=1332): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) mprotect(&(0x7f000026f000/0x3000)=nil, 0x3000, 0x200000c) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="00000000090244000000000000000000204000000000100000000001", 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffcf2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$binfmt_misc(r3, &(0x7f00000000c0)="2d50f5451f", 0x5) 3.619272829s ago: executing program 1 (id=1333): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_flash={0x33, 0x8007, './file0/../file0/file0\x00'}}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000010300800c0001"], 0x314}], 0x1}, 0x800) 3.218943504s ago: executing program 6 (id=1334): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000002000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r5 = io_uring_setup(0x7336, &(0x7f0000000140)={0x0, 0x7bfc, 0x40000, 0x7ffffffe, 0xab, 0x0, r3}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r9, 0x9}, 0x8) r10 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r6, &(0x7f0000000000)={0x80000000}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8e74, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000026c0)=[{{&(0x7f0000002040)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000002280)=[{&(0x7f0000002080)="f8fb481e26530eae80a4", 0xa}, {&(0x7f00000020c0)="037f42aa76cf2ba8640b3deafba9c4c2ccf67ec8be72a1ed8bd734ffe4de8c8c7a7ee041b661a2b72dc37622aae8ba141c14eba65f42f96d79240a4d0b96c1", 0x3f}, {&(0x7f0000002100)="75faece7a69001eb4686fee9df6b99afd56413987a5ac915c8c45466beaedb97a6e73ab33cee00dc49f10cda4c5d95507cff9d34bcfd760d73825ba7304662de2acaa968d0e73d2f3122cff4c73064ed9f9ac5bea4ce6e59ed9a7cc2bba821f32c4fdfb76314d849e3f9bb5aa3c04deec9b01837e75ea9382f08678dea8b9d9bccdc9a5bd0069a700ba94994d93658adbcc3b35fc61c354eec", 0x99}, {0x0}, {&(0x7f0000002240)="1ff02e5a0e45789048e1b3866ae29a2c97bbeabcebce4f50bb49ff777fcb2c662e9bf32d", 0x24}], 0x5, &(0x7f0000002300)=ANY=[@ANYBLOB="400000000000000000000001440c39037f0000010000000194040100071b440a010101ac1414aa0a0101000a010100ac1e0001502f0101000000140000f7000000000000000001000000d74100000000000011000000000000000000000001f2ff000f00000000000000370000000000000000000000010000000000000000000000110000000000000000000000010000000f00000000000000140000000000000000000000020000000100000000000000100000000000000000000000070000001c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="ac1414bbac1414bb00000000"], 0xe8}}, {{&(0x7f0000002400)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000002540)=[{&(0x7f0000002440)="98e5ce976008cc5857a20162679b5510a0f65b3f559de5212a1d", 0x1a}, {&(0x7f0000002480)}, {&(0x7f00000024c0)="1733daeefa1eeffd257e1be4c967bc60ac627a53062889a575fbe9cb4d3dd42726306783485d26496947b423d725714d7867dc67ac0d8799c0", 0x39}], 0x3, &(0x7f0000002640)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xe3, 0x1, 0x4, [{@broadcast, 0xffffffff}, {@rand_addr=0x64010101, 0x4}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf}}], 0x60}}], 0x2, 0x4000) close_range(r5, 0xffffffffffffffff, 0x0) 2.659415725s ago: executing program 1 (id=1335): setrlimit(0x0, &(0x7f0000000140)={0x4, 0xfc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x3) (async) r1 = socket$netlink(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e224e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, 0x0) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='jew default trusted:syz 00000<000004096\x00'], 0x2d, 0xfffffffffffffff9) (async) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000180), &(0x7f0000000640)="540a7ccd32b48f0bb75a213f7d112d4ad52c5c6f86f5b8e5bc7324a910587bd89c54c23403f460388269276ecb538822e6cdcc53248d2fda755022b7328557f9dd8fb8dadcc6779c41dcd4db18426277223abde40af231621f386417c95a7f54dd9701925941d07e4c54e29c65caee94eef026a435f3b743cc6c83615c08f4a47472f4e0c2673f72266a22d521c5aabedf2dd54dbc9c8e2d6772e92fa1e5e05ce5c9e0efd92f279c42f9f5054e4f62a83c80e5677f84870b61c6d69bf91b530c5ea43eb6458036552a1c80a5a84ab1fc966e7b878c43f55ae536aeeae3424734e3cc049d628c", 0xe6, r3) r5 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc2c45512, &(0x7f0000000340)={{0x7}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x100000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec3e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb8fd, 0x0, 0x0, 0x0, 0xfffffd80, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x80000000, 0xff, 0x0, 0x2, 0x0, 0x2, 0xfffffffc]}) (async) keyctl$reject(0x13, r4, 0x2, 0x39, r3) (async) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='tmpfs\x00', 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1400000038002508dc9500000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044050}, 0x40010) (async) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffff0000000003000000850000002700000018010000786c6c2500000000002020765c0000ff00000000bfa109004000000007010000f8ffffffb702000008000000b70300000000000085000000060000507abe4df831161900"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b900000000dbe9abc89b2b1259", 0x0, 0xe00, 0x0, 0xfffffffffffffed6, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async) r9 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0xa) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) 2.51772559s ago: executing program 1 (id=1336): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800002c8255989180e2f8f4cf15fa8f0043000205000200000024"], 0x28}, 0x1, 0x0, 0x0, 0x10001}, 0x8000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="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", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x42583) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000270001032dbd7000fcdbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x404c0d4}, 0x0) 1.790063701s ago: executing program 5 (id=1337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x8000) (fail_nth: 6) 1.54839183s ago: executing program 5 (id=1338): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000001a3c7f"]) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b685fc0657f5a18a5202beb92193b4e8b4824bff2a0759fd4d817ead03fe1f9ee34d6ee1d113"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 1.535241276s ago: executing program 1 (id=1339): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a0850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fsopen(&(0x7f0000000000)='minix\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8004, &(0x7f0000000d40)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xf, 0x10}, [@tail_call], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() add_key(&(0x7f0000000840)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 1.339814441s ago: executing program 5 (id=1340): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000400)={0x23, 0x1, 0x2, 0x1, 0xffff, 0x3, 0x0}) 1.250101146s ago: executing program 5 (id=1341): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) mprotect(&(0x7f000026f000/0x3000)=nil, 0x3000, 0x200000c) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="00000000090244000000000000000000204000000000100000000001", 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffcf2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$binfmt_misc(r3, &(0x7f00000000c0)="2d50f5451f", 0x5) 1.007175676s ago: executing program 3 (id=1342): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getgroups(0x0, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r1, &(0x7f0000000500), 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000440)={0x6, "7973f975ca5ecc1d777a549fafbb3da4831e965cf75899b0cd90cf03718bfe6f6db40416cf1fddd007467801e8a50e168c03aeb6caf9df7127d6058129a1ffb4ec06d0c02c9d634dd7366c734f0c7e3879f045654179107f4964337161fa4b9684fcd97c11776e1f440944d1a9d27db980b35358b04b2eeb8119377031316967654225e86434ad647c93b695454b4bf8397dbe599ba9436e19c8aadfde4d0efe6b495ef548460e212c03344a6cba95494979176ed8069cff9f378dfe67d6f4850bb410b0b7fb0086945236ac49c82306a29d02c050456ec67093c9926b057518369c219c6db1e635d964a11a2697e31e7d7d0ac76fac9359dbca5466f3a9a72e9427ecf17db990477f47c2abeb2a3bfa44255bc6c8d1cc1593b22f8ebd1483ff3484d1c20a21d99dca1c5f70a08d47302ff98b0683ea45cb6d7f895e15fafb9d59284b2c620986e3102e6be7bded286ac1f5aca8860976550b639fa41c6a85fb730cb09118c1f796ff40a6b32e1aadf2cca68d114f0f48b211fe9fcdda464229c19a178ce5bcde90095b59b58adcceb0b82f32d87a5b1cac8ad4ceb270e7059eea5c71ceb818cb3ea32947951c254b6b91b7bbea07013f88c144b9d4ca0402d58db9eb230757070780d5bfdae5e2f6cf91775f997cf91022a14671f520a2ac287870cb408bdc768aa97a8eb200"}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r4, 0x230a}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000010003904000000fbdbdf250000be0000", @ANYRES32=r6, @ANYBLOB="12000000759a0400180012800b000100697036746e6c00000800028004001300"], 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4040) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000000) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f00000000c0)=0x1000004, 0x4) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x4, 0x0, 0x2}, 0x14) r9 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$CDROMEJECT_SW(r9, 0x530f, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x20000015, &(0x7f0000000100)={0xa, 0x4e27, 0x7, @loopback, 0xfffffffe}, 0xfffffffffffffe28) 1.006849129s ago: executing program 5 (id=1343): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x11, 0x16, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21}, 0x94) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x40, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x7}}, {@stats}], [{@subj_role={'subj_role', 0x3d, 'xfrm0\x00'}}, {@obj_user={'obj_user', 0x3d, '$,$}+%\\!'}}, {@obj_user}, {@fowner_gt}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x10004805, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200), 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') preadv(r7, &(0x7f00000014c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 917.629243ms ago: executing program 3 (id=1344): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_flash={0x33, 0x8007, './file0/../file0/file0\x00'}}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000010300800c0001"], 0x314}], 0x1}, 0x800) 187.770865ms ago: executing program 1 (id=1345): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000005c0)=0x40) (fail_nth: 4) 42.85527ms ago: executing program 6 (id=1346): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x20000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000300)={r4, 0x7f, {0x0, 0x0, 0x0, 0x7f, 0x197, 0x0, 0xa, 0xd, 0x4, "4a3fb9c0ddf6e9c03a1830bfd2db066bd22f0841e305636a8aeff2912a3cd3e58a4d05d272b50c71514287e6d6252800f7891c16f18dee6a35f0ecae45e0f682", "1eb48a7d43768996a2441ab6f0ec6f22fb926b0b7586f749014cbdff82deb9b66faba3343932b2b2b83b1114b0ed866f3ad9f4ac97d0482378de9710137b8e33", "88e711b4b537f2f2bf443d0177a4a5508ea69340e962745eb2b501bc0098f173", [0x1, 0x5]}}) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @broadcast, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "00de6c83d50000"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000140)="87", 0x34000, 0x20004000, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e24, 0x2, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0x5c}, {0x2000000000007, 0x2, 0x9, 0x400, 0x5, 0x8, 0xfffffffffffffff2, 0x1}, {0x7, 0xfffffffffffffd80, 0xd1, 0xf797}, 0x3, 0x0, 0x2, 0x1, 0x3, 0x2}, {{@in=@loopback, 0x4d5, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3505, 0x0, 0x0, 0x5, 0xffffffa3, 0x6, 0x4}}, 0xe4) 42.396901ms ago: executing program 6 (id=1347): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast2, 0x8, 0x80, 0x3, 0x400, 0xffffffff, 0x40500160}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6901d000) 10.574142ms ago: executing program 5 (id=1348): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x204a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x3, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb00ff858500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001700)={0x17, {"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", 0x1000}}, 0x1006) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r6 = socket$inet6(0xa, 0x3, 0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r8 = socket(0xa, 0x3, 0x3a) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x8, r10, 0x4000401}, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r11) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r11, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x2c, r12, 0x605, 0x70bd25, 0x25dfdc01, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x41840) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x54) getgid() sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r13 = socket(0x200000000000011, 0x2, 0xfffffffd) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r14, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x51, 0x5}}], 0x18}}], 0x1, 0x2a9b0a4a1e70e25c) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r13) sendmsg$NL80211_CMD_NEW_STATION(r13, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040157ccdce5ca", @ANYRES16=r15, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x40004}, 0x20000004) 0s ago: executing program 3 (id=1349): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r0 = openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x12) r1 = open_tree(r0, &(0x7f00000002c0)='./file0\x00', 0x0) recvmsg$can_j1939(r1, &(0x7f00000007c0)={&(0x7f0000000300)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000400)=""/12, 0xc}, {&(0x7f0000000440)=""/74, 0x4a}, {&(0x7f00000004c0)=""/70, 0x46}], 0x4, &(0x7f0000000680)=""/240, 0xf0}, 0x12000) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1a4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='./file0\x00', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='1\x00', 0x2) write(r4, &(0x7f0000000200)='0\x00', 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000016c0)="27031c00160014000000001106afacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c36505968f28a4894f", 0x3a}, {&(0x7f0000000200)="22ea7e01f370d458bc5f5da8f814e3ba81f4d19edcce18b75bf5034bb80875257d68b199f247eac81ab52f03e698103d9d1cf70127eda16f2c7017285d0e1b1dabc9ec2db03ed73c3145e66741edb84de748c1341f383840698a3fb95e9b1aaf2bb8cb0191e7e392db050fa06124f73d1c9276bad26884d4208acc499b17a4d62f2bbb14db3e0007478df45cff3aa28b8e92621be927ca29819deea491e2b0b1a275e2c1ac4ff8c3", 0xa8}], 0x2}, 0x8eec3816282631eb) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000000080)=@vmx={0x86, 0x0, 0x2080, {0x2000, 0x58000, {0x2}, 0x0, 0x9}, {"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", "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"}}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000180)={r1, 0x0, 0xe5, 0x0, &(0x7f0000000000)="070d2de48e2f1ee5d7a6abd624d75512c42f9ea929fe12fef49dafc28747fd255b66873401de302a70ca3642d35ee24618107293478c6b97554ea1bc473e417203ba7959d3f81d84020dd3b8e41c284ddb1aaceb2c047fd6e3ab865b3b291b1ee2f5962e65f9cfaadddcc7af01d24ef108f0ee3cce1d4b31dc0a2fc2412ab2df7c655ab24a73179821eb155e7dac5fe7cefdc42ae4792eb4ee5c50474af0a42c9c9ba4681b67dde3766f2be01ce827b7fc382c89b3495cec547e8690ee6996254c09ca315f131e18923bd9bd781ed80eb65c19207c4883926dbff6fb0ca3fbe96e35b5dea5", 0x0, 0x1, 0x0, 0x57, 0x0, &(0x7f0000000200)="60b70533be3efe1c4330af25f4bd2e8762330600000094cffbad904f70aa2db1caffb4e5eaba708288003bcbd8a1c338afe31cf6c7fe3e3bf7555430ff2e3d761fed4849731b009db0d7049300"/87, 0x0, 0x2, 0x0, 0x6}, 0x4c) syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0x5961, 0x400, 0x0, 0x3c9}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, r11, &(0x7f0000002180)=@IORING_OP_BIND=@ipv6={0x38, 0x54, 0x0, r3, 0x1c, &(0x7f0000002100)={{0xa, 0x4e22, 0x0, @remote, 0x4}}, 0x0, 0x0, 0x1, {0x0, r12}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): socket_sendmsg+0x15b/0x270 [ 264.308512][ T9934] ____sys_sendmsg+0xa4d/0xbe0 [ 264.308528][ T9934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.308548][ T9934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.308578][ T9934] ___sys_sendmsg+0x190/0x1e0 [ 264.308598][ T9934] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.308629][ T9934] ? find_held_lock+0x2b/0x80 [ 264.308661][ T9934] __sys_sendmsg+0x160/0x210 [ 264.308685][ T9934] ? __pfx___sys_sendmsg+0x10/0x10 [ 264.308715][ T9934] ? __pfx_ksys_write+0x10/0x10 [ 264.308738][ T9934] __do_fast_syscall_32+0xe7/0x970 [ 264.308762][ T9934] ? lockdep_hardirqs_on+0x78/0x100 [ 264.308784][ T9934] do_fast_syscall_32+0x32/0x70 [ 264.308808][ T9934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.308829][ T9934] RIP: 0023:0xf705efec [ 264.308849][ T9934] Code: Unable to access opcode bytes at 0xf705efc2. [ 264.308857][ T9934] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 264.308875][ T9934] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 264.308891][ T9934] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.308899][ T9934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 264.308908][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.308918][ T9934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.308940][ T9934] [ 264.589229][ T34] usb 6-1: USB disconnect, device number 28 [ 264.668792][ T5755] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 264.820725][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1030'. [ 265.146456][ T9945] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 265.166762][ T9945] netlink: 'syz.1.1029': attribute type 1 has an invalid length. [ 265.268494][ T9945] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1029'. [ 265.811952][ T9954] FAULT_INJECTION: forcing a failure. [ 265.811952][ T9954] name failslab, interval 1, probability 0, space 0, times 0 [ 265.822098][ T9954] CPU: 0 UID: 0 PID: 9954 Comm: syz.1.1033 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.822131][ T9954] Tainted: [L]=SOFTLOCKUP [ 265.822137][ T9954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 265.822147][ T9954] Call Trace: [ 265.822154][ T9954] [ 265.822161][ T9954] dump_stack_lvl+0x100/0x190 [ 265.822190][ T9954] should_fail_ex.cold+0x5/0xa [ 265.822212][ T9954] should_failslab+0xc2/0x120 [ 265.822237][ T9954] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 265.822260][ T9954] ? __alloc_skb+0x5b7/0x710 [ 265.822285][ T9954] ? __alloc_skb+0x140/0x710 [ 265.822312][ T9954] __alloc_skb+0x140/0x710 [ 265.822333][ T9954] ? __alloc_skb+0x5b7/0x710 [ 265.822355][ T9954] ? __pfx___alloc_skb+0x10/0x10 [ 265.822380][ T9954] ? __nla_parse+0x40/0x60 [ 265.822407][ T9954] ip6mr_rtm_getroute+0x401/0xcd0 [ 265.822456][ T9954] ? __pfx_ip6mr_rtm_getroute+0x10/0x10 [ 265.822483][ T9954] ? lockdep_hardirqs_on+0x78/0x100 [ 265.822511][ T9954] ? kfree_skbmem+0x19a/0x210 [ 265.822528][ T9954] ? kmem_cache_free+0x127/0x6b0 [ 265.822568][ T9954] ? find_held_lock+0x2b/0x80 [ 265.822589][ T9954] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 265.822616][ T9954] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 265.822646][ T9954] ? __pfx_ip6mr_rtm_getroute+0x10/0x10 [ 265.822671][ T9954] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 265.822694][ T9954] rtnetlink_rcv_msg+0x95e/0xe90 [ 265.822724][ T9954] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.822756][ T9954] ? ref_tracker_free+0x37e/0x6c0 [ 265.822779][ T9954] netlink_rcv_skb+0x159/0x420 [ 265.822797][ T9954] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.822820][ T9954] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.822843][ T9954] ? netlink_deliver_tap+0x1ae/0xcc0 [ 265.822861][ T9954] netlink_unicast+0x585/0x850 [ 265.822880][ T9954] ? __pfx_netlink_unicast+0x10/0x10 [ 265.822895][ T9954] ? __build_skb_around+0x278/0x390 [ 265.822912][ T9954] ? is_vmalloc_addr+0x86/0xa0 [ 265.822930][ T9954] netlink_sendmsg+0x8b0/0xda0 [ 265.822949][ T9954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.822968][ T9954] ? apparmor_socket_sendmsg+0x15b/0x270 [ 265.822994][ T9954] sock_write_iter+0x53a/0x5b0 [ 265.823009][ T9954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.823025][ T9954] ? __pfx_sock_write_iter+0x10/0x10 [ 265.823045][ T9954] ? bpf_lsm_file_permission+0x9/0x10 [ 265.823059][ T9954] ? security_file_permission+0x76/0x210 [ 265.823084][ T9954] ? rw_verify_area+0xce/0x6d0 [ 265.823108][ T9954] vfs_write+0x6ac/0x1050 [ 265.823122][ T9954] ? __pfx_sock_write_iter+0x10/0x10 [ 265.823139][ T9954] ? __pfx_vfs_write+0x10/0x10 [ 265.823151][ T9954] ? find_held_lock+0x2b/0x80 [ 265.823179][ T9954] ksys_write+0x1f8/0x250 [ 265.823192][ T9954] ? __pfx_ksys_write+0x10/0x10 [ 265.823204][ T9954] ? ksys_write+0x1ac/0x250 [ 265.823217][ T9954] ? __pfx_ksys_write+0x10/0x10 [ 265.823234][ T9954] __do_fast_syscall_32+0xe7/0x970 [ 265.823253][ T9954] ? lockdep_hardirqs_on+0x78/0x100 [ 265.823273][ T9954] do_fast_syscall_32+0x32/0x70 [ 265.823292][ T9954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.823310][ T9954] RIP: 0023:0xf7f48fec [ 265.823327][ T9954] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 265.823334][ T9954] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 265.823349][ T9954] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 265.823358][ T9954] RDX: 000000000000fe33 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.823366][ T9954] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.823374][ T9954] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 265.823382][ T9954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.823402][ T9954] [ 265.911039][ T6194] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 265.961580][ T9958] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 265.990400][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 265.990418][ T42] audit: type=1800 audit(1785906966.337:413): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 266.107474][ T42] audit: type=1800 audit(1785906966.467:414): pid=9966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1037" name="file0" dev="tmpfs" ino=1644 res=0 errno=0 [ 266.167441][ T56] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 266.327031][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 266.332248][ T56] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.337814][ T56] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 266.340733][ T56] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 266.345570][ T56] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 266.348648][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.351215][ T56] usb 8-1: Product: syz [ 266.352595][ T56] usb 8-1: Manufacturer: syz [ 266.354172][ T56] usb 8-1: SerialNumber: syz [ 266.361236][ T42] audit: type=1800 audit(1785906966.717:415): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332419 res=0 errno=0 [ 266.381929][ T42] audit: type=1800 audit(1785906966.717:416): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=332451 res=0 errno=0 [ 266.390022][ T42] audit: type=1800 audit(1785906966.717:417): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=332426 res=0 errno=0 [ 266.407087][ T42] audit: type=1800 audit(1785906966.717:418): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=332427 res=0 errno=0 [ 266.458109][ T42] audit: type=1800 audit(1785906966.817:419): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 266.486625][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1038'. [ 266.543194][ T42] audit: type=1800 audit(1785906966.897:420): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 266.595141][ T42] audit: type=1800 audit(1785906966.947:421): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 267.033918][ T42] audit: type=1800 audit(1785906967.387:422): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 267.188521][ T9983] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 267.211207][ T9983] netlink: 'syz.1.1041': attribute type 1 has an invalid length. [ 267.221545][ T9983] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1041'. [ 267.260313][ T9958] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 267.290961][ T56] usb 8-1: 1:1: cannot get freq (v2/v3): err -71 [ 267.296604][ T56] usb 8-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 267.346489][ T56] usb 8-1: USB disconnect, device number 36 [ 267.437282][ T5835] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 267.466472][ T7579] udevd[7579]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.589435][ T5835] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 267.595121][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 267.603728][ T5835] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.608697][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 267.612924][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 267.619592][ T5835] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 267.622173][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 267.629161][ T5835] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.633588][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 267.638841][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 267.643569][ T5835] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 267.646093][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 267.650726][ T5835] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.655215][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 267.659167][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 267.669442][ T5835] usb 11-1: string descriptor 0 read error: -22 [ 267.672920][ T5835] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 267.676683][ T5835] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.760198][ T5835] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 268.038339][ T9991] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1046'. [ 268.042195][ T9991] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1046'. [ 268.319399][ T9993] FAULT_INJECTION: forcing a failure. [ 268.319399][ T9993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.337067][ T9993] CPU: 2 UID: 0 PID: 9993 Comm: syz.1.1045 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.337100][ T9993] Tainted: [L]=SOFTLOCKUP [ 268.337108][ T9993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 268.337119][ T9993] Call Trace: [ 268.337125][ T9993] [ 268.337131][ T9993] dump_stack_lvl+0x100/0x190 [ 268.337163][ T9993] should_fail_ex.cold+0x5/0xa [ 268.337188][ T9993] _copy_to_user+0x32/0xd0 [ 268.337220][ T9993] simple_read_from_buffer+0xcb/0x170 [ 268.337269][ T9993] proc_fail_nth_read+0x1af/0x230 [ 268.337299][ T9993] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.337326][ T9993] ? rw_verify_area+0xce/0x6d0 [ 268.337353][ T9993] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.337376][ T9993] vfs_read+0x1e4/0xb40 [ 268.337397][ T9993] ? __pfx_vfs_read+0x10/0x10 [ 268.337411][ T9993] ? find_held_lock+0x2b/0x80 [ 268.337436][ T9993] ? __fget_files+0x215/0x3d0 [ 268.337458][ T9993] ? __fget_files+0x21f/0x3d0 [ 268.337482][ T9993] ksys_read+0x12a/0x250 [ 268.337499][ T9993] ? __pfx_ksys_read+0x10/0x10 [ 268.337523][ T9993] do_int80_emulation+0x14b/0x720 [ 268.337555][ T9993] asm_int80_emulation+0x1a/0x20 [ 268.337573][ T9993] RIP: 0023:0xf71473eb [ 268.337589][ T9993] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 268.337605][ T9993] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 268.337625][ T9993] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f54065d0 [ 268.337638][ T9993] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 268.337648][ T9993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.337656][ T9993] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 268.337666][ T9993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.337691][ T9993] [ 268.772592][T10001] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1049'. [ 268.810755][T10001] gretap0: entered promiscuous mode [ 268.839185][T10001] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1049'. [ 268.843094][T10001] 0{X: renamed from gretap0 [ 268.848673][T10001] 0{X: left promiscuous mode [ 268.853499][T10001] 0{X: entered allmulticast mode [ 268.859723][T10001] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 269.006094][T10007] fuse: fd is not a fuse device [ 270.053978][T10017] netdevsim netdevsim5: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 270.063040][T10017] netlink: 'syz.5.1053': attribute type 1 has an invalid length. [ 270.067881][T10017] netlink: 756 bytes leftover after parsing attributes in process `syz.5.1053'. [ 270.581747][T10034] FAULT_INJECTION: forcing a failure. [ 270.581747][T10034] name failslab, interval 1, probability 0, space 0, times 0 [ 270.585589][T10034] CPU: 2 UID: 0 PID: 10034 Comm: syz.1.1059 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.585608][T10034] Tainted: [L]=SOFTLOCKUP [ 270.585612][T10034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 270.585618][T10034] Call Trace: [ 270.585623][T10034] [ 270.585627][T10034] dump_stack_lvl+0x100/0x190 [ 270.585647][T10034] should_fail_ex.cold+0x5/0xa [ 270.585661][T10034] should_failslab+0xc2/0x120 [ 270.585678][T10034] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 270.585694][T10034] ? __lock_acquire+0x49f/0x1a40 [ 270.585712][T10034] ? kstrdup_const+0x63/0x80 [ 270.585730][T10034] kstrdup+0x51/0xe0 [ 270.585743][T10034] kstrdup_const+0x63/0x80 [ 270.585756][T10034] __kernfs_new_node+0x9b/0xa10 [ 270.585771][T10034] ? __pfx___kernfs_new_node+0x10/0x10 [ 270.585786][T10034] ? find_held_lock+0x2b/0x80 [ 270.585799][T10034] ? kernfs_root+0xee/0x2a0 [ 270.585815][T10034] ? kernfs_root+0xee/0x2a0 [ 270.585835][T10034] kernfs_new_node+0x117/0x150 [ 270.585849][T10034] kernfs_create_link+0xcc/0x240 [ 270.585865][T10034] sysfs_do_create_link_sd+0x90/0x140 [ 270.585883][T10034] sysfs_create_link+0x61/0xc0 [ 270.585900][T10034] driver_sysfs_add+0x91/0x2d0 [ 270.585948][T10034] really_probe+0x146/0xa60 [ 270.585966][T10034] __driver_probe_device+0x20e/0x450 [ 270.585982][T10034] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 270.586001][T10034] driver_probe_device+0x4a/0x140 [ 270.586018][T10034] __driver_attach+0x21f/0x5b0 [ 270.586035][T10034] ? __pfx___driver_attach+0x10/0x10 [ 270.586062][T10034] bus_for_each_dev+0x13e/0x1d0 [ 270.586082][T10034] ? __pfx_bus_for_each_dev+0x10/0x10 [ 270.586094][T10034] ? bus_add_driver+0x2b5/0x5b0 [ 270.586112][T10034] bus_add_driver+0x305/0x5b0 [ 270.586128][T10034] driver_register+0x1e2/0x360 [ 270.586147][T10034] usb_gadget_register_driver_owner+0x132/0x210 [ 270.586185][T10034] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 270.586204][T10034] configfs_write_iter+0x302/0x4e0 [ 270.586217][T10034] vfs_write+0x6ac/0x1050 [ 270.586229][T10034] ? __pfx_configfs_write_iter+0x10/0x10 [ 270.586241][T10034] ? __pfx_vfs_write+0x10/0x10 [ 270.586251][T10034] ? find_held_lock+0x2b/0x80 [ 270.586274][T10034] ksys_write+0x12a/0x250 [ 270.586284][T10034] ? __pfx_ksys_write+0x10/0x10 [ 270.586294][T10034] ? ksys_write+0x1ac/0x250 [ 270.586304][T10034] ? __pfx_ksys_write+0x10/0x10 [ 270.586317][T10034] __do_fast_syscall_32+0xe7/0x970 [ 270.586334][T10034] ? lockdep_hardirqs_on+0x78/0x100 [ 270.586350][T10034] do_fast_syscall_32+0x32/0x70 [ 270.586366][T10034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 270.586381][T10034] RIP: 0023:0xf7f48fec [ 270.586394][T10034] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 270.586403][T10034] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 270.586414][T10034] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000640 [ 270.586421][T10034] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 270.586427][T10034] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.586434][T10034] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 270.586440][T10034] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.586454][T10034] [ 270.586463][T10034] configfs-gadget.g1 gadget.32: really_probe: driver_sysfs_add failed [ 270.701508][T10034] UDC core: g1: couldn't find an available UDC or it's busy [ 270.896427][ T1170] Bluetooth: hci3: Frame reassembly failed (-84) [ 270.901880][T10041] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 270.925886][ T1170] Bluetooth: hci3: Frame reassembly failed (-84) [ 271.227811][ T5583] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 271.267116][ T5893] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 271.377076][ T5583] usb 8-1: Using ep0 maxpacket: 8 [ 271.381220][ T5583] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.385265][ T5583] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.389501][ T5583] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.393554][ T5583] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.399575][ T5583] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.402772][ T5583] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.408184][ T42] kauditd_printk_skb: 43 callbacks suppressed [ 271.408198][ T42] audit: type=1800 audit(1785906971.767:466): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332903 res=0 errno=0 [ 271.417167][ T5893] usb 10-1: Using ep0 maxpacket: 8 [ 271.419385][ T42] audit: type=1800 audit(1785906971.767:467): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=332932 res=0 errno=0 [ 271.423104][ T5893] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 271.426782][ T42] audit: type=1800 audit(1785906971.767:468): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=332910 res=0 errno=0 [ 271.430357][ T5893] usb 10-1: config 0 has no interface number 0 [ 271.437441][ T42] audit: type=1800 audit(1785906971.767:469): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=332911 res=0 errno=0 [ 271.438938][ T5893] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 271.445024][ T42] audit: type=1800 audit(1785906971.767:470): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=332912 res=0 errno=0 [ 271.448383][ T5893] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 271.448400][ T5893] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 66, changing to 10 [ 271.448413][ T5893] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 24952, setting to 1024 [ 271.448427][ T5893] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 271.454520][ T42] audit: type=1800 audit(1785906971.767:471): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332952 res=0 errno=0 [ 271.458189][ T5893] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 271.477749][ T5835] usb 11-1: USB disconnect, device number 6 [ 271.478917][ T5893] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.492464][ T5893] usb 10-1: config 0 descriptor?? [ 271.494564][ T42] audit: type=1800 audit(1785906971.847:472): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332968 res=0 errno=0 [ 271.497835][ T5893] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 271.506121][ T42] audit: type=1800 audit(1785906971.847:473): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=332997 res=0 errno=0 [ 271.519320][ T42] audit: type=1800 audit(1785906971.857:474): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=332975 res=0 errno=0 [ 271.529048][ T42] audit: type=1800 audit(1785906971.857:475): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=332976 res=0 errno=0 [ 271.612950][ T5583] usb 8-1: GET_CAPABILITIES returned 0 [ 271.619010][ T5583] usbtmc 8-1:16.0: can't read capabilities [ 271.756486][ T6627] usb 10-1: USB disconnect, device number 13 [ 271.756577][ C0] ldusb 10-1:0.55: usb_submit_urb failed (-19) [ 271.762277][ T6627] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 271.812935][ T5916] usb 8-1: USB disconnect, device number 37 [ 271.882115][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1067'. [ 271.949398][T10060] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 271.970921][T10060] kvm: pic: non byte read [ 272.918667][ T5755] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 272.919022][ T64] Bluetooth: hci3: command 0x1003 tx timeout [ 273.287181][ T5835] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 273.438991][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'. [ 273.462960][ T5835] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 273.466334][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 273.471545][ T5835] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.475766][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 273.479846][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 273.484335][ T5835] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 273.486638][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 273.490357][ T5835] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.493992][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 273.497950][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 273.502390][ T5835] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 273.504878][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 273.508628][ T5835] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.512326][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 273.515857][ T5835] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 273.522256][ T5835] usb 11-1: string descriptor 0 read error: -22 [ 273.524458][ T5835] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 273.527581][ T5835] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.540461][ T5835] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 274.178987][T10107] process 'syz.3.1083' launched './file2' with NULL argv: empty string added [ 275.721299][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1087'. [ 276.197690][ T34] usb 11-1: USB disconnect, device number 7 [ 276.417067][ T5857] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 276.458204][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 276.458242][ T42] audit: type=1800 audit(1785906976.817:520): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 276.499361][ T42] audit: type=1800 audit(1785906976.857:521): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 276.547571][ T5857] usb 6-1: device descriptor read/64, error -71 [ 276.590934][ T42] audit: type=1800 audit(1785906976.947:522): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 276.598890][T10151] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1099'. [ 276.604756][T10151] gretap0: entered promiscuous mode [ 276.619907][T10151] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1099'. [ 276.622878][T10151] 0{X: renamed from gretap0 [ 276.626003][T10151] 0{X: left promiscuous mode [ 276.627800][T10151] 0{X: entered allmulticast mode [ 276.630818][T10151] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 276.637986][ T42] audit: type=1800 audit(1785906976.997:523): pid=10151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1099" name="profiling" dev="sysfs" ino=13 res=0 errno=0 [ 276.668487][ T42] audit: type=1800 audit(1785906977.027:524): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 276.807772][ T5857] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 276.846409][ T42] audit: type=1800 audit(1785906977.197:525): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 276.908793][T10155] netdevsim netdevsim6: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 276.967016][ T5857] usb 6-1: device descriptor read/64, error -71 [ 277.077495][ T5857] usb usb6-port1: attempt power cycle [ 277.138493][ T42] audit: type=1800 audit(1785906977.497:526): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 277.429490][ T5857] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 277.434975][ T42] audit: type=1800 audit(1785906977.787:527): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 277.478168][ T5857] usb 6-1: device descriptor read/8, error -71 [ 277.551513][T10161] netdevsim netdevsim3: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 277.610949][T10164] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1103'. [ 277.717037][ T5857] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 277.737554][ T5857] usb 6-1: device descriptor read/8, error -71 [ 277.848600][ T5857] usb usb6-port1: unable to enumerate USB device [ 277.964542][ T42] audit: type=1800 audit(1785906978.307:528): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 278.107943][ T42] audit: type=1800 audit(1785906978.427:529): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 278.287072][ T5857] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 278.327113][ T5893] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 278.327387][ T48] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 278.341544][T10167] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 278.364743][T10173] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1106'. [ 278.369473][T10173] 1{X: entered promiscuous mode [ 278.371175][T10173] 1{X: left allmulticast mode [ 278.405885][T10173] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1106'. [ 278.408944][T10173] 0{X: renamed from 31{X [ 278.411672][T10173] 0{X: left promiscuous mode [ 278.413387][T10173] 0{X: entered allmulticast mode [ 278.416312][T10173] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 278.457067][ T5857] usb 11-1: Using ep0 maxpacket: 8 [ 278.471968][ T5857] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.478853][ T5857] usb 11-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 278.482467][ T5857] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 278.487442][ T5893] usb 8-1: Using ep0 maxpacket: 8 [ 278.488608][ T5857] usb 11-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 278.492646][ T5857] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.493346][ T5893] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 278.495271][ T5857] usb 11-1: Product: syz [ 278.498956][ T5893] usb 8-1: config 0 has no interface number 0 [ 278.500391][ T5857] usb 11-1: Manufacturer: syz [ 278.502549][ T5893] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 278.504172][ T5857] usb 11-1: SerialNumber: syz [ 278.509190][ T5893] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 278.514764][ T5893] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 66, changing to 10 [ 278.519129][ T5893] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 24952, setting to 1024 [ 278.523828][ T5893] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 278.528821][ T5893] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 278.532291][ T5893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.537749][ T5893] usb 8-1: config 0 descriptor?? [ 278.548585][ T5893] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 278.747086][ T5851] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 278.807026][ T5893] usb 8-1: USB disconnect, device number 38 [ 278.813682][ T5893] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 278.897040][ T5851] usb 10-1: Using ep0 maxpacket: 8 [ 278.901065][ T5851] usb 10-1: config 16 has an invalid descriptor of length 113, skipping remainder of the config [ 278.905148][ T5851] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.910466][ T5851] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.914180][ T5851] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.922195][ T5851] usbtmc 10-1:16.0: bulk endpoints not found [ 279.169890][T10181] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1109'. [ 279.174768][T10181] 1{X: entered promiscuous mode [ 279.176514][T10181] 1{X: left allmulticast mode [ 279.195267][T10181] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1109'. [ 279.200092][T10181] 0{X: renamed from 31{X [ 279.203589][T10181] 0{X: left promiscuous mode [ 279.205286][T10181] 0{X: entered allmulticast mode [ 279.208391][T10181] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 279.405028][T10189] netdevsim netdevsim3: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 279.410532][T10189] netlink: 'syz.3.1112': attribute type 1 has an invalid length. [ 279.413068][T10189] netlink: 756 bytes leftover after parsing attributes in process `syz.3.1112'. [ 279.469371][T10192] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1113'. [ 279.471131][ T5857] usb 11-1: 1:1: cannot get freq (v2/v3): err -71 [ 279.480666][T10192] 0{X: entered promiscuous mode [ 279.482439][T10192] 0{X: left allmulticast mode [ 279.524878][T10192] 1{X: renamed from 30{X [ 279.528498][T10192] 1{X: left promiscuous mode [ 279.530224][T10192] 1{X: entered allmulticast mode [ 279.533075][T10192] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 280.114737][ T5857] usb 11-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 280.417356][ T5857] usb 11-1: USB disconnect, device number 8 [ 280.468082][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.071069][T10195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.137090][ T34] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 281.287319][ T34] usb 6-1: device descriptor read/64, error -71 [ 281.508945][ T5893] usb 10-1: USB disconnect, device number 14 [ 281.542207][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 281.542219][ T42] audit: type=1800 audit(1785906981.897:568): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 281.557144][ T34] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 281.649044][ T42] audit: type=1800 audit(1785906981.997:569): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 281.678418][ T42] audit: type=1800 audit(1785906982.027:570): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 281.687065][ T34] usb 6-1: device descriptor read/64, error -71 [ 281.689474][T10216] netlink: 'syz.6.1120': attribute type 1 has an invalid length. [ 281.714991][T10216] bond1: entered promiscuous mode [ 281.720069][T10216] bond1: entered allmulticast mode [ 281.722659][T10216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.752075][ T42] audit: type=1800 audit(1785906982.107:571): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 281.807336][ T34] usb usb6-port1: attempt power cycle [ 281.838117][T10223] netdevsim netdevsim6: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 281.846049][T10223] netlink: 'syz.6.1121': attribute type 1 has an invalid length. [ 281.850679][T10223] __nla_validate_parse: 2 callbacks suppressed [ 281.850696][T10223] netlink: 756 bytes leftover after parsing attributes in process `syz.6.1121'. [ 281.857197][ T42] audit: type=1800 audit(1785906982.207:572): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16781 res=0 errno=0 [ 281.949723][ T42] audit: type=1800 audit(1785906982.307:573): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 282.044062][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1118'. [ 282.177059][ T34] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 282.207572][ T34] usb 6-1: device descriptor read/8, error -71 [ 282.236555][ T42] audit: type=1800 audit(1785906982.587:574): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 282.457303][ T34] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 282.487833][ T34] usb 6-1: device descriptor read/8, error -71 [ 282.540875][ T42] audit: type=1800 audit(1785906982.897:575): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 282.590120][ T42] audit: type=1800 audit(1785906982.947:576): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 282.597787][ T34] usb usb6-port1: unable to enumerate USB device [ 282.789228][T10241] ptrace attach of ""[10242] was attempted by "/syz-executor exec"[10241] [ 282.997642][ T5835] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 283.127503][ T34] usb 11-1: new full-speed USB device number 9 using dummy_hcd [ 283.312524][ T34] usb 11-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 283.326909][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.338402][ T34] usb 11-1: Product: syz [ 283.340351][ T34] usb 11-1: Manufacturer: syz [ 283.349658][ T34] usb 11-1: SerialNumber: syz [ 283.373438][ T42] audit: type=1800 audit(1785906983.727:577): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=334162 res=0 errno=0 [ 284.087686][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1127'. [ 284.176431][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1127'. [ 284.380846][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1127'. [ 284.444682][T10273] FAULT_INJECTION: forcing a failure. [ 284.444682][T10273] name failslab, interval 1, probability 0, space 0, times 0 [ 284.458253][T10273] CPU: 2 UID: 0 PID: 10273 Comm: syz.5.1129 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.458276][T10273] Tainted: [L]=SOFTLOCKUP [ 284.458280][T10273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.458286][T10273] Call Trace: [ 284.458290][T10273] [ 284.458295][T10273] dump_stack_lvl+0x100/0x190 [ 284.458315][T10273] should_fail_ex.cold+0x5/0xa [ 284.458329][T10273] should_failslab+0xc2/0x120 [ 284.458347][T10273] __kmalloc_noprof+0xfc/0x820 [ 284.458361][T10273] ? tomoyo_encode2+0xfb/0x3c0 [ 284.458382][T10273] tomoyo_encode2+0xfb/0x3c0 [ 284.458401][T10273] tomoyo_encode+0x29/0x50 [ 284.458417][T10273] tomoyo_realpath_from_path+0x18c/0x690 [ 284.458440][T10273] tomoyo_path_number_perm+0x23c/0x580 [ 284.458456][T10273] ? tomoyo_path_number_perm+0x22e/0x580 [ 284.458471][T10273] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 284.458486][T10273] ? get_pid_task+0x106/0x250 [ 284.458514][T10273] ? find_held_lock+0x2b/0x80 [ 284.458528][T10273] ? __fget_files+0x215/0x3d0 [ 284.458539][T10273] ? hook_file_ioctl_common+0x140/0x440 [ 284.458554][T10273] ? __fget_files+0x215/0x3d0 [ 284.458566][T10273] ? __fget_files+0x21f/0x3d0 [ 284.458578][T10273] security_file_ioctl_compat+0xd3/0x230 [ 284.458594][T10273] __ia32_compat_sys_ioctl+0xc2/0x360 [ 284.458613][T10273] __do_fast_syscall_32+0xe7/0x970 [ 284.458631][T10273] ? lockdep_hardirqs_on+0x78/0x100 [ 284.458651][T10273] do_fast_syscall_32+0x32/0x70 [ 284.458672][T10273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 284.458691][T10273] RIP: 0023:0xf702efec [ 284.458710][T10273] Code: Unable to access opcode bytes at 0xf702efc2. [ 284.458717][T10273] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 284.458747][T10273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080406409 [ 284.458754][T10273] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.458761][T10273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 284.458767][T10273] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 284.458773][T10273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 284.458788][T10273] [ 284.461404][T10273] ERROR: Out of memory at tomoyo_realpath_from_path. [ 285.352892][T10294] cgroup: release_agent respecified [ 285.357540][T10294] random: crng reseeded on system resumption [ 285.772048][ T34] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 285.811779][ T34] usb 11-1: USB disconnect, device number 9 [ 285.829307][ T34] usblp0: removed [ 285.887710][T10301] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1135'. [ 285.944272][T10301] 0{X: entered promiscuous mode [ 285.949236][T10301] 0{X: left allmulticast mode [ 285.969613][T10301] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1135'. [ 285.973404][T10301] 1{X: renamed from 30{X [ 285.977666][T10301] 1{X: left promiscuous mode [ 285.979778][T10301] 1{X: entered allmulticast mode [ 285.983819][T10301] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 286.157097][ T56] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 286.287732][ T56] usb 8-1: device descriptor read/64, error -71 [ 286.297076][ T5835] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 286.459013][ T5835] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 286.462533][ T5835] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 286.466182][ T5835] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 286.469873][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.484810][ T5835] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 286.496231][ T5835] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 286.537027][ T56] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 286.667131][ T56] usb 8-1: device descriptor read/64, error -71 [ 286.759659][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 286.759678][ T42] audit: type=1800 audit(1785906987.107:616): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 286.777687][ T56] usb usb8-port1: attempt power cycle [ 286.810569][ T34] usb 6-1: USB disconnect, device number 37 [ 286.839065][ T34] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 286.846078][ T34] spcp8x5 6-1:1.0: device disconnected [ 287.030499][ T42] audit: type=1800 audit(1785906987.387:617): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 287.094659][ T42] audit: type=1800 audit(1785906987.447:618): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 287.139496][ T56] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 287.161205][ T56] usb 8-1: device descriptor read/8, error -71 [ 287.380122][T10321] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 287.696465][ T42] audit: type=1800 audit(1785906988.047:619): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 287.747024][ T56] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 287.767498][ T56] usb 8-1: device descriptor read/8, error -71 [ 287.858765][ T42] audit: type=1800 audit(1785906988.217:620): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 287.889503][ T56] usb usb8-port1: unable to enumerate USB device [ 287.905003][ T42] audit: type=1800 audit(1785906988.257:621): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 287.996610][ T42] audit: type=1800 audit(1785906988.347:622): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 288.025957][ T42] audit: type=1800 audit(1785906988.377:623): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 288.085742][ T42] audit: type=1800 audit(1785906988.437:624): pid=10338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1146" name="bus" dev="tmpfs" ino=568 res=0 errno=0 [ 288.107443][ T42] audit: type=1800 audit(1785906988.457:625): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 288.966195][T10358] C: renamed from veth1_to_team (while UP) [ 288.975253][T10358] netlink: 'syz.3.1152': attribute type 2 has an invalid length. [ 288.979950][T10358] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1152'. [ 288.983910][T10358] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 289.215801][T10369] FAULT_INJECTION: forcing a failure. [ 289.215801][T10369] name failslab, interval 1, probability 0, space 0, times 0 [ 289.220929][T10369] CPU: 2 UID: 0 PID: 10369 Comm: syz.6.1155 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.220958][T10369] Tainted: [L]=SOFTLOCKUP [ 289.220964][T10369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 289.220974][T10369] Call Trace: [ 289.220981][T10369] [ 289.220988][T10369] dump_stack_lvl+0x100/0x190 [ 289.221018][T10369] should_fail_ex.cold+0x5/0xa [ 289.221040][T10369] should_failslab+0xc2/0x120 [ 289.221066][T10369] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 289.221091][T10369] ? __alloc_skb+0x140/0x710 [ 289.221120][T10369] __alloc_skb+0x140/0x710 [ 289.221144][T10369] ? __pfx___alloc_skb+0x10/0x10 [ 289.221173][T10369] tcp_stream_alloc_skb+0x34/0x660 [ 289.221203][T10369] tcp_connect+0xf22/0x5510 [ 289.221231][T10369] ? secure_tcpv6_seq_and_ts_off+0x218/0x310 [ 289.221252][T10369] ? __pfx_tcp_connect+0x10/0x10 [ 289.221266][T10369] ? __pfx___inet6_check_established+0x10/0x10 [ 289.221286][T10369] ? tcp_fastopen_defer_connect+0x8/0x440 [ 289.221316][T10369] ? inet6_hash_connect+0xe7/0x180 [ 289.221337][T10369] tcp_v6_connect+0x1831/0x2660 [ 289.221368][T10369] ? __pfx_tcp_v6_connect+0x10/0x10 [ 289.221399][T10369] __inet_stream_connect+0x208/0xfa0 [ 289.221430][T10369] ? __pfx___inet_stream_connect+0x10/0x10 [ 289.221453][T10369] ? kasan_save_track+0x14/0x30 [ 289.221474][T10369] ? __kasan_kmalloc+0xaa/0xb0 [ 289.221496][T10369] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 289.221516][T10369] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 289.221545][T10369] tcp_sendmsg_fastopen+0x3ed/0x750 [ 289.221573][T10369] tcp_sendmsg_locked+0x276d/0x44d0 [ 289.221605][T10369] ? __lock_acquire+0x49f/0x1a40 [ 289.221631][T10369] ? __lock_acquire+0x49f/0x1a40 [ 289.221658][T10369] ? __pfx___might_resched+0x10/0x10 [ 289.221687][T10369] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 289.221716][T10369] ? do_raw_spin_lock+0x128/0x260 [ 289.221738][T10369] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 289.221762][T10369] ? __local_bh_enable_ip+0x9e/0x120 [ 289.221793][T10369] tcp_sendmsg+0x2e/0x50 [ 289.221818][T10369] ? __pfx_tcp_sendmsg+0x10/0x10 [ 289.221842][T10369] inet6_sendmsg+0xb9/0x140 [ 289.221864][T10369] __sys_sendto+0x36d/0x4e0 [ 289.221889][T10369] ? __pfx___sys_sendto+0x10/0x10 [ 289.221935][T10369] ? fput+0x79/0x100 [ 289.221956][T10369] ? ksys_write+0x1ac/0x250 [ 289.221973][T10369] __ia32_sys_sendto+0xdd/0x1b0 [ 289.221996][T10369] ? __do_fast_syscall_32+0x98/0x970 [ 289.222021][T10369] ? lockdep_hardirqs_on+0x78/0x100 [ 289.222042][T10369] __do_fast_syscall_32+0xe7/0x970 [ 289.222065][T10369] ? lockdep_hardirqs_on+0x78/0x100 [ 289.222087][T10369] do_fast_syscall_32+0x32/0x70 [ 289.222110][T10369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.222132][T10369] RIP: 0023:0xf7fc2fec [ 289.222152][T10369] Code: Unable to access opcode bytes at 0xf7fc2fc2. [ 289.222159][T10369] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 289.222176][T10369] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 289.222186][T10369] RDX: 0000000000000000 RSI: 0000000020000045 RDI: 0000000080000140 [ 289.222196][T10369] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 289.222205][T10369] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 289.222214][T10369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.222236][T10369] [ 290.109914][T10384] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 290.348191][T10400] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(838860804.0.0), cmd(2) [ 290.438371][T10406] wg2 speed is unknown, defaulting to 1000 [ 290.497191][ T34] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 290.505305][T10411] xt_cluster: node mask cannot exceed total number of nodes [ 290.647089][ T34] usb 11-1: device descriptor read/64, error -71 [ 290.783386][T10421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.917461][ T34] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 291.067742][ T34] usb 11-1: device descriptor read/64, error -71 [ 291.177299][ T34] usb usb11-port1: attempt power cycle [ 291.387620][ T5916] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 291.647094][ T34] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 292.059481][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 292.059501][ T42] audit: type=1800 audit(1785906992.417:655): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 292.122018][T10434] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 292.219939][ T5916] usb 8-1: Using ep0 maxpacket: 8 [ 292.226158][ T42] audit: type=1800 audit(1785906992.577:656): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 292.532397][ T34] usb 11-1: device descriptor read/8, error -71 [ 292.534803][ T5916] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 292.539419][ T5916] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.542445][ T5916] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.545757][ T5916] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.549320][ T5916] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.558894][ T5916] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 292.562672][ T5916] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.651951][ T42] audit: type=1800 audit(1785906993.007:657): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338422 res=0 errno=0 [ 292.660267][ T42] audit: type=1800 audit(1785906993.007:658): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=338451 res=0 errno=0 [ 292.671204][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1176'. [ 292.675177][ T42] audit: type=1800 audit(1785906993.007:659): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=338429 res=0 errno=0 [ 292.682046][ T42] audit: type=1800 audit(1785906993.017:660): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=338430 res=0 errno=0 [ 292.688314][ T42] audit: type=1800 audit(1785906993.017:661): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=338431 res=0 errno=0 [ 292.694997][ T42] audit: type=1800 audit(1785906993.017:662): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 292.701634][ T42] audit: type=1800 audit(1785906993.017:663): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338471 res=0 errno=0 [ 292.721011][ T42] audit: type=1800 audit(1785906993.077:664): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338487 res=0 errno=0 [ 292.775673][ T5916] usb 8-1: usb_control_msg returned -32 [ 292.777958][ T34] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 292.780504][ T5916] usbtmc 8-1:16.0: can't read capabilities [ 292.798074][ T34] usb 11-1: device descriptor read/8, error -71 [ 292.907604][ T34] usb usb11-port1: unable to enumerate USB device [ 293.411960][T10463] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 294.028606][T10453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.115628][T10473] FAULT_INJECTION: forcing a failure. [ 294.115628][T10473] name failslab, interval 1, probability 0, space 0, times 0 [ 294.119806][T10473] CPU: 1 UID: 0 PID: 10473 Comm: syz.5.1185 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.119826][T10473] Tainted: [L]=SOFTLOCKUP [ 294.119848][T10473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 294.119857][T10473] Call Trace: [ 294.119875][T10473] [ 294.119880][T10473] dump_stack_lvl+0x100/0x190 [ 294.119985][T10473] should_fail_ex.cold+0x5/0xa [ 294.120015][T10473] should_failslab+0xc2/0x120 [ 294.120075][T10473] kmem_cache_alloc_noprof+0x91/0x6a0 [ 294.120090][T10473] ? __alloc_skb+0x4e9/0x710 [ 294.120140][T10473] ? __alloc_skb+0x5b7/0x710 [ 294.120155][T10473] ? sctp_chunkify+0x51/0x2f0 [ 294.120223][T10473] sctp_chunkify+0x51/0x2f0 [ 294.120239][T10473] _sctp_make_chunk+0x148/0x270 [ 294.120255][T10473] sctp_make_datafrag_empty+0x14e/0x230 [ 294.120272][T10473] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 294.120289][T10473] ? sctp_datamsg_from_user+0x8e/0x1360 [ 294.120307][T10473] sctp_datamsg_from_user+0x5ea/0x1360 [ 294.120328][T10473] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 294.120339][T10473] ? __asan_memcpy+0x40/0x60 [ 294.120351][T10473] ? sctp_assoc_set_primary+0x276/0x310 [ 294.120363][T10473] ? sctp_assoc_add_peer+0x256/0x1550 [ 294.120378][T10473] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 294.120389][T10473] ? sctp_connect_new_asoc+0x41e/0x770 [ 294.120403][T10473] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 294.120416][T10473] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 294.120427][T10473] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 294.120440][T10473] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 294.120465][T10473] sctp_sendmsg+0x1144/0x22e0 [ 294.120480][T10473] ? __pfx___might_resched+0x10/0x10 [ 294.120505][T10473] ? __pfx_sctp_sendmsg+0x10/0x10 [ 294.120519][T10473] ? aa_sk_perm+0x309/0xaa0 [ 294.120565][T10473] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 294.120578][T10473] ? __pfx_sctp_sendmsg+0x10/0x10 [ 294.120592][T10473] inet_sendmsg+0x11c/0x140 [ 294.120621][T10473] ____sys_sendmsg+0x9c9/0xbe0 [ 294.120633][T10473] ? __pfx_inet_sendmsg+0x10/0x10 [ 294.120650][T10473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.120665][T10473] ? _kstrtoull+0x13c/0x1f0 [ 294.120685][T10473] ? __pfx__kstrtoull+0x10/0x10 [ 294.120699][T10473] ___sys_sendmsg+0x190/0x1e0 [ 294.120712][T10473] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.120724][T10473] ? __lock_acquire+0x49f/0x1a40 [ 294.120758][T10473] __sys_sendmmsg+0x309/0x440 [ 294.120776][T10473] ? __pfx___sys_sendmmsg+0x10/0x10 [ 294.120792][T10473] ? find_held_lock+0x2b/0x80 [ 294.120821][T10473] ? __mutex_unlock_slowpath+0x35d/0x930 [ 294.120859][T10473] ? fput+0x79/0x100 [ 294.120873][T10473] ? ksys_write+0x1ac/0x250 [ 294.120886][T10473] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 294.120900][T10473] ? lockdep_hardirqs_on+0x78/0x100 [ 294.120915][T10473] __do_fast_syscall_32+0xe7/0x970 [ 294.120932][T10473] ? lockdep_hardirqs_on+0x78/0x100 [ 294.120948][T10473] do_fast_syscall_32+0x32/0x70 [ 294.120964][T10473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.120980][T10473] RIP: 0023:0xf702efec [ 294.120993][T10473] Code: Unable to access opcode bytes at 0xf702efc2. [ 294.121008][T10473] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 294.121020][T10473] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800027c0 [ 294.121027][T10473] RDX: 0000000000000001 RSI: 0000000020008050 RDI: 0000000000000000 [ 294.121034][T10473] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 294.121040][T10473] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 294.121047][T10473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.121061][T10473] [ 294.499183][ T9] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 294.586699][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1187'. [ 294.624926][ T5835] usb 8-1: USB disconnect, device number 43 [ 294.663151][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.668620][ T9] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.683090][ T9] usb 10-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 294.683115][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.683129][ T9] usb 10-1: Product: syz [ 294.683139][ T9] usb 10-1: Manufacturer: syz [ 294.683149][ T9] usb 10-1: SerialNumber: syz [ 294.899409][ T9] usb 10-1: usb_control_msg returned -71 [ 294.899437][ T9] usbtmc 10-1:1.0: can't read capabilities [ 294.910361][ T9] usb 10-1: USB disconnect, device number 15 [ 294.981602][T10487] wg2 speed is unknown, defaulting to 1000 [ 295.061060][T10494] trusted_key: encrypted_key: master key parameter '' is invalid [ 295.278501][T10497] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 295.343694][T10497] kvm: pic: non byte read [ 295.367076][ T9] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 295.538734][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.538832][ T9] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.541486][ T9] usb 10-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 295.541504][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.541514][ T9] usb 10-1: Product: syz [ 295.541522][ T9] usb 10-1: Manufacturer: syz [ 295.541530][ T9] usb 10-1: SerialNumber: syz [ 295.750172][ T9] usb 10-1: usb_control_msg returned -32 [ 295.750200][ T9] usbtmc 10-1:1.0: can't read capabilities [ 296.756252][T10513] Invalid logical block size (768) [ 296.824995][ T1041] usb 10-1: USB disconnect, device number 16 [ 296.857840][T10515] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.864724][T10515] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 296.869969][T10515] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 297.139802][T10515] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 297.151014][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 297.151030][ T42] audit: type=1800 audit(1785906997.497:718): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 297.327541][ T42] audit: type=1800 audit(1785906997.677:719): pid=10521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1198" name="state" dev="sysfs" ino=88 res=0 errno=0 [ 297.353116][ T42] audit: type=1800 audit(1785906997.697:720): pid=10521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1198" name="auto_online_blocks" dev="sysfs" ino=77 res=0 errno=0 [ 297.413750][ T42] audit: type=1800 audit(1785906997.767:721): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 297.444994][ T42] audit: type=1800 audit(1785906997.797:722): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 297.733873][ T42] audit: type=1800 audit(1785906998.087:723): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 298.450046][T10537] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 298.484061][T10537] kvm: pic: non byte read [ 298.618384][ T42] audit: type=1800 audit(1785906998.957:724): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 298.693968][ T42] audit: type=1800 audit(1785906999.047:725): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 298.779587][ T42] audit: type=1800 audit(1785906999.137:726): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 298.907133][ T5755] Bluetooth: hci4: command 0x0c1a tx timeout [ 298.908603][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 298.942571][ T42] audit: type=1800 audit(1785906999.297:727): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 299.927134][ T9] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 300.087221][ T9] usb 11-1: Using ep0 maxpacket: 8 [ 300.092982][ T9] usb 11-1: config 16 has an invalid descriptor of length 232, skipping remainder of the config [ 300.105840][ T9] usb 11-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 300.111678][ T9] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 300.121384][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.681311][T10583] netlink: 'syz.3.1216': attribute type 1 has an invalid length. [ 300.697496][T10598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.705669][T10598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.842625][T10599] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 300.848526][T10599] netlink: 'syz.1.1220': attribute type 1 has an invalid length. [ 300.852072][T10599] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1220'. [ 300.988033][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 301.045626][T10605] ref_ctr_offset mismatch. inode: 0x2bf offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 301.079785][T10605] overlay: ./file0 is not a directory [ 301.222738][T10607] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 301.241364][T10607] kvm: pic: level sensitive irq not supported [ 301.242302][T10607] kvm: pic: non byte read [ 302.184937][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 302.184956][ T42] audit: type=1800 audit(1785907002.537:762): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 302.235705][ T42] audit: type=1800 audit(1785907002.587:763): pid=10621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1227" name="carrier" dev="sysfs" ino=289867 res=0 errno=0 [ 302.585368][ T42] audit: type=1800 audit(1785907002.937:764): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 302.694830][ T1044] usb 11-1: USB disconnect, device number 14 [ 302.712328][T10623] netlink: 'syz.5.1227': attribute type 2 has an invalid length. [ 302.889899][T10623] : entered promiscuous mode [ 303.067248][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 303.276234][ T42] audit: type=1800 audit(1785907003.137:765): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 303.288840][ T42] audit: type=1800 audit(1785907003.267:766): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 303.321096][ T42] audit: type=1800 audit(1785907003.307:767): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 303.331353][ T42] audit: type=1800 audit(1785907003.337:768): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 303.338419][ T42] audit: type=1800 audit(1785907003.447:769): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 303.345111][ T42] audit: type=1800 audit(1785907003.627:770): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 303.462429][ T42] audit: type=1800 audit(1785907003.817:771): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 303.510968][T10649] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 303.537168][ T5583] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 303.592621][T10655] FAT-fs (nbd5): unable to read boot sector [ 303.692426][ T5583] usb 8-1: unable to get BOS descriptor or descriptor too short [ 303.696121][ T5583] usb 8-1: not running at top speed; connect to a high speed hub [ 303.701667][ T5583] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 303.705202][ T5583] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 303.709014][ T5583] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 303.713353][ T5583] usb 8-1: config 14 has no interface number 0 [ 303.716603][ T5583] usb 8-1: config 14 has no interface number 1 [ 303.721148][ T5583] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 303.729683][ T5583] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 303.734617][ T5583] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 303.739504][ T5583] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 303.744207][ T5583] usb 8-1: config 14 interface 57 has no altsetting 0 [ 303.747383][ T5583] usb 8-1: config 14 interface 228 has no altsetting 0 [ 303.755364][ T5583] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 303.759410][ T5583] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.762802][ T5583] usb 8-1: Product: syz [ 303.764589][ T5583] usb 8-1: Manufacturer: syz [ 303.766593][ T5583] usb 8-1: SerialNumber: syz [ 303.856035][T10657] syz.6.1237 (10657) used greatest stack depth: 19104 bytes left [ 304.370429][T10664] FAULT_INJECTION: forcing a failure. [ 304.370429][T10664] name failslab, interval 1, probability 0, space 0, times 0 [ 304.375320][T10664] CPU: 0 UID: 0 PID: 10664 Comm: syz.5.1240 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.375344][T10664] Tainted: [L]=SOFTLOCKUP [ 304.375349][T10664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 304.375358][T10664] Call Trace: [ 304.375366][T10664] [ 304.375374][T10664] dump_stack_lvl+0x100/0x190 [ 304.375401][T10664] should_fail_ex.cold+0x5/0xa [ 304.375416][T10664] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 304.375439][T10664] should_failslab+0xc2/0x120 [ 304.375463][T10664] kmem_cache_alloc_noprof+0x91/0x6a0 [ 304.375486][T10664] ? skb_clone+0x190/0x400 [ 304.375510][T10664] skb_clone+0x190/0x400 [ 304.375534][T10664] netlink_deliver_tap+0xaed/0xcc0 [ 304.375559][T10664] netlink_unicast+0x62b/0x850 [ 304.375582][T10664] ? __pfx_netlink_unicast+0x10/0x10 [ 304.375605][T10664] netlink_sendmsg+0x8b0/0xda0 [ 304.375625][T10664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.375648][T10664] ? apparmor_socket_sendmsg+0x15b/0x270 [ 304.375672][T10664] ____sys_sendmsg+0xa4d/0xbe0 [ 304.375689][T10664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.375704][T10664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.375733][T10664] ___sys_sendmsg+0x190/0x1e0 [ 304.375753][T10664] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.375784][T10664] ? find_held_lock+0x2b/0x80 [ 304.375816][T10664] __sys_sendmsg+0x160/0x210 [ 304.375841][T10664] ? __pfx___sys_sendmsg+0x10/0x10 [ 304.375876][T10664] ? __pfx_ksys_write+0x10/0x10 [ 304.375893][T10664] __do_fast_syscall_32+0xe7/0x970 [ 304.375916][T10664] ? lockdep_hardirqs_on+0x78/0x100 [ 304.375940][T10664] do_fast_syscall_32+0x32/0x70 [ 304.375962][T10664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.375982][T10664] RIP: 0023:0xf702efec [ 304.376020][T10664] Code: Unable to access opcode bytes at 0xf702efc2. [ 304.376027][T10664] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 304.376042][T10664] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 304.376052][T10664] RDX: 0000000004080040 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.376060][T10664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.376068][T10664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.376076][T10664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.376094][T10664] [ 304.528231][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 304.535103][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1233'. [ 304.537140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 304.657542][ T9] usb 6-1: device descriptor read/64, error -71 [ 304.899632][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 305.037055][ T9] usb 6-1: device descriptor read/64, error -71 [ 305.148085][ T9] usb usb6-port1: attempt power cycle [ 305.202984][T10669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.470682][ T5583] legousbtower 8-1:14.57: interrupt endpoints not found [ 305.485405][ T5583] legousbtower 8-1:14.228: get version request failed: -71 [ 305.487080][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 305.491383][ T5583] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 305.500890][ T5583] usb 8-1: USB disconnect, device number 44 [ 305.530488][ T9] usb 6-1: device descriptor read/8, error -71 [ 305.635460][T10676] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 305.769217][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 305.788584][ T9] usb 6-1: device descriptor read/8, error -71 [ 305.897515][ T9] usb usb6-port1: unable to enumerate USB device [ 306.012385][T10683] netdevsim netdevsim6: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 306.021644][T10683] netlink: 'syz.6.1246': attribute type 1 has an invalid length. [ 306.024921][T10683] netlink: 756 bytes leftover after parsing attributes in process `syz.6.1246'. [ 306.413721][T10689] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1249'. [ 306.417729][T10689] 1{X: entered promiscuous mode [ 306.420050][T10689] 1{X: left allmulticast mode [ 306.436790][T10689] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1249'. [ 306.444592][T10689] 0{X: renamed from 31{X [ 306.455028][T10689] 0{X: left promiscuous mode [ 306.457880][T10689] 0{X: entered allmulticast mode [ 306.462106][T10689] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 306.468839][ T34] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 306.639094][ T34] usb 10-1: Using ep0 maxpacket: 32 [ 306.730518][ T34] usb 10-1: unable to get BOS descriptor or descriptor too short [ 306.752311][ T34] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 306.756411][ T34] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 306.767273][ T34] usb 10-1: config 14 has no interface number 0 [ 306.773752][ T34] usb 10-1: config 14 has no interface number 1 [ 306.794652][ T34] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 306.806860][ T34] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 306.818773][ T34] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 306.837449][ T34] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 306.852093][ T34] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 306.864275][ T34] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.872227][ T34] usb 10-1: config 14 interface 57 has no altsetting 0 [ 306.875972][ T34] usb 10-1: config 14 interface 228 has no altsetting 0 [ 306.894800][ T34] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 306.899400][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.903395][ T34] usb 10-1: Product: syz [ 306.905386][ T34] usb 10-1: Manufacturer: syz [ 306.911656][ T34] usb 10-1: SerialNumber: syz [ 307.279074][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 307.279088][ T42] audit: type=1800 audit(1785907007.637:809): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 307.395440][T10692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.420509][ T42] audit: type=1800 audit(1785907007.777:810): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 307.493755][T10704] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 307.535872][ T42] audit: type=1800 audit(1785907007.887:811): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 307.595528][ T42] audit: type=1800 audit(1785907007.947:812): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 307.655528][ T42] audit: type=1800 audit(1785907008.007:813): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 307.680234][ T42] audit: type=1800 audit(1785907008.037:814): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 307.698568][T10716] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1258'. [ 307.713753][T10716] 1{X: entered promiscuous mode [ 307.715752][T10716] 1{X: left allmulticast mode [ 307.723734][T10716] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1258'. [ 307.728131][T10716] 0{X: renamed from 31{X [ 307.732540][T10716] 0{X: left promiscuous mode [ 307.734653][T10716] 0{X: entered allmulticast mode [ 307.737939][T10716] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 307.745703][ T42] audit: type=1800 audit(1785907008.097:815): pid=10716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1258" name="profiling" dev="sysfs" ino=13 res=0 errno=0 [ 307.779272][ T42] audit: type=1800 audit(1785907008.137:816): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 307.897979][ T42] audit: type=1800 audit(1785907008.247:817): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 307.954382][T10721] FAULT_INJECTION: forcing a failure. [ 307.954382][T10721] name failslab, interval 1, probability 0, space 0, times 0 [ 307.954713][ T42] audit: type=1800 audit(1785907008.307:818): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 307.961053][T10721] CPU: 3 UID: 0 PID: 10721 Comm: syz.1.1260 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.961084][T10721] Tainted: [L]=SOFTLOCKUP [ 307.961091][T10721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 307.961100][T10721] Call Trace: [ 307.961106][T10721] [ 307.961112][T10721] dump_stack_lvl+0x100/0x190 [ 307.961160][T10721] should_fail_ex.cold+0x5/0xa [ 307.961183][T10721] should_failslab+0xc2/0x120 [ 307.961208][T10721] kmem_cache_alloc_noprof+0x91/0x6a0 [ 307.961248][T10721] ? anon_vma_clone+0x2ba/0xcd0 [ 307.961284][T10721] anon_vma_clone+0x2ba/0xcd0 [ 307.961317][T10721] __split_vma+0x51f/0xda0 [ 307.961345][T10721] ? __pfx___split_vma+0x10/0x10 [ 307.961370][T10721] ? __pfx_mas_prev+0x10/0x10 [ 307.961397][T10721] ? stack_depot_save_flags+0x27/0x9d0 [ 307.961433][T10721] vms_gather_munmap_vmas+0x3a5/0x1720 [ 307.961458][T10721] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 307.961485][T10721] ? mas_walk+0x6ef/0x9b0 [ 307.961515][T10721] __mmap_region+0x4a7/0x2db0 [ 307.961539][T10721] ? __pfx___mmap_region+0x10/0x10 [ 307.961557][T10721] ? kasan_quarantine_put+0x104/0x240 [ 307.961577][T10721] ? lockdep_hardirqs_on+0x78/0x100 [ 307.961602][T10721] ? process_measurement+0x1010/0x2350 [ 307.961624][T10721] ? process_measurement+0x10d0/0x2350 [ 307.961645][T10721] ? kfree+0x22b/0x6c0 [ 307.961702][T10721] ? find_held_lock+0x2b/0x80 [ 307.961725][T10721] ? is_bpf_text_address+0x8a/0x1a0 [ 307.961751][T10721] ? is_bpf_text_address+0x8a/0x1a0 [ 307.961816][T10721] mmap_region+0x527/0x620 [ 307.961839][T10721] ? __pfx_mmap_region+0x10/0x10 [ 307.961859][T10721] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 307.961885][T10721] ? cap_mmap_addr+0x4b/0x120 [ 307.961927][T10721] ? bpf_lsm_mmap_addr+0x9/0x30 [ 307.961946][T10721] ? security_mmap_addr+0x71/0x1e0 [ 307.961971][T10721] ? __get_unmapped_area+0x255/0x3e0 [ 307.961999][T10721] do_mmap+0xc63/0x12f0 [ 307.962028][T10721] ? __pfx_do_mmap+0x10/0x10 [ 307.962053][T10721] ? __pfx_down_write_killable+0x10/0x10 [ 307.962081][T10721] vm_mmap_pgoff+0x29e/0x470 [ 307.962111][T10721] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 307.962135][T10721] ? __fget_files+0x215/0x3d0 [ 307.962158][T10721] ? __fget_files+0x21f/0x3d0 [ 307.962181][T10721] ksys_mmap_pgoff+0x3cb/0x610 [ 307.962207][T10721] ? fput+0x79/0x100 [ 307.962229][T10721] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 307.962252][T10721] ? ksys_write+0x1ac/0x250 [ 307.962269][T10721] ? __pfx_ksys_write+0x10/0x10 [ 307.962292][T10721] __do_fast_syscall_32+0xe7/0x970 [ 307.962316][T10721] ? lockdep_hardirqs_on+0x78/0x100 [ 307.962347][T10721] do_fast_syscall_32+0x32/0x70 [ 307.962374][T10721] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.962396][T10721] RIP: 0023:0xf7f48fec [ 307.962417][T10721] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 307.962425][T10721] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 307.962443][T10721] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 307.962455][T10721] RDX: 000000000000000a RSI: 0000000000028011 RDI: 0000000000000005 [ 307.962465][T10721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.962475][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.962485][T10721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.962508][T10721] [ 308.014316][T10723] binder: BINDER_SET_CONTEXT_MGR already set [ 308.105153][T10723] binder: 10722:10723 ioctl 4018620d 80004a80 returned -16 [ 308.177349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 308.436983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 308.774455][T10734] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 308.793013][T10734] kvm: pic: level sensitive irq not supported [ 308.793485][T10734] kvm: pic: non byte read [ 309.247869][ T34] legousbtower 10-1:14.57: interrupt endpoints not found [ 309.252581][ T34] legousbtower 10-1:14.228: get version request failed: -71 [ 309.255180][ T34] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71 [ 309.261141][ T34] usb 10-1: USB disconnect, device number 17 [ 310.696630][T10778] FAULT_INJECTION: forcing a failure. [ 310.696630][T10778] name failslab, interval 1, probability 0, space 0, times 0 [ 310.702096][T10778] CPU: 0 UID: 0 PID: 10778 Comm: syz.1.1276 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.702114][T10778] Tainted: [L]=SOFTLOCKUP [ 310.702118][T10778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 310.702125][T10778] Call Trace: [ 310.702129][T10778] [ 310.702133][T10778] dump_stack_lvl+0x100/0x190 [ 310.702152][T10778] should_fail_ex.cold+0x5/0xa [ 310.702166][T10778] should_failslab+0xc2/0x120 [ 310.702182][T10778] __kmalloc_noprof+0xfc/0x820 [ 310.702197][T10778] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 310.702220][T10778] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 310.702238][T10778] genl_family_rcv_msg_doit+0xc7/0x300 [ 310.702254][T10778] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 310.702270][T10778] ? genl_get_cmd+0x3e7/0x760 [ 310.702287][T10778] ? ____sys_sendmsg+0xa4d/0xbe0 [ 310.702300][T10778] ? ___sys_sendmsg+0x190/0x1e0 [ 310.702311][T10778] ? __radix_tree_lookup+0x217/0x2b0 [ 310.702329][T10778] genl_rcv_msg+0x560/0x800 [ 310.702345][T10778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 310.702361][T10778] ? __pfx_netlbl_calipso_list+0x10/0x10 [ 310.702382][T10778] ? __lock_acquire+0x49f/0x1a40 [ 310.702403][T10778] netlink_rcv_skb+0x159/0x420 [ 310.702416][T10778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 310.702432][T10778] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.702450][T10778] ? netlink_deliver_tap+0x1ae/0xcc0 [ 310.702465][T10778] genl_rcv+0x28/0x40 [ 310.702478][T10778] netlink_unicast+0x585/0x850 [ 310.702493][T10778] ? __pfx_netlink_unicast+0x10/0x10 [ 310.702509][T10778] netlink_sendmsg+0x8b0/0xda0 [ 310.702524][T10778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.702540][T10778] ? apparmor_socket_sendmsg+0x15b/0x270 [ 310.702557][T10778] ____sys_sendmsg+0xa4d/0xbe0 [ 310.702568][T10778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.702582][T10778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.702600][T10778] ___sys_sendmsg+0x190/0x1e0 [ 310.702614][T10778] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.702633][T10778] ? find_held_lock+0x2b/0x80 [ 310.702655][T10778] __sys_sendmsg+0x160/0x210 [ 310.702672][T10778] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.702692][T10778] ? __pfx_ksys_write+0x10/0x10 [ 310.702706][T10778] __do_fast_syscall_32+0xe7/0x970 [ 310.702722][T10778] ? lockdep_hardirqs_on+0x78/0x100 [ 310.702738][T10778] do_fast_syscall_32+0x32/0x70 [ 310.702754][T10778] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.702769][T10778] RIP: 0023:0xf7f48fec [ 310.702783][T10778] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 310.702788][T10778] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 310.702804][T10778] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800004c0 [ 310.702811][T10778] RDX: 0000000000010800 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.702817][T10778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 310.702823][T10778] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 310.702829][T10778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.702843][T10778] [ 310.804615][T10783] fuse: Unknown parameter 'g' [ 310.821981][T10783] netlink: 'syz.6.1277': attribute type 4 has an invalid length. [ 310.834754][T10783] netlink: 'syz.6.1277': attribute type 4 has an invalid length. [ 310.842223][T10783] kernel profiling enabled (shift: 9) [ 311.083887][T10794] usb usb8: usbfs: process 10794 (syz.3.1283) did not claim interface 0 before use [ 311.387080][ T5857] usb 8-1: new full-speed USB device number 45 using dummy_hcd [ 311.559893][ T5857] usb 8-1: not running at top speed; connect to a high speed hub [ 311.564740][ T5857] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 222, changing to 4 [ 311.569514][ T5857] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 311.574135][ T5857] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 139, changing to 4 [ 311.579784][ T5857] usb 8-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 0.40 [ 311.582706][ T5857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.585245][ T5857] usb 8-1: Product: 䥼ꩌ擁ゔ菈⥳⻮⴪ᥩࢄ놙踾㽎骡氀ﬔ㭾撼㲺镗㊀ꥅ斲䃦逯Ꙁ୞䁇枞핖㐈穸⍿㫡騣뗓贒怑稓╰᪥ﾎ験狞ޠ荈㑴螹ᢙ쒪┛慁᳹ᡳٛﮈఢ㶎琚낱蒡ㆬ⺳劂䎷ꉦી필슗冻㔠毪阰ϸ珸따㌎䊮ࠩ㥺ㅼ罅☠憐銌痚㐒桸娬ᠼ崕⢪ࢩ롧豠뻰窦胱׾ﵑ➑֛썓吏㮶掽⇫₝ [ 311.598380][ T5857] usb 8-1: Manufacturer: 쵑㳖헩杞尷䦎꜓묛။Є尔ⷄහ⡰Ꮝᴥﱘ뉲볥㨿ꁏ㯎ዚ䄐숳匟㵕鿚苋卲嬵및爡싻ᑋ孭ԏ᲋ᯂ谛⁆◐᧶ȃ쟮谱⇿侤ꌂ [ 311.604931][ T5857] usb 8-1: SerialNumber: 盧ࡸ䞳ꤠ陵豰뒱㱤ت珰壱떄६몢佝ꎓ偸䨃԰攷팪渋㦎ꠝ烨ࣷࡈ蒇㳚坖ك秙⇇弓绮삊ᶜ소냼鉒Ŋ顢૓弦䂪볐Ǭ刔ᦃ⊳읔电뷱巓筣㰿欬썆槙ỿⒸ嵳᫡쭵듗ꊑ驷쮂㶽␈䖋꭯坑뙬羊甊ﵔ塩 [ 311.847910][T10794] use of bytesused == 0 is deprecated and will be removed in the future, [ 311.852774][T10794] use the actual size instead. [ 311.875466][ T5857] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.880507][ T5857] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 311.885392][ T5857] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.887981][ T5857] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 311.893621][ T5857] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.924886][ T5857] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 311.929490][ T5857] usb 8-1: USB disconnect, device number 45 [ 311.947828][ T8997] udevd[8997]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.327008][ T845] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 312.327481][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 312.327493][ T42] audit: type=1800 audit(1785907012.687:867): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=344420 res=0 errno=0 [ 312.337580][ T42] audit: type=1800 audit(1785907012.687:868): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=344435 res=0 errno=0 [ 312.344759][ T42] audit: type=1800 audit(1785907012.697:869): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=344450 res=0 errno=0 [ 312.351096][ T42] audit: type=1800 audit(1785907012.697:870): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=344465 res=0 errno=0 [ 312.487008][ T845] usb 11-1: Using ep0 maxpacket: 16 [ 312.491986][ T845] usb 11-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 312.495164][ T845] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.498083][ T845] usb 11-1: Product: syz [ 312.499612][ T845] usb 11-1: Manufacturer: syz [ 312.501342][ T845] usb 11-1: SerialNumber: syz [ 312.506046][ T42] audit: type=1800 audit(1785907012.857:871): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=344480 res=0 errno=0 [ 312.512316][ T42] audit: type=1800 audit(1785907012.867:872): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=344512 res=0 errno=0 [ 312.518774][ T42] audit: type=1800 audit(1785907012.867:873): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=344487 res=0 errno=0 [ 312.524836][ T42] audit: type=1800 audit(1785907012.867:874): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=344488 res=0 errno=0 [ 312.666454][ T42] audit: type=1800 audit(1785907013.017:875): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 312.711174][ T845] usb 11-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 312.717201][T10821] kAFS: bad VL server IP address [ 312.724691][T10822] vlan3: entered allmulticast mode [ 312.726873][T10822] bond0: entered allmulticast mode [ 312.731067][T10821] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1292'. [ 312.740411][ T845] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 312.747760][ T845] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 312.751991][ T845] usb 11-1: media controller created [ 312.773960][T10821] bond0 (unregistering): Released all slaves [ 312.774352][ T845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.775523][T10829] usb usb8: usbfs: process 10829 (syz.6.1293) did not claim interface 0 before use [ 312.781321][ T42] audit: type=1800 audit(1785907013.137:876): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 312.815325][ T845] zl10353_read_register: readreg error (reg=127, ret==-71) [ 312.842022][ T845] dvb_usb_gl861 11-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 312.847710][ T845] usb 11-1: USB disconnect, device number 15 [ 313.137789][ T845] usb 11-1: new full-speed USB device number 16 using dummy_hcd [ 313.289356][ T845] usb 11-1: not running at top speed; connect to a high speed hub [ 313.296432][ T845] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 222, changing to 4 [ 313.304994][ T845] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 313.311363][ T845] usb 11-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 139, changing to 4 [ 313.319301][ T845] usb 11-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 0.40 [ 313.325267][ T845] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.329138][ T845] usb 11-1: Product: 䥼ꩌ擁ゔ菈⥳⻮⴪ᥩࢄ놙踾㽎骡氀ﬔ㭾撼㲺镗㊀ꥅ斲䃦逯Ꙁ୞䁇枞핖㐈穸⍿㫡騣뗓贒怑稓╰᪥ﾎ験狞ޠ荈㑴螹ᢙ쒪┛慁᳹ᡳٛﮈఢ㶎琚낱蒡ㆬ⺳劂䎷ꉦી필슗冻㔠毪阰ϸ珸따㌎䊮ࠩ㥺ㅼ罅☠憐銌痚㐒桸娬ᠼ崕⢪ࢩ롧豠뻰窦胱׾ﵑ➑֛썓吏㮶掽⇫₝ [ 313.341150][ T845] usb 11-1: Manufacturer: 쵑㳖헩杞尷䦎꜓묛။Є尔ⷄහ⡰Ꮝᴥﱘ뉲볥㨿ꁏ㯎ዚ䄐숳匟㵕鿚苋卲嬵및爡싻ᑋ孭ԏ᲋ᯂ谛⁆◐᧶ȃ쟮谱⇿侤ꌂ [ 313.347264][ T845] usb 11-1: SerialNumber: 盧ࡸ䞳ꤠ陵豰뒱㱤ت珰壱떄६몢佝ꎓ偸䨃԰攷팪渋㦎ꠝ烨ࣷࡈ蒇㳚坖ك秙⇇弓绮삊ᶜ소냼鉒Ŋ顢૓弦䂪볐Ǭ刔ᦃ⊳읔电뷱巓筣㰿欬썆槙ỿⒸ嵳᫡쭵듗ꊑ驷쮂㶽␈䖋꭯坑뙬羊甊ﵔ塩 [ 313.401909][T10843] FAULT_INJECTION: forcing a failure. [ 313.401909][T10843] name failslab, interval 1, probability 0, space 0, times 0 [ 313.408577][T10843] CPU: 3 UID: 0 PID: 10843 Comm: syz.3.1298 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.408596][T10843] Tainted: [L]=SOFTLOCKUP [ 313.408600][T10843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 313.408607][T10843] Call Trace: [ 313.408611][T10843] [ 313.408616][T10843] dump_stack_lvl+0x100/0x190 [ 313.408635][T10843] should_fail_ex.cold+0x5/0xa [ 313.408649][T10843] should_failslab+0xc2/0x120 [ 313.408666][T10843] kmem_cache_alloc_noprof+0x91/0x6a0 [ 313.408683][T10843] ? __kernfs_new_node+0xd2/0xa10 [ 313.408708][T10843] __kernfs_new_node+0xd2/0xa10 [ 313.408721][T10843] ? __pfx___kernfs_new_node+0x10/0x10 [ 313.408736][T10843] ? find_held_lock+0x2b/0x80 [ 313.408751][T10843] ? kernfs_root+0xee/0x2a0 [ 313.408768][T10843] ? kernfs_root+0xee/0x2a0 [ 313.408788][T10843] kernfs_new_node+0x117/0x150 [ 313.408802][T10843] __kernfs_create_file+0x53/0x350 [ 313.408818][T10843] sysfs_add_file_mode_ns+0x207/0x3c0 [ 313.408838][T10843] internal_create_group+0x593/0xfb0 [ 313.408859][T10843] ? __pfx_internal_create_group+0x10/0x10 [ 313.408880][T10843] ? kernfs_create_link+0x1bd/0x240 [ 313.408896][T10843] internal_create_groups+0x9d/0x150 [ 313.408930][T10843] device_add+0xf60/0x1970 [ 313.408974][T10843] ? __pfx_device_add+0x10/0x10 [ 313.408985][T10843] ? lockdep_init_map_type+0x5c/0x250 [ 313.408997][T10843] ? __init_waitqueue_head+0xca/0x150 [ 313.409013][T10843] wakeup_source_device_create+0x243/0x2e0 [ 313.409028][T10843] wakeup_source_sysfs_add+0x1c/0x90 [ 313.409040][T10843] wakeup_source_register+0x154/0x3e0 [ 313.409058][T10843] ep_create_wakeup_source+0x1df/0x2e0 [ 313.409070][T10843] ? __mutex_unlock_slowpath+0x35d/0x930 [ 313.409088][T10843] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 313.409103][T10843] ? find_held_lock+0x2b/0x80 [ 313.409116][T10843] ? do_epoll_ctl_file+0x2ba2/0x36e0 [ 313.409129][T10843] ? do_epoll_ctl_file+0x2ba2/0x36e0 [ 313.409145][T10843] do_epoll_ctl_file+0x1e26/0x36e0 [ 313.409163][T10843] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 313.409183][T10843] ? find_held_lock+0x2b/0x80 [ 313.409197][T10843] ? __fget_files+0x215/0x3d0 [ 313.409212][T10843] ? __fget_files+0x21f/0x3d0 [ 313.409226][T10843] ? do_epoll_ctl+0xfd/0x1a0 [ 313.409238][T10843] do_epoll_ctl+0xfd/0x1a0 [ 313.409252][T10843] ? __pfx_do_epoll_ctl+0x10/0x10 [ 313.409269][T10843] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 313.409283][T10843] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 313.409296][T10843] ? ksys_write+0x1ac/0x250 [ 313.409308][T10843] ? __pfx_ksys_write+0x10/0x10 [ 313.409322][T10843] __do_fast_syscall_32+0xe7/0x970 [ 313.409338][T10843] ? lockdep_hardirqs_on+0x78/0x100 [ 313.409354][T10843] do_fast_syscall_32+0x32/0x70 [ 313.409371][T10843] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.409386][T10843] RIP: 0023:0xf705efec [ 313.409399][T10843] Code: Unable to access opcode bytes at 0xf705efc2. [ 313.409405][T10843] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 313.409418][T10843] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000001 [ 313.409425][T10843] RDX: 0000000000000004 RSI: 0000000080000000 RDI: 0000000000000000 [ 313.409432][T10843] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.409438][T10843] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 313.409445][T10843] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.409459][T10843] [ 313.427152][ T9] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 313.564796][T10829] FAULT_INJECTION: forcing a failure. [ 313.564796][T10829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.569061][T10829] CPU: 2 UID: 0 PID: 10829 Comm: syz.6.1293 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.569080][T10829] Tainted: [L]=SOFTLOCKUP [ 313.569084][T10829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 313.569091][T10829] Call Trace: [ 313.569096][T10829] [ 313.569100][T10829] dump_stack_lvl+0x100/0x190 [ 313.569119][T10829] should_fail_ex.cold+0x5/0xa [ 313.569150][T10829] _copy_from_user+0x2e/0xd0 [ 313.569171][T10829] map_update_elem+0x922/0xb00 [ 313.569191][T10829] ? __pfx_map_update_elem+0x10/0x10 [ 313.569211][T10829] __sys_bpf+0x2a92/0x4e80 [ 313.569228][T10829] ? __pfx___sys_bpf+0x10/0x10 [ 313.569241][T10829] ? find_held_lock+0x2b/0x80 [ 313.569255][T10829] ? get_pid_task+0xfc/0x250 [ 313.569271][T10829] ? get_pid_task+0xfc/0x250 [ 313.569289][T10829] ? proc_fail_nth_write+0x9f/0x220 [ 313.569306][T10829] ? find_held_lock+0x2b/0x80 [ 313.569322][T10829] ? rcu_read_lock_any_held+0x6a/0xa0 [ 313.569339][T10829] ? find_held_lock+0x2b/0x80 [ 313.569352][T10829] ? ksys_write+0x190/0x250 [ 313.569363][T10829] ? ksys_write+0x190/0x250 [ 313.569384][T10829] ? fput+0x79/0x100 [ 313.569398][T10829] ? __ia32_sys_bpf+0xcc/0x170 [ 313.569410][T10829] __ia32_sys_bpf+0xcc/0x170 [ 313.569423][T10829] ? __do_fast_syscall_32+0x98/0x970 [ 313.569441][T10829] __do_fast_syscall_32+0xe7/0x970 [ 313.569456][T10829] ? lockdep_hardirqs_on+0x78/0x100 [ 313.569472][T10829] do_fast_syscall_32+0x32/0x70 [ 313.569488][T10829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.569504][T10829] RIP: 0023:0xf7fc2fec [ 313.569518][T10829] Code: Unable to access opcode bytes at 0xf7fc2fc2. [ 313.569523][T10829] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 313.569535][T10829] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000080000680 [ 313.569542][T10829] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.569549][T10829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.569555][T10829] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 313.569562][T10829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.569576][T10829] [ 313.663531][ T845] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.666104][ T845] snd-usb-audio 11-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 313.670494][ T845] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.672874][ T845] snd-usb-audio 11-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 313.677371][ T845] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.697845][ T845] snd-usb-audio 11-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 313.708515][ T845] usb 11-1: USB disconnect, device number 16 [ 313.717089][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 313.721856][ T9] usb 10-1: config 16 has an invalid descriptor of length 197, skipping remainder of the config [ 313.728566][ T8997] udevd[8997]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.734164][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.737777][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.743806][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 313.749005][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 313.752559][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.761221][ T9] usbtmc 10-1:16.0: bulk endpoints not found [ 313.906447][T10845] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 314.120043][T10850] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 314.125691][T10850] netlink: 'syz.1.1300': attribute type 1 has an invalid length. [ 314.128485][T10850] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1300'. [ 314.264630][T10853] 9p: Bad value for 'wfdno' [ 315.144663][T10855] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 315.174194][T10855] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 315.177931][T10855] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 315.180340][T10855] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 315.186767][T10855] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 315.209532][T10855] pci 0000:00:01.0: Adding to iommu group 1 [ 315.221426][T10855] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 315.224292][T10855] pci 0000:00:01.0: vgaarb: bridge control possible [ 315.227026][T10855] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 315.236800][T10855] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 315.240490][T10855] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 315.245051][T10855] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 315.260569][T10855] [drm] Found bochs VGA, ID 0xb0c5. [ 315.262840][T10855] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 315.282256][T10855] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 315.363540][T10867] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 315.367482][T10867] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 315.403584][T10855] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 315.661825][T10875] netlink: 'syz.6.1306': attribute type 1 has an invalid length. [ 315.665370][T10875] netlink: 208 bytes leftover after parsing attributes in process `syz.6.1306'. [ 316.208646][ T56] usb 10-1: USB disconnect, device number 18 [ 316.282980][T10884] 8021q: VLANs not supported on ipvlan1 [ 316.314859][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'. [ 316.373227][T10888] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 316.683508][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.685933][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.705404][T10897] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 316.707588][T10899] netdevsim netdevsim6: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 316.711549][T10897] netlink: 'syz.1.1311': attribute type 1 has an invalid length. [ 316.715511][T10897] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1311'. [ 316.724396][T10899] netlink: 'syz.6.1312': attribute type 1 has an invalid length. [ 316.730025][T10899] netlink: 756 bytes leftover after parsing attributes in process `syz.6.1312'. [ 317.343269][ T42] kauditd_printk_skb: 54 callbacks suppressed [ 317.343283][ T42] audit: type=1800 audit(1785907017.697:931): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 317.399285][ T42] audit: type=1800 audit(1785907017.757:932): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 317.554344][ T42] audit: type=1800 audit(1785907017.907:933): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 317.593824][ T42] audit: type=1804 audit(1785907017.947:934): pid=10913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1316" name="/newroot/329/bus" dev="tmpfs" ino=1793 res=1 errno=0 [ 317.718592][ T42] audit: type=1800 audit(1785907018.077:935): pid=10915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1316" name="enabled" dev="sysfs" ino=58857 res=0 errno=0 [ 318.131457][ T42] audit: type=1800 audit(1785907018.477:936): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 318.359262][ T42] audit: type=1800 audit(1785907018.707:937): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 318.445670][ T42] audit: type=1800 audit(1785907018.797:938): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 318.452302][ T9] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 318.491469][ T42] audit: type=1800 audit(1785907018.847:939): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 318.536536][T10926] vlan2: entered promiscuous mode [ 318.538674][T10926] hsr0: entered promiscuous mode [ 318.542778][T10926] vlan2: entered allmulticast mode [ 318.546689][T10926] hsr0: entered allmulticast mode [ 318.550612][T10926] hsr_slave_0: entered allmulticast mode [ 318.551239][ T42] audit: type=1800 audit(1785907018.907:940): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 318.554113][T10926] hsr_slave_1: entered allmulticast mode [ 318.583734][T10930] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1321'. [ 318.589644][T10930] 0{X: entered promiscuous mode [ 318.591395][T10930] 0{X: left allmulticast mode [ 318.599397][T10930] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1321'. [ 318.602404][T10930] 1{X: renamed from 30{X [ 318.605612][T10930] 1{X: left promiscuous mode [ 318.607669][T10930] 1{X: entered allmulticast mode [ 318.610590][T10930] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 318.637260][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 318.640598][ T9] usb 10-1: config 16 has an invalid descriptor of length 197, skipping remainder of the config [ 318.646322][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 318.652328][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 318.655448][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 318.665405][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 318.669174][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.714719][T10938] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1325'. [ 318.743954][ T9] usbtmc 10-1:16.0: bulk endpoints not found [ 318.811098][T10938] input: syz1 as /devices/virtual/input/input10 [ 318.939362][ T50] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 319.087638][ T50] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 319.092669][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.096434][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.100531][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 319.104642][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.109218][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.113512][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 319.117906][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.121639][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.126076][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 319.129602][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.132885][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.137714][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 319.141454][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.145133][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.149201][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 319.153009][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.156742][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.161775][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 319.166126][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.170749][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.175446][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 319.184745][ T50] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.188956][ T50] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 319.193500][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 319.198664][ T50] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 319.202300][ T50] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 319.205461][ T50] usb 8-1: Product: syz [ 319.206906][ T50] usb 8-1: Manufacturer: syz [ 319.208906][ T50] usb 8-1: SerialNumber: syz [ 319.213714][ T50] usb 8-1: config 0 descriptor?? [ 319.226573][ T50] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 319.318842][T10965] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1332'. [ 319.322542][T10965] 0{X: entered promiscuous mode [ 319.324329][T10965] 0{X: left allmulticast mode [ 319.331641][T10965] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1332'. [ 319.335214][T10965] 1{X: renamed from 30{X [ 319.340043][T10965] 1{X: left promiscuous mode [ 319.342268][T10965] 1{X: entered allmulticast mode [ 319.346265][T10965] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 319.447646][T10936] 1{X: left allmulticast mode [ 319.574976][T10973] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 319.581924][T10973] netlink: 'syz.1.1333': attribute type 1 has an invalid length. [ 319.585588][T10973] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1333'. [ 319.616103][T10936] vlan2: left allmulticast mode [ 319.620699][T10936] bond_slave_0: left allmulticast mode [ 319.648266][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.656017][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.665648][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.672426][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.077276][ T845] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 320.227138][ T845] usb 11-1: Using ep0 maxpacket: 8 [ 320.232658][ T845] usb 11-1: config 16 has an invalid descriptor of length 113, skipping remainder of the config [ 320.236505][ T845] usb 11-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.242547][ T845] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 320.246803][ T845] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.256235][ T845] usbtmc 11-1:16.0: bulk endpoints not found [ 320.384547][T10980] lo speed is unknown, defaulting to 1000 [ 320.387299][T10980] lo speed is unknown, defaulting to 1000 [ 320.390870][T10980] lo speed is unknown, defaulting to 1000 [ 320.394214][T10980] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 320.400940][T10980] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 320.407505][T10980] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 320.422469][T10980] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 320.444580][T10980] lo speed is unknown, defaulting to 1000 [ 320.451821][T10980] lo speed is unknown, defaulting to 1000 [ 320.455594][T10980] lo speed is unknown, defaulting to 1000 [ 320.459524][T10980] lo speed is unknown, defaulting to 1000 [ 320.824929][T10987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.827944][T10987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.188325][ T5857] usb 10-1: USB disconnect, device number 19 [ 321.281318][T10990] FAULT_INJECTION: forcing a failure. [ 321.281318][T10990] name failslab, interval 1, probability 0, space 0, times 0 [ 321.312363][T10990] CPU: 0 UID: 0 PID: 10990 Comm: syz.5.1337 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.312396][T10990] Tainted: [L]=SOFTLOCKUP [ 321.312402][T10990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 321.312413][T10990] Call Trace: [ 321.312438][T10990] [ 321.312446][T10990] dump_stack_lvl+0x100/0x190 [ 321.312630][T10990] should_fail_ex.cold+0x5/0xa [ 321.312663][T10990] should_failslab+0xc2/0x120 [ 321.312713][T10990] __kmalloc_noprof+0xfc/0x820 [ 321.312745][T10990] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 321.312843][T10990] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 321.312874][T10990] genl_family_rcv_msg_doit+0xc7/0x300 [ 321.312900][T10990] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 321.312923][T10990] ? genl_get_cmd+0x3e7/0x760 [ 321.312951][T10990] ? __dev_queue_xmit+0xa33/0x4970 [ 321.312983][T10990] ? __radix_tree_lookup+0x217/0x2b0 [ 321.313068][T10990] genl_rcv_msg+0x560/0x800 [ 321.313092][T10990] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.313117][T10990] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 321.313166][T10990] ? __pfx_nl80211_get_reg_do+0x10/0x10 [ 321.313190][T10990] ? __pfx_nl80211_post_doit+0x10/0x10 [ 321.313225][T10990] netlink_rcv_skb+0x159/0x420 [ 321.313247][T10990] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.313271][T10990] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.313289][T10990] ? rcu_is_watching+0x12/0xc0 [ 321.313350][T10990] ? __rcu_read_unlock+0x26a/0x5e0 [ 321.313367][T10990] ? rcu_is_watching+0x12/0xc0 [ 321.313391][T10990] genl_rcv+0x28/0x40 [ 321.313411][T10990] netlink_unicast+0x585/0x850 [ 321.313436][T10990] ? __pfx_netlink_unicast+0x10/0x10 [ 321.313463][T10990] netlink_sendmsg+0x8b0/0xda0 [ 321.313488][T10990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.313513][T10990] ? apparmor_socket_sendmsg+0x15b/0x270 [ 321.313593][T10990] ____sys_sendmsg+0xa4d/0xbe0 [ 321.313614][T10990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.313636][T10990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.313666][T10990] ___sys_sendmsg+0x190/0x1e0 [ 321.313689][T10990] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.313722][T10990] ? find_held_lock+0x2b/0x80 [ 321.313768][T10990] __sys_sendmsg+0x160/0x210 [ 321.313795][T10990] ? __pfx___sys_sendmsg+0x10/0x10 [ 321.313828][T10990] ? __pfx_ksys_write+0x10/0x10 [ 321.313853][T10990] __do_fast_syscall_32+0xe7/0x970 [ 321.313879][T10990] ? lockdep_hardirqs_on+0x78/0x100 [ 321.313905][T10990] do_fast_syscall_32+0x32/0x70 [ 321.313929][T10990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.313953][T10990] RIP: 0023:0xf702efec [ 321.313975][T10990] Code: Unable to access opcode bytes at 0xf702efc2. [ 321.313999][T10990] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 321.314017][T10990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 321.314029][T10990] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.314039][T10990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.314049][T10990] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 321.314059][T10990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.314084][T10990] [ 321.489584][T10992] program syz.5.1338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.493344][T10993] netlink: 'syz.5.1338': attribute type 49 has an invalid length. [ 321.623312][T10993] ip6gretap0: entered promiscuous mode [ 321.625937][T10993] ip6gretap0: entered allmulticast mode [ 321.812287][T11002] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1341'. [ 321.817565][T11002] 0{X: entered promiscuous mode [ 321.819643][T11002] 0{X: left allmulticast mode [ 321.863036][ T8761] usb 8-1: USB disconnect, device number 46 [ 321.878835][ T8761] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 321.958214][T11002] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1341'. [ 321.962320][T11002] 1{X: renamed from 30{X [ 321.970961][T11002] 1{X: left promiscuous mode [ 321.973510][T11002] 1{X: entered allmulticast mode [ 321.976887][T11002] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 322.549011][T11023] netdevsim netdevsim3: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 322.559479][T11023] netlink: 'syz.3.1344': attribute type 1 has an invalid length. [ 322.564068][T11023] netlink: 756 bytes leftover after parsing attributes in process `syz.3.1344'. [ 322.827194][ T34] usb 11-1: USB disconnect, device number 17 [ 322.830211][ T42] kauditd_printk_skb: 72 callbacks suppressed [ 322.830226][ T42] audit: type=1800 audit(1785907023.187:1013): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 322.951168][ T42] audit: type=1800 audit(1785907023.307:1014): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 322.989323][T11054] FAULT_INJECTION: forcing a failure. [ 322.989323][T11054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.994752][T11054] CPU: 3 UID: 0 PID: 11054 Comm: syz.1.1345 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.994782][T11054] Tainted: [L]=SOFTLOCKUP [ 322.994789][T11054] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 322.994801][T11054] Call Trace: [ 322.994808][T11054] [ 322.994818][T11054] dump_stack_lvl+0x100/0x190 [ 322.994849][T11054] should_fail_ex.cold+0x5/0xa [ 322.994875][T11054] _copy_to_user+0x32/0xd0 [ 322.994927][T11054] simple_read_from_buffer+0xcb/0x170 [ 322.994971][T11054] proc_fail_nth_read+0x1af/0x230 [ 322.995002][T11054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.995031][T11054] ? rw_verify_area+0xce/0x6d0 [ 322.995059][T11054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.995086][T11054] vfs_read+0x1e4/0xb40 [ 322.995110][T11054] ? __pfx_vfs_read+0x10/0x10 [ 322.995127][T11054] ? find_held_lock+0x2b/0x80 [ 322.995153][T11054] ? __fget_files+0x215/0x3d0 [ 322.995178][T11054] ? __fget_files+0x21f/0x3d0 [ 322.995204][T11054] ksys_read+0x12a/0x250 [ 322.995222][T11054] ? __pfx_ksys_read+0x10/0x10 [ 322.995249][T11054] do_int80_emulation+0x14b/0x720 [ 322.995281][T11054] asm_int80_emulation+0x1a/0x20 [ 322.995308][T11054] RIP: 0023:0xf71473eb [ 322.995325][T11054] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 322.995343][T11054] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 322.995364][T11054] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54065d0 [ 322.995378][T11054] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 322.995390][T11054] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.995401][T11054] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 322.995412][T11054] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.995438][T11054] [ 323.081578][ T42] audit: type=1800 audit(1785907023.357:1015): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 323.089359][ T42] audit: type=1800 audit(1785907023.407:1016): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 323.096919][T11061] nvmet: adding nsid 1 to subsystem subsys1 [ 323.099655][ T42] audit: type=1800 audit(1785907023.437:1017): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0 [ 323.113482][ T42] audit: type=1800 audit(1785907023.467:1018): pid=11061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1349" name="device_path" dev="configfs" ino=45277 res=0 errno=0 [ 323.119044][ T42] audit: type=1800 audit(1785907023.477:1019): pid=11061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1349" name="enable" dev="configfs" ino=45278 res=0 errno=0 [ 323.119386][T11061] [ 323.119396][T11061] ====================================================== [ 323.119416][T11061] WARNING: possible circular locking dependency detected [ 323.119426][T11061] syzkaller #0 Tainted: G L [ 323.119437][T11061] ------------------------------------------------------ [ 323.119443][T11061] syz.3.1349/11061 is trying to acquire lock: [ 323.119453][T11061] ffff8880287f2ed0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 323.119506][T11061] [ 323.119506][T11061] but task is already holding lock: [ 323.119512][T11061] ffff888013a0b868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 323.119596][T11061] [ 323.119596][T11061] which lock already depends on the new lock. [ 323.119596][T11061] [ 323.119602][T11061] [ 323.119602][T11061] the existing dependency chain (in reverse order) is: [ 323.119610][T11061] [ 323.119610][T11061] -> #2 (&subsys->lock){+.+.}-{4:4}: [ 323.119634][T11061] lock_acquire+0x1b9/0x370 [ 323.119658][T11061] __mutex_lock+0x1a4/0x1bd0 [ 323.119680][T11061] nvmet_ns_device_path_store+0x57/0x1c0 [ 323.119699][T11061] configfs_write_iter+0x302/0x4e0 [ 323.119716][T11061] vfs_write+0x6ac/0x1050 [ 323.119729][T11061] ksys_write+0x12a/0x250 [ 323.119743][T11061] __do_fast_syscall_32+0xe7/0x970 [ 323.119764][T11061] do_fast_syscall_32+0x32/0x70 [ 323.119785][T11061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.119805][T11061] [ 323.119805][T11061] -> #1 (&p->frag_sem){.+.+}-{4:4}: [ 323.119831][T11061] lock_acquire+0x1b9/0x370 [ 323.119855][T11061] down_read+0x99/0x4c0 [ 323.119876][T11061] __configfs_open_file+0xe8/0x9c0 [ 323.119890][T11061] do_dentry_open+0x6ab/0x14d0 [ 323.119933][T11061] vfs_open+0x82/0x3f0 [ 323.119956][T11061] dentry_open+0x71/0xd0 [ 323.119976][T11061] ima_calc_file_hash+0xe1/0x380 [ 323.119995][T11061] ima_collect_measurement+0x94f/0xb30 [ 323.120015][T11061] process_measurement+0xdfe/0x2350 [ 323.120033][T11061] ima_file_check+0xcc/0x120 [ 323.120050][T11061] security_file_post_open+0xc4/0x210 [ 323.120089][T11061] path_openat+0x985/0x4280 [ 323.120108][T11061] do_file_open+0x20e/0x430 [ 323.120125][T11061] do_sys_openat2+0x10f/0x1e0 [ 323.120144][T11061] __ia32_compat_sys_openat+0x12d/0x210 [ 323.120165][T11061] __do_fast_syscall_32+0xe7/0x970 [ 323.120186][T11061] do_fast_syscall_32+0x32/0x70 [ 323.120206][T11061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.120234][T11061] [ 323.120234][T11061] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 323.120261][T11061] check_prev_add+0xeb/0xe60 [ 323.120283][T11061] __lock_acquire+0x136c/0x1a40 [ 323.120307][T11061] lock_acquire+0x1b9/0x370 [ 323.120328][T11061] __mutex_lock+0x1a4/0x1bd0 [ 323.120346][T11061] process_measurement+0x5ab/0x2350 [ 323.120364][T11061] ima_file_check+0xcc/0x120 [ 323.120381][T11061] security_file_post_open+0xc4/0x210 [ 323.120400][T11061] path_openat+0x985/0x4280 [ 323.120415][T11061] do_file_open+0x20e/0x430 [ 323.120430][T11061] file_open_name+0x1c3/0x3e0 [ 323.120448][T11061] filp_open+0x2e/0x50 [ 323.120466][T11061] nvmet_file_ns_enable+0x95/0x420 [ 323.120488][T11061] nvmet_ns_enable+0x35f/0x5d0 [ 323.120508][T11061] nvmet_ns_enable_store+0x11e/0x160 [ 323.120525][T11061] configfs_write_iter+0x302/0x4e0 [ 323.120541][T11061] vfs_write+0x6ac/0x1050 [ 323.120554][T11061] ksys_write+0x12a/0x250 [ 323.120565][T11061] __do_fast_syscall_32+0xe7/0x970 [ 323.120584][T11061] do_fast_syscall_32+0x32/0x70 [ 323.120605][T11061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.120625][T11061] [ 323.120625][T11061] other info that might help us debug this: [ 323.120625][T11061] [ 323.120655][T11061] Chain exists of: [ 323.120655][T11061] &ima_iint_mutex_key[depth] --> &p->frag_sem --> &subsys->lock [ 323.120655][T11061] [ 323.120689][T11061] Possible unsafe locking scenario: [ 323.120689][T11061] [ 323.120695][T11061] CPU0 CPU1 [ 323.120701][T11061] ---- ---- [ 323.120708][T11061] lock(&subsys->lock); [ 323.120719][T11061] lock(&p->frag_sem); [ 323.120731][T11061] lock(&subsys->lock); [ 323.120743][T11061] lock(&ima_iint_mutex_key[depth]); [ 323.120755][T11061] [ 323.120755][T11061] *** DEADLOCK *** [ 323.120755][T11061] [ 323.120760][T11061] 6 locks held by syz.3.1349/11061: [ 323.120770][T11061] #0: ffff888058e6c470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 323.120810][T11061] #1: ffff888022a5a450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 323.120850][T11061] #2: ffff8880667a4880 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 323.120888][T11061] #3: ffff8880754c4570 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 323.120927][T11061] #4: ffffffff8fd33748 (nvmet_config_sem){+.+.}-{4:4}, at: nvmet_ns_enable_store+0xa5/0x160 [ 323.120968][T11061] #5: ffff888013a0b868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 323.121009][T11061] [ 323.121009][T11061] stack backtrace: [ 323.121022][T11061] CPU: 1 UID: 0 PID: 11061 Comm: syz.3.1349 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.121050][T11061] Tainted: [L]=SOFTLOCKUP [ 323.121058][T11061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 323.121067][T11061] Call Trace: [ 323.121074][T11061] [ 323.121081][T11061] dump_stack_lvl+0x100/0x190 [ 323.121103][T11061] print_circular_bug.cold+0x178/0x1c7 [ 323.121130][T11061] check_noncircular+0x146/0x160 [ 323.121153][T11061] ? arch_stack_walk+0xa6/0xf0 [ 323.121180][T11061] check_prev_add+0xeb/0xe60 [ 323.121230][T11061] ? stack_trace_save+0x8e/0xc0 [ 323.121257][T11061] __lock_acquire+0x136c/0x1a40 [ 323.121288][T11061] lock_acquire+0x1b9/0x370 [ 323.121312][T11061] ? process_measurement+0x5ab/0x2350 [ 323.121334][T11061] ? __pfx___might_resched+0x10/0x10 [ 323.121364][T11061] __mutex_lock+0x1a4/0x1bd0 [ 323.121386][T11061] ? process_measurement+0x5ab/0x2350 [ 323.121407][T11061] ? process_measurement+0x5ab/0x2350 [ 323.121429][T11061] ? __pfx___mutex_lock+0x10/0x10 [ 323.121451][T11061] ? __pfx___might_resched+0x10/0x10 [ 323.121476][T11061] ? down_write+0x146/0x1f0 [ 323.121501][T11061] ? process_measurement+0x5ab/0x2350 [ 323.121519][T11061] process_measurement+0x5ab/0x2350 [ 323.121540][T11061] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 323.121562][T11061] ? __pfx_process_measurement+0x10/0x10 [ 323.121581][T11061] ? tomoyo_check_open_permission+0x211/0x3c0 [ 323.121603][T11061] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 323.121626][T11061] ? hook_file_open+0x24f/0x8f0 [ 323.121653][T11061] ? __pfx_apparmor_file_open+0x10/0x10 [ 323.121673][T11061] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 323.121696][T11061] ima_file_check+0xcc/0x120 [ 323.121715][T11061] ? __pfx_ima_file_check+0x10/0x10 [ 323.121736][T11061] security_file_post_open+0xc4/0x210 [ 323.121758][T11061] path_openat+0x985/0x4280 [ 323.121778][T11061] ? __pfx_path_openat+0x10/0x10 [ 323.121796][T11061] ? kasan_save_stack+0x30/0x50 [ 323.121816][T11061] ? kasan_save_track+0x14/0x30 [ 323.121835][T11061] ? __kasan_slab_alloc+0x89/0x90 [ 323.121855][T11061] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 323.121872][T11061] ? do_getname_kernel+0x5d/0x250 [ 323.121890][T11061] ? filp_open+0x1d/0x50 [ 323.121909][T11061] ? nvmet_file_ns_enable+0x95/0x420 [ 323.121931][T11061] ? nvmet_ns_enable+0x35f/0x5d0 [ 323.121951][T11061] do_file_open+0x20e/0x430 [ 323.121968][T11061] ? __pfx_do_file_open+0x10/0x10 [ 323.121988][T11061] ? rcu_is_watching+0x12/0xc0 [ 323.122008][T11061] file_open_name+0x1c3/0x3e0 [ 323.122029][T11061] ? __pfx_file_open_name+0x10/0x10 [ 323.122049][T11061] ? do_getname_kernel+0x5d/0x250 [ 323.122067][T11061] ? __asan_memcpy+0x3c/0x60 [ 323.122084][T11061] ? do_getname_kernel+0x1be/0x250 [ 323.122102][T11061] filp_open+0x2e/0x50 [ 323.122122][T11061] nvmet_file_ns_enable+0x95/0x420 [ 323.122145][T11061] nvmet_ns_enable+0x35f/0x5d0 [ 323.122166][T11061] nvmet_ns_enable_store+0x11e/0x160 [ 323.122183][T11061] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 323.122199][T11061] ? configfs_write_iter+0x388/0x4e0 [ 323.122225][T11061] configfs_write_iter+0x302/0x4e0 [ 323.122245][T11061] vfs_write+0x6ac/0x1050 [ 323.122262][T11061] ? __pfx_configfs_write_iter+0x10/0x10 [ 323.122280][T11061] ? __pfx_vfs_write+0x10/0x10 [ 323.122298][T11061] ? find_held_lock+0x2b/0x80 [ 323.122327][T11061] ksys_write+0x12a/0x250 [ 323.122344][T11061] ? __pfx_ksys_write+0x10/0x10 [ 323.122361][T11061] __do_fast_syscall_32+0xe7/0x970 [ 323.122386][T11061] do_fast_syscall_32+0x32/0x70 [ 323.122411][T11061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.122432][T11061] RIP: 0023:0xf705efec [ 323.122452][T11061] Code: Unable to access opcode bytes at 0xf705efc2. [ 323.122460][T11061] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 323.122479][T11061] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000200 [ 323.122492][T11061] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.122501][T11061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.122511][T11061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.122521][T11061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.122536][T11061] [ 323.167487][T11064] lo: entered allmulticast mode [ 323.221277][ T42] audit: type=1800 audit(1785907023.577:1020): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 323.232152][T11064] lo: left allmulticast mode [ 323.505003][T11066] bond0: entered promiscuous mode [ 323.505027][T11066] bond_slave_0: entered promiscuous mode [ 323.505169][T11066] bond_slave_1: entered promiscuous mode [ 323.511042][T11066] batadv0: entered promiscuous mode [ 323.512008][T11066] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 323.513364][T11066] bond0: left promiscuous mode [ 323.513383][T11066] bond_slave_0: left promiscuous mode [ 323.513497][T11066] bond_slave_1: left promiscuous mode [ 323.516156][T11066] batadv0: left promiscuous mode [ 323.548540][ T42] audit: type=1800 audit(1785907023.907:1021): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16652 res=0 errno=0 [ 323.586112][ T42] audit: type=1800 audit(1785907023.937:1022): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16265 res=0 errno=0