last executing test programs: 4m36.33088307s ago: executing program 2 (id=108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f00000002c0)={0x3, [0x0, 0x0, 0x0]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000240)="0f2096660f1f2a7a007a003166ba420066b87aa966ef8fe828edf400b991020000b800000100ba000000000f30640f381c3e0f20e035020000000f22e00f01d1b9010100c0b80d000000ba010000000f30", 0x51}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40900, 0x0) ioctl$CDROMVOLCTRL(r3, 0x530a, &(0x7f00000000c0)={0x5, 0x2, 0x2f, 0x4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000013000/0x4000)=nil, &(0x7f000000d000/0x2000)=nil, &(0x7f000000c000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000015000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)="d13f2633f71ed5650aa6164b23842ca1335e70368c575f910d91", 0x1a, r2}, 0x68) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000180)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee88197c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r4, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) capset(&(0x7f0000000100)={0x19980330, r4}, &(0x7f0000000140)={0xa, 0x3, 0xa4f7, 0x23f3, 0x2, 0x1}) 4m36.140174213s ago: executing program 2 (id=111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x1000000, 0x3900, 0xfffffffe, 0x1e5}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="05082d"], 0x34}, 0x1, 0x0, 0x0, 0x2090}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20040d4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x5) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001c40)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24044811}, 0x0) 4m35.991758334s ago: executing program 2 (id=113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000140), 0xad, 0x400) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000040)={0x0, {0x0, 0x0, @vsb}}) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x15, &(0x7f0000000280)=[{0x20, '\x00', @data=0xfff, 0x2}]}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x10040) getpgid(0x0) fstat(r1, &(0x7f0000000180)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/intel_xhci_usb_sw/uevent\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r2 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x10007, 0xbc03) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000380)=""/155) 4m35.989651066s ago: executing program 2 (id=114): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="497c888cde71a6dde8386bec2fe0e8a96e8229d12eb95dcd04abf045463144233fa3fbddfe457cecd50bb6170f1eba2585127e1ffb48f9770d9c3e568729272122032d0ae76d8afb0ce174fbe5bafd272089547b55c6305136d9c4d8a06977d990cb4c1d7864721bf1221a0eae7e5aca7bc74f1d9c878047b54e7bbbbba283040a8f1e3da03cab7f666a8dc4d01b6db5b7a02179cd3fcb695d9b2126c6b06fa0b52f3e66ce19c6f3c7ed358f73ff4529a490d80a884d58df9c16931939218cf1076c9ea7cf2ac634775b6fa903ba02c5b3f9bc3184", @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600140000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x4600}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file7\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79") pwrite64(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0x35, 0x1000000) ioctl(r3, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e010000380100000100"/42) r4 = open(&(0x7f0000000100)='./file7/file0\x00', 0x60000, 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x10000000) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file7\x00', 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(r4, &(0x7f0000000000)='./file0\x00', 0x0) 4m35.748071204s ago: executing program 2 (id=115): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x40, 0x0}) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22) 4m35.381474731s ago: executing program 2 (id=120): io_submit(0x0, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x21000) 4m35.334252674s ago: executing program 32 (id=120): io_submit(0x0, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x21000) 3m35.991168005s ago: executing program 1 (id=1087): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) mount(&(0x7f0000000240)=@sr0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='f2fs\x00', 0x8c84, &(0x7f00000035c0)='quota') 3m35.931565654s ago: executing program 1 (id=1091): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 3m35.930261991s ago: executing program 1 (id=1093): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7a, &(0x7f0000000500)={@multicast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x1, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88ca}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0xb000000}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2}}}}}}}}}, 0x0) 3m35.861542867s ago: executing program 1 (id=1094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 3m35.861274991s ago: executing program 1 (id=1095): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\a\x00\x00\x00D\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/225, 0xe1}], 0x1}, 0x2142) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000200)='0', 0x1) 3m35.740215471s ago: executing program 1 (id=1100): mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x1002, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/vkms/mydev/planes/plane0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/vkms/mydev/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x2) 3m20.547131872s ago: executing program 33 (id=1100): mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x1002, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/vkms/mydev/planes/plane0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/vkms/mydev/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x2) 3m3.410866394s ago: executing program 4 (id=1485): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x100) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)=0x5) (async) flock(r0, 0x8) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f00000000c0)={0x3, 0xc, 0xfec00000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0xdb3}) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) (async) socket$packet(0x11, 0x3, 0x300) (async) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e21, 0x4, @mcast1, 0x7f}, 0x1c) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000003c0)={0x2, &(0x7f0000000280)=[{}, {}]}) (async) acct(&(0x7f0000000400)='./file0\x00') (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x90000, 0x0) mknodat$null(r2, &(0x7f0000000480)='./file0/../file0\x00', 0x80, 0x103) move_mount(r2, &(0x7f00000004c0)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x45) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000580)) (async) io_uring_register$IORING_REGISTER_PBUF_STATUS(r2, 0x1a, &(0x7f0000000640)={0x2}, 0x1) (async) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000680), 0x45000, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f00000006c0)) (async) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000700)={0x1, 0xffffffff, 0x8}) (async) ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000880)={0xffff, 0x10000, 0x0, 0x2a9a, 0x40, 0x3, 0x0, 0x282, 0x0, 0xfffffff9, 0x10, 0x9, &(0x7f0000000740)=[0x6], 0x1, &(0x7f0000000780)="0a4bb217bde65e5b9c2ea3dde3b1e307f5c7359ced038244f89346902796c22c0fce4edc40878914dd651d099e0d501c837413a84554b0b040c2e30abe1d6a7a9f99b8af07729b0eb1cdc5ac89cd3a8a4f282961215f826b768bad4e065aa03bdc3d03137f540bd2a7bb9e26e3c311a7280257e5f838dbbb948d63f6a49145d8f52a38f906536bc8f3902621e1e8764f485cf9c8d37c6404743d33967cce258a389abf19be20977f7713485513a855c3d8087eceddfa50af048693b489d59a0bd00163f9faa3e4999434bffb3c6c61b3a29e70512997693254c77c3e67b58a6f2c13aa4b383444c23c", 0xe9}) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000900)={0x0, 0x7, 0x7ff, 0x1}, &(0x7f0000000940)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000980)={r5, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x54, 0xad96}, 0x90) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000b80)=@urb_type_iso={0x0, {0xd, 0x1}, 0x1, 0x20, &(0x7f0000000a40)="879c1630f513df6a0e7e031d47f79bb9587c6f80ed0ca7717bb1ddec914ce3e5f3177d3c490767996c1a7db71bd88b973dc043bd1d28ebcd6bc7c1b9852e28a5a4e5191fbb8e0b529654", 0x4a, 0x3, 0x1000, 0x27, 0x9, 0x10001, &(0x7f0000000ac0)="85aec1c2f1fa87957b5dc72f4683e36b58b5bafc6b82c7b724e0203deb47836b585c61b5148ad0c248af3e67ed9861c579d2ccb9bbc7913887f3b8d5da4f72abb4aa4300cd1e5a7d16aeb6c93854d9cbf3122f9dd8f6b8f42f5732676aa4d41da5866b8cab48b1840f3628e2281090aad7f6cccf688cf352781fd363c81a8e79dbf67cca9a2f75940f5c08b9d568f64a1a11a7527a18e3ec8d9964454ec840", [{0x8, 0x1, 0xf}, {0x9, 0xf, 0x80000000}, {0x9f, 0x1, 0x6}, {0x37, 0xfffffff1, 0xfff}, {0x8001, 0x9}, {0x2be, 0x7ff, 0x3}, {0x7, 0xe1d9, 0x2}, {0x8, 0xd, 0x3}, {0x6, 0x192f, 0x1ff}, {0x94, 0xe, 0x9}, {0x1, 0xfff, 0x6}, {0xffff7016, 0x8, 0x9}, {0xbe6e, 0x547c, 0xfffffffd}, {0x7, 0x1, 0xf3}, {0x3, 0xfffffff9, 0x3}, {0xa0da, 0x2, 0x6}, {0x3}, {0x5, 0x2, 0x8}, {0x1, 0xffff, 0x7}, {0x607, 0x4, 0x2}, {0x5, 0x81, 0x2}, {0x4, 0x4, 0x3}, {0x9, 0x100, 0x3f4}, {0x1, 0x7, 0x5}, {0x7, 0x2, 0x4}, {0x9, 0x1, 0x803}, {0x10001, 0x1, 0x1}, {0xff, 0x60200000, 0x7}, {0x4, 0x7, 0x7}, {0x0, 0x5, 0x6}, {0x7, 0x579, 0x1}, {0x5, 0x1, 0x7}, {0x10000000, 0xd, 0x81}, {0x40, 0x4d, 0x2}, {0x9, 0x5, 0x5}, {0x6, 0x9, 0x2432e316}, {0x538c25b1, 0x0, 0xc}, {0x8, 0x100, 0x5}, {0xfffffff7, 0x0, 0xfffffffe}]}) (async) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000dc0)={0x3, 0x2, 0x2}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000e00)='bridge_slave_0\x00', 0x10) ioctl$UBLK_U_CMD_GET_PARAMS(r3, 0x80207509, &(0x7f0000000f00)={0x0, 0xffff, 0x70, &(0x7f0000000e80)={0x70}}) syz_open_dev$ublk_bdev(&(0x7f0000000e40), r7, 0x2) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 3m3.410750246s ago: executing program 4 (id=1486): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0x4}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_OCB(r1, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m3.393382919s ago: executing program 4 (id=1487): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r1], 0xb8}}, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0xb87, 0x200000000000000}, 0x800, 0x6e6bb0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x8, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @local, {[], {0x4e1f, 0x4e20, 0x8}}}}}}, 0x0) 3m3.362226701s ago: executing program 4 (id=1488): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$usbfs(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x8000005) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x34) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80a42, 0x47) write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x80000001, 0x8, '9P2000.L'}, 0x15) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000080)='net/rt_cache\x00') ioctl$UBLK_U_CMD_START_DEV(r1, 0xc0207506, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0x0}) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0', [{0x20, '$\x98)/-!/\\/$'}, {0x20, '/dev/dvb/adapter#/frontend#\x00'}, {}, {0x20, 'tmpfs\x00'}, {0x20, 'net/rt_cache\x00'}], 0xa, "8e96"}, 0x4b) setpgid(r2, r3) fallocate(r1, 0x0, 0x37e9, 0x2f92) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x30, 0x3, 0x1, 0xaa6c, 0xffffffffffffffff, 0x0, 0x60, 0x30, 0x30}]) io_destroy(r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x2, 0x5}}, 0x30) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3m3.215384357s ago: executing program 4 (id=1492): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) listen(0xffffffffffffffff, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000010058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r4, 0x6, 0x0) ptrace(0x10, r4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4209, r4, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c) r6 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r7 = dup(r6) sendmsg$kcm(r7, &(0x7f0000000880)={&(0x7f0000000080)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="7ab5d8f6158fa2c15b8a22527cc13cedf924b41f5fcac07919b33237dc0d47e44d8b243b9a447b555b995c49a922a0f88a00072e4fac647262256fc4042ee52d389ab090e45749992f50c3ecf4e2e94691d281e7a3febb71e2efc456abce3f9742aa9b7791f020", 0x67}, {&(0x7f0000000200)="8877e60fd948cb3cc4aa1416cee9a78af785259fbc85218687e86396f91cbc8cf6159d65e2a4d4ca520c800dc085dff8313bd887ba7adbb38c502ad5e34d718523db06b8e4386c8804db34c6b8edca414c682a6c0acac0afb10284715bf87719bc29e9a472fde8496c3b0206c0ba04541190b9b02f9be93b949185fc8b", 0x7d}], 0x2}, 0x4000050) write$binfmt_elf64(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606ff78b3050000000000000002003e00cd000000c9030000000000004000000000000000ea0200000000000002000100050038000101"], 0x178) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x30) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) landlock_restrict_self(r0, 0xa) 3m2.884095892s ago: executing program 4 (id=1498): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m2.778275554s ago: executing program 34 (id=1498): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m34.746972493s ago: executing program 0 (id=1945): lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000040)={{}, {}, [], {0x4, 0x6}, [], {0x10, 0x6}}, 0x24, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvfrom$inet6(r1, 0x0, 0x0, 0x2161, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) ioctl(r0, 0x8b32, &(0x7f0000000040)) (async) ioctl(r0, 0x8b32, &(0x7f0000000040)) 2m34.746805157s ago: executing program 0 (id=1946): openat$cachefiles(0xffffffffffffff9c, 0x0, 0x140, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) 2m34.726835817s ago: executing program 0 (id=1947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f}, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='/'], 0x20) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x15) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r5, &(0x7f0000000a80)=ANY=[], 0x9) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000240)={0x9, 0x3, 0xa, 0x6, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x23) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000900)={0x101f8, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="01c5cd9e3a91479f64b243183bc57aab64b7b9b5f2ca29cbdd02e0ae22c18b9aad1cfbb55fdaaadc457d45b6f5e13261dd99da792500", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x9}, 0x8) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@ifindex, 0x2b, 0x0, 0x1, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYBLOB="8bb49e914a4bd521a1700f89a510f3ea32520f7cebca0d26d89a4fd8e1c90500ce054fb19ada3a192caf11c4ae0008000066907d90e7616ec7f4b4777fbe5f88f5233b8f042fade1354d7ee5632da407550fd186cd413f4612c476186ecab849b49d50211fa6d1e082eeb5203654b497e051c43a9fdbb520291aa1f903affb66716feb9408af9a26b7db1f303e774d46c2cc66b473675d7292", @ANYRES64=r9], 0x20) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_udp_int(r5, 0x11, 0x65, &(0x7f0000000000)=0x2, 0x4) (async) r10 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r10, 0x40106f52, &(0x7f0000000000)={0x36, &(0x7f00000001c0)=[{0x14, '\x00', @data=0x2, 0x8}]}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m34.575826922s ago: executing program 0 (id=1948): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) ppoll(&(0x7f0000000000)=[{r1, 0x1000}], 0x1, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200), &(0x7f0000000240)={'enc=', 'oaep', ' hash=', {'tgr128\x00'}}, 0x0, 0x0) write$sndseq(r1, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000001140)={0x80, 0x21, 0x3, 0x7}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000480)={r0, &(0x7f0000000380)='+$(\x00', 0x60000, &(0x7f00000003c0)={@align=0x8586, {0x7fff, 0x5, 0x0, 0x2}}, 0xffffffff, &(0x7f0000000400), &(0x7f0000000440)=0x8}) read$FUSE(r2, &(0x7f00000011c0)={0x2020}, 0x2020) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000340)) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, 0x7}, 0x20) r3 = syz_open_dev$video(0x0, 0x4, 0x103000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001000000b299beccf9cacd792480000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x17) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000100)={0x4, "a067f969b1b6f22c7febdbe5d1f6917841b81144e250e2e8410c682c46c79562", 0x1, 0x9, 0x2, 0x7, 0x600, 0x8}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/vim2m/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='vim2m.0\x00', 0x8) write$sndseq(r5, &(0x7f00000004c0), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x3d}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) 2m33.690237171s ago: executing program 0 (id=1960): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) io_uring_enter(r3, 0x1336, 0x4127, 0x20, &(0x7f00000001c0)={[0x8]}, 0x8) (async) getsockopt$inet_int(r1, 0x0, 0x32, 0x0, &(0x7f0000000040)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x100000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2100) (async) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x0, 0x0, r1}) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x5, @local, 0x5}, 0x1c) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x1e, 0x4, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0xe4, 0x24, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x4, 0x9, 0x80, 0x0, 0x5, 0x10000000, 0xa}}, {0x18, 0x2, [0x800, 0x3, 0x5, 0x5, 0x40a8, 0x1a57, 0x1ff, 0x2, 0x2c, 0x1]}}, {{0x1c, 0x1, {0x3e, 0xf4, 0x7, 0x80, 0x0, 0x4, 0x5, 0x5}}, {0xe, 0x2, [0xc, 0x80, 0x6, 0xfffc, 0x9]}}, {{0x1c, 0x1, {0xe5, 0x0, 0xa, 0x8000, 0x1, 0x6, 0x2, 0x7}}, {0x12, 0x2, [0xa, 0x1000, 0x8, 0x9, 0x1, 0x0, 0x6]}}, {{0x1c, 0x1, {0x2, 0x0, 0x9, 0x6, 0x1, 0x5, 0x3, 0x6}}, {0x10, 0x2, [0x7, 0x7, 0x9, 0x5, 0x80, 0x2]}}]}]}, 0xe4}}, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r10, 0xc10c5541, &(0x7f00000004c0)={0xbc, 0x1f, 0x1}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xb}, {}, {0x6, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtclass={0x48, 0x28, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4}, {0x6, 0xf}, {0xf, 0x5}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0xf}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_clsact={0xb}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 2m33.603052646s ago: executing program 0 (id=1963): io_setup(0x9, &(0x7f0000000f40)=0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='ntfs3\x00', 0x8080, &(0x7f0000000100)='discard') io_setup(0x3, &(0x7f0000000000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000002c0)=r1) io_cancel(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@TCA_RATE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000100000071181300000000009500000000000000ca6c4e92aee17acfc79a30ff60eb8770b0cd7997d14c1a867743ab3c06edf30e84719f489ffaa64dc0f5a9dfdc8d899690225acb2722dba4adfa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x24, r2}, 0x94) 2m17.405236462s ago: executing program 35 (id=1963): io_setup(0x9, &(0x7f0000000f40)=0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='ntfs3\x00', 0x8080, &(0x7f0000000100)='discard') io_setup(0x3, &(0x7f0000000000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000002c0)=r1) io_cancel(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@TCA_RATE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000100000071181300000000009500000000000000ca6c4e92aee17acfc79a30ff60eb8770b0cd7997d14c1a867743ab3c06edf30e84719f489ffaa64dc0f5a9dfdc8d899690225acb2722dba4adfa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x24, r2}, 0x94) 1m30.337280491s ago: executing program 7 (id=2719): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x1ff) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) r2 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x8042) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x60, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x42, 0xe, {{{}, {}, @broadcast, @broadcast, @from_mac, {0x0, 0x20}}, 0x0, @random=0x2, 0x1, @void, @void, @val={0x3, 0x1, 0x6}, @void, @val={0x6, 0x2, 0x1}, @val={0x5, 0x3, {0x4, 0xab, 0x7}}, @val={0x25, 0x3, {0x0, 0x99, 0x1}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x81, 0xa, 0x3}}, @void, @void, @void, @void}}]]}, 0x60}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x822f01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mq_notify(r2, &(0x7f00000003c0)={0x0, 0xd, 0x1, @thr={0x0, 0x0}}) read(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x1c, "5f3c9d676ca0c2757b4b0a6d7e193ef53ad759eb87444b58c2639359"}, &(0x7f0000000200)=0x24) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x3}) close(r8) 1m29.841817577s ago: executing program 7 (id=2722): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1e) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x1}, 0x80000000}], 0x1, 0x2, 0x0) 1m29.819654556s ago: executing program 7 (id=2724): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xd27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 1m29.528833734s ago: executing program 7 (id=2730): r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0) 1m29.484260957s ago: executing program 7 (id=2731): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000300850000fbbffc7254ccf2770000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x4420, 0x0, "bb02a3c344ca41d6357e544508474004000b42920e61074e0000c534a632cd6193fcf19b2df3eea18b56c54dc46d8b6d2ccd00a0cf11007bbe000400"}, 0xd8) r3 = socket$kcm(0x23, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee38192714", 0x17}], 0x1}], 0x1, 0x40800) listen(r3, 0x800) accept4(r3, 0x0, 0x0, 0x80000) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000500)={0x9}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/net2280/new_id\x00', 0x1, 0x0) write(r8, &(0x7f0000001100)='8086 29c0 ffffffff ffffffff 0 0 1\x00', 0x22) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000180)=0xa7) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300006e00000000000000b7020000000000007b9af0ff00000000c509000058020010c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf7620000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m29.203261536s ago: executing program 7 (id=2735): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_hsr\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x10000) sendfile(r0, r1, 0x0, 0x7ffff004) 1m13.072425978s ago: executing program 36 (id=2735): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_hsr\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x10000) sendfile(r0, r1, 0x0, 0x7ffff004) 11.386621612s ago: executing program 8 (id=3642): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000b"], 0x44}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/139, 0x8b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345ed0fc", 0x43}], 0x1}}], 0x3, 0x60cd894) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x8000, 0x20}, 0xc) 9.27557219s ago: executing program 8 (id=3650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48dfffa600000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r8, 0xc008aec1, &(0x7f0000000080)={0x16, 0x0, [{0x1, 0x1, 0x3, 0x1, 0x9, 0x3b1c8fde, 0x5}]}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000080)={0x1b, 0x0, [{0xd, 0x4, 0x1, 0x322a, 0xeb, 0x2, 0x8}]}) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) listen(r4, 0x0) close(0x3) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000300001801c000280080002007f000000080001001d0000000a000300ff0f00000d0001"], 0x44}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x25000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_NMI(r10, 0xae9a) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TCXONC(r11, 0x540a, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r11, &(0x7f0000002540)={0x18, 0x0, r12, {0x5}}, 0x18) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 8.143488855s ago: executing program 8 (id=3666): syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x11ea, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 8.141624846s ago: executing program 8 (id=3667): r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)='1', 0x1) 8.046987813s ago: executing program 8 (id=3668): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r1 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = fspick(r0, &(0x7f00000000c0)='./pipefs/gssd/clntXX/gssd\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000580)='source\x00', &(0x7f00000008c0)='127.0.0.1:/\x00\xfe\x1d\v\xa6N;/\x8f\x7f$f\xda\x97\x9f\xaa\xbe\'9\xb8\xb3\t\x8cp\xe3>\x8fs\xb0\xbfF\xf4\xc1\x868\x19\x122E\x92\xdaj\xfcK\xf9\xc1\x1b\x06\xfb\x15t?E\xe5\xf8\xd1\xf0F\xee\xf3\xb5\x19\xd2OVM-\xcd\xb2\x1b\x86}\xcc\x9f\x83\xb6Z\xbd\xa3Q\xa2\x03_rF\x05R\xeb\xce\xc7\xaeAK\x8d\b\xf2lMlXvWj\xc6\x8c\xb6UG+\x06\x9ca\xbf\xcb\xb3\xad\xd6\x89\xaf]\x8e\x19=9~X\xf8p\xc9\xfd%[\x91c\\@\xdb\x87.\x85y\xca\xd5c\x8a\xef\x15\xdf\xd6\xe80}9\br\xee\xd2}>\xc0J\xf1\xd9#\xc7\x1b\xb0\xf4k\xf0&\x0er\xd7\x15\xdd\xf6\x99\x81\xe3.SW\x97\xb7\xb6|/\x1e\n;8^\xf6\xb0\xe5\xa6\n\x81MF8+{\x9dY\x95\xef\x9c\x91\xd4\xe1', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000340)="0f01bea944756f26670fc72bc4e2612f0cef36f20f2abf534084ed66bad004b06cee0f20e7660f38f6dc66b846000f00d0c4c2f99054e09f640f01c2", 0x3c}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_clone3(&(0x7f0000000180)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$bt_hci(r7, &(0x7f0000000000)=ANY=[], 0x6) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r8, 0xc008561c, &(0x7f0000000100)={0x9e0901, 0x3, @name="733b1b3ddc70b6f38e3ee4077387b4301399da6f4f92716833487754e797736d"}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xc6, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x35, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, r9}, 0x94) 7.845141393s ago: executing program 8 (id=3671): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) accept$alg(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) write(r1, &(0x7f0000000200)='1', 0x1) r2 = syz_open_dev$swradio(&(0x7f0000000500), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0xf0f044, 0x7ff}) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000100)=""/179, 0xb3}], 0x1, 0x9, 0xe000000) syz_open_dev$mouse(&(0x7f0000000240), 0x7ffe, 0x644042) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000100)=0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff}) readv(r6, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/75, 0x4b}], 0x1) ioctl$PPPIOCATTCHAN(r5, 0x40047457, 0x0) 4.579533616s ago: executing program 5 (id=3691): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="19022bbd7000fedbdf25200000000c000500000000000000"], 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) 4.546234397s ago: executing program 5 (id=3692): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x154a, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xfffffffffffffffe}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.468757979s ago: executing program 5 (id=3693): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') setreuid(0x0, 0xee01) fchdir(r0) file_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x7, 0x5b1, 0x1aa3, 0x5d}, 0x18, 0x400) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000480)={{0xffffffffffffffff, &(0x7f0000000180)='sockfs\x00', 0x58801, &(0x7f00000002c0)={@_ha_fsid={[0x8, 0xb5]}, {0x4, 0x6, 0xfff, 0x1}}, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4}, {[0x7fffffff, 0xcc, 0x8, 0x7f]}, 0x12, 0xe8, &(0x7f0000000380)=""/232}) accept4$phonet_pipe(r1, &(0x7f0000000500), &(0x7f0000000540)=0x10, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r3 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000002680)={0x18000000, 0x5}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='sockfs\x00', 0x8838, &(0x7f0000000280)='$@\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x78}}, 0x20044081) 4.467688656s ago: executing program 5 (id=3694): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x1, 0x3, 0xb, 0x2, 0x0, 0x0, 0x80, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c374b96ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x5, {0xb, 0x2, 0x0, {0x2, 0x9, 0x1000, 0x90000005, 0x2000000000001, 0x8000000000000001, 0x9ec, 0x35741061, 0x40, 0xa593e9c1ca988eda, 0xfffffff9, 0x0, 0xee01, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.443984114s ago: executing program 5 (id=3695): syz_emit_ethernet(0x0, 0x0, 0x0) 1.831613618s ago: executing program 5 (id=3696): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f0002000000090505020006", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40045b0a, &(0x7f0000000000)={0x80000001, 0xfffffffe, 0x7, 0xff, 0x1}) 1.562408127s ago: executing program 3 (id=3722): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) listen(0xffffffffffffffff, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000010058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="4b53bc6d85bf1a06533f04089a401c6a2cfbd0371220ca9c1d843f7bb3df6d57bbac6e0eab61c3e2382af3f570774b7235b8a80f9a7c9671145360b8865fe649c259248bcb23be974347adf616340aa88fc94b20cc6f12cc777a63a16669abd4b88f467a73d05d6ed5a9d3ecb071a175d34ea96ea0c1fb702f18567c88b1a2aab5f8d1161772740a08e8ffa614931a7d8636ed35d781e6a48d416ab3b1e9e35a1b6edfff3046dfd504740cfc1c7a719800a77fe9bbb78e1114d1a78833cf36466fdf4028988ec608fe774794204fc1130115bb1bd204cc56adb3017a949a39"], 0x10}}], 0x1, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r4, 0x6, 0x0) ptrace(0x10, r4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4209, r4, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c) r6 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r7 = dup(r6) sendmsg$kcm(r7, &(0x7f0000000880)={&(0x7f0000000080)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="7ab5d8f6158fa2c15b8a22527cc13cedf924b41f5fcac07919b33237dc0d47e44d8b243b9a447b555b995c49a922a0f88a00072e4fac647262256fc4042ee52d389ab090e45749992f50c3ecf4e2e94691d281e7a3febb71e2efc456abce3f9742aa9b7791f0", 0x66}, {&(0x7f0000000200)="8877e60fd948cb3cc4aa1416cee9a78af785259fbc85218687e86396f91cbc8cf6159d65e2a4d4ca520c800dc085dff8313bd887ba7adbb38c502ad5e34d718523db06b8e4386c8804db34c6b8edca414c682a6c0acac0afb10284715bf87719bc29e9a472fde8496c3b0206c0ba04541190b9b02f9be93b949185fc8b", 0x7d}], 0x2}, 0x4000050) write$binfmt_elf64(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606ff78b3050000000000000002003e00cd000000c9030000000000004000000000000000ea0200000000000002000100050038000101"], 0x178) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x30) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) landlock_restrict_self(r0, 0xa) 707.153385ms ago: executing program 6 (id=3729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000000300010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) 641.276724ms ago: executing program 6 (id=3730): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r2, &(0x7f0000009b40)="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", 0x2000, 0x0) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x5, {0xb, 0x2, 0x0, {0x2, 0x9, 0x1000, 0x90000005, 0x2000000000001, 0x8000000000000001, 0x9ec, 0x35741061, 0x40, 0xa593e9c1ca988eda, 0xfffffff9, 0x0, 0xee01, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 639.911001ms ago: executing program 3 (id=3731): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)={0x2000, 0x80, 0x19}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdfe45400c40008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000054}, 0x8014) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r4, 0x4100}], 0x1, 0x1) r5 = openat(r4, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn\x00', 0x8000, 0x91) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r5) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x8c, r7, 0xb06, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xef}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400c081}, 0x2) write(r6, &(0x7f0000000480)='./backing_file', 0xe) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x150, 0x10, 0x1, 0x1, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x1234, 0x32}, @in6=@empty, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x34ff, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "000102030405060708090a0b0c0d0e0f00010203"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newpolicy={0xfc, 0x13, 0x1, 0x2, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@empty, 0x34ff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x11) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000300)=0x1, 0x4) r10 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r10, &(0x7f0000000580)='1', 0x1) 633.845308ms ago: executing program 6 (id=3732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000200)=@x86={0x7d, 0x3, 0x0, 0x0, 0x8, 0x8c, 0x7, 0x5, 0x7, 0x9, 0x9, 0x7, 0x0, 0x0, 0x300, 0xf, 0x8, 0x65, 0x1, '\x00', 0x7, 0xa}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000700)={0x2, 0x0, @ioapic={0xc000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x5}, {0x9, 0x5, 0xff, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x2, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x5f, 0x54, '\x00', 0xff}, {0x71, 0xd1, 0x81, '\x00', 0x7f}, {0x6, 0x4, 0xc}, {0x7f, 0x5, 0xa, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xde}, {0xff, 0x1, 0xfe, '\x00', 0xc0}, {0xfe, 0x5, 0x26}, {0xce, 0x0, 0x3, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x38, 0x0, 0x40, '\x00', 0xf}, {0x3f, 0x6, 0x2, '\x00', 0x28}, {0x1, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xf4}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0x9, 0x80, '\x00', 0x7f}, {0xff, 0x6, 0x3, '\x00', 0x10}, {0x5, 0x23, 0xf3, '\x00', 0x4}, {0x87, 0x6, 0x84}]}}) 572.809924ms ago: executing program 3 (id=3733): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="19022bbd7000fedbdf25200000000c00050000000000000000020a0001007770616e3100000009001f00"], 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) 541.538325ms ago: executing program 3 (id=3734): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=r0, @ANYBLOB="0000000008001f00400000001400", @ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 506.477916ms ago: executing program 3 (id=3735): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x04', 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='1\n', 0x2) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r2, &(0x7f0000000540)='2', 0x1) write(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$NILFS_IOCTL_SYNC(r5, 0x80086e8a, &(0x7f0000000200)) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x92500, 0x0) read$FUSE(r4, &(0x7f0000002980)={0x2020}, 0x2020) 364.000376ms ago: executing program 6 (id=3736): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') read$msr(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x328, 0x20a, 0x278, 0x328, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {0xff}, 0x3c, 0x0, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x8638, [0x6, 0x4], 0x4, 0x0, 0xa, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, @private0, @remote, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], 0x8}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x1, 0x4}, {0xfffd, 0x2, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 288.842786ms ago: executing program 6 (id=3737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000200)="66b9a00d00000f32dbd567f0879f00a00000670f4fa1ea000000660f388080062e0f01c5baf80c66b8d789868866efbafc0cec0f0666b9800000c00f320f304466b8010000000f23d80f21f86635800000300f23f866350a00000044360f01d1", 0x60}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 26) 252.645863ms ago: executing program 3 (id=3738): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000010401020000000000000000010000010800044000000007050001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x4a, 0x0, {0x7, 0x1f, 0x5, 0xffffffffd3110f4f, 0x9a64, 0x8002, 0x200, 0xffeffffd, 0x0, 0x0, 0x10, 0x103}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@getpolicy={0x58, 0x15, 0x1, 0x30bd28, 0x25dfdbfc, {{@in=@multicast1, @in=@remote, 0x4e23, 0x0, 0x4e21, 0x9, 0x2, 0x20, 0xa0, 0x6c}, 0x6e6bb5}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0c00028006"], 0x24}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000006c0)={'wlan1\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x13, 0x80005, 0x1, 0x2}}) 0s ago: executing program 6 (id=3739): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) listen(0xffffffffffffffff, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000010058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="4b53bc6d85bf1a06533f04089a401c6a2cfbd0371220ca9c1d843f7bb3df6d57bbac6e0eab61c3e2382af3f570774b7235b8a80f9a7c9671145360b8865fe649c259248bcb23be974347adf616340aa88fc94b20cc6f12cc777a63a16669abd4b88f467a73d05d6ed5a9d3ecb071a175d34ea96ea0c1fb702f18567c88b1a2aab5f8d1161772740a08e8ffa614931a7d8636ed35d781e6a48d416ab3b1e9e35a1b6edfff3046dfd504740cfc1c7a719800a77fe9bbb78e1114d1a78833cf36466fdf4028988ec608fe774794204fc1130115bb1bd204cc56adb3017a949a39"], 0x10}}], 0x1, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r4, 0x6, 0x0) ptrace(0x10, r4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4209, r4, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c) r6 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r7 = dup(r6) sendmsg$kcm(r7, &(0x7f0000000880)={&(0x7f0000000080)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="7ab5d8f6158fa2c15b8a22527cc13cedf924b41f5fcac07919b33237dc0d47e44d8b243b9a447b555b995c49a922a0f88a00072e4fac647262256fc4042ee52d389ab090e45749992f50c3ecf4e2e94691d281e7a3febb71e2efc456abce3f9742aa9b7791f0", 0x66}, {&(0x7f0000000200)="8877e60fd948cb3cc4aa1416cee9a78af785259fbc85218687e86396f91cbc8cf6159d65e2a4d4ca520c800dc085dff8313bd887ba7adbb38c502ad5e34d718523db06b8e4386c8804db34c6b8edca414c682a6c0acac0afb10284715bf87719bc29e9a472fde8496c3b0206c0ba04541190b9b02f9be93b949185fc8b", 0x7d}], 0x2}, 0x4000050) write$binfmt_elf64(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606ff78b3050000000000000002003e00cd000000c9030000000000004000000000000000ea0200000000000002000100050038000101"], 0x178) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x30) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) landlock_restrict_self(r0, 0xa) kernel console output (not intermixed with test programs): FFFFFFF:0000.000B: unknown main item tag 0x0 [ 298.239488][ T10] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 298.243763][ T10] hid-generic 0004:FFFFFFFF:0000.000B: unknown main item tag 0x0 [ 298.252260][ T10] hid-generic 0004:FFFFFFFF:0000.000B: hidraw1: HID v0.00 Device [syz0] on syz0 [ 298.302243][T22987] fido_id[22987]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 298.530064][T23002] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3278'. [ 298.873335][T23022] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 298.935801][ T5527] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 299.010167][T23033] FAULT_INJECTION: forcing a failure. [ 299.010167][T23033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.016709][T23033] CPU: 3 UID: 0 PID: 23033 Comm: syz.5.3286 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.016741][T23033] Tainted: [L]=SOFTLOCKUP [ 299.016750][T23033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.016763][T23033] Call Trace: [ 299.016771][T23033] [ 299.016781][T23033] dump_stack_lvl+0x100/0x190 [ 299.016834][T23033] should_fail_ex.cold+0x5/0xa [ 299.016863][T23033] _copy_from_user+0x2e/0xd0 [ 299.016895][T23033] copy_msghdr_from_user+0x9f/0x4c0 [ 299.016920][T23033] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 299.016946][T23033] ? rcu_is_watching+0x12/0xc0 [ 299.016979][T23033] ? ___sys_sendmsg+0x19d/0x1e0 [ 299.016998][T23033] ? kfree+0x1e5/0x6c0 [ 299.017041][T23033] ___sys_sendmsg+0x106/0x1e0 [ 299.017065][T23033] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.017109][T23033] ? __pfx___might_resched+0x10/0x10 [ 299.017138][T23033] __sys_sendmmsg+0x20c/0x440 [ 299.017167][T23033] ? __pfx___sys_sendmmsg+0x10/0x10 [ 299.017192][T23033] ? ksys_write+0x190/0x250 [ 299.017227][T23033] ? fput+0x79/0x100 [ 299.017250][T23033] ? ksys_write+0x1ac/0x250 [ 299.017265][T23033] ? __pfx_ksys_write+0x10/0x10 [ 299.017285][T23033] __x64_sys_sendmmsg+0x9c/0x100 [ 299.017308][T23033] ? lockdep_hardirqs_on+0x78/0x100 [ 299.017330][T23033] do_syscall_64+0x115/0x870 [ 299.017350][T23033] ? clear_bhb_loop+0x40/0x90 [ 299.017372][T23033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.017391][T23033] RIP: 0033:0x7fca3c19e0d9 [ 299.017407][T23033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.017423][T23033] RSP: 002b:00007fca3cfb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 299.017440][T23033] RAX: ffffffffffffffda RBX: 00007fca3c425fa0 RCX: 00007fca3c19e0d9 [ 299.017451][T23033] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 299.017461][T23033] RBP: 00007fca3cfb9090 R08: 0000000000000000 R09: 0000000000000000 [ 299.017472][T23033] R10: 000000000000ffe0 R11: 0000000000000246 R12: 0000000000000002 [ 299.017482][T23033] R13: 00007fca3c426038 R14: 00007fca3c425fa0 R15: 00007ffe6d6b63e8 [ 299.017506][T23033] [ 299.096094][ T5527] usb 11-1: device descriptor read/64, error -71 [ 299.121830][ T42] audit: type=1400 audit(1785929751.871:1157): avc: denied { getopt } for pid=23034 comm="syz.5.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 299.374214][ T5527] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 299.496914][T23060] team_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 299.523535][ T5527] usb 11-1: device descriptor read/64, error -71 [ 299.653102][ T5527] usb usb11-port1: attempt power cycle [ 300.025767][ T5527] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 300.047881][ T5527] usb 11-1: device descriptor read/8, error -71 [ 300.105182][T23064] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 300.314756][ T5527] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 300.340859][ T5527] usb 11-1: device descriptor read/8, error -71 [ 300.453679][ T5527] usb usb11-port1: unable to enumerate USB device [ 300.575399][T23087] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3299'. [ 301.440161][T23117] netlink: 'syz.8.3305': attribute type 5 has an invalid length. [ 301.455752][T23117] ip6erspan0: entered promiscuous mode [ 301.923262][ T42] audit: type=1326 audit(1785929754.492:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23135 comm="syz.6.3309" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cc519e0d9 code=0x0 [ 302.127001][ T42] audit: type=1400 audit(1785929754.679:1159): avc: denied { read write } for pid=23142 comm="syz.5.3311" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 302.137053][ T42] audit: type=1400 audit(1785929754.679:1160): avc: denied { open } for pid=23142 comm="syz.5.3311" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 302.176707][T23148] xt_hashlimit: size too large, truncated to 1048576 [ 302.231721][T23150] No source specified [ 302.514299][T23172] FAULT_INJECTION: forcing a failure. [ 302.514299][T23172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.521106][T23172] CPU: 2 UID: 0 PID: 23172 Comm: syz.3.3317 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.521135][T23172] Tainted: [L]=SOFTLOCKUP [ 302.521142][T23172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 302.521152][T23172] Call Trace: [ 302.521161][T23172] [ 302.521168][T23172] dump_stack_lvl+0x100/0x190 [ 302.521254][T23172] should_fail_ex.cold+0x5/0xa [ 302.521279][T23172] _copy_from_user+0x2e/0xd0 [ 302.521316][T23172] copy_msghdr_from_user+0x9f/0x4c0 [ 302.521352][T23172] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 302.521374][T23172] ? rcu_is_watching+0x12/0xc0 [ 302.521418][T23172] ? ___sys_sendmsg+0x19d/0x1e0 [ 302.521452][T23172] ? kfree+0x1e5/0x6c0 [ 302.521492][T23172] ___sys_sendmsg+0x106/0x1e0 [ 302.521512][T23172] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.521551][T23172] ? __pfx___might_resched+0x10/0x10 [ 302.521578][T23172] __sys_sendmmsg+0x20c/0x440 [ 302.521605][T23172] ? __pfx___sys_sendmmsg+0x10/0x10 [ 302.521627][T23172] ? ksys_write+0x190/0x250 [ 302.521662][T23172] ? fput+0x79/0x100 [ 302.521683][T23172] ? ksys_write+0x1ac/0x250 [ 302.521699][T23172] ? __pfx_ksys_write+0x10/0x10 [ 302.521719][T23172] __x64_sys_sendmmsg+0x9c/0x100 [ 302.521743][T23172] ? lockdep_hardirqs_on+0x78/0x100 [ 302.521788][T23172] do_syscall_64+0x115/0x870 [ 302.521810][T23172] ? clear_bhb_loop+0x40/0x90 [ 302.521832][T23172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.521851][T23172] RIP: 0033:0x7f6f94d9e0d9 [ 302.521867][T23172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.521885][T23172] RSP: 002b:00007f6f95cf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 302.521904][T23172] RAX: ffffffffffffffda RBX: 00007f6f95025fa0 RCX: 00007f6f94d9e0d9 [ 302.521916][T23172] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 302.521926][T23172] RBP: 00007f6f95cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 302.521937][T23172] R10: 000000000000ffe0 R11: 0000000000000246 R12: 0000000000000002 [ 302.521948][T23172] R13: 00007f6f95026038 R14: 00007f6f95025fa0 R15: 00007fff16f3ce08 [ 302.521972][T23172] [ 302.595065][T23182] i2c i2c-0: delete_device: Can't find device in list [ 302.608999][T23181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3313'. [ 302.609930][T23182] ipt_REJECT: ECHOREPLY no longer supported. [ 302.623019][T23182] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3320'. [ 302.627784][T23182] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3320'. [ 302.813088][T23196] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 302.849582][T23196] can: request_module (can-proto-0) failed. [ 303.106027][ T42] audit: type=1326 audit(1785929755.596:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23217 comm="syz.6.3329" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8cc519e0d9 code=0x0 [ 303.392331][ T42] audit: type=1400 audit(1785929755.867:1162): avc: denied { view } for pid=23226 comm="syz.5.3331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 303.533911][T23244] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 303.829017][T23265] 9p: Bad value for 'wfdno' [ 303.836507][T23265] socket: no more sockets [ 303.859145][T23261] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3338'. [ 303.930605][T23275] comedi comedi0: comedi_config --init_data is deprecated [ 304.033972][T23281] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 304.623886][T23295] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3346'. [ 304.628528][T23295] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3346'. [ 304.686198][T23299] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 304.908418][T23314] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3350'. [ 304.913681][T23314] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3350'. [ 304.941877][ T42] audit: type=1326 audit(1785929757.318:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23315 comm="syz.3.3351" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f94d9e0d9 code=0x0 [ 304.988404][T23323] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 305.302287][T23347] FAULT_INJECTION: forcing a failure. [ 305.302287][T23347] name failslab, interval 1, probability 0, space 0, times 0 [ 305.307351][T23347] CPU: 3 UID: 0 PID: 23347 Comm: syz.8.3358 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.307370][T23347] Tainted: [L]=SOFTLOCKUP [ 305.307374][T23347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 305.307381][T23347] Call Trace: [ 305.307385][T23347] [ 305.307390][T23347] dump_stack_lvl+0x100/0x190 [ 305.307442][T23347] should_fail_ex.cold+0x5/0xa [ 305.307459][T23347] should_failslab+0xc2/0x120 [ 305.307481][T23347] kmem_cache_alloc_noprof+0x91/0x6a0 [ 305.307495][T23347] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 305.307513][T23347] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 305.307530][T23347] mmu_topup_memory_caches+0x25/0x170 [ 305.307554][T23347] kvm_mmu_load+0xe2/0x2570 [ 305.307569][T23347] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 305.307581][T23347] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 305.307594][T23347] ? __pfx_kvm_mmu_load+0x10/0x10 [ 305.307608][T23347] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 305.307622][T23347] ? kvm_check_and_inject_events+0x873/0x12a0 [ 305.307638][T23347] ? record_steal_time+0x3a0/0xbb0 [ 305.307651][T23347] vcpu_run+0x3aaa/0x5de0 [ 305.307672][T23347] ? __pfx_vcpu_run+0x10/0x10 [ 305.307692][T23347] ? rcu_is_watching+0x12/0xc0 [ 305.307712][T23347] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 305.307728][T23347] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 305.307748][T23347] kvm_vcpu_ioctl+0x730/0x1700 [ 305.307761][T23347] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 305.307774][T23347] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 305.307790][T23347] ? do_vfs_ioctl+0x226/0x13e0 [ 305.307811][T23347] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 305.307828][T23347] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 305.307857][T23347] ? __fget_files+0x215/0x3d0 [ 305.307868][T23347] ? hook_file_ioctl_common+0x140/0x440 [ 305.307886][T23347] ? selinux_file_ioctl+0x13b/0x290 [ 305.307902][T23347] ? selinux_file_ioctl+0xb6/0x290 [ 305.307925][T23347] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 305.307938][T23347] __x64_sys_ioctl+0x18e/0x210 [ 305.307955][T23347] do_syscall_64+0x115/0x870 [ 305.307985][T23347] ? clear_bhb_loop+0x40/0x90 [ 305.307999][T23347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.308010][T23347] RIP: 0033:0x7f90d9f9e0d9 [ 305.308021][T23347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.308031][T23347] RSP: 002b:00007f90dadf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.308043][T23347] RAX: ffffffffffffffda RBX: 00007f90da225fa0 RCX: 00007f90d9f9e0d9 [ 305.308050][T23347] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 305.308056][T23347] RBP: 00007f90dadf1090 R08: 0000000000000000 R09: 0000000000000000 [ 305.308063][T23347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 305.308069][T23347] R13: 00007f90da226038 R14: 00007f90da225fa0 R15: 00007ffd269fedf8 [ 305.308082][T23347] [ 305.935228][ T42] audit: type=1400 audit(1785929758.235:1164): avc: denied { setopt } for pid=23362 comm="syz.3.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 305.946937][ T42] audit: type=1400 audit(1785929758.263:1165): avc: denied { mounton } for pid=23362 comm="syz.3.3361" path="/270/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 305.947368][T23363] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 305.963642][ T42] audit: type=1400 audit(1785929758.272:1166): avc: denied { read } for pid=23362 comm="syz.3.3361" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 305.972306][ T42] audit: type=1400 audit(1785929758.272:1167): avc: denied { read } for pid=23362 comm="syz.3.3361" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 306.043757][T23375] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 306.200879][T23380] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 306.284895][T23389] socket: no more sockets [ 306.444368][T23399] comedi comedi0: comedi_config --init_data is deprecated [ 306.531587][T23406] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 306.620403][T23417] binder_alloc: 23414: binder_alloc_buf, no vma [ 306.951824][T23450] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 307.156207][T23461] zonefs (loop6) ERROR: Not a zoned block device [ 307.167913][T23461] kvm: emulating exchange as write [ 307.276532][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 307.276544][ T42] audit: type=1400 audit(1785929759.498:1175): avc: denied { write } for pid=23473 comm="syz.5.3387" name="/" dev="9p" ino=76573371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 307.311426][T23482] FAULT_INJECTION: forcing a failure. [ 307.311426][T23482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.316603][T23482] CPU: 2 UID: 0 PID: 23482 Comm: syz.3.3388 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.316622][T23482] Tainted: [L]=SOFTLOCKUP [ 307.316626][T23482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 307.316633][T23482] Call Trace: [ 307.316637][T23482] [ 307.316642][T23482] dump_stack_lvl+0x100/0x190 [ 307.316662][T23482] should_fail_ex.cold+0x5/0xa [ 307.316676][T23482] _copy_from_user+0x2e/0xd0 [ 307.316702][T23482] copy_msghdr_from_user+0x9f/0x4c0 [ 307.316727][T23482] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 307.316741][T23482] ? rcu_is_watching+0x12/0xc0 [ 307.316759][T23482] ? ___sys_sendmsg+0x19d/0x1e0 [ 307.316769][T23482] ? kfree+0x1e5/0x6c0 [ 307.316788][T23482] ___sys_sendmsg+0x106/0x1e0 [ 307.316800][T23482] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.316822][T23482] ? __pfx___might_resched+0x10/0x10 [ 307.316839][T23482] __sys_sendmmsg+0x20c/0x440 [ 307.316855][T23482] ? __pfx___sys_sendmmsg+0x10/0x10 [ 307.316869][T23482] ? ksys_write+0x190/0x250 [ 307.316890][T23482] ? fput+0x79/0x100 [ 307.316908][T23482] ? ksys_write+0x1ac/0x250 [ 307.316918][T23482] ? __pfx_ksys_write+0x10/0x10 [ 307.316930][T23482] __x64_sys_sendmmsg+0x9c/0x100 [ 307.316944][T23482] ? lockdep_hardirqs_on+0x78/0x100 [ 307.316958][T23482] do_syscall_64+0x115/0x870 [ 307.316971][T23482] ? clear_bhb_loop+0x40/0x90 [ 307.316985][T23482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.316996][T23482] RIP: 0033:0x7f6f94d9e0d9 [ 307.317006][T23482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.317017][T23482] RSP: 002b:00007f6f95cf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 307.317028][T23482] RAX: ffffffffffffffda RBX: 00007f6f95025fa0 RCX: 00007f6f94d9e0d9 [ 307.317035][T23482] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 307.317042][T23482] RBP: 00007f6f95cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 307.317048][T23482] R10: 000000000000ffe0 R11: 0000000000000246 R12: 0000000000000002 [ 307.317054][T23482] R13: 00007f6f95026038 R14: 00007f6f95025fa0 R15: 00007fff16f3ce08 [ 307.317068][T23482] [ 307.461673][ T42] audit: type=1400 audit(1785929759.666:1176): avc: denied { write } for pid=23489 comm="syz.6.3391" name="/" dev="9p" ino=76573371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 307.474443][ T42] audit: type=1400 audit(1785929759.685:1177): avc: denied { lock } for pid=23489 comm="syz.6.3391" path="/582/file0/cpuacct.usage_percpu" dev="9p" ino=76573443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 307.544104][ T42] audit: type=1400 audit(1785929759.751:1178): avc: denied { write } for pid=23489 comm="syz.6.3391" name="/" dev="9p" ino=76573371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 307.557701][T23493] overlay: ./file0 is not a directory [ 307.619187][T23496] FAULT_INJECTION: forcing a failure. [ 307.619187][T23496] name failslab, interval 1, probability 0, space 0, times 0 [ 307.625121][T23496] CPU: 1 UID: 0 PID: 23496 Comm: syz.3.3392 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.625148][T23496] Tainted: [L]=SOFTLOCKUP [ 307.625155][T23496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 307.625166][T23496] Call Trace: [ 307.625174][T23496] [ 307.625182][T23496] dump_stack_lvl+0x100/0x190 [ 307.625212][T23496] should_fail_ex.cold+0x5/0xa [ 307.625235][T23496] should_failslab+0xc2/0x120 [ 307.625258][T23496] __kmalloc_noprof+0xfc/0x820 [ 307.625277][T23496] ? __kmalloc_noprof+0x343/0x820 [ 307.625295][T23496] ? x509_fabricate_name.isra.0+0x5ea/0xa10 [ 307.625326][T23496] x509_fabricate_name.isra.0+0x5ea/0xa10 [ 307.625355][T23496] x509_note_issuer+0xf9/0x210 [ 307.625386][T23496] asn1_ber_decoder+0xd0c/0x2170 [ 307.625422][T23496] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 307.625452][T23496] ? kasan_save_track+0x14/0x30 [ 307.625471][T23496] ? __kasan_kmalloc+0xaa/0xb0 [ 307.625491][T23496] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 307.625518][T23496] ? x509_cert_parse+0x162/0x910 [ 307.625543][T23496] x509_cert_parse+0x1c9/0x910 [ 307.625568][T23496] x509_key_preparse+0x65/0x9c0 [ 307.625596][T23496] asymmetric_key_preparse+0xce/0x1d0 [ 307.625615][T23496] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 307.625637][T23496] __key_create_or_update+0x463/0xe30 [ 307.625673][T23496] ? __pfx___key_create_or_update+0x10/0x10 [ 307.625691][T23496] ? lookup_user_key+0x3f3/0x1300 [ 307.625725][T23496] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 307.625750][T23496] ? __pfx_keyring_search_iterator+0x10/0x10 [ 307.625772][T23496] key_create_or_update+0x42/0x60 [ 307.625793][T23496] __do_sys_add_key+0x2e8/0x460 [ 307.625815][T23496] ? __pfx___do_sys_add_key+0x10/0x10 [ 307.625834][T23496] ? ksys_write+0x1ac/0x250 [ 307.625859][T23496] do_syscall_64+0x115/0x870 [ 307.625881][T23496] ? clear_bhb_loop+0x40/0x90 [ 307.625902][T23496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.625919][T23496] RIP: 0033:0x7f6f94d9e0d9 [ 307.625934][T23496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.625949][T23496] RSP: 002b:00007f6f95cf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 307.625966][T23496] RAX: ffffffffffffffda RBX: 00007f6f95025fa0 RCX: 00007f6f94d9e0d9 [ 307.625977][T23496] RDX: 0000200000000780 RSI: 0000000000000000 RDI: 0000200000000040 [ 307.625988][T23496] RBP: 00007f6f95cf7090 R08: 00000000220a86b3 R09: 0000000000000000 [ 307.625998][T23496] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000001 [ 307.626008][T23496] R13: 00007f6f95026038 R14: 00007f6f95025fa0 R15: 00007fff16f3ce08 [ 307.626031][T23496] [ 307.812410][T23508] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 307.813205][T23509] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 307.927585][T23520] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 308.197637][T23534] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3398'. [ 308.209238][T23534] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3398'. [ 308.213232][T23534] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3398'. [ 308.294702][T23538] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 308.297254][T23538] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 308.301987][T23538] vhci_hcd vhci_hcd.0: Device attached [ 308.306010][ T42] audit: type=1400 audit(1785929760.462:1179): avc: denied { setopt } for pid=23537 comm="syz.5.3399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 308.327799][T23538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3399'. [ 308.552883][T23545] syzkaller0: entered promiscuous mode [ 308.555715][T23545] syzkaller0: entered allmulticast mode [ 308.559178][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802b4d5800: rx timeout, send abort [ 308.569074][ T42] audit: type=1400 audit(1785929760.715:1180): avc: denied { read } for pid=5130 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 308.578237][ T42] audit: type=1400 audit(1785929760.715:1181): avc: denied { search } for pid=5130 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.587528][ T42] audit: type=1400 audit(1785929760.715:1182): avc: denied { write search } for pid=5130 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.587547][ T24] usb 48-1: SetAddress Request (6) to port 0 [ 308.597002][ T24] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 308.599218][ T42] audit: type=1400 audit(1785929760.715:1183): avc: denied { add_name } for pid=5130 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.608001][ T42] audit: type=1400 audit(1785929760.715:1184): avc: denied { create } for pid=5130 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 308.618241][T23540] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 308.623286][ T12] vhci_hcd vhci_hcd.5: stop threads [ 308.624978][ T12] vhci_hcd vhci_hcd.5: release socket [ 308.628404][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 309.093583][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802b4d5400: rx timeout, send abort [ 309.100840][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802b4d5800: abort rx timeout. Force session deactivation [ 309.631272][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802b4d5400: abort rx timeout. Force session deactivation [ 309.808296][T23565] socket: no more sockets [ 311.105441][T23562] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 311.144476][T23584] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3407'. [ 311.148880][T23584] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3407'. [ 311.152363][T23586] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 311.319107][T23612] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3416'. [ 311.324904][T23612] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3416'. [ 311.415327][T23624] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 311.525439][T23610] netlink: 'syz.3.3415': attribute type 3 has an invalid length. [ 311.643457][T23645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3417'. [ 311.761219][T23664] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 311.830363][T23675] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3432'. [ 311.867946][T23678] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 311.965682][ T1308] block nbd0: Possible stuck request ffff888028ee5080: control (read@0,4096B). Runtime 120 seconds [ 312.039859][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.061643][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.069132][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.077807][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.081469][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.142676][T23707] FAULT_INJECTION: forcing a failure. [ 312.142676][T23707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.156909][T23707] CPU: 1 UID: 0 PID: 23707 Comm: syz.3.3439 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.156930][T23707] Tainted: [L]=SOFTLOCKUP [ 312.156934][T23707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 312.156941][T23707] Call Trace: [ 312.156946][T23707] [ 312.156951][T23707] dump_stack_lvl+0x100/0x190 [ 312.157009][T23707] should_fail_ex.cold+0x5/0xa [ 312.157025][T23707] _copy_from_user+0x2e/0xd0 [ 312.157048][T23707] copy_msghdr_from_user+0x9f/0x4c0 [ 312.157073][T23707] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 312.157087][T23707] ? rcu_is_watching+0x12/0xc0 [ 312.157109][T23707] ? ___sys_sendmsg+0x19d/0x1e0 [ 312.157119][T23707] ? kfree+0x1e5/0x6c0 [ 312.157144][T23707] ___sys_sendmsg+0x106/0x1e0 [ 312.157156][T23707] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.157179][T23707] ? __pfx___might_resched+0x10/0x10 [ 312.157198][T23707] __sys_sendmmsg+0x20c/0x440 [ 312.157221][T23707] ? __pfx___sys_sendmmsg+0x10/0x10 [ 312.157241][T23707] ? ksys_write+0x190/0x250 [ 312.157275][T23707] ? fput+0x79/0x100 [ 312.157296][T23707] ? ksys_write+0x1ac/0x250 [ 312.157309][T23707] ? __pfx_ksys_write+0x10/0x10 [ 312.157328][T23707] __x64_sys_sendmmsg+0x9c/0x100 [ 312.157352][T23707] ? lockdep_hardirqs_on+0x78/0x100 [ 312.157394][T23707] do_syscall_64+0x115/0x870 [ 312.157408][T23707] ? clear_bhb_loop+0x40/0x90 [ 312.157422][T23707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.157434][T23707] RIP: 0033:0x7f6f94d9e0d9 [ 312.157444][T23707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.157456][T23707] RSP: 002b:00007f6f95cf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 312.157467][T23707] RAX: ffffffffffffffda RBX: 00007f6f95025fa0 RCX: 00007f6f94d9e0d9 [ 312.157474][T23707] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 312.157481][T23707] RBP: 00007f6f95cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 312.157487][T23707] R10: 000000000000ffe0 R11: 0000000000000246 R12: 0000000000000002 [ 312.157493][T23707] R13: 00007f6f95026038 R14: 00007f6f95025fa0 R15: 00007fff16f3ce08 [ 312.157507][T23707] [ 312.290791][T23717] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 312.335412][T23720] binder: Unknown parameter 'ma00000000000' [ 312.346325][T23727] FAULT_INJECTION: forcing a failure. [ 312.346325][T23727] name failslab, interval 1, probability 0, space 0, times 0 [ 312.377355][T23727] CPU: 0 UID: 0 PID: 23727 Comm: syz.5.3443 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.377377][T23727] Tainted: [L]=SOFTLOCKUP [ 312.377381][T23727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 312.377389][T23727] Call Trace: [ 312.377394][T23727] [ 312.377400][T23727] dump_stack_lvl+0x100/0x190 [ 312.377421][T23727] should_fail_ex.cold+0x5/0xa [ 312.377444][T23727] should_failslab+0xc2/0x120 [ 312.377462][T23727] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 312.377477][T23727] ? __d_alloc+0x35/0xa50 [ 312.377504][T23727] __d_alloc+0x35/0xa50 [ 312.377519][T23727] d_alloc+0x4a/0x1e0 [ 312.377534][T23727] lookup_one_qstr_excl+0x171/0x250 [ 312.377552][T23727] start_dirop+0x59/0xb0 [ 312.377563][T23727] simple_start_creating+0xf9/0x110 [ 312.377577][T23727] ? __pfx_simple_start_creating+0x10/0x10 [ 312.377591][T23727] ? mntput+0x70/0xa0 [ 312.377602][T23727] ? simple_pin_fs+0xa3/0x190 [ 312.377614][T23727] debugfs_start_creating.part.0+0x82/0x170 [ 312.377647][T23727] __debugfs_create_file+0xb3/0x4f0 [ 312.377660][T23727] debugfs_create_file_full+0x41/0x60 [ 312.377674][T23727] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 312.377693][T23727] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 312.377724][T23727] ? lockdep_init_map_type+0x5c/0x250 [ 312.377742][T23727] ? __pfx_br_dev_setup+0x10/0x10 [ 312.377763][T23727] alloc_netdev_mqs+0x314/0x15c0 [ 312.377783][T23727] rtnl_create_link+0xc13/0xf80 [ 312.377886][T23727] rtnl_newlink+0x13bd/0x2380 [ 312.377909][T23727] ? __pfx_rtnl_newlink+0x10/0x10 [ 312.377924][T23727] ? find_held_lock+0x2b/0x80 [ 312.377935][T23727] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 312.377956][T23727] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 312.377973][T23727] ? avc_has_perm_noaudit+0x145/0x3b0 [ 312.377998][T23727] ? find_held_lock+0x2b/0x80 [ 312.378007][T23727] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 312.378023][T23727] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 312.378039][T23727] ? __pfx_rtnl_newlink+0x10/0x10 [ 312.378055][T23727] rtnetlink_rcv_msg+0x95e/0xe90 [ 312.378072][T23727] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.378091][T23727] ? ref_tracker_free+0x37e/0x6c0 [ 312.378109][T23727] netlink_rcv_skb+0x159/0x420 [ 312.378123][T23727] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.378139][T23727] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.378156][T23727] ? netlink_deliver_tap+0x1ae/0xcc0 [ 312.378170][T23727] netlink_unicast+0x585/0x850 [ 312.378184][T23727] ? __pfx_netlink_unicast+0x10/0x10 [ 312.378199][T23727] netlink_sendmsg+0x8b0/0xda0 [ 312.378213][T23727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.378227][T23727] ? selinux_socket_sendmsg+0x198/0x2f0 [ 312.378246][T23727] ____sys_sendmsg+0xa4d/0xbe0 [ 312.378263][T23727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.378276][T23727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.378299][T23727] ___sys_sendmsg+0x190/0x1e0 [ 312.378311][T23727] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.378321][T23727] ? __lock_acquire+0x49f/0x1a40 [ 312.378334][T23727] ? get_pid_task+0x106/0x250 [ 312.378359][T23727] __sys_sendmsg+0x160/0x210 [ 312.378374][T23727] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.378396][T23727] do_syscall_64+0x115/0x870 [ 312.378409][T23727] ? clear_bhb_loop+0x40/0x90 [ 312.378423][T23727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.378434][T23727] RIP: 0033:0x7fca3c19e0d9 [ 312.378449][T23727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.378459][T23727] RSP: 002b:00007fca3cfb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.378470][T23727] RAX: ffffffffffffffda RBX: 00007fca3c425fa0 RCX: 00007fca3c19e0d9 [ 312.378477][T23727] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 312.378496][T23727] RBP: 00007fca3cfb9090 R08: 0000000000000000 R09: 0000000000000000 [ 312.378503][T23727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 312.378509][T23727] R13: 00007fca3c426038 R14: 00007fca3c425fa0 R15: 00007ffe6d6b63e8 [ 312.378524][T23727] [ 312.411265][T23727] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 312.470861][T23743] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.619946][T23759] comedi comedi0: Minor 3 could not be opened [ 312.685608][T23785] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 312.846346][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 312.846358][ T42] audit: type=1400 audit(1785929764.710:1190): avc: denied { execute } for pid=23858 comm="syz.5.3452" path="/proc/partitions" dev="proc" ino=4026532189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 312.860724][T23864] loop5: detected capacity change from 0 to 7 [ 312.864845][T23864] Dev loop5: unable to read RDB block 7 [ 312.867598][T23864] loop5: unable to read partition table [ 312.870209][T23864] loop5: partition table beyond EOD, truncated [ 312.873100][T23864] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 312.876375][T23693] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.879494][T23693] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.882413][T23693] bridge_slave_0: entered allmulticast mode [ 312.885512][T23693] bridge_slave_0: entered promiscuous mode [ 312.889383][T23693] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.892180][T23693] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.894741][T23693] bridge_slave_1: entered allmulticast mode [ 312.897858][T23693] bridge_slave_1: entered promiscuous mode [ 312.920252][T23693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.926447][T23693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.946924][T23693] team0: Port device team_slave_0 added [ 312.950489][T23693] team0: Port device team_slave_1 added [ 312.969252][T23693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.971519][T23693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.979520][T23693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.984169][T23693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.986292][T23693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.995108][T23693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.035583][T23693] hsr_slave_0: entered promiscuous mode [ 313.037851][T23693] hsr_slave_1: entered promiscuous mode [ 313.163769][T23693] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.252869][T23693] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.311989][T23693] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.366384][T23693] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.499025][T23693] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 313.517893][T23693] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 313.521860][T23693] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 313.534386][T23693] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.538168][T23693] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 313.545565][T23693] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.549464][T23693] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 313.556170][T23693] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 313.590347][ T42] audit: type=1326 audit(1785929765.412:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24053 comm="syz.8.3454" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90d9f9e0d9 code=0x0 [ 313.604925][ T42] audit: type=1400 audit(1785929765.422:1192): avc: denied { write } for pid=24063 comm="syz.3.3455" name="/" dev="9p" ino=76573371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 313.639013][T23693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.654868][T23693] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.660168][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.662589][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.668551][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.670812][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.684606][T24067] overlay: ./file0 is not a directory [ 313.924263][T23693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.014205][ T24] usb 48-1: device descriptor read/8, error -110 [ 314.071346][T23693] veth0_vlan: entered promiscuous mode [ 314.076820][T23693] veth1_vlan: entered promiscuous mode [ 314.091542][T24091] ieee802154 phy1 wpan1: encryption failed: -22 [ 314.103954][T23693] veth0_macvtap: entered promiscuous mode [ 314.108717][T23693] veth1_macvtap: entered promiscuous mode [ 314.119909][T23693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.130059][T23693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.232100][ T5816] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.238320][ T5816] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.270612][ T5748] Bluetooth: hci2: command tx timeout [ 314.276371][ T7597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.279588][ T7597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.319468][ T7597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.324591][ T7597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.324793][ T5816] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.333632][ T5816] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.356038][ T42] audit: type=1400 audit(1785929766.124:1193): avc: denied { mounton } for pid=23693 comm="syz-executor" path="/syzkaller.g3PjBj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=74504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 314.444724][T24111] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 314.452800][ T24] usb usb48-port1: attempt power cycle [ 314.575552][T24115] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 314.580742][T24115] bond1: entered allmulticast mode [ 314.704637][T24168] IPv6: sit1: Disabled Multicast RS [ 314.717408][T24168] sit1: entered allmulticast mode [ 314.739197][T24158] __nla_validate_parse: 2 callbacks suppressed [ 314.739210][T24158] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3462'. [ 314.828045][T24178] ieee802154 phy1 wpan1: encryption failed: -22 [ 314.917454][T24187] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3468'. [ 314.921108][T24187] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3468'. [ 314.981324][T24193] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 315.061905][ T24] usb usb48-port1: unable to enumerate USB device [ 315.147790][T24201] FAULT_INJECTION: forcing a failure. [ 315.147790][T24201] name failslab, interval 1, probability 0, space 0, times 0 [ 315.154006][T24201] CPU: 1 UID: 0 PID: 24201 Comm: syz.5.3471 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.154027][T24201] Tainted: [L]=SOFTLOCKUP [ 315.154031][T24201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 315.154037][T24201] Call Trace: [ 315.154042][T24201] [ 315.154047][T24201] dump_stack_lvl+0x100/0x190 [ 315.154067][T24201] should_fail_ex.cold+0x5/0xa [ 315.154083][T24201] should_failslab+0xc2/0x120 [ 315.154100][T24201] __kmalloc_noprof+0xfc/0x820 [ 315.154113][T24201] ? __kvmalloc_node_noprof+0x36d/0x970 [ 315.154126][T24201] ? nla_strscpy+0x181/0x1a0 [ 315.154145][T24201] ? nft_trans_alloc+0x1d/0x2d0 [ 315.154159][T24201] nft_trans_alloc+0x1d/0x2d0 [ 315.154170][T24201] nf_tables_addchain.constprop.0+0xafa/0x1ca0 [ 315.154194][T24201] ? nft_chain_lookup+0x59c/0xa60 [ 315.154212][T24201] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 315.154244][T24201] ? nla_strcmp+0xff/0x130 [ 315.154256][T24201] ? nft_table_lookup.part.0+0x1e3/0x230 [ 315.154271][T24201] nf_tables_newchain+0x17c3/0x2d30 [ 315.154293][T24201] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 315.154309][T24201] ? __nla_validate_parse+0x1e7/0x28b0 [ 315.154323][T24201] ? __pfx_nf_tables_newchain+0x10/0x10 [ 315.154343][T24201] ? __pfx___nla_validate_parse+0x10/0x10 [ 315.154360][T24201] ? __nla_parse+0x40/0x60 [ 315.154374][T24201] nfnetlink_rcv_batch+0x1410/0x2880 [ 315.154398][T24201] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 315.154414][T24201] ? find_held_lock+0x2b/0x80 [ 315.154433][T24201] ? avc_has_perm_noaudit+0x145/0x3b0 [ 315.154466][T24201] ? __nla_parse+0x40/0x60 [ 315.154480][T24201] nfnetlink_rcv+0x3bd/0x440 [ 315.154495][T24201] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 315.154515][T24201] netlink_unicast+0x585/0x850 [ 315.154530][T24201] ? __pfx_netlink_unicast+0x10/0x10 [ 315.154546][T24201] netlink_sendmsg+0x8b0/0xda0 [ 315.154561][T24201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.154575][T24201] ? selinux_socket_sendmsg+0x198/0x2f0 [ 315.154596][T24201] ____sys_sendmsg+0xa4d/0xbe0 [ 315.154613][T24201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.154627][T24201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.154652][T24201] ___sys_sendmsg+0x190/0x1e0 [ 315.154664][T24201] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.154675][T24201] ? __lock_acquire+0x49f/0x1a40 [ 315.154690][T24201] ? get_pid_task+0x106/0x250 [ 315.154715][T24201] __sys_sendmsg+0x160/0x210 [ 315.154731][T24201] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.154754][T24201] do_syscall_64+0x115/0x870 [ 315.154769][T24201] ? clear_bhb_loop+0x40/0x90 [ 315.154783][T24201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.154796][T24201] RIP: 0033:0x7fca3c19e0d9 [ 315.154807][T24201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.154819][T24201] RSP: 002b:00007fca3cfb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.154831][T24201] RAX: ffffffffffffffda RBX: 00007fca3c425fa0 RCX: 00007fca3c19e0d9 [ 315.154839][T24201] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 315.154846][T24201] RBP: 00007fca3cfb9090 R08: 0000000000000000 R09: 0000000000000000 [ 315.154853][T24201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.154859][T24201] R13: 00007fca3c426038 R14: 00007fca3c425fa0 R15: 00007ffe6d6b63e8 [ 315.154874][T24201] [ 315.172937][T24203] comedi comedi0: comedi_config --init_data is deprecated [ 315.203293][T24206] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.290837][T24217] FAULT_INJECTION: forcing a failure. [ 315.290837][T24217] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 315.296776][ T42] audit: type=1400 audit(1785929767.013:1194): avc: denied { bind } for pid=24219 comm="syz.5.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 315.297699][T24217] CPU: 0 UID: 0 PID: 24217 Comm: syz.8.3477 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.297724][T24217] Tainted: [L]=SOFTLOCKUP [ 315.297731][T24217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 315.297740][T24217] Call Trace: [ 315.297747][T24217] [ 315.297755][T24217] dump_stack_lvl+0x100/0x190 [ 315.297783][T24217] should_fail_ex.cold+0x5/0xa [ 315.297802][T24217] ? prepare_alloc_pages+0x16d/0x5f0 [ 315.297828][T24217] should_fail_alloc_page+0xeb/0x140 [ 315.297851][T24217] prepare_alloc_pages+0x1f0/0x5f0 [ 315.297877][T24217] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 315.297905][T24217] ? stack_trace_save+0x8e/0xc0 [ 315.297924][T24217] ? __pfx_stack_trace_save+0x10/0x10 [ 315.297941][T24217] ? stack_depot_save_flags+0x27/0x9d0 [ 315.297976][T24217] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 315.298018][T24217] ? kasan_save_stack+0x3f/0x50 [ 315.298036][T24217] ? kasan_save_stack+0x30/0x50 [ 315.298053][T24217] ? kasan_save_track+0x14/0x30 [ 315.298069][T24217] ? __kasan_slab_alloc+0x89/0x90 [ 315.298087][T24217] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 315.298105][T24217] ? security_inode_alloc+0x3b/0x2c0 [ 315.298130][T24217] ? inode_init_always_gfp+0xc77/0xfb0 [ 315.298147][T24217] ? alloc_inode+0x8e/0x250 [ 315.298167][T24217] ? new_inode+0x22/0x1c0 [ 315.298185][T24217] ? __debugfs_create_file+0x105/0x4f0 [ 315.298201][T24217] ? debugfs_create_file_full+0x41/0x60 [ 315.298215][T24217] ? ref_tracker_dir_debugfs+0x19e/0x2e0 [ 315.298237][T24217] ? alloc_netdev_mqs+0x314/0x15c0 [ 315.298257][T24217] ? rtnl_create_link+0xc13/0xf80 [ 315.298278][T24217] ? rtnl_newlink+0x13bd/0x2380 [ 315.298297][T24217] ? look_up_lock_class+0x64/0x120 [ 315.298316][T24217] ? netlink_rcv_skb+0x159/0x420 [ 315.298335][T24217] ? do_syscall_64+0x115/0x870 [ 315.298353][T24217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.298374][T24217] ? __lock_acquire+0x49f/0x1a40 [ 315.298394][T24217] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 315.298415][T24217] ? policy_nodemask+0xed/0x4f0 [ 315.298439][T24217] alloc_pages_mpol+0x1fb/0x540 [ 315.298461][T24217] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 315.298481][T24217] ? do_raw_spin_lock+0x128/0x260 [ 315.298504][T24217] ? find_held_lock+0x2b/0x80 [ 315.298518][T24217] ? inode_doinit_with_dentry+0x70b/0x1320 [ 315.298548][T24217] alloc_pages_noprof+0x1a/0x160 [ 315.298572][T24217] get_free_pages_noprof+0x10/0xb0 [ 315.298592][T24217] inode_doinit_with_dentry+0x788/0x1320 [ 315.298620][T24217] ? inode_set_ctime_current+0x283/0x850 [ 315.298640][T24217] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 315.298664][T24217] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 315.298683][T24217] ? new_inode+0x15a/0x1c0 [ 315.298708][T24217] selinux_d_instantiate+0x26/0x40 [ 315.298732][T24217] security_d_instantiate+0x14c/0x1b0 [ 315.298753][T24217] d_make_persistent+0x64/0x180 [ 315.298776][T24217] __debugfs_create_file+0x25e/0x4f0 [ 315.298797][T24217] debugfs_create_file_full+0x41/0x60 [ 315.298816][T24217] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 315.298840][T24217] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 315.298886][T24217] ? lockdep_init_map_type+0x5c/0x250 [ 315.298909][T24217] ? __pfx_br_dev_setup+0x10/0x10 [ 315.298927][T24217] alloc_netdev_mqs+0x314/0x15c0 [ 315.298962][T24217] rtnl_create_link+0xc13/0xf80 [ 315.298987][T24217] rtnl_newlink+0x13bd/0x2380 [ 315.299018][T24217] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.299038][T24217] ? find_held_lock+0x2b/0x80 [ 315.299053][T24217] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 315.299071][T24217] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 315.299096][T24217] ? avc_has_perm_noaudit+0x145/0x3b0 [ 315.299167][T24217] ? find_held_lock+0x2b/0x80 [ 315.299182][T24217] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 315.299204][T24217] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 315.299228][T24217] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.299252][T24217] rtnetlink_rcv_msg+0x95e/0xe90 [ 315.299274][T24217] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.299294][T24217] ? ref_tracker_free+0x37e/0x6c0 [ 315.299312][T24217] netlink_rcv_skb+0x159/0x420 [ 315.299324][T24217] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.299341][T24217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.299358][T24217] ? netlink_deliver_tap+0x1ae/0xcc0 [ 315.299372][T24217] netlink_unicast+0x585/0x850 [ 315.299386][T24217] ? __pfx_netlink_unicast+0x10/0x10 [ 315.299401][T24217] netlink_sendmsg+0x8b0/0xda0 [ 315.299415][T24217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.299429][T24217] ? selinux_socket_sendmsg+0x198/0x2f0 [ 315.299448][T24217] ____sys_sendmsg+0xa4d/0xbe0 [ 315.299467][T24217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.299480][T24217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.299503][T24217] ___sys_sendmsg+0x190/0x1e0 [ 315.299516][T24217] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.299527][T24217] ? __lock_acquire+0x49f/0x1a40 [ 315.299540][T24217] ? get_pid_task+0x106/0x250 [ 315.299566][T24217] __sys_sendmsg+0x160/0x210 [ 315.299582][T24217] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.299604][T24217] do_syscall_64+0x115/0x870 [ 315.299618][T24217] ? clear_bhb_loop+0x40/0x90 [ 315.299632][T24217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.299643][T24217] RIP: 0033:0x7f90d9f9e0d9 [ 315.299654][T24217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.299665][T24217] RSP: 002b:00007f90dadf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.299676][T24217] RAX: ffffffffffffffda RBX: 00007f90da225fa0 RCX: 00007f90d9f9e0d9 [ 315.299683][T24217] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 315.299690][T24217] RBP: 00007f90dadf1090 R08: 0000000000000000 R09: 0000000000000000 [ 315.299696][T24217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.299703][T24217] R13: 00007f90da226038 R14: 00007f90da225fa0 R15: 00007ffd269fedf8 [ 315.299717][T24217] [ 315.304096][T24217] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 315.306567][ T42] audit: type=1400 audit(1785929767.013:1195): avc: denied { name_bind } for pid=24219 comm="syz.5.3478" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 315.348716][T24227] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 315.356397][ T42] audit: type=1400 audit(1785929767.013:1196): avc: denied { node_bind } for pid=24219 comm="syz.5.3478" saddr=172.30.1.6 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 315.719200][T24256] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3484'. [ 315.773961][T24259] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.864887][T24265] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 316.208899][T24288] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 316.492982][ T5748] Bluetooth: hci2: command tx timeout [ 316.567831][ T5989] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 316.630556][T24305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3495'. [ 316.635180][T24305] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 316.706738][ T5989] usb 10-1: device descriptor read/64, error -71 [ 316.723717][T24310] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.754452][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.914371][ T42] audit: type=1400 audit(1785929768.519:1197): avc: denied { append } for pid=24318 comm="syz.6.3499" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 316.963481][ T5989] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 317.019156][T24325] FAULT_INJECTION: forcing a failure. [ 317.019156][T24325] name failslab, interval 1, probability 0, space 0, times 0 [ 317.024248][T24325] CPU: 2 UID: 0 PID: 24325 Comm: syz.6.3500 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.024277][T24325] Tainted: [L]=SOFTLOCKUP [ 317.024284][T24325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.024294][T24325] Call Trace: [ 317.024301][T24325] [ 317.024309][T24325] dump_stack_lvl+0x100/0x190 [ 317.024338][T24325] should_fail_ex.cold+0x5/0xa [ 317.024362][T24325] should_failslab+0xc2/0x120 [ 317.024386][T24325] kmem_cache_alloc_noprof+0x91/0x6a0 [ 317.024408][T24325] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 317.024437][T24325] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 317.024464][T24325] mmu_topup_memory_caches+0x25/0x170 [ 317.024489][T24325] kvm_mmu_load+0xe2/0x2570 [ 317.024514][T24325] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 317.024532][T24325] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 317.024552][T24325] ? __pfx_kvm_mmu_load+0x10/0x10 [ 317.024571][T24325] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 317.024593][T24325] ? kvm_check_and_inject_events+0x873/0x12a0 [ 317.024614][T24325] ? record_steal_time+0x3a0/0xbb0 [ 317.024632][T24325] vcpu_run+0x3aaa/0x5de0 [ 317.024653][T24325] ? mark_held_locks+0x40/0x70 [ 317.024680][T24325] ? __pfx_vcpu_run+0x10/0x10 [ 317.024706][T24325] ? rcu_is_watching+0x12/0xc0 [ 317.024733][T24325] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 317.024756][T24325] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 317.024786][T24325] kvm_vcpu_ioctl+0x730/0x1700 [ 317.024807][T24325] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 317.024826][T24325] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 317.024845][T24325] ? do_vfs_ioctl+0x226/0x13e0 [ 317.024871][T24325] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 317.024894][T24325] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 317.024931][T24325] ? __fget_files+0x215/0x3d0 [ 317.024948][T24325] ? hook_file_ioctl_common+0x140/0x440 [ 317.024981][T24325] ? selinux_file_ioctl+0x13b/0x290 [ 317.025004][T24325] ? selinux_file_ioctl+0xb6/0x290 [ 317.025030][T24325] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 317.025050][T24325] __x64_sys_ioctl+0x18e/0x210 [ 317.025078][T24325] do_syscall_64+0x115/0x870 [ 317.025099][T24325] ? clear_bhb_loop+0x40/0x90 [ 317.025121][T24325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.025138][T24325] RIP: 0033:0x7fb657f9e0d9 [ 317.025154][T24325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.025171][T24325] RSP: 002b:00007fb658f12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.025188][T24325] RAX: ffffffffffffffda RBX: 00007fb658226090 RCX: 00007fb657f9e0d9 [ 317.025199][T24325] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 317.025210][T24325] RBP: 00007fb658f12090 R08: 0000000000000000 R09: 0000000000000000 [ 317.025220][T24325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 317.025250][T24325] R13: 00007fb658226128 R14: 00007fb658226090 R15: 00007ffd9d1da5f8 [ 317.025274][T24325] [ 317.102139][ T5989] usb 10-1: device descriptor read/64, error -71 [ 317.262632][ T5989] usb usb10-port1: attempt power cycle [ 317.272344][T24338] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 317.414461][ T42] audit: type=1400 audit(1785929768.987:1198): avc: denied { lock } for pid=24344 comm="" path="socket:[75000]" dev="sockfs" ino=75000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 317.456068][T24349] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.516079][T24362] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 317.576120][T24371] team0: Device vlan2 is already an upper device of the team interface [ 317.631601][ T5989] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 317.648227][ T5989] usb 10-1: device descriptor read/8, error -71 [ 317.680660][T24385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24385 comm=syz.8.3513 [ 317.733293][T24391] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.768600][T24394] comedi comedi0: Minor 3 could not be opened [ 317.903606][ T5989] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 317.925550][ T5989] usb 10-1: device descriptor read/8, error -71 [ 317.934044][T24403] pim6reg: entered allmulticast mode [ 317.939798][T24403] pim6reg: left allmulticast mode [ 318.044466][ T5989] usb usb10-port1: unable to enumerate USB device [ 318.098481][T24415] FAULT_INJECTION: forcing a failure. [ 318.098481][T24415] name failslab, interval 1, probability 0, space 0, times 0 [ 318.102573][T24415] CPU: 0 UID: 0 PID: 24415 Comm: syz.8.3521 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.102592][T24415] Tainted: [L]=SOFTLOCKUP [ 318.102596][T24415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 318.102603][T24415] Call Trace: [ 318.102608][T24415] [ 318.102613][T24415] dump_stack_lvl+0x100/0x190 [ 318.102633][T24415] should_fail_ex.cold+0x5/0xa [ 318.102648][T24415] should_failslab+0xc2/0x120 [ 318.102663][T24415] __kmalloc_noprof+0xfc/0x820 [ 318.102678][T24415] ? asymmetric_key_generate_id+0x7e/0x180 [ 318.102696][T24415] asymmetric_key_generate_id+0x7e/0x180 [ 318.102712][T24415] x509_akid_note_kid+0x100/0x260 [ 318.102728][T24415] asn1_ber_decoder+0x12b3/0x2170 [ 318.102752][T24415] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 318.102772][T24415] ? kasan_save_track+0x14/0x30 [ 318.102785][T24415] ? __kasan_kmalloc+0xaa/0xb0 [ 318.102798][T24415] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 318.102816][T24415] ? x509_cert_parse+0x162/0x910 [ 318.102832][T24415] x509_cert_parse+0x24b/0x910 [ 318.102849][T24415] x509_key_preparse+0x65/0x9c0 [ 318.102868][T24415] asymmetric_key_preparse+0xce/0x1d0 [ 318.102881][T24415] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 318.102897][T24415] __key_create_or_update+0x463/0xe30 [ 318.102912][T24415] ? __pfx___key_create_or_update+0x10/0x10 [ 318.102924][T24415] ? lookup_user_key+0x3f3/0x1300 [ 318.102947][T24415] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 318.102964][T24415] ? __pfx_keyring_search_iterator+0x10/0x10 [ 318.102978][T24415] key_create_or_update+0x42/0x60 [ 318.102991][T24415] __do_sys_add_key+0x2e8/0x460 [ 318.103005][T24415] ? __pfx___do_sys_add_key+0x10/0x10 [ 318.103018][T24415] ? ksys_write+0x1ac/0x250 [ 318.103034][T24415] do_syscall_64+0x115/0x870 [ 318.103048][T24415] ? clear_bhb_loop+0x40/0x90 [ 318.103062][T24415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.103073][T24415] RIP: 0033:0x7f90d9f9e0d9 [ 318.103084][T24415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.103115][T24415] RSP: 002b:00007f90dadf1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 318.103127][T24415] RAX: ffffffffffffffda RBX: 00007f90da225fa0 RCX: 00007f90d9f9e0d9 [ 318.103133][T24415] RDX: 0000200000000780 RSI: 0000000000000000 RDI: 0000200000000040 [ 318.103140][T24415] RBP: 00007f90dadf1090 R08: 000000001563011d R09: 0000000000000000 [ 318.103147][T24415] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000002 [ 318.103154][T24415] R13: 00007f90da226038 R14: 00007f90da225fa0 R15: 00007ffd269fedf8 [ 318.103168][T24415] [ 318.103174][T24415] X.509: Couldn't decode AuthKeyIdentifier [ 318.221741][T24418] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3522'. [ 318.225057][T24418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.302189][T24426] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.351885][T24429] FAULT_INJECTION: forcing a failure. [ 318.351885][T24429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.357138][T24429] CPU: 1 UID: 0 PID: 24429 Comm: syz.8.3525 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.357157][T24429] Tainted: [L]=SOFTLOCKUP [ 318.357161][T24429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 318.357168][T24429] Call Trace: [ 318.357173][T24429] [ 318.357178][T24429] dump_stack_lvl+0x100/0x190 [ 318.357198][T24429] should_fail_ex.cold+0x5/0xa [ 318.357213][T24429] _copy_from_iter+0x1f4/0x1690 [ 318.357232][T24429] ? __pfx_tcp_leave_memory_pressure+0x10/0x10 [ 318.357248][T24429] ? sk_leave_memory_pressure+0x81/0x140 [ 318.357267][T24429] ? __pfx__copy_from_iter+0x10/0x10 [ 318.357282][T24429] ? avc_has_perm_noaudit+0xe0/0x3b0 [ 318.357299][T24429] ? __sk_mem_schedule+0xd0/0x100 [ 318.357316][T24429] tcp_sendmsg_locked+0xc8c/0x44d0 [ 318.357340][T24429] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 318.357358][T24429] ? do_raw_spin_lock+0x128/0x260 [ 318.357375][T24429] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 318.357393][T24429] ? __local_bh_enable_ip+0x9e/0x120 [ 318.357411][T24429] tcp_sendmsg+0x2e/0x50 [ 318.357425][T24429] ? __pfx_tcp_sendmsg+0x10/0x10 [ 318.357441][T24429] inet_sendmsg+0xb9/0x140 [ 318.357457][T24429] __sys_sendto+0x453/0x4e0 [ 318.357469][T24429] ? __pfx_inet_sendmsg+0x10/0x10 [ 318.357484][T24429] ? __pfx___sys_sendto+0x10/0x10 [ 318.357501][T24429] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 318.357521][T24429] ? ksys_write+0x1ac/0x250 [ 318.357532][T24429] ? __pfx_ksys_write+0x10/0x10 [ 318.357543][T24429] __x64_sys_sendto+0xe0/0x1c0 [ 318.357556][T24429] ? do_syscall_64+0x90/0x870 [ 318.357569][T24429] ? lockdep_hardirqs_on+0x78/0x100 [ 318.357582][T24429] do_syscall_64+0x115/0x870 [ 318.357596][T24429] ? clear_bhb_loop+0x40/0x90 [ 318.357609][T24429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.357621][T24429] RIP: 0033:0x7f90d9f9e0d9 [ 318.357631][T24429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.357642][T24429] RSP: 002b:00007f90dadf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 318.357654][T24429] RAX: ffffffffffffffda RBX: 00007f90da225fa0 RCX: 00007f90d9f9e0d9 [ 318.357661][T24429] RDX: fffffffffffffe88 RSI: 00002000000002c0 RDI: 0000000000000003 [ 318.357667][T24429] RBP: 00007f90dadf1090 R08: 0000000000000000 R09: 0000000000000000 [ 318.357673][T24429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.357680][T24429] R13: 00007f90da226038 R14: 00007f90da225fa0 R15: 00007ffd269fedf8 [ 318.357693][T24429] [ 318.482936][T24434] xt_hashlimit: size too large, truncated to 1048576 [ 318.577407][ T42] audit: type=1326 audit(1785929770.082:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24442 comm="syz.3.3528" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f94d9e0d9 code=0x0 [ 318.715953][ T5748] Bluetooth: hci2: command tx timeout [ 318.905168][T24471] socket: no more sockets [ 318.914769][T24471] socket: no more sockets [ 319.955302][ T5527] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 320.108855][T24526] netlink: 'syz.6.3544': attribute type 10 has an invalid length. [ 320.112107][T24526] syz_tun: entered promiscuous mode [ 320.115527][ T5527] usb 10-1: Using ep0 maxpacket: 8 [ 320.118962][ T5527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 320.122713][ T5527] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 320.125952][ T5527] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.143260][ T5527] usb 10-1: config 0 descriptor?? [ 320.182439][ T42] audit: type=1326 audit(1785929771.579:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.8.3545" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90d9f9e0d9 code=0x0 [ 320.366588][ T5527] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 320.436853][ T24] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 320.608194][ T24] usb 11-1: Using ep0 maxpacket: 8 [ 320.612133][ T24] usb 11-1: config index 0 descriptor too short (expected 74, got 45) [ 320.615389][ T24] usb 11-1: config 16 has an invalid interface number: 48 but max is 0 [ 320.618939][ T24] usb 11-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 320.622946][ T24] usb 11-1: config 16 has no interface number 0 [ 320.625458][ T24] usb 11-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 320.629860][ T24] usb 11-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 320.634683][ T24] usb 11-1: config 16 interface 48 has no altsetting 0 [ 320.637436][ T24] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 320.641141][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.880964][ T24] usb 11-1: string descriptor 0 read error: -71 [ 320.888599][ T24] usb 11-1: USB disconnect, device number 18 [ 320.939190][ T5748] Bluetooth: hci2: command tx timeout [ 320.985234][ T848] usb 10-1: USB disconnect, device number 27 [ 321.551623][T24596] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 321.564543][T24601] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 321.750609][ T6267] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 321.854964][T24624] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 321.910912][ T6267] usb 8-1: Using ep0 maxpacket: 16 [ 321.913192][ T6267] usb 8-1: too many configurations: 123, using maximum allowed: 8 [ 321.916730][ T6267] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.921196][ T6267] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.926636][ T6267] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.930513][ T6267] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.934958][ T6267] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.939115][ T6267] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.943656][ T6267] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.947716][ T6267] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.951879][ T6267] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 321.955058][ T6267] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 321.957681][ T6267] usb 8-1: SerialNumber: syz [ 321.966065][ T6267] usb 8-1: config 0 descriptor?? [ 321.973564][ T6267] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input27 [ 322.060500][ T5527] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 322.171415][T24643] unsupported nla_type 4111 [ 322.242379][ T5527] usb 10-1: Using ep0 maxpacket: 8 [ 322.245476][T24655] hid-generic 0003:0627:0001.0001: pid 24655 passed too large report [ 322.249401][ T5527] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 322.252163][ T5527] usb 10-1: config 16 has an invalid interface number: 48 but max is 0 [ 322.255194][ T5527] usb 10-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 322.259471][ T5527] usb 10-1: config 16 has no interface number 0 [ 322.260725][ T5133] bcm5974 8-1:0.0: could not read from device [ 322.261814][ T5527] usb 10-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 322.270256][ T5527] usb 10-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 322.279479][ T5527] usb 10-1: config 16 interface 48 has no altsetting 0 [ 322.284389][T24585] bcm5974 8-1:0.0: could not read from device [ 322.286384][ T5527] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 322.291388][ T5527] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.301399][ T5133] bcm5974 8-1:0.0: could not read from device [ 322.312716][ T6267] usb 8-1: USB disconnect, device number 24 [ 322.321942][ T5133] bcm5974 8-1:0.0: could not read from device [ 322.328598][ T5133] bcm5974 8-1:0.0: could not read from device [ 322.475068][T24677] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 322.539305][ T5527] usb 10-1: string descriptor 0 read error: -71 [ 322.543260][ T5527] usb 10-1: USB disconnect, device number 28 [ 322.689430][T24689] netlink: 'syz.6.3571': attribute type 3 has an invalid length. [ 322.692689][T24689] netlink: 'syz.6.3571': attribute type 1 has an invalid length. [ 322.696001][T24689] netlink: 216 bytes leftover after parsing attributes in process `syz.6.3571'. [ 322.835310][T24700] fuse: Bad value for 'max_read' [ 323.033869][T24718] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 323.144560][T24728] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3581'. [ 323.149107][T24728] FAULT_INJECTION: forcing a failure. [ 323.149107][T24728] name failslab, interval 1, probability 0, space 0, times 0 [ 323.154405][T24728] CPU: 3 UID: 0 PID: 24728 Comm: syz.8.3581 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.154423][T24728] Tainted: [L]=SOFTLOCKUP [ 323.154427][T24728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 323.154434][T24728] Call Trace: [ 323.154438][T24728] [ 323.154443][T24728] dump_stack_lvl+0x100/0x190 [ 323.154463][T24728] should_fail_ex.cold+0x5/0xa [ 323.154479][T24728] should_failslab+0xc2/0x120 [ 323.154494][T24728] __kmalloc_noprof+0xfc/0x820 [ 323.154508][T24728] ? nf_tables_newrule+0x932/0x2be0 [ 323.154528][T24728] nf_tables_newrule+0x932/0x2be0 [ 323.154549][T24728] ? __pfx_nf_tables_newrule+0x10/0x10 [ 323.154569][T24728] ? __nla_parse+0x40/0x60 [ 323.154583][T24728] nfnetlink_rcv_batch+0x1410/0x2880 [ 323.154605][T24728] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 323.154621][T24728] ? find_held_lock+0x2b/0x80 [ 323.154640][T24728] ? avc_has_perm_noaudit+0x145/0x3b0 [ 323.154666][T24728] ? __nla_parse+0x40/0x60 [ 323.154679][T24728] nfnetlink_rcv+0x3bd/0x440 [ 323.154694][T24728] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 323.154713][T24728] netlink_unicast+0x585/0x850 [ 323.154727][T24728] ? __pfx_netlink_unicast+0x10/0x10 [ 323.154742][T24728] netlink_sendmsg+0x8b0/0xda0 [ 323.154756][T24728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.154769][T24728] ? selinux_socket_sendmsg+0x198/0x2f0 [ 323.154788][T24728] ____sys_sendmsg+0xa4d/0xbe0 [ 323.154805][T24728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.154817][T24728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.154841][T24728] ___sys_sendmsg+0x190/0x1e0 [ 323.154855][T24728] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.154866][T24728] ? __lock_acquire+0x49f/0x1a40 [ 323.154879][T24728] ? get_pid_task+0x106/0x250 [ 323.154904][T24728] __sys_sendmsg+0x160/0x210 [ 323.154919][T24728] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.154940][T24728] do_syscall_64+0x115/0x870 [ 323.154954][T24728] ? clear_bhb_loop+0x40/0x90 [ 323.154968][T24728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.154979][T24728] RIP: 0033:0x7f90d9f9e0d9 [ 323.154989][T24728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.155000][T24728] RSP: 002b:00007f90dadf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.155011][T24728] RAX: ffffffffffffffda RBX: 00007f90da225fa0 RCX: 00007f90d9f9e0d9 [ 323.155018][T24728] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 323.155024][T24728] RBP: 00007f90dadf1090 R08: 0000000000000000 R09: 0000000000000000 [ 323.155031][T24728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.155037][T24728] R13: 00007f90da226038 R14: 00007f90da225fa0 R15: 00007ffd269fedf8 [ 323.155051][T24728] [ 323.277670][T24732] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.298501][T24742] FAULT_INJECTION: forcing a failure. [ 323.298501][T24742] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 323.305535][T24742] CPU: 1 UID: 0 PID: 24742 Comm: syz.8.3585 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.305561][T24742] Tainted: [L]=SOFTLOCKUP [ 323.305568][T24742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 323.305579][T24742] Call Trace: [ 323.305585][T24742] [ 323.305593][T24742] dump_stack_lvl+0x100/0x190 [ 323.305623][T24742] should_fail_ex.cold+0x5/0xa [ 323.305637][T24742] ? prepare_alloc_pages+0x16d/0x5f0 [ 323.305654][T24742] should_fail_alloc_page+0xeb/0x140 [ 323.305670][T24742] prepare_alloc_pages+0x1f0/0x5f0 [ 323.305688][T24742] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 323.305709][T24742] ? lock_acquire+0x1b9/0x370 [ 323.305724][T24742] ? find_held_lock+0x2b/0x80 [ 323.305733][T24742] ? is_bpf_text_address+0x8a/0x1a0 [ 323.305749][T24742] ? is_bpf_text_address+0x8a/0x1a0 [ 323.305764][T24742] ? bpf_ksym_find+0x128/0x1c0 [ 323.305780][T24742] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 323.305794][T24742] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 323.305806][T24742] ? kernel_text_address+0x8d/0x100 [ 323.305819][T24742] ? __kernel_text_address+0xd/0x30 [ 323.305831][T24742] ? unwind_get_return_address+0x59/0xa0 [ 323.305857][T24742] ? arch_stack_walk+0xa6/0xf0 [ 323.305883][T24742] ? stack_trace_save+0x8e/0xc0 [ 323.305895][T24742] ? __pfx_stack_trace_save+0x10/0x10 [ 323.305906][T24742] ? stack_depot_save_flags+0x27/0x9d0 [ 323.305925][T24742] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 323.305939][T24742] ? policy_nodemask+0xed/0x4f0 [ 323.305955][T24742] alloc_pages_mpol+0x1fb/0x540 [ 323.305971][T24742] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 323.305985][T24742] ? vfs_read+0x82e/0xb40 [ 323.306006][T24742] folio_alloc_mpol_noprof+0x36/0x260 [ 323.306025][T24742] vma_alloc_folio_noprof+0xed/0x1d0 [ 323.306042][T24742] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 323.306063][T24742] do_anonymous_page+0xb2b/0x2080 [ 323.306094][T24742] ? rcu_read_unlock+0x2d/0xb0 [ 323.306112][T24742] __handle_mm_fault+0x1d2c/0x2a00 [ 323.306140][T24742] ? mt_find+0x45e/0x8e0 [ 323.306168][T24742] ? __pfx___handle_mm_fault+0x10/0x10 [ 323.306193][T24742] ? __pfx_mt_find+0x10/0x10 [ 323.306231][T24742] ? find_vma+0xbf/0x140 [ 323.306253][T24742] ? __pfx_find_vma+0x10/0x10 [ 323.306268][T24742] handle_mm_fault+0x37b/0xa30 [ 323.306289][T24742] do_user_addr_fault+0x74c/0x12f0 [ 323.306310][T24742] exc_page_fault+0x6f/0xd0 [ 323.306324][T24742] asm_exc_page_fault+0x26/0x30 [ 323.306336][T24742] RIP: 0010:_copy_to_iter+0x38c/0x1720 [ 323.306352][T24742] Code: 00 00 00 00 e9 4d ff ff ff e8 80 23 ef fc 4c 8b 74 24 18 44 89 fe 4c 89 f7 e8 00 b3 5f fd 0f 01 cb 4c 89 f9 48 89 df 4c 89 f6 a4 0f 1f 00 48 89 cb 0f 01 ca 4c 89 f8 48 29 c8 48 89 44 24 08 [ 323.306363][T24742] RSP: 0018:ffffc9000c517b18 EFLAGS: 00050246 [ 323.306373][T24742] RAX: 0000000000000001 RBX: 0000200000002980 RCX: 00000000000008ed [ 323.306381][T24742] RDX: 0000000000000001 RSI: ffff888026820000 RDI: 0000200000002980 [ 323.306388][T24742] RBP: ffffc9000c517d80 R08: 0000000000000000 R09: ffffed1004d0411d [ 323.306394][T24742] R10: ffff8880268208ec R11: 0000000000000000 R12: 000020000000326d [ 323.306401][T24742] R13: 00007ffffffff000 R14: ffff888026820000 R15: 00000000000008ed [ 323.306415][T24742] ? _copy_to_iter+0x380/0x1720 [ 323.306431][T24742] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 323.306449][T24742] ? __pfx__copy_to_iter+0x10/0x10 [ 323.306463][T24742] ? __pfx_keyring_search_iterator+0x10/0x10 [ 323.306476][T24742] ? __pfx_from_kuid+0x10/0x10 [ 323.306489][T24742] ? find_held_lock+0x2b/0x80 [ 323.306499][T24742] ? seq_read_iter+0xd33/0x1270 [ 323.306510][T24742] ? seq_read_iter+0xd33/0x1270 [ 323.306524][T24742] seq_read_iter+0xdab/0x1270 [ 323.306541][T24742] proc_reg_read_iter+0x220/0x310 [ 323.306555][T24742] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 323.306568][T24742] vfs_read+0x82e/0xb40 [ 323.306586][T24742] ? __pfx_vfs_read+0x10/0x10 [ 323.306612][T24742] ksys_read+0x12a/0x250 [ 323.306628][T24742] ? __pfx_ksys_read+0x10/0x10 [ 323.306648][T24742] do_syscall_64+0x115/0x870 [ 323.306662][T24742] ? clear_bhb_loop+0x40/0x90 [ 323.306675][T24742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.306686][T24742] RIP: 0033:0x7f90d9f9e0d9 [ 323.306700][T24742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.306711][T24742] RSP: 002b:00007f90dadf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.306720][T24742] RAX: ffffffffffffffda RBX: 00007f90da225fa0 RCX: 00007f90d9f9e0d9 [ 323.306727][T24742] RDX: 00000000000015be RSI: 0000200000002980 RDI: 0000000000000003 [ 323.306733][T24742] RBP: 00007f90dadf1090 R08: 0000000000000000 R09: 0000000000000000 [ 323.306740][T24742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.306746][T24742] R13: 00007f90da226038 R14: 00007f90da225fa0 R15: 00007ffd269fedf8 [ 323.306761][T24742] [ 323.728327][T24775] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 323.845957][ T24] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 323.908870][ T42] audit: type=1400 audit(1785929775.060:1201): avc: denied { read } for pid=24793 comm="syz.3.3597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 324.007171][ T24] usb 13-1: Using ep0 maxpacket: 8 [ 324.016072][ T24] usb 13-1: config index 0 descriptor too short (expected 74, got 45) [ 324.019368][ T24] usb 13-1: config 16 has an invalid interface number: 48 but max is 0 [ 324.022590][ T24] usb 13-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 324.027351][ T24] usb 13-1: config 16 has no interface number 0 [ 324.029676][ T24] usb 13-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 324.033998][ T24] usb 13-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 324.039485][ T24] usb 13-1: config 16 interface 48 has no altsetting 0 [ 324.042303][ T24] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 324.045862][ T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.072844][T24796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.086200][T24829] comedi comedi0: Minor 3 could not be opened [ 324.177108][T24837] FAULT_INJECTION: forcing a failure. [ 324.177108][T24837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.197977][T24837] CPU: 2 UID: 0 PID: 24837 Comm: syz.6.3601 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.197998][T24837] Tainted: [L]=SOFTLOCKUP [ 324.198002][T24837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 324.198009][T24837] Call Trace: [ 324.198014][T24837] [ 324.198019][T24837] dump_stack_lvl+0x100/0x190 [ 324.198089][T24837] should_fail_ex.cold+0x5/0xa [ 324.198105][T24837] _copy_from_user+0x2e/0xd0 [ 324.198130][T24837] copy_msghdr_from_user+0x9f/0x4c0 [ 324.198157][T24837] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 324.198171][T24837] ? rcu_is_watching+0x12/0xc0 [ 324.198195][T24837] ? ___sys_sendmsg+0x19d/0x1e0 [ 324.198205][T24837] ? kfree+0x1e5/0x6c0 [ 324.198230][T24837] ___sys_sendmsg+0x106/0x1e0 [ 324.198242][T24837] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.198265][T24837] ? __pfx___might_resched+0x10/0x10 [ 324.198282][T24837] __sys_sendmmsg+0x20c/0x440 [ 324.198298][T24837] ? __pfx___sys_sendmmsg+0x10/0x10 [ 324.198312][T24837] ? ksys_write+0x190/0x250 [ 324.198339][T24837] ? fput+0x79/0x100 [ 324.198358][T24837] ? ksys_write+0x1ac/0x250 [ 324.198371][T24837] ? __pfx_ksys_write+0x10/0x10 [ 324.198392][T24837] __x64_sys_sendmmsg+0x9c/0x100 [ 324.198414][T24837] ? lockdep_hardirqs_on+0x78/0x100 [ 324.198458][T24837] do_syscall_64+0x115/0x870 [ 324.198478][T24837] ? clear_bhb_loop+0x40/0x90 [ 324.198499][T24837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.198517][T24837] RIP: 0033:0x7fb657f9e0d9 [ 324.198533][T24837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.198550][T24837] RSP: 002b:00007fb658f33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 324.198569][T24837] RAX: ffffffffffffffda RBX: 00007fb658225fa0 RCX: 00007fb657f9e0d9 [ 324.198581][T24837] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 324.198591][T24837] RBP: 00007fb658f33090 R08: 0000000000000000 R09: 0000000000000000 [ 324.198602][T24837] R10: 000000000000ffe0 R11: 0000000000000246 R12: 0000000000000002 [ 324.198613][T24837] R13: 00007fb658226038 R14: 00007fb658225fa0 R15: 00007ffd9d1da5f8 [ 324.198652][T24837] [ 324.286925][ T24] usb 13-1: string descriptor 0 read error: -71 [ 324.291311][ T24] usb 13-1: USB disconnect, device number 2 [ 324.331377][T24856] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3602'. [ 324.335333][ T42] audit: type=1326 audit(1785929775.463:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24843 comm="syz.6.3602" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb657f9e0d9 code=0x0 [ 324.342843][T24855] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 324.480892][T24873] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 324.524027][T24881] FAULT_INJECTION: forcing a failure. [ 324.524027][T24881] name failslab, interval 1, probability 0, space 0, times 0 [ 324.533242][T24881] CPU: 2 UID: 0 PID: 24881 Comm: syz.3.3608 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.533274][T24881] Tainted: [L]=SOFTLOCKUP [ 324.533281][T24881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 324.533293][T24881] Call Trace: [ 324.533301][T24881] [ 324.533309][T24881] dump_stack_lvl+0x100/0x190 [ 324.533340][T24881] should_fail_ex.cold+0x5/0xa [ 324.533365][T24881] should_failslab+0xc2/0x120 [ 324.533392][T24881] __kmalloc_cache_noprof+0x91/0x6c0 [ 324.533422][T24881] ? __hw_addr_create+0x57/0x220 [ 324.533456][T24881] __hw_addr_create+0x57/0x220 [ 324.533487][T24881] __hw_addr_add_ex+0x32b/0x650 [ 324.533516][T24881] ? stack_depot_init+0x38/0x80 [ 324.533544][T24881] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 324.533574][T24881] ? __mutex_unlock_slowpath+0x35d/0x930 [ 324.533602][T24881] dev_addr_init+0x161/0x250 [ 324.533621][T24881] ? __pfx_dev_addr_init+0x10/0x10 [ 324.533645][T24881] ? __pfx_br_dev_setup+0x10/0x10 [ 324.533680][T24881] ? __pfx_br_dev_setup+0x10/0x10 [ 324.533699][T24881] alloc_netdev_mqs+0x363/0x15c0 [ 324.533730][T24881] rtnl_create_link+0xc13/0xf80 [ 324.533760][T24881] rtnl_newlink+0x13bd/0x2380 [ 324.533794][T24881] ? __pfx_rtnl_newlink+0x10/0x10 [ 324.533818][T24881] ? find_held_lock+0x2b/0x80 [ 324.533837][T24881] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 324.533869][T24881] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 324.533895][T24881] ? avc_has_perm_noaudit+0x145/0x3b0 [ 324.533944][T24881] ? find_held_lock+0x2b/0x80 [ 324.533961][T24881] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 324.533986][T24881] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 324.534013][T24881] ? __pfx_rtnl_newlink+0x10/0x10 [ 324.534039][T24881] rtnetlink_rcv_msg+0x95e/0xe90 [ 324.534068][T24881] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 324.534100][T24881] ? ref_tracker_free+0x37e/0x6c0 [ 324.534130][T24881] netlink_rcv_skb+0x159/0x420 [ 324.534150][T24881] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 324.534178][T24881] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 324.534205][T24881] ? netlink_deliver_tap+0x1ae/0xcc0 [ 324.534230][T24881] netlink_unicast+0x585/0x850 [ 324.534254][T24881] ? __pfx_netlink_unicast+0x10/0x10 [ 324.534282][T24881] netlink_sendmsg+0x8b0/0xda0 [ 324.534307][T24881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.534330][T24881] ? selinux_socket_sendmsg+0x198/0x2f0 [ 324.534363][T24881] ____sys_sendmsg+0xa4d/0xbe0 [ 324.534391][T24881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.534413][T24881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.534454][T24881] ___sys_sendmsg+0x190/0x1e0 [ 324.534475][T24881] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.534494][T24881] ? __lock_acquire+0x49f/0x1a40 [ 324.534517][T24881] ? get_pid_task+0x106/0x250 [ 324.534564][T24881] __sys_sendmsg+0x160/0x210 [ 324.534590][T24881] ? __pfx___sys_sendmsg+0x10/0x10 [ 324.534629][T24881] do_syscall_64+0x115/0x870 [ 324.534651][T24881] ? clear_bhb_loop+0x40/0x90 [ 324.534693][T24881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.534712][T24881] RIP: 0033:0x7f6f94d9e0d9 [ 324.534730][T24881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.534748][T24881] RSP: 002b:00007f6f95cf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.534767][T24881] RAX: ffffffffffffffda RBX: 00007f6f95025fa0 RCX: 00007f6f94d9e0d9 [ 324.534779][T24881] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 324.534790][T24881] RBP: 00007f6f95cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 324.534801][T24881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 324.534811][T24881] R13: 00007f6f95026038 R14: 00007f6f95025fa0 R15: 00007fff16f3ce08 [ 324.534837][T24881] [ 324.852744][T24904] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 324.995241][T24912] FAULT_INJECTION: forcing a failure. [ 324.995241][T24912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.999170][T24912] CPU: 3 UID: 0 PID: 24912 Comm: syz.8.3616 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.999188][T24912] Tainted: [L]=SOFTLOCKUP [ 324.999192][T24912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 324.999199][T24912] Call Trace: [ 324.999204][T24912] [ 324.999209][T24912] dump_stack_lvl+0x100/0x190 [ 324.999229][T24912] should_fail_ex.cold+0x5/0xa [ 324.999244][T24912] _copy_to_user+0x32/0xd0 [ 324.999261][T24912] simple_read_from_buffer+0xcb/0x170 [ 324.999285][T24912] proc_fail_nth_read+0x1af/0x230 [ 324.999303][T24912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.999321][T24912] ? rw_verify_area+0xce/0x6d0 [ 324.999337][T24912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.999353][T24912] vfs_read+0x1e4/0xb40 [ 324.999372][T24912] ? __pfx_vfs_read+0x10/0x10 [ 324.999388][T24912] ? __fget_files+0x215/0x3d0 [ 324.999403][T24912] ? __fget_files+0x21f/0x3d0 [ 324.999418][T24912] ksys_read+0x12a/0x250 [ 324.999454][T24912] ? __pfx_ksys_read+0x10/0x10 [ 324.999481][T24912] do_syscall_64+0x115/0x870 [ 324.999499][T24912] ? clear_bhb_loop+0x40/0x90 [ 324.999519][T24912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.999534][T24912] RIP: 0033:0x7f90d9f5e90e [ 324.999544][T24912] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 324.999555][T24912] RSP: 002b:00007f90dadf0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 324.999566][T24912] RAX: ffffffffffffffda RBX: 00007f90dadf16c0 RCX: 00007f90d9f5e90e [ 324.999573][T24912] RDX: 000000000000000f RSI: 00007f90dadf10a0 RDI: 0000000000000006 [ 324.999580][T24912] RBP: 00007f90dadf1090 R08: 0000000000000000 R09: 0000000000000000 [ 324.999586][T24912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.999593][T24912] R13: 00007f90da226038 R14: 00007f90da225fa0 R15: 00007ffd269fedf8 [ 324.999607][T24912] [ 325.205727][ T42] audit: type=1326 audit(1785929776.277:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24924 comm="syz.8.3618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d9f9e0d9 code=0x50000 [ 325.215718][T24920] syzkaller0: entered promiscuous mode [ 325.216751][ T42] audit: type=1326 audit(1785929776.277:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24924 comm="syz.8.3618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d9f9e0d9 code=0x50000 [ 325.217975][T24920] syzkaller0: entered allmulticast mode [ 325.227956][ T42] audit: type=1326 audit(1785929776.277:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24924 comm="syz.8.3618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d9f9e0d9 code=0x50000 [ 325.236624][ T42] audit: type=1326 audit(1785929776.277:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24924 comm="syz.8.3618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d9f9e0d9 code=0x50000 [ 325.245689][ T42] audit: type=1326 audit(1785929776.277:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24924 comm="syz.8.3618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d9f9e0d9 code=0x50000 [ 325.254010][ T42] audit: type=1326 audit(1785929776.277:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24924 comm="syz.8.3618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d9f9e0d9 code=0x50000 [ 325.262412][ T42] audit: type=1326 audit(1785929776.277:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24924 comm="syz.8.3618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d9f9e0d9 code=0x50000 [ 325.270131][ T42] audit: type=1326 audit(1785929776.277:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24924 comm="syz.8.3618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d9f9e0d9 code=0x50000 [ 325.277489][ T42] audit: type=1326 audit(1785929776.277:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24924 comm="syz.8.3618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d9f9e0d9 code=0x50000 [ 325.929863][T24936] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3620'. [ 327.165029][T24954] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 327.541220][T24960] netlink: 'syz.3.3625': attribute type 3 has an invalid length. [ 327.546008][T24960] netlink: 'syz.3.3625': attribute type 1 has an invalid length. [ 327.552981][T24960] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3625'. [ 327.693358][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.542396][T24980] nvmet: adding nsid 1 to subsystem testnqn [ 328.574818][T24980] nvmet: failed to open block device ./backing_file: (-2) [ 328.631202][T24987] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3632'. [ 328.642738][T24987] syzkaller1: entered promiscuous mode [ 328.642856][T24992] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 328.645493][T24987] syzkaller1: entered allmulticast mode [ 328.770717][T25002] i2c i2c-1: DVB: adapter 0 frontend 0 symbol rate 0 out of range (1000000..45000000) [ 328.951430][T25023] FAULT_INJECTION: forcing a failure. [ 328.951430][T25023] name failslab, interval 1, probability 0, space 0, times 0 [ 328.955799][T25023] CPU: 0 UID: 0 PID: 25023 Comm: syz.8.3638 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.955819][T25023] Tainted: [L]=SOFTLOCKUP [ 328.955823][T25023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 328.955831][T25023] Call Trace: [ 328.955836][T25023] [ 328.955841][T25023] dump_stack_lvl+0x100/0x190 [ 328.955862][T25023] should_fail_ex.cold+0x5/0xa [ 328.955877][T25023] should_failslab+0xc2/0x120 [ 328.955893][T25023] kmem_cache_alloc_noprof+0x91/0x6a0 [ 328.955908][T25023] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 328.955926][T25023] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 328.955944][T25023] mmu_topup_memory_caches+0x25/0x170 [ 328.955962][T25023] kvm_mmu_load+0xe2/0x2570 [ 328.955977][T25023] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 328.955990][T25023] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 328.956005][T25023] ? __pfx_kvm_mmu_load+0x10/0x10 [ 328.956019][T25023] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 328.956034][T25023] ? kvm_check_and_inject_events+0x873/0x12a0 [ 328.956051][T25023] ? record_steal_time+0x3a0/0xbb0 [ 328.956065][T25023] vcpu_run+0x3aaa/0x5de0 [ 328.956086][T25023] ? __pfx_vcpu_run+0x10/0x10 [ 328.956108][T25023] ? rcu_is_watching+0x12/0xc0 [ 328.956128][T25023] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 328.956144][T25023] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 328.956165][T25023] kvm_vcpu_ioctl+0x730/0x1700 [ 328.956180][T25023] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 328.956193][T25023] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 328.956223][T25023] ? do_vfs_ioctl+0x226/0x13e0 [ 328.956243][T25023] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 328.956260][T25023] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 328.956285][T25023] ? __fget_files+0x215/0x3d0 [ 328.956296][T25023] ? hook_file_ioctl_common+0x140/0x440 [ 328.956314][T25023] ? selinux_file_ioctl+0x13b/0x290 [ 328.956331][T25023] ? selinux_file_ioctl+0xb6/0x290 [ 328.956350][T25023] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 328.956364][T25023] __x64_sys_ioctl+0x18e/0x210 [ 328.956381][T25023] do_syscall_64+0x115/0x870 [ 328.956401][T25023] ? clear_bhb_loop+0x40/0x90 [ 328.956415][T25023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.956426][T25023] RIP: 0033:0x7f90d9f9e0d9 [ 328.956437][T25023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.956448][T25023] RSP: 002b:00007f90dadf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.956460][T25023] RAX: ffffffffffffffda RBX: 00007f90da225fa0 RCX: 00007f90d9f9e0d9 [ 328.956467][T25023] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 328.956474][T25023] RBP: 00007f90dadf1090 R08: 0000000000000000 R09: 0000000000000000 [ 328.956481][T25023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 328.956487][T25023] R13: 00007f90da226038 R14: 00007f90da225fa0 R15: 00007ffd269fedf8 [ 328.956502][T25023] [ 329.192151][T25035] erofs (device loop8): cannot find valid erofs superblock [ 329.198519][T25035] netlink: 'syz.8.3640': attribute type 3 has an invalid length. [ 329.204654][T25035] netlink: 'syz.8.3640': attribute type 1 has an invalid length. [ 329.213420][T25035] netlink: 216 bytes leftover after parsing attributes in process `syz.8.3640'. [ 329.272167][T25040] syzkaller0: entered promiscuous mode [ 329.275011][T25040] syzkaller0: entered allmulticast mode [ 329.294208][T25048] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 329.620931][T25066] IPv4: Oversized IP packet from 127.202.26.0 [ 331.388132][T25072] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3650'. [ 331.389296][T25083] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 331.635414][T25099] vivid-001: disconnect [ 331.645506][T25099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3658'. [ 331.713857][T25098] vivid-001: reconnect [ 331.758106][T25105] FAULT_INJECTION: forcing a failure. [ 331.758106][T25105] name failslab, interval 1, probability 0, space 0, times 0 [ 331.764832][T25105] CPU: 0 UID: 0 PID: 25105 Comm: syz.3.3659 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.764851][T25105] Tainted: [L]=SOFTLOCKUP [ 331.764856][T25105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 331.764862][T25105] Call Trace: [ 331.764868][T25105] [ 331.764874][T25105] dump_stack_lvl+0x100/0x190 [ 331.764893][T25105] should_fail_ex.cold+0x5/0xa [ 331.764908][T25105] should_failslab+0xc2/0x120 [ 331.764924][T25105] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 331.764938][T25105] ? __alloc_skb+0x5b7/0x710 [ 331.764953][T25105] ? __alloc_skb+0x140/0x710 [ 331.764968][T25105] __alloc_skb+0x140/0x710 [ 331.764980][T25105] ? __alloc_skb+0x5b7/0x710 [ 331.764993][T25105] ? __pfx___alloc_skb+0x10/0x10 [ 331.765007][T25105] ? find_held_lock+0x2b/0x80 [ 331.765021][T25105] tcp_v6_send_response+0x2de/0x25b0 [ 331.765042][T25105] ? __pfx_tcp_v6_send_response+0x10/0x10 [ 331.765054][T25105] ? __lock_acquire+0x49f/0x1a40 [ 331.765073][T25105] ? lock_acquire+0x1b9/0x370 [ 331.765088][T25105] tcp_v6_send_reset+0xb13/0x17b0 [ 331.765106][T25105] ? inet6_lhash2_lookup+0x403/0x4b0 [ 331.765124][T25105] ? __pfx_tcp_v6_send_reset+0x10/0x10 [ 331.765141][T25105] ? inet6_lookup_listener+0x176/0x330 [ 331.765159][T25105] ? __asan_memmove+0x3c/0x60 [ 331.765172][T25105] tcp_v6_rcv+0x18ba/0x4380 [ 331.765191][T25105] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 331.765204][T25105] ? raw6_local_deliver+0x3f3/0xaf0 [ 331.765218][T25105] ? raw6_local_deliver+0x3fd/0xaf0 [ 331.765229][T25105] ? find_held_lock+0x2b/0x80 [ 331.765241][T25105] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 331.765254][T25105] ip6_protocol_deliver_rcu+0x1d8/0x15b0 [ 331.765277][T25105] ip6_input_finish+0x1e4/0x4a0 [ 331.765294][T25105] ip6_input+0x105/0x2f0 [ 331.765309][T25105] ? __pfx_ip6_input+0x10/0x10 [ 331.765324][T25105] ipv6_rcv+0x263/0x3d0 [ 331.765339][T25105] ? __pfx_ipv6_rcv+0x10/0x10 [ 331.765353][T25105] __netif_receive_skb_one_core+0x12d/0x1e0 [ 331.765367][T25105] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 331.765381][T25105] ? lock_acquire+0x1b9/0x370 [ 331.765397][T25105] __netif_receive_skb+0x1f/0x120 [ 331.765410][T25105] netif_receive_skb+0x139/0x7d0 [ 331.765422][T25105] ? __pfx_netif_receive_skb+0x10/0x10 [ 331.765439][T25105] tun_rx_batched.isra.0+0x3f6/0x750 [ 331.765478][T25105] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 331.765499][T25105] ? tun_get_user+0x1cc8/0x3c20 [ 331.765514][T25105] tun_get_user+0x1e31/0x3c20 [ 331.765531][T25105] ? __pfx_tun_get_user+0x10/0x10 [ 331.765543][T25105] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 331.765565][T25105] ? find_held_lock+0x2b/0x80 [ 331.765575][T25105] ? tun_get+0x191/0x370 [ 331.765584][T25105] ? tun_get+0x191/0x370 [ 331.765598][T25105] tun_chr_write_iter+0xdc/0x200 [ 331.765611][T25105] vfs_write+0x6ac/0x1050 [ 331.765629][T25105] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 331.765642][T25105] ? __pfx_vfs_write+0x10/0x10 [ 331.765658][T25105] ? find_held_lock+0x2b/0x80 [ 331.765675][T25105] ksys_write+0x12a/0x250 [ 331.765685][T25105] ? __pfx_ksys_write+0x10/0x10 [ 331.765699][T25105] do_syscall_64+0x115/0x870 [ 331.765714][T25105] ? clear_bhb_loop+0x40/0x90 [ 331.765727][T25105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.765738][T25105] RIP: 0033:0x7f6f94d5e90e [ 331.765748][T25105] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 331.765758][T25105] RSP: 002b:00007f6f95cf6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 331.765770][T25105] RAX: ffffffffffffffda RBX: 00007f6f95cf76c0 RCX: 00007f6f94d5e90e [ 331.765777][T25105] RDX: 000000000000004a RSI: 0000200000000200 RDI: 00000000000000c8 [ 331.765784][T25105] RBP: 00007f6f95cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 331.765791][T25105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.765801][T25105] R13: 00007f6f95026038 R14: 00007f6f95025fa0 R15: 00007fff16f3ce08 [ 331.765815][T25105] [ 332.168095][T25110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3661'. [ 332.238746][T25123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3661'. [ 332.243388][T25123] binder: BC_ACQUIRE_RESULT not supported [ 332.245455][T25123] binder: 25109:25123 ioctl c0306201 2000000003c0 returned -22 [ 332.292874][T25129] dlm: non-version read from control device 4096 [ 332.353515][T25135] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 332.374939][T25134] syzkaller0: entered promiscuous mode [ 332.376718][T25134] syzkaller0: entered allmulticast mode [ 332.469647][T25135] md: could not open device unknown-block(1,0). [ 332.511122][T25146] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 332.516157][T25141] md: could not open device unknown-block(1,1). [ 332.597227][T25135] md: could not open device unknown-block(1,2). [ 332.640164][T25141] md: could not open device unknown-block(1,3). [ 333.643069][T25181] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 333.842671][T25186] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3679'. [ 333.852097][T25186] FAULT_INJECTION: forcing a failure. [ 333.852097][T25186] name failslab, interval 1, probability 0, space 0, times 0 [ 333.857472][T25186] CPU: 1 UID: 0 PID: 25186 Comm: syz.3.3679 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.857499][T25186] Tainted: [L]=SOFTLOCKUP [ 333.857505][T25186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 333.857516][T25186] Call Trace: [ 333.857522][T25186] [ 333.857530][T25186] dump_stack_lvl+0x100/0x190 [ 333.857558][T25186] should_fail_ex.cold+0x5/0xa [ 333.857581][T25186] should_failslab+0xc2/0x120 [ 333.857603][T25186] __kmalloc_cache_noprof+0x91/0x6c0 [ 333.857630][T25186] ? nf_tables_newtable+0xd0a/0x1a90 [ 333.857657][T25186] nf_tables_newtable+0xd0a/0x1a90 [ 333.857700][T25186] ? __pfx_nf_tables_newtable+0x10/0x10 [ 333.857724][T25186] ? __nla_parse+0x40/0x60 [ 333.857746][T25186] nfnetlink_rcv_batch+0x1410/0x2880 [ 333.857781][T25186] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 333.857823][T25186] ? avc_has_perm_noaudit+0x145/0x3b0 [ 333.857866][T25186] ? __nla_parse+0x40/0x60 [ 333.857886][T25186] nfnetlink_rcv+0x3bd/0x440 [ 333.857907][T25186] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 333.857935][T25186] netlink_unicast+0x585/0x850 [ 333.857957][T25186] ? __pfx_netlink_unicast+0x10/0x10 [ 333.857981][T25186] netlink_sendmsg+0x8b0/0xda0 [ 333.858003][T25186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.858023][T25186] ? selinux_socket_sendmsg+0x198/0x2f0 [ 333.858051][T25186] ____sys_sendmsg+0xa4d/0xbe0 [ 333.858076][T25186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.858095][T25186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.858129][T25186] ___sys_sendmsg+0x190/0x1e0 [ 333.858148][T25186] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.858162][T25186] ? __lock_acquire+0x49f/0x1a40 [ 333.858184][T25186] ? get_pid_task+0x106/0x250 [ 333.858225][T25186] __sys_sendmsg+0x160/0x210 [ 333.858246][T25186] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.858279][T25186] do_syscall_64+0x115/0x870 [ 333.858300][T25186] ? clear_bhb_loop+0x40/0x90 [ 333.858321][T25186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.858338][T25186] RIP: 0033:0x7f6f94d9e0d9 [ 333.858353][T25186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.858369][T25186] RSP: 002b:00007f6f95cf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.858386][T25186] RAX: ffffffffffffffda RBX: 00007f6f95025fa0 RCX: 00007f6f94d9e0d9 [ 333.858396][T25186] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 333.858407][T25186] RBP: 00007f6f95cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 333.858418][T25186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 333.858427][T25186] R13: 00007f6f95026038 R14: 00007f6f95025fa0 R15: 00007fff16f3ce08 [ 333.858449][T25186] [ 334.802804][ T42] kauditd_printk_skb: 44908 callbacks suppressed [ 334.802823][ T42] audit: type=1326 audit(1785929785.251:46120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25194 comm="syz.3.3681" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f94d9e0d9 code=0x0 [ 335.034789][T25202] netlink: 'syz.5.3682': attribute type 4 has an invalid length. [ 335.037380][T25202] netlink: 'syz.5.3682': attribute type 8 has an invalid length. [ 335.039916][T25202] netlink: 212 bytes leftover after parsing attributes in process `syz.5.3682'. [ 335.043799][T25202] wg0: Master is either lo or non-ether device [ 335.190382][T25221] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 335.331075][T25226] binder: 25225:25226 ioctl c0306201 200000000040 returned -22 [ 335.734966][ T42] audit: type=1326 audit(1785929786.131:46121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25232 comm="syz.3.3690" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f94d9e0d9 code=0x0 [ 336.093685][T25238] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3691'. [ 336.131145][T25241] bridge11: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 336.374059][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.377897][T25263] Bluetooth: hci0: invalid len left 7, exp >= 106 [ 336.378308][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.381284][T25263] comedi comedi0: Minor 3 could not be opened [ 336.386545][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.391005][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.393799][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.635003][T25290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3700'. [ 336.685024][T25304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.696165][T25304] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 336.711506][T25304] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 336.729406][T25304] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 336.755064][T25304] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 336.900212][T25257] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.909841][T25257] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.919167][T25257] bridge_slave_0: entered allmulticast mode [ 336.923517][T25257] bridge_slave_0: entered promiscuous mode [ 336.928696][T25257] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.931655][T25257] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.934461][T25257] bridge_slave_1: entered allmulticast mode [ 336.940076][T25257] bridge_slave_1: entered promiscuous mode [ 336.961977][T25257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.967768][T25257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.006553][T25257] team0: Port device team_slave_0 added [ 337.009905][T25257] team0: Port device team_slave_1 added [ 337.047057][T25257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.049254][T25257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.059208][T25257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.065162][T25257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.067893][T25257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.078999][T25257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.112330][T25257] hsr_slave_0: entered promiscuous mode [ 337.114721][T25257] hsr_slave_1: entered promiscuous mode [ 337.116772][T25257] debugfs: 'hsr0' already exists in 'hsr' [ 337.119053][T25257] Cannot create hsr debugfs directory [ 337.123166][T25457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3705'. [ 337.268722][T25257] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.273354][T25257] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.281400][ T42] audit: type=1326 audit(1785929787.581:46122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25552 comm="syz.3.3707" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f94d9e0d9 code=0x0 [ 337.398199][T25257] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.403436][T25257] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.443198][T25562] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3708'. [ 337.493019][T25565] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 337.555111][T25569] FAULT_INJECTION: forcing a failure. [ 337.555111][T25569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.563034][T25569] CPU: 3 UID: 0 PID: 25569 Comm: syz.6.3710 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.563065][T25569] Tainted: [L]=SOFTLOCKUP [ 337.563072][T25569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.563082][T25569] Call Trace: [ 337.563091][T25569] [ 337.563100][T25569] dump_stack_lvl+0x100/0x190 [ 337.563130][T25569] should_fail_ex.cold+0x5/0xa [ 337.563154][T25569] _copy_from_iter+0x1f4/0x1690 [ 337.563187][T25569] ? __pfx__copy_from_iter+0x10/0x10 [ 337.563212][T25569] ? alloc_pages_noprof+0xf9/0x160 [ 337.563247][T25569] ? skb_page_frag_refill+0x309/0x4b0 [ 337.563273][T25569] ? sk_page_frag_refill+0x6c/0x340 [ 337.563294][T25569] tcp_sendmsg_locked+0xc8c/0x44d0 [ 337.563335][T25569] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 337.563364][T25569] ? do_raw_spin_lock+0x128/0x260 [ 337.563391][T25569] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 337.563421][T25569] ? __local_bh_enable_ip+0x9e/0x120 [ 337.563449][T25569] tcp_sendmsg+0x2e/0x50 [ 337.563473][T25569] ? __pfx_tcp_sendmsg+0x10/0x10 [ 337.563497][T25569] inet_sendmsg+0xb9/0x140 [ 337.563523][T25569] __sys_sendto+0x453/0x4e0 [ 337.563544][T25569] ? __pfx_inet_sendmsg+0x10/0x10 [ 337.563568][T25569] ? __pfx___sys_sendto+0x10/0x10 [ 337.563596][T25569] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 337.563631][T25569] ? ksys_write+0x1ac/0x250 [ 337.563648][T25569] ? __pfx_ksys_write+0x10/0x10 [ 337.563667][T25569] __x64_sys_sendto+0xe0/0x1c0 [ 337.563688][T25569] ? do_syscall_64+0x90/0x870 [ 337.563709][T25569] ? lockdep_hardirqs_on+0x78/0x100 [ 337.563731][T25569] do_syscall_64+0x115/0x870 [ 337.563751][T25569] ? clear_bhb_loop+0x40/0x90 [ 337.563773][T25569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.563792][T25569] RIP: 0033:0x7fb657f9e0d9 [ 337.563807][T25569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.563824][T25569] RSP: 002b:00007fb658f33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 337.563843][T25569] RAX: ffffffffffffffda RBX: 00007fb658225fa0 RCX: 00007fb657f9e0d9 [ 337.563854][T25569] RDX: fffffffffffffe88 RSI: 00002000000002c0 RDI: 0000000000000003 [ 337.563865][T25569] RBP: 00007fb658f33090 R08: 0000000000000000 R09: 0000000000000000 [ 337.563875][T25569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.563886][T25569] R13: 00007fb658226038 R14: 00007fb658225fa0 R15: 00007ffd9d1da5f8 [ 337.563910][T25569] [ 337.654725][T25257] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.667046][T25257] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.776683][T25257] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.782063][T25257] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.041637][T25257] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 338.048362][T25257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 338.052307][T25257] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 338.060741][T25257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 338.065151][T25257] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 338.074246][T25257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 338.077083][T25257] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 338.083273][T25257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 338.129376][T25257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.155237][T25257] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.161991][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.164808][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.191647][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.194676][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.196053][T25615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3716'. [ 338.437396][T25257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.589678][T25257] veth0_vlan: entered promiscuous mode [ 338.599526][T25257] veth1_vlan: entered promiscuous mode [ 338.614717][T25257] veth0_macvtap: entered promiscuous mode [ 338.618970][T25257] veth1_macvtap: entered promiscuous mode [ 338.629793][T25257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.635967][T25257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.678239][ T5550] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.768908][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.772985][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.792556][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.795398][ T5816] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.796087][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.799217][ T5816] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.828730][ T5816] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.117717][ T6369] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 339.124652][ T42] audit: type=1326 audit(1785929789.303:46123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25675 comm="syz.3.3722" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f94d9e0d9 code=0x0 [ 339.297010][ T6369] usb 10-1: Using ep0 maxpacket: 8 [ 339.300565][ T6369] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 339.303776][ T6369] usb 10-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 339.308160][ T6369] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 339.311818][ T6369] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 339.315134][ T6369] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 339.320502][ T6369] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 339.323564][ T6369] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.330911][ T6369] usbtmc 10-1:16.0: bulk endpoints not found [ 339.563890][T25685] netlink: 'syz.6.3723': attribute type 4 has an invalid length. [ 339.601776][T25688] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3724'. [ 339.892896][T25703] FAULT_INJECTION: forcing a failure. [ 339.892896][T25703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.897541][T25703] CPU: 3 UID: 0 PID: 25703 Comm: syz.6.3728 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.897560][T25703] Tainted: [L]=SOFTLOCKUP [ 339.897564][T25703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.897571][T25703] Call Trace: [ 339.897576][T25703] [ 339.897581][T25703] dump_stack_lvl+0x100/0x190 [ 339.897601][T25703] should_fail_ex.cold+0x5/0xa [ 339.897617][T25703] _copy_to_user+0x32/0xd0 [ 339.897634][T25703] simple_read_from_buffer+0xcb/0x170 [ 339.897648][T25703] proc_fail_nth_read+0x1af/0x230 [ 339.897668][T25703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.897685][T25703] ? rw_verify_area+0xce/0x6d0 [ 339.897702][T25703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.897719][T25703] vfs_read+0x1e4/0xb40 [ 339.897737][T25703] ? __pfx_vfs_read+0x10/0x10 [ 339.897753][T25703] ? __fget_files+0x215/0x3d0 [ 339.897768][T25703] ? __fget_files+0x21f/0x3d0 [ 339.897782][T25703] ksys_read+0x12a/0x250 [ 339.897799][T25703] ? __pfx_ksys_read+0x10/0x10 [ 339.897819][T25703] do_syscall_64+0x115/0x870 [ 339.897833][T25703] ? clear_bhb_loop+0x40/0x90 [ 339.897846][T25703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.897858][T25703] RIP: 0033:0x7fb657f5e90e [ 339.897867][T25703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 339.897878][T25703] RSP: 002b:00007fb658f32fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 339.897889][T25703] RAX: ffffffffffffffda RBX: 00007fb658f336c0 RCX: 00007fb657f5e90e [ 339.897896][T25703] RDX: 000000000000000f RSI: 00007fb658f330a0 RDI: 0000000000000003 [ 339.897902][T25703] RBP: 00007fb658f33090 R08: 0000000000000000 R09: 0000000000000000 [ 339.897909][T25703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.897915][T25703] R13: 00007fb658226038 R14: 00007fb658225fa0 R15: 00007ffd9d1da5f8 [ 339.897928][T25703] [ 339.919781][T25706] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3729'. [ 340.053822][T25715] nvmet: failed to open block device ./backing_file: (-2) [ 340.135722][T25724] netlink: 'syz.3.3734': attribute type 3 has an invalid length. [ 340.167400][ T42] audit: type=1400 audit(1785929790.276:46124): avc: denied { write } for pid=25726 comm="syz.3.3735" name="configs" dev="configfs" ino=34584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 340.176817][ T42] audit: type=1400 audit(1785929790.286:46125): avc: denied { write } for pid=25726 comm="syz.3.3735" name="functions" dev="configfs" ino=34583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 340.185766][ T42] audit: type=1400 audit(1785929790.295:46126): avc: denied { write } for pid=25726 comm="syz.3.3735" name="midi2.0" dev="configfs" ino=80099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 340.192956][ T42] audit: type=1400 audit(1785929790.295:46127): avc: denied { write } for pid=25726 comm="syz.3.3735" name="ep.1" dev="configfs" ino=80103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 340.200769][ T42] audit: type=1400 audit(1785929790.295:46128): avc: denied { write } for pid=25726 comm="syz.3.3735" name="c.1" dev="configfs" ino=80097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 340.208757][ T42] audit: type=1400 audit(1785929790.295:46129): avc: denied { create } for pid=25726 comm="syz.3.3735" name="midi2.0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 340.215248][ T42] audit: type=1400 audit(1785929790.295:46130): avc: denied { write } for pid=25726 comm="syz.3.3735" name="c.1" dev="configfs" ino=80097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 340.284734][T25740] jffs2: notice: (25740) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 340.299569][ T42] audit: type=1400 audit(1785929790.398:46131): avc: denied { write } for pid=25736 comm="syz.6.3736" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 340.306727][ T42] audit: type=1400 audit(1785929790.407:46132): avc: denied { add_name } for pid=25736 comm="syz.6.3736" name="test" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 340.406010][T25751] FAULT_INJECTION: forcing a failure. [ 340.406010][T25751] name failslab, interval 1, probability 0, space 0, times 0 [ 340.412931][T25751] CPU: 0 UID: 0 PID: 25751 Comm: syz.6.3737 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.412958][T25751] Tainted: [L]=SOFTLOCKUP [ 340.412964][T25751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 340.412975][T25751] Call Trace: [ 340.412982][T25751] [ 340.412989][T25751] dump_stack_lvl+0x100/0x190 [ 340.413017][T25751] should_fail_ex.cold+0x5/0xa [ 340.413039][T25751] should_failslab+0xc2/0x120 [ 340.413062][T25751] kmem_cache_alloc_noprof+0x91/0x6a0 [ 340.413082][T25751] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 340.413107][T25751] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 340.413132][T25751] mmu_topup_memory_caches+0x25/0x170 [ 340.413156][T25751] kvm_mmu_load+0xe2/0x2570 [ 340.413178][T25751] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 340.413196][T25751] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 340.413215][T25751] ? __pfx_kvm_mmu_load+0x10/0x10 [ 340.413232][T25751] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 340.413251][T25751] ? kvm_check_and_inject_events+0x873/0x12a0 [ 340.413274][T25751] ? record_steal_time+0x3a0/0xbb0 [ 340.413293][T25751] vcpu_run+0x3aaa/0x5de0 [ 340.413324][T25751] ? __pfx_vcpu_run+0x10/0x10 [ 340.413359][T25751] ? rcu_is_watching+0x12/0xc0 [ 340.413386][T25751] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 340.413409][T25751] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 340.413438][T25751] kvm_vcpu_ioctl+0x730/0x1700 [ 340.413457][T25751] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 340.413475][T25751] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 340.413497][T25751] ? do_vfs_ioctl+0x226/0x13e0 [ 340.413521][T25751] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 340.413543][T25751] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 340.413576][T25751] ? __fget_files+0x215/0x3d0 [ 340.413592][T25751] ? hook_file_ioctl_common+0x140/0x440 [ 340.413616][T25751] ? selinux_file_ioctl+0x13b/0x290 [ 340.413639][T25751] ? selinux_file_ioctl+0xb6/0x290 [ 340.413664][T25751] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 340.413682][T25751] __x64_sys_ioctl+0x18e/0x210 [ 340.413706][T25751] do_syscall_64+0x115/0x870 [ 340.413739][T25751] ? clear_bhb_loop+0x40/0x90 [ 340.413760][T25751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.413776][T25751] RIP: 0033:0x7fb657f9e0d9 [ 340.413792][T25751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.413807][T25751] RSP: 002b:00007fb658f33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.413824][T25751] RAX: ffffffffffffffda RBX: 00007fb658225fa0 RCX: 00007fb657f9e0d9 [ 340.413835][T25751] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 340.413845][T25751] RBP: 00007fb658f33090 R08: 0000000000000000 R09: 0000000000000000 [ 340.413855][T25751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.413864][T25751] R13: 00007fb658226038 R14: 00007fb658225fa0 R15: 00007ffd9d1da5f8 [ 340.413887][T25751] [ 340.611382][ T5818] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 340.648011][ T42] audit: type=1326 audit(1785929790.726:46133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25761 comm="syz.6.3739" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb657f9e0d9 code=0x0 [ 340.704209][ T40] IPVS: starting estimator thread 0... [ 340.803949][T25765] IPVS: using max 48 ests per chain, 115200 per kthread [ 340.804479][ T5818] usb 5-1: Dual-Role OTG device on HNP port [ 340.814597][ T5818] usb 5-1: New USB device found, idVendor=0004, idProduct=0000, bcdDevice= 7.02 [ 340.817480][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.835035][ C3] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 340.838779][ C3] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 340.841498][ C3] CPU: 3 UID: 0 PID: 5818 Comm: kworker/3:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.844832][ C3] Tainted: [L]=SOFTLOCKUP [ 340.846178][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 340.849286][ C3] Workqueue: usb_hub_wq hub_event [ 340.850905][ C3] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 340.852780][ C3] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 340.858639][ C3] RSP: 0018:ffffc900006f89e8 EFLAGS: 00010002 [ 340.860514][ C3] RAX: dffffc0000000000 RBX: ffff888049550000 RCX: ffffffff87e73d89 [ 340.862890][ C3] RDX: 00000000000000e6 RSI: ffffffff87e73bc6 RDI: ffff888049550128 [ 340.865353][ C3] RBP: ffff888049550128 R08: 0000000000000004 R09: 0000000000000020 [ 340.867817][ C3] R10: 0000000000000020 R11: 000000000000758b R12: ffff8880495500f0 [ 340.870288][ C3] R13: ffff888049550128 R14: ffff888049550740 R15: 0000000000000001 [ 340.872806][ C3] FS: 0000000000000000(0000) GS:ffff8880d60d8000(0000) knlGS:0000000000000000 [ 340.875549][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.877601][ C3] CR2: 000000110c3f0e56 CR3: 000000004325e000 CR4: 0000000000352ef0 [ 340.880094][ C3] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 340.882566][ C3] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 340.885029][ C3] Call Trace: [ 340.886059][ C3] [ 340.886977][ C3] f_midi2_set_alt+0x444/0x5f0 [ 340.888456][ C3] composite_setup+0x16f8/0x9290 [ 340.890084][ C3] ? __lock_acquire+0x49f/0x1a40 [ 340.891640][ C3] ? irqentry_exit+0x24d/0xa00 [ 340.893109][ C3] ? __pfx_composite_setup+0x10/0x10 [ 340.894715][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 340.896385][ C3] ? do_raw_spin_lock+0x128/0x260 [ 340.897872][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 340.899454][ C3] ? configfs_composite_setup+0xfb/0x130 [ 340.901093][ C3] configfs_composite_setup+0xfb/0x130 [ 340.902685][ C3] dummy_timer+0x2045/0x36f0 [ 340.904043][ C3] ? do_raw_spin_lock+0x128/0x260 [ 340.905542][ C3] ? find_held_lock+0x2b/0x80 [ 340.907000][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 340.908733][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 340.910492][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 340.912292][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 340.914015][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 340.915813][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 340.917356][ C3] ? mark_held_locks+0x40/0x70 [ 340.918821][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 340.920621][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 340.922157][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 340.923747][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 340.925326][ C3] handle_softirqs+0x1ea/0x9b0 [ 340.926791][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 340.928409][ C3] ? _raw_spin_unlock+0x28/0x50 [ 340.929934][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 340.931652][ C3] __irq_exit_rcu+0x162/0x210 [ 340.933094][ C3] irq_exit_rcu+0x9/0x30 [ 340.934434][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 340.936164][ C3] [ 340.937085][ C3] [ 340.938024][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 340.939884][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 340.941857][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 d0 27 f6 48 89 df e8 7e 20 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 2e 17 f6 65 8b 05 4e 57 a6 08 85 c0 74 16 5b [ 340.947648][ C3] RSP: 0018:ffffc90003186928 EFLAGS: 00000246 [ 340.949499][ C3] RAX: 0000000000000006 RBX: ffff88802c734000 RCX: 0000000000000040 [ 340.951901][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a826d RDI: ffffffff8c402680 [ 340.954287][ C3] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 340.956690][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000 [ 340.959086][ C3] R13: ffff88802c7ab478 R14: 0000000000000000 R15: ffff88802c7ab400 [ 340.961543][ C3] dummy_urb_enqueue+0x56c/0x880 [ 340.963093][ C3] ? bus_for_each_drv+0x91/0x1e0 [ 340.964623][ C3] usb_hcd_submit_urb+0x268/0x2150 [ 340.966153][ C3] ? __device_attach+0x1e4/0x4d0 [ 340.967693][ C3] ? device_initial_probe+0xaf/0xd0 [ 340.969283][ C3] ? bus_probe_device+0x64/0x160 [ 340.970825][ C3] ? device_add+0x121d/0x1970 [ 340.972282][ C3] ? usb_new_device.cold+0x685/0x115c [ 340.973898][ C3] ? hub_event+0x30a3/0x4a60 [ 340.975326][ C3] ? process_one_work+0xa23/0x1940 [ 340.976893][ C3] usb_submit_urb+0x827/0x19b0 [ 340.978365][ C3] ? __init_swait_queue_head+0xca/0x150 [ 340.980095][ C3] usb_start_wait_urb+0x10e/0x580 [ 340.981654][ C3] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 340.983339][ C3] ? trace_kmalloc+0xeb/0x110 [ 340.984803][ C3] ? __asan_memset+0x23/0x50 [ 340.986233][ C3] usb_control_msg+0x328/0x4b0 [ 340.987703][ C3] ? __pfx_usb_control_msg+0x10/0x10 [ 340.989334][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.990961][ C3] usb_control_msg_send+0xca/0x130 [ 340.992539][ C3] usb_set_interface+0x9b6/0xe20 [ 340.994087][ C3] snd_usb_midi_v2_create+0x629/0x4070 [ 340.995740][ C3] ? __mutex_unlock_slowpath+0x35d/0x930 [ 340.997450][ C3] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 340.999254][ C3] ? snd_info_create_entry+0x6f/0x400 [ 341.000908][ C3] ? lockdep_init_map_type+0x5c/0x250 [ 341.002557][ C3] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 341.004377][ C3] ? snd_info_create_entry+0x314/0x400 [ 341.006051][ C3] ? usb_ifnum_to_if+0x16f/0x1d0 [ 341.007601][ C3] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 341.009432][ C3] usb_audio_probe+0xf05/0x3b10 [ 341.010980][ C3] ? __pfx_usb_audio_probe+0x10/0x10 [ 341.012612][ C3] ? do_raw_spin_lock+0x128/0x260 [ 341.014172][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 341.015833][ C3] ? mark_held_locks+0x40/0x70 [ 341.017286][ C3] ? _raw_spin_lock_irqsave+0x52/0x60 [ 341.018942][ C3] ? mark_held_locks+0x40/0x70 [ 341.020539][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 341.022390][ C3] usb_probe_interface+0x303/0x8f0 [ 341.024019][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 341.025763][ C3] really_probe+0x241/0xa60 [ 341.027180][ C3] __driver_probe_device+0x20e/0x450 [ 341.028835][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 341.030723][ C3] driver_probe_device+0x4a/0x140 [ 341.032294][ C3] __device_attach_driver+0x1df/0x320 [ 341.033949][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 341.035775][ C3] bus_for_each_drv+0x159/0x1e0 [ 341.037281][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 341.038901][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 341.040534][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.042350][ C3] __device_attach+0x1e4/0x4d0 [ 341.043862][ C3] ? __pfx___device_attach+0x10/0x10 [ 341.045511][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 341.047138][ C3] device_initial_probe+0xaf/0xd0 [ 341.048730][ C3] bus_probe_device+0x64/0x160 [ 341.050260][ C3] device_add+0x121d/0x1970 [ 341.051702][ C3] ? __pfx_device_add+0x10/0x10 [ 341.053254][ C3] ? mark_held_locks+0x40/0x70 [ 341.054775][ C3] usb_set_configuration+0xd97/0x1c60 [ 341.056486][ C3] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 341.058402][ C3] usb_generic_driver_probe+0xa1/0xe0 [ 341.060125][ C3] usb_probe_device+0xef/0x400 [ 341.061678][ C3] ? __pfx_usb_probe_device+0x10/0x10 [ 341.063328][ C3] really_probe+0x241/0xa60 [ 341.064731][ C3] __driver_probe_device+0x20e/0x450 [ 341.066340][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 341.068153][ C3] driver_probe_device+0x4a/0x140 [ 341.069689][ C3] __device_attach_driver+0x1df/0x320 [ 341.071334][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 341.073112][ C3] bus_for_each_drv+0x159/0x1e0 [ 341.074613][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 341.076280][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 341.077881][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.079760][ C3] __device_attach+0x1e4/0x4d0 [ 341.081296][ C3] ? __pfx___device_attach+0x10/0x10 [ 341.082964][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 341.084637][ C3] device_initial_probe+0xaf/0xd0 [ 341.086232][ C3] bus_probe_device+0x64/0x160 [ 341.087766][ C3] device_add+0x121d/0x1970 [ 341.089208][ C3] ? __pfx_device_add+0x10/0x10 [ 341.090748][ C3] ? usb_detect_static_quirks+0x335/0x3e0 [ 341.092497][ C3] usb_new_device.cold+0x685/0x115c [ 341.094125][ C3] ? _mutex_trylock_nest_lock+0x241/0x310 [ 341.095901][ C3] ? __pfx_usb_new_device+0x10/0x10 [ 341.097583][ C3] ? mark_held_locks+0x40/0x70 [ 341.099250][ C3] hub_event+0x30a3/0x4a60 [ 341.101171][ C3] ? __pfx_hub_event+0x10/0x10 [ 341.103196][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 341.104967][ C3] ? rcu_is_watching+0x12/0xc0 [ 341.106462][ C3] process_one_work+0xa23/0x1940 [ 341.108035][ C3] ? __pfx_process_one_work+0x10/0x10 [ 341.109732][ C3] ? __pfx_hub_event+0x10/0x10 [ 341.111228][ C3] worker_thread+0x5ef/0xe50 [ 341.112684][ C3] ? __pfx_worker_thread+0x10/0x10 [ 341.114280][ C3] ? kthread+0x13a/0x450 [ 341.115619][ C3] ? __pfx_worker_thread+0x10/0x10 [ 341.117214][ C3] kthread+0x370/0x450 [ 341.118483][ C3] ? __pfx_kthread+0x10/0x10 [ 341.119967][ C3] ret_from_fork+0x72b/0xd50 [ 341.121412][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 341.123000][ C3] ? __switch_to+0x800/0x10f0 [ 341.124487][ C3] ? __pfx_kthread+0x10/0x10 [ 341.125927][ C3] ret_from_fork_asm+0x1a/0x30 [ 341.127437][ C3] [ 341.128410][ C3] Modules linked in: [ 341.129659][ C3] ---[ end trace 0000000000000000 ]--- [ 341.131323][ C3] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 341.133157][ C3] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 341.138930][ C3] RSP: 0018:ffffc900006f89e8 EFLAGS: 00010002 [ 341.140859][ C3] RAX: dffffc0000000000 RBX: ffff888049550000 RCX: ffffffff87e73d89 [ 341.143289][ C3] RDX: 00000000000000e6 RSI: ffffffff87e73bc6 RDI: ffff888049550128 [ 341.145713][ C3] RBP: ffff888049550128 R08: 0000000000000004 R09: 0000000000000020 [ 341.148142][ C3] R10: 0000000000000020 R11: 000000000000758b R12: ffff8880495500f0 [ 341.150602][ C3] R13: ffff888049550128 R14: ffff888049550740 R15: 0000000000000001 [ 341.153057][ C3] FS: 0000000000000000(0000) GS:ffff8880d60d8000(0000) knlGS:0000000000000000 [ 341.155807][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.157835][ C3] CR2: 000000110c3f0e56 CR3: 000000004325e000 CR4: 0000000000352ef0 [ 341.160284][ C3] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 341.162723][ C3] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 341.165131][ C3] Kernel panic - not syncing: Fatal exception in interrupt [ 341.167975][ C3] Kernel Offset: disabled [ 341.169335][ C3] Rebooting in 86400 seconds..