last executing test programs: 17.599190899s ago: executing program 2 (id=2923): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x44, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xfffff5d4}}, './file0\x00'}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='limits\x00') mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r3, r4+60000000}, &(0x7f0000000280)={0x0}) fsopen(0x0, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000800000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl(r7, 0x4048aecb, 0x0) 14.968803729s ago: executing program 2 (id=2927): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0xa}, 0x1, 0x0, 0x0, 0x20804}, 0x44800) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x52, 0xd8, 0xfffc, {0x20, 0x1}, {0x49, 0x2}, @cond=[{0x1ff, 0x0, 0x9, 0x7, 0x1, 0x71}, {0x8, 0xffff, 0xffe0, 0x100, 0xfff8, 0x37fd}]}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000180)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000380)={{r5, 0x4, 0xc621, 0x6, 0x1000, 0xa, 0x7fffffffffffffff, 0x5, 0x80000001, 0x80, 0x97e2, 0x7fffffffffffffff, 0x4, 0xfffffffffffff825, 0x7}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000001380)="9ec176fb0658ec9304c0235c6bee3e58091b5c907a6f43bf3c4f44ffde613d2b957384cee361c0b5769455c2de010cc83713266507ef792f0c338a368380c647e6f90b3c1324600fe0b8bf53db90213b73f0be51988f2504a3ca3ae3a1087128417c2e5984a853ecd4ad38c26168bb56f317ce3c75b5fbe5e9ec484a9f79c1c93a9e79f47f7a155c47e123b324aa41766c66b4ee02e748006d90ecdf052907b993d2e6267d58291c63089cd55a", 0xad) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000001000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd00000008", 0x49}], 0x1) ioctl$TCXONC(r3, 0x540a, 0x1) ptrace$peekuser(0x3, r2, 0x7fff) ptrace$pokeuser(0x6, r1, 0x108, 0x4) ptrace$pokeuser(0x6, r1, 0x105, 0x7) 11.916376405s ago: executing program 2 (id=2932): r0 = openat$bsg(0xffffff9c, &(0x7f00000001c0)='/dev/bsg/2:0:0:0\x00', 0x220000, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000002c0)) r1 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x8000) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000180)={0x1, @capture={0x0, 0x0, {0x4}, 0x100, 0x8000002}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001080)='2', 0x1}], 0x1}}], 0x1, 0x8000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @loopback, 0x1e}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r2, 0x1) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r4 = io_uring_setup(0x460e, &(0x7f0000000040)={0x0, 0x970, 0x80, 0x4000001, 0x325}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) sched_setscheduler(r5, 0x6, &(0x7f00000003c0)=0x5) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x65, 0x0, 0x0, 0x9, 0x800}]}, &(0x7f0000000000)='syzkaller\x00', 0x8000000, 0x0, 0x0, 0x0, 0x49}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 11.779133815s ago: executing program 3 (id=2934): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000880), 0xde9}, 0x38) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000200)={&(0x7f0000000800)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24000117}, 0x0) 10.211962094s ago: executing program 1 (id=2935): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000) 10.190799497s ago: executing program 0 (id=2936): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000), 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000240)={0x2}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r4, &(0x7f0000000180)=@isofs={0x14, 0x1, {0x8, 0x7, 0x4, 0x8000, 0x8, 0x6}}, 0x2241c2) r5 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1, 0x3, 0x288}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) r6 = io_uring_setup(0x7fd, &(0x7f0000000080)={0x0, 0xed43, 0x10000, 0x3, 0x1f9, 0x0, r5}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r5], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000580)="49d3", 0x2}], 0x1}}], 0x1, 0x20008000) shutdown(r7, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 9.750646872s ago: executing program 3 (id=2937): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) init_module(&(0x7f0000000d40)=ANY=[@ANYBLOB="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"/425], 0x1b4, &(0x7f0000001040)='debugfs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="0100020009b299ea"], 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x384b, 0x0, 0x2, 0xeb}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe81, 0x20, 0x2, 0x178}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a87, 0x8, 0x10000, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x49eb, 0x100, 0x0, 0x25c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x903c, 0x0, 0x0, 0x2f0}}], 0x4, &(0x7f0000002840)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x4, 0x93e, 0x0, &(0x7f0000001840)=@buf_4k="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"}}, &(0x7f00000028c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) unshare(0x6020400) 9.440753607s ago: executing program 0 (id=2938): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x3b3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_open_procfs$pagemap(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x67a1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x20, 0x20fe, 0x39c, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe21f, 0x20, 0xfffffffe, 0xae, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa4de, 0x2000, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r9, 0xc040564a, &(0x7f00000000c0)={0xc, 0x0, 0x3017, 0x6, 0x80, 0x0, 0xd, 0x1}) r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r11 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r11, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r11, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r11, 0x7ab, &(0x7f0000000280)={0x0}) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 9.131899095s ago: executing program 2 (id=2939): r0 = socket$inet6(0xa, 0x2, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x2, 0x2, 0x257}) mkdirat(0xffffffffffffff9c, 0x0, 0x17f) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e25, 0x0, @mcast2, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000ac0), 0x49e, 0x400c844) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8084, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) 8.504392622s ago: executing program 3 (id=2940): close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) 8.480485762s ago: executing program 1 (id=2941): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@bridge_delvlan={0x28, 0x56, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x0, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8}}}]}, 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}]}, &(0x7f00000002c0)=0x10) r2 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x220000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'ni_atmio16d\x00', [0x9, 0x8, 0x6, 0x1, 0x7, 0xf, 0x1, 0x9, 0xc, 0xffff8001, 0x6, 0x1, 0x2, 0x7, 0x1, 0x6, 0x49f, 0xb1, 0x3ff, 0xa77d, 0x7, 0x9c8, 0xa0000000, 0x8, 0x5f000, 0x1, 0x7fffffff, 0x2, 0x7, 0x1, 0x0, 0x6]}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06f40908"], 0xa) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000580)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./proc_dir\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc_dir/acpi/wakeup\x00', 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000000ec0)={'syz1\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x3, 0x80000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5, 0x4, 0x7fffffff, 0x0, 0x2000, 0xfffffffc, 0x0, 0x8, 0x0, 0x20000, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0, 0x2], [0x0, 0x1, 0x2, 0xb16, 0x4000000, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0xaaf, 0x7, 0x0, 0x0, 0x4, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x200, 0x0, 0x2, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x7, 0x0, 0x0, 0x0, 0x800, 0x5, 0xfffffffe, 0x0, 0xf, 0x0, 0xd], [0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2b439038, 0x0, 0x9, 0x0, 0x4dc, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2, 0x2, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xad1, 0x0, 0x0, 0x4, 0x80, 0x8, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x3, 0x0, 0x8d, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x200, 0x0, 0x0, 0x0, 0x0, 0xfffff402, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x20000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x80000001, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000fee000), 0x4) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='./my_', 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x18, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, 0x0, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000000b000/0x1000)=nil) sendmsg$key(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x2, 0x6, 0x7, 0x4, 0x21, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d4}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd2b, 0x3503}, @sadb_sa={0x2, 0x1, 0x4d2, 0x58, 0x81, 0x9d, 0x2, 0x80000000}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x2c, 0x4, 0x4}, @sadb_ident={0x2, 0xa, 0xbfe2, 0x0, 0x4b9e}, @sadb_sa={0x2, 0x1, 0x4d3, 0x2, 0x20, 0x1e, 0x4, 0x20000000}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private0, 0x10, 0x20, 0x26}, @sadb_x_nat_t_type={0x1, 0x14, 0xfb}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d4}, @sadb_x_policy={0x8, 0x12, 0x3, 0x2, 0x0, 0x6e6bbb, 0x3, {0x6, 0xff, 0x3a, 0x3, 0x0, 0x1, 0x0, @in=@private=0xa010100, @in=@dev={0xac, 0x14, 0x14, 0x18}}}]}, 0x108}}, 0x40010) write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x1ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x865, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x27, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0x2, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x4, 0x8000000, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401c, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0xb, 0x0, 0x200, 0xfd5], [0x0, 0xfffffff9, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x800, 0x4, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x3514b2c0, 0x0, 0x6, 0x0, 0x3, 0x1000, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x4], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) 7.390570933s ago: executing program 0 (id=2942): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x4000) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x403, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000240)={0x0, 0x8097, 0x20, 0x0, 0x51}, &(0x7f0000000100), 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d0}], 0x1, 0x20048805) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x564) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000050}, 0x24000890) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) open(&(0x7f0000000880)='./dev/gnss0\x00', 0x0, 0xfc559a7289ff8d5e) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_ublk_setup_io_uring(0x1a30, &(0x7f0000000240)={0x0, 0x8be, 0x800, 0x1024002, 0x15c}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x3, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x10004, 0x3, 0x80a0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x4dd17ed7c0be0334, 0x0, 0x0, 0x0) 6.917521656s ago: executing program 3 (id=2943): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000040)={0x5, r2, 0x3e, {0xe8, 0x3}, 0x7f}, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r6 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) set_mempolicy(0x4000, &(0x7f0000000180)=0x21, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000100)={0xa00965, 0x2}) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000440)={r3, r3, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x7, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@ldst={0x1, 0x3, 0x2, 0x4, 0xa, 0xfffffffffffffff0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, @tail_call, @generic={0xe0, 0x8, 0x3, 0x1, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0x9, 0xbd, &(0x7f0000000680)=""/189, 0x41100, 0x1, '\x00', 0x0, @fallback=0x4, r4, 0x8, &(0x7f0000000740)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0xe, 0x80000000, 0x705}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x25a}, 0x94) socket$alg(0x26, 0x5, 0x0) 5.793754434s ago: executing program 2 (id=2944): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=0x8, 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x50, 0x1, 0x1, 0xacd294f27ffa9b17, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0xfffffffffffffe80, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x402) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) madvise(&(0x7f0000786000/0x3000)=nil, 0x3000, 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) open(0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./dev/sda1\x00', 0x4) 4.702579778s ago: executing program 0 (id=2945): r0 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x9840) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioperm(0xe, 0x9, 0x20) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) 4.56373609s ago: executing program 1 (id=2946): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x5410, &(0x7f00000010c0)=""/4096) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000c060101000000000000000000000004050001009e"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ae9cbfad1d51ae3f3494ea604b9e6d90f17d481002c04207130c116cead1a87201b9668b3853ae48551dd7265184845340f9553c134d796deae68f76a34fd01d1b3d3fdcbeaa2a9d20dde225cb92cb63397c2b15a4ef2c324d586891"], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.02332647s ago: executing program 2 (id=2947): socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x1, &(0x7f0000000040)='9', 0x7, 0x4, 0x7, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x7}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=@deltaction={0x14, 0x31, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="401800400000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='md0', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x192) 2.392481767s ago: executing program 3 (id=2948): syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c4800905020210020200000905820000000000"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./dev\x00', 0x6800, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket(0xa, 0x3, 0x7) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0x0) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r1, 0x6f44, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=@alg={0x108, 0x10, 0x800, 0x70bd2c, 0x25dfdbff, {{'xts-serpent-avx2\x00'}, '\x00', '\x00', 0x2400, 0x2400}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0xc6e}, {0x8, 0x1, 0x200}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x8001) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x9, 0x5, 0xffffffc0, 0x241d, 0x8, "2d5157854e0a1e37a2c83e0fab035d8445e39c"}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0xfffffffffffffffc, {}, 0xfe}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r5, 0x0, &(0x7f0000000100)) 2.285203786s ago: executing program 1 (id=2949): mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./dev/sda1\x00', 0x8) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000280)='./dev/sda1\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) listxattr(&(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)=""/108, 0x6c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) unshare(0x2c060000) unshare(0x2a060400) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x1) accept4$x25(r2, 0x0, 0x0, 0x80800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, 0xffffffffffffffff, 0xd49e7000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 2.271580443s ago: executing program 0 (id=2950): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) close(0x3) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="6b25986300b30600fc010000000000000000000000000000ff0200000000000000000000000000016c06040306080000fe8000000000000000000000000000bb00000000000000000000ffffac1414aafc00000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="7001feff9078000b220c1fbd64270d790044e1a5fea729d901ee22d318f11fe1521b140606e2d4c3d97bd10000000700000008fe0df989a54928de5e48ca582a020400010411e486d6446b102af749c19dbe3e8aa24321e2bfc3d901010000e565807f183ebdc0c69dd09c7643b937f8000000000000"], 0xdb) syz_emit_ethernet(0x10ee, 0x0, 0x0) 1.337470103s ago: executing program 1 (id=2951): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aea", 0x4b}], 0x1) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) 797.952345ms ago: executing program 0 (id=2952): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x7, 0x7ffc0001}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r0, &(0x7f00000000c0)='./mnt\x00', r0, &(0x7f0000000100)='./mnt\x00', 0x271) unshare(0x22020600) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r2, 0x12, 0x1, 0xce2c, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0}, 0x40) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, 0x0, 0x0) r3 = msgget$private(0x0, 0x193) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x141042, 0x100) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_STATUS_CODE={0x6}]}, 0x2c}}, 0x0) msgsnd(r3, &(0x7f0000000240)=ANY=[@ANYRES16], 0x8, 0x0) msgsnd(r3, 0x0, 0x3f9, 0x0) msgrcv(r3, &(0x7f0000001240)={0x0, ""/147}, 0x9b, 0x3, 0x2000) mkdirat(0xffffffffffffff9c, 0x0, 0x1c8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_open_dev$usbfs(0x0, 0xb, 0x8c0002) 447.883729ms ago: executing program 3 (id=2953): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x10}) r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') openat(r2, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141c00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x2d, 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@redirect_dir_nofollow}, {@verity_require}, {@verity_on}, {@nfs_export_on}], [{@flag='dirsync'}, {@audit}, {@appraise}, {@seclabel}]}) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 0s ago: executing program 1 (id=2954): creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b357620012", 0x32}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0xfffff9, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) r5 = eventfd(0x5f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa6d9d000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001240)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010101, @in6=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x10, 0x5c, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffa, 0x9b39, 0x3, 0x0, 0xfffffffffffff310, 0xffffffffffffffff, 0x0, 0x1da774c7}, {0x7ff, 0x3, 0x2000006, 0x800000004000004}, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x200400c5}, 0x4000800) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x2000) ioctl$EVIOCGVERSION(r7, 0x5452, &(0x7f0000002200)=""/188) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f00000002c0)={r3, &(0x7f0000000140)='%\x00', 0x0, &(0x7f0000000180)={@align=0x7fffffffffffffff, {0x6, 0x8e70, 0x9, 0x4}}, 0x2c, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000280)=0x3}) ioctl$TIOCSETD(r8, 0x5423, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r5}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000000)={0x0, 0x300000, 0x8}) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): . [ 363.461235][T12269] se_dev->se_dev_ptr already set for storage object [ 363.543378][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1967'. [ 363.555833][T12272] binder: 12271:12272 ioctl c018620c 80000240 returned -1 [ 363.579591][T12272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1967'. [ 363.602070][T12275] se_dev->se_dev_ptr already set for storage object [ 363.854132][T12278] binder: 12277:12278 ioctl c018620c 80000240 returned -1 [ 364.472100][T12286] se_dev->se_dev_ptr already set for storage object [ 365.019513][T12293] se_dev->se_dev_ptr already set for storage object [ 365.064994][T12295] binder: 12294:12295 ioctl c018620c 80000240 returned -1 [ 365.200795][T12300] se_dev->se_dev_ptr already set for storage object [ 365.328251][T12301] wg2 speed is unknown, defaulting to 1000 [ 365.372719][T12305] se_dev->se_dev_ptr already set for storage object [ 365.532447][T12309] se_dev->se_dev_ptr already set for storage object [ 365.854163][T12315] se_dev->se_dev_ptr already set for storage object [ 366.065162][T12319] binder: 12317:12319 ioctl c018620c 80000240 returned -1 [ 367.105485][T12325] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 367.190126][T12331] ubi0: attaching mtd0 [ 367.257008][T12330] se_dev->se_dev_ptr already set for storage object [ 367.390540][T12331] ubi0: scanning is finished [ 367.390569][T12331] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 367.666041][T12331] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 367.848169][T12347] se_dev->se_dev_ptr already set for storage object [ 367.929102][ T7113] udevd[7113]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.985451][T12349] se_dev->se_dev_ptr already set for storage object [ 367.992641][T12351] __nla_validate_parse: 7 callbacks suppressed [ 367.992653][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1990'. [ 368.031433][T12351] binder: 12350:12351 ioctl c018620c 80000240 returned -1 [ 368.031665][T12351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1990'. [ 368.172405][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1991'. [ 368.185029][T12356] binder: 12354:12356 ioctl c018620c 80000240 returned -1 [ 368.186871][T12356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1991'. [ 368.364941][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1993'. [ 368.368362][T12362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1993'. [ 368.490433][T12365] se_dev->se_dev_ptr already set for storage object [ 368.557334][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2002'. [ 368.562919][T12367] binder: 12366:12367 ioctl c018620c 80000240 returned -1 [ 368.563111][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2002'. [ 369.190259][T12379] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1997'. [ 369.225583][T12374] wg2 speed is unknown, defaulting to 1000 [ 370.307437][T12386] se_dev->se_dev_ptr already set for storage object [ 372.262635][T12398] se_dev->se_dev_ptr already set for storage object [ 372.334854][T12399] se_dev->se_dev_ptr already set for storage object [ 372.410461][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2004'. [ 372.444947][T12405] binder: 12403:12405 ioctl c018620c 80000240 returned -1 [ 373.015155][T12416] __nla_validate_parse: 2 callbacks suppressed [ 373.015172][T12416] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2007'. [ 373.210692][T12420] binder: 12418:12420 ioctl c018620c 80000240 returned -1 [ 373.211106][T12420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2008'. [ 373.216083][T12421] se_dev->se_dev_ptr already set for storage object [ 374.876821][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 375.495763][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2015'. [ 375.501401][T12441] se_dev->se_dev_ptr already set for storage object [ 375.502892][T12441] UDC core: g1: couldn't find an available UDC or it's busy [ 375.537009][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'. [ 376.287186][T12447] se_dev->se_dev_ptr already set for storage object [ 376.295460][T12449] binder: 12446:12449 ioctl c018620c 80000240 returned -1 [ 376.295689][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2019'. [ 376.403488][T12454] wg2 speed is unknown, defaulting to 1000 [ 377.877898][ T44] kauditd_printk_skb: 390 callbacks suppressed [ 377.877951][ T44] audit: type=1326 audit(1790288744.858:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 377.878142][ T44] audit: type=1326 audit(1790288744.858:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 377.878284][ T44] audit: type=1326 audit(1790288744.858:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 377.878455][ T44] audit: type=1326 audit(1790288744.858:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 377.878615][ T44] audit: type=1326 audit(1790288744.858:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 377.878766][ T44] audit: type=1326 audit(1790288744.858:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 377.878898][ T44] audit: type=1326 audit(1790288744.858:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 377.879066][ T44] audit: type=1326 audit(1790288744.858:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 377.879338][ T44] audit: type=1326 audit(1790288744.858:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 377.879491][ T44] audit: type=1326 audit(1790288744.858:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.2024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fec code=0x7ffc0000 [ 378.076606][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.076677][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.734557][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2026'. [ 378.736436][T12478] binder: 12477:12478 ioctl c018620c 80000240 returned -1 [ 378.736641][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2026'. [ 378.957058][T12481] se_dev->se_dev_ptr already set for storage object [ 378.960637][T12481] UDC core: g1: couldn't find an available UDC or it's busy [ 379.113107][T12489] se_dev->se_dev_ptr already set for storage object [ 379.461324][T12496] binder: 12495:12496 ioctl c018620c 80000240 returned -1 [ 379.461624][T12496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2031'. [ 380.390827][T12507] se_dev->se_dev_ptr already set for storage object [ 380.448843][T12511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2033'. [ 380.710433][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2036'. [ 380.788713][T12516] binder: 12515:12516 ioctl c018620c 80000240 returned -1 [ 380.788896][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2036'. [ 380.813051][T12518] se_dev->se_dev_ptr already set for storage object [ 380.815131][T12518] UDC core: g1: couldn't find an available UDC or it's busy [ 380.850400][T12523] se_dev->se_dev_ptr already set for storage object [ 381.500016][T12539] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 381.564123][T12540] null_blk: disk my_zoned_dev created [ 381.657326][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'. [ 381.663536][T12543] binder: 12542:12543 ioctl c018620c 80000240 returned -1 [ 381.663921][T12543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2044'. [ 381.842103][T12546] se_dev->se_dev_ptr already set for storage object [ 382.248922][T12554] se_dev->se_dev_ptr already set for storage object [ 382.252267][T12554] UDC core: g1: couldn't find an available UDC or it's busy [ 382.942405][T12569] se_dev->se_dev_ptr already set for storage object [ 383.024858][T12570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2051'. [ 383.992679][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2053'. [ 383.994490][T12575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2054'. [ 384.028622][T12575] binder: 12573:12575 ioctl c018620c 80000240 returned -1 [ 384.028820][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2054'. [ 384.035380][T12576] binder: 12574:12576 ioctl c018620c 80000240 returned -1 [ 384.035638][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2053'. [ 384.139669][T12580] se_dev->se_dev_ptr already set for storage object [ 384.337420][T12587] se_dev->se_dev_ptr already set for storage object [ 384.339593][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2061'. [ 384.341495][T12593] binder: 12592:12593 ioctl c018620c 80000240 returned -1 [ 384.341658][T12593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2061'. [ 384.362551][T12587] UDC core: g1: couldn't find an available UDC or it's busy [ 384.695643][T12603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2063'. [ 385.226878][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2066'. [ 385.230538][T12608] binder: 12607:12608 ioctl c018620c 80000240 returned -1 [ 385.230848][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2066'. [ 385.232166][T12610] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 385.232181][T12610] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 385.233281][ T44] kauditd_printk_skb: 16 callbacks suppressed [ 385.233291][ T44] audit: type=1326 audit(1790288752.228:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.3.2067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 385.233785][ T44] audit: type=1326 audit(1790288752.228:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.3.2067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 385.233810][ T44] audit: type=1326 audit(1790288752.228:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.3.2067" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 385.233830][ T44] audit: type=1326 audit(1790288752.228:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.3.2067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 385.233851][ T44] audit: type=1326 audit(1790288752.228:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.3.2067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 385.234098][ T44] audit: type=1326 audit(1790288752.228:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.3.2067" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 385.234243][ T44] audit: type=1326 audit(1790288752.228:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.3.2067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 385.234337][ T44] audit: type=1326 audit(1790288752.228:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.3.2067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 385.234789][ T44] audit: type=1326 audit(1790288752.228:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.3.2067" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 385.234814][ T44] audit: type=1326 audit(1790288752.228:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.3.2067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 385.358464][T12613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2065'. [ 385.361639][T12613] binder: 12612:12613 ioctl c018620c 80000240 returned -1 [ 385.412840][T12615] se_dev->se_dev_ptr already set for storage object [ 385.485613][T12625] se_dev->se_dev_ptr already set for storage object [ 385.619515][T12631] se_dev->se_dev_ptr already set for storage object [ 385.772345][T12637] binder: 12635:12637 ioctl c018620c 80000240 returned -1 [ 385.835094][T12641] binder: 12640:12641 ioctl c018620c 80000240 returned -1 [ 387.925037][T12658] se_dev->se_dev_ptr already set for storage object [ 388.556617][T12666] se_dev->se_dev_ptr already set for storage object [ 388.557714][T12666] UDC core: g1: couldn't find an available UDC or it's busy [ 388.633344][T12668] binder: 12667:12668 ioctl c018620c 80000240 returned -1 [ 388.770025][T12673] binder: 12672:12673 ioctl c018620c 80000240 returned -1 [ 389.223344][T12683] __nla_validate_parse: 11 callbacks suppressed [ 389.223360][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2091'. [ 389.250660][T12683] binder: 12682:12683 ioctl c018620c 80000240 returned -1 [ 389.250925][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2091'. [ 389.506642][T12686] se_dev->se_dev_ptr already set for storage object [ 389.634662][T12689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2090'. [ 390.541821][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2089'. [ 390.610897][T12700] binder: 12692:12700 ioctl c018620c 80000240 returned -1 [ 390.630914][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2089'. [ 391.182999][T12703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2096'. [ 391.186058][T12703] binder: 12702:12703 ioctl c018620c 80000240 returned -1 [ 391.186340][T12703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2096'. [ 392.046545][T12708] se_dev->se_dev_ptr already set for storage object [ 392.048184][T12708] UDC core: g1: couldn't find an available UDC or it's busy [ 392.170339][T12716] binder: 12715:12716 ioctl c018620c 80000240 returned -1 [ 392.170699][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2100'. [ 393.165070][ T7571] udevd[7571]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.523179][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'. [ 393.711417][T12730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2101'. [ 393.909879][T12737] binder: 12736:12737 ioctl c018620c 80000240 returned -1 [ 393.940372][T12739] binder: 12738:12739 ioctl c018620c 80000240 returned -1 [ 394.043574][T12743] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 394.091036][ T5828] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 394.111158][T12746] se_dev->se_dev_ptr already set for storage object [ 394.112633][T12746] UDC core: g1: couldn't find an available UDC or it's busy [ 394.238610][ T5828] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 394.240536][ T5828] usb 5-1: config 0 has no interfaces? [ 394.240578][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.257076][ T5828] usb 5-1: config 0 descriptor?? [ 394.505308][ T10] usb 5-1: USB disconnect, device number 14 [ 395.116290][T12761] hub 8-0:1.0: USB hub found [ 395.121764][T12761] hub 8-0:1.0: 1 port detected [ 395.279998][T12764] binder: 12762:12764 ioctl c018620c 80000240 returned -1 [ 395.280280][T12764] __nla_validate_parse: 5 callbacks suppressed [ 395.280289][T12764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2112'. [ 395.950288][T12771] se_dev->se_dev_ptr already set for storage object [ 396.766475][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2117'. [ 396.803991][T12782] se_dev->se_dev_ptr already set for storage object [ 396.828290][T12781] binder: 12780:12781 ioctl c018620c 80000240 returned -1 [ 396.828409][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2117'. [ 396.903234][T12785] se_dev->se_dev_ptr already set for storage object [ 396.953201][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2120'. [ 396.958118][T12788] binder: 12787:12788 ioctl c018620c 80000240 returned -1 [ 396.958483][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2120'. [ 397.114847][T12796] binder: 12794:12796 ioctl c018620c 80000240 returned -1 [ 397.115163][T12796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2123'. [ 397.229450][T12799] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 397.229477][T12799] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 397.229530][T12799] vhci_hcd vhci_hcd.0: Device attached [ 397.946113][T12809] se_dev->se_dev_ptr already set for storage object [ 398.077488][ T10] usb 40-1: SetAddress Request (6) to port 0 [ 398.077523][ T10] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 398.332340][T12800] vhci_hcd: connection reset by peer [ 398.332560][ T5615] vhci_hcd vhci_hcd.1: stop threads [ 398.332574][ T5615] vhci_hcd vhci_hcd.1: release socket [ 398.332600][ T5615] vhci_hcd vhci_hcd.1: disconnect device [ 399.308525][T12824] se_dev->se_dev_ptr already set for storage object [ 399.452039][T12826] se_dev->se_dev_ptr already set for storage object [ 399.529682][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 399.565381][T12831] binder: 12829:12831 ioctl c018620c 80000240 returned -1 [ 399.565527][T12831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2132'. [ 399.630911][T12833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2133'. [ 399.634655][T12833] binder: 12832:12833 ioctl c018620c 80000240 returned -1 [ 399.635157][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2133'. [ 400.543863][T12845] se_dev->se_dev_ptr already set for storage object [ 400.620748][T12847] xt_hl: Unknown TTL match mode: 255 [ 400.695814][T12850] se_dev->se_dev_ptr already set for storage object [ 400.877689][ T9518] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 401.261655][ T9518] usb 5-1: Using ep0 maxpacket: 32 [ 401.295847][ T9518] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 401.363589][ T9518] usb 5-1: config 0 has no interfaces? [ 401.483959][ T9518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.483982][ T9518] usb 5-1: Product: syz [ 401.483991][ T9518] usb 5-1: Manufacturer: syz [ 401.484000][ T9518] usb 5-1: SerialNumber: syz [ 401.637774][T12861] jffs2: notice: (12861) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 401.777888][ T9518] usb 5-1: config 0 descriptor?? [ 402.031275][ T65] usb 5-1: USB disconnect, device number 15 [ 402.604326][T12868] se_dev->se_dev_ptr already set for storage object [ 402.686649][T12873] se_dev->se_dev_ptr already set for storage object [ 402.864116][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 402.893015][T12877] binder: 12876:12877 ioctl c018620c 80000240 returned -1 [ 402.893171][T12877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2145'. [ 403.177722][ T10] usb 40-1: device descriptor read/8, error -110 [ 403.392215][T12888] se_dev->se_dev_ptr already set for storage object [ 403.412418][T12889] se_dev->se_dev_ptr already set for storage object [ 403.611522][ T10] usb usb40-port1: attempt power cycle [ 403.985341][T12907] se_dev->se_dev_ptr already set for storage object [ 403.985922][T12908] se_dev->se_dev_ptr already set for storage object [ 404.088691][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2156'. [ 404.120287][T12910] binder: 12909:12910 ioctl c018620c 80000240 returned -1 [ 404.120431][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2156'. [ 404.209751][ T10] usb usb40-port1: unable to enumerate USB device [ 404.213540][T12913] se_dev->se_dev_ptr already set for storage object [ 404.415127][T12915] se_dev->se_dev_ptr already set for storage object [ 404.777339][T12929] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2160'. [ 405.091713][ T10] usb usb40-port8: attempt power cycle [ 405.194949][T12936] se_dev->se_dev_ptr already set for storage object [ 405.394212][T12939] se_dev->se_dev_ptr already set for storage object [ 405.511427][ T7574] udevd[7574]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.552195][T12941] se_dev->se_dev_ptr already set for storage object [ 405.571261][T12943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'. [ 405.637615][T12947] se_dev->se_dev_ptr already set for storage object [ 405.641629][T12946] binder: 12942:12946 ioctl c018620c 80000240 returned -1 [ 405.641983][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2167'. [ 405.859459][ T10] usb usb40-port8: unable to enumerate USB device [ 406.704098][T12961] se_dev->se_dev_ptr already set for storage object [ 407.028511][T12972] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2174'. [ 407.721850][T12979] se_dev->se_dev_ptr already set for storage object [ 407.823070][T12982] se_dev->se_dev_ptr already set for storage object [ 407.830320][T12984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2179'. [ 407.856629][T12984] binder: 12983:12984 ioctl c018620c 80000240 returned -1 [ 407.856791][T12984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2179'. [ 410.694680][T13010] se_dev->se_dev_ptr already set for storage object [ 411.560294][T13023] se_dev->se_dev_ptr already set for storage object [ 412.011646][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2191'. [ 412.016266][T13030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2191'. [ 412.438884][T13034] se_dev->se_dev_ptr already set for storage object [ 414.449977][T13057] se_dev->se_dev_ptr already set for storage object [ 414.886832][ T7572] udevd[7572]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.969698][T13061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2200'. [ 415.021613][T13061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2200'. [ 415.064348][T13063] se_dev->se_dev_ptr already set for storage object [ 415.155467][T13069] se_dev->se_dev_ptr already set for storage object [ 415.351034][T13073] se_dev->se_dev_ptr already set for storage object [ 415.367245][ T44] kauditd_printk_skb: 32 callbacks suppressed [ 415.367258][ T44] audit: type=1800 audit(1790288782.358:4786): pid=13065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2201" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 415.478713][T13071] netlink: 'syz.1.2201': attribute type 9 has an invalid length. [ 415.653469][T13078] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 415.665710][T13078] ubi0: attaching mtd0 [ 415.677891][T13078] ubi0: scanning is finished [ 415.678039][T13078] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 416.067628][T13078] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 416.712781][T13088] macsec1: entered promiscuous mode [ 416.712803][T13088] macsec1: entered allmulticast mode [ 416.787110][T13092] se_dev->se_dev_ptr already set for storage object [ 416.888731][T13097] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2206'. [ 417.205699][T13099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2205'. [ 417.205718][T13099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2205'. [ 417.403855][T13099] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2205'. [ 417.799748][T13110] se_dev->se_dev_ptr already set for storage object [ 418.642607][T13113] se_dev->se_dev_ptr already set for storage object [ 419.198082][T13122] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 419.223526][T13122] ubi0: attaching mtd0 [ 419.231683][T13122] ubi0: scanning is finished [ 419.231714][T13122] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 419.440179][T13122] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 419.912233][T13133] se_dev->se_dev_ptr already set for storage object [ 420.090276][T13139] se_dev->se_dev_ptr already set for storage object [ 420.255927][ T7572] udevd[7572]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.788288][T13147] se_dev->se_dev_ptr already set for storage object [ 421.063467][T13152] se_dev->se_dev_ptr already set for storage object [ 421.299727][T13156] se_dev->se_dev_ptr already set for storage object [ 421.975212][ T42] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 422.019160][T13164] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 422.020532][T13164] ubi0: attaching mtd0 [ 422.022242][T13164] ubi0: scanning is finished [ 422.022364][T13164] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 422.128008][ T42] usb 8-1: Using ep0 maxpacket: 8 [ 422.128654][ T42] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 422.129604][ T42] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 422.129617][ T42] usb 8-1: config 179 has no interface number 0 [ 422.129635][ T42] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 422.129648][ T42] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 422.129665][ T42] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 422.129684][ T42] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 422.129705][ T42] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 422.129735][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.131740][T13160] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 422.278509][T13164] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 422.400906][ T42] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input15 [ 422.626662][ T65] usb 8-1: USB disconnect, device number 12 [ 422.626678][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 422.626701][ C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 422.888681][T13181] se_dev->se_dev_ptr already set for storage object [ 423.529145][T13188] se_dev->se_dev_ptr already set for storage object [ 423.936484][T13198] se_dev->se_dev_ptr already set for storage object [ 425.009364][T13205] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 425.010544][T13205] ubi0: attaching mtd0 [ 425.012006][T13205] ubi0: scanning is finished [ 425.012042][T13205] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 425.208746][T13205] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 425.527573][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 425.677513][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 425.678778][ T10] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 425.681607][ T10] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 425.681654][ T10] usb 6-1: config 179 has no interface number 0 [ 425.681730][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 425.681778][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 425.681825][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 425.681872][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 425.681921][ T10] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 425.681976][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.721093][T13207] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 425.956845][T13217] se_dev->se_dev_ptr already set for storage object [ 426.121326][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input16 [ 426.319535][ T10] usb 6-1: USB disconnect, device number 10 [ 426.319590][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 426.319611][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 426.348461][T13224] se_dev->se_dev_ptr already set for storage object [ 427.001127][T13237] se_dev->se_dev_ptr already set for storage object [ 427.031436][T13239] se_dev->se_dev_ptr already set for storage object [ 428.263568][T13255] loop5: detected capacity change from 0 to 6 [ 428.306489][T13257] se_dev->se_dev_ptr already set for storage object [ 428.327726][T13255] Dev loop5: unable to read RDB block 6 [ 428.327749][T13255] loop5: unable to read partition table [ 428.327843][T13255] loop5: partition table beyond EOD, truncated [ 428.327863][T13255] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 429.093316][T13272] se_dev->se_dev_ptr already set for storage object [ 429.374138][T13280] NILFS (loop0): device size too small [ 430.274716][T13284] se_dev->se_dev_ptr already set for storage object [ 430.475313][T13287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2263'. [ 430.478463][T13287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2263'. [ 430.543847][T13289] binder: 13288:13289 ioctl c018620c 80000240 returned -1 [ 430.544305][T13289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2264'. [ 430.591418][T13293] se_dev->se_dev_ptr already set for storage object [ 430.919028][T13303] se_dev->se_dev_ptr already set for storage object [ 433.161885][T13329] se_dev->se_dev_ptr already set for storage object [ 433.162613][T13331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'. [ 433.221624][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2275'. [ 433.394046][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2277'. [ 433.403358][T13340] binder: 13339:13340 ioctl c018620c 80000240 returned -1 [ 433.443443][T13342] se_dev->se_dev_ptr already set for storage object [ 433.496373][T13345] se_dev->se_dev_ptr already set for storage object [ 433.520267][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2280'. [ 433.526224][T13347] binder: 13346:13347 ioctl c018620c 80000240 returned -1 [ 433.526376][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2280'. [ 435.155091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 435.197455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 435.335566][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2285'. [ 435.345621][T13366] binder: 13365:13366 ioctl c018620c 80000240 returned -1 [ 435.345829][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2285'. [ 435.537842][T13371] se_dev->se_dev_ptr already set for storage object [ 435.751754][T13377] se_dev->se_dev_ptr already set for storage object [ 435.905117][T13380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2290'. [ 435.912634][T13380] binder: 13379:13380 ioctl c018620c 80000240 returned -1 [ 435.913901][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2291'. [ 435.915730][T13382] binder: 13381:13382 ioctl c018620c 80000240 returned -1 [ 435.915891][T13382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2291'. [ 436.066824][T13386] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 436.066842][T13386] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 436.067052][T13386] vhci_hcd vhci_hcd.0: Device attached [ 436.737761][ T9518] usb 42-1: SetAddress Request (2) to port 0 [ 436.737847][ T9518] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 438.038201][T13407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2296'. [ 438.074175][T13407] binder: 13405:13407 ioctl c018620c 80000240 returned -1 [ 438.074408][T13407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2296'. [ 438.382162][T13413] se_dev->se_dev_ptr already set for storage object [ 438.663252][T13387] vhci_hcd: connection reset by peer [ 438.666914][ T12] vhci_hcd vhci_hcd.2: stop threads [ 438.666936][ T12] vhci_hcd vhci_hcd.2: release socket [ 438.666979][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 438.825131][T13416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2300'. [ 438.873700][T13416] binder: 13415:13416 ioctl c018620c 80000240 returned -1 [ 438.983679][T13418] se_dev->se_dev_ptr already set for storage object [ 439.039084][T13424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2302'. [ 439.042190][T13424] binder: 13423:13424 ioctl c018620c 80000240 returned -1 [ 439.042459][T13424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2302'. [ 439.128660][ T44] audit: type=1800 audit(1790288806.128:4787): pid=13421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2301" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 439.183762][T13427] netlink: 'syz.0.2301': attribute type 9 has an invalid length. [ 439.501304][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.501335][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.093489][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2306'. [ 440.101694][T13438] binder: 13437:13438 ioctl c018620c 80000240 returned -1 [ 440.104274][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2306'. [ 440.121240][T13440] se_dev->se_dev_ptr already set for storage object [ 440.253173][T13442] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 440.255255][T13442] CIFS: Attempting to mount //127.0.0.1/share [ 440.547821][T13447] se_dev->se_dev_ptr already set for storage object [ 440.627872][ T44] audit: type=1326 audit(1790288807.628:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 440.628707][ T44] audit: type=1326 audit(1790288807.628:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 440.635346][ T44] audit: type=1326 audit(1790288807.628:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf704efec code=0x7ffc0000 [ 440.635373][ T44] audit: type=1326 audit(1790288807.628:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 440.635393][ T44] audit: type=1326 audit(1790288807.628:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 440.637072][ T44] audit: type=1326 audit(1790288807.628:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf704efec code=0x7ffc0000 [ 440.639236][ T44] audit: type=1326 audit(1790288807.638:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 440.640405][ T44] audit: type=1326 audit(1790288807.638:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 440.641525][ T44] audit: type=1326 audit(1790288807.638:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13448 comm="syz.2.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf704efec code=0x7ffc0000 [ 440.714453][ T7572] udevd[7572]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.750414][T13454] se_dev->se_dev_ptr already set for storage object [ 440.751673][T13454] UDC core: g1: couldn't find an available UDC or it's busy [ 440.895638][T13442] CIFS: VFS: Error connecting to socket. Aborting operation. [ 440.901520][T13442] CIFS: VFS: cifs_mount failed w/return code = -4 [ 440.998710][T13462] se_dev->se_dev_ptr already set for storage object [ 441.093570][T13464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'. [ 441.125795][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2314'. [ 441.128148][T13466] binder: 13465:13466 ioctl c018620c 80000240 returned -1 [ 441.128424][T13466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2314'. [ 441.150993][T13467] binder: 13463:13467 ioctl c018620c 80000240 returned -1 [ 441.153282][T13467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2313'. [ 441.492586][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2318'. [ 441.494852][T13477] binder: 13476:13477 ioctl c018620c 80000240 returned -1 [ 441.494993][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2318'. [ 441.634958][T13480] se_dev->se_dev_ptr already set for storage object [ 441.687059][T13482] se_dev->se_dev_ptr already set for storage object [ 441.707757][ T7570] udevd[7570]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.801905][T13487] se_dev->se_dev_ptr already set for storage object [ 441.804144][T13487] UDC core: g1: couldn't find an available UDC or it's busy [ 441.817916][ T9518] usb 42-1: device descriptor read/8, error -110 [ 441.983106][T13489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2321'. [ 442.208474][T13491] se_dev->se_dev_ptr already set for storage object [ 442.224475][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2324'. [ 442.232219][T13493] binder: 13492:13493 ioctl c018620c 80000240 returned -1 [ 442.232396][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2324'. [ 442.428033][ T9518] usb usb42-port1: attempt power cycle [ 442.533607][T13501] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 442.533626][T13501] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 442.534131][T13501] vhci_hcd vhci_hcd.0: Device attached [ 442.882325][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2327'. [ 442.933313][T13513] binder: 13509:13513 ioctl c018620c 80000240 returned -1 [ 443.157816][ T43] usb 38-1: SetAddress Request (2) to port 0 [ 443.157860][ T43] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 443.378536][ T9518] usb usb42-port1: unable to enumerate USB device [ 443.617196][T13523] se_dev->se_dev_ptr already set for storage object [ 443.850660][T13502] vhci_hcd: connection reset by peer [ 443.862270][ T5821] vhci_hcd vhci_hcd.0: stop threads [ 443.862292][ T5821] vhci_hcd vhci_hcd.0: release socket [ 443.862465][ T5821] vhci_hcd vhci_hcd.0: disconnect device [ 444.174569][T13529] se_dev->se_dev_ptr already set for storage object [ 444.184301][T13529] UDC core: g1: couldn't find an available UDC or it's busy [ 444.248694][T13534] binder: 13533:13534 ioctl c018620c 80000240 returned -1 [ 444.261568][T13537] se_dev->se_dev_ptr already set for storage object [ 444.266355][T13532] binder: 13530:13532 ioctl c018620c 80000240 returned -1 [ 444.502527][T13545] binder: 13544:13545 ioctl c018620c 80000240 returned -1 [ 444.531686][T13549] binder: 13548:13549 ioctl c018620c 80000240 returned -1 [ 445.230763][T13562] se_dev->se_dev_ptr already set for storage object [ 445.644130][T13572] se_dev->se_dev_ptr already set for storage object [ 445.645965][T13572] UDC core: g1: couldn't find an available UDC or it's busy [ 445.705967][T13575] binder: 13574:13575 ioctl c018620c 80000240 returned -1 [ 445.871717][T13578] se_dev->se_dev_ptr already set for storage object [ 446.043170][T13581] binder: 13580:13581 ioctl c018620c 80000240 returned -1 [ 446.068687][T13583] binder: 13582:13583 ioctl c018620c 80000240 returned -1 [ 446.180538][T13587] __nla_validate_parse: 11 callbacks suppressed [ 446.180559][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2348'. [ 446.184073][T13587] binder: 13586:13587 ioctl c018620c 80000240 returned -1 [ 446.184463][T13587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2348'. [ 446.769630][T13598] se_dev->se_dev_ptr already set for storage object [ 446.973881][T13601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'. [ 447.011137][T13601] binder: 13600:13601 ioctl c018620c 80000240 returned -1 [ 447.011393][T13601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2352'. [ 447.089674][T13603] binder: 13602:13603 ioctl c018620c 80000240 returned -1 [ 447.090148][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2353'. [ 447.209957][T13609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2362'. [ 447.213546][T13609] binder: 13608:13609 ioctl c018620c 80000240 returned -1 [ 447.213794][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2362'. [ 447.879570][T13621] se_dev->se_dev_ptr already set for storage object [ 448.217664][ T43] usb 38-1: device descriptor read/8, error -110 [ 448.263379][T13623] binder: 13622:13623 ioctl c018620c 80000240 returned -1 [ 448.263831][T13623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2357'. [ 448.268174][T13625] binder: 13624:13625 ioctl c018620c 80000240 returned -1 [ 448.268570][T13625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2358'. [ 448.366112][T13631] se_dev->se_dev_ptr already set for storage object [ 448.462823][T13627] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 448.462849][T13627] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 448.462968][T13627] vhci_hcd vhci_hcd.0: Device attached [ 448.549268][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2361'. [ 448.632143][ T43] usb usb38-port1: attempt power cycle [ 448.727538][ T5828] usb 40-1: SetAddress Request (14) to port 0 [ 448.727577][ T5828] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 449.624025][T13635] vhci_hcd: connection reset by peer [ 449.624249][ T5821] vhci_hcd vhci_hcd.1: stop threads [ 449.624264][ T5821] vhci_hcd vhci_hcd.1: release socket [ 449.624292][ T5821] vhci_hcd vhci_hcd.1: disconnect device [ 449.643936][T13649] binder: 13648:13649 ioctl c018620c 80000240 returned -1 [ 449.718956][ T43] usb usb38-port1: unable to enumerate USB device [ 451.029828][T13668] se_dev->se_dev_ptr already set for storage object [ 451.266440][T13672] binder: 13671:13672 ioctl c018620c 80000240 returned -1 [ 451.267558][T13672] __nla_validate_parse: 2 callbacks suppressed [ 451.267572][T13672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2371'. [ 451.561681][T13677] binder: 13675:13677 ioctl c018620c 80000240 returned -1 [ 451.561954][T13677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2373'. [ 451.566657][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2374'. [ 451.598689][T13680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2374'. [ 451.605972][T13678] se_dev->se_dev_ptr already set for storage object [ 451.981154][T13690] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2376'. [ 453.374623][T13705] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 453.374655][T13705] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 453.374830][T13705] vhci_hcd vhci_hcd.0: Device attached [ 453.426949][T13709] binder: 13708:13709 ioctl c018620c 80000240 returned -1 [ 453.428244][T13709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2381'. [ 453.647559][ T35] usb 38-1: SetAddress Request (6) to port 0 [ 453.647613][ T35] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 453.909835][ T5828] usb 40-1: device descriptor read/8, error -110 [ 454.055917][T13717] se_dev->se_dev_ptr already set for storage object [ 454.182406][T13706] vhci_hcd: connection reset by peer [ 454.182804][ T12] vhci_hcd vhci_hcd.0: stop threads [ 454.182826][ T12] vhci_hcd vhci_hcd.0: release socket [ 454.182869][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 454.308588][ T5828] usb usb40-port1: attempt power cycle [ 454.682936][T13712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.868862][T13724] se_dev->se_dev_ptr already set for storage object [ 454.890199][ T5828] usb usb40-port1: unable to enumerate USB device [ 455.161028][T13729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2386'. [ 455.223221][T13731] binder: 13728:13731 ioctl c018620c 80000240 returned -1 [ 455.225870][T13731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2386'. [ 455.759888][ T5828] usb usb40-port8: attempt power cycle [ 455.814929][T13736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2387'. [ 455.822546][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2387'. [ 456.720323][T13749] binder: 13748:13749 ioctl c018620c 80000240 returned -1 [ 456.725390][T13749] __nla_validate_parse: 1 callbacks suppressed [ 456.725402][T13749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2391'. [ 457.509355][T13756] trusted_key: encrypted_key: insufficient parameters specified [ 457.602883][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2401'. [ 457.669321][T13761] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 457.669408][T13761] udc dummy_udc.0: failed to start g1: -19 [ 457.669764][T13761] UDC core: g1: couldn't find an available UDC or it's busy [ 457.754459][T13762] binder: 13758:13762 ioctl c018620c 0 returned -14 [ 457.755479][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2401'. [ 457.948873][T13764] se_dev->se_dev_ptr already set for storage object [ 457.978133][ T5828] usb usb40-port8: unable to enumerate USB device [ 458.014020][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2396'. [ 458.016000][T13768] binder: 13767:13768 ioctl c018620c 80000240 returned -1 [ 458.026194][T13768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2396'. [ 458.717741][ T35] usb 38-1: device descriptor read/8, error -110 [ 458.945640][T13764] configfs-gadget.g1 gadget.32: HOST MAC 92:a1:13:b0:45:fc [ 458.945667][T13764] configfs-gadget.g1 gadget.32: MAC 96:d4:f5:b7:29:7c [ 459.215354][ T35] usb usb38-port1: attempt power cycle [ 459.327665][T13787] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2399'. [ 459.617482][T13790] binder: 13789:13790 ioctl c018620c 80000240 returned -1 [ 459.624457][T13790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2402'. [ 460.032624][ T35] usb usb38-port1: unable to enumerate USB device [ 460.838386][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2406'. [ 460.926092][T13818] binder: 13816:13818 ioctl c018620c 80000240 returned -1 [ 460.943992][T13817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2406'. [ 460.983659][T13821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2407'. [ 460.993419][T13821] binder: 13820:13821 ioctl c018620c 0 returned -14 [ 461.980656][T13830] se_dev->se_dev_ptr already set for storage object [ 462.000375][T13833] se_dev->se_dev_ptr already set for storage object [ 462.548216][T13851] __nla_validate_parse: 1 callbacks suppressed [ 462.548229][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2413'. [ 462.647792][T13851] binder: 13850:13851 ioctl c018620c 80000240 returned -1 [ 462.919335][T13861] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2414'. [ 463.371145][T13867] smc: removing ib device syz2 [ 463.457335][T13867] smbdirect: ib_dev[syz2] removed [ 463.618806][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2417'. [ 463.624914][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2418'. [ 463.663089][T13874] binder: 13872:13874 ioctl c018620c 0 returned -14 [ 463.663286][T13874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2418'. [ 463.665216][T13873] binder: 13871:13873 ioctl c018620c 80000240 returned -1 [ 463.665562][T13873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2417'. [ 464.501391][T13883] se_dev->se_dev_ptr already set for storage object [ 464.604305][T13885] se_dev->se_dev_ptr already set for storage object [ 465.068137][T13891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2424'. [ 465.159250][ T7570] udevd[7570]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.240996][T13893] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2424'. [ 465.312541][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2423'. [ 465.314384][T13895] binder: 13894:13895 ioctl c018620c 80000240 returned -1 [ 465.340902][ T7574] udevd[7574]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.520837][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2428'. [ 466.524088][T13908] binder: 13907:13908 ioctl c018620c 80000240 returned -1 [ 466.562049][T13910] binder: 13909:13910 ioctl c018620c 80000240 returned -1 [ 466.769234][T13919] se_dev->se_dev_ptr already set for storage object [ 466.967070][ T7571] udevd[7571]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.120962][T13923] se_dev->se_dev_ptr already set for storage object [ 467.456173][T13931] se_dev->se_dev_ptr already set for storage object [ 467.494331][T13933] binder: 13932:13933 ioctl c018620c 80000240 returned -1 [ 467.766096][T13940] __nla_validate_parse: 4 callbacks suppressed [ 467.766158][T13940] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2436'. [ 468.273334][ T7571] udevd[7571]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.360607][T13947] se_dev->se_dev_ptr already set for storage object [ 468.361779][T13947] UDC core: g1: couldn't find an available UDC or it's busy [ 468.557026][T13950] se_dev->se_dev_ptr already set for storage object [ 468.644096][T13953] se_dev->se_dev_ptr already set for storage object [ 468.684664][ T7572] udevd[7572]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.839768][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2443'. [ 468.842807][T13958] binder: 13957:13958 ioctl c018620c 80000240 returned -1 [ 468.843111][T13958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2443'. [ 468.991152][T13964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2444'. [ 468.995263][T13965] netlink: 'syz.1.2442': attribute type 5 has an invalid length. [ 468.995285][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2442'. [ 469.009961][T13964] binder: 13961:13964 ioctl c018620c 80000240 returned -1 [ 469.056300][T13963] futex_wake_op: syz.3.2445 tries to shift op by 144; fix this program [ 469.578154][T13972] se_dev->se_dev_ptr already set for storage object [ 470.713154][T13988] se_dev->se_dev_ptr already set for storage object [ 470.717118][T13988] UDC core: g1: couldn't find an available UDC or it's busy [ 470.792803][T13991] se_dev->se_dev_ptr already set for storage object [ 470.863767][T13993] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2449'. [ 471.165067][T13996] se_dev->se_dev_ptr already set for storage object [ 471.494684][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2454'. [ 471.496527][T14001] binder: 14000:14001 ioctl c018620c 80000240 returned -1 [ 471.496693][T14001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2454'. [ 471.604935][T14005] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 472.171598][ T7572] udevd[7572]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.339018][T14018] se_dev->se_dev_ptr already set for storage object [ 472.560836][T14023] netlink: 'syz.1.2456': attribute type 5 has an invalid length. [ 472.560873][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2456'. [ 472.741723][T14025] se_dev->se_dev_ptr already set for storage object [ 472.751810][T14025] UDC core: g1: couldn't find an available UDC or it's busy [ 472.820940][T14028] se_dev->se_dev_ptr already set for storage object [ 472.823074][T14029] se_dev->se_dev_ptr already set for storage object [ 472.855518][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2462'. [ 472.916125][T14031] binder: 14030:14031 ioctl c018620c 80000240 returned -1 [ 473.084926][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2464'. [ 473.098353][T14038] binder: 14037:14038 ioctl c018620c 80000240 returned -1 [ 473.098553][T14038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2464'. [ 473.199594][T14042] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2463'. [ 474.149317][T14052] se_dev->se_dev_ptr already set for storage object [ 474.232795][ T6459] udevd[6459]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.342278][T14055] se_dev->se_dev_ptr already set for storage object [ 474.928427][T14065] se_dev->se_dev_ptr already set for storage object [ 474.941633][T14069] se_dev->se_dev_ptr already set for storage object [ 475.262624][T14072] netlink: 'syz.0.2473': attribute type 5 has an invalid length. [ 475.262645][T14072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2473'. [ 475.456132][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2474'. [ 475.458686][T14075] binder: 14074:14075 ioctl c018620c 80000240 returned -1 [ 475.458857][T14075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2474'. [ 475.481929][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2475'. [ 475.484369][T14077] binder: 14076:14077 ioctl c018620c 80000240 returned -1 [ 475.484820][T14077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2475'. [ 475.596727][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2477'. [ 475.601110][T14083] binder: 14082:14083 ioctl c018620c 80000240 returned -1 [ 475.625139][T14085] se_dev->se_dev_ptr already set for storage object [ 476.007711][T14093] se_dev->se_dev_ptr already set for storage object [ 476.856783][T14102] se_dev->se_dev_ptr already set for storage object [ 476.904398][T14106] se_dev->se_dev_ptr already set for storage object [ 477.174959][T14108] binder: 14107:14108 ioctl c018620c 80000240 returned -1 [ 477.290833][T14113] binder: 14112:14113 ioctl c018620c 80000240 returned -1 [ 477.484610][T14120] netlink: 'syz.0.2488': attribute type 5 has an invalid length. [ 477.733264][T14123] se_dev->se_dev_ptr already set for storage object [ 477.741940][T14125] se_dev->se_dev_ptr already set for storage object [ 477.856995][T14127] binder: 14126:14127 ioctl c018620c 80000240 returned -1 [ 478.393419][T14134] se_dev->se_dev_ptr already set for storage object [ 478.442803][T14136] se_dev->se_dev_ptr already set for storage object [ 478.845153][T14142] __nla_validate_parse: 6 callbacks suppressed [ 478.845172][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2497'. [ 478.900225][T14142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2497'. [ 479.161879][T14147] se_dev->se_dev_ptr already set for storage object [ 479.162594][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2498'. [ 479.290944][T14149] binder: 14146:14149 ioctl c018620c 80000240 returned -1 [ 479.291137][T14149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2498'. [ 479.429100][T14157] se_dev->se_dev_ptr already set for storage object [ 479.681768][T14161] se_dev->se_dev_ptr already set for storage object [ 479.736662][T14163] se_dev->se_dev_ptr already set for storage object [ 479.836925][ T44] kauditd_printk_skb: 212 callbacks suppressed [ 479.836937][ T44] audit: type=1800 audit(1790288845.825:5009): pid=14160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2503" name="file1" dev="sda1" ino=2039 res=0 errno=0 [ 479.906167][T14164] netlink: 'syz.3.2503': attribute type 9 has an invalid length. [ 480.165141][T14167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2506'. [ 480.167079][T14167] binder: 14166:14167 ioctl c018620c 80000240 returned -1 [ 480.399526][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'. [ 480.401395][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2507'. [ 481.755282][T14186] se_dev->se_dev_ptr already set for storage object [ 482.024159][T14193] se_dev->se_dev_ptr already set for storage object [ 482.034009][T14196] se_dev->se_dev_ptr already set for storage object [ 482.195584][T14200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2515'. [ 482.202921][T14200] binder: 14199:14200 ioctl c018620c 80000240 returned -1 [ 482.203317][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2515'. [ 482.266155][T14201] netlink: 'syz.2.2513': attribute type 5 has an invalid length. [ 482.266185][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2513'. [ 482.552485][T14208] binder: 14207:14208 ioctl c018620c 80000240 returned -1 [ 483.326057][T14222] se_dev->se_dev_ptr already set for storage object [ 483.733103][T14230] se_dev->se_dev_ptr already set for storage object [ 483.929583][T14234] se_dev->se_dev_ptr already set for storage object [ 484.792896][T14241] __nla_validate_parse: 1 callbacks suppressed [ 484.792909][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2525'. [ 484.820381][T14241] binder: 14240:14241 ioctl c018620c 80000240 returned -1 [ 484.820639][T14241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2525'. [ 484.907857][T14246] se_dev->se_dev_ptr already set for storage object [ 485.084471][T14248] netlink: 'syz.2.2527': attribute type 5 has an invalid length. [ 485.084493][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2527'. [ 485.255373][T14250] se_dev->se_dev_ptr already set for storage object [ 485.359686][T14254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2529'. [ 485.371125][T14254] binder: 14252:14254 ioctl c018620c 80000240 returned -1 [ 485.996973][T14264] se_dev->se_dev_ptr already set for storage object [ 486.493187][T14268] ptp ptp0: only physical clock in use now [ 486.605425][T14268] ptp ptp0: new virtual clock ptp2 [ 486.686518][T14268] ptp ptp0: new virtual clock ptp3 [ 486.714613][T14268] ptp ptp0: new virtual clock ptp4 [ 486.751360][T14268] ptp ptp0: new virtual clock ptp5 [ 486.817184][T14268] ptp ptp0: new virtual clock ptp6 [ 486.817199][T14268] ptp ptp0: guarantee physical clock free running [ 487.463122][T14287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2536'. [ 487.489434][T14287] binder: 14286:14287 ioctl c018620c 80000240 returned -1 [ 487.489583][T14287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2536'. [ 487.825457][T14291] se_dev->se_dev_ptr already set for storage object [ 487.949559][T14293] se_dev->se_dev_ptr already set for storage object [ 488.224703][T14303] netlink: 'syz.1.2541': attribute type 5 has an invalid length. [ 488.224787][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'. [ 489.275123][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2544'. [ 489.277191][T14315] binder: 14313:14315 ioctl c018620c 80000240 returned -1 [ 489.372335][T14319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2547'. [ 489.375750][T14319] binder: 14317:14319 ioctl c018620c 80000240 returned -1 [ 489.377502][T14319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2547'. [ 489.611816][T14326] se_dev->se_dev_ptr already set for storage object [ 490.425454][T14341] se_dev->se_dev_ptr already set for storage object [ 490.950722][T14348] netlink: 'syz.2.2554': attribute type 5 has an invalid length. [ 490.950755][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2554'. [ 491.826552][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2557'. [ 491.832935][T14357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2557'. [ 491.985723][T14359] se_dev->se_dev_ptr already set for storage object [ 492.434930][T14367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2559'. [ 492.515002][T14368] binder: 14364:14368 ioctl c018620c 80000240 returned -1 [ 492.520833][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2561'. [ 492.522781][T14371] binder: 14370:14371 ioctl c018620c 80000240 returned -1 [ 492.523196][T14371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2561'. [ 492.656003][T14374] se_dev->se_dev_ptr already set for storage object [ 494.039172][T14387] netlink: 'syz.3.2564': attribute type 5 has an invalid length. [ 494.039201][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2564'. [ 494.629560][T14393] se_dev->se_dev_ptr already set for storage object [ 494.718057][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2567'. [ 494.815212][T14396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2567'. [ 494.886802][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2570'. [ 494.982058][T14402] binder: 14400:14402 ioctl c018620c 80000240 returned -1 [ 494.997192][ T7570] udevd[7570]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.367463][T14411] se_dev->se_dev_ptr already set for storage object [ 495.606325][T14415] binder: 14414:14415 ioctl c018620c 80000240 returned -1 [ 497.025109][T14432] netlink: 'syz.0.2577': attribute type 5 has an invalid length. [ 497.025185][T14432] __nla_validate_parse: 2 callbacks suppressed [ 497.025203][T14432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2577'. [ 497.992032][T14436] se_dev->se_dev_ptr already set for storage object [ 498.399903][T14439] binder: 14438:14439 ioctl c018620c 80000240 returned -1 [ 498.400406][T14439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2579'. [ 498.455529][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2580'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 498.516773][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2580'. [ 498.658447][T14443] 9pnet_virtio: no channels available for device syz [ 498.659774][T14443] overlay: ./file0 is not a directory [ 498.831940][T14425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.406825][T14460] se_dev->se_dev_ptr already set for storage object [ 499.616513][ T7571] udevd[7571]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.633513][T14462] se_dev->se_dev_ptr already set for storage object [ 499.713044][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2585'. [ 499.715193][T14465] binder: 14464:14465 ioctl c018620c 80000240 returned -1 [ 499.867932][T14470] se_dev->se_dev_ptr already set for storage object [ 500.061735][T14475] binder: 14474:14475 ioctl c018620c 80000240 returned -1 [ 500.062180][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2590'. [ 500.161259][T14479] netlink: 'syz.3.2589': attribute type 5 has an invalid length. [ 500.161292][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2589'. [ 500.509185][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2591'. [ 500.536862][T14484] binder: 14483:14484 ioctl c018620c 0 returned -14 [ 500.537021][T14484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2591'. [ 500.939988][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.940048][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.196358][T14477] ftl_cs: FTL header not found. [ 501.502635][T14477] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 502.074213][T14503] netlink: 'syz.1.2593': attribute type 5 has an invalid length. [ 502.074278][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2593'. [ 502.362899][T14505] se_dev->se_dev_ptr already set for storage object [ 502.503840][T14510] se_dev->se_dev_ptr already set for storage object [ 502.514693][T14512] se_dev->se_dev_ptr already set for storage object [ 503.182214][T14518] binder: 14517:14518 ioctl c018620c 80000240 returned -1 [ 503.184424][T14518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2599'. [ 503.858962][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2601'. [ 503.907658][T14526] binder: 14524:14526 ioctl c018620c 0 returned -14 [ 503.907849][T14526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2601'. [ 504.168594][T14533] netlink: 'syz.1.2603': attribute type 5 has an invalid length. [ 504.168614][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2603'. [ 504.420624][T14537] netlink: 'syz.2.2604': attribute type 5 has an invalid length. [ 504.420745][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2604'. [ 504.929315][T14543] se_dev->se_dev_ptr already set for storage object [ 505.139402][T14548] se_dev->se_dev_ptr already set for storage object [ 505.173281][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2608'. [ 505.176426][T14550] binder: 14549:14550 ioctl c018620c 80000240 returned -1 [ 505.176751][T14550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2608'. [ 505.283705][T14553] se_dev->se_dev_ptr already set for storage object [ 505.553218][T14559] se_dev->se_dev_ptr already set for storage object [ 505.664717][T14562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2612'. [ 505.762077][T14563] binder: 14561:14563 ioctl c018620c 0 returned -14 [ 505.762583][T14563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2612'. [ 506.179974][T14567] netlink: 'syz.0.2613': attribute type 5 has an invalid length. [ 506.819000][T14572] kAFS: unable to lookup cell '({^@' [ 507.147154][T14579] netlink: 'syz.3.2615': attribute type 5 has an invalid length. [ 507.147185][T14579] __nla_validate_parse: 1 callbacks suppressed [ 507.147196][T14579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2615'. [ 507.304344][T14582] se_dev->se_dev_ptr already set for storage object [ 507.641337][T14586] se_dev->se_dev_ptr already set for storage object [ 507.979795][T14591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2619'. [ 507.992341][T14594] se_dev->se_dev_ptr already set for storage object [ 508.011166][T14591] binder: 14590:14591 ioctl c018620c 80000240 returned -1 [ 508.011288][T14591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2619'. [ 508.096634][T14598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2622'. [ 508.099953][T14598] binder: 14597:14598 ioctl c018620c 80000240 returned -1 [ 508.124649][T14600] se_dev->se_dev_ptr already set for storage object [ 508.563885][T14609] netlink: 'syz.1.2625': attribute type 5 has an invalid length. [ 508.563916][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2625'. [ 509.856200][T14624] se_dev->se_dev_ptr already set for storage object [ 510.128267][T14634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.366939][T14635] netlink: 'syz.1.2628': attribute type 5 has an invalid length. [ 510.366959][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2628'. [ 510.368696][T14637] se_dev->se_dev_ptr already set for storage object [ 510.640137][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2633'. [ 510.709569][T14642] binder: 14640:14642 ioctl c018620c 80000240 returned -1 [ 510.709882][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2633'. [ 510.747237][T14644] se_dev->se_dev_ptr already set for storage object [ 510.885129][T14647] se_dev->se_dev_ptr already set for storage object [ 511.009404][T14650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2636'. [ 511.047061][T14650] binder: 14649:14650 ioctl c018620c 80000240 returned -1 [ 511.382255][T14660] netlink: 'syz.0.2637': attribute type 5 has an invalid length. [ 511.382403][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2637'. [ 511.763392][T14665] se_dev->se_dev_ptr already set for storage object [ 511.897228][T14667] se_dev->se_dev_ptr already set for storage object [ 512.367903][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2643'. [ 512.371055][T14673] binder: 14672:14673 ioctl c018620c 80000240 returned -1 [ 512.371336][T14673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2643'. [ 512.390058][T14675] se_dev->se_dev_ptr already set for storage object [ 513.439850][T14688] se_dev->se_dev_ptr already set for storage object [ 513.542589][T14690] netlink: 'syz.1.2647': attribute type 5 has an invalid length. [ 513.542623][T14690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2647'. [ 513.766699][T14693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2648'. [ 513.772201][T14693] binder: 14692:14693 ioctl c018620c 80000240 returned -1 [ 513.911501][T14698] se_dev->se_dev_ptr already set for storage object [ 514.215771][T14704] netlink: 'syz.3.2651': attribute type 5 has an invalid length. [ 514.215793][T14704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2651'. [ 514.351933][T14711] se_dev->se_dev_ptr already set for storage object [ 514.772926][T14717] se_dev->se_dev_ptr already set for storage object [ 515.393219][ T7574] udevd[7574]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.561513][T14728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2658'. [ 515.609504][T14728] binder: 14727:14728 ioctl c018620c 80000240 returned -1 [ 515.884506][T14736] se_dev->se_dev_ptr already set for storage object [ 516.110513][T14739] netlink: 'syz.2.2660': attribute type 5 has an invalid length. [ 516.110544][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2660'. [ 516.355760][T14744] se_dev->se_dev_ptr already set for storage object [ 516.625789][T14746] se_dev->se_dev_ptr already set for storage object [ 516.658306][T14748] se_dev->se_dev_ptr already set for storage object [ 516.886056][T14757] netlink: 'syz.1.2666': attribute type 5 has an invalid length. [ 517.081234][T14762] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2668'. [ 517.803147][T14769] binder: 14765:14769 ioctl c018620c 80000240 returned -1 [ 517.818671][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2669'. [ 517.867982][T14772] se_dev->se_dev_ptr already set for storage object [ 517.923752][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2670'. [ 518.054671][T14778] se_dev->se_dev_ptr already set for storage object [ 518.255119][T14781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2673'. [ 518.261822][T14784] se_dev->se_dev_ptr already set for storage object [ 518.265218][T14781] binder: 14779:14781 ioctl c018620c 80000240 returned -1 [ 518.266120][T14781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2673'. [ 518.860013][T14796] netlink: 'syz.0.2677': attribute type 5 has an invalid length. [ 518.860178][T14796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2677'. [ 518.912882][T14797] netlink: 'syz.1.2678': attribute type 5 has an invalid length. [ 519.641202][T14803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2679'. [ 519.712980][T14806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2680'. [ 519.715012][T14806] binder: 14805:14806 ioctl c018620c 80000240 returned -1 [ 519.837068][T14809] se_dev->se_dev_ptr already set for storage object [ 520.077101][T14816] se_dev->se_dev_ptr already set for storage object [ 520.138257][T14819] se_dev->se_dev_ptr already set for storage object [ 520.268331][T14822] se_dev->se_dev_ptr already set for storage object [ 520.333439][T14826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2687'. [ 520.335373][T14826] binder: 14825:14826 ioctl c018620c 80000240 returned -1 [ 520.335558][T14826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2687'. [ 520.345588][T14812] netlink: 'syz.1.2682': attribute type 2 has an invalid length. [ 520.388434][T14822] UDC core: g1: couldn't find an available UDC or it's busy [ 521.081362][T14832] XFS (nbd1): Invalid device [./loop0], error=-16 [ 521.484405][T14844] netlink: 'syz.3.2690': attribute type 5 has an invalid length. [ 521.780417][T14852] netlink: 'syz.0.2691': attribute type 5 has an invalid length. [ 521.938692][T14849] se_dev->se_dev_ptr already set for storage object [ 522.172096][T14858] se_dev->se_dev_ptr already set for storage object [ 522.239858][T14860] se_dev->se_dev_ptr already set for storage object [ 522.293621][T14863] se_dev->se_dev_ptr already set for storage object [ 522.304693][T14863] UDC core: g1: couldn't find an available UDC or it's busy [ 522.364979][T14864] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2694'. [ 522.558003][T14867] binder: 14866:14867 ioctl c018620c 80000240 returned -1 [ 522.585493][T14869] binder: 14868:14869 ioctl c018620c 80000240 returned -1 [ 523.038119][T14880] se_dev->se_dev_ptr already set for storage object [ 523.374542][ T7571] udevd[7571]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.764034][T14887] netlink: 'syz.2.2703': attribute type 5 has an invalid length. [ 523.950074][T14890] se_dev->se_dev_ptr already set for storage object [ 524.410208][T14896] se_dev->se_dev_ptr already set for storage object [ 524.505779][T14898] se_dev->se_dev_ptr already set for storage object [ 524.510805][T14898] UDC core: g1: couldn't find an available UDC or it's busy [ 524.859167][T14907] __nla_validate_parse: 3 callbacks suppressed [ 524.859181][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2708'. [ 524.861159][T14907] binder: 14904:14907 ioctl c018620c 80000240 returned -1 [ 524.998509][T14912] se_dev->se_dev_ptr already set for storage object [ 526.159852][T14927] se_dev->se_dev_ptr already set for storage object [ 526.230229][T14928] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2712'. [ 526.437786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 526.538835][T14931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2715'. [ 526.557042][T14931] binder: 14930:14931 ioctl c018620c 80000240 returned -1 [ 526.639887][T14934] se_dev->se_dev_ptr already set for storage object [ 526.973897][T14938] se_dev->se_dev_ptr already set for storage object [ 526.976340][T14938] UDC core: g1: couldn't find an available UDC or it's busy [ 527.067700][T14940] netlink: 'syz.3.2716': attribute type 5 has an invalid length. [ 527.133315][T14944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2719'. [ 527.280410][T14944] binder: 14942:14944 ioctl c018620c 80000240 returned -1 [ 527.472010][T14949] se_dev->se_dev_ptr already set for storage object [ 527.612817][ T7010] udevd[7010]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.144688][T14955] se_dev->se_dev_ptr already set for storage object [ 528.314147][T14959] loop5: detected capacity change from 0 to 6 [ 528.333096][T14959] Dev loop5: unable to read RDB block 6 [ 528.333157][T14959] loop5: unable to read partition table [ 528.334003][T14959] loop5: partition table beyond EOD, truncated [ 528.334194][T14959] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 528.573691][T14963] se_dev->se_dev_ptr already set for storage object [ 528.724420][T14962] netlink: 'syz.3.2725': attribute type 8 has an invalid length. [ 529.150938][T14972] se_dev->se_dev_ptr already set for storage object [ 529.151962][T14972] UDC core: g1: couldn't find an available UDC or it's busy [ 529.208752][T14973] netlink: 'syz.1.2726': attribute type 5 has an invalid length. [ 529.208771][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2726'. [ 529.252853][T14975] se_dev->se_dev_ptr already set for storage object [ 529.283095][T14977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2730'. [ 529.285545][T14977] binder: 14976:14977 ioctl c018620c 80000240 returned -1 [ 529.400254][T14980] se_dev->se_dev_ptr already set for storage object [ 529.427668][ T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 529.469561][T14982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2732'. [ 529.471368][T14982] binder: 14981:14982 ioctl c018620c 80000240 returned -1 [ 529.471626][T14982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2732'. [ 529.644968][T14985] se_dev->se_dev_ptr already set for storage object [ 529.801419][T14987] se_dev->se_dev_ptr already set for storage object [ 530.129221][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 530.129901][ T10] usb 5-1: New USB device found, idVendor=0caa, idProduct=3001, bcdDevice=3e.c2 [ 530.132899][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 530.132919][ T10] usb 5-1: can't read configurations, error -71 [ 530.265868][T14998] se_dev->se_dev_ptr already set for storage object [ 530.944927][T15005] se_dev->se_dev_ptr already set for storage object [ 530.947159][T15005] UDC core: g1: couldn't find an available UDC or it's busy [ 530.960047][T15007] se_dev->se_dev_ptr already set for storage object [ 531.158633][T15014] se_dev->se_dev_ptr already set for storage object [ 531.314524][T15017] netlink: 'syz.2.2744': attribute type 5 has an invalid length. [ 531.314643][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2744'. [ 531.770783][T15019] se_dev->se_dev_ptr already set for storage object [ 531.819020][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2746'. [ 531.820995][T15021] binder: 15020:15021 ioctl c018620c 80000240 returned -1 [ 531.841158][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2747'. [ 531.843144][T15023] binder: 15022:15023 ioctl c018620c 80000240 returned -1 [ 531.843539][T15023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2747'. [ 532.013322][T15027] bond0: left allmulticast mode [ 532.109072][T15034] se_dev->se_dev_ptr already set for storage object [ 532.109860][T15035] se_dev->se_dev_ptr already set for storage object [ 532.148088][T15039] se_dev->se_dev_ptr already set for storage object [ 532.206850][T15039] UDC core: g1: couldn't find an available UDC or it's busy [ 532.268574][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2753'. [ 532.270555][T15047] binder: 15045:15047 ioctl c018620c 80000240 returned -1 [ 532.275535][T15048] se_dev->se_dev_ptr already set for storage object [ 532.277062][T15048] UDC core: g1: couldn't find an available UDC or it's busy [ 532.367427][T15054] se_dev->se_dev_ptr already set for storage object [ 532.371919][T15054] UDC core: g1: couldn't find an available UDC or it's busy [ 532.615751][T15066] netlink: 'syz.0.2757': attribute type 5 has an invalid length. [ 532.615771][T15066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2757'. [ 532.929827][T15069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2758'. [ 532.932655][T15069] binder: 15068:15069 ioctl c018620c 80000240 returned -1 [ 532.932994][T15069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2758'. [ 532.996736][T15074] se_dev->se_dev_ptr already set for storage object [ 533.586514][T15086] se_dev->se_dev_ptr already set for storage object [ 533.859865][T15082] FAULT_INJECTION: forcing a failure. [ 533.859865][T15082] name failslab, interval 1, probability 0, space 0, times 0 [ 533.859890][T15082] CPU: 0 UID: 0 PID: 15082 Comm: syz.1.2762 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.859908][T15082] Tainted: [L]=SOFTLOCKUP [ 533.859913][T15082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 533.859921][T15082] Call Trace: [ 533.859925][T15082] [ 533.859930][T15082] dump_stack_lvl+0x100/0x190 [ 533.859951][T15082] should_fail_ex.cold+0x5/0xa [ 533.859966][T15082] should_failslab+0xc2/0x120 [ 533.859984][T15082] kmem_cache_alloc_noprof+0x92/0x6a0 [ 533.860000][T15082] ? dev_queue_xmit_nit+0x38/0xa60 [ 533.860019][T15082] ? skb_clone+0x190/0x400 [ 533.860038][T15082] skb_clone+0x190/0x400 [ 533.860057][T15082] dev_queue_xmit_nit+0x255/0xa60 [ 533.860078][T15082] dev_hard_start_xmit+0x2f5/0x760 [ 533.860096][T15082] __dev_queue_xmit+0x1bbf/0x4970 [ 533.860116][T15082] ? __pfx___dev_queue_xmit+0x10/0x10 [ 533.860131][T15082] ? trace_kmem_cache_alloc+0xdd/0x100 [ 533.860146][T15082] ? __kasan_slab_alloc+0x89/0x90 [ 533.860163][T15082] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 533.860178][T15082] ? kmalloc_reserve+0x148/0x350 [ 533.860192][T15082] ? skb_release_data+0x6ca/0x8e0 [ 533.860210][T15082] ? kmalloc_reserve+0xf9/0x350 [ 533.860223][T15082] ? skb_headers_offset_update+0x129/0x260 [ 533.860236][T15082] ? pskb_expand_head+0x5c4/0x10e0 [ 533.860257][T15082] ? __pfx_pskb_expand_head+0x10/0x10 [ 533.860274][T15082] ? __asan_memcpy+0x3c/0x60 [ 533.860288][T15082] __bpf_redirect+0x989/0xf90 [ 533.860303][T15082] bpf_clone_redirect+0x37b/0x500 [ 533.860319][T15082] bpf_prog_69c2527fbc57d46b+0x5f/0x68 [ 533.860330][T15082] ? __schedule+0x126b/0x6920 [ 533.860353][T15082] ? preempt_schedule_irq+0x79/0x90 [ 533.860366][T15082] ? __pfx___schedule+0x10/0x10 [ 533.860386][T15082] ? preempt_schedule_thunk+0x16/0x40 [ 533.860400][T15082] ? preempt_schedule_common+0x3c/0xb0 [ 533.860420][T15082] ? __pfx___cant_migrate+0x10/0x10 [ 533.860432][T15082] ? bpf_test_timer_continue+0x17b/0x5e0 [ 533.860446][T15082] ? lockdep_hardirqs_on+0x7d/0x110 [ 533.860458][T15082] bpf_test_run+0x39c/0xa40 [ 533.860472][T15082] ? bpf_test_run+0x1c6/0xa40 [ 533.860487][T15082] ? __pfx_bpf_test_run+0x10/0x10 [ 533.860526][T15082] ? eth_type_trans+0x2e3/0x720 [ 533.860543][T15082] bpf_prog_test_run_skb+0x15b3/0x3530 [ 533.860561][T15082] ? lock_acquire+0x1d1/0x380 [ 533.860584][T15082] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 533.860601][T15082] ? fput+0x7c/0x100 [ 533.860618][T15082] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 533.860634][T15082] __sys_bpf+0x2265/0x4a30 [ 533.860650][T15082] ? __pfx___sys_bpf+0x10/0x10 [ 533.860662][T15082] ? __pfx_futex_hash+0x10/0x10 [ 533.860690][T15082] ? percpu_counter_add_batch+0xb9/0x230 [ 533.860709][T15082] ? errseq_sample+0x51/0x70 [ 533.860729][T15082] ? file_init_path+0x48e/0x670 [ 533.860754][T15082] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 533.860769][T15082] ? xfd_validate_state+0x129/0x190 [ 533.860790][T15082] ? __ia32_sys_bpf+0xcc/0x170 [ 533.860802][T15082] __ia32_sys_bpf+0xcc/0x170 [ 533.860815][T15082] ? __do_fast_syscall_32+0xb3/0x8b0 [ 533.860830][T15082] __do_fast_syscall_32+0x13a/0x8b0 [ 533.860842][T15082] ? lockdep_hardirqs_on+0x7d/0x110 [ 533.860855][T15082] do_fast_syscall_32+0x32/0x70 [ 533.860868][T15082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.860884][T15082] RIP: 0023:0xf7ff6fec [ 533.860897][T15082] Code: Unable to access opcode bytes at 0xf7ff6fc2. [ 533.860902][T15082] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 533.860917][T15082] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080002300 [ 533.860927][T15082] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.860937][T15082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.860946][T15082] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 533.860955][T15082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.860975][T15082] [ 534.504209][T15091] se_dev->se_dev_ptr already set for storage object [ 534.505329][T15091] UDC core: g1: couldn't find an available UDC or it's busy [ 536.238300][T15094] se_dev->se_dev_ptr already set for storage object [ 536.240887][T15094] UDC core: g1: couldn't find an available UDC or it's busy [ 536.297081][T15098] se_dev->se_dev_ptr already set for storage object [ 536.297175][T15099] se_dev->se_dev_ptr already set for storage object [ 536.306253][T15098] UDC core: g1: couldn't find an available UDC or it's busy [ 537.526977][T15111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2773'. [ 537.529010][T15111] binder: 15110:15111 ioctl c018620c 80000240 returned -1 [ 537.529188][T15111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2773'. [ 537.685540][T15116] netlink: 'syz.1.2771': attribute type 5 has an invalid length. [ 537.685560][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2771'. [ 538.000184][T15108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2772'. [ 538.319510][T15123] se_dev->se_dev_ptr already set for storage object [ 538.342833][T15123] UDC core: g1: couldn't find an available UDC or it's busy [ 538.364006][T15128] se_dev->se_dev_ptr already set for storage object [ 538.398341][T15132] se_dev->se_dev_ptr already set for storage object [ 538.400846][T15132] UDC core: g1: couldn't find an available UDC or it's busy [ 538.435280][T15135] se_dev->se_dev_ptr already set for storage object [ 538.438106][T15135] UDC core: g1: couldn't find an available UDC or it's busy [ 538.481350][T15137] se_dev->se_dev_ptr already set for storage object [ 538.525927][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'. [ 538.531695][T15142] binder: 15141:15142 ioctl c018620c 80000240 returned -1 [ 538.531871][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2782'. [ 538.610130][T15145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2781'. [ 538.616707][T15145] overlayfs: failed to resolve '/OeKaW@K': -2 [ 539.765917][T15156] se_dev->se_dev_ptr already set for storage object [ 539.770737][T15156] UDC core: g1: couldn't find an available UDC or it's busy [ 539.863409][T15159] netlink: 'syz.2.2785': attribute type 5 has an invalid length. [ 539.863429][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2785'. [ 539.943051][T15160] jffs2: notice: (15160) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 540.200227][T15160] overlayfs: upper fs does not support tmpfile. [ 540.235028][T15160] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 540.375552][T15167] se_dev->se_dev_ptr already set for storage object [ 540.422307][T15169] se_dev->se_dev_ptr already set for storage object [ 540.423474][T15169] UDC core: g1: couldn't find an available UDC or it's busy [ 540.460770][T15171] se_dev->se_dev_ptr already set for storage object [ 540.475452][T15171] UDC core: g1: couldn't find an available UDC or it's busy [ 540.596492][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2791'. [ 540.599269][T15174] binder: 15173:15174 ioctl c018620c 80000240 returned -1 [ 540.599541][T15174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2791'. [ 540.727015][ T5758] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 540.727325][ T5758] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 540.805229][T15179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.832792][T15184] se_dev->se_dev_ptr already set for storage object [ 540.834350][T15184] UDC core: g1: couldn't find an available UDC or it's busy [ 540.872834][T15179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.926198][T15179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.606229][T15194] se_dev->se_dev_ptr already set for storage object [ 541.737730][ T5758] Bluetooth: hci3: command 0x0c1a tx timeout [ 541.871728][T15199] se_dev->se_dev_ptr already set for storage object [ 541.928158][T15201] se_dev->se_dev_ptr already set for storage object [ 541.938296][T15201] UDC core: g1: couldn't find an available UDC or it's busy [ 542.363163][T15206] netlink: zone id is out of range [ 542.363277][T15206] netlink: zone id is out of range [ 542.363472][T15206] netlink: zone id is out of range [ 542.363653][T15206] netlink: zone id is out of range [ 542.364724][T15206] netlink: zone id is out of range [ 542.364803][T15206] netlink: zone id is out of range [ 542.364957][T15206] netlink: zone id is out of range [ 542.364979][T15206] netlink: zone id is out of range [ 542.365166][T15206] netlink: zone id is out of range [ 542.365294][T15206] netlink: zone id is out of range [ 542.409870][T15210] se_dev->se_dev_ptr already set for storage object [ 542.429393][T15211] netlink: 'syz.1.2801': attribute type 5 has an invalid length. [ 542.637089][T15213] se_dev->se_dev_ptr already set for storage object [ 542.709079][T15216] se_dev->se_dev_ptr already set for storage object [ 542.710564][T15216] UDC core: g1: couldn't find an available UDC or it's busy [ 542.722134][T15217] __nla_validate_parse: 1 callbacks suppressed [ 542.722146][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2805'. [ 542.723949][T15217] binder: 15214:15217 ioctl c018620c 80000240 returned -1 [ 542.724122][T15217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2805'. [ 543.065437][T15226] se_dev->se_dev_ptr already set for storage object [ 543.105652][T15228] se_dev->se_dev_ptr already set for storage object [ 543.107242][T15228] UDC core: g1: couldn't find an available UDC or it's busy [ 543.169477][T15230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'. [ 543.173080][T15230] binder: 15229:15230 ioctl c018620c 80000240 returned -1 [ 543.727303][T15241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2815'. [ 543.733930][T15241] binder: 15240:15241 ioctl c018620c 80000240 returned -1 [ 543.734181][T15241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2815'. [ 543.783667][T15237] orangefs_devreq_write_iter: total:1: must be at least:8240: [ 543.919474][T15242] netlink: 'syz.3.2813': attribute type 21 has an invalid length. [ 543.921061][T15242] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 543.924946][ T5099] Bluetooth: hci0: unexpected event for opcode 0x20a3 [ 544.298626][T15250] se_dev->se_dev_ptr already set for storage object [ 544.563585][T15254] netlink: 'syz.1.2818': attribute type 5 has an invalid length. [ 544.563655][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2818'. [ 544.676413][T15257] se_dev->se_dev_ptr already set for storage object [ 544.679218][T15257] UDC core: g1: couldn't find an available UDC or it's busy [ 544.728732][T15259] se_dev->se_dev_ptr already set for storage object [ 544.731741][T15259] UDC core: g1: couldn't find an available UDC or it's busy [ 544.765795][T15263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2821'. [ 544.800138][T15263] binder: 15262:15263 ioctl c018620c 80000240 returned -1 [ 544.904821][T15267] se_dev->se_dev_ptr already set for storage object [ 544.907068][T15267] UDC core: g1: couldn't find an available UDC or it's busy [ 544.960513][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2824'. [ 544.968710][T15271] binder: 15270:15271 ioctl c018620c 80000240 returned -1 [ 544.968991][T15271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2824'. [ 545.070670][T15277] se_dev->se_dev_ptr already set for storage object [ 546.307904][T15290] se_dev->se_dev_ptr already set for storage object [ 546.310396][T15290] UDC core: g1: couldn't find an available UDC or it's busy [ 546.354703][T15291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2832'. [ 546.390285][T15291] binder: 15289:15291 ioctl c018620c 80000240 returned -1 [ 546.975278][T15297] overlayfs: missing 'lowerdir' [ 547.242331][T15301] se_dev->se_dev_ptr already set for storage object [ 547.252744][T15301] UDC core: g1: couldn't find an available UDC or it's busy [ 547.284136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 547.323935][T15304] se_dev->se_dev_ptr already set for storage object [ 547.342927][T15306] binder: 15305:15306 ioctl c018620c 80000240 returned -1 [ 547.625353][T15316] se_dev->se_dev_ptr already set for storage object [ 548.208343][T15325] se_dev->se_dev_ptr already set for storage object [ 548.214157][T15325] UDC core: g1: couldn't find an available UDC or it's busy [ 548.262043][T15324] overlay: ./file1 is not a directory [ 548.268845][ T44] audit: type=1800 audit(1790288914.265:5010): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2843" name="bus" dev="9p" ino=71827929 res=0 errno=0 [ 548.391207][T15333] __nla_validate_parse: 2 callbacks suppressed [ 548.391226][T15333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2848'. [ 548.393681][T15334] se_dev->se_dev_ptr already set for storage object [ 548.394905][T15333] binder: 15331:15333 ioctl c018620c 80000240 returned -1 [ 548.395182][T15333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2848'. [ 548.396158][T15334] UDC core: g1: couldn't find an available UDC or it's busy [ 548.456739][T15335] netlink: 'syz.0.2844': attribute type 5 has an invalid length. [ 548.456770][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2844'. [ 548.700776][T15340] netlink: 'syz.3.2846': attribute type 1 has an invalid length. [ 548.700790][T15340] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2846'. [ 548.906225][T15345] se_dev->se_dev_ptr already set for storage object [ 549.419187][T15352] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (eth1) [ 550.029401][T15357] futex_wake_op: syz.2.2852 tries to shift op by 144; fix this program [ 550.139597][T15360] se_dev->se_dev_ptr already set for storage object [ 550.760129][T15368] se_dev->se_dev_ptr already set for storage object [ 551.346612][T15375] se_dev->se_dev_ptr already set for storage object [ 551.352847][T15375] UDC core: g1: couldn't find an available UDC or it's busy [ 551.584126][T15378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2858'. [ 551.591346][T15378] binder: 15376:15378 ioctl c018620c 80000240 returned -1 [ 551.591532][T15378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2858'. [ 551.592889][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2860'. [ 551.594677][T15384] binder: 15383:15384 ioctl c018620c 80000240 returned -1 [ 551.659716][T15386] se_dev->se_dev_ptr already set for storage object [ 553.857183][T15406] se_dev->se_dev_ptr already set for storage object [ 554.336799][T15409] se_dev->se_dev_ptr already set for storage object [ 554.383021][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2867'. [ 554.486435][T15412] binder: 15410:15412 ioctl c018620c 80000240 returned -1 [ 554.486676][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2867'. [ 554.534600][T15414] se_dev->se_dev_ptr already set for storage object [ 554.638738][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2869'. [ 554.650108][T15418] se_dev->se_dev_ptr already set for storage object [ 554.650635][T15416] binder: 15415:15416 ioctl c018620c 0 returned -14 [ 554.658351][T15416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2869'. [ 554.835998][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'. [ 554.840291][T15423] binder: 15420:15423 ioctl c018620c 80000240 returned -1 [ 554.840616][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2872'. [ 554.987452][T15430] se_dev->se_dev_ptr already set for storage object [ 555.002487][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2871'. [ 555.007088][T15424] binder: 15422:15424 ioctl c018620c 80000240 returned -1 [ 555.007302][T15424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2871'. [ 555.180692][T15435] se_dev->se_dev_ptr already set for storage object [ 556.156784][T15447] se_dev->se_dev_ptr already set for storage object [ 556.258439][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2880'. [ 556.264583][T15451] binder: 15450:15451 ioctl c018620c 80000240 returned -1 [ 556.264785][T15451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2880'. [ 556.319698][T15454] binder: 15452:15454 ioctl c018620c 0 returned -14 [ 556.531241][T15460] se_dev->se_dev_ptr already set for storage object [ 556.534666][T15460] UDC core: g1: couldn't find an available UDC or it's busy [ 557.680479][T15466] se_dev->se_dev_ptr already set for storage object [ 558.916834][T15445] hub 8-0:1.0: USB hub found [ 558.917040][T15445] hub 8-0:1.0: 1 port detected [ 558.972051][T15471] se_dev->se_dev_ptr already set for storage object [ 559.367814][ T65] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 559.501354][T15476] jffs2: notice: (15476) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 5 orphan) and 5 of xref (1 dead, 4 orphan) found. [ 559.537499][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 559.538054][ T65] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 559.538910][ T65] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 559.538927][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 559.538939][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 559.538950][ T65] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.538968][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.644774][T15487] Invalid ELF header magic: != ELF [ 560.369259][T15491] se_dev->se_dev_ptr already set for storage object [ 560.629851][T15494] __nla_validate_parse: 2 callbacks suppressed [ 560.629867][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2891'. [ 560.754100][T15494] binder: 15493:15494 ioctl c018620c 0 returned -14 [ 560.754366][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2891'. [ 560.923644][T15500] se_dev->se_dev_ptr already set for storage object [ 560.958969][ T65] usb 6-1: GET_CAPABILITIES returned 0 [ 560.958993][ T65] usbtmc 6-1:16.0: can't read capabilities [ 560.998531][T15501] FAULT_INJECTION: forcing a failure. [ 560.998531][T15501] name failslab, interval 1, probability 0, space 0, times 0 [ 560.998557][T15501] CPU: 3 UID: 0 PID: 15501 Comm: syz.3.2892 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.998575][T15501] Tainted: [L]=SOFTLOCKUP [ 560.998579][T15501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 560.998586][T15501] Call Trace: [ 560.998591][T15501] [ 560.998596][T15501] dump_stack_lvl+0x100/0x190 [ 560.998617][T15501] should_fail_ex.cold+0x5/0xa [ 560.998633][T15501] should_failslab+0xc2/0x120 [ 560.998650][T15501] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 560.998664][T15501] ? alloc_fd+0x471/0x7a0 [ 560.998677][T15501] ? alloc_inode+0x183/0x250 [ 560.998697][T15501] alloc_inode+0x183/0x250 [ 560.998714][T15501] alloc_anon_inode+0x2a/0x3e0 [ 560.998731][T15501] anon_inode_make_secure_inode+0x2f/0x140 [ 560.998751][T15501] __do_sys_memfd_secret+0xd7/0x570 [ 560.998770][T15501] __do_fast_syscall_32+0x13a/0x8b0 [ 560.998785][T15501] do_fast_syscall_32+0x32/0x70 [ 560.998798][T15501] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 560.998812][T15501] RIP: 0023:0xf7fe6fec [ 560.998824][T15501] Code: Unable to access opcode bytes at 0xf7fe6fc2. [ 560.998829][T15501] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 00000000000001bf [ 560.998842][T15501] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 560.998850][T15501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 560.998856][T15501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 560.998863][T15501] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 560.998870][T15501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 560.998883][T15501] [ 561.120106][T15498] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 561.127160][T15498] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f] [ 561.128159][T15498] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff] [ 561.128380][T15498] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref] [ 561.135868][T15498] pci 0000:00:03.0: Adding to iommu group 3 [ 561.170387][T15498] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 561.182868][T15498] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 561.182982][T15498] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 561.288884][T15507] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.307300][T15507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2894'. [ 561.449672][T15513] se_dev->se_dev_ptr already set for storage object [ 562.446876][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.707176][T15523] netlink: 'syz.0.2898': attribute type 1 has an invalid length. [ 562.787196][T15523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2898'. [ 562.846140][T15526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2898'. [ 562.848394][T15526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 562.915125][T15527] net_ratelimit: 11 callbacks suppressed [ 562.915151][T15527] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 562.931355][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2898'. [ 562.931377][T15527] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2898'. [ 563.129693][ T65] usb 6-1: USB disconnect, device number 11 [ 563.191221][T15526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 563.200417][T15526] bond2: (slave geneve2): making interface the new active one [ 563.201511][T15526] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 563.209395][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 563.209441][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 563.209474][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 563.209508][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 563.284697][T15530] se_dev->se_dev_ptr already set for storage object [ 563.440472][T15536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2901'. [ 563.457203][T15536] binder: 15535:15536 ioctl c018620c 80000240 returned -1 [ 563.690905][T15543] macsec2: entered promiscuous mode [ 563.691488][T15543] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 563.691664][T15543] macsec2: entered allmulticast mode [ 563.691675][T15543] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 563.694340][T15543] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 563.872971][T15543] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 564.293611][T15550] netlink: 'syz.3.2903': attribute type 10 has an invalid length. [ 564.715723][ T43] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 565.033192][T15550] team0 (unregistering): Port device team_slave_0 removed [ 565.060364][T15550] team0 (unregistering): Port device team_slave_1 removed [ 565.409735][T15554] se_dev->se_dev_ptr already set for storage object [ 566.821999][T15576] batman_adv: batadv0: Adding interface: dummy0 [ 566.822016][T15576] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.822050][T15576] batman_adv: batadv0: Interface activated: dummy0 [ 567.251688][T15583] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 567.517311][T15590] se_dev->se_dev_ptr already set for storage object [ 567.522699][T15594] i2c i2c-0: new_device: Missing parameters [ 567.991666][T15601] se_dev->se_dev_ptr already set for storage object [ 569.118091][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2921'. [ 569.142056][T15609] binder: 15607:15609 ioctl c018620c 80000240 returned -1 [ 569.142217][T15609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2921'. [ 571.639133][T15623] jffs2: notice: (15623) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 5 orphan) and 5 of xref (1 dead, 4 orphan) found. [ 572.950152][T15642] xt_hl: Unknown TTL match mode: 255 [ 573.217209][ T65] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 573.377110][ T65] usb 6-1: Using ep0 maxpacket: 32 [ 573.377669][ T65] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 573.378144][ T65] usb 6-1: config 0 has no interfaces? [ 573.379808][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.379820][ T65] usb 6-1: Product: syz [ 573.379827][ T65] usb 6-1: Manufacturer: syz [ 573.379834][ T65] usb 6-1: SerialNumber: syz [ 573.381734][ T65] usb 6-1: config 0 descriptor?? [ 573.727205][ T65] usb 6-1: USB disconnect, device number 12 [ 575.839962][T15657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2930'. [ 575.844859][T15657] binder: 15654:15657 ioctl c018620c 80000240 returned -1 [ 575.845060][T15657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2930'. [ 576.260065][T15662] jffs2: notice: (15662) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 5 orphan) and 5 of xref (1 dead, 4 orphan) found. [ 577.685028][T15674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2936'. [ 577.757514][T15675] binder: 15673:15675 ioctl c018620c 80000240 returned -1 [ 577.758239][T15675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2936'. [ 578.471262][T15683] Invalid ELF header type: 3 != 1 [ 578.493951][T15683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.562031][T15683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.310532][T15698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2940'. [ 580.551414][ T5099] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 580.779480][ T44] audit: type=1400 audit(1790288946.775:5011): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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input: syz1 as /devices/virtual/input/input17 [ 580.877206][T15702] db_root: cannot be changed because it's in use [ 581.046705][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 581.439674][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 581.449850][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 581.449900][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 581.449931][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.997428][T15708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2944'. [ 582.194677][ T10] usb 5-1: USB disconnect, device number 18 [ 583.029906][T15714] futex_wake_op: syz.0.2945 tries to shift op by 144; fix this program [ 583.970901][T15716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2946'. [ 585.156682][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 585.306479][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 585.307270][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 585.310307][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 585.312613][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.312632][ T10] usb 7-1: Product: syz [ 585.312643][ T10] usb 7-1: Manufacturer: syz [ 585.312655][ T10] usb 7-1: SerialNumber: syz [ 585.315925][ T10] usb 7-1: config 0 descriptor?? [ 585.353234][ T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 585.353262][ T10] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 585.729413][ T65] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 585.909405][ T65] usb 8-1: Using ep0 maxpacket: 32 [ 585.910601][ T65] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 585.919536][ T65] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 585.919550][ T65] usb 8-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 585.919559][ T65] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.919567][ T65] usb 8-1: config 0 has no interface number 0 [ 585.919585][ T65] usb 8-1: config 0 interface 196 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 585.919598][ T65] usb 8-1: config 0 interface 196 has no altsetting 0 [ 585.946114][ T65] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.946131][ T65] usb 8-1: Product: syz [ 585.946139][ T65] usb 8-1: Manufacturer: syz [ 585.946146][ T65] usb 8-1: SerialNumber: syz [ 585.954909][ T65] usb 8-1: config 0 descriptor?? [ 586.117938][ T10] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 586.516759][ T65] usb 8-1: USB disconnect, device number 13 [ 586.901364][T15740] Console: switching to colour dummy device 80x25 [ 587.057167][ T44] audit: type=1326 audit(1790288953.056:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15743 comm="syz.0.2952" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 587.057196][ T44] audit: type=1326 audit(1790288953.056:5013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15743 comm="syz.0.2952" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 587.086917][ T10] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 587.088492][ T10] em28xx 7-1:0.0: board has no eeprom [ 587.148781][ T44] audit: type=1326 audit(1790288953.136:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15743 comm="syz.0.2952" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 587.148813][ T44] audit: type=1326 audit(1790288953.136:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15743 comm="syz.0.2952" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 587.156129][ T44] audit: type=1326 audit(1790288953.146:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15743 comm="syz.0.2952" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a75ab code=0x7ffc0000 [ 587.156162][ T44] audit: type=1326 audit(1790288953.146:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15743 comm="syz.0.2952" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a75ab code=0x7ffc0000 [ 587.156182][ T44] audit: type=1326 audit(1790288953.146:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15743 comm="syz.0.2952" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 587.156202][ T44] audit: type=1326 audit(1790288953.146:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15743 comm="syz.0.2952" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 587.157664][ T44] audit: type=1326 audit(1790288953.156:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15743 comm="syz.0.2952" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 587.159181][ T44] audit: type=1326 audit(1790288953.156:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15743 comm="syz.0.2952" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 587.524296][T15745] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 587.839381][T15750] netlink: 'syz.1.2954': attribute type 10 has an invalid length. [ 587.854430][T15750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 587.855726][T15750] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 587.882921][T15750] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2954'. [ 587.895522][T15750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.904364][T15750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.911919][T15750] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 587.914292][T15750] bond0 (unregistering): Released all slaves [ 587.953058][T15751] syz.1.2954: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 587.953118][T15751] CPU: 3 UID: 0 PID: 15751 Comm: syz.1.2954 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.953141][T15751] Tainted: [L]=SOFTLOCKUP [ 587.953148][T15751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 587.953159][T15751] Call Trace: [ 587.953165][T15751] [ 587.953172][T15751] dump_stack_lvl+0x100/0x190 [ 587.953202][T15751] warn_alloc.cold+0x9e/0xb2 [ 587.953219][T15751] ? __pfx_warn_alloc+0x10/0x10 [ 587.953249][T15751] ? __lock_acquire+0x5c0/0x1f40 [ 587.953279][T15751] __vmalloc_node_range_noprof+0x123b/0x1420 [ 587.953305][T15751] ? __lock_acquire+0x5c0/0x1f40 [ 587.953325][T15751] ? __lock_acquire+0x5c0/0x1f40 [ 587.953354][T15751] ? do_replace+0x1c6/0x490 [ 587.953380][T15751] ? do_raw_spin_lock+0x128/0x260 [ 587.953399][T15751] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 587.953422][T15751] ? __lock_acquire+0x5c0/0x1f40 [ 587.953446][T15751] ? do_raw_spin_unlock+0x145/0x1e0 [ 587.953467][T15751] ? do_replace+0x1c6/0x490 [ 587.953490][T15751] __vmalloc_node_noprof+0xad/0xf0 [ 587.953514][T15751] ? do_replace+0x1c6/0x490 [ 587.953539][T15751] __vmalloc_noprof+0xa3/0x120 [ 587.953564][T15751] ? __pfx___vmalloc_noprof+0x10/0x10 [ 587.953595][T15751] do_replace+0x1c6/0x490 [ 587.953617][T15751] ? __pfx_do_replace+0x10/0x10 [ 587.953650][T15751] ? register_lock_class+0x3f/0x7b0 [ 587.953681][T15751] compat_do_replace+0x589/0x7a0 [ 587.953708][T15751] ? __pfx_compat_do_replace+0x10/0x10 [ 587.953741][T15751] ? bpf_lsm_capable+0x9/0x10 [ 587.953757][T15751] ? security_capable+0x80/0x260 [ 587.953786][T15751] do_ebt_set_ctl+0x3f4/0x4a0 [ 587.953811][T15751] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 587.953861][T15751] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 587.953890][T15751] ? nf_sockopt_find.isra.0+0x222/0x290 [ 587.953921][T15751] nf_setsockopt+0x8d/0xf0 [ 587.953970][T15751] ip_setsockopt+0xcb/0xf0 [ 587.953996][T15751] tcp_setsockopt+0xa7/0x100 [ 587.954024][T15751] smc_setsockopt+0x1b6/0xa40 [ 587.954047][T15751] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 587.954071][T15751] ? __pfx_smc_setsockopt+0x10/0x10 [ 587.954099][T15751] ? aa_sock_opt_perm+0x114/0x1e0 [ 587.954125][T15751] ? __pfx_smc_setsockopt+0x10/0x10 [ 587.954148][T15751] do_sock_setsockopt+0xf3/0x1d0 [ 587.954170][T15751] __sys_setsockopt+0x119/0x190 [ 587.954201][T15751] __ia32_sys_setsockopt+0xbc/0x160 [ 587.954225][T15751] ? __do_fast_syscall_32+0xb3/0x8b0 [ 587.954242][T15751] ? lockdep_hardirqs_on+0x7d/0x110 [ 587.954261][T15751] __do_fast_syscall_32+0x13a/0x8b0 [ 587.954286][T15751] do_fast_syscall_32+0x32/0x70 [ 587.954308][T15751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 587.954331][T15751] RIP: 0023:0xf7ff6fec [ 587.954346][T15751] Code: Unable to access opcode bytes at 0xf7ff6fc2. [ 587.954354][T15751] RSP: 002b:00000000f549550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 587.954371][T15751] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 587.954383][T15751] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 587.954394][T15751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 587.954406][T15751] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 587.954418][T15751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 587.954442][T15751] [ 587.954480][T15751] Mem-Info: [ 587.954489][T15751] active_anon:11791 inactive_anon:5191 isolated_anon:0 [ 587.954489][T15751] active_file:1023 inactive_file:8186 isolated_file:0 [ 587.954489][T15751] unevictable:0 dirty:27 writeback:0 [ 587.954489][T15751] slab_reclaimable:6790 slab_unreclaimable:64871 [ 587.954489][T15751] mapped:23490 shmem:13372 pagetables:1473 [ 587.954489][T15751] sec_pagetables:381 bounce:0 [ 587.954489][T15751] kernel_misc_reclaimable:0 [ 587.954489][T15751] free:21390 free_pcp:458 free_cma:0 [ 587.954531][T15751] Node 0 active_anon:684kB inactive_anon:360kB active_file:660kB inactive_file:2548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2696kB dirty:0kB writeback:0kB shmem:24kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8064kB pagetables:1624kB sec_pagetables:1268kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 587.954582][T15751] Node 1 active_anon:46480kB inactive_anon:20404kB active_file:3432kB inactive_file:30196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:91264kB dirty:112kB writeback:0kB shmem:53464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5640kB pagetables:4268kB sec_pagetables:256kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 587.954623][T15751] Node 0 DMA free:1632kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20kB inactive_anon:8kB active_file:60kB inactive_file:328kB unevictable:0kB writepending:0kB zspages:44kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.954672][T15751] lowmem_reserve[]: 0 278 278 278 278 [ 587.954697][T15751] Node 0 DMA32 free:27652kB boost:28404kB min:41028kB low:44184kB high:47340kB reserved_highatomic:2048kB free_highatomic:252kB active_anon:664kB inactive_anon:352kB active_file:600kB inactive_file:2220kB unevictable:0kB writepending:0kB zspages:3112kB present:1032196kB managed:284848kB mlocked:0kB bounce:0kB free_pcp:312kB local_pcp:212kB free_cma:0kB [ 587.954748][T15751] lowmem_reserve[]: 0 0 0 0 0 [ 587.954778][T15751] Node 1 DMA32 free:56276kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048kB free_highatomic:728kB active_anon:46480kB inactive_anon:20404kB active_file:3432kB inactive_file:30196kB unevictable:0kB writepending:44kB zspages:11128kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:1516kB local_pcp:880kB free_cma:0kB [ 587.954822][T15751] lowmem_reserve[]: 0 0 0 0 0 [ 587.954851][T15751] Node 0 DMA: 19*4kB (UM) 4*8kB (M) 4*16kB (UM) 4*32kB (UM) 3*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1644kB [ 587.954970][T15751] Node 0 DMA32: 763*4kB (UMEH) 199*8kB (UMEH) 77*16kB (UMEH) 196*32kB (UMEH) 85*64kB (UME) 34*128kB (UME) 14*256kB (UM) 2*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 27572kB [ 587.955100][T15751] Node 1 DMA32: 153*4kB (UMEH) 123*8kB (UE) 29*16kB (UMEH) 180*32kB (UEH) 138*64kB (UMEH) 61*128kB (UME) 28*256kB (UME) 12*512kB (UME) 14*1024kB (UME) 2*2048kB (UM) 0*4096kB = 56204kB [ 587.955235][T15751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 587.955249][T15751] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 587.955258][T15751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 587.955266][T15751] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 587.955274][T15751] 22845 total pagecache pages [ 587.955278][T15751] 1190 pages in swap cache [ 587.955282][T15751] Free swap = 48kB [ 587.955378][T15751] Total swap = 124996kB [ 587.955384][T15751] 524155 pages RAM [ 587.955388][T15751] 0 pages HighMem/MovableOnly [ 587.955392][T15751] 212051 pages reserved [ 587.955396][T15751] 0 pages cma reserved [ 588.391697][T15722] em28xx 7-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 588.436250][ T10] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 588.436269][ T10] em28xx 7-1:0.0: dvb set to bulk mode. [ 588.477510][ T10] em28xx 7-1:0.0: Binding DVB extension [ 588.645877][ T65] usb 7-1: USB disconnect, device number 7 [ 588.646655][ T65] em28xx 7-1:0.0: Disconnecting em28xx [ 589.313069][ T10] em28xx 7-1:0.0: Registering input extension [ 589.313440][ T65] em28xx 7-1:0.0: Closing input extension [ 589.491235][ T65] em28xx: Freeing device [ 591.724609][T15749] ------------[ cut here ]------------ [ 591.724619][T15749] current->flags & PF_MEMALLOC [ 591.724624][T15749] WARNING: mm/page_alloc.c:4816 at __alloc_frozen_pages_noprof+0x1eac/0x3300, CPU#0: syz.1.2954/15749 [ 591.733300][T15749] Modules linked in: [ 591.734743][T15749] CPU: 0 UID: 0 PID: 15749 Comm: syz.1.2954 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.738423][T15749] Tainted: [L]=SOFTLOCKUP [ 591.739844][T15749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 591.743145][T15749] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 591.745398][T15749] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 a2 7a 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 591.751956][T15749] RSP: 0000:ffffc90006f3e5e8 EFLAGS: 00010202 [ 591.753976][T15749] RAX: ffff888026ea2580 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 591.756902][T15749] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 591.759776][T15749] RBP: ffff888026ea25ac R08: 0000000000008000 R09: 0000000000000001 [ 591.762450][T15749] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40 [ 591.765061][T15749] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000de7cd7 [ 591.767719][T15749] FS: 0000000000000000(0000) GS:ffff888096959000(0063) knlGS:00000000578d4480 [ 591.770644][T15749] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 591.772837][T15749] CR2: 00000000f71d6df0 CR3: 0000000057373000 CR4: 0000000000352ef0 [ 591.775392][T15749] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 591.777952][T15749] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 591.780531][T15749] Call Trace: [ 591.781654][T15749] [ 591.782679][T15749] ? do_raw_spin_lock+0x128/0x260 [ 591.784335][T15749] ? find_held_lock+0x2b/0x80 [ 591.786056][T15749] ? do_raw_spin_unlock+0x145/0x1e0 [ 591.787833][T15749] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 591.789986][T15749] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 591.791887][T15749] ? __pfx_debug_object_activate+0x10/0x10 [ 591.793879][T15749] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 591.795792][T15749] ? __lock_acquire+0x5c0/0x1f40 [ 591.797475][T15749] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 591.799473][T15749] ? policy_nodemask+0xed/0x4f0 [ 591.801102][T15749] alloc_pages_mpol+0x201/0x550 [ 591.802720][T15749] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 591.804457][T15749] ? filemap_get_entry+0x22d/0x450 [ 591.806277][T15749] ? filemap_get_entry+0x22d/0x450 [ 591.807968][T15749] folio_alloc_noprof+0x22/0x250 [ 591.809647][T15749] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 591.811917][T15749] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 591.814162][T15749] ? lock_acquire+0x1d1/0x380 [ 591.816319][T15749] ? ext4_get_group_info+0x146/0x480 [ 591.818684][T15749] ? find_held_lock+0x2b/0x80 [ 591.820610][T15749] __filemap_get_folio_mpol+0x653/0x1280 [ 591.823203][T15749] ext4_mb_load_buddy_gfp+0x70d/0x1b20 [ 591.825341][T15749] ext4_discard_preallocations+0x584/0x10c0 [ 591.827580][T15749] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 591.829569][T15749] ? __pfx_xa_destroy+0x10/0x10 [ 591.831210][T15749] ? inode_wait_for_writeback+0x171/0x390 [ 591.833206][T15749] ? inode_lru_isolate+0x37/0xf00 [ 591.834862][T15749] ext4_clear_inode+0x6e/0x280 [ 591.836491][T15749] ext4_evict_inode+0x1de/0x17d0 [ 591.838223][T15749] ? evict+0x37e/0xad0 [ 591.839605][T15749] ? __pfx_ext4_evict_inode+0x10/0x10 [ 591.841496][T15749] evict+0x3c2/0xad0 [ 591.842814][T15749] ? _raw_spin_unlock+0x28/0x50 [ 591.844475][T15749] ? __list_lru_walk_one+0x26d/0x550 [ 591.846384][T15749] ? __pfx_evict+0x10/0x10 [ 591.847864][T15749] ? xa_load+0x149/0x2c0 [ 591.849277][T15749] ? xa_load+0x149/0x2c0 [ 591.850714][T15749] dispose_list+0x117/0x1e0 [ 591.852213][T15749] prune_icache_sb+0xea/0x150 [ 591.853756][T15749] ? list_lru_count_one+0x147/0x320 [ 591.855464][T15749] ? __pfx_prune_icache_sb+0x10/0x10 [ 591.857241][T15749] super_cache_scan+0x376/0x550 [ 591.858947][T15749] do_shrink_slab+0x416/0x1200 [ 591.860538][T15749] shrink_slab+0xa82/0x12e0 [ 591.862043][T15749] ? shrink_slab+0x677/0x12e0 [ 591.863592][T15749] ? __pfx_shrink_slab+0x10/0x10 [ 591.865218][T15749] ? lock_acquire+0x1d1/0x380 [ 591.866835][T15749] shrink_one+0x398/0x850 [ 591.868273][T15749] ? shrink_node+0x2b00/0x4320 [ 591.869786][T15749] shrink_node+0x2b20/0x4320 [ 591.871480][T15749] ? __queue_work+0x4d6/0x1370 [ 591.873052][T15749] ? shrink_node+0x286e/0x4320 [ 591.874651][T15749] ? __pfx_shrink_node+0x10/0x10 [ 591.876332][T15749] ? queue_work_on+0x141/0x1e0 [ 591.877944][T15749] ? do_try_to_free_pages+0x33e/0x16d0 [ 591.879782][T15749] do_try_to_free_pages+0x33e/0x16d0 [ 591.881525][T15749] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 591.883380][T15749] ? __lock_acquire+0x5c0/0x1f40 [ 591.885015][T15749] try_to_free_pages+0x2a0/0x740 [ 591.886759][T15749] ? __pfx_try_to_free_pages+0x10/0x10 [ 591.888548][T15749] ? find_held_lock+0x2b/0x80 [ 591.890101][T15749] ? fs_reclaim_acquire+0x70/0x100 [ 591.891772][T15749] ? fs_reclaim_acquire+0x70/0x100 [ 591.893469][T15749] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 591.895473][T15749] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 591.897607][T15749] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 591.899548][T15749] ? policy_nodemask+0xed/0x4f0 [ 591.901091][T15749] ? alloc_pages_mpol+0x260/0x550 [ 591.902693][T15749] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 591.904379][T15749] ? __lock_acquire+0x5c0/0x1f40 [ 591.905947][T15749] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 591.908015][T15749] ? policy_nodemask+0xed/0x4f0 [ 591.909617][T15749] alloc_pages_mpol+0x201/0x550 [ 591.911242][T15749] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 591.913081][T15749] ? filemap_get_entry+0x22d/0x450 [ 591.914805][T15749] ? filemap_get_entry+0x22d/0x450 [ 591.916557][T15749] folio_alloc_noprof+0x22/0x250 [ 591.918213][T15749] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 591.920329][T15749] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 591.922535][T15749] __filemap_get_folio_mpol+0x653/0x1280 [ 591.924441][T15749] filemap_fault+0x879/0x3130 [ 591.926057][T15749] ? __pfx_filemap_fault+0x10/0x10 [ 591.927749][T15749] ? find_held_lock+0x2b/0x80 [ 591.929291][T15749] ? __pfx_filemap_map_pages+0x10/0x10 [ 591.931149][T15749] __do_fault+0x10b/0x440 [ 591.932871][T15749] do_fault+0xb3f/0x1830 [ 591.934463][T15749] ? __pfx_do_fault+0x10/0x10 [ 591.936054][T15749] ? rcu_read_unlock+0x2d/0xb0 [ 591.937633][T15749] ? rcu_read_unlock+0x2d/0xb0 [ 591.939217][T15749] ? __pte_offset_map+0x179/0x310 [ 591.940948][T15749] __handle_mm_fault+0x150b/0x2f60 [ 591.943006][T15749] ? lock_vma_under_rcu+0x11d/0x590 [ 591.944677][T15749] ? __pfx___handle_mm_fault+0x10/0x10 [ 591.946529][T15749] ? lock_vma_under_rcu+0x17c/0x590 [ 591.948448][T15749] handle_mm_fault+0x363/0xa20 [ 591.950390][T15749] do_user_addr_fault+0x59c/0x12f0 [ 591.952032][T15749] exc_page_fault+0x6f/0xd0 [ 591.953472][T15749] asm_exc_page_fault+0x26/0x30 [ 591.955507][T15749] RIP: 0023:0xf70fcc4b [ 591.957616][T15749] Code: Unable to access opcode bytes at 0xf70fcc21. [ 591.960545][T15749] RSP: 002b:00000000ff9bc640 EFLAGS: 00010206 [ 591.963285][T15749] RAX: 0000000033824220 RBX: 0000000033824238 RCX: 000000000005000f [ 591.966692][T15749] RDX: 0000000033dd3cac RSI: 00000000f7fe5610 RDI: 0000000033dd3ca8 [ 591.970414][T15749] RBP: 000000000005034c R08: 0000000000000000 R09: 0000000000000000 [ 591.973844][T15749] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 591.977532][T15749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 591.980879][T15749] [ 591.982246][T15749] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 591.984996][T15749] CPU: 0 UID: 0 PID: 15749 Comm: syz.1.2954 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.989302][T15749] Tainted: [L]=SOFTLOCKUP [ 591.991215][T15749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 591.995424][T15749] Call Trace: [ 591.996864][T15749] [ 591.998168][T15749] dump_stack_lvl+0x100/0x190 [ 592.000171][T15749] vpanic+0x553/0x970 [ 592.001868][T15749] ? __pfx_vpanic+0x10/0x10 [ 592.003804][T15749] panic+0xd1/0xe0 [ 592.005393][T15749] ? __pfx_panic+0x10/0x10 [ 592.007284][T15749] check_panic_on_warn.cold+0x19/0x34 [ 592.009520][T15749] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 592.012090][T15749] __warn.cold+0x191/0x318 [ 592.014005][T15749] __report_bug+0x30f/0x440 [ 592.015946][T15749] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 592.018111][T15749] ? __pfx___report_bug+0x10/0x10 [ 592.019705][T15749] ? __zone_watermark_ok+0x281/0x500 [ 592.021380][T15749] ? get_page_from_freelist+0x344/0x35d0 [ 592.023194][T15749] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 592.025216][T15749] report_bug+0xb3/0x220 [ 592.026635][T15749] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 592.028547][T15749] handle_bug+0x16a/0x2a0 [ 592.029900][T15749] exc_invalid_op+0x17/0x50 [ 592.031340][T15749] asm_exc_invalid_op+0x1a/0x20 [ 592.032831][T15749] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 592.034859][T15749] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 a2 7a 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 592.040963][T15749] RSP: 0000:ffffc90006f3e5e8 EFLAGS: 00010202 [ 592.042862][T15749] RAX: ffff888026ea2580 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 592.045307][T15749] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 592.048519][T15749] RBP: ffff888026ea25ac R08: 0000000000008000 R09: 0000000000000001 [ 592.051785][T15749] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40 [ 592.055092][T15749] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000de7cd7 [ 592.057876][T15749] ? __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 592.059897][T15749] ? do_raw_spin_lock+0x128/0x260 [ 592.061517][T15749] ? find_held_lock+0x2b/0x80 [ 592.063043][T15749] ? do_raw_spin_unlock+0x145/0x1e0 [ 592.064682][T15749] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 592.066930][T15749] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 592.069321][T15749] ? __pfx_debug_object_activate+0x10/0x10 [ 592.071844][T15749] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 592.073867][T15749] ? __lock_acquire+0x5c0/0x1f40 [ 592.075467][T15749] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 592.077930][T15749] ? policy_nodemask+0xed/0x4f0 [ 592.079484][T15749] alloc_pages_mpol+0x201/0x550 [ 592.081034][T15749] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 592.082728][T15749] ? filemap_get_entry+0x22d/0x450 [ 592.084348][T15749] ? filemap_get_entry+0x22d/0x450 [ 592.086035][T15749] folio_alloc_noprof+0x22/0x250 [ 592.087609][T15749] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 592.089594][T15749] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 592.092115][T15749] ? lock_acquire+0x1d1/0x380 [ 592.094071][T15749] ? ext4_get_group_info+0x146/0x480 [ 592.096213][T15749] ? find_held_lock+0x2b/0x80 [ 592.098061][T15749] __filemap_get_folio_mpol+0x653/0x1280 [ 592.100316][T15749] ext4_mb_load_buddy_gfp+0x70d/0x1b20 [ 592.102091][T15749] ext4_discard_preallocations+0x584/0x10c0 [ 592.103939][T15749] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 592.105964][T15749] ? __pfx_xa_destroy+0x10/0x10 [ 592.107515][T15749] ? inode_wait_for_writeback+0x171/0x390 [ 592.109319][T15749] ? inode_lru_isolate+0x37/0xf00 [ 592.110953][T15749] ext4_clear_inode+0x6e/0x280 [ 592.112467][T15749] ext4_evict_inode+0x1de/0x17d0 [ 592.114036][T15749] ? evict+0x37e/0xad0 [ 592.115329][T15749] ? __pfx_ext4_evict_inode+0x10/0x10 [ 592.117047][T15749] evict+0x3c2/0xad0 [ 592.118316][T15749] ? _raw_spin_unlock+0x28/0x50 [ 592.119855][T15749] ? __list_lru_walk_one+0x26d/0x550 [ 592.121537][T15749] ? __pfx_evict+0x10/0x10 [ 592.122973][T15749] ? xa_load+0x149/0x2c0 [ 592.124327][T15749] ? xa_load+0x149/0x2c0 [ 592.125671][T15749] dispose_list+0x117/0x1e0 [ 592.127152][T15749] prune_icache_sb+0xea/0x150 [ 592.128636][T15749] ? list_lru_count_one+0x147/0x320 [ 592.130302][T15749] ? __pfx_prune_icache_sb+0x10/0x10 [ 592.131962][T15749] super_cache_scan+0x376/0x550 [ 592.133515][T15749] do_shrink_slab+0x416/0x1200 [ 592.135068][T15749] shrink_slab+0xa82/0x12e0 [ 592.136590][T15749] ? shrink_slab+0x677/0x12e0 [ 592.138070][T15749] ? __pfx_shrink_slab+0x10/0x10 [ 592.139596][T15749] ? lock_acquire+0x1d1/0x380 [ 592.141047][T15749] shrink_one+0x398/0x850 [ 592.142371][T15749] ? shrink_node+0x2b00/0x4320 [ 592.143845][T15749] shrink_node+0x2b20/0x4320 [ 592.145247][T15749] ? __queue_work+0x4d6/0x1370 [ 592.146787][T15749] ? shrink_node+0x286e/0x4320 [ 592.148487][T15749] ? __pfx_shrink_node+0x10/0x10 [ 592.150258][T15749] ? queue_work_on+0x141/0x1e0 [ 592.151782][T15749] ? do_try_to_free_pages+0x33e/0x16d0 [ 592.153498][T15749] do_try_to_free_pages+0x33e/0x16d0 [ 592.155178][T15749] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 592.157179][T15749] ? __lock_acquire+0x5c0/0x1f40 [ 592.158775][T15749] try_to_free_pages+0x2a0/0x740 [ 592.160351][T15749] ? __pfx_try_to_free_pages+0x10/0x10 [ 592.162074][T15749] ? find_held_lock+0x2b/0x80 [ 592.163594][T15749] ? fs_reclaim_acquire+0x70/0x100 [ 592.165205][T15749] ? fs_reclaim_acquire+0x70/0x100 [ 592.166836][T15749] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 592.168722][T15749] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 592.170727][T15749] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 592.172589][T15749] ? policy_nodemask+0xed/0x4f0 [ 592.174142][T15749] ? alloc_pages_mpol+0x260/0x550 [ 592.175729][T15749] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 592.177458][T15749] ? __lock_acquire+0x5c0/0x1f40 [ 592.179032][T15749] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 592.180940][T15749] ? policy_nodemask+0xed/0x4f0 [ 592.182497][T15749] alloc_pages_mpol+0x201/0x550 [ 592.184051][T15749] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 592.185736][T15749] ? filemap_get_entry+0x22d/0x450 [ 592.187358][T15749] ? filemap_get_entry+0x22d/0x450 [ 592.188970][T15749] folio_alloc_noprof+0x22/0x250 [ 592.190541][T15749] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 592.192517][T15749] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 592.194650][T15749] __filemap_get_folio_mpol+0x653/0x1280 [ 592.196411][T15749] filemap_fault+0x879/0x3130 [ 592.197925][T15749] ? __pfx_filemap_fault+0x10/0x10 [ 592.199549][T15749] ? find_held_lock+0x2b/0x80 [ 592.201053][T15749] ? __pfx_filemap_map_pages+0x10/0x10 [ 592.202775][T15749] __do_fault+0x10b/0x440 [ 592.204142][T15749] do_fault+0xb3f/0x1830 [ 592.205483][T15749] ? __pfx_do_fault+0x10/0x10 [ 592.206987][T15749] ? rcu_read_unlock+0x2d/0xb0 [ 592.208515][T15749] ? rcu_read_unlock+0x2d/0xb0 [ 592.210047][T15749] ? __pte_offset_map+0x179/0x310 [ 592.211702][T15749] __handle_mm_fault+0x150b/0x2f60 [ 592.213382][T15749] ? lock_vma_under_rcu+0x11d/0x590 [ 592.215322][T15749] ? __pfx___handle_mm_fault+0x10/0x10 [ 592.217356][T15749] ? lock_vma_under_rcu+0x17c/0x590 [ 592.219255][T15749] handle_mm_fault+0x363/0xa20 [ 592.220980][T15749] do_user_addr_fault+0x59c/0x12f0 [ 592.222713][T15749] exc_page_fault+0x6f/0xd0 [ 592.224164][T15749] asm_exc_page_fault+0x26/0x30 [ 592.225782][T15749] RIP: 0023:0xf70fcc4b [ 592.227456][T15749] Code: Unable to access opcode bytes at 0xf70fcc21. [ 592.230078][T15749] RSP: 002b:00000000ff9bc640 EFLAGS: 00010206 [ 592.232494][T15749] RAX: 0000000033824220 RBX: 0000000033824238 RCX: 000000000005000f [ 592.235603][T15749] RDX: 0000000033dd3cac RSI: 00000000f7fe5610 RDI: 0000000033dd3ca8 [ 592.238719][T15749] RBP: 000000000005034c R08: 0000000000000000 R09: 0000000000000000 [ 592.241859][T15749] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 592.244997][T15749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 592.248127][T15749] [ 592.249909][T15749] Kernel Offset: disabled [ 592.251644][T15749] Rebooting in 86400 seconds..