last executing test programs: 8.013460034s ago: executing program 0 (id=2763): socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800120076000d0b"], 0x18}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000888}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getchain={0x3c, 0x66, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfff2, 0xfff1}, {0xb, 0x7}, {0x2, 0x6}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008084) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='i8042\x00', 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="210000001011602bc5df1fe5a7081d6b9a43f2ed05d4ae10456f93b8663843880009f8a7be9b420f3b5814c81a8bf93ce528f88fe140d3c2a78ecb95047c611732d150bf508a020c23664efc9c0eaeb24c828108c07d0f33333b52735ff2c0403a026cbd32900b13953a6db3c80e9425544fdc51d76014fe8a60a861d0ac000000000000000000", @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000"], 0x20}}, 0x20000040) socket$inet_tcp(0x2, 0x1, 0x0) shmctl$IPC_RMID(0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x20, 0x0) getpid() r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 4.996111416s ago: executing program 3 (id=2779): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x1010) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r1 = epoll_create1(0x80000) r2 = socket$l2tp(0x2, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0x80000000}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="1461bb2713ce33204441e120e2c79db82db21956a7c6e0000000", @ANYRESOCT=r2, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030f000000000000000008000000150001"], 0x2c}}, 0x20004090) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="030300000000000000001100000008000300", @ANYRES32=r15, @ANYBLOB="0a0006000802e7f857740000"], 0x28}}, 0x14014) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r12, @ANYBLOB="010029bd7000ffdbdf253b00000008000300", @ANYRES32=r15, @ANYBLOB="1800cd000a00400003000300000000000fd40500ab46090008009f000400000004006c0008005700650200000400870004006c0030003300a038c3a508021100000108500035008c10d802e242c26010eaaa53efaa469972c4"], 0x80}, 0x1, 0x0, 0x0, 0x44084}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="cc00000010000300"/20, @ANYRES32=0x0, @ANYBLOB="0020000006100000a40018800c000180050006007f00000094000180140005007b297ce834155712d856c931aec95abc14000500b4031a6d5378f3c6abcf4b34dafa7dbe1400050086faadc737c80d136078197c93d735f514000400539d3894d9edb589ad99ceb6bb2d1bae08000100e30000000d0002007d2f21892d285b7d000000001400050030ba3ca2e845af9d5e2165c5555b8fc7140004004c0e4449907c3180e87d289b010110c70800040009000000"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000180)={r7, 0x7}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={r7, 0xd}, 0x8) 4.492596452s ago: executing program 0 (id=2781): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x8, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r3, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x16c00000, @empty, 0x1965}}, 0x4, 0x8, 0x4, 0x6, 0x2, 0xffffffff, 0x2}, 0x9c) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) 4.483602415s ago: executing program 1 (id=2789): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) pause() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0xa) (async) r3 = fsmount(r2, 0x1, 0xa) fchdir(r3) open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) (async) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r4, 0x2007ffb) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) fcntl$setsig(r5, 0xa, 0x21) (async) fcntl$setsig(r5, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) sendmsg$key(r1, &(0x7f0000000080)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300020c00000027bd70000000000003000600320000000a"], 0x60}, 0x1, 0x7}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r5, 0x8140aecc, &(0x7f00000004c0)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8) ioctl$KVM_SET_BOOT_CPU_ID(r10, 0xae78, &(0x7f0000000280)) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x10000000001}) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x10000000001}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x11, 0x0, 0x1}]}) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x1, 0x0) write(r11, &(0x7f00000000c0)="6b766d3d636c00006b8767d77b0373964eb3e41a499a09000000000000002b469f0a77ec984821d7bd92a7b9cd721517405fd7e1c5551b0c8e571331c211", 0x3e) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) 4.0786212s ago: executing program 3 (id=2782): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="020d000014000000000000010000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000000000000000000000000000000008001200020002"], 0xa0}}, 0x24004080) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00002) 4.078257496s ago: executing program 3 (id=2783): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x8, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r3, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x16c00000, @empty, 0x1965}}, 0x4, 0x8, 0x4, 0x6, 0x2, 0xffffffff, 0x2}, 0x9c) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) 3.781756129s ago: executing program 0 (id=2785): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000140)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x5, 0x4) 3.04804409s ago: executing program 0 (id=2787): keyctl$setperm(0x5, 0x0, 0xe072012) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{0x0, 0x1d}, {&(0x7f0000000200)=""/29, 0x1d}], 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000001080)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.047677495s ago: executing program 0 (id=2788): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x8, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x16c00000, @empty, 0x1965}}, 0x4, 0x8, 0x4, 0x6, 0x2, 0xffffffff, 0x2}, 0x9c) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) 2.947436433s ago: executing program 2 (id=2791): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000140)=0x1f5, 0x4) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000002}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000580140006"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./gadget\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r6, &(0x7f0000000400)="000000000902200001010080320904000002ff000000070581024000000705020240000012010002000000402505a0a4000100000001", 0x36) nanosleep(&(0x7f0000000500)={0x0, 0x17d78400}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r7, &(0x7f0000000700)="0705810240000007058102000200", 0xe) write(r7, &(0x7f0000000800)='AAAA', 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r8, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r5], 0x68}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000)=0x5, 0x4) 2.94726517s ago: executing program 1 (id=2792): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) (async) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) (rerun: 64) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0xb, 0x10, r2, 0x0) (async, rerun: 64) openat2$dir(0xffffff9c, 0x0, &(0x7f0000000080)={0x20000, 0x35, 0xe}, 0x18) (async, rerun: 64) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x8) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/105, 0x69}], 0x1) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516377ce0ebbadf8017cbec4c2ee5a7ce479acd5e860bf4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dccf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a", 0xd8}], 0x1}, 0x0) 2.880352045s ago: executing program 1 (id=2793): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.869086355s ago: executing program 1 (id=2794): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x8, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000200)) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x16c00000, @empty, 0x1965}}, 0x4, 0x8, 0x4, 0x6, 0x2, 0xffffffff, 0x2}, 0x9c) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) 1.987621117s ago: executing program 3 (id=2795): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0x90) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xe1, 0x0, 0x6}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600"], 0x50) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000003500)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x18}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xf00}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 1.27376008s ago: executing program 1 (id=2796): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x8, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x16c00000, @empty, 0x1965}}, 0x4, 0x8, 0x4, 0x6, 0x2, 0xffffffff, 0x2}, 0x9c) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) 1.27329983s ago: executing program 0 (id=2797): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x4008072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000) epoll_pwait(0xffffffffffffffff, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000400), 0xffffffffffffff71) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180"], 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6f) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f00000001c0)={0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="00082200000022238f95a0d4d65bebabe010e48d258540cab4d66b751deb0df050ed0bee85bcd1bb"], 0x0}, 0x0) (async) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f00000001c0)={0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="00082200000022238f95a0d4d65bebabe010e48d258540cab4d66b751deb0df050ed0bee85bcd1bb"], 0x0}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x80400}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xbce9c000) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x777) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x777) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)='10000', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r6, &(0x7f0000000200)='1', 0x1) (async) write(r6, &(0x7f0000000200)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20000, 0x94) write(r7, &(0x7f0000000280)='0', 0x1) 1.269973215s ago: executing program 2 (id=2798): keyctl$setperm(0x5, 0x0, 0xe072012) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{0x0, 0x1d}, {&(0x7f0000000200)=""/29, 0x1d}], 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000001080)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 927.291031ms ago: executing program 2 (id=2799): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000000)="ebe301e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}, {&(0x7f0000000600)="e7c4a6e597cc7e8b95de55bc84f821a2a9844814391e7c66b854f436d622ee02daae0c61de8735b7c5bd9540c552524539dec5081252c56f1009992539ecabe72653027c6c1493e7bff0df50a27985df8294e6c71b2b733666dd4cad621da1c7cb496e6ee040430551b9b8265c12cfe9b90b77c0dee89b97b8630eff0eb9265b5cc4243048cc", 0x86}], 0x4, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) 828.269234ms ago: executing program 3 (id=2800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000001c00)=r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031c00d3fc14e5fd", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 826.894155ms ago: executing program 2 (id=2801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x4, 0x4, 0x70c, 0xffffffff, 0x53c, 0x0, 0x53c, 0xfeffffff, 0xffffffff, 0x644, 0x644, 0x644, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1dc, 0x20c, 0x0, {}, [@common=@rt={{0x138}, {0x100, [0x6, 0x1ff], 0x0, 0x0, 0x1, [@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @loopback, @mcast2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @dev={0xfe, 0x80, '\x00', 0x35}, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @dev={0xfe, 0x80, '\x00', 0x30}, @mcast2, @dev={0xfe, 0x80, '\x00', 0xf}, @private0], 0xe}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0x6, 0x7, 0x2}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, [0xffffff00, 0x0, 0xff, 0xff], [0x0, 0xff000000, 0xff, 0xff000000], 'wlan0\x00', 'bridge0\x00', {0xff}, {}, 0x3c, 0xb, 0x0, 0x74}, 0x0, 0x30c, 0x330, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x5}, {0x9b}], 0x1, 0x818cdfe42f0fe33e}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1}}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x4}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xff0000ff, 0xff, 0xff000000], 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {0xff}, 0x3b, 0x1f, 0x6, 0x1}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffe00000, 0x8, 0x6e7aa773, 0x8, 0x8000, 0x200, 0x4000000, 0x6]}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x768) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x20000001) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x40000000015, 0x5, 0x0) ppoll(&(0x7f0000000080)=[{r10, 0x800}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000000000)="11c9064268e9", 0x6}], 0x2}, 0x40) epoll_create1(0x80000) 299.591311ms ago: executing program 2 (id=2802): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$rds(0x15, 0x5, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x32) (fail_nth: 2) 251.795803ms ago: executing program 3 (id=2803): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) keyctl$setperm(0x5, r0, 0xe072012) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) readv(r1, &(0x7f0000000240)=[{0x0, 0x1d}, {&(0x7f0000000200)=""/29, 0x1d}], 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x80805, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 106.694591ms ago: executing program 2 (id=2804): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000080)={0x32, 0x17, 0x1, {0x29, './sys/bus/pci/devices/0000:00:04.0/remove'}}, 0x32) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="17000000150001002cbd7000fcdbdf25023800ff", @ANYRES32=0x0, @ANYBLOB="14000300677265300000000000004f3700000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000024000000", 0x10) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0xd3000100) r4 = socket$alg(0x26, 0x5, 0x0) rename(0x0, &(0x7f0000000140)='./file0\x00') bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = openat2$dir(0xffffff9c, &(0x7f00000001c0)='\x00', &(0x7f0000000240)={0x8481, 0x8, 0x2}, 0x18) r7 = openat$dir(0xffffff9c, &(0x7f00000002c0)='./sys/bus/pci/rescan\x00', 0x711a00, 0x80) renameat2(r6, &(0x7f0000000280)='./sys\x00', r7, &(0x7f0000000340)='./sys\x00', 0x2) sendto$inet(r5, &(0x7f0000000040)='\x00\x00', 0x2, 0x24008801, 0x0, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x800) syz_fuse_handle_req(r2, &(0x7f0000000640)="ed959365f40122b150005fec90ce1a93224123a2c741de6074860a23529713a801cf256693d1550be4d3425a99b1eb98ac5267145a6cb182273f107dffefd692a810a1b438c39530541f7eb337ee866242d8ad91c5a3ae4809f1398bbebdba2fa3365828db2d4845f4a9a36c31e4d56f55c003058a8f8e95453bec9850e8e3f06b71544e7cb12cf75ca24f66cdd8b13854c7e0bd3e79e5a70a5b80551a524352eedfe630343259a35901fffaef8c081849065368eaaec4abbc340f3c20fc55c462f5110fe4f073535249d6e726f20d08edc28383fe8e00d87358d4c63e489ff755527512b1f288add8d9b4269a07b48ffb1a78f16dec3044f9762e6e1f4230b7e2aca6b15cb7ea49fd9dfe28922df3c5927a7f76994e9dfb85ac9506acbf6aebef4927cd5ad91140e82bc0f13cdb0c286bd69dc82994d9f6584b35254504e5318f24249868d3caea2f5e1ce8cb713ab853d4934231270dddbf9f768874511cf873e881fb9a1e85d745f15ed4e37db595a8d94702ec125217043d64255cd10182e59cac0ea7e822b6d55ae3a2844f90a51b14f504ff9b701de82632d1c2902ae05c3b248a5a16875fd155aae4fe348cb2225a3af611b3049640c7b015dc98f73f3705e2d4e7e7a45b775869eca76b077b1a23d1a5e894a102914218bbdf5c7bd9eb6cd0b586d7ca3003a52a4c70c20c46465061de8ee4d6cc367ac843184818d9cdd6d86ca149fbed45042d0e90eead3ec56496ba73a8cc0e15bc6baad84936baf0ceb6cc0e3736e168f3c667cce3f4e9464970b28f8644ad2e1781f33173f012361510bb0a1744f2adff9fd9160577f9eb75d13c118a796f9f382814ba97b8284ee739874454d95edd1e8c06578ee43f39968a483c797efa5e5015b16bf626b664cd40dbd4421d37eb4798fed64869aed54db1077a596b49f6e5d7e3915be138b6bcc92ec895cbc43d67da69c048f26cb80accea2e085e91500be069a1b9642fe87a83162459f9f93fe334e2fab2084c003a0b6d63757ce99664f0b9d58a5b72ec6e714e57158cfea5e0a8e6939095cfa0cb2a0f2e6c7fd58c84fb459fb414fa252d819510e88830cd3675b7cf206061e0203ec21a65f4b72155404e0be5b21034d7747aabe7fb1f58eca4919de551247c7451b45a0f0faa3a3cb905b06bdb493cbb5c22a517331c86e23e1cfae603eb2daf067ea73a5b3d69db6dbf1b46bd5aa692262ef4fbd3770d9e60bb42ae5c4ba2cd5dd3d6e24f5f0b732538c6c27ad4886164e4224eb966251e42518d781f918d0296696fad397683206cdd02bc7af8d3f9e61ada45439aa813cea254cb13350d49fffa56d5728a63b3f04ebadd4166543a056608b3dfa482afdfc4e6564e0c09307c70297671fe37a40891b3fc35ede9ac49b355852c52447a07750865307687e27371e9c7327525d7b26b76bd70f10ac5568425b6cb512a3768fa7a2c66365460249249157ec9f87e4c524fc7609867c3f425a9bec16c108b42e7b91260cd33057c5c0f4ce98d6170a783ed18be3c904c29d78c2540134f65892ac7bcb1219a9d99ea077ce46a974e26576413c0d0c1061ba8c7a328a14196eafdadc98582bf3c4c9ad6c00ae9347849380479684d1958996c0a0dc4b752d1daf11cbbabc11df914f36b66fbe77ea71273c57d8b56a69ebea180b4a0e67523fa82e37ab5666da536f7a454b5e3d2d027893a0cf3621c47d1444f2f3450a9efba47dd9f1c7afcdf8241df86ad3df597614bbb0d0db3da490b50b247ae5c45cfa2dfd91cab0b3a9ab4c40dc1cf22381b5d98d0ea9ee63350103b07b58b6fddff4073b4692929fbd7af848c84471c5c0ba00ab3de5b4fb1d77748ec420ebead2c604605581461d37330589b26a858d10144177214854c3ba553d3729c4a8e6d0a563a1482e85f08ba5b57430bfacc974bab28dedcb6d74f1b33aad390acb2a10d06f578c575a0f000c8360ebb5a4af781e4f5e35fd9b95933b7f781d2df62d5d80ae61e569de4c16a0cf47b19b7fff40cd68a5cf705e87c7a1cba0b9f8381cabdc30c5ac868b906ad1c65dcdcf109c1e2e215c9a0d55bf894d32af378ccc282328c6a37975896307a1aa8269e8f3fc3ce2880095873a5dc61c3a49099edd35c37e9eec4db9f9bb671b37bfeebbd317cb1ada59c54157e0420b58e09515b773506beb264e420ac30324b66117940ef22cd4dfb50f5d07e63003db8386c29c9cc3ccf876002eb657f2e47a0bf5d404562b6bd13433a45fe0d1d2686dec879ecd2d8774d7da28b0c2faf173d9ba4126f652075cdf88574f3255e3f800d0f5c25040045255445130b3773ad7dc05159a530ed5f56bdd85ddc64e52672f4cf276ad539699e08442d0dbfd690c7446a5f40d27c5cf7ffdd932e31eb429919bc2d06657d379e460e199f8616652336ef091acff014271f1a982abf2156e308047d32a0abe090df4e229498452eaaebfd61013bcb6b90e49fe471eec9e624b5eb56e2109ec0443cb519919ef0552f0b8b816c7a6eabae6c4f3146397412342f9ed132547634901f51ba82243b1759e3bf342e485d8ff8bf58463cf302779a9645c9e9dfdc142a9a6d70cc5de6421d3fe5aa1e612d878a956eb6c5ae8a7efae76db9851504969730ee458099c2e13347adeab108307047381c89be5d3fea1ef22614ef6ea6932a3721ae6fcad5e3cb05552bb930a40af904b094c4e3aebb9abfcf1006d1913464aed239314f943dc2999d27f86c1951dbb28d9169b312aa02648ef9cd4b29b7717ae73d9be98c4385a41388c45110a6167afde568bbbac138b3e3a1ab28d5e68cec94bb892b8757649e634f75b485a1c3efb9077cc8503daf7cca5f36da45b289e78283a6dcfbbe623e6cea4aefe7281c3b419d950cbaab60ce8e0c4b293d7b0577d50837f455d9ee1020a89314378cfd30f5adb317f8660bd2b081b761d4c8c68f17ee76b70eaa9e3926848db8075d1d820e134d2e218bd2b62cb907564b1c4c6534096c3661067de6a49f3637c2a932eb456d4aa14e51eb84a22520b8c6e2d52c58c8baf1a8a6fb98321537bcbca1e41f07a01270088d1b382e1ef8f5002c6bfbef1514f22b4f7af7001472bd8fa5779ff3d0474e761a1b8a128afad1e367cf7e3d9ac018cb4f45a776fd5fedc1f6aff6efda62fa280d509501388dc59736fa5b8d081ddb6937818a0c88d298872ba3654a711f6e52fa4c33c6ce24ae1d23a9081dc6c6525917811adb0b32b3373db1677ab0b5921e94d71f6c734fc726866f2a55e124ab71dee150d8a9dc3b3e649b200fffc7594a38e2f38e53483ff5c76c4b538945f945a2510833b1bd83cc65ac667488dc409e335f898f08952b784b99d39ba0b23d8350965d3799337601fa899b977b42e04995351bb8d6f4ac6c52c984a5c89186b9a834aab9d16d7e47bfa12d7395bcbc68433d40621cf514d0e63c5190d4fef9b226cc01e24c80267d8ac1d9b1b4c49f712536e8b18629775326d565e574690930aa61c975c3922a412b9feb08fbf70002e9426bbb656c0581eb2dd1a55ea537ddf413a5c1bb6932cf903aabf052ebcb9703f7509a135a63cdecda759f7bc1b4ac1493e95bbf3a3e00f9d53799867ad9fc5c7c1013a8565b6ba8b898a4169941d5a439eba730c5606e3c006d10bd9cde6caa91c5f283d1b221ca5130dc982b4fb0aed746420307cde0b8b72553cf519537f41f1b676a8b0335564d2eea1b65d8ff0171cb73d9f87d549587db7031ac6de9e41e256a82c270f107715ea4cf6f98ba38a655c44ceb2b396983be3158df89ecc47ae52c713241460e4fb91bea4cca66067d64c5efd5fc71ee694a65dd021f8485dcf9bae9a2cc42c9f0f6e21eeb26a5ee0cdb87e7beeb2085111bd23015b75a1b2e04ee967c580d1757f8b3c2eca0a6fe817581f32228a7650b3572b8cfaec5f92c41c4b9b0695e3a8c29c10544161b11fbf8650dd0ea08448ccd46e6c938cfc89ea57455901ea5cf7713d25a9e45294103f20e729618511a9ea7730611c14f26393b2435f65c9668988e752d990616ee349e4dc51c59dec5309ba2fc077d49fde29e1567b225f08ac1d4ec1921abadb80ffb279a1ec241e7bdc8de9fae836dd620de3fc3a11e03c3c0dcbc95dc1d4bca35f7cf47be01d58d27815e6c28b9d09d2b34a90c8be0f2a5b5d6487751252c3dccae96eaf4fea7f374c342f82beafdc68f0c6c5b1a4e470bc105ea171b866f1be21492ed5fa4c6cc65887125fe34bcda0ac5b27b932a3eea09b7e464b6ce608fc6e8d55b14c318af44ca8d6f7f54e4e43fe4917607f20fe3b79b0970b182d491fa0e8e45df2ef420133ede86a4b53c51f9ac7e8f842310deaa7141aff0f9e2309114690680d24945ba7f0eca5aa12f6badbf587a7817037fec4406193eefb562cbfaf78d67c5ecd11488e061f930090e3ecfb2a828e946b83bcf1663b0b392dce73e5d4fa5b21ec6c25a5a66f31e0729c922a47ef5896af98061de78e18327a7c2c80e04240f5a0430d09a597449c8dd8f277aa1f9dfcb26bd041a8abbd968a8e36e38b1d96b99a9ca08a69a0d881a4c59341822ed2a55f4215edfa7d12aeb6f9203e665d86ee3cee732369784046a8e414d97545e51ab382a0957e1bdb96c6230ce119da6cd94c1a93b0fc4eea292da74f359089d5bd2676860b5da3ae65b614804d3677379e1782e1c780b8f3507b18ab4f7301122f7e516f65cc9ac49a4492c80933c7ba4a922fa7ca157674b1511357faae55f8de9a03d6e42fb6b009fb1e02fb27aa21f7d0eb45efcd6c703e8e2a490b4a7f7c50078fad58e257814410506a4dc8292312ed28681b5df9c7f7b30825b93ee6d4b8295d994b4f8ac1c600b1cd7953b9647a409a1f468f03a31a961e2e6fd0560ba78f293a6fd335f8a37fc7bdded96fad8a5fbc15f00210705d64a46f9d5ead6caf65b7eb622c845bb41294881ce36e52e1112bc00fd8d2a3e010c4dd1c78883dc32a4aba4c713b4cfce9f851094555534ded3ba8976809a8d569797dada9d7e99724998f1b261e91be05e890bde4e07454e462baa58e0c437acea6eb560eeb5ba85a37d18339391ff51e9c51da257d5d8ee5d6d881b5bfd6924ae0fdefc2767b98fb3d9dee05725c8dbdcf90bdbbea9773d2e6bcadec1504fe5df9572a6ba6db10334a9becead589c95e3f032d693d6ebe614b6d95b32dbb5653bb1843360a6a310d844c831a6d97eb00d44eb6113c0b7903d15e85e0f9adc880dcb74520e5399c7904da80da6dff093755cd97464ca4d8c8c7b7408f763699876cb2d8615804191e0cbd8c3b1d599e1bd89a3497a9df591b8b5d81d15e64de40b4becffc3c0502892749b79df1152e5c3d45cd6eb97dee1637445fd3c5c7dad5ec700b18e35215a9bd7d413315903363a06d08bb40818433c523f8bbfea03673a93a12dcb795c3970a50a52290ab0a63fee541a385d99896cd5b4afb797fc8e92375c7101a880101966c569d81469cb557d217ca2f5fb7b38eee9a2cefab8a24fcf5313791a7bdea68e20a518a7abb12de469d919334e2a315122c95ee35f4d2098e863e7b6ced0fc0a13a2087c80ff92bc45c1ae054fc50a55e51f99f1ee8fe68cefd1c1a1aa57ceab57e4c90f398d683d7eeff52ed0a87cef497ed5aac7d2380610816b2acbc687620a99810ba56e9e1aa8b01847ae14176181b85f3050ca64181c91b7c6208b6b4c6ad1ca32465801e2e127950b6459c986dc8bb310bab3c8aad16136a610d1740972785dc69479283cb496ab66da1d1cfbd7f61b37304e7c33dbbb617fff73c1f37507d07a2c2dafbb61d813fa8a6ff571a3987d680bbdf411b5dc9d15903d34109dc86487669c14a2cbb1c7358653cba2dd4604666b01632f58befb3c67451329a04a8ce9db172c5bada21bbe68c20951e701694f549620e244578fd4b8f1a84a84b55b5d3548123d3a4038c0a42b3e85266ea071a12e0f71b86d286794029fe8363d4561ccca89f168ad7a38dfd8c39989183519f41923dbe3385ca73105513abdf7d6713faac26adca4575710df7d60bd3c753671e120234d0857bc578658e0922791dee15e0f4f7a30526e565da053ab796ba6ba54237535ef7b2fd2f4a77193836aa3a3300fa11e362c84329d4de81269dcc65f0b4556c2ca17edf7bae8f4bf88cbb519eed7207c56595710b7299a118bee1d5f37799cba259963221ce491eb82aacf4dcf9150e7a0747cf6f3b2790ed925e134c56314535ae7e990222b9fb60fa0079ca50733ba0dc7137fa49853b56035905116aace89791b78f7d96814a3110b1af6938474fc7db4285d25c75dfa3c4d57ecc7806eaf3ce8b9d1be9204eeff82093df6ac30ee5b6224e3cdf1888b0438fd041c9adc05e1c8f6178566e43ea2c0e0cb22fd8cb5fc6caad1635673041cdb35be5f42abcdc35a25280dea9002c6b9f536049d65e4fc0da68262db3e002b197f6dc7eaff203bd2fcc62409f7387589a5342391a1642a1d4bd74ee3f1ef682d3275dc3620238a60f74ab9ff578293758235fe25ed07db12c5010f1c69ac1fb91c807d07f3b1331c79e27b04946bdcbd3576601a5ac45030fdbceca2c01c9e926583157962b11e46854d6bfd24f16ca0b95b5d0118abffc0c107ac1e0395d146d05519d9e3ef1c8cc68641970d5a86db61bd01d20ca69c74a6e7ed4b0bad207917d7eaa439519a924465913665255fc4b4f4006a4b2077716f0c9c606f4af265ed0ba02604efe997c969f6f691d218ee14143078487f21a030b821d64de5a8f11477eb0441e444d0249c7aaedb295f7a107ed19d7deb0683fe51669210ffa2375a24457555d30d63a2a9214b117b458de64af7b853ac9b74b1d489be93106d8e7ebe58fe74dac1d14f502888a1e8c6da6cdc384613c47be171d6c819bd93f8cae663552273f65e976a4c59efaf913efd9a7a90cc812404a173d782cfaf0dd78278899ad64f4a3f7f02f2645e36448641369592b79899dda279229a540f8ece33ffc4a1b4c3e3c2edb87cf0a1de8c61865fbe2d39553948739d7eafdba99948a43a98369e8d3140ff96c3cb7e368e57efc7e7693b8cdac6168938170b443e4a41f9795715bda508600192383b177eeafa029313d4e111b7fc176e0149abf207a8402abffe02c29a99980a2035795ff1c3e8a8fb6001be996c2e4a64d7a81877b766d7fe404cb9d4bf55bde36a810f82ac7451d07564b03531466f9aa9d716b4439103e5d4be3574918c363b6efc35d04e5aa0bbe4b371466ba3b2a79c8dbdc4fb99cc1fe314d61ea1097ec1581c834ced00ea00bb076f040519cc2898efdbaabe6b62658fedbdf7006798e07a0724977db79b1a3b3b79678b5651d5554e9f71b8b712ccb2db22fad5ed3221f1d6a2035068feea8fbb9ff688eec8985a4efd457d07dcc520eb8956c1561982434785577d1a9bb39062dd613dbc83668c9bd420bc73dd60ccedaa214b64f4353cfdb0df049d567b70c0bd66ca68aeb13bd1e8c4ba501b6cf6c3fe9e7e8358060fa432cd696541fccba59e36408085562ce299d8099ad34d35b29c50ded1c080c9fc08dd2cab67414a61c32b43ccf11d52b4737570b81577d5654d48ff9b3d662c7cef05c858c17b2e53dfd5a54aad0d8953a427e5c545a5fdc8f8426a081d6083c6ec37d4796a699dcf1a5a1df27011d157bfbaa7124560568e14d3a6ae3b183a1435689109621bb83b8831a8d5f156738a75b3163c0f9a8f15fc4bb7dc7fd9773e147ade95ef59df7756046bacb54cdf85cf6ceab3be205d85193660d448b848eb8dfbe0f797a94745ef2ac998d8e932511e08cf07b47202daa25c642f20e19cd0221657510695f965cb4c9a6dfe4845cacbe4dec83e0b3f5483aa1f4658508fc7326f24797d54c2300b713cfc3333afa9edd608019ce089fce59ecd034c048cba3989a0f0030ed90f78b3da16e8cbc5074649d6a6037cfff069242dd5042c34d09f6e7803cce959e61c4a5f6d9d87121e849746f317c07df1ed786db06be386e845670f8dc0a5a7bb616470b56cf4099b3ea49eab78abb657a3d9afdad5da92e1d96c2ef8e2bbc406c4461a1549e4ef50c879f994ee36d9eeb01abedf105f52a85bc30db7f8f44d015b68ee69831c6734020f13abb5d36db695f80eea6d0e6962d2bc6dd5b37927cc891e502dfce0a823964b66425c2697043cef92617853f156e99cbf6a22f0ad7c422db3b50576303c42dbce691eb9701c5fa03acd8ff01fe8ce1b4cddb2cdc6de4a0b99e8dfb29f8d0daf76003f9e3f4b87cdc8567e777a35006bf0a3b52c42675e225a5169d9a061dbf6fd7d51d0fb8330c317ce4c25c876e64be62d21743cbd56338cdb863ffe1d9559be9470c3ad57859acdb773ad2c44ecedfd88f0e3651c272df9f30797c520c14e02e3daf657430c4035313535f111796a5005edc20c7982e6a5a1f8288f065749254470b820124fc4e1577b7561de5691d1bb101d8ab9c456646bec99b3f7d04088525cf5bd4644c6710bca06e2536cd6897e1553a28811b2ea7efc3f66281d7acfb23609073c9f30cd8b4536f4de8b2754c95e15611f36e5c483b7ecde660a00d8cf04b205aac7fa09328f7cb544b62071bec2fd30c720cb4cf0196e76ee55b9cf0afd1053e014aadfe1a0279e2c88eea70daa87e32f755065a040b1c9993dcf72a515b707e5c3c3527b3206aac278324703134a35c7d0cb31161691f0935ac513253860c8c068767ae42c1607308db9d33ce832f3b9c9c29701eb23561a1af4ef99687ae04bbaf53146f89352ffaa613f06f1b305d0f7e6561efcfb3d385a4f105481ecb2769dafbcaacd2df82e74cf4df12ec99e3d5cae317edf8d94e5769c84e97c8e0e77323207cf4e7381f85ee0ce49f804b11faab57bddffd3a221f80a82022acbaa4661c18dc0598e2140954c72b26efa10cc82b94516703587bd5785bb430037041239f5c4d4e30a95392917b7d0c352b36112b6638d4ef6b1b754c9cc269130b3c5c02fb5bafe82d048abc28f828325dcddff65d8dcc2494a3477ef310433418c201e08b2def43107b236fd3a9495c3344a13767957f16242ec9d479b65bc846694670a98c0073579bfafa7a2c6f3ff3e12cb015f5997cba314e004ba13da287d7b8691181578665856850a97a4c6abe13e6d15469b2099f52df5a7df90d6ed3736940eb5a244c4712483417d31c8beaa09a9298b43eacc4a8d883363bdb4db2024d72a65a52b0cd180d3742475cce2aa36a52c260e671494434761c3a93f5048be5fe0e6b113f1e51b8b490f6fc436442d2d076285e8e9947889ba90e36a8e0d5f906311c18cd114dd4e2841cc608af1c8699e60b16e9601657ab16a14c68098f72884c12e94314a1d8ede48e17a34b8c478abadb2f965abeec37a74c58c8b617b0dcdf01e12b727d65ccbb98f1a9561c205e38b69cad29712b20ecc3f479b6dfc441ca909d3a7a7f80d0e055e63ec4b875fb4fbb12e7d24ce787eb1a0d746e053bdaae3008136f82c028811649abe57f2cbec3258c741009625f8afad5cce90a402c09179a1ca5b6e5f3daaf3da0bb40701c524cb343458ccea9766b591907e1280230eb859f1fdd8465c6f4cefa895e9e66e2c50c98226ec74c20e8defac2d652bd7721fa2b9143ea58667b55c44203fa4b5ffe2ac51293f6b9b9d915c77ace1dce9b230b2e1180948d7abbeac09cc690ec2e2f14f21b68a7ad311bd5a6e0123fa706dae25f08f604548fb631877a043aca462c1023652432810e072ac247a1a85056b06401aa5403a352ce2bf9d57e33553e4605399757e5b180eb9c61ea89bb8cab86f74600bc12a6adf9091fafc80b2a8aaf7ff845ffbc2d935968f16b20cb6156efa34ffc6cf90070135c5b324dfb89586a649cb6b6f1c338c45a626de76fb7dca268acff43693608d45709119a31b7b1783dce3b7f9b5fba3677740a01c1299862b01adf308738d5e59b5d0a24913df7da684fd06dddc016f49756c231b7aff84a4b721d8abf60c67d438d0eb9b7b717292b898e60ae685163ea3937ab44d5a5843a71e76ac81e8cd654f0680560b682d9cfcfd6fa03dac945f99cd2da39473670efd21a189ff9f48de9f05a4a74f207fd4c3b933d7c109f13ab36035ff23935675b2e752dd8c3880a5a9f051a822e88b54f0d5932ffaca189671ccfde847461470326777c4a69ce46f44b8e61239187c260575c58673947ea5112af2250474d73e294aa2edda0abaafcb47db2ab763c7675fe0ed894905cc8ec1262f31ada9b3995d71a2c73bd5c2a6db07e9e45a87e795f821e1a745609fd4e0de8d5ec0c484ea2a83dcc508ba590653c3c800d00d4bb4a9257c6b86242d35a095235ff4f7dffedc7c290865ee650908cd5fee08ac574be6b7b7fea4a6b9c4a3c875ed5b0ceb135d130645479178f14a589b7b7a72258c7700ea6043e79e5ff6cd18017a1a20868df9d5b5fdacf884072fb61412c0c43190240d164c0d2c378acd6acf7ec23f218ed7f8d95d29bf4e7ed4a0dab5227502c7db27be7929c9dc1c56d22e91d4183e3508dfdb06a688c59f3d360baa2a376391e8f2f297b85a3edd46dce183a7c7a11695d50bcf6ef7971db16d9fc96635d9757c8ecafeba7d66d446616130236a0882042028bf76e88c2b180a648491090633d3effde04a8f89c584a2a1af12f65bf604e30b1224f031cedd5f40066abc846f897f9f9e3e51e91d05cf7e153f077fb46ff50d73875af3e8c475dbf57b9d29ca47ec453cf2330c2fe7445a6cd3d3e11adbed4b5e31eb2a55bc6c9169728fc7f7140dbc41eaf8f032ea74ad15009e273a6a085deea141542f99162ce0f8c0a48393d7b2b76cf66ef02a4a311397657b5269cf0322b4e265087568e541f055f7b974e1de5e746762e2f989ed340d651d213d88a8a6468f18e39dacde96bf70143ba4a91c879b052292cde1ca7f113835843372f192e096fa4482ed2b02027c8a5b4a6c9715c1a8abf852b091321fdce8c1c85a1a037f60265726ee8449bc775add15331bf2d80d5a59290151ab98013c6eaa97969ac4b9d342ac96dcb92c38fcd0bb8b57a090ca015bc10263b4dea9e6cf117659aa59ee1d30f83086e2dda6675fa2f93f1240161b1a18f62384a814fb9a6d0f281bff990f1419cc9ee15368cb03fc8332abfe05cc08e21b2c56ed5db94bd4d915769af14cb3faea45ba60b5474db6d68e821cd6e2ea53f90b24c0f79d20ad9c3ca01d76fe3c501952de6ae34b320a6874aadc78852e7d63c3f22d04b20bc0ba2970d666b1ba7d7503605a99dd1d0c9ecb9045a585e5fc9e27f8b645fe0e115aa6c8801f0d5149e1f48b4342c9599149bffebe1821c7ae526bee42230a625323cac0d40f2780982d65b4a822a4c4e886d344cc5b7c7c2a54805861faad62bcf03ac17b9dac978f34ab7be3fc9324609d2f4ef50397191e8d198381ce4f91a6c75ac59828e8b3c960cccaeab71e625ddc751427c0c263925a61a94de5296b80cbb8b5fbcc4134247d7ab48eaf47ce896aef73aa895e93b7ba7bb0d8af5fd0e70795579b2fd4a9672322971272cc42cb737854c8830e", 0x2000, &(0x7f0000007800)={&(0x7f0000002640)={0x50, 0x0, 0x7ff, {0x7, 0x2d, 0xa, 0x4, 0x1ff, 0x9, 0x9b400000, 0x95c, 0x0, 0x0, 0x14c, 0x8001}}, &(0x7f00000026c0)={0x18, 0xffffffffffffffda, 0x3, {0x5}}, &(0x7f0000002700)={0x18, 0xfffffffffffffffe, 0x3, {0x4}}, &(0x7f0000002740)={0x18, 0x0, 0x9, {0x600000}}, &(0x7f0000002780)={0x18, 0x0, 0x7, {0x4}}, &(0x7f00000027c0)={0x28, 0x0, 0x0, {{0x10001, 0x7, 0x1}}}, &(0x7f0000002800)={0x60, 0x0, 0x80000001, {{0xffffffffffffffff, 0x3fea, 0x854c, 0xfffffffffffffffa, 0xb5, 0x9, 0x8000, 0x7}}}, &(0x7f0000002880)={0x18, 0xfffffffffffffffe, 0x9, {0x401}}, &(0x7f00000028c0)={0x16, 0x0, 0x8001, {'sysfs\x00'}}, &(0x7f0000002900)={0x20, 0x0, 0x7fffffff}, &(0x7f00000029c0)={0x78, 0x0, 0x0, {0x7, 0x101, 0x0, {0x0, 0x10001, 0x6, 0x80, 0x0, 0x7, 0x259c, 0xe8, 0x1, 0x0, 0x7, 0x0, 0x0, 0x5, 0x7}}}, &(0x7f0000002b80)={0x90, 0x0, 0x2, {0x4, 0x1, 0x6, 0x3, 0x6, 0x2, {0x6, 0x8001, 0x8, 0xa5, 0x7, 0x514, 0x5, 0x1, 0x8, 0x1000, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000002c40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f8ff0700060000000000000000000000000000000100000000000000060000000400000073797366730000000200000000000000010000000000000005000000000000000800000000000000ff01000005000000040000000000000062fcffffffffffff0900000000000000ac0000000000000005000000000000000600000000000000ffffffff00010000ff000000004000007f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="050000007f000000000000000100000000000000080000000000000005000000070000002c092d2c16000000040000000000000002000000000000000bd50000000000000300000000000000300f0000f7ffffff0100000000000000ca090000000000000200000000000000fe0a00000000000002000000000000000738d03000000000060000000b000000070000000020000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0b0000000500000000000000030000000000000000000000c0000000020000000e0000007b250000000000000500000000000000010000000000000002000000000000006cbb00000000000004000000090000000600000000000000070000000000000009000000000000000e4a000000000000090000000000000008000000000000000080000008000000030000000040000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0300000005000000000000000400000000000000ffff0000000000000d00000082a200004e4c424c5f43414c4950534f00000000030000000000000003000000000000000400000000000000ff00000000000000040000000800000000000000000000000c0000000000000040000000000000008001000000000000008000000000000008000000000000000000010001010000020000000040000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="83fffffffeffffff000000000500000000000000000000800000000007000000ffffffff7368613232340000"], &(0x7f0000007580)={0xa0, 0x0, 0x0, {{0x2, 0x0, 0x200, 0xfffffffffffffffb, 0x6, 0xfffffe00, {0x3, 0x3, 0x1, 0xffffffff, 0xee1, 0x8001, 0x0, 0x6, 0x0, 0xa000, 0xfffffff9, 0x0, 0x0, 0xc, 0x4}}, {0x0, 0x8}}}, &(0x7f0000007640)={0x20, 0x0, 0x10001, {0x6, 0x0, 0xf9, 0x8}}, &(0x7f00000076c0)={0x130, 0x0, 0x7, {0xab, 0x7f, 0x0, '\x00', {0x2, 0xffffff80, 0x6, 0x2, 0x0, 0x0, 0x2000, '\x00', 0x9, 0x8, 0x1, 0xff, {0x5, 0x86}, {0x0, 0x8}, {0x0, 0x1}, {0x8, 0x4}, 0x8, 0x4, 0x2, 0x5}}}}) write(r2, &(0x7f0000000400)='1', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='1', 0x1) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x1c9140, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r10, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r9, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r11) sendmsg$NLBL_CALIPSO_C_LISTALL(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r12, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r11) 0s ago: executing program 1 (id=2805): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x8, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x16c00000, @empty, 0x1965}}, 0x4, 0x8, 0x4, 0x6, 0x2, 0xffffffff, 0x2}, 0x9c) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) kernel console output (not intermixed with test programs): onfig 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 342.882656][ T7150] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 342.882669][ T7150] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 342.882688][ T7150] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.885095][ T7150] usb 7-1: config 0 descriptor?? [ 342.891859][ T7150] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 342.981980][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.982440][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.014253][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.014650][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.133262][T12864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.133673][T12864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.174522][ C2] ldusb 7-1:0.55: usb_submit_urb failed (-1) [ 343.175966][ T5820] usb 7-1: USB disconnect, device number 62 [ 343.186413][T12875] loop0: detected capacity change from 0 to 4096 [ 343.194620][ T5820] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 343.239582][T12877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.240443][T12877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.393676][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'. [ 343.398061][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'. [ 343.402951][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'. [ 343.407037][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'. [ 343.994844][ T5820] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 344.317980][ T5820] usb 7-1: Using ep0 maxpacket: 8 [ 344.356850][ T5820] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 344.418918][T12892] loop0: detected capacity change from 0 to 4096 [ 344.462174][ T5820] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 344.462249][ T5820] usb 7-1: config 0 has no interface number 0 [ 344.462379][ T5820] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 344.462400][ T5820] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 344.462421][ T5820] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 344.462443][ T5820] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 344.462476][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.462894][T12892] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 344.462913][T12892] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 344.462945][T12892] loop0: [ 344.650205][ T854] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 344.693770][ T5820] usb 7-1: config 0 descriptor?? [ 344.699659][ T5820] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 344.800799][ T854] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 344.803164][ T854] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 344.803180][ T854] usb 6-1: Product: syz [ 344.803188][ T854] usb 6-1: Manufacturer: syz [ 344.803196][ T854] usb 6-1: SerialNumber: syz [ 344.811905][ T854] usb 6-1: config 0 descriptor?? [ 344.815423][ T854] ch341 6-1:0.0: ch341-uart converter detected [ 344.923476][T12881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.923749][T12881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.965615][ T10] usb 7-1: USB disconnect, device number 63 [ 344.970321][ T10] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 345.097856][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'. [ 345.108596][T12900] 9pnet_virtio: no channels available for device syz [ 345.412994][ T10] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 345.580877][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 345.587390][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 345.606393][T12904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.606426][ T10] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 345.607851][T12904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.618390][ T10] usb 7-1: config 0 has no interface number 0 [ 345.622825][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 345.627980][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 345.628340][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 345.639138][ T10] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 345.639681][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.700225][ T10] usb 7-1: config 0 descriptor?? [ 345.800948][ T10] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 345.844804][ T854] usb 6-1: failed to receive control message: -110 [ 345.848796][ T854] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 347.425234][ T58] usb 6-1: USB disconnect, device number 56 [ 347.426376][ T58] ch341 6-1:0.0: device disconnected [ 347.520222][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 348.054839][T12899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.059977][T12899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.088429][ T5820] usb 7-1: USB disconnect, device number 64 [ 348.093536][ T5820] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 348.516869][T12931] __nla_validate_parse: 11 callbacks suppressed [ 348.516948][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2494'. [ 348.518659][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2494'. [ 348.519050][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2494'. [ 348.519362][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2494'. [ 348.526645][T12931] 9pnet_virtio: no channels available for device syz [ 348.560401][ T5820] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 348.730230][ T5820] usb 7-1: Using ep0 maxpacket: 8 [ 348.737510][ T5820] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 348.748121][ T5820] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 348.748203][ T5820] usb 7-1: config 0 has no interface number 0 [ 348.748266][ T5820] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 348.748288][ T5820] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 348.748341][ T5820] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 348.748513][ T5820] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 348.748731][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.783334][ T5820] usb 7-1: config 0 descriptor?? [ 348.827749][ T5820] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 348.975046][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2496'. [ 349.878264][T12924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.878518][T12924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.906927][ T5531] usb 7-1: USB disconnect, device number 65 [ 349.908544][ T5531] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 350.034994][T12939] loop0: detected capacity change from 0 to 4096 [ 350.093945][T12939] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 350.094017][T12939] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 350.094069][T12939] loop0: [ 350.300258][ T5531] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 350.460774][ T5531] usb 7-1: Using ep0 maxpacket: 8 [ 350.462806][ T5531] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 350.465517][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 350.469788][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 350.470645][ T5531] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.470749][ T5531] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.471443][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 350.472377][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 350.504753][ T5531] usb 7-1: config 0 descriptor?? [ 350.826236][ T5531] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 351.191956][T12937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2498'. [ 351.211776][ T1688] usb 7-1: USB disconnect, device number 66 [ 351.260389][ T854] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 351.430316][ T854] usb 6-1: Using ep0 maxpacket: 8 [ 351.433376][ T854] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 351.438154][ T854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 351.438419][ T854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.441144][ T854] usb 6-1: config 0 descriptor?? [ 351.470207][ T5819] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 351.620217][ T5819] usb 8-1: Using ep0 maxpacket: 8 [ 351.621437][ T5819] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 351.623162][ T5819] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 351.623185][ T5819] usb 8-1: config 0 has no interface number 0 [ 351.623219][ T5819] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 351.623307][ T5819] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 351.623331][ T5819] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 351.623355][ T5819] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 351.623391][ T5819] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.626713][ T5819] usb 8-1: config 0 descriptor?? [ 351.633842][ T5819] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 351.651821][ T854] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 351.868865][T12960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.874488][T12960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.894655][ T1688] usb 6-1: USB disconnect, device number 57 [ 351.930208][ T57] usb 8-1: USB disconnect, device number 57 [ 351.933619][ T57] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 352.000333][ T7150] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 352.150344][ T7150] usb 7-1: Using ep0 maxpacket: 8 [ 352.154171][ T7150] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 352.155742][ T7150] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.155769][ T7150] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.157896][ T7150] usb 7-1: config 0 descriptor?? [ 352.369251][ T7150] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 352.469010][T12973] loop0: detected capacity change from 0 to 4096 [ 352.519994][T12973] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 352.520180][T12973] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 352.520355][T12973] loop0: [ 352.630938][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 352.839387][ T1688] usb 7-1: USB disconnect, device number 67 [ 353.130234][ T854] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 353.281392][ T854] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 353.284628][ T854] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 353.284651][ T854] usb 6-1: Product: syz [ 353.284664][ T854] usb 6-1: Manufacturer: syz [ 353.284676][ T854] usb 6-1: SerialNumber: syz [ 353.287603][ T854] usb 6-1: config 0 descriptor?? [ 353.292472][ T854] ch341 6-1:0.0: ch341-uart converter detected [ 353.608860][T12996] __nla_validate_parse: 2 callbacks suppressed [ 353.609011][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'. [ 353.626467][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'. [ 353.633353][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'. [ 353.639565][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'. [ 353.657750][T12999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.657987][T12999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.667291][T12999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2520'. [ 353.820805][ T57] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 353.890463][ T7150] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 353.970424][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 353.971392][ T57] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 353.972317][ T57] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 353.972339][ T57] usb 7-1: config 0 has no interface number 0 [ 353.972366][ T57] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 353.972386][ T57] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 353.972405][ T57] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 353.972426][ T57] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 353.972457][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.974621][ T57] usb 7-1: config 0 descriptor?? [ 353.999464][ T57] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 354.041055][ T7150] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 354.044229][ T7150] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 354.044255][ T7150] usb 8-1: Product: syz [ 354.044268][ T7150] usb 8-1: Manufacturer: syz [ 354.044281][ T7150] usb 8-1: SerialNumber: syz [ 354.049196][ T7150] usb 8-1: config 0 descriptor?? [ 354.053117][ T7150] ch341 8-1:0.0: ch341-uart converter detected [ 354.267767][ T854] usb 6-1: failed to receive control message: -71 [ 354.267856][ T854] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 354.280355][ T854] usb 6-1: USB disconnect, device number 58 [ 354.284847][ T854] ch341 6-1:0.0: device disconnected [ 354.313468][T12995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.346538][T12995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.560264][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2517'. [ 354.570827][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2517'. [ 354.571829][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2517'. [ 354.572479][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2517'. [ 354.578683][T13008] 9pnet_virtio: no channels available for device syz [ 354.595773][ T1688] usb 7-1: USB disconnect, device number 68 [ 354.603759][ T1688] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 355.098329][ T7150] usb 8-1: failed to receive control message: -71 [ 355.098436][ T7150] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71 [ 355.115560][ T7150] usb 8-1: USB disconnect, device number 58 [ 355.117008][ T7150] ch341 8-1:0.0: device disconnected [ 355.178362][T13022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.182092][T13022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.328835][T13023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2525'. [ 355.848022][T13027] 9pnet_virtio: no channels available for device syz [ 357.250467][ T57] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 357.410344][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 357.412561][ T57] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 357.417730][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 357.424360][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.442975][ T57] usb 8-1: config 0 descriptor?? [ 357.712726][ T57] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 357.983668][ T57] usb 8-1: USB disconnect, device number 59 [ 358.351903][T13060] Cache volume key already in use (9p,syz,) [ 358.440434][ T5819] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 358.652342][ T5819] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 358.891224][ T5819] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 358.891296][ T5819] usb 7-1: Product: syz [ 358.891359][ T5819] usb 7-1: Manufacturer: syz [ 358.891375][ T5819] usb 7-1: SerialNumber: syz [ 359.502369][ T5819] usb 7-1: config 0 descriptor?? [ 359.504669][ T5819] ch341 7-1:0.0: ch341-uart converter detected [ 359.597301][T13074] loop0: detected capacity change from 0 to 4096 [ 359.622069][T13074] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 359.622172][T13074] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 359.622236][T13074] loop0: [ 359.704233][T13081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.707573][T13081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.840874][T13083] __nla_validate_parse: 20 callbacks suppressed [ 359.840938][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'. [ 359.857654][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'. [ 359.864341][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'. [ 359.870943][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2533'. [ 359.875371][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2533'. [ 359.875624][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2533'. [ 359.875816][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'. [ 359.880492][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2533'. [ 359.880704][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2533'. [ 359.911014][T13083] 9pnet_virtio: no channels available for device syz [ 360.560719][ T5819] usb 7-1: failed to receive control message: -110 [ 360.561148][ T5819] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 361.215679][ T5819] usb 7-1: USB disconnect, device number 69 [ 361.216672][ T5819] ch341 7-1:0.0: device disconnected [ 361.530419][ T1688] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 361.700236][ T57] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 361.701037][ T1688] usb 6-1: Using ep0 maxpacket: 8 [ 361.708196][ T1688] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 361.716096][ T1688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.719198][ T1688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.748296][ T1688] usb 6-1: config 0 descriptor?? [ 361.860198][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 361.862726][ T57] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 361.867438][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.871809][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.878114][ T57] usb 7-1: config 0 descriptor?? [ 361.985501][ T1688] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 362.094126][ T57] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 362.335048][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2547'. [ 362.415034][ T1688] usb 6-1: USB disconnect, device number 59 [ 362.551908][T13102] 9pnet_virtio: no channels available for device syz [ 363.139422][ T854] usb 7-1: USB disconnect, device number 70 [ 363.662587][T13117] loop0: detected capacity change from 0 to 4096 [ 363.724308][T13117] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 363.724399][T13117] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 363.724480][T13117] loop0: [ 365.259676][T13139] __nla_validate_parse: 22 callbacks suppressed [ 365.260944][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2557'. [ 365.267020][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2557'. [ 365.269470][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2557'. [ 365.270968][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2557'. [ 365.414417][ T5889] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 365.480253][ T5819] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 365.543951][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 365.550738][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 365.551159][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 365.551475][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 365.581022][ T5889] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 365.587966][ T5889] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 365.593394][ T5889] usb 7-1: Product: syz [ 365.595317][ T5889] usb 7-1: Manufacturer: syz [ 365.597368][ T5889] usb 7-1: SerialNumber: syz [ 365.601229][ T5889] usb 7-1: config 0 descriptor?? [ 365.605101][ T5889] ch341 7-1:0.0: ch341-uart converter detected [ 365.660546][ T5819] usb 8-1: Using ep0 maxpacket: 8 [ 365.666874][ T5819] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 365.684918][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2560'. [ 365.695125][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2560'. [ 365.724283][T13152] 9pnet_virtio: no channels available for device syz [ 365.729922][ T5819] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.730048][ T5819] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.050853][T13153] 9pnet_virtio: no channels available for device syz [ 366.684208][ T5889] usb 7-1: failed to receive control message: -110 [ 366.684399][ T5889] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 366.698179][ T5819] usb 8-1: config 0 descriptor?? [ 366.909177][T13159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.909610][T13159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.000662][ T5531] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 367.095489][ T5819] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 367.161029][ T5531] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 367.169418][ T5531] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 367.173546][ T5531] usb 6-1: Product: syz [ 367.175378][ T5531] usb 6-1: Manufacturer: syz [ 367.177510][ T5531] usb 6-1: SerialNumber: syz [ 367.182897][ T5531] usb 6-1: config 0 descriptor?? [ 367.188752][ T5531] ch341 6-1:0.0: ch341-uart converter detected [ 367.362054][ T7150] usb 8-1: USB disconnect, device number 60 [ 367.490014][T13162] 9pnet_virtio: no channels available for device syz [ 367.930155][ T7150] usb 7-1: USB disconnect, device number 71 [ 367.931247][ T7150] ch341 7-1:0.0: device disconnected [ 368.090253][ T5531] usb 6-1: failed to receive control message: -71 [ 368.090365][ T5531] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71 [ 368.107908][ T5531] usb 6-1: USB disconnect, device number 60 [ 368.119250][ T5531] ch341 6-1:0.0: device disconnected [ 368.204675][T13166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.205040][T13166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.471419][T13177] loop0: detected capacity change from 0 to 4096 [ 368.512834][T13177] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 368.518572][T13177] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 368.518645][T13177] loop0: [ 369.800260][ T5747] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 369.970723][ T5747] usb 6-1: Using ep0 maxpacket: 8 [ 369.971820][ T5747] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 369.974084][ T5747] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 369.974105][ T5747] usb 6-1: config 0 has no interface number 0 [ 369.974137][ T5747] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 369.974156][ T5747] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 369.974177][ T5747] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 369.974197][ T5747] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 369.974228][ T5747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.980749][ T5747] usb 6-1: config 0 descriptor?? [ 369.989941][ T5747] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 370.015356][ T10] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 370.171830][ T10] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 370.179528][ T10] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 370.179586][ T10] usb 7-1: Product: syz [ 370.179608][ T10] usb 7-1: Manufacturer: syz [ 370.179630][ T10] usb 7-1: SerialNumber: syz [ 370.181508][ T10] usb 7-1: config 0 descriptor?? [ 370.184026][ T10] ch341 7-1:0.0: ch341-uart converter detected [ 370.285609][T13187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.285849][T13187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.319819][ T76] usb 6-1: USB disconnect, device number 61 [ 370.329287][ T76] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 370.533191][T13212] __nla_validate_parse: 35 callbacks suppressed [ 370.535446][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2574'. [ 370.544014][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2574'. [ 370.547578][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2574'. [ 370.551313][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2574'. [ 370.555298][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2574'. [ 370.740323][ T76] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 370.920236][ T76] usb 6-1: Using ep0 maxpacket: 8 [ 370.927846][ T76] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 370.936058][ T76] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 370.940488][ T76] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 370.945327][ T76] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.197085][ T10] usb 7-1: failed to receive control message: -110 [ 371.197179][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 371.577536][T13217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.578046][T13217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.588572][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2580'. [ 372.202155][ T1688] usb 7-1: USB disconnect, device number 72 [ 372.203248][ T1688] ch341 7-1:0.0: device disconnected [ 372.340664][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2581'. [ 372.347067][T13231] 9pnet_virtio: no channels available for device syz [ 373.104467][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2583'. [ 373.106550][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2583'. [ 373.106886][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2583'. [ 373.140301][ T5889] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 373.290780][ T5889] usb 8-1: Using ep0 maxpacket: 8 [ 373.294004][ T5889] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 373.299116][ T5889] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 373.302730][ T5889] usb 8-1: config 0 has no interface number 0 [ 373.305536][ T5889] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 373.305613][ T5889] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 373.305652][ T5889] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.305691][ T5889] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 373.305744][ T5889] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.311168][ T5889] usb 8-1: config 0 descriptor?? [ 373.325605][ T5889] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 373.423499][ T30] usb 6-1: USB disconnect, device number 62 [ 373.696446][T13233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.697475][T13233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.739266][T13241] 9pnet_virtio: no channels available for device syz [ 373.894596][T13250] FAULT_INJECTION: forcing a failure. [ 373.894596][T13250] name failslab, interval 1, probability 0, space 0, times 0 [ 373.894663][T13250] CPU: 0 UID: 0 PID: 13250 Comm: syz.1.2588 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.894704][T13250] Tainted: [L]=SOFTLOCKUP [ 373.894713][T13250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 373.894726][T13250] Call Trace: [ 373.894734][T13250] [ 373.894742][T13250] dump_stack_lvl+0x100/0x190 [ 373.894781][T13250] should_fail_ex.cold+0x5/0xa [ 373.894807][T13250] should_failslab+0xc2/0x120 [ 373.894832][T13250] __kmalloc_cache_noprof+0x91/0x6d0 [ 373.894861][T13250] ? io_uring_setup.cold+0x6c/0x1c5e [ 373.894895][T13250] io_uring_setup.cold+0x6c/0x1c5e [ 373.894925][T13250] ? rcu_read_lock_any_held+0x6a/0x90 [ 373.894947][T13250] ? find_held_lock+0x2b/0x80 [ 373.894969][T13250] ? __pfx_io_uring_setup+0x10/0x10 [ 373.894992][T13250] ? ksys_write+0x190/0x250 [ 373.895013][T13250] ? lock_acquire+0x1d1/0x380 [ 373.895040][T13250] ? __mutex_unlock_slowpath+0x35d/0x930 [ 373.895080][T13250] ? fput+0x7c/0x100 [ 373.895103][T13250] ? ksys_write+0x1ac/0x250 [ 373.895122][T13250] ? __pfx_ksys_write+0x10/0x10 [ 373.895143][T13250] __ia32_sys_io_uring_setup+0xc2/0x170 [ 373.895169][T13250] __do_fast_syscall_32+0x13a/0x8b0 [ 373.895196][T13250] ? lockdep_hardirqs_on+0x7d/0x110 [ 373.895223][T13250] do_fast_syscall_32+0x32/0x70 [ 373.895249][T13250] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 373.895273][T13250] RIP: 0023:0xf7fa3fec [ 373.895295][T13250] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 373.895304][T13250] RSP: 002b:00000000f546643c EFLAGS: 00000286 ORIG_RAX: 00000000000001a9 [ 373.895324][T13250] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000808 [ 373.895336][T13250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 373.895349][T13250] RBP: 00000000f54664fc R08: 0000000000000000 R09: 0000000000000000 [ 373.895361][T13250] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 373.895374][T13250] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 373.895399][T13250] [ 374.244402][ T5889] usb 8-1: USB disconnect, device number 61 [ 374.246084][ T5889] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 374.340342][ T30] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 374.640139][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 374.679029][ T30] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 374.711515][ T5747] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 374.760940][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 374.761011][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.860236][ T5747] usb 8-1: Using ep0 maxpacket: 8 [ 374.860988][ T5747] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 374.862029][ T5747] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 374.862211][ T5747] usb 8-1: config 0 has no interface number 0 [ 374.862248][ T5747] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 374.862275][ T5747] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 374.862303][ T5747] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 374.862333][ T5747] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.862369][ T5747] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.864439][ T5747] usb 8-1: config 0 descriptor?? [ 374.872404][ T5747] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 375.267959][T13269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.268354][T13269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.268734][ T30] usb 6-1: config 0 descriptor?? [ 375.268966][T13267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.269337][T13267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.299814][ T5889] usb 8-1: USB disconnect, device number 62 [ 375.303625][ T5889] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 375.357998][T13271] syzkaller0: entered promiscuous mode [ 375.358046][T13271] syzkaller0: entered allmulticast mode [ 375.545728][ T30] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 375.724074][T13254] __nla_validate_parse: 11 callbacks suppressed [ 375.724226][T13254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2589'. [ 375.730367][ T65] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 375.776810][ T30] usb 6-1: USB disconnect, device number 63 [ 376.318341][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2603'. [ 376.319590][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2603'. [ 376.319866][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2603'. [ 376.320708][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2603'. [ 376.512209][T13309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.512599][T13309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.570381][ T7150] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 376.612026][T13309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.616778][T13309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.708113][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2605'. [ 376.731523][ T7150] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 376.736461][ T7150] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 376.736522][ T7150] usb 6-1: Product: syz [ 376.736551][ T7150] usb 6-1: Manufacturer: syz [ 376.736565][ T7150] usb 6-1: SerialNumber: syz [ 376.756201][ T7150] usb 6-1: config 0 descriptor?? [ 376.763032][ T7150] ch341 6-1:0.0: ch341-uart converter detected [ 376.792864][T13315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.793965][T13315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.812858][T13315] 9pnet_virtio: no channels available for device syz [ 376.979335][T13301] 9pnet_virtio: no channels available for device syz [ 376.991012][ T7150] usb 6-1: failed to receive control message: -71 [ 376.991104][ T7150] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 377.000994][ T7150] usb 6-1: USB disconnect, device number 64 [ 377.004323][ T7150] ch341 6-1:0.0: device disconnected [ 377.376162][T13320] FAULT_INJECTION: forcing a failure. [ 377.376162][T13320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.376219][T13320] CPU: 3 UID: 0 PID: 13320 Comm: syz.0.2608 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.376255][T13320] Tainted: [L]=SOFTLOCKUP [ 377.376261][T13320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.376268][T13320] Call Trace: [ 377.376273][T13320] [ 377.376278][T13320] dump_stack_lvl+0x100/0x190 [ 377.376297][T13320] should_fail_ex.cold+0x5/0xa [ 377.376313][T13320] _copy_from_iter+0x1f4/0x1690 [ 377.376327][T13320] ? __lock_acquire+0x4c5/0x1ec0 [ 377.376346][T13320] ? __pfx__copy_from_iter+0x10/0x10 [ 377.376361][T13320] ? lock_acquire+0x1d1/0x380 [ 377.376374][T13320] ? aa_file_perm+0x197/0x14d0 [ 377.376386][T13320] ? find_held_lock+0x2b/0x80 [ 377.376399][T13320] tun_get_user+0x3ba/0x3cc0 [ 377.376419][T13320] ? __lock_acquire+0x4c5/0x1ec0 [ 377.376434][T13320] ? __pfx_tun_get_user+0x10/0x10 [ 377.376449][T13320] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 377.376469][T13320] ? find_held_lock+0x2b/0x80 [ 377.376480][T13320] ? tun_get+0x191/0x370 [ 377.376492][T13320] ? tun_get+0x191/0x370 [ 377.376507][T13320] tun_chr_write_iter+0xdc/0x200 [ 377.376522][T13320] vfs_write+0x6af/0x1050 [ 377.376535][T13320] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 377.376550][T13320] ? __pfx_vfs_write+0x10/0x10 [ 377.376560][T13320] ? find_held_lock+0x2b/0x80 [ 377.376580][T13320] ksys_write+0x12a/0x250 [ 377.376591][T13320] ? __pfx_ksys_write+0x10/0x10 [ 377.376601][T13320] ? ksys_write+0x1ac/0x250 [ 377.376611][T13320] ? __pfx_ksys_write+0x10/0x10 [ 377.376625][T13320] __do_fast_syscall_32+0x13a/0x8b0 [ 377.376641][T13320] ? lockdep_hardirqs_on+0x7d/0x110 [ 377.376656][T13320] do_fast_syscall_32+0x32/0x70 [ 377.376672][T13320] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 377.376686][T13320] RIP: 0023:0xf7f67fec [ 377.376716][T13320] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 377.376721][T13320] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 377.376733][T13320] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 377.376740][T13320] RDX: 000000000000fd6c RSI: 0000000000000000 RDI: 0000000000000000 [ 377.376746][T13320] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 377.376753][T13320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.376759][T13320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 377.376773][T13320] [ 377.651938][T13329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.658075][T13329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.663337][ T65] Bluetooth: hci0: Invalid handle: 0xed88 > 0x0eff [ 377.667797][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2612'. [ 377.687522][T13324] loop9: detected capacity change from 0 to 2640 [ 377.688625][T13324] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.688651][T13324] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.688667][T13324] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.688682][T13324] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.688698][T13324] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.688720][T13324] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.688740][T13324] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.688755][T13324] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.688763][T13324] ldm_validate_partition_table(): Disk read failed. [ 377.688777][T13324] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.688792][T13324] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.688817][T13324] Dev loop9: unable to read RDB block 0 [ 377.689239][T13324] loop9: unable to read partition table [ 377.689331][T13324] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 378.060113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 378.198394][T13354] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 378.206719][T13350] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 378.243935][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.247021][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.430764][T13352] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 378.625390][T13352] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 379.299367][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2622'. [ 379.307575][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2622'. [ 379.313695][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2622'. [ 379.455683][T13372] FAULT_INJECTION: forcing a failure. [ 379.455683][T13372] name failslab, interval 1, probability 0, space 0, times 0 [ 379.455742][T13372] CPU: 0 UID: 0 PID: 13372 Comm: syz.3.2621 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.455772][T13372] Tainted: [L]=SOFTLOCKUP [ 379.455778][T13372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 379.455786][T13372] Call Trace: [ 379.455791][T13372] [ 379.455799][T13372] dump_stack_lvl+0x100/0x190 [ 379.455822][T13372] should_fail_ex.cold+0x5/0xa [ 379.455837][T13372] should_failslab+0xc2/0x120 [ 379.455853][T13372] __kmalloc_noprof+0xfc/0x840 [ 379.455865][T13372] ? __pfx_dynamic_dname+0x10/0x10 [ 379.455882][T13372] ? tomoyo_encode2+0xfb/0x3c0 [ 379.455902][T13372] tomoyo_encode2+0xfb/0x3c0 [ 379.455921][T13372] tomoyo_encode+0x29/0x50 [ 379.455938][T13372] tomoyo_realpath_from_path+0x18c/0x690 [ 379.455959][T13372] tomoyo_path_number_perm+0x23c/0x580 [ 379.455974][T13372] ? tomoyo_path_number_perm+0x22e/0x580 [ 379.455990][T13372] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 379.456005][T13372] ? get_pid_task+0x106/0x250 [ 379.456021][T13372] ? __lock_acquire+0x4c5/0x1ec0 [ 379.456043][T13372] ? __fget_files+0x34/0x3d0 [ 379.456055][T13372] ? find_held_lock+0x2b/0x80 [ 379.456067][T13372] ? __fget_files+0x215/0x3d0 [ 379.456077][T13372] ? hook_file_ioctl_common+0x140/0x440 [ 379.456093][T13372] ? __fget_files+0x215/0x3d0 [ 379.456107][T13372] ? __fget_files+0x21f/0x3d0 [ 379.456121][T13372] security_file_ioctl_compat+0xd3/0x230 [ 379.456138][T13372] __ia32_compat_sys_ioctl+0xc2/0x360 [ 379.456157][T13372] __do_fast_syscall_32+0x13a/0x8b0 [ 379.456173][T13372] ? lockdep_hardirqs_on+0x7d/0x110 [ 379.456189][T13372] do_fast_syscall_32+0x32/0x70 [ 379.456205][T13372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 379.456219][T13372] RIP: 0023:0xf7f58fec [ 379.456233][T13372] Code: Unable to access opcode bytes at 0xf7f58fc2. [ 379.456238][T13372] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 379.456250][T13372] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c018aec0 [ 379.456258][T13372] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 379.456265][T13372] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 379.456271][T13372] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 379.456278][T13372] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.456301][T13372] [ 379.456339][T13372] ERROR: Out of memory at tomoyo_realpath_from_path. [ 379.480183][ T10] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 379.643172][ T10] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 379.657502][ T10] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 379.657930][ T10] usb 7-1: Product: syz [ 379.658048][ T10] usb 7-1: Manufacturer: syz [ 379.658058][ T10] usb 7-1: SerialNumber: syz [ 379.670746][ T10] usb 7-1: config 0 descriptor?? [ 379.690726][ T10] ch341 7-1:0.0: ch341-uart converter detected [ 380.077775][ T10] usb 7-1: failed to receive control message: -71 [ 380.077828][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 380.116521][ T10] usb 7-1: USB disconnect, device number 73 [ 380.194588][ T10] ch341 7-1:0.0: device disconnected [ 380.283955][T13383] fuse: Bad value for 'fd' [ 380.530381][ T5531] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 380.634566][T13391] futex_wake_op: syz.3.2629 tries to shift op by 144; fix this program [ 380.691113][ T5531] usb 6-1: Using ep0 maxpacket: 8 [ 380.699813][ T5531] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 380.710355][ T5531] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 380.710397][ T5531] usb 6-1: config 0 has no interface number 0 [ 380.710617][ T5531] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 380.710649][ T5531] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 380.710686][ T5531] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 380.710724][ T5531] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 380.710777][ T5531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.754978][T13394] Cache volume key already in use (9p,syz,) [ 380.767204][ T5531] usb 6-1: config 0 descriptor?? [ 380.912173][ T5531] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 381.107782][T13397] FAULT_INJECTION: forcing a failure. [ 381.107782][T13397] name failslab, interval 1, probability 0, space 0, times 0 [ 381.114166][T13397] CPU: 0 UID: 0 PID: 13397 Comm: syz.2.2631 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.114226][T13397] Tainted: [L]=SOFTLOCKUP [ 381.114235][T13397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 381.114246][T13397] Call Trace: [ 381.114254][T13397] [ 381.114262][T13397] dump_stack_lvl+0x100/0x190 [ 381.114294][T13397] should_fail_ex.cold+0x5/0xa [ 381.114320][T13397] should_failslab+0xc2/0x120 [ 381.114351][T13397] __kmalloc_noprof+0xfc/0x840 [ 381.114372][T13397] ? tomoyo_encode2+0xfb/0x3c0 [ 381.114405][T13397] tomoyo_encode2+0xfb/0x3c0 [ 381.114438][T13397] tomoyo_encode+0x29/0x50 [ 381.114465][T13397] tomoyo_realpath_from_path+0x18c/0x690 [ 381.114500][T13397] tomoyo_path_number_perm+0x23c/0x580 [ 381.114525][T13397] ? tomoyo_path_number_perm+0x22e/0x580 [ 381.114552][T13397] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 381.114578][T13397] ? get_pid_task+0x106/0x250 [ 381.114605][T13397] ? __lock_acquire+0x4c5/0x1ec0 [ 381.114644][T13397] ? __fget_files+0x34/0x3d0 [ 381.114664][T13397] ? find_held_lock+0x2b/0x80 [ 381.114683][T13397] ? __fget_files+0x215/0x3d0 [ 381.114701][T13397] ? hook_file_ioctl_common+0x140/0x440 [ 381.114726][T13397] ? __fget_files+0x215/0x3d0 [ 381.114750][T13397] ? __fget_files+0x21f/0x3d0 [ 381.114780][T13397] security_file_ioctl_compat+0xd3/0x230 [ 381.114817][T13397] __ia32_compat_sys_ioctl+0xc2/0x360 [ 381.114859][T13397] __do_fast_syscall_32+0x13a/0x8b0 [ 381.114895][T13397] ? lockdep_hardirqs_on+0x7d/0x110 [ 381.114930][T13397] do_fast_syscall_32+0x32/0x70 [ 381.114960][T13397] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 381.114983][T13397] RIP: 0023:0xf7ff7fec [ 381.115006][T13397] Code: Unable to access opcode bytes at 0xf7ff7fc2. [ 381.115016][T13397] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 381.115036][T13397] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657 [ 381.115049][T13397] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.115061][T13397] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.115072][T13397] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 381.115084][T13397] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.115110][T13397] [ 381.248722][T13397] ERROR: Out of memory at tomoyo_realpath_from_path. [ 381.641009][T13406] __nla_validate_parse: 5 callbacks suppressed [ 381.641157][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2634'. [ 381.644377][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2634'. [ 381.649862][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2634'. [ 381.650869][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2634'. [ 381.652002][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2634'. [ 381.707471][T13383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.707681][T13383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.732307][ T25] usb 6-1: USB disconnect, device number 65 [ 381.734504][ T25] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 382.303637][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2636'. [ 382.304535][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2636'. [ 382.304731][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2636'. [ 382.304893][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2636'. [ 382.638170][T13424] FAULT_INJECTION: forcing a failure. [ 382.638170][T13424] name failslab, interval 1, probability 0, space 0, times 0 [ 382.644516][T13424] CPU: 0 UID: 0 PID: 13424 Comm: syz.0.2639 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.644548][T13424] Tainted: [L]=SOFTLOCKUP [ 382.644554][T13424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 382.644561][T13424] Call Trace: [ 382.644565][T13424] [ 382.644571][T13424] dump_stack_lvl+0x100/0x190 [ 382.644591][T13424] should_fail_ex.cold+0x5/0xa [ 382.644606][T13424] should_failslab+0xc2/0x120 [ 382.644621][T13424] __kmalloc_noprof+0xfc/0x840 [ 382.644632][T13424] ? rcu_is_watching+0x13/0xc0 [ 382.644643][T13424] ? tomoyo_realpath_from_path+0xb6/0x690 [ 382.644664][T13424] tomoyo_realpath_from_path+0xb6/0x690 [ 382.644685][T13424] tomoyo_path_number_perm+0x23c/0x580 [ 382.644713][T13424] ? tomoyo_path_number_perm+0x22e/0x580 [ 382.644731][T13424] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 382.644747][T13424] ? get_pid_task+0x106/0x250 [ 382.644763][T13424] ? __lock_acquire+0x4c5/0x1ec0 [ 382.644787][T13424] ? __fget_files+0x34/0x3d0 [ 382.644799][T13424] ? find_held_lock+0x2b/0x80 [ 382.644811][T13424] ? __fget_files+0x215/0x3d0 [ 382.644822][T13424] ? hook_file_ioctl_common+0x140/0x440 [ 382.644837][T13424] ? __fget_files+0x215/0x3d0 [ 382.644851][T13424] ? __fget_files+0x21f/0x3d0 [ 382.644865][T13424] security_file_ioctl_compat+0xd3/0x230 [ 382.644882][T13424] __ia32_compat_sys_ioctl+0xc2/0x360 [ 382.644901][T13424] __do_fast_syscall_32+0x13a/0x8b0 [ 382.644917][T13424] ? lockdep_hardirqs_on+0x7d/0x110 [ 382.644933][T13424] do_fast_syscall_32+0x32/0x70 [ 382.644950][T13424] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 382.644965][T13424] RIP: 0023:0xf7f67fec [ 382.644978][T13424] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 382.644985][T13424] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 382.644996][T13424] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040505331 [ 382.645003][T13424] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.645010][T13424] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.645016][T13424] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 382.645023][T13424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 382.645037][T13424] [ 382.681742][T13424] ERROR: Out of memory at tomoyo_realpath_from_path. [ 382.879013][T13440] fuse: Bad value for 'fd' [ 382.882771][ T10] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 382.886842][T13440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.887230][T13440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.940753][ T5531] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 382.957043][T13440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.957468][T13440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.052819][ T10] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 383.069781][T13446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.070253][T13446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.078578][ T10] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 383.082944][ T10] usb 8-1: Product: syz [ 383.083083][ T10] usb 8-1: Manufacturer: syz [ 383.083099][ T10] usb 8-1: SerialNumber: syz [ 383.086155][T13446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2646'. [ 383.102084][ T5531] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 383.104592][ T5531] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 383.104607][ T5531] usb 6-1: Product: syz [ 383.104614][ T5531] usb 6-1: Manufacturer: syz [ 383.104622][ T5531] usb 6-1: SerialNumber: syz [ 383.134876][ T10] usb 8-1: config 0 descriptor?? [ 383.135879][ T5531] usb 6-1: config 0 descriptor?? [ 383.143328][ T5531] ch341 6-1:0.0: ch341-uart converter detected [ 383.152225][ T10] ch341 8-1:0.0: ch341-uart converter detected [ 383.374038][T13429] 9pnet_virtio: no channels available for device syz [ 383.387952][ T5531] usb 6-1: failed to receive control message: -71 [ 383.388045][ T5531] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 383.436872][T13451] 9pnet_virtio: no channels available for device syz [ 384.098525][T13457] Cache volume key already in use (9p,syz,) [ 384.112305][ T5531] usb 6-1: USB disconnect, device number 66 [ 384.113186][ T5531] ch341 6-1:0.0: device disconnected [ 384.230335][ T10] usb 8-1: failed to receive control message: -110 [ 384.230420][ T10] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -110 [ 384.251219][T13463] FAULT_INJECTION: forcing a failure. [ 384.251219][T13463] name failslab, interval 1, probability 0, space 0, times 0 [ 384.251288][T13463] CPU: 0 UID: 0 PID: 13463 Comm: syz.1.2651 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.251315][T13463] Tainted: [L]=SOFTLOCKUP [ 384.251321][T13463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 384.251329][T13463] Call Trace: [ 384.251334][T13463] [ 384.251339][T13463] dump_stack_lvl+0x100/0x190 [ 384.251360][T13463] should_fail_ex.cold+0x5/0xa [ 384.251377][T13463] should_failslab+0xc2/0x120 [ 384.251394][T13463] __kmalloc_noprof+0xfc/0x840 [ 384.251407][T13463] ? tomoyo_encode2+0xfb/0x3c0 [ 384.251429][T13463] tomoyo_encode2+0xfb/0x3c0 [ 384.251448][T13463] tomoyo_encode+0x29/0x50 [ 384.251465][T13463] tomoyo_realpath_from_path+0x18c/0x690 [ 384.251486][T13463] tomoyo_path_number_perm+0x23c/0x580 [ 384.251501][T13463] ? tomoyo_path_number_perm+0x22e/0x580 [ 384.251517][T13463] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 384.251533][T13463] ? get_pid_task+0x106/0x250 [ 384.251550][T13463] ? __lock_acquire+0x4c5/0x1ec0 [ 384.251575][T13463] ? __fget_files+0x34/0x3d0 [ 384.251588][T13463] ? find_held_lock+0x2b/0x80 [ 384.251600][T13463] ? __fget_files+0x215/0x3d0 [ 384.251611][T13463] ? hook_file_ioctl_common+0x140/0x440 [ 384.251626][T13463] ? __fget_files+0x215/0x3d0 [ 384.251640][T13463] ? __fget_files+0x21f/0x3d0 [ 384.251655][T13463] security_file_ioctl_compat+0xd3/0x230 [ 384.251673][T13463] __ia32_compat_sys_ioctl+0xc2/0x360 [ 384.251693][T13463] __do_fast_syscall_32+0x13a/0x8b0 [ 384.251710][T13463] ? lockdep_hardirqs_on+0x7d/0x110 [ 384.251728][T13463] do_fast_syscall_32+0x32/0x70 [ 384.251744][T13463] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 384.251760][T13463] RIP: 0023:0xf7fa3fec [ 384.251776][T13463] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 384.251781][T13463] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 384.251793][T13463] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c0d05605 [ 384.251801][T13463] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 384.251807][T13463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 384.251814][T13463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.251821][T13463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 384.251836][T13463] [ 384.251877][T13463] ERROR: Out of memory at tomoyo_realpath_from_path. [ 385.199279][ T58] usb 8-1: USB disconnect, device number 63 [ 385.206701][ T58] ch341 8-1:0.0: device disconnected [ 385.780220][ T5531] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 385.930906][ T5531] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 385.934296][ T5531] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 385.934390][ T5531] usb 6-1: Product: syz [ 385.934405][ T5531] usb 6-1: Manufacturer: syz [ 385.934417][ T5531] usb 6-1: SerialNumber: syz [ 385.936821][ T5531] usb 6-1: config 0 descriptor?? [ 385.940175][ T5531] ch341 6-1:0.0: ch341-uart converter detected [ 386.144697][T13489] FAULT_INJECTION: forcing a failure. [ 386.144697][T13489] name failslab, interval 1, probability 0, space 0, times 0 [ 386.144792][T13489] CPU: 2 UID: 0 PID: 13489 Comm: syz.3.2660 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.144810][T13489] Tainted: [L]=SOFTLOCKUP [ 386.144814][T13489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.144821][T13489] Call Trace: [ 386.144826][T13489] [ 386.144832][T13489] dump_stack_lvl+0x100/0x190 [ 386.144851][T13489] should_fail_ex.cold+0x5/0xa [ 386.144867][T13489] should_failslab+0xc2/0x120 [ 386.144882][T13489] __kmalloc_noprof+0xfc/0x840 [ 386.144895][T13489] ? tomoyo_encode2+0xfb/0x3c0 [ 386.144929][T13489] tomoyo_encode2+0xfb/0x3c0 [ 386.144948][T13489] tomoyo_encode+0x29/0x50 [ 386.144965][T13489] tomoyo_realpath_from_path+0x18c/0x690 [ 386.144986][T13489] tomoyo_path_number_perm+0x23c/0x580 [ 386.145001][T13489] ? tomoyo_path_number_perm+0x22e/0x580 [ 386.145017][T13489] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 386.145033][T13489] ? get_pid_task+0x106/0x250 [ 386.145049][T13489] ? __lock_acquire+0x4c5/0x1ec0 [ 386.145071][T13489] ? __fget_files+0x34/0x3d0 [ 386.145084][T13489] ? find_held_lock+0x2b/0x80 [ 386.145095][T13489] ? __fget_files+0x215/0x3d0 [ 386.145106][T13489] ? hook_file_ioctl_common+0x140/0x440 [ 386.145122][T13489] ? __fget_files+0x215/0x3d0 [ 386.145136][T13489] ? __fget_files+0x21f/0x3d0 [ 386.145176][T13489] security_file_ioctl_compat+0xd3/0x230 [ 386.145193][T13489] __ia32_compat_sys_ioctl+0xc2/0x360 [ 386.145213][T13489] __do_fast_syscall_32+0x13a/0x8b0 [ 386.145229][T13489] ? lockdep_hardirqs_on+0x7d/0x110 [ 386.145245][T13489] do_fast_syscall_32+0x32/0x70 [ 386.145261][T13489] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 386.145276][T13489] RIP: 0023:0xf7f58fec [ 386.145289][T13489] Code: Unable to access opcode bytes at 0xf7f58fc2. [ 386.145294][T13489] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 386.145306][T13489] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005414 [ 386.145313][T13489] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 386.145320][T13489] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.145327][T13489] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 386.145333][T13489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.145348][T13489] [ 386.145441][T13489] ERROR: Out of memory at tomoyo_realpath_from_path. [ 386.171728][ T5531] usb 6-1: failed to receive control message: -71 [ 386.171757][ T5531] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 386.178483][ T5531] usb 6-1: USB disconnect, device number 67 [ 386.179342][ T5531] ch341 6-1:0.0: device disconnected [ 386.416447][T13500] 9pnet_virtio: no channels available for device syz [ 386.556424][T13504] 9pnet_virtio: no channels available for device syz [ 387.000205][ T1688] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 387.173534][ T1688] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 387.179597][ T1688] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 387.179771][ T1688] usb 8-1: Product: syz [ 387.179807][ T1688] usb 8-1: Manufacturer: syz [ 387.179841][ T1688] usb 8-1: SerialNumber: syz [ 387.200959][ T1688] usb 8-1: config 0 descriptor?? [ 387.209250][ T1688] ch341 8-1:0.0: ch341-uart converter detected [ 387.427169][T13514] __nla_validate_parse: 17 callbacks suppressed [ 387.427257][T13514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2669'. [ 387.491773][T13514] ntfs3(nullb0): Primary boot signature is not NTFS. [ 387.492538][T13514] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 388.056288][T13529] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2671'. [ 388.127645][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2673'. [ 388.128144][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2673'. [ 388.128346][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2673'. [ 388.128507][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2673'. [ 388.142851][T13533] 9pnet_virtio: no channels available for device syz [ 388.242086][ T1688] usb 8-1: failed to receive control message: -110 [ 388.242991][ T1688] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 388.682791][T13549] Bluetooth: MGMT ver 1.23 [ 389.150214][T13556] tunl0: entered promiscuous mode [ 389.302003][T13556] netlink: 'syz.0.2677': attribute type 4 has an invalid length. [ 389.302146][T13556] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2677'. [ 389.751711][ T7150] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 389.776959][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2682'. [ 389.780788][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2682'. [ 389.781153][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2682'. [ 389.788385][T13569] 9pnet_virtio: no channels available for device syz [ 389.813862][ T5747] usb 8-1: USB disconnect, device number 64 [ 389.818129][ T5747] ch341 8-1:0.0: device disconnected [ 389.900237][ T7150] usb 7-1: Using ep0 maxpacket: 8 [ 389.901116][ T7150] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 389.904401][ T7150] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 389.904425][ T7150] usb 7-1: config 0 has no interface number 0 [ 389.904456][ T7150] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 389.904476][ T7150] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 389.904494][ T7150] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 389.904515][ T7150] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 389.904547][ T7150] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.906670][ T7150] usb 7-1: config 0 descriptor?? [ 389.915176][ T7150] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 390.150481][T13561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.154820][T13561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.175483][ T5747] usb 7-1: USB disconnect, device number 74 [ 390.189016][ T5747] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 390.993673][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 391.002489][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 391.010423][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 391.022857][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 391.035030][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 391.378316][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.378429][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.401521][T13583] lo speed is unknown, defaulting to 1000 [ 391.500170][ T10] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 391.546437][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.553226][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.617795][T13583] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.622694][T13583] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.622828][T13583] bridge_slave_0: entered allmulticast mode [ 391.628219][T13583] bridge_slave_0: entered promiscuous mode [ 391.631793][T13583] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.634262][T13583] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.636971][T13583] bridge_slave_1: entered allmulticast mode [ 391.640574][T13583] bridge_slave_1: entered promiscuous mode [ 391.670675][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 391.671357][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 391.673808][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 391.673831][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.675101][ T10] usb 6-1: config 0 descriptor?? [ 391.696375][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.696477][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.729549][T13583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.732831][T13583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.766084][T13583] team0: Port device team_slave_0 added [ 391.769820][T13583] team0: Port device team_slave_1 added [ 391.812185][T13583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.815543][T13583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.840840][T13583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.900048][ T10] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 391.969432][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.969550][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.009466][T13583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.009604][T13583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.009630][T13583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.063941][T13622] FAULT_INJECTION: forcing a failure. [ 392.063941][T13622] name failslab, interval 1, probability 0, space 0, times 0 [ 392.064032][T13622] CPU: 1 UID: 0 PID: 13622 Comm: syz.0.2689 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.064093][T13622] Tainted: [L]=SOFTLOCKUP [ 392.064102][T13622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 392.064115][T13622] Call Trace: [ 392.064123][T13622] [ 392.064131][T13622] dump_stack_lvl+0x100/0x190 [ 392.064166][T13622] should_fail_ex.cold+0x5/0xa [ 392.064195][T13622] should_failslab+0xc2/0x120 [ 392.064224][T13622] __kmalloc_cache_noprof+0x91/0x6d0 [ 392.064258][T13622] ? io_uring_setup.cold+0x6c/0x1c5e [ 392.064294][T13622] io_uring_setup.cold+0x6c/0x1c5e [ 392.064332][T13622] ? rcu_read_lock_any_held+0x6a/0x90 [ 392.064357][T13622] ? find_held_lock+0x2b/0x80 [ 392.064380][T13622] ? __pfx_io_uring_setup+0x10/0x10 [ 392.064405][T13622] ? ksys_write+0x190/0x250 [ 392.064426][T13622] ? lock_acquire+0x1d1/0x380 [ 392.064455][T13622] ? __mutex_unlock_slowpath+0x35d/0x930 [ 392.064499][T13622] ? fput+0x7c/0x100 [ 392.064524][T13622] ? ksys_write+0x1ac/0x250 [ 392.064544][T13622] ? __pfx_ksys_write+0x10/0x10 [ 392.064568][T13622] __ia32_sys_io_uring_setup+0xc2/0x170 [ 392.064596][T13622] __do_fast_syscall_32+0x13a/0x8b0 [ 392.064625][T13622] ? lockdep_hardirqs_on+0x7d/0x110 [ 392.064654][T13622] do_fast_syscall_32+0x32/0x70 [ 392.064683][T13622] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 392.064708][T13622] RIP: 0023:0xf7f67fec [ 392.064733][T13622] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 392.064744][T13622] RSP: 002b:00000000f542643c EFLAGS: 00000286 ORIG_RAX: 00000000000001a9 [ 392.064766][T13622] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000808 [ 392.064779][T13622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.064792][T13622] RBP: 00000000f54264fc R08: 0000000000000000 R09: 0000000000000000 [ 392.064805][T13622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.064817][T13622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 392.064844][T13622] [ 392.078384][T13583] hsr_slave_0: entered promiscuous mode [ 392.079336][T13583] hsr_slave_1: entered promiscuous mode [ 392.079999][T13583] debugfs: 'hsr0' already exists in 'hsr' [ 392.080021][T13583] Cannot create hsr debugfs directory [ 392.143480][T13630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.147171][T13630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.314904][ T12] bridge_slave_1: left allmulticast mode [ 392.314957][ T12] bridge_slave_1: left promiscuous mode [ 392.315111][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.324809][ T12] bridge_slave_0: left allmulticast mode [ 392.324964][ T12] bridge_slave_0: left promiscuous mode [ 392.325205][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.489212][ T12] bond1 (unregistering): (slave bridge1): Releasing active interface [ 392.512563][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.518304][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.526259][ T12] bond0 (unregistering): Released all slaves [ 392.534276][ T12] bond1 (unregistering): Released all slaves [ 392.591840][ T5889] usb 6-1: USB disconnect, device number 68 [ 392.754741][T13637] FAULT_INJECTION: forcing a failure. [ 392.754741][T13637] name failslab, interval 1, probability 0, space 0, times 0 [ 392.754812][T13637] CPU: 3 UID: 0 PID: 13637 Comm: syz.3.2695 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.754852][T13637] Tainted: [L]=SOFTLOCKUP [ 392.754860][T13637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 392.754872][T13637] Call Trace: [ 392.754880][T13637] [ 392.754888][T13637] dump_stack_lvl+0x100/0x190 [ 392.754914][T13637] should_fail_ex.cold+0x5/0xa [ 392.754939][T13637] should_failslab+0xc2/0x120 [ 392.754964][T13637] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 392.754985][T13637] ? __alloc_skb+0x5b7/0x710 [ 392.755006][T13637] ? __alloc_skb+0x140/0x710 [ 392.755027][T13637] __alloc_skb+0x140/0x710 [ 392.755048][T13637] ? __alloc_skb+0x5b7/0x710 [ 392.755069][T13637] ? __pfx___alloc_skb+0x10/0x10 [ 392.755097][T13637] netlink_alloc_large_skb+0x69/0x150 [ 392.755120][T13637] netlink_sendmsg+0x680/0xda0 [ 392.755145][T13637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.755168][T13637] ? apparmor_socket_sendmsg+0x165/0x280 [ 392.755195][T13637] ____sys_sendmsg+0xa4d/0xbe0 [ 392.755221][T13637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.755245][T13637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.755289][T13637] ___sys_sendmsg+0x190/0x1e0 [ 392.755322][T13637] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.755370][T13637] ? find_held_lock+0x2b/0x80 [ 392.755412][T13637] __sys_sendmsg+0x160/0x210 [ 392.755438][T13637] ? __pfx___sys_sendmsg+0x10/0x10 [ 392.755472][T13637] ? __pfx_ksys_write+0x10/0x10 [ 392.755502][T13637] __do_fast_syscall_32+0x13a/0x8b0 [ 392.755533][T13637] ? lockdep_hardirqs_on+0x7d/0x110 [ 392.755563][T13637] do_fast_syscall_32+0x32/0x70 [ 392.755594][T13637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 392.755639][T13637] RIP: 0023:0xf7f58fec [ 392.755665][T13637] Code: Unable to access opcode bytes at 0xf7f58fc2. [ 392.755823][T13637] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 392.755847][T13637] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080006040 [ 392.755861][T13637] RDX: 0000000004041080 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.755873][T13637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 392.755888][T13637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.755900][T13637] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 392.755929][T13637] [ 392.873973][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 393.120266][ T5099] Bluetooth: hci1: command tx timeout [ 393.439497][T13648] __nla_validate_parse: 6 callbacks suppressed [ 393.439578][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2694'. [ 393.551679][ T12] hsr_slave_0: left promiscuous mode [ 393.553865][ T12] hsr_slave_1: left promiscuous mode [ 393.554952][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.555042][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.559581][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.559600][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.576144][ T12] veth1_macvtap: left promiscuous mode [ 393.576276][ T12] veth0_macvtap: left promiscuous mode [ 393.576511][ T12] veth1_vlan: left promiscuous mode [ 393.576595][ T12] veth0_vlan: left promiscuous mode [ 394.138130][T13677] kvm [13676]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60100000000 [ 394.309076][T13685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.309440][T13685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.406247][T13583] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.419647][T13583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 394.424530][T13583] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.439801][T13583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 394.444001][T13583] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.454584][T13583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 394.458971][T13583] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 394.476560][T13583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 394.581352][T13688] kvm [13687]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60100000000 [ 394.599263][T13583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.616998][T13583] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.632837][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.632987][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.634761][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.634850][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.947319][T13583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.947521][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2706'. [ 394.948539][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2706'. [ 394.949328][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2706'. [ 394.958349][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2706'. [ 394.972301][T13720] Cache volume key already in use (9p,syz,) [ 395.004734][T13583] veth0_vlan: entered promiscuous mode [ 395.013051][T13583] veth1_vlan: entered promiscuous mode [ 395.043320][T13583] veth0_macvtap: entered promiscuous mode [ 395.050995][T13583] veth1_macvtap: entered promiscuous mode [ 395.073812][T13583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.082286][T13583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.125332][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.125774][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.126080][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.169154][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'. [ 395.177469][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'. [ 395.177841][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'. [ 395.178100][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'. [ 395.195728][ T5099] Bluetooth: hci1: command tx timeout [ 395.405992][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.412927][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.419495][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.457763][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.458547][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2707'. [ 395.465486][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.482112][T13728] Cache volume key already in use (9p,syz,) [ 396.105208][T13743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.113473][T13743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.270224][ T5099] Bluetooth: hci1: command tx timeout [ 397.662528][T13757] syzkaller0: entered promiscuous mode [ 397.662595][T13757] syzkaller0: entered allmulticast mode [ 397.667355][T13757] tipc: Started in network mode [ 397.667373][T13757] tipc: Node identity 7228826e2812, cluster identity 4711 [ 397.667593][T13757] tipc: Enabled bearer , priority 0 [ 397.669213][T13756] tipc: Resetting bearer [ 397.685151][T13756] tipc: Disabling bearer [ 397.899449][T13761] futex_wake_op: syz.1.2714 tries to shift op by 144; fix this program [ 398.333388][T13768] overlayfs: failed to resolve './file0': -2 [ 398.560592][T13772] __nla_validate_parse: 12 callbacks suppressed [ 398.560756][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2715'. [ 398.568015][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2715'. [ 398.573494][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2715'. [ 398.578293][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2715'. [ 399.203762][T13776] netlink: zone id is out of range [ 399.204031][T13776] netlink: zone id is out of range [ 399.204408][T13776] netlink: zone id is out of range [ 399.229491][T13776] netlink: zone id is out of range [ 399.229804][T13776] netlink: zone id is out of range [ 399.229893][T13776] netlink: zone id is out of range [ 399.232578][T13776] netlink: zone id is out of range [ 399.232626][T13776] netlink: zone id is out of range [ 399.232945][T13776] netlink: zone id is out of range [ 399.233116][T13776] netlink: zone id is out of range [ 399.360281][ T5099] Bluetooth: hci1: command tx timeout [ 399.384618][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2718'. [ 399.385444][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2718'. [ 399.385759][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2718'. [ 399.386051][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2718'. [ 399.392248][T13779] 9pnet_virtio: no channels available for device syz [ 399.582170][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2722'. [ 399.592027][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2722'. [ 399.660219][ T76] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 399.690293][ T5819] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 399.960284][ T76] usb 6-1: Using ep0 maxpacket: 8 [ 399.990625][ T76] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 400.079938][ T76] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 400.079991][ T76] usb 6-1: config 0 has no interface number 0 [ 400.080135][ T76] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 400.080152][ T76] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 400.080172][ T76] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 400.080192][ T76] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 400.080216][ T76] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.088634][ T76] usb 6-1: config 0 descriptor?? [ 400.091320][ T76] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 400.091987][ T1176] IPVS: starting estimator thread 0... [ 400.120250][ T5819] usb 8-1: Using ep0 maxpacket: 8 [ 400.120849][ T5819] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 400.121752][ T5819] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 400.121802][ T5819] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.124210][ T5819] usb 8-1: config 0 descriptor?? [ 400.220262][T13797] IPVS: using max 43 ests per chain, 103200 per kthread [ 400.326181][T13781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.326615][T13781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.346549][ T5819] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 400.367577][ T1688] usb 6-1: USB disconnect, device number 69 [ 400.369962][ T1688] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 400.419910][T13800] overlayfs: missing 'lowerdir' [ 400.462050][ T5747] libceph: connect (1)[c::]:6789 error -101 [ 400.462296][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 400.559691][T13802] ceph: No mds server is up or the cluster is laggy [ 400.624459][ T5747] usb 8-1: USB disconnect, device number 65 [ 400.699373][T13816] FAULT_INJECTION: forcing a failure. [ 400.699373][T13816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.700032][T13816] CPU: 1 UID: 0 PID: 13816 Comm: syz.1.2727 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.700086][T13816] Tainted: [L]=SOFTLOCKUP [ 400.700093][T13816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 400.700104][T13816] Call Trace: [ 400.700110][T13816] [ 400.700118][T13816] dump_stack_lvl+0x100/0x190 [ 400.700146][T13816] should_fail_ex.cold+0x5/0xa [ 400.700169][T13816] _copy_from_user+0x2e/0xd0 [ 400.700190][T13816] do_ip_vs_set_ctl+0x53c/0xc90 [ 400.700220][T13816] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 400.700243][T13816] ? rcu_is_watching+0x13/0xc0 [ 400.700267][T13816] ? find_held_lock+0x2b/0x80 [ 400.700283][T13816] ? nf_sockopt_find.isra.0+0x222/0x290 [ 400.700303][T13816] ? nf_sockopt_find.isra.0+0x222/0x290 [ 400.700332][T13816] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 400.700369][T13816] ? nf_setsockopt+0x8d/0xf0 [ 400.700386][T13816] nf_setsockopt+0x8d/0xf0 [ 400.700410][T13816] ip_setsockopt+0xcb/0xf0 [ 400.700438][T13816] tcp_setsockopt+0xa7/0x100 [ 400.700459][T13816] smc_setsockopt+0x1b6/0xa40 [ 400.700474][T13816] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 400.700493][T13816] ? __pfx_smc_setsockopt+0x10/0x10 [ 400.700506][T13816] ? aa_sock_opt_perm+0x114/0x1e0 [ 400.700520][T13816] ? __pfx_smc_setsockopt+0x10/0x10 [ 400.700533][T13816] do_sock_setsockopt+0xf3/0x1d0 [ 400.700551][T13816] __sys_setsockopt+0x119/0x190 [ 400.700567][T13816] __ia32_sys_setsockopt+0xbc/0x160 [ 400.700580][T13816] ? __do_fast_syscall_32+0xb3/0x8b0 [ 400.700596][T13816] ? lockdep_hardirqs_on+0x7d/0x110 [ 400.700610][T13816] __do_fast_syscall_32+0x13a/0x8b0 [ 400.700625][T13816] ? lockdep_hardirqs_on+0x7d/0x110 [ 400.700645][T13816] do_fast_syscall_32+0x32/0x70 [ 400.700676][T13816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 400.700698][T13816] RIP: 0023:0xf7fa3fec [ 400.700714][T13816] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 400.700719][T13816] RSP: 002b:00000000f542450c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 400.700730][T13816] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 400.700737][T13816] RDX: 0000000000000482 RSI: 0000000080000000 RDI: 000000000000002c [ 400.700744][T13816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 400.700751][T13816] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 400.700757][T13816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 400.700772][T13816] [ 400.865790][ T5099] Bluetooth: hci4: command 0x0406 tx timeout [ 401.242658][T13828] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 401.751804][ T76] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 401.776827][T13844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.777429][T13844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.913365][ T76] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 401.914205][ T76] usb 8-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 401.914220][ T76] usb 8-1: config 0 interface 0 has no altsetting 0 [ 401.915810][ T76] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 401.915823][ T76] usb 8-1: Product: syz [ 401.915831][ T76] usb 8-1: Manufacturer: syz [ 401.915839][ T76] usb 8-1: SerialNumber: syz [ 401.917437][ T76] usb 8-1: config 0 descriptor?? [ 401.920346][T13836] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 401.923144][ T76] usb 8-1: selecting invalid altsetting 0 [ 402.130496][ T5747] usb 8-1: USB disconnect, device number 66 [ 402.280161][ T1688] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 402.399964][T13856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.404220][T13856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.433950][ T1688] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 402.442650][ T1688] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 402.442694][ T1688] usb 7-1: Product: syz [ 402.442788][ T1688] usb 7-1: Manufacturer: syz [ 402.442812][ T1688] usb 7-1: SerialNumber: syz [ 402.447469][ T1688] usb 7-1: config 0 descriptor?? [ 402.453476][ T1688] ch341 7-1:0.0: ch341-uart converter detected [ 402.468469][T13860] netlink: 'syz.1.2737': attribute type 4 has an invalid length. [ 402.752110][T13869] FAULT_INJECTION: forcing a failure. [ 402.752110][T13869] name failslab, interval 1, probability 0, space 0, times 0 [ 402.752180][T13869] CPU: 0 UID: 0 PID: 13869 Comm: syz.3.2741 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.752208][T13869] Tainted: [L]=SOFTLOCKUP [ 402.752216][T13869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.752227][T13869] Call Trace: [ 402.752234][T13869] [ 402.752242][T13869] dump_stack_lvl+0x100/0x190 [ 402.752270][T13869] should_fail_ex.cold+0x5/0xa [ 402.752292][T13869] should_failslab+0xc2/0x120 [ 402.752314][T13869] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 402.752335][T13869] ? __alloc_skb+0x5b7/0x710 [ 402.752354][T13869] ? __alloc_skb+0x140/0x710 [ 402.752378][T13869] __alloc_skb+0x140/0x710 [ 402.752396][T13869] ? __alloc_skb+0x5b7/0x710 [ 402.752414][T13869] ? __pfx___alloc_skb+0x10/0x10 [ 402.752441][T13869] netlink_alloc_large_skb+0x69/0x150 [ 402.752464][T13869] netlink_sendmsg+0x680/0xda0 [ 402.752488][T13869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.752510][T13869] ? apparmor_socket_sendmsg+0x165/0x280 [ 402.752535][T13869] ____sys_sendmsg+0xa4d/0xbe0 [ 402.752560][T13869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.752581][T13869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.752633][T13869] ___sys_sendmsg+0x190/0x1e0 [ 402.752662][T13869] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.752701][T13869] ? find_held_lock+0x2b/0x80 [ 402.752737][T13869] __sys_sendmsg+0x160/0x210 [ 402.752759][T13869] ? __pfx___sys_sendmsg+0x10/0x10 [ 402.752788][T13869] ? __pfx_ksys_write+0x10/0x10 [ 402.752818][T13869] __do_fast_syscall_32+0x13a/0x8b0 [ 402.752843][T13869] ? lockdep_hardirqs_on+0x7d/0x110 [ 402.752866][T13869] do_fast_syscall_32+0x32/0x70 [ 402.752892][T13869] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.752914][T13869] RIP: 0023:0xf7f58fec [ 402.752934][T13869] Code: Unable to access opcode bytes at 0xf7f58fc2. [ 402.752943][T13869] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 402.752961][T13869] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 402.752972][T13869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 402.752983][T13869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 402.752994][T13869] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 402.753005][T13869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.753030][T13869] [ 402.914943][T13872] 9pnet_virtio: no channels available for device syz [ 403.510922][ T1688] usb 7-1: failed to receive control message: -110 [ 403.514017][ T1688] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 404.070384][ T5531] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 404.132082][ T5819] usb 7-1: USB disconnect, device number 75 [ 404.133521][ T5819] ch341 7-1:0.0: device disconnected [ 404.221233][ T5531] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 404.223620][ T5531] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 404.223637][ T5531] usb 8-1: Product: syz [ 404.223645][ T5531] usb 8-1: Manufacturer: syz [ 404.223652][ T5531] usb 8-1: SerialNumber: syz [ 404.224944][ T5531] usb 8-1: config 0 descriptor?? [ 404.226404][ T5531] ch341 8-1:0.0: ch341-uart converter detected [ 404.444394][T13878] 9pnet_virtio: no channels available for device syz [ 404.453850][ T5531] usb 8-1: failed to receive control message: -71 [ 404.453901][ T5531] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 404.454979][ T5531] usb 8-1: USB disconnect, device number 67 [ 404.455680][ T5531] ch341 8-1:0.0: device disconnected [ 404.600243][ T5889] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 404.751865][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 404.752502][ T5889] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 404.753397][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 404.753422][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.755833][ T5889] usb 6-1: config 0 descriptor?? [ 404.969838][ T5889] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 405.133939][T13888] comedi comedi0: comedi_config --init_data is deprecated [ 405.424471][T13880] __nla_validate_parse: 21 callbacks suppressed [ 405.425340][T13880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2745'. [ 405.574945][T13894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2749'. [ 405.617045][ T5531] usb 6-1: USB disconnect, device number 70 [ 405.662003][T13898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.665818][T13898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.417247][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2755'. [ 407.426228][T13926] ipip0: entered allmulticast mode [ 407.536001][ T854] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 407.680219][ T854] usb 6-1: Using ep0 maxpacket: 8 [ 407.681088][ T854] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 407.682230][ T854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 407.682271][ T854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.684648][ T854] usb 6-1: config 0 descriptor?? [ 407.903661][ T854] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 407.923378][T13924] syz.3.2755 (13924) used greatest stack depth: 16632 bytes left [ 408.115708][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2754'. [ 408.177083][ T35] usb 6-1: USB disconnect, device number 71 [ 408.300182][ T5747] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 408.381989][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2759'. [ 408.460221][ T5747] usb 8-1: Using ep0 maxpacket: 8 [ 408.461056][ T5747] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 408.462105][ T5747] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 408.462141][ T5747] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.467357][ T5747] usb 8-1: config 0 descriptor?? [ 408.677083][ T5747] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 408.825229][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'. [ 408.826462][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'. [ 408.826725][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'. [ 408.826919][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'. [ 408.986531][T13935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2760'. [ 409.040162][ T35] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 409.160889][ T58] usb 8-1: USB disconnect, device number 68 [ 409.312324][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 409.325355][ T35] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 409.390059][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.390154][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.636546][ T35] usb 7-1: config 0 descriptor?? [ 409.759189][T13968] lo speed is unknown, defaulting to 1000 [ 409.853854][ T35] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 410.120005][ T58] usb 7-1: USB disconnect, device number 76 [ 410.280258][ T35] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 410.390230][ T1688] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 410.430768][ T35] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 410.433306][ T35] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 410.433322][ T35] usb 8-1: Product: syz [ 410.433331][ T35] usb 8-1: Manufacturer: syz [ 410.433339][ T35] usb 8-1: SerialNumber: syz [ 410.434999][ T35] usb 8-1: config 0 descriptor?? [ 410.437303][ T35] ch341 8-1:0.0: ch341-uart converter detected [ 410.551093][ T1688] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 410.553618][ T1688] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 410.553682][ T1688] usb 6-1: Product: syz [ 410.553691][ T1688] usb 6-1: Manufacturer: syz [ 410.553698][ T1688] usb 6-1: SerialNumber: syz [ 410.558574][ T1688] usb 6-1: config 0 descriptor?? [ 410.560811][ T1688] ch341 6-1:0.0: ch341-uart converter detected [ 410.661509][T13984] FAULT_INJECTION: forcing a failure. [ 410.661509][T13984] name failslab, interval 1, probability 0, space 0, times 0 [ 410.661574][T13984] CPU: 0 UID: 0 PID: 13984 Comm: syz.2.2770 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.661593][T13984] Tainted: [L]=SOFTLOCKUP [ 410.661598][T13984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.661605][T13984] Call Trace: [ 410.661610][T13984] [ 410.661615][T13984] dump_stack_lvl+0x100/0x190 [ 410.661636][T13984] should_fail_ex.cold+0x5/0xa [ 410.661669][T13984] should_failslab+0xc2/0x120 [ 410.661686][T13984] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 410.661699][T13984] ? __alloc_skb+0x5b7/0x710 [ 410.661713][T13984] ? __alloc_skb+0x140/0x710 [ 410.661727][T13984] __alloc_skb+0x140/0x710 [ 410.661739][T13984] ? __alloc_skb+0x5b7/0x710 [ 410.661751][T13984] ? __pfx___alloc_skb+0x10/0x10 [ 410.661768][T13984] netlink_alloc_large_skb+0x69/0x150 [ 410.661783][T13984] netlink_sendmsg+0x680/0xda0 [ 410.661797][T13984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.661810][T13984] ? apparmor_socket_sendmsg+0x165/0x280 [ 410.661828][T13984] ____sys_sendmsg+0xa4d/0xbe0 [ 410.661844][T13984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.661857][T13984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.661881][T13984] ___sys_sendmsg+0x190/0x1e0 [ 410.661899][T13984] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.661926][T13984] ? find_held_lock+0x2b/0x80 [ 410.661991][T13984] __sys_sendmsg+0x160/0x210 [ 410.662027][T13984] ? __pfx___sys_sendmsg+0x10/0x10 [ 410.662054][T13984] ? __pfx_ksys_write+0x10/0x10 [ 410.662079][T13984] __do_fast_syscall_32+0x13a/0x8b0 [ 410.662104][T13984] ? lockdep_hardirqs_on+0x7d/0x110 [ 410.662134][T13984] do_fast_syscall_32+0x32/0x70 [ 410.662161][T13984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 410.662182][T13984] RIP: 0023:0xf7f55fec [ 410.662197][T13984] Code: Unable to access opcode bytes at 0xf7f55fc2. [ 410.662202][T13984] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 410.662214][T13984] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 410.662221][T13984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 410.662227][T13984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 410.662234][T13984] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 410.662240][T13984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 410.662254][T13984] [ 410.715598][ T43] audit: type=1326 audit(1788699137.203:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.2.2771" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 410.715630][ T43] audit: type=1326 audit(1788699137.203:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.2.2771" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 410.723897][ T43] audit: type=1326 audit(1788699137.203:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.2.2771" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 410.723941][ T43] audit: type=1326 audit(1788699137.203:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.2.2771" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 410.723975][ T43] audit: type=1326 audit(1788699137.203:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.2.2771" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 410.727204][ T43] audit: type=1326 audit(1788699137.203:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.2.2771" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 410.727247][ T43] audit: type=1326 audit(1788699137.203:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.2.2771" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 410.727787][ T43] audit: type=1326 audit(1788699137.203:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.2.2771" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 410.729940][ T43] audit: type=1326 audit(1788699137.203:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.2.2771" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 410.730861][ T43] audit: type=1326 audit(1788699137.213:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13985 comm="syz.2.2771" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f55fec code=0x7ffc0000 [ 410.778374][T13981] 9pnet_virtio: no channels available for device syz [ 410.827829][ T1688] usb 6-1: failed to receive control message: -71 [ 410.827870][ T1688] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71 [ 410.999188][ T1688] usb 6-1: USB disconnect, device number 72 [ 411.000546][ T1688] ch341 6-1:0.0: device disconnected [ 411.046646][ T35] usb 8-1: failed to receive control message: -71 [ 411.046717][ T35] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 411.052457][ T35] usb 8-1: USB disconnect, device number 69 [ 411.054867][ T35] ch341 8-1:0.0: device disconnected [ 411.462288][T14000] FAULT_INJECTION: forcing a failure. [ 411.462288][T14000] name failslab, interval 1, probability 0, space 0, times 0 [ 411.462338][T14000] CPU: 3 UID: 0 PID: 14000 Comm: syz.1.2774 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.462365][T14000] Tainted: [L]=SOFTLOCKUP [ 411.462370][T14000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.462378][T14000] Call Trace: [ 411.462382][T14000] [ 411.462387][T14000] dump_stack_lvl+0x100/0x190 [ 411.462406][T14000] should_fail_ex.cold+0x5/0xa [ 411.462422][T14000] should_failslab+0xc2/0x120 [ 411.462437][T14000] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 411.462450][T14000] ? __alloc_skb+0x5b7/0x710 [ 411.462463][T14000] ? __alloc_skb+0x140/0x710 [ 411.462477][T14000] __alloc_skb+0x140/0x710 [ 411.462489][T14000] ? __alloc_skb+0x5b7/0x710 [ 411.462501][T14000] ? __pfx___alloc_skb+0x10/0x10 [ 411.462517][T14000] netlink_alloc_large_skb+0x69/0x150 [ 411.462532][T14000] netlink_sendmsg+0x680/0xda0 [ 411.462546][T14000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.462559][T14000] ? apparmor_socket_sendmsg+0x165/0x280 [ 411.462576][T14000] ____sys_sendmsg+0xa4d/0xbe0 [ 411.462592][T14000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.462605][T14000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.462628][T14000] ___sys_sendmsg+0x190/0x1e0 [ 411.462651][T14000] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.462675][T14000] ? find_held_lock+0x2b/0x80 [ 411.462696][T14000] __sys_sendmsg+0x160/0x210 [ 411.462711][T14000] ? __pfx___sys_sendmsg+0x10/0x10 [ 411.462728][T14000] ? __pfx_ksys_write+0x10/0x10 [ 411.462743][T14000] __do_fast_syscall_32+0x13a/0x8b0 [ 411.462760][T14000] ? lockdep_hardirqs_on+0x7d/0x110 [ 411.462776][T14000] do_fast_syscall_32+0x32/0x70 [ 411.462792][T14000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.462806][T14000] RIP: 0023:0xf7fa3fec [ 411.462819][T14000] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 411.462824][T14000] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 411.462836][T14000] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 411.462843][T14000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.462849][T14000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 411.462855][T14000] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 411.462862][T14000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.462876][T14000] [ 411.869367][T14008] lo speed is unknown, defaulting to 1000 [ 412.097849][T14008] __nla_validate_parse: 2 callbacks suppressed [ 412.100113][T14008] netlink: 768 bytes leftover after parsing attributes in process `syz.2.2776'. [ 412.238056][T14019] netlink: 'syz.3.2779': attribute type 1 has an invalid length. [ 412.268230][T14019] bond1: entered promiscuous mode [ 412.268606][T14019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.675059][T14032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.677232][T14032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.360298][ T7150] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 413.832821][ T7150] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 413.974257][ T7150] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 413.974299][ T7150] usb 8-1: Product: syz [ 413.974334][ T7150] usb 8-1: Manufacturer: syz [ 413.974343][ T7150] usb 8-1: SerialNumber: syz [ 413.975774][ T7150] usb 8-1: config 0 descriptor?? [ 413.982633][ T7150] ch341 8-1:0.0: ch341-uart converter detected [ 414.084940][T11855] bridge_slave_1: left allmulticast mode [ 414.085001][T11855] bridge_slave_1: left promiscuous mode [ 414.085399][T11855] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.091506][T11855] bridge_slave_0: left allmulticast mode [ 414.091527][T11855] bridge_slave_0: left promiscuous mode [ 414.091661][T11855] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.108430][T14067] FAULT_INJECTION: forcing a failure. [ 414.108430][T14067] name failslab, interval 1, probability 0, space 0, times 0 [ 414.108492][T14067] CPU: 2 UID: 0 PID: 14067 Comm: syz.2.2790 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.108522][T14067] Tainted: [L]=SOFTLOCKUP [ 414.108528][T14067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 414.108537][T14067] Call Trace: [ 414.108543][T14067] [ 414.108549][T14067] dump_stack_lvl+0x100/0x190 [ 414.108569][T14067] should_fail_ex.cold+0x5/0xa [ 414.108585][T14067] should_failslab+0xc2/0x120 [ 414.108604][T14067] __kmalloc_cache_node_noprof+0x94/0x720 [ 414.108620][T14067] ? __get_vm_area_node+0x124/0x350 [ 414.108638][T14067] __get_vm_area_node+0x124/0x350 [ 414.108655][T14067] __vmalloc_node_range_noprof+0x268/0x1420 [ 414.108672][T14067] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 414.108688][T14067] ? process_measurement+0x4c8/0x2350 [ 414.108702][T14067] ? down_write+0x146/0x1f0 [ 414.108721][T14067] ? up_write+0x2dc/0x5b0 [ 414.108740][T14067] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 414.108759][T14067] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 414.108775][T14067] ? __lock_acquire+0x4c5/0x1ec0 [ 414.108796][T14067] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 414.108811][T14067] __vmalloc_node_noprof+0xad/0xf0 [ 414.108827][T14067] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 414.108844][T14067] __vmalloc_noprof+0xa3/0x120 [ 414.108860][T14067] ? __pfx___vmalloc_noprof+0x10/0x10 [ 414.108875][T14067] ? lock_acquire+0x1d1/0x380 [ 414.108890][T14067] ? is_bpf_text_address+0x25/0x1a0 [ 414.108907][T14067] ? rcu_is_watching+0x13/0xc0 [ 414.108919][T14067] ? apparmor_capable+0x1d7/0x4d0 [ 414.108936][T14067] bpf_prog_alloc_no_stats+0x58/0x690 [ 414.108951][T14067] ? security_capable+0x80/0x260 [ 414.108966][T14067] bpf_prog_alloc+0x3b/0x200 [ 414.108980][T14067] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 414.108998][T14067] bpf_prog_load+0x49e/0x2a80 [ 414.109047][T14067] ? __lock_acquire+0x4c5/0x1ec0 [ 414.109067][T14067] ? __pfx_bpf_prog_load+0x10/0x10 [ 414.109096][T14067] __sys_bpf+0x1f46/0x4a30 [ 414.109113][T14067] ? __pfx___sys_bpf+0x10/0x10 [ 414.109124][T14067] ? lock_acquire+0x1d1/0x380 [ 414.109139][T14067] ? get_pid_task+0x2a/0x250 [ 414.109152][T14067] ? find_held_lock+0x2b/0x80 [ 414.109164][T14067] ? get_pid_task+0xfc/0x250 [ 414.109175][T14067] ? get_pid_task+0xfc/0x250 [ 414.109191][T14067] ? proc_fail_nth_write+0x9f/0x220 [ 414.109205][T14067] ? find_held_lock+0x2b/0x80 [ 414.109220][T14067] ? rcu_read_lock_any_held+0x6a/0x90 [ 414.109233][T14067] ? find_held_lock+0x2b/0x80 [ 414.109245][T14067] ? ksys_write+0x190/0x250 [ 414.109257][T14067] ? ksys_write+0x190/0x250 [ 414.109269][T14067] ? lock_acquire+0x1d1/0x380 [ 414.109295][T14067] ? fput+0x7c/0x100 [ 414.109311][T14067] ? __ia32_sys_bpf+0xcc/0x170 [ 414.109322][T14067] __ia32_sys_bpf+0xcc/0x170 [ 414.109335][T14067] ? __do_fast_syscall_32+0xb3/0x8b0 [ 414.109354][T14067] __do_fast_syscall_32+0x13a/0x8b0 [ 414.109371][T14067] ? lockdep_hardirqs_on+0x7d/0x110 [ 414.109388][T14067] do_fast_syscall_32+0x32/0x70 [ 414.109405][T14067] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 414.109421][T14067] RIP: 0023:0xf7f55fec [ 414.109435][T14067] Code: Unable to access opcode bytes at 0xf7f55fc2. [ 414.109441][T14067] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 414.109454][T14067] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000880 [ 414.109461][T14067] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 414.109468][T14067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 414.109476][T14067] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 414.109483][T14067] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 414.109505][T14067] [ 414.109707][T14067] syz.2.2790: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 414.109836][T14067] CPU: 2 UID: 0 PID: 14067 Comm: syz.2.2790 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.109861][T14067] Tainted: [L]=SOFTLOCKUP [ 414.109868][T14067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 414.109877][T14067] Call Trace: [ 414.109884][T14067] [ 414.109890][T14067] dump_stack_lvl+0x100/0x190 [ 414.109908][T14067] warn_alloc.cold+0x9e/0xb2 [ 414.109922][T14067] ? __pfx_warn_alloc+0x10/0x10 [ 414.109941][T14067] ? __kasan_kmalloc+0x8a/0xb0 [ 414.109960][T14067] ? __get_vm_area_node+0x22b/0x350 [ 414.109978][T14067] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 414.109994][T14067] ? process_measurement+0x4c8/0x2350 [ 414.110009][T14067] ? down_write+0x146/0x1f0 [ 414.110028][T14067] ? up_write+0x2dc/0x5b0 [ 414.110073][T14067] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 414.110093][T14067] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 414.110110][T14067] ? __lock_acquire+0x4c5/0x1ec0 [ 414.110130][T14067] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 414.110146][T14067] __vmalloc_node_noprof+0xad/0xf0 [ 414.110162][T14067] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 414.110179][T14067] __vmalloc_noprof+0xa3/0x120 [ 414.110195][T14067] ? __pfx___vmalloc_noprof+0x10/0x10 [ 414.110209][T14067] ? lock_acquire+0x1d1/0x380 [ 414.110225][T14067] ? is_bpf_text_address+0x25/0x1a0 [ 414.110241][T14067] ? rcu_is_watching+0x13/0xc0 [ 414.110253][T14067] ? apparmor_capable+0x1d7/0x4d0 [ 414.110270][T14067] bpf_prog_alloc_no_stats+0x58/0x690 [ 414.110285][T14067] ? security_capable+0x80/0x260 [ 414.110299][T14067] bpf_prog_alloc+0x3b/0x200 [ 414.110313][T14067] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 414.110331][T14067] bpf_prog_load+0x49e/0x2a80 [ 414.110347][T14067] ? __lock_acquire+0x4c5/0x1ec0 [ 414.110366][T14067] ? __pfx_bpf_prog_load+0x10/0x10 [ 414.110395][T14067] __sys_bpf+0x1f46/0x4a30 [ 414.110411][T14067] ? __pfx___sys_bpf+0x10/0x10 [ 414.110422][T14067] ? lock_acquire+0x1d1/0x380 [ 414.110437][T14067] ? get_pid_task+0x2a/0x250 [ 414.110449][T14067] ? find_held_lock+0x2b/0x80 [ 414.110461][T14067] ? get_pid_task+0xfc/0x250 [ 414.110472][T14067] ? get_pid_task+0xfc/0x250 [ 414.110488][T14067] ? proc_fail_nth_write+0x9f/0x220 [ 414.110500][T14067] ? find_held_lock+0x2b/0x80 [ 414.110516][T14067] ? rcu_read_lock_any_held+0x6a/0x90 [ 414.110529][T14067] ? find_held_lock+0x2b/0x80 [ 414.110540][T14067] ? ksys_write+0x190/0x250 [ 414.110552][T14067] ? ksys_write+0x190/0x250 [ 414.110563][T14067] ? lock_acquire+0x1d1/0x380 [ 414.110589][T14067] ? fput+0x7c/0x100 [ 414.110605][T14067] ? __ia32_sys_bpf+0xcc/0x170 [ 414.110616][T14067] __ia32_sys_bpf+0xcc/0x170 [ 414.110629][T14067] ? __do_fast_syscall_32+0xb3/0x8b0 [ 414.110647][T14067] __do_fast_syscall_32+0x13a/0x8b0 [ 414.110663][T14067] ? lockdep_hardirqs_on+0x7d/0x110 [ 414.110696][T14067] do_fast_syscall_32+0x32/0x70 [ 414.110769][T14067] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 414.110788][T14067] RIP: 0023:0xf7f55fec [ 414.110804][T14067] Code: Unable to access opcode bytes at 0xf7f55fc2. [ 414.110810][T14067] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 414.110822][T14067] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000880 [ 414.110831][T14067] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 414.110838][T14067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 414.110845][T14067] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 414.110853][T14067] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 414.110868][T14067] [ 414.116689][T14067] Mem-Info: [ 414.116699][T14067] active_anon:6775 inactive_anon:49 isolated_anon:0 [ 414.116699][T14067] active_file:252 inactive_file:39979 isolated_file:0 [ 414.116699][T14067] unevictable:1000 dirty:538 writeback:0 [ 414.116699][T14067] slab_reclaimable:6482 slab_unreclaimable:68503 [ 414.116699][T14067] mapped:24646 shmem:1565 pagetables:1163 [ 414.116699][T14067] sec_pagetables:300 bounce:0 [ 414.116699][T14067] kernel_misc_reclaimable:0 [ 414.116699][T14067] free:38975 free_pcp:10223 free_cma:0 [ 414.116726][T14067] Node 0 active_anon:160kB inactive_anon:20kB active_file:64kB inactive_file:80kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9280kB pagetables:1460kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 414.116753][T14067] Node 1 active_anon:26940kB inactive_anon:176kB active_file:944kB inactive_file:159836kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:98556kB dirty:2152kB writeback:0kB shmem:4260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4968kB pagetables:3192kB sec_pagetables:88kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 414.116780][T14067] Node 0 DMA free:2056kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:680kB local_pcp:228kB free_cma:0kB [ 414.116810][T14067] lowmem_reserve[]: 0 277 277 277 277 [ 414.116828][T14067] Node 0 DMA32 free:15752kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:160kB inactive_anon:20kB active_file:64kB inactive_file:80kB unevictable:2000kB writepending:0kB zspages:0kB present:1032196kB managed:284620kB mlocked:0kB bounce:0kB free_pcp:9824kB local_pcp:2152kB free_cma:0kB [ 414.116858][T14067] lowmem_reserve[]: 0 0 0 0 0 [ 414.116876][T14067] Node 1 DMA32 free:138092kB boost:6144kB min:53284kB low:65068kB high:76852kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26940kB inactive_anon:176kB active_file:944kB inactive_file:159836kB unevictable:2000kB writepending:2152kB zspages:1852kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:30388kB local_pcp:6276kB free_cma:0kB [ 414.116906][T14067] lowmem_reserve[]: 0 0 0 0 0 [ 414.116923][T14067] Node 0 DMA: 56*4kB (UM) 5*8kB (UM) 8*16kB (UM) 10*32kB (UM) 3*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2056kB [ 414.116994][T14067] Node 0 DMA32: 502*4kB (UME) 104*8kB (UE) 53*16kB (UE) 25*32kB (ME) 24*64kB (ME) 10*128kB (ME) 3*256kB (M) 7*512kB (M) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 15752kB [ 414.117096][T14067] Node 1 DMA32: 464*4kB (UME) 387*8kB (UME) 258*16kB (UME) 180*32kB (UME) 199*64kB (UME) 123*128kB (UME) 88*256kB (UME) 43*512kB (UME) 9*1024kB (UM) 6*2048kB (UM) 7*4096kB (UM) = 138040kB [ 414.117179][T14067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 414.117188][T14067] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 414.117196][T14067] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 414.117204][T14067] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 414.117212][T14067] 41961 total pagecache pages [ 414.117217][T14067] 168 pages in swap cache [ 414.117220][T14067] Free swap = 122020kB [ 414.117225][T14067] Total swap = 124996kB [ 414.117229][T14067] 524155 pages RAM [ 414.117232][T14067] 0 pages HighMem/MovableOnly [ 414.117236][T14067] 212108 pages reserved [ 414.117240][T14067] 0 pages cma reserved [ 414.288472][T14075] gadgetfs: bound to dummy_udc driver [ 414.294390][ T7150] usb 8-1: failed to receive control message: -71 [ 414.294421][ T7150] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 414.306525][ T7150] usb 8-1: USB disconnect, device number 70 [ 414.317285][ T7150] ch341 8-1:0.0: device disconnected [ 414.368847][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2791'. [ 414.450792][T14082] 9pnet_virtio: no channels available for device syz [ 414.550227][ T25] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 414.550448][ C2] gadgetfs: connected [ 414.551003][ T25] gadgetfs: disconnected [ 414.666790][T14084] 9pnet_virtio: no channels available for device syz [ 414.710354][ C2] gadgetfs: connected [ 414.713650][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 414.714182][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.807435][ C2] gadgetfs: configuration #1 [ 414.950667][ T25] usbtest 6-1:1.0: Linux gadget zero [ 414.950715][ T25] usbtest 6-1:1.0: full-speed {control in/out bulk-in bulk-out} tests (+alt) [ 414.979391][T14068] gadgetfs: suspended from state 3 [ 414.982794][T14068] gadgetfs: disconnected [ 415.607317][ T25] usb 6-1: USB disconnect, device number 73 [ 415.668104][T11855] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 415.695434][T11855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.703527][T11855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.707452][T11855] bond0 (unregistering): Released all slaves [ 415.716876][T11855] bond1 (unregistering): Released all slaves [ 415.738288][T11855] bond2 (unregistering): Released all slaves [ 415.762766][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2794'. [ 415.763306][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2788'. [ 415.818233][T11855] tipc: Left network mode [ 415.994354][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2796'. [ 416.001159][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2796'. [ 416.001491][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2796'. [ 416.001811][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2796'. [ 416.067845][T11855] hsr_slave_0: left promiscuous mode [ 416.073066][T11855] hsr_slave_1: left promiscuous mode [ 416.073874][T11855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.073891][T11855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.076122][T11855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.076144][T11855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.094947][T11855] veth1_macvtap: left promiscuous mode [ 416.095042][T11855] veth0_macvtap: left promiscuous mode [ 416.095121][T11855] veth1_vlan: left promiscuous mode [ 416.095166][T11855] veth0_vlan: left promiscuous mode [ 416.529164][T11855] team0 (unregistering): Port device team_slave_1 removed [ 416.538865][T11855] team0 (unregistering): Port device team_slave_0 removed [ 416.564249][T14112] netlink: 'syz.2.2801': attribute type 10 has an invalid length. [ 416.670195][T14112] team0: Port device dummy0 added [ 416.884335][T14127] FAULT_INJECTION: forcing a failure. [ 416.884335][T14127] name failslab, interval 1, probability 0, space 0, times 0 [ 416.892055][T14127] CPU: 3 UID: 0 PID: 14127 Comm: syz.2.2802 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.892105][T14127] Tainted: [L]=SOFTLOCKUP [ 416.892113][T14127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 416.892124][T14127] Call Trace: [ 416.892131][T14127] [ 416.892139][T14127] dump_stack_lvl+0x100/0x190 [ 416.892170][T14127] should_fail_ex.cold+0x5/0xa [ 416.892192][T14127] should_failslab+0xc2/0x120 [ 416.892216][T14127] __kmalloc_cache_noprof+0x91/0x6d0 [ 416.892244][T14127] ? __local_bh_enable_ip+0xa5/0x120 [ 416.892272][T14127] ? l2tp_tunnel_get+0x20c/0x490 [ 416.892291][T14127] ? l2tp_tunnel_create+0x96/0x460 [ 416.892312][T14127] l2tp_tunnel_create+0x96/0x460 [ 416.892333][T14127] pppol2tp_tunnel_get.constprop.0+0x358/0x540 [ 416.892360][T14127] ? __pfx_pppol2tp_tunnel_get.constprop.0+0x10/0x10 [ 416.892394][T14127] ? __lock_acquire+0x4c5/0x1ec0 [ 416.892419][T14127] pppol2tp_connect+0xaf0/0x1c20 [ 416.892445][T14127] ? __pfx_pppol2tp_connect+0x10/0x10 [ 416.892477][T14127] ? apparmor_socket_connect+0x116/0x1f0 [ 416.892504][T14127] __sys_connect_file+0x146/0x1a0 [ 416.892528][T14127] __sys_connect+0x141/0x170 [ 416.892548][T14127] ? __pfx___sys_connect+0x10/0x10 [ 416.892565][T14127] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 416.892601][T14127] ? ksys_write+0x1ac/0x250 [ 416.892621][T14127] ? __pfx_ksys_write+0x10/0x10 [ 416.892641][T14127] __ia32_sys_connect+0x71/0xb0 [ 416.892661][T14127] ? lockdep_hardirqs_on+0x7d/0x110 [ 416.892684][T14127] __do_fast_syscall_32+0x13a/0x8b0 [ 416.892709][T14127] ? lockdep_hardirqs_on+0x7d/0x110 [ 416.892734][T14127] do_fast_syscall_32+0x32/0x70 [ 416.892759][T14127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 416.892782][T14127] RIP: 0023:0xf7f55fec [ 416.892802][T14127] Code: Unable to access opcode bytes at 0xf7f55fc2. [ 416.892810][T14127] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 416.892828][T14127] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 416.892840][T14127] RDX: 0000000000000032 RSI: 0000000000000000 RDI: 0000000000000000 [ 416.892851][T14127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 416.892862][T14127] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 416.892873][T14127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 416.892896][T14127] qemu-system-x86_64: vtd_irte_get: detected non-present IRTE (index=15, high=0x0, low=0x0) [ 417.225692][T14134] ------------[ cut here ]------------ [ 417.225737][T14134] remove_proc_entry: removing non-empty directory 'irq/20', leaking at least 'comedi_parport' [ 417.225768][T14134] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#2: syz.2.2804/14134 [ 417.235860][T14134] Modules linked in: [ 417.238627][T14134] CPU: 2 UID: 0 PID: 14134 Comm: syz.2.2804 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.242422][T14134] Tainted: [L]=SOFTLOCKUP [ 417.243823][T14134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 417.247094][T14134] RIP: 0010:remove_proc_entry+0x4f5/0x610 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 417.249015][T14134] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 69 2b 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 66 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 fc 04 4b ff 48 8d 7d 18 48 b8 00 [ 417.256912][T14134] RSP: 0000:ffffc90003e4f6a0 EFLAGS: 00010246 [ 417.259045][T14134] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88805fca8adc [ 417.262141][T14134] RDX: ffff88801d3ee5dc RSI: ffffffff8c0b6640 RDI: ffffffff914b7280 [ 417.264693][T14134] RBP: ffff88805fca8ab8 R08: ffff88805fca80dc R09: ffffed100bf95143 [ 417.267485][T14134] R10: ffff88805fca8a1b R11: 0000000000000000 R12: ffff88805fca8a00 [ 417.270866][T14134] R13: ffff88801d3ee500 R14: ffff88805fca80b8 R15: dffffc0000000000 [ 417.273598][T14134] FS: 0000000000000000(0000) GS:ffff888096b63000(0063) knlGS:00000000f5416b40 [ 417.276485][T14134] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 417.278609][T14134] CR2: 00000000f53f5da4 CR3: 000000006a266000 CR4: 0000000000352ef0 [ 417.281392][T14134] Call Trace: [ 417.282559][T14134] [ 417.283626][T14134] ? __pfx_remove_proc_entry+0x10/0x10 [ 417.285666][T14134] ? mtree_load+0x3a4/0xb50 [ 417.287642][T14134] ? __pfx_mtree_load+0x10/0x10 [ 417.290010][T14134] ? rcu_is_watching+0x13/0xc0 [ 417.292693][T14134] unregister_irq_proc+0x206/0x2a0 [ 417.295799][T14134] ? __pfx_unregister_irq_proc+0x10/0x10 [ 417.298466][T14134] free_desc+0x89/0x330 [ 417.300771][T14134] ? __pfx_free_desc+0x10/0x10 [ 417.303021][T14134] ? kasan_quarantine_put+0x104/0x240 [ 417.305315][T14134] ? lockdep_hardirqs_on+0x7d/0x110 [ 417.307480][T14134] ? irq_domain_free_irqs+0x3d0/0x5c0 [ 417.309761][T14134] irq_free_descs+0x84/0xc0 [ 417.312015][T14134] irq_domain_free_irqs+0x46a/0x5c0 [ 417.314415][T14134] mp_unmap_irq+0xf8/0x130 [ 417.316708][T14134] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 417.321625][T14134] acpi_unregister_gsi_ioapic+0x40/0x60 [ 417.324028][T14134] acpi_unregister_gsi+0x25/0x40 [ 417.326105][T14134] acpi_pci_irq_disable+0x275/0x360 [ 417.329461][T14134] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 417.331983][T14134] pcibios_disable_device+0x89/0xb0 [ 417.334152][T14134] do_pci_disable_device+0x9f/0x100 [ 417.336262][T14134] ? __pfx_do_pci_disable_device+0x10/0x10 [ 417.338910][T14134] pci_disable_device+0x130/0x270 [ 417.342047][T14134] pci_device_remove+0xb2/0x1d0 [ 417.344157][T14134] ? __pfx_pci_device_remove+0x10/0x10 [ 417.346514][T14134] device_remove+0xcb/0x180 [ 417.348487][T14134] device_release_driver_internal+0x44e/0x620 [ 417.351447][T14134] pci_stop_bus_device+0x120/0x160 [ 417.353865][T14134] pci_stop_and_remove_bus_device+0x58/0xa0 [ 417.356871][T14134] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 417.360734][T14134] remove_store+0x123/0x140 [ 417.362785][T14134] ? __pfx_remove_store+0x10/0x10 [ 417.365065][T14134] ? find_held_lock+0x2b/0x80 [ 417.367081][T14134] ? sysfs_file_kobj+0xe4/0x290 [ 417.369243][T14134] ? sysfs_file_kobj+0xe4/0x290 [ 417.371752][T14134] ? __pfx_remove_store+0x10/0x10 [ 417.374237][T14134] dev_attr_store+0x58/0x80 [ 417.376279][T14134] ? __pfx_dev_attr_store+0x10/0x10 [ 417.378383][T14134] sysfs_kf_write+0xf2/0x150 [ 417.380468][T14134] kernfs_fop_write_iter+0x3e0/0x5f0 [ 417.382716][T14134] ? __pfx_sysfs_kf_write+0x10/0x10 [ 417.384940][T14134] vfs_write+0x6af/0x1050 [ 417.386884][T14134] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 417.389605][T14134] ? __pfx_vfs_write+0x10/0x10 [ 417.392017][T14134] ? find_held_lock+0x2b/0x80 [ 417.394128][T14134] ksys_write+0x12a/0x250 [ 417.395820][T14134] ? __pfx_ksys_write+0x10/0x10 [ 417.397729][T14134] __do_fast_syscall_32+0x13a/0x8b0 [ 417.399722][T14134] ? lockdep_hardirqs_on+0x7d/0x110 [ 417.401766][T14134] do_fast_syscall_32+0x32/0x70 [ 417.403462][T14134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.405600][T14134] RIP: 0023:0xf7f55fec [ 417.406975][T14134] Code: Unable to access opcode bytes at 0xf7f55fc2. [ 417.409330][T14134] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 417.412865][T14134] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 417.415711][T14134] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.418317][T14134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 417.421819][T14134] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 417.424384][T14134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.426932][T14134] [ 417.427939][T14134] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 417.430441][T14134] CPU: 2 UID: 0 PID: 14134 Comm: syz.2.2804 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.434362][T14134] Tainted: [L]=SOFTLOCKUP [ 417.435910][T14134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 417.439033][T14134] Call Trace: [ 417.440138][T14134] [ 417.441104][T14134] dump_stack_lvl+0x100/0x190 [ 417.442608][T14134] vpanic+0x553/0x970 [ 417.443883][T14134] ? __pfx_vpanic+0x10/0x10 [ 417.445333][T14134] panic+0xd1/0xe0 [ 417.446536][T14134] ? __pfx_panic+0x10/0x10 [ 417.447996][T14134] check_panic_on_warn.cold+0x19/0x34 [ 417.449795][T14134] ? remove_proc_entry+0x4e7/0x610 [ 417.451500][T14134] __warn.cold+0x191/0x318 [ 417.453099][T14134] __report_bug+0x30f/0x440 [ 417.454702][T14134] ? remove_proc_entry+0x4e7/0x610 [ 417.456628][T14134] ? __pfx___report_bug+0x10/0x10 [ 417.458356][T14134] ? __do_fast_syscall_32+0x13a/0x8b0 [ 417.460095][T14134] ? do_raw_spin_lock+0x128/0x260 [ 417.461709][T14134] ? find_held_lock+0x2b/0x80 [ 417.463204][T14134] ? proc_entry_rundown+0x158/0x1e0 [ 417.464852][T14134] ? proc_entry_rundown+0x158/0x1e0 [ 417.466503][T14134] report_bug_entry+0xe2/0x290 [ 417.468031][T14134] ? remove_proc_entry+0x4f5/0x610 [ 417.469807][T14134] handle_bug+0x1cd/0x2a0 [ 417.471340][T14134] exc_invalid_op+0x17/0x50 [ 417.473112][T14134] asm_exc_invalid_op+0x1a/0x20 [ 417.474912][T14134] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 417.476912][T14134] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 69 2b 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 66 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 fc 04 4b ff 48 8d 7d 18 48 b8 00 [ 417.482881][T14134] RSP: 0000:ffffc90003e4f6a0 EFLAGS: 00010246 [ 417.484805][T14134] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88805fca8adc [ 417.487295][T14134] RDX: ffff88801d3ee5dc RSI: ffffffff8c0b6640 RDI: ffffffff914b7280 [ 417.489823][T14134] RBP: ffff88805fca8ab8 R08: ffff88805fca80dc R09: ffffed100bf95143 [ 417.492343][T14134] R10: ffff88805fca8a1b R11: 0000000000000000 R12: ffff88805fca8a00 [ 417.495071][T14134] R13: ffff88801d3ee500 R14: ffff88805fca80b8 R15: dffffc0000000000 [ 417.497930][T14134] ? __pfx_remove_proc_entry+0x10/0x10 [ 417.499965][T14134] ? mtree_load+0x3a4/0xb50 [ 417.501540][T14134] ? __pfx_mtree_load+0x10/0x10 [ 417.503151][T14134] ? rcu_is_watching+0x13/0xc0 [ 417.504698][T14134] unregister_irq_proc+0x206/0x2a0 [ 417.506355][T14134] ? __pfx_unregister_irq_proc+0x10/0x10 [ 417.508191][T14134] free_desc+0x89/0x330 [ 417.509887][T14134] ? __pfx_free_desc+0x10/0x10 [ 417.511859][T14134] ? kasan_quarantine_put+0x104/0x240 [ 417.513891][T14134] ? lockdep_hardirqs_on+0x7d/0x110 [ 417.515723][T14134] ? irq_domain_free_irqs+0x3d0/0x5c0 [ 417.517536][T14134] irq_free_descs+0x84/0xc0 [ 417.519046][T14134] irq_domain_free_irqs+0x46a/0x5c0 [ 417.520796][T14134] mp_unmap_irq+0xf8/0x130 [ 417.522307][T14134] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 417.524391][T14134] acpi_unregister_gsi_ioapic+0x40/0x60 [ 417.526241][T14134] acpi_unregister_gsi+0x25/0x40 [ 417.527807][T14134] acpi_pci_irq_disable+0x275/0x360 [ 417.529490][T14134] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 417.531343][T14134] pcibios_disable_device+0x89/0xb0 [ 417.533080][T14134] do_pci_disable_device+0x9f/0x100 [ 417.534828][T14134] ? __pfx_do_pci_disable_device+0x10/0x10 [ 417.536805][T14134] pci_disable_device+0x130/0x270 [ 417.538485][T14134] pci_device_remove+0xb2/0x1d0 [ 417.540178][T14134] ? __pfx_pci_device_remove+0x10/0x10 [ 417.542212][T14134] device_remove+0xcb/0x180 [ 417.543673][T14134] device_release_driver_internal+0x44e/0x620 [ 417.545622][T14134] pci_stop_bus_device+0x120/0x160 [ 417.547370][T14134] pci_stop_and_remove_bus_device+0x58/0xa0 [ 417.549415][T14134] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 417.551678][T14134] remove_store+0x123/0x140 [ 417.553354][T14134] ? __pfx_remove_store+0x10/0x10 [ 417.555074][T14134] ? find_held_lock+0x2b/0x80 [ 417.556691][T14134] ? sysfs_file_kobj+0xe4/0x290 [ 417.558351][T14134] ? sysfs_file_kobj+0xe4/0x290 [ 417.559994][T14134] ? __pfx_remove_store+0x10/0x10 [ 417.561621][T14134] dev_attr_store+0x58/0x80 [ 417.563209][T14134] ? __pfx_dev_attr_store+0x10/0x10 [ 417.565111][T14134] sysfs_kf_write+0xf2/0x150 [ 417.566856][T14134] kernfs_fop_write_iter+0x3e0/0x5f0 [ 417.568661][T14134] ? __pfx_sysfs_kf_write+0x10/0x10 [ 417.570294][T14134] vfs_write+0x6af/0x1050 [ 417.571711][T14134] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 417.573690][T14134] ? __pfx_vfs_write+0x10/0x10 [ 417.575303][T14134] ? find_held_lock+0x2b/0x80 [ 417.576914][T14134] ksys_write+0x12a/0x250 [ 417.578333][T14134] ? __pfx_ksys_write+0x10/0x10 [ 417.579979][T14134] __do_fast_syscall_32+0x13a/0x8b0 [ 417.581754][T14134] ? lockdep_hardirqs_on+0x7d/0x110 [ 417.583438][T14134] do_fast_syscall_32+0x32/0x70 [ 417.585041][T14134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.587083][T14134] RIP: 0023:0xf7f55fec [ 417.588450][T14134] Code: Unable to access opcode bytes at 0xf7f55fc2. [ 417.590685][T14134] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 417.593550][T14134] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 417.596136][T14134] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.598650][T14134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 417.601099][T14134] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 417.603721][T14134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.606334][T14134] [ 417.607974][T14134] Kernel Offset: disabled [ 417.609437][T14134] Rebooting in 86400 seconds..