last executing test programs: 2m57.508698571s ago: executing program 1 (id=2233): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x1, 0xc66f096f843f1718, 0x2, 0xb, {{0xe, 0x4, 0x1, 0x5, 0x38, 0x67, 0x0, 0xa5, 0x4, 0x0, @multicast2, @local, {[@cipso={0x86, 0x18, 0x3, [{0x6, 0x12, "26f5c658a98ea25abe36770c4aa20bd9"}]}, @timestamp_prespec={0x44, 0xc, 0x4d, 0x3, 0x9, [{@broadcast, 0x76}]}]}}}}}) sendto$packet(r0, &(0x7f0000000080)="15dd2aa52f261a0c758bb78f169b82900740e5195d2868b0487b912c5cc58c2e34ce4db43db595b1564cab8f8f41c9355ea31fc3b0516f1ff3302a640cccc86d89d5124c59190d1be5a9190aab002840af4895da00ac6664f7f0b5772c59c54f0020e968bb6a65d1aed8b561eb18a8c19df062de7006e920282ead4f7f13f6b3fe0df1e17f39ddcb851c1bcb48f907367ee3", 0x92, 0x4080, &(0x7f00000002c0)={0x11, 0x19, r1, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="09000000e7001400000000803500008100000088a80000000000504e7c6a59e4", 0x20, 0x4044804, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x68}}, 0x14) 2m57.404296414s ago: executing program 1 (id=2234): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usbip_server_init(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_control_io$uac2(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) 2m55.612696173s ago: executing program 1 (id=2244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x1000000, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387c6e950975fa4e1f9", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x1, 0x2, 0xd, 0x0, 0x0, [{0x2, 0x2, 0x1, '\x00', 0xd}, {0x4e, 0x81, 0x7, '\x00', 0x9}, {0x0, 0x9, 0xa, '\x00', 0x7}, {0x2, 0x81, 0xfe, '\x00', 0x3}, {0x81, 0xb, 0x0, '\x00', 0x6}, {0x7, 0xd, 0x7, '\x00', 0x1}, {0x4, 0x8, 0x1, '\x00', 0x4}, {0x38, 0xff, 0xf5, '\x00', 0x2}, {0x4, 0x7, 0x8, '\x00', 0xb}, {0x3, 0x81, 0x9, '\x00', 0x4}, {0x6e, 0x1, 0x40, '\x00', 0x53}, {0x8, 0xf9, 0x5, '\x00', 0x7}, {0x7, 0x5, 0x0, '\x00', 0x80}, {0x5, 0x5, 0x0, '\x00', 0x1}, {0xff, 0x1, 0x2, '\x00', 0x80}, {0x1, 0xc, 0x67, '\x00', 0x3}, {0xfb, 0x64, 0x9, '\x00', 0x7}, {0x6, 0x5, 0x10, '\x00', 0x6}, {0x7, 0xfe, 0x46}, {0x7f, 0x0, 0x5, '\x00', 0x7}, {0xf9, 0x5, 0xc, '\x00', 0x5}, {0x5, 0xdd, 0x8, '\x00', 0x5c}, {0x2, 0x9, 0xee, '\x00', 0xfe}, {0xf, 0x4c, 0xf7, '\x00', 0x8}]}}) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000100)={0x0, 0x0, 0x40000060, {0x763039a8, 0x2}, 0x14, 0x20000005}) close(0x3) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d010203010902"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x138) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f310000000014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000000)='.\x00', 0x400017e) dup2(r8, r5) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) openat$cgroup_ro(r9, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r8, &(0x7f0000001fc0)={0x2020}, 0x2020) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000000300)={0x2020}, 0x2020) 2m52.243776288s ago: executing program 1 (id=2253): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x100, 0x0, &(0x7f00000001c0)=""/80, 0x0, 0x4}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0x0}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000001340)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r2, &(0x7f0000000400)={0x14}, 0x14) ioprio_get$pid(0x6, r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)=0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) listen(r3, 0x10) shutdown(r3, 0x2) listen(r3, 0x10) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x640, 0x400, 0x356, 0x0, 0x807, 0xfffffffc, 0x18, 0x0, {0xffffffff}, {}, {0x3}, {0x8, 0xe0000000}, 0x0, 0x90, 0x0, 0x90fd, 0x1, 0xfffffffa, 0x8, 0x3, 0x0, 0x20003d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl(r6, 0x542e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 2m51.332129271s ago: executing program 1 (id=2257): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x82000, 0x17) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="31e2", 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="68cabf2dfb58fc0a01008888ff", 0xd}], 0x1}, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0xc, 0x117, 0x1}], 0xc, 0x7000000}, 0xf401}], 0x1, 0x20008050) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r4}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = epoll_create1(0x80000) r6 = fcntl$dupfd(r3, 0x0, r3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, r6, &(0x7f0000000100)={r5, r6}) r8 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000000)="a5ce", 0xfed0) r11 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r9, 0x0, r11, 0x0, 0xcea5, 0x6) execveat$binfmt(r6, r8, &(0x7f00000002c0)={[&(0x7f0000000180)='/:\xa6\'\xd3@:\',$\x00', &(0x7f00000001c0)='(\x00']}, &(0x7f0000000500)={[&(0x7f0000000300)='sysfs\x00', &(0x7f0000000340)='sysfs\x00', &(0x7f0000000380)='&\x00', &(0x7f00000003c0)='&\x00', &(0x7f0000000400)='sysfs\x00', &(0x7f0000000440)='sysfs\x00', &(0x7f0000000480)='][\'!##--^\x00', &(0x7f00000004c0)='\x00']}, 0x1000) 2m51.203412006s ago: executing program 1 (id=2258): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xcc, &(0x7f0000000080)=""/204, 0x41100, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0xe, 0x7a, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000200)=[{0x0, 0x1, 0x8, 0x8}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x3, 0xb, 0x1}, {0x4, 0x3, 0x0, 0xc}], 0x10, 0x6}, 0x94) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0xc048aeca, &(0x7f0000000040)={0x2, 0x0, [{0x203, 0x0, 0x3}, {0x119, 0x0, 0x10000}]}) dup(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, 0x0, 0x4040010) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fadadf25270800000a000300", @ANYRES32=r6, @ANYBLOB="04005f0006003600387600000a0006005050505050500000"], 0x34}, 0x1, 0x0, 0x0, 0x440c4}, 0x4) write$tun(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x264) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffb, 0x0, 0x0, 0x18, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67524360fda2de6854c4dae4162e43ac61b75309a200", [0x4, 0x9]}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESOCT], 0xb8}}, 0x20040014) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) tee(r9, r8, 0x9, 0x8) write$FUSE_ATTR(r8, &(0x7f00000003c0)={0x78, 0x0, 0x0, {0x1, 0x9, 0x0, {0x1, 0x0, 0x87ac, 0x1, 0xffffffff, 0x4, 0xfffffcd8, 0x4, 0x7, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x6}}}, 0xfdef) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000001c0)={0x0, 'wlan1\x00', {0x4}, 0x8}) socket$nl_xfrm(0x10, 0x3, 0x6) 2m36.092521114s ago: executing program 32 (id=2258): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xcc, &(0x7f0000000080)=""/204, 0x41100, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0xe, 0x7a, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000200)=[{0x0, 0x1, 0x8, 0x8}, {0x5, 0x2, 0x7, 0xc}, {0x0, 0x3, 0xb, 0x1}, {0x4, 0x3, 0x0, 0xc}], 0x10, 0x6}, 0x94) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0xc048aeca, &(0x7f0000000040)={0x2, 0x0, [{0x203, 0x0, 0x3}, {0x119, 0x0, 0x10000}]}) dup(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, 0x0, 0x4040010) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fadadf25270800000a000300", @ANYRES32=r6, @ANYBLOB="04005f0006003600387600000a0006005050505050500000"], 0x34}, 0x1, 0x0, 0x0, 0x440c4}, 0x4) write$tun(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x264) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffb, 0x0, 0x0, 0x18, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67524360fda2de6854c4dae4162e43ac61b75309a200", [0x4, 0x9]}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESOCT], 0xb8}}, 0x20040014) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) tee(r9, r8, 0x9, 0x8) write$FUSE_ATTR(r8, &(0x7f00000003c0)={0x78, 0x0, 0x0, {0x1, 0x9, 0x0, {0x1, 0x0, 0x87ac, 0x1, 0xffffffff, 0x4, 0xfffffcd8, 0x4, 0x7, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x6}}}, 0xfdef) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000001c0)={0x0, 'wlan1\x00', {0x4}, 0x8}) socket$nl_xfrm(0x10, 0x3, 0x6) 2.072808339s ago: executing program 3 (id=3380): syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x3e) nanosleep(&(0x7f0000000340)={0x0, 0x1dcd6500}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x1dcd6500}, 0x0) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, 0x0, 0x0) 1.940471051s ago: executing program 2 (id=3381): syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x3e) nanosleep(&(0x7f0000000340)={0x0, 0x1dcd6500}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x1dcd6500}, 0x0) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, 0x0, 0x0) 1.357896861s ago: executing program 4 (id=3382): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x67) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa408069f0300000604"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/84, 0x54}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'erspan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x98, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x33, 0x80, [@peer_mgmt={0x75, 0x16, {0x1, 0x5, @void, @val=0x36, @val="1dccc36cee01d20242c49520a3756231"}}, @rann={0x7e, 0x15, {{0x0, 0xb}, 0x91, 0xd3, @broadcast, 0x8, 0x1, 0x9}}]}, @NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'n'}]]}, 0x98}}, 0x0) semget(0x0, 0x1, 0x206) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x20, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000001c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000000900)={0x12f8, r10, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x29}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2d8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x45}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x36}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe19a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x1124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "a7f52caae6a8f65c8144d8d929a6fbc11629b09d8ca6dec554e4e065c4f0b3cde37bae7cc65b195ed2d3e707f4d295827871f6865b1a235a3c2564f8a3f61cdba3ab0bead4ebe35f74198be72d1a91499bb909c1af20a09494a906a18ea79df90b7c1b7a303c59f4c297787f0285f2a09ce4d186b6e52c98b26cf52fb6956cb6a102b55500db12e33caec7ef5ac7b06fc19f0da6a9e37304a5f279bcd462fabe93fb4039a270e04a439b479c29101812068f01c1753867cba72b1d0b5d49fd51713671238b8b6331cb1a694618e24aa887c17cf2f9df1cd27643f2c203c1940e3b8bca13f36585b33ce5664383179e1841bb5327f1fac20963c18af102faca6a34cd11a750c8449991d74b738865b381e7a1992183806122409449cd7b995f796cffcce809813995144b386f563e0cb318adc389b70ab11c52aaeb8a0b1fc9d7e07a5f399de214d73a4501fecdf68b24ef0274d95de140c2941010f0db504744152ed8b832ccdbc99bcc57afc36c78e033970fd2919ce640a63fd1723826e43d5b9c82f30d2e31d2de9d04121680184afff073294907c1fd5373680fb53d418d40cd8343ab608f4cc374af1b35647eda9e0903d3616a3caf2c805f82b4dc975a18d3e609f34c912f4a0c2a3230059859e7cb4e588571d3ad33cce18ee733a8245c9a3dfae2eae7fc42e34e8c11bfd60f8c2382ac84543a9363e601fbb8048251e0b73be7647e28bdceca6c20cfabd90b831396f26d033e0bee9b35d1c84fed827885f362b3745ec1e78a70c42a0caf882ec3a62573f6b852b5736fa58c908f29f70672e1b6440f8d558ce421e5e280f5021dcf7adca994dad56c8dcbd33dd4331a1bac5a81543ec2066cea3a96d6125e6ec6cc645f109130ae7b321ca0763a5c5be114d52daafab9138e46c645cda85caf5222de0d30886ef84396a809335bbbf60ada48152c673617df5a95294687dd474a8f33634bf524f5c9163ec2d25e8a56ba843410ba5eff47a5ff6108a77c333ee9599dee20e4449c403be1c79cbb3a5b9d204f349854105bfbbc3b5597a26ac46941e7de55ee8deebb9f22ee0c7d6a0bcd5c251c649e7d2eaa822a0cd01788e1e179b01fcc4ad0e9ecd5c96accfc4a41f436217dd1340a2658e24eb312f77543f478ed41d046d404d94d7385be1beb13f9d79a8bf9a9f4381cb6f3bc2aa9d0e44b2d64dc784e724fdf7de61baf4cb5c313c51f43214325b220df163086bebcd4b33d30dbe3767e56503a65d3f5507e5e3baed5e698a5a67ce6ea895aad2a52091e6bcbdfdfc74d63ff1852e60fa489d60f8bbfc12208c3b3f941639f94584bbd6ae4382a55eefb4628cf36e5718b9c0c1f03c1ff3f1590f04d79d9aa3ab29121658d15d1f7fb043e18183788ede4d8d0c1dc66cc1ff2c3e2a1535261dfe6bb2acfc76956f695a883c30a71789725e33747aded476da2b1029dd7d5876de61c730ea1bd8f5914cbfd8d2d3706a32a2f5bc7eb6cfcb1fc94dc131e05cf0225e4158f4dbc92517e68d708e6c9815b37541081ef5bd728cc89b752655f335ccea70e96a55beec58c0cdb39186ff83e7b89881f3292e304351c3cbb004d91f5bad0c959063323812d32c1e8f2a7651e093742c816f0a53aa45e09c7146472837d7e42056022cc9eeb5b1aeb8c7719e9d621587c002110ee6d1dda4721fd346605a6a7a689686955fddd2f41c514a173c872666ac5668c6817f5683162650cf8d0fa62d88362d19070c40c226a194fe4970e73353abbc0ccb00e9285de5e053049932af2a0ea97558eea0678495c85bd9addc60517dc95bd2cac87de5934b8ff746c2dc67a10393d91987a18dc99a8e5f73cd7f743b178ee585b70fdef36de83d76919b565da8ce1f598d518f5e5a28b3d818236df8154e762da6393443b6124c6fcbe5168cdb0c6b6bb455775546bb1c6d9756bbbc2c08d43bbb75e64243f0fc75d6b01d0525e2dd41e0912846a198e3ffbc5ff7a8404588c548aa336a5ba5d944d2bbab557c1ec0ea937573b9a238d6e9078199fec1c75932378d0df48a2c2b9ba6c85e1dc9a5e61bcfc572e3cad811cc8ba6dc6cc8aac7baffe0e57f59b5f309c26a49aa04903e66e45a396365b5c772e3511ae69fb7737ecabf6abc4c67936a02dde011a9a8719140eabd7c46daaba20a2b5b2610d9f1841e448dbe8f0dd085847aa3e413284b973d456143ea5439c818b318879504ecd82e5f3f286d45b7718a2640d15a973f3977389357723c25ba72bf51c31fa7fa5d739286a57c5894667504a9f3577ea8fe69d6e05bdd38607fd446b3eaf3a5377b8591c2dfdc151cd3ae816294b1cd4584048e5956ac86a3f2324566dcc035bc2b1322718536d3f72558b12bc0dd682c0635d716db801f2b2a4ce1b158d808d76c6fb9db66ef6f2357d271e758db1a8826e5d903fd7871e4b42da9f17c4e1cf7a9e77fda5bf326751e521c1a0e94eb8df3c97f0b6bd14a49672653c953fdaee61f0355a0809b9d9dbb93396337a08e6d351d8376ec5ae9d9b8f1d2d00110907a4f45c2fa90c2b725162c72c1e1bb60a7c4783a95c7d5cb8506fc20c10caaa497a22a437bc2137763dff590f935a0ac113d9a54f0d426b6b69ea4edc1fcde15982861c52e73aa86d56869acbe0b386886aab4f8384f0155f660d6d682635f3a39617c4f7a2bdbd48f235c4be7c77ecccebf2d135b6d5e2b88ea4322cc8a23a7430c93e381b73ee9fd458d98931faaef9f397c9280dbadfaac0f58b6a9410f5385c24f7a1adcedcc7ee70f536e8c6533648bb1e71f1221fbcccaae9e2e1361af4643acdc1b57fe74f7bb743aaf276f1b5ee83b0fb68be4d716317e59c45a441db0c69e0ce96711ba8f1c22d1b94562ce997994770f42c97286a54d3d3824fef9b0a4b22b780108768580714fe0a9a6f6bc4a14b8a6c568d473b0ccf8df9a8c831ba7b56db9ff7dc8c5577145cad5ace91b8bfc53b6d187eaea4731107798ed141aebed05114d4bba20c96c84ff7ba55fb6e9031f41655e5638df93c4c2ced529eca4ef42b6b75ce1eb8adb7abaa59b9ac176b6ed935480059c97e664c38ccc6ba4fd1e6c3bb8a3059d130093f4271162d0ca45273af3f364a47004ef5bb2b7953d12dc0347fd2432512113f2aa00cfa841ffa92fc5e8054e3c532db34e6231acbefa1d84b6eb273ecf7b5c1122efd0b7335ac1f622b7dea2673a00eb077f6d1b36721abc84fd6fdc0c7ee2aa1aa1b27023f69da4d879763cd4cbfdd43a914e4a2af9336fedfea1ecca69172496134f8720a67dc618f082fd3aa32a72cc2eb6aea093b9ff04a9ebddf2d5dcd6f774860a76e526b0d98b39c73ffbbb3a99c87483081ed19cd4427f15967d80944818175a59386f63f16c371573129c4c96101c2faefcac0da0041c736c554265a68e3f8cfe64df750a8c82e1e8d7abac87654a333cebba32afa6cbe3e59228df9a6438dda94f521f30527f69943200d280d23cb98b428f63aae58ac8dd0e1cc2fa841b3e3ff20b045259432a9338079666094b0919ce4f134b91cc8471889f157acd3f005bdc0d68e20516b019129e18ab568713b3c73e53bd61a1cbe7f4c2a3fab26efc54b3149b9832e81beb55259beb19f548426360b871b635f523d42f5c60afc4b2c5ece042720fea7eb778f74537f7b295cacd72891e17658aa8aeddd99a2b4a1586eba3607af971020f612f91214b8236d114e20017fb45b8d362dd647ffc970e0c9c95e0ef9db4f5cad3bab8c94711d7ff0b53e77509e2bc95f4628ce63d06c869c3b552c308e89034294e11f033115b24a3d28964885558495a2d7672244e55bf394f61042781b63b16a29078878853b98654635c7c1c902300c7005e2621f3a29e51d0d8f94bb39870c2ef81cfbdf7d32f34c1cbaf3b2ea57ea2b23bf1940c7fd0abd277dba7691c57ed62a24728d3fd6a384921950ab3d329a6823fccb967de08fe7947b0d6564bfce42e56a247ac0f20b65c98bc65493cff57dfacbac24737fb8336a086f4724851976dce924c83ace361972da94eb9ea039a2a2508aef5e09cc3a540ecb9dcb4b989e548f7468087a198286ddad58d70f21b4a42e3cbb62d7ec9ba799e381a74d13707f5be36b2073ffc73df918a8f6ed20840cc08de328e7cc17ce7f7f71d5fb0672eabacdba76c13b2c9fcaee6db6601004596764d98304b64ac149e4f8543f494b74ef6a7466490d613b3734d2823bbbafab89fd1d18c28fa45df83819fb2cf4d5d106a45d0f04eac01e4f57ca808ead6797dc15cbc6cb2944f5e4e912406512b2a277624d0f83a034b8943bf8cfb453787c6db24c2235f8978ab90feaee5e3fc37547c8644aa6d6c996ec279b36458bfdeb261d087ae1a3518a5dbe708714485bdd8e7b3dc05871eded86d0b760ae777022afd92985fba5c53ac346967dc782c4580bc2c62bd2ee08116f2b8a1c1875d7497b7f39b339c3d306b55e6b0e2a69df664383c1e199e274b60bf935bfe943d97a7ca710c9ee7727e83ca003208662730488e9ea9000105ef844d72afcc3d9a0159f5b262830f843dc37db0f63c95a2319128bd2ead225b7c975a5722e8116914a3d604a3e30a71b5b17879080bee747441ca67d0ecd0106f4fb2402784154c339a2732bfa4b5916f1acd85a0d1570cc6bc8f1c71603f4c08d7a396da8e23d7ad4e75cbd40a379b07730af9eaa3ade5a00f5f2eee5877b2e5e4c83121bfbce44a5d867028e30c4e4592aa861224273841ae6069b3a6e2ebf0b7e10a9c8723f6b1bf7cf433aca15996aa8fc627cdf84a195953c1900297f38de8a6e83c81830a6c123a240a6bbba83831fd48f4aea5a5a426ef5402bbf9f8c5fcc09f23a03a764ab1267f7409acd4d7c26521ebbd9601fc39e45e1de0008ea027c273fa4592805c48f7748f45d3b646dc4e1a37594612d2f890764a042b37f21898fb21f847dfe5155cdeda9d76dcd51acf74cbf42f296ed2da980be3df8e51474c07d7ea042f407d100cf64dbe5cf86746cf9fd7eb33f7d065ce9ec3578f9e1df198fbb1e19c934cfa175cccc4db50a71738eadf12db1693f5bc3064d05b5e8ac0332da65e989e3fe120bb0752cd82797657e3f0fd1a04b4a36770778f0e233b1f528efd0aa0a602fb2cc6764b223a4f590510fda24e1e37d44dec6daffcd2ea5a0cc16cf57010f47e25f4ef8c00af2ee755de208dba6ee8988ece77d845070abba0ad5d5e7458160766f21cf102aea1d3d9106835f85f22750284fb287bad34cddb2cc324a83ce9dc7cbdc84c542ae4812a507261e80108655a31be2654cd3994efebbea6caaa8afc2ba9e6415b9347ff59ddc8864e342d516af878c4b24d84ae2b636021c6c13943d726f3665e022b578e003e114477df1bc91cf7439dd145e9e69bcd61ec8dfd92d8519e5795430bcee7d59154132dbbfa18c47f184172bafe3a210c38378efc98a99f4ae6961cc6f3d84f0c2ac2da68a7b20d9b27b21d44b99ddbf94d30a42be7630c2618fe18f0c0c023e609d15d352f6c8d05b243f9edd6238344c54f9c8403b84823f8b77fede444b06f42a58f60235c7e6ca261f5775019059b04c817f558c161cab62de7b180cdd4d4859012c88fbb0dd508e1ca8fac7050346ef7a7dc26a8af2644bf162d0af5a9151d3df180bb7c8f45cbca4cd1dccdbbd37ccdfa4b2c6fc5ed566e96ba82898e81645ae189eefee7a3ef074853e722fa184ec10f6a9cc574954dac84b2b689d8f9721df0b58751c737720675d49f41c3a2ce6d8d6f539b0ee0ad9a6a1f60113fe1e04"}, @TIPC_NLA_NODE_ID={0xcc, 0x3, "cd649adebf6f0d02d7139388a9ad4b64b5bfd5c322fca3e5025970a6984a48d7ec947dd58cedbc2533b7b4ffa65ae0fbbe8201954145975c73d450119fa862663b5a71c1a99cc7215729d1e575c8c2941d112fb1126c0f2a61fdbe39240342d287f5732301101fb0f07d0e56080de63c13a34db7bdf441a02a5098ccb5cd938f0d8e958f7041fcadf853ba30de55631490743211384cd6e02828d2f8c1a03065f2327997039dc52ae952e226fb6a06c0b567af92427baee398debb682d9fad7ae326d79426b2fe6e"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "8b68db92c3cf79b3010adf3746d21b09d00fad1529de35cfd91aef7d"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x12f8}}, 0x4140) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000c00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x3}}, 0x48) 1.308851571s ago: executing program 4 (id=3383): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, 0x0, 0x0, 0x1be) pwrite64(r0, 0x0, 0x0, 0x1fe) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', '\x00', '\x00', [0x0, 0x3]}) 1.171065521s ago: executing program 4 (id=3385): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000076001f0327bd7000fbdbdf25f1b9eb91dfe4c422"], 0x18}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) syz_emit_ethernet(0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000021001122334455000a4242030001fe", @ANYRESDEC=r0, @ANYRESOCT], 0x0) 1.12848212s ago: executing program 4 (id=3387): socket$packet(0x11, 0x3, 0x300) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x28011, 0xffffffffffffffff, 0xe63d3000) syz_ublk_setup_io_uring(0x223c, &(0x7f0000000200)={0x0, 0x7442, 0x0, 0x0, 0x3c1}, &(0x7f0000000100), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000180)={0x5, 0x1, 0x1, '\x00', 0x1}, 0x1) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xf0, 0x30, 0x1, 0xe501, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x8}, {0x4}, 0x0, 0x0, 0x9}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x1) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x91) socket(0x10, 0x80002, 0x0) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {r3, r4+10000000}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) 973.163578ms ago: executing program 0 (id=3390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x78}}, 0x200000d4) 937.205421ms ago: executing program 0 (id=3391): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x67) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa408069f0300000604"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/84, 0x54}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'erspan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x98, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x33, 0x80, [@peer_mgmt={0x75, 0x16, {0x1, 0x5, @void, @val=0x36, @val="1dccc36cee01d20242c49520a3756231"}}, @rann={0x7e, 0x15, {{0x0, 0xb}, 0x91, 0xd3, @broadcast, 0x8, 0x1, 0x9}}]}, @NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'n'}]]}, 0x98}}, 0x0) semget(0x0, 0x1, 0x206) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x20, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000001c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000000900)={0x12f8, r10, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x29}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2d8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x45}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x36}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe19a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x1124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0xcc, 0x3, "cd649adebf6f0d02d7139388a9ad4b64b5bfd5c322fca3e5025970a6984a48d7ec947dd58cedbc2533b7b4ffa65ae0fbbe8201954145975c73d450119fa862663b5a71c1a99cc7215729d1e575c8c2941d112fb1126c0f2a61fdbe39240342d287f5732301101fb0f07d0e56080de63c13a34db7bdf441a02a5098ccb5cd938f0d8e958f7041fcadf853ba30de55631490743211384cd6e02828d2f8c1a03065f2327997039dc52ae952e226fb6a06c0b567af92427baee398debb682d9fad7ae326d79426b2fe6e"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "8b68db92c3cf79b3010adf3746d21b09d00fad1529de35cfd91aef7d"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x12f8}}, 0x4140) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000c00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x3}}, 0x48) 904.505313ms ago: executing program 3 (id=3392): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 852.986084ms ago: executing program 0 (id=3393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x800, 0x0, 0x20}, 0x2f) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = fsmount(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) r4 = openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) setreuid(0x0, 0xee00) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x20060000}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r5 = openat$hpet(0xffffff9c, &(0x7f0000000080), 0x400000, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x40, r6, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xdf}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 784.244036ms ago: executing program 2 (id=3394): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8}) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1], 0x50}, 0x1, 0x0, 0x0, 0x4008150}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d02000000fcdbdf251700000008000300", @ANYRES32=r4, @ANYBLOB="0c00308005000500e1000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) 341.583082ms ago: executing program 3 (id=3395): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 341.293681ms ago: executing program 0 (id=3396): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0006800800010000000001200002800c000100706f6c69637930f50800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 340.939957ms ago: executing program 2 (id=3397): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = openat(r0, &(0x7f00000002c0)='dir0/trace_marker\x00', 0x48ac00, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x9) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 318.763278ms ago: executing program 3 (id=3398): r0 = open(0x0, 0xd5b203, 0x8) lseek(r0, 0xfffffffffffffffd, 0x1) 318.207925ms ago: executing program 2 (id=3399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x78}}, 0x200000d4) 317.586939ms ago: executing program 0 (id=3400): r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x10240, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe4) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x800, 0x80, &(0x7f00000001c0)) (async) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x800, 0x80, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0xffffffffffffffff, r2, r3}, 0xc) (async) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0xffffffffffffffff, r2, r3}, 0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4038587a, &(0x7f0000000500)={{r0, &(0x7f0000000300)='\x00', 0x200400, &(0x7f0000000340)={@align=0x1027efbf, {0x0, 0x4, 0x1, 0x5}}, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x6f}, {[0x0, 0x9bc, 0x3, 0xfffffff7]}, 0x5, 0xd9, &(0x7f0000000400)=""/217}) write(r4, &(0x7f0000000540)="2f9e86128f700ec7c5d9aa1d15dff36c202226f644b35c7785813432bac4bf25047ef4b9ff58100987051cd14d2cd457bf446a0fcd145a03ed6a2bcf7eff17ad0f6b50", 0x43) r5 = pidfd_getfd(r4, r0, 0x0) mount(&(0x7f00000005c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='rpc_pipefs\x00', 0x0, &(0x7f0000000680)='}+&\xba&]-k.\x00') quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r6, 0x1c, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0xc001) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r6, 0x1c, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0xc001) recvmsg(r0, &(0x7f0000001a80)={&(0x7f0000000880)=@isdn, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/230, 0xe6}, {&(0x7f0000001a00)=""/12, 0xc}], 0x3}, 0x0) (async) recvmsg(r0, &(0x7f0000001a80)={&(0x7f0000000880)=@isdn, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/230, 0xe6}, {&(0x7f0000001a00)=""/12, 0xc}], 0x3}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000001ac0)={0x0, 0x1, 0x7, r1}, 0xc) ioctl$PTP_EXTTS_REQUEST(r5, 0x40103d02, &(0x7f0000001b00)={0x0, 0xe}) (async) ioctl$PTP_EXTTS_REQUEST(r5, 0x40103d02, &(0x7f0000001b00)={0x0, 0xe}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000001d00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x60, 0xe, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x77da}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000001d00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x60, 0xe, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x77da}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x800) recvfrom(r8, &(0x7f0000001d40)=""/211, 0xd3, 0x2, &(0x7f0000001e40)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @loopback}, 0x0, 0x3, 0x4, 0x4}}, 0x80) read$FUSE(r4, &(0x7f0000001f00)={0x2020}, 0x2020) (async) read$FUSE(r4, &(0x7f0000001f00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = syz_clone(0x4003100, &(0x7f0000003f40)="ac93f1f11b4b142f3c881fc6ee86980c794122e610fd2cc632a36a3c2db5a2fb86c085453c66f7f310421fbf29e9353294e6c7aa5e0484c9019e28580eafc59961a85f06d982f39f2964bdfc2a937453bcd122ef74e4875af8213510fdcce7a27410dd26bd9739dc1a2829d1fefb17ee5b3d941ecade9befe86ae30cb648b7c26f130f44a450a6d8032d66e173538e7b69529702a483edde72312c7b2798761f9997d4ba384e854a04e12a5c78d5c102f9b9ffd358b00cd46437d0dcdb350a63c13782e07b4d15ea0fb92ef8e4ad12287626de60a555c330801f392fbb4d905ca25c1c", 0xe3, &(0x7f0000004040), &(0x7f0000004080), &(0x7f00000040c0)="7f519cbf997f404fbf11d0223df9e558addfb801734e11c3197982e96fe844edd5641f425919dbfa19a36c6712263943056c51dd5513d4a007f13319847533861686c6b2df7a28bd375374ab1af7c13de701e883bfa5cf9b36496f7f795f4b03bc8c21c103f01aa47d074c23057ff1051c17caa1b2a40909b343a374badc20c18ce61b6cedad62d3e1cc18fde604ec47362397cbb0927876de58b647821b3b1d5a29434c1ec81aa7a11f32f4e9b788097198fb4160bbf73f3033edbdaa1c3ecf9f") sendmsg$nl_generic(r5, &(0x7f0000004480)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004440)={&(0x7f00000041c0)={0x268, 0x14, 0x200, 0x70bd2b, 0x25dfdbfc, {0x20}, [@nested={0x24b, 0xc8, 0x0, 0x1, [@typed={0x8, 0xb4, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="755fe74474021f48c357c2a8b12458235eb6d28c842b3cc3213dba5ef21d5f6a46c5181776b946e42288134a53f71dc98cd891ddb97254a03a28447054488f73540c674d45b916eca8b21d3dae3a8b83c81200e706ff5aae310f5947a188df17868f29d34857d67a84e4302abf9a905237486e84805d8539b6f5cb22b0782aae8a2d2d8c350a2ed3e10f559e9d021696dc73e0adab3dbb5fcee1dce0bdc1043fe2a9d1d86e1f76", @typed={0x8, 0x5f, 0x0, 0x0, @pid=r9}, @typed={0x14, 0xbf, 0x0, 0x0, @ipv6=@loopback}, @generic="635f59a80ad0c780e9efd4382c832c3970789809fcfb6415f503c2156c03cfa5b8233956eaea2b15c438d9b2af6b70e35d88945d48edf5fb4e78be4e3aa5bffa11b62a6692cbb129c715c0f7efa89b43f636f0ae59611cad00ea7a72b6d46eca64d2881283d5652aa36d714497549f887268918465934851e9", @nested={0x4, 0x64}, @typed={0x8, 0xd2, 0x0, 0x0, @u32=0xffffff11}, @generic="ab9bf190af62afdc0d603a4de57884585e879df70252f24c6f578789a3d692fe4394d60288404b0d88b02e21fe0afed117019411f58b2cc3e400305b72f30f20788b5eee956a4fa4df5d9e5826dda7ff904ba85c365d369bebd77b3179a478c5cc4854685d8d915ebcdf5e4141c9a7ccfb294059303f0ae36291670b4e4f77c2ce8e53ef7ea9d311158019c455ec645d89057a04856d44432ab6403bcd86b2285f907bb64c4f84bbd773dba35c87a16925cff9b236ad3417c5f08c04f3b8659576cbb4a72f3f654869f0bc046f42ba08114fcacc0c367de62a6b4c98b56589dd105c09c388004f899319def16ba9074b7131e49370c13c"]}, @typed={0x8, 0x13b, 0x0, 0x0, @pid=r10}]}, 0x268}, 0x1, 0x0, 0x0, 0x8040}, 0x30004040) (async) sendmsg$nl_generic(r5, &(0x7f0000004480)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004440)={&(0x7f00000041c0)={0x268, 0x14, 0x200, 0x70bd2b, 0x25dfdbfc, {0x20}, [@nested={0x24b, 0xc8, 0x0, 0x1, [@typed={0x8, 0xb4, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="755fe74474021f48c357c2a8b12458235eb6d28c842b3cc3213dba5ef21d5f6a46c5181776b946e42288134a53f71dc98cd891ddb97254a03a28447054488f73540c674d45b916eca8b21d3dae3a8b83c81200e706ff5aae310f5947a188df17868f29d34857d67a84e4302abf9a905237486e84805d8539b6f5cb22b0782aae8a2d2d8c350a2ed3e10f559e9d021696dc73e0adab3dbb5fcee1dce0bdc1043fe2a9d1d86e1f76", @typed={0x8, 0x5f, 0x0, 0x0, @pid=r9}, @typed={0x14, 0xbf, 0x0, 0x0, @ipv6=@loopback}, @generic="635f59a80ad0c780e9efd4382c832c3970789809fcfb6415f503c2156c03cfa5b8233956eaea2b15c438d9b2af6b70e35d88945d48edf5fb4e78be4e3aa5bffa11b62a6692cbb129c715c0f7efa89b43f636f0ae59611cad00ea7a72b6d46eca64d2881283d5652aa36d714497549f887268918465934851e9", @nested={0x4, 0x64}, @typed={0x8, 0xd2, 0x0, 0x0, @u32=0xffffff11}, @generic="ab9bf190af62afdc0d603a4de57884585e879df70252f24c6f578789a3d692fe4394d60288404b0d88b02e21fe0afed117019411f58b2cc3e400305b72f30f20788b5eee956a4fa4df5d9e5826dda7ff904ba85c365d369bebd77b3179a478c5cc4854685d8d915ebcdf5e4141c9a7ccfb294059303f0ae36291670b4e4f77c2ce8e53ef7ea9d311158019c455ec645d89057a04856d44432ab6403bcd86b2285f907bb64c4f84bbd773dba35c87a16925cff9b236ad3417c5f08c04f3b8659576cbb4a72f3f654869f0bc046f42ba08114fcacc0c367de62a6b4c98b56589dd105c09c388004f899319def16ba9074b7131e49370c13c"]}, @typed={0x8, 0x13b, 0x0, 0x0, @pid=r10}]}, 0x268}, 0x1, 0x0, 0x0, 0x8040}, 0x30004040) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f00000044c0)) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r11, 0x29, 0xd4, &(0x7f0000004500)=0x3, 0x4) r12 = openat$ndctl0(0xffffff9c, &(0x7f0000004540), 0x901, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000004580), r5) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000004580), r5) setsockopt$MRT6_ASSERT(r11, 0x29, 0xcf, &(0x7f00000045c0)=0x1, 0x4) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000004840)={{&(0x7f0000004600)=[{0x0, 0x8, 0x4, {0x5, 0x8000000000000000}, 0x1, 0x7, 0x6}, {0x1, 0x7, 0x6, {0x0, 0xfd6d}, 0x6, 0x2c, 0x1}], 0x2, 0x40, 0x8001, 0x3}, {&(0x7f0000004680)=[{0x9, 0x3}, {0x290, 0xb6}], 0x2, 0x10, 0x1}, {&(0x7f00000046c0)=[0x0, 0x3, 0x2, 0x4], 0x4, 0x8, 0x6, 0x1}, {&(0x7f0000004700)=[{0x10001, 0x1, 0x2, 0x8, 0x21}, {0x2, 0x100000000, 0x7, 0x6, 0x4}, {0x1, 0x3, 0x5, 0xa, 0x6}, {0x40, 0x7, 0x7f8, 0x1, 0x3f}, {0x2, 0x48, 0x4, 0x9, 0x7fff}, {0x6, 0x0, 0x7eb, 0x5, 0x200}], 0x6, 0x28, 0x83a0, 0x100000000}, {&(0x7f0000004800)=[0x7ff, 0x1], 0x2, 0x8, 0x7, 0x6}}) ioctl$DRM_IOCTL_GEM_FLINK(r12, 0xc008640a, &(0x7f00000048c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000004900)={r13}) 238.465542ms ago: executing program 3 (id=3401): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00'}, 0x18) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000a00)={0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000600)='lo\x00', 0x3) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000800)=@generic={0x2, "2290e000005100"}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000100)="0100003400063039001500157f0000027f000001ac14141402000001000000000000000000000000000000000101010100000000", 0x34}], 0x1}, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000440)={'filter\x00', 0x0, 0x0, 0x0, [0xffff8000, 0x2, 0x1, 0x3, 0x5, 0x3], 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xb0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000500)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="450000280000400040063ccd7f0000027f00000130390015000000010000000a5010100071780000", 0x28, 0x0, &(0x7f0000000400)={0x2, 0x15, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x5, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7fff}, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x3800040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000240)=""/1, 0x1, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') 202.891958ms ago: executing program 2 (id=3402): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000540)=0x1) close_range(r1, r2, 0x0) 168.493355ms ago: executing program 4 (id=3403): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = io_uring_setup(0xcaa, &(0x7f00000000c0)={0x0, 0x5, 0x1, 0x0, 0x10000047}) io_uring_enter(r1, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x1) close_range(r2, r3, 0x0) 68.381311ms ago: executing program 0 (id=3404): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 54.341034ms ago: executing program 4 (id=3405): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) symlinkat(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x2) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000000000000000200ffff0900020073617a3100000000000001550700"/40], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a250200000000000000002000000800020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0x3) 51.983233ms ago: executing program 3 (id=3406): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x1c) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000200), 0x58700, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1700000001000000060000000a00000010080200", @ANYRES32=r3, @ANYBLOB="ea0700"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="040000000000000002c0adeb371dd2d95a00"/28], 0x50) 0s ago: executing program 2 (id=3407): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = openat(r0, &(0x7f00000002c0)='dir0/trace_marker\x00', 0x48ac00, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x9) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) kernel console output (not intermixed with test programs): 0:0264, interface 0, class 0) [ 727.538334][ T9560] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 727.834462][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 728.137621][T15918] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2956'. [ 728.145852][ T9560] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 728.192304][T15922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2958'. [ 728.254860][ T7811] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 728.350962][T15909] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 728.354021][T15909] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 728.375709][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2962'. [ 728.377078][T15928] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 728.377742][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2962'. [ 728.377791][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2961'. [ 728.379146][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2961'. [ 728.530570][T15944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.591974][T15945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.603479][ T9560] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 728.603532][ T9560] em28xx 9-1:0.0: board has no eeprom [ 728.647651][T15946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.665531][ T9560] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 728.665586][ T9560] em28xx 9-1:0.0: dvb set to bulk mode. [ 728.666271][ T9] em28xx 9-1:0.0: Binding DVB extension [ 728.682083][ T9560] usb 9-1: USB disconnect, device number 14 [ 728.687329][ T9560] em28xx 9-1:0.0: Disconnecting em28xx [ 728.698190][ T9] em28xx 9-1:0.0: Registering input extension [ 728.698481][ T9560] em28xx 9-1:0.0: Closing input extension [ 728.719024][ T9560] em28xx: Freeing device [ 728.874497][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 729.914699][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 730.954508][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 731.994541][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 733.034602][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 734.074731][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 734.447751][T15962] pim6reg: entered allmulticast mode [ 734.467380][T15962] pim6reg: left allmulticast mode [ 734.931027][ T43] kauditd_printk_skb: 350 callbacks suppressed [ 734.931080][ T43] audit: type=1400 audit(1788503540.566:647): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="://&ation" pid=15972 comm="syz.0.2971" [ 735.050007][T15965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.114487][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 735.395932][T15989] tmpfs: Too few inodes for current use [ 735.450144][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2976'. [ 735.484688][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2976'. [ 735.582756][T15993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2978'. [ 735.583314][T15993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2978'. [ 735.596001][T15993] FAULT_INJECTION: forcing a failure. [ 735.596001][T15993] name failslab, interval 1, probability 0, space 0, times 0 [ 735.596055][T15993] CPU: 0 UID: 0 PID: 15993 Comm: syz.0.2978 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.596104][T15993] Tainted: [L]=SOFTLOCKUP [ 735.596111][T15993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 735.596119][T15993] Call Trace: [ 735.596125][T15993] [ 735.596131][T15993] dump_stack_lvl+0x100/0x190 [ 735.596176][T15993] should_fail_ex.cold+0x5/0xa [ 735.596197][T15993] should_failslab+0xc2/0x120 [ 735.596230][T15993] kmem_cache_alloc_noprof+0x92/0x6a0 [ 735.596246][T15993] ? rcu_read_lock_any_held+0x6a/0x90 [ 735.596262][T15993] ? do_getname+0x35/0x390 [ 735.596285][T15993] do_getname+0x35/0x390 [ 735.596305][T15993] do_sys_openat2+0xc7/0x1e0 [ 735.596330][T15993] ? __pfx_do_sys_openat2+0x10/0x10 [ 735.596348][T15993] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 735.596371][T15993] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 735.596390][T15993] __ia32_compat_sys_openat+0x12d/0x210 [ 735.596411][T15993] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 735.596438][T15993] do_int80_emulation+0x166/0x650 [ 735.596459][T15993] asm_int80_emulation+0x1a/0x20 [ 735.596473][T15993] RIP: 0023:0xf71175ab [ 735.596486][T15993] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 735.596500][T15993] RSP: 002b:00000000f53d63cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 735.596514][T15993] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53d6490 [ 735.596523][T15993] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 735.596531][T15993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 735.596539][T15993] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 735.596547][T15993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 735.596563][T15993] [ 735.847742][T16006] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 735.927609][T16014] FAULT_INJECTION: forcing a failure. [ 735.927609][T16014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.927692][T16014] CPU: 3 UID: 0 PID: 16014 Comm: syz.3.2992 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.927722][T16014] Tainted: [L]=SOFTLOCKUP [ 735.927728][T16014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 735.927735][T16014] Call Trace: [ 735.927741][T16014] [ 735.927748][T16014] dump_stack_lvl+0x100/0x190 [ 735.927767][T16014] should_fail_ex.cold+0x5/0xa [ 735.927787][T16014] _copy_from_user+0x2e/0xd0 [ 735.927801][T16014] bpf_prog_load+0x1490/0x2a80 [ 735.927822][T16014] ? __pfx_bpf_prog_load+0x10/0x10 [ 735.927837][T16014] ? lock_acquire+0x1d1/0x380 [ 735.927866][T16014] __sys_bpf+0x1f46/0x4a30 [ 735.927890][T16014] ? __pfx___sys_bpf+0x10/0x10 [ 735.927902][T16014] ? find_held_lock+0x2b/0x80 [ 735.927915][T16014] ? futex_wake+0x4ea/0x5e0 [ 735.927941][T16014] ? rcu_is_watching+0x13/0xc0 [ 735.927954][T16014] ? trace_sched_exit_tp+0x120/0x160 [ 735.927976][T16014] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 735.927990][T16014] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 735.928005][T16014] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 735.928023][T16014] ? __ia32_sys_bpf+0xcc/0x170 [ 735.928035][T16014] __ia32_sys_bpf+0xcc/0x170 [ 735.928049][T16014] ? __do_fast_syscall_32+0xb3/0x8b0 [ 735.928066][T16014] __do_fast_syscall_32+0x13a/0x8b0 [ 735.928084][T16014] do_fast_syscall_32+0x32/0x70 [ 735.928099][T16014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 735.928115][T16014] RIP: 0023:0xf709efec [ 735.928129][T16014] Code: Unable to access opcode bytes at 0xf709efc2. [ 735.928135][T16014] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 735.928146][T16014] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000800 [ 735.928178][T16014] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 735.928187][T16014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 735.928195][T16014] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 735.928203][T16014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 735.928219][T16014] [ 736.021567][ T9589] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 736.101435][T16019] tmpfs: Too few inodes for current use [ 736.154464][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 736.174395][ T9589] usb 9-1: Using ep0 maxpacket: 16 [ 736.178314][ T9589] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 736.183610][ T9589] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 736.188780][ T9589] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.192193][ T9589] usb 9-1: Product: syz [ 736.193926][ T9589] usb 9-1: Manufacturer: syz [ 736.196103][ T9589] usb 9-1: SerialNumber: syz [ 736.200059][ T9589] usb 9-1: config 0 descriptor?? [ 736.204955][ T9589] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 736.208094][ T9589] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 736.267117][T16028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.520836][ T43] audit: type=1400 audit(1788503542.156:648): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="://&ation" pid=16020 comm="syz.3.2987" [ 736.729990][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2990'. [ 736.730533][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2990'. [ 736.732819][T16032] FAULT_INJECTION: forcing a failure. [ 736.732819][T16032] name failslab, interval 1, probability 0, space 0, times 0 [ 736.732855][T16032] CPU: 2 UID: 0 PID: 16032 Comm: syz.0.2990 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.732884][T16032] Tainted: [L]=SOFTLOCKUP [ 736.732890][T16032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 736.732897][T16032] Call Trace: [ 736.732902][T16032] [ 736.732908][T16032] dump_stack_lvl+0x100/0x190 [ 736.732928][T16032] should_fail_ex.cold+0x5/0xa [ 736.732945][T16032] should_failslab+0xc2/0x120 [ 736.732962][T16032] kmem_cache_alloc_noprof+0x92/0x6a0 [ 736.732977][T16032] ? rcu_read_lock_any_held+0x6a/0x90 [ 736.733005][T16032] ? do_getname+0x35/0x390 [ 736.733024][T16032] do_getname+0x35/0x390 [ 736.733041][T16032] do_sys_openat2+0xc7/0x1e0 [ 736.733060][T16032] ? __pfx_do_sys_openat2+0x10/0x10 [ 736.733075][T16032] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 736.733095][T16032] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 736.733109][T16032] __ia32_compat_sys_openat+0x12d/0x210 [ 736.733127][T16032] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 736.733149][T16032] do_int80_emulation+0x166/0x650 [ 736.733166][T16032] asm_int80_emulation+0x1a/0x20 [ 736.733180][T16032] RIP: 0023:0xf71175ab [ 736.733190][T16032] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 736.733201][T16032] RSP: 002b:00000000f53d63cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 736.733213][T16032] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53d6490 [ 736.733221][T16032] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 736.733227][T16032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 736.733237][T16032] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 736.733244][T16032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 736.733265][T16032] [ 736.815399][ T9589] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 737.018832][T15999] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 737.062142][T16041] nftables ruleset with unbound chain [ 737.167214][T16039] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 737.194478][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 737.233846][T16050] pim6reg: entered allmulticast mode [ 737.237938][T16050] pim6reg: left allmulticast mode [ 737.242615][ T9589] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 737.242719][ T9589] em28xx 9-1:0.0: board has no eeprom [ 737.304975][ T9589] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 737.305049][ T9589] em28xx 9-1:0.0: dvb set to bulk mode. [ 737.306609][ T9560] em28xx 9-1:0.0: Binding DVB extension [ 737.314662][ T9589] usb 9-1: USB disconnect, device number 15 [ 737.315881][ T9589] em28xx 9-1:0.0: Disconnecting em28xx [ 737.341684][ T9560] em28xx 9-1:0.0: Registering input extension [ 737.341873][ T9589] em28xx 9-1:0.0: Closing input extension [ 737.352504][ T9589] em28xx: Freeing device [ 737.408066][T16058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3000'. [ 737.411522][T16058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3000'. [ 737.416594][T16058] FAULT_INJECTION: forcing a failure. [ 737.416594][T16058] name failslab, interval 1, probability 0, space 0, times 0 [ 737.416683][T16058] CPU: 3 UID: 0 PID: 16058 Comm: syz.3.3000 Tainted: G L syzkaller #0 PREEMPT(full) [ 737.416715][T16058] Tainted: [L]=SOFTLOCKUP [ 737.416734][T16058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 737.416742][T16058] Call Trace: [ 737.416750][T16058] [ 737.416758][T16058] dump_stack_lvl+0x100/0x190 [ 737.416781][T16058] should_fail_ex.cold+0x5/0xa [ 737.416799][T16058] should_failslab+0xc2/0x120 [ 737.416819][T16058] kmem_cache_alloc_noprof+0x92/0x6a0 [ 737.416835][T16058] ? rcu_read_lock_any_held+0x6a/0x90 [ 737.416850][T16058] ? do_getname+0x35/0x390 [ 737.416871][T16058] do_getname+0x35/0x390 [ 737.416890][T16058] do_sys_openat2+0xc7/0x1e0 [ 737.416908][T16058] ? __pfx_do_sys_openat2+0x10/0x10 [ 737.416925][T16058] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 737.416945][T16058] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 737.416961][T16058] __ia32_compat_sys_openat+0x12d/0x210 [ 737.416979][T16058] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 737.417002][T16058] do_int80_emulation+0x166/0x650 [ 737.417021][T16058] asm_int80_emulation+0x1a/0x20 [ 737.417034][T16058] RIP: 0023:0xf71d75ab [ 737.417046][T16058] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 737.417058][T16058] RSP: 002b:00000000f548d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 737.417071][T16058] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f548d490 [ 737.417079][T16058] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 737.417086][T16058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 737.417094][T16058] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 737.417101][T16058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 737.417116][T16058] [ 737.464819][ T5898] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 737.645299][ T5898] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 737.646055][ T5898] usb 5-1: config 0 has no interfaces? [ 737.647877][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.647899][ T5898] usb 5-1: Product: syz [ 737.647908][ T5898] usb 5-1: Manufacturer: syz [ 737.647918][ T5898] usb 5-1: SerialNumber: syz [ 737.649417][ T5898] usb 5-1: config 0 descriptor?? [ 737.764456][T12715] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 737.853202][T16052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.853698][T16052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.854665][T16052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.855010][T16052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.858403][T16052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.858959][T16052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.859880][T16052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.862535][T16052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.867775][T16052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.868094][T16052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.907194][T16071] netlink: 'syz.4.3004': attribute type 4 has an invalid length. [ 737.924479][T12715] usb 8-1: Using ep0 maxpacket: 32 [ 737.926819][T12715] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 737.931172][T12715] usb 8-1: config 0 has no interfaces? [ 737.933215][T12715] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.937591][T12715] usb 8-1: config 0 descriptor?? [ 737.947223][T16051] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 738.086788][T16081] pim6reg: entered allmulticast mode [ 738.089259][T16081] pim6reg: left allmulticast mode [ 738.145905][ T5898] usb 8-1: USB disconnect, device number 31 [ 738.234506][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 738.417121][T16087] IPVS: stopping backup sync thread 15807 ... [ 738.657466][T16097] netlink: 'syz.2.3012': attribute type 1 has an invalid length. [ 738.671564][T16097] bridge0: port 3(ipvlan2) entered blocking state [ 738.671754][T16097] bridge0: port 3(ipvlan2) entered disabled state [ 738.671856][T16097] ipvlan2: entered allmulticast mode [ 738.671872][T16097] bridge0: entered allmulticast mode [ 738.673674][T16097] ipvlan2: left allmulticast mode [ 738.673691][T16097] bridge0: left allmulticast mode [ 738.699801][T16098] bridge0: port 3(ipvlan2) entered blocking state [ 738.699995][T16098] bridge0: port 3(ipvlan2) entered disabled state [ 738.700085][T16098] ipvlan2: entered allmulticast mode [ 738.700098][T16098] bridge0: entered allmulticast mode [ 738.701612][T16098] ipvlan2: left allmulticast mode [ 738.701627][T16098] bridge0: left allmulticast mode [ 738.730234][T16100] FAULT_INJECTION: forcing a failure. [ 738.730234][T16100] name failslab, interval 1, probability 0, space 0, times 0 [ 738.736278][T16100] CPU: 3 UID: 0 PID: 16100 Comm: syz.3.3013 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.736333][T16100] Tainted: [L]=SOFTLOCKUP [ 738.736341][T16100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 738.736351][T16100] Call Trace: [ 738.736359][T16100] [ 738.736367][T16100] dump_stack_lvl+0x100/0x190 [ 738.736394][T16100] should_fail_ex.cold+0x5/0xa [ 738.736412][T16100] should_failslab+0xc2/0x120 [ 738.736433][T16100] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 738.736452][T16100] ? __kthread_create_on_node+0x186/0x3f0 [ 738.736475][T16100] kvasprintf+0xbc/0x150 [ 738.736493][T16100] ? __pfx_kvasprintf+0x10/0x10 [ 738.736506][T16100] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 738.736526][T16100] ? __kthread_create_on_node+0xce/0x3f0 [ 738.736546][T16100] ? __pfx_rescuer_thread+0x10/0x10 [ 738.736560][T16100] __kthread_create_on_node+0x186/0x3f0 [ 738.736579][T16100] ? vsnprintf+0x4c5/0x1300 [ 738.736594][T16100] ? __pfx___kthread_create_on_node+0x10/0x10 [ 738.736620][T16100] ? __pfx_rescuer_thread+0x10/0x10 [ 738.736635][T16100] kthread_create_on_node+0xc7/0x100 [ 738.736653][T16100] ? __pfx_kthread_create_on_node+0x10/0x10 [ 738.736672][T16100] ? __pfx_scnprintf+0x10/0x10 [ 738.736688][T16100] ? __kmalloc_cache_node_noprof+0x30c/0x720 [ 738.736703][T16100] ? init_rescuer+0x19f/0x550 [ 738.736718][T16100] init_rescuer+0x321/0x550 [ 738.736731][T16100] ? __pfx_init_rescuer+0x10/0x10 [ 738.736747][T16100] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 738.736781][T16100] __alloc_workqueue+0xe82/0x1950 [ 738.736816][T16100] alloc_workqueue_noprof+0xc7/0x130 [ 738.736834][T16100] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 738.736856][T16100] ? __pfx___debug_object_init+0x10/0x10 [ 738.736883][T16100] nci_register_device+0x21e/0xb80 [ 738.736928][T16100] ? __pfx_nci_register_device+0x10/0x10 [ 738.736954][T16100] ? lockdep_init_map_type+0x5c/0x250 [ 738.736996][T16100] virtual_ncidev_open+0x141/0x220 [ 738.737029][T16100] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 738.737056][T16100] misc_open+0x26d/0x450 [ 738.737074][T16100] ? __pfx_misc_open+0x10/0x10 [ 738.737091][T16100] chrdev_open+0x234/0x6a0 [ 738.737113][T16100] ? __pfx_apparmor_file_open+0x10/0x10 [ 738.737138][T16100] ? __pfx_chrdev_open+0x10/0x10 [ 738.737159][T16100] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 738.737186][T16100] do_dentry_open+0x6ab/0x14d0 [ 738.737206][T16100] ? __pfx_chrdev_open+0x10/0x10 [ 738.737231][T16100] vfs_open+0x82/0x3f0 [ 738.737258][T16100] path_openat+0x19fa/0x2440 [ 738.737282][T16100] ? __pfx_path_openat+0x10/0x10 [ 738.737311][T16100] do_file_open+0x20e/0x430 [ 738.737333][T16100] ? __pfx_do_file_open+0x10/0x10 [ 738.737373][T16100] ? _raw_spin_unlock+0x28/0x50 [ 738.737391][T16100] ? alloc_fd+0x471/0x7a0 [ 738.737409][T16100] do_sys_openat2+0x10f/0x1e0 [ 738.737429][T16100] ? __pfx_do_sys_openat2+0x10/0x10 [ 738.737454][T16100] ? find_held_lock+0x2b/0x80 [ 738.737472][T16100] ? __fget_files+0x215/0x3d0 [ 738.737570][T16100] __ia32_compat_sys_openat+0x12d/0x210 [ 738.737604][T16100] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 738.737646][T16100] __do_fast_syscall_32+0x13a/0x8b0 [ 738.737680][T16100] do_fast_syscall_32+0x32/0x70 [ 738.737707][T16100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 738.737730][T16100] RIP: 0023:0xf709efec [ 738.737754][T16100] Code: Unable to access opcode bytes at 0xf709efc2. [ 738.737764][T16100] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 738.737786][T16100] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 738.737800][T16100] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 738.737813][T16100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 738.737824][T16100] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 738.737837][T16100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 738.737864][T16100] [ 738.738115][T16100] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 738.758712][ T7811] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 738.955698][T16107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.044501][ T7811] usb 9-1: Using ep0 maxpacket: 16 [ 739.047579][ T7811] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 739.052768][ T7811] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 739.059902][ T7811] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.062575][ T7811] usb 9-1: Product: syz [ 739.064634][ T7811] usb 9-1: Manufacturer: syz [ 739.066504][ T7811] usb 9-1: SerialNumber: syz [ 739.073799][ T7811] usb 9-1: config 0 descriptor?? [ 739.078416][ T7811] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 739.081498][ T7811] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 739.284507][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 739.520838][T16109] pim6reg: entered allmulticast mode [ 739.522438][T16109] pim6reg: left allmulticast mode [ 739.668727][ T43] audit: type=1326 audit(1788503545.306:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16111 comm="syz.2.3018" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 739.681195][ T43] audit: type=1326 audit(1788503545.306:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16111 comm="syz.2.3018" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 739.681379][ T43] audit: type=1326 audit(1788503545.306:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16111 comm="syz.2.3018" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 739.681494][ T43] audit: type=1326 audit(1788503545.306:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16111 comm="syz.2.3018" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 739.681557][ T43] audit: type=1326 audit(1788503545.306:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16111 comm="syz.2.3018" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf708efec code=0x7ffc0000 [ 739.681688][ T43] audit: type=1326 audit(1788503545.306:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16111 comm="syz.2.3018" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 739.681739][ T43] audit: type=1326 audit(1788503545.306:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16111 comm="syz.2.3018" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 739.681855][ T43] audit: type=1326 audit(1788503545.306:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16111 comm="syz.2.3018" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708efec code=0x7ffc0000 [ 739.745459][ T7811] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 739.951855][T16095] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 740.174231][ T7811] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 740.176936][ T7811] em28xx 9-1:0.0: board has no eeprom [ 740.199203][T16131] comedi comedi0: Minor 3 could not be opened [ 740.235409][ T7811] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 740.235454][ T7811] em28xx 9-1:0.0: dvb set to bulk mode. [ 740.235914][ T5849] em28xx 9-1:0.0: Binding DVB extension [ 740.240423][T16130] 8021q: adding VLAN 0 to HW filter on device bond2 [ 740.251238][ T7811] usb 9-1: USB disconnect, device number 16 [ 740.257757][ T7811] em28xx 9-1:0.0: Disconnecting em28xx [ 740.262645][T16130] bond0: (slave bond2): Enslaving as an active interface with an up link [ 740.286210][ T5849] em28xx 9-1:0.0: Registering input extension [ 740.290809][ T7811] em28xx 9-1:0.0: Closing input extension [ 740.313648][ T7811] em28xx: Freeing device [ 740.324417][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 740.390729][ T5898] usb 5-1: USB disconnect, device number 26 [ 740.464381][T13887] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 740.636090][T13887] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 740.643008][T16144] pim6reg: entered allmulticast mode [ 740.646947][T16144] pim6reg: left allmulticast mode [ 740.669596][T13887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.669666][T13887] usb 8-1: Product: syz [ 740.669709][T13887] usb 8-1: Manufacturer: syz [ 740.669726][T13887] usb 8-1: SerialNumber: syz [ 740.874952][T16131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.875322][T16131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.876829][T16150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.883142][T16131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.883651][T16131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.898202][T16131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.904046][T16131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.914917][T16131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.915358][T16131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.925740][T16131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.926112][T16131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.946189][T16152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.024815][T16154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.364390][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 741.781340][T16174] pim6reg: entered allmulticast mode [ 741.782549][T13887] rtl8150 8-1:1.0: couldn't reset the device [ 741.782780][T13887] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 741.793426][T16174] pim6reg: left allmulticast mode [ 741.899940][T16176] gadgetfs: bound to dummy_udc driver [ 741.914555][ T9589] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 742.084384][ T9589] usb 7-1: Using ep0 maxpacket: 16 [ 742.084905][ T9589] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 742.085784][ T9589] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 742.087353][ T9589] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.087366][ T9589] usb 7-1: Product: syz [ 742.087373][ T9589] usb 7-1: Manufacturer: syz [ 742.087381][ T9589] usb 7-1: SerialNumber: syz [ 742.088642][ T9589] usb 7-1: config 0 descriptor?? [ 742.093659][ T9589] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 742.093683][ T9589] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 742.179336][T13887] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 742.179621][ C3] gadgetfs: connected [ 742.251287][T13887] gadgetfs: disconnected [ 742.374416][T16176] gadgetfs: suspended from state 2 [ 742.396055][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 742.584362][T13887] usb 5-1: device not accepting address 27, error -71 [ 742.700486][ T9589] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 742.906832][T16172] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 742.990032][T16185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 742.991324][T16185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 742.997432][T16185] FAULT_INJECTION: forcing a failure. [ 742.997432][T16185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.997491][T16185] CPU: 0 UID: 0 PID: 16185 Comm: syz.0.3039 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.997552][T16185] Tainted: [L]=SOFTLOCKUP [ 742.997563][T16185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 742.997578][T16185] Call Trace: [ 742.997587][T16185] [ 742.997598][T16185] dump_stack_lvl+0x100/0x190 [ 742.997633][T16185] should_fail_ex.cold+0x5/0xa [ 742.997660][T16185] strncpy_from_user+0x3b/0x2d0 [ 742.997689][T16185] do_getname+0x78/0x390 [ 742.997719][T16185] do_sys_openat2+0xc7/0x1e0 [ 742.997751][T16185] ? __pfx_do_sys_openat2+0x10/0x10 [ 742.997779][T16185] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 742.997826][T16185] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 742.997857][T16185] __ia32_compat_sys_openat+0x12d/0x210 [ 742.997889][T16185] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 742.997928][T16185] do_int80_emulation+0x166/0x650 [ 742.997962][T16185] asm_int80_emulation+0x1a/0x20 [ 742.997984][T16185] RIP: 0023:0xf71175ab [ 742.998002][T16185] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 742.998022][T16185] RSP: 002b:00000000f53d63cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 742.998043][T16185] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53d6490 [ 742.998059][T16185] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 742.998073][T16185] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 742.998086][T16185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.998100][T16185] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 742.998129][T16185] [ 743.160741][ T9589] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 743.160815][ T9589] em28xx 7-1:0.0: board has no eeprom [ 743.218082][ T5898] usb 8-1: USB disconnect, device number 32 [ 743.234415][ T9589] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 743.234492][ T9589] em28xx 7-1:0.0: dvb set to bulk mode. [ 743.234899][ T9560] em28xx 7-1:0.0: Binding DVB extension [ 743.262144][ T9589] usb 7-1: USB disconnect, device number 56 [ 743.263448][ T9589] em28xx 7-1:0.0: Disconnecting em28xx [ 743.269754][ T9560] em28xx 7-1:0.0: Registering input extension [ 743.270149][ T9589] em28xx 7-1:0.0: Closing input extension [ 743.357799][ T9589] em28xx: Freeing device [ 743.434549][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 743.543204][T16204] pim6reg: entered allmulticast mode [ 743.546142][T16204] pim6reg: left allmulticast mode [ 743.752930][T16211] nfs: Unknown parameter 'ntext' [ 743.920340][T16215] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 743.929395][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3049'. [ 743.933003][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3049'. [ 743.936805][T16214] FAULT_INJECTION: forcing a failure. [ 743.936805][T16214] name failslab, interval 1, probability 0, space 0, times 0 [ 743.936843][T16214] CPU: 0 UID: 0 PID: 16214 Comm: syz.2.3049 Tainted: G L syzkaller #0 PREEMPT(full) [ 743.936871][T16214] Tainted: [L]=SOFTLOCKUP [ 743.936879][T16214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 743.936892][T16214] Call Trace: [ 743.936899][T16214] [ 743.936907][T16214] dump_stack_lvl+0x100/0x190 [ 743.936944][T16214] should_fail_ex.cold+0x5/0xa [ 743.936974][T16214] should_failslab+0xc2/0x120 [ 743.937019][T16214] kmem_cache_alloc_noprof+0x92/0x6a0 [ 743.937044][T16214] ? rcu_read_lock_any_held+0x6a/0x90 [ 743.937069][T16214] ? do_getname+0x35/0x390 [ 743.937101][T16214] do_getname+0x35/0x390 [ 743.937132][T16214] do_sys_openat2+0xc7/0x1e0 [ 743.937163][T16214] ? __pfx_do_sys_openat2+0x10/0x10 [ 743.937189][T16214] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 743.937222][T16214] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 743.937249][T16214] __ia32_compat_sys_openat+0x12d/0x210 [ 743.937276][T16214] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 743.937326][T16214] do_int80_emulation+0x166/0x650 [ 743.937359][T16214] asm_int80_emulation+0x1a/0x20 [ 743.937382][T16214] RIP: 0023:0xf71c75ab [ 743.937401][T16214] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 743.937423][T16214] RSP: 002b:00000000f547d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 743.937444][T16214] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f547d490 [ 743.937457][T16214] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 743.937469][T16214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 743.937482][T16214] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 743.937494][T16214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 743.937519][T16214] [ 744.064868][T16217] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3050'. [ 744.064897][T16217] C: renamed from veth1_to_team [ 744.462472][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 744.462579][ T43] audit: type=1326 audit(1788503550.096:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16218 comm="syz.2.3051" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efec code=0x0 [ 744.474629][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 744.582133][T16231] bridge_slave_0: left allmulticast mode [ 744.582220][T16231] bridge_slave_0: left promiscuous mode [ 744.582605][T16231] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.598016][T16231] bridge_slave_1: left allmulticast mode [ 744.598110][T16231] bridge_slave_1: left promiscuous mode [ 744.598593][T16231] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.619692][T16231] bond0: (slave bond_slave_0): Releasing backup interface [ 744.631382][T16231] bond0: (slave bond_slave_1): Releasing backup interface [ 744.655956][T16231] team0: Port device team_slave_0 removed [ 744.660498][T16231] team0: Port device 12žÿ removed [ 744.661297][T16231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.661312][T16231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.664157][T16231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.664171][T16231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.668402][T16231] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 744.683241][T16232] team0: Port device xfrm0 added [ 744.703429][T16231] tipc: Enabled bearer , priority 0 [ 744.984495][ T9589] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 745.022136][T16238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3058'. [ 745.022877][T16238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3058'. [ 745.027211][T16238] FAULT_INJECTION: forcing a failure. [ 745.027211][T16238] name failslab, interval 1, probability 0, space 0, times 0 [ 745.027242][T16238] CPU: 0 UID: 0 PID: 16238 Comm: syz.2.3058 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.027268][T16238] Tainted: [L]=SOFTLOCKUP [ 745.027274][T16238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 745.027286][T16238] Call Trace: [ 745.027294][T16238] [ 745.027302][T16238] dump_stack_lvl+0x100/0x190 [ 745.027335][T16238] should_fail_ex.cold+0x5/0xa [ 745.027358][T16238] should_failslab+0xc2/0x120 [ 745.027383][T16238] kmem_cache_alloc_noprof+0x92/0x6a0 [ 745.027403][T16238] ? rcu_read_lock_any_held+0x6a/0x90 [ 745.027422][T16238] ? do_getname+0x35/0x390 [ 745.027453][T16238] do_getname+0x35/0x390 [ 745.027478][T16238] do_sys_openat2+0xc7/0x1e0 [ 745.027502][T16238] ? __pfx_do_sys_openat2+0x10/0x10 [ 745.027525][T16238] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 745.027554][T16238] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 745.027578][T16238] __ia32_compat_sys_openat+0x12d/0x210 [ 745.027603][T16238] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 745.027657][T16238] do_int80_emulation+0x166/0x650 [ 745.027686][T16238] asm_int80_emulation+0x1a/0x20 [ 745.027706][T16238] RIP: 0023:0xf71c75ab [ 745.027721][T16238] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 745.027739][T16238] RSP: 002b:00000000f547d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 745.027757][T16238] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f547d490 [ 745.027770][T16238] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 745.027779][T16238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 745.027790][T16238] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 745.027801][T16238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 745.027824][T16238] [ 745.034769][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 745.134607][ T9589] usb 9-1: Using ep0 maxpacket: 16 [ 745.135600][ T9589] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 745.137617][ T9589] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 745.140200][ T9589] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.140223][ T9589] usb 9-1: Product: syz [ 745.140237][ T9589] usb 9-1: Manufacturer: syz [ 745.140260][ T9589] usb 9-1: SerialNumber: syz [ 745.149462][ T9589] usb 9-1: config 0 descriptor?? [ 745.157624][ T9589] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 745.175067][ T9589] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 745.197442][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 745.200142][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 745.200250][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 745.200293][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.220779][ T10] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 745.270294][ T10] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 745.278795][T16246] gadgetfs: bound to dummy_udc driver [ 745.514555][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 745.625493][T16236] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 745.625885][T16236] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 745.626179][T16236] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 745.640348][T16261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3067'. [ 745.653051][T16261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3067'. [ 745.662962][T16261] FAULT_INJECTION: forcing a failure. [ 745.662962][T16261] name failslab, interval 1, probability 0, space 0, times 0 [ 745.663150][T16261] CPU: 3 UID: 0 PID: 16261 Comm: syz.3.3067 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.663215][T16261] Tainted: [L]=SOFTLOCKUP [ 745.663226][T16261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 745.663242][T16261] Call Trace: [ 745.663252][T16261] [ 745.663261][T16261] dump_stack_lvl+0x100/0x190 [ 745.663299][T16261] should_fail_ex.cold+0x5/0xa [ 745.663332][T16261] should_failslab+0xc2/0x120 [ 745.663362][T16261] kmem_cache_alloc_noprof+0x92/0x6a0 [ 745.663389][T16261] ? rcu_read_lock_any_held+0x6a/0x90 [ 745.663413][T16261] ? do_getname+0x35/0x390 [ 745.663450][T16261] do_getname+0x35/0x390 [ 745.663484][T16261] do_sys_openat2+0xc7/0x1e0 [ 745.663514][T16261] ? __pfx_do_sys_openat2+0x10/0x10 [ 745.663542][T16261] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 745.663579][T16261] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 745.663609][T16261] __ia32_compat_sys_openat+0x12d/0x210 [ 745.663644][T16261] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 745.663689][T16261] do_int80_emulation+0x166/0x650 [ 745.663721][T16261] asm_int80_emulation+0x1a/0x20 [ 745.663744][T16261] RIP: 0023:0xf71d75ab [ 745.663771][T16261] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 745.663795][T16261] RSP: 002b:00000000f548d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 745.663820][T16261] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f548d490 [ 745.663837][T16261] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 745.663852][T16261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 745.663866][T16261] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 745.663880][T16261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 745.663909][T16261] [ 745.705337][T16236] SPCP8x5 ttyUSB0: Set UART format 0x1709 failed (error = -32) [ 745.712527][T16236] syzkaller0: entered promiscuous mode [ 745.712551][T16236] syzkaller0: entered allmulticast mode [ 745.778677][ T9589] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 745.927306][ T5898] usb 5-1: USB disconnect, device number 29 [ 745.940700][ T5898] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 745.941269][ T5898] spcp8x5 5-1:1.0: device disconnected [ 745.983606][T16234] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 746.214553][ T9589] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 746.219399][ T9589] em28xx 9-1:0.0: board has no eeprom [ 746.284682][ T9589] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 746.287439][ T9589] em28xx 9-1:0.0: dvb set to bulk mode. [ 746.289715][ T10] em28xx 9-1:0.0: Binding DVB extension [ 746.300452][ T9589] usb 9-1: USB disconnect, device number 17 [ 746.303672][ T9589] em28xx 9-1:0.0: Disconnecting em28xx [ 746.336876][ T10] em28xx 9-1:0.0: Registering input extension [ 746.337114][ T9589] em28xx 9-1:0.0: Closing input extension [ 746.369048][ T9589] em28xx: Freeing device [ 746.554511][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 746.827401][T16278] FAULT_INJECTION: forcing a failure. [ 746.827401][T16278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.827480][T16278] CPU: 3 UID: 0 PID: 16278 Comm: syz.3.3074 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.827510][T16278] Tainted: [L]=SOFTLOCKUP [ 746.827516][T16278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 746.827524][T16278] Call Trace: [ 746.827529][T16278] [ 746.827537][T16278] dump_stack_lvl+0x100/0x190 [ 746.827560][T16278] should_fail_ex.cold+0x5/0xa [ 746.827578][T16278] _copy_from_user+0x2e/0xd0 [ 746.827592][T16278] get_compat_msghdr+0xb3/0x480 [ 746.827611][T16278] ? __pfx_get_compat_msghdr+0x10/0x10 [ 746.827643][T16278] ___sys_sendmsg+0x1b6/0x1e0 [ 746.827663][T16278] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.827687][T16278] ? find_held_lock+0x2b/0x80 [ 746.827710][T16278] __sys_sendmsg+0x160/0x210 [ 746.827725][T16278] ? __pfx___sys_sendmsg+0x10/0x10 [ 746.827743][T16278] ? __pfx_ksys_write+0x10/0x10 [ 746.827757][T16278] __do_fast_syscall_32+0x13a/0x8b0 [ 746.827776][T16278] ? lockdep_hardirqs_on+0x7d/0x110 [ 746.827793][T16278] do_fast_syscall_32+0x32/0x70 [ 746.827809][T16278] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 746.827827][T16278] RIP: 0023:0xf709efec [ 746.827844][T16278] Code: Unable to access opcode bytes at 0xf709efc2. [ 746.827850][T16278] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 746.827862][T16278] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 746.827870][T16278] RDX: 0000000000000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 746.827877][T16278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 746.827884][T16278] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 746.827890][T16278] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 746.827905][T16278] [ 746.889118][T16280] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3076'. [ 746.889558][T16280] netlink: 'syz.3.3076': attribute type 1 has an invalid length. [ 746.899644][T16280] 8021q: adding VLAN 0 to HW filter on device bond3 [ 746.916069][T16284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.953685][T16276] gadgetfs: bound to dummy_udc driver [ 746.958925][T16280] 8021q: adding VLAN 0 to HW filter on device bond3 [ 746.963628][T16280] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 746.966318][T16280] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 747.187275][T16292] FAULT_INJECTION: forcing a failure. [ 747.187275][T16292] name failslab, interval 1, probability 0, space 0, times 0 [ 747.191894][T16292] CPU: 0 UID: 0 PID: 16292 Comm: syz.4.3078 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.191930][T16292] Tainted: [L]=SOFTLOCKUP [ 747.191937][T16292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 747.191946][T16292] Call Trace: [ 747.191953][T16292] [ 747.191959][T16292] dump_stack_lvl+0x100/0x190 [ 747.191982][T16292] should_fail_ex.cold+0x5/0xa [ 747.192000][T16292] should_failslab+0xc2/0x120 [ 747.192017][T16292] kmem_cache_alloc_noprof+0x92/0x6a0 [ 747.192033][T16292] ? rcu_read_lock_any_held+0x6a/0x90 [ 747.192048][T16292] ? do_getname+0x35/0x390 [ 747.192067][T16292] do_getname+0x35/0x390 [ 747.192085][T16292] do_sys_openat2+0xc7/0x1e0 [ 747.192123][T16292] ? __pfx_do_sys_openat2+0x10/0x10 [ 747.192141][T16292] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 747.192163][T16292] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 747.192181][T16292] __ia32_compat_sys_openat+0x12d/0x210 [ 747.192203][T16292] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 747.192228][T16292] do_int80_emulation+0x166/0x650 [ 747.192250][T16292] asm_int80_emulation+0x1a/0x20 [ 747.192262][T16292] RIP: 0023:0xf71c75ab [ 747.192273][T16292] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 747.192287][T16292] RSP: 002b:00000000f547d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 747.192301][T16292] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f547d490 [ 747.192309][T16292] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 747.192316][T16292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 747.192324][T16292] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 747.192331][T16292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 747.192346][T16292] [ 747.305709][T16295] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.517337][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.517403][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.594539][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 748.264457][ T9589] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 748.426939][ T9589] usb 9-1: Using ep0 maxpacket: 16 [ 748.438092][ T9589] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 748.455363][ T9589] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 748.472556][ T9589] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.472617][ T9589] usb 9-1: Product: syz [ 748.472658][ T9589] usb 9-1: Manufacturer: syz [ 748.472691][ T9589] usb 9-1: SerialNumber: syz [ 748.489486][ T9589] usb 9-1: config 0 descriptor?? [ 748.494941][ T9589] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 748.499041][ T9589] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 748.634511][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 748.780336][T16296] can: request_module (can-proto-0) failed. [ 748.862250][T16304] __nla_validate_parse: 4 callbacks suppressed [ 748.862397][T16304] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3082'. [ 748.862431][T16304] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3082'. [ 748.863495][T16304] FAULT_INJECTION: forcing a failure. [ 748.863495][T16304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.863536][T16304] CPU: 3 UID: 0 PID: 16304 Comm: syz.3.3082 Tainted: G L syzkaller #0 PREEMPT(full) [ 748.863567][T16304] Tainted: [L]=SOFTLOCKUP [ 748.863576][T16304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 748.863591][T16304] Call Trace: [ 748.863600][T16304] [ 748.863610][T16304] dump_stack_lvl+0x100/0x190 [ 748.863645][T16304] should_fail_ex.cold+0x5/0xa [ 748.863673][T16304] _copy_from_user+0x2e/0xd0 [ 748.863698][T16304] __sys_bpf+0x2f5/0x4a30 [ 748.863729][T16304] ? __pfx___sys_bpf+0x10/0x10 [ 748.863750][T16304] ? lock_acquire+0x1d1/0x380 [ 748.863778][T16304] ? get_pid_task+0x2a/0x250 [ 748.863801][T16304] ? find_held_lock+0x2b/0x80 [ 748.863825][T16304] ? get_pid_task+0xfc/0x250 [ 748.863844][T16304] ? get_pid_task+0xfc/0x250 [ 748.863875][T16304] ? proc_fail_nth_write+0x9f/0x220 [ 748.863898][T16304] ? find_held_lock+0x2b/0x80 [ 748.863929][T16304] ? rcu_read_lock_any_held+0x6a/0x90 [ 748.863955][T16304] ? find_held_lock+0x2b/0x80 [ 748.863978][T16304] ? ksys_write+0x190/0x250 [ 748.863999][T16304] ? ksys_write+0x190/0x250 [ 748.864022][T16304] ? lock_acquire+0x1d1/0x380 [ 748.864070][T16304] ? fput+0x7c/0x100 [ 748.864142][T16304] ? __ia32_sys_bpf+0xcc/0x170 [ 748.864165][T16304] __ia32_sys_bpf+0xcc/0x170 [ 748.864192][T16304] ? __do_fast_syscall_32+0xb3/0x8b0 [ 748.864224][T16304] __do_fast_syscall_32+0x13a/0x8b0 [ 748.864254][T16304] ? lockdep_hardirqs_on+0x7d/0x110 [ 748.864305][T16304] do_fast_syscall_32+0x32/0x70 [ 748.864345][T16304] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 748.864375][T16304] RIP: 0023:0xf709efec [ 748.864404][T16304] Code: Unable to access opcode bytes at 0xf709efc2. [ 748.864416][T16304] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 748.864439][T16304] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 748.864455][T16304] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 748.864469][T16304] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 748.864483][T16304] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 748.864498][T16304] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 748.864528][T16304] [ 749.136559][ T9589] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 749.340232][T16300] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 749.548864][ T9589] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 749.548945][ T9589] em28xx 9-1:0.0: board has no eeprom [ 749.614418][ T9589] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 749.614505][ T9589] em28xx 9-1:0.0: dvb set to bulk mode. [ 749.626527][ T9589] usb 9-1: USB disconnect, device number 18 [ 749.630372][ T10] em28xx 9-1:0.0: Binding DVB extension [ 749.642708][ T9589] em28xx 9-1:0.0: Disconnecting em28xx [ 749.652851][ T10] em28xx 9-1:0.0: Registering input extension [ 749.653829][ T9589] em28xx 9-1:0.0: Closing input extension [ 749.674473][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 749.701180][ T9589] em28xx: Freeing device [ 750.649306][T16315] sctp: [Deprecated]: syz.3.3087 (pid 16315) Use of int in maxseg socket option. [ 750.649306][T16315] Use struct sctp_assoc_value instead [ 750.710722][T16312] echo interval is out of bounds [ 750.710722][T16312] [ 750.710988][T16312] CIFS: VFS: echo interval is out of bounds [ 750.711753][T16312] netlink: 296 bytes leftover after parsing attributes in process `syz.4.3085'. [ 750.711768][T16312] netlink: 296 bytes leftover after parsing attributes in process `syz.4.3085'. [ 750.714511][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 750.728050][ T43] audit: type=1326 audit(1788503556.366:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.3.3087" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 750.735605][T16324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3089'. [ 750.736191][T16324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3089'. [ 751.294480][ T5849] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 751.625510][ T5849] usb 9-1: Using ep0 maxpacket: 16 [ 751.626887][ T5849] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 751.628008][ T5849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 751.630225][ T5849] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.630247][ T5849] usb 9-1: Product: syz [ 751.630267][ T5849] usb 9-1: Manufacturer: syz [ 751.630281][ T5849] usb 9-1: SerialNumber: syz [ 751.633072][ T5849] usb 9-1: config 0 descriptor?? [ 751.636433][ T5849] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 751.636463][ T5849] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 751.754648][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 751.992149][T16355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3099'. [ 752.054995][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3099'. [ 752.066809][T16358] netlink: 'syz.0.3098': attribute type 11 has an invalid length. [ 752.134054][T16360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.259224][ T5849] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 752.276227][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3102'. [ 752.460758][T16336] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 752.479925][T16383] gadgetfs: bound to dummy_udc driver [ 752.514565][ T10] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 752.539065][T16385] gadgetfs: bound to dummy_udc driver [ 752.665049][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 752.668660][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 752.674388][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.674446][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 752.674505][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.696524][ T10] usb 7-1: config 0 descriptor?? [ 752.794456][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 753.136905][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 753.136988][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 753.144869][ T10] usb 7-1: USB disconnect, device number 57 [ 753.361827][ T5849] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 753.361912][ T5849] em28xx 9-1:0.0: board has no eeprom [ 753.444840][ T5849] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 753.445241][ T5849] em28xx 9-1:0.0: dvb set to bulk mode. [ 753.460944][T12715] em28xx 9-1:0.0: Binding DVB extension [ 753.489033][T16397] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.547111][ T5849] usb 9-1: USB disconnect, device number 19 [ 753.547925][ T5849] em28xx 9-1:0.0: Disconnecting em28xx [ 753.570468][T12715] em28xx 9-1:0.0: Registering input extension [ 753.571220][ T5849] em28xx 9-1:0.0: Closing input extension [ 753.834400][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 753.893395][ T5849] em28xx: Freeing device [ 754.109936][T16412] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 754.109987][T16412] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 754.116045][T16412] vhci_hcd vhci_hcd.0: Device attached [ 754.254936][ T10] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 754.314601][ T9] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 754.354706][ T9560] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 754.404486][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 754.407216][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 754.411664][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 754.418305][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.418343][ T10] usb 8-1: Product: syz [ 754.418372][ T10] usb 8-1: Manufacturer: syz [ 754.418394][ T10] usb 8-1: SerialNumber: syz [ 754.422934][ T7797] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 754.450073][ T10] usb 8-1: config 0 descriptor?? [ 754.459288][ T10] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 754.462661][ T10] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 754.465146][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 754.469211][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 754.476103][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 754.482119][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.486898][ T9] usb 7-1: Product: syz [ 754.486944][ T9] usb 7-1: Manufacturer: syz [ 754.486969][ T9] usb 7-1: SerialNumber: syz [ 754.495486][ T9] usb 7-1: config 0 descriptor?? [ 754.502693][ T9] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 754.507857][ T9] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 754.595776][ T7797] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 754.596369][ T7797] usb 5-1: config 0 has no interfaces? [ 754.596391][ T7797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.597676][ T7797] usb 5-1: config 0 descriptor?? [ 754.746823][T16430] netlink: 'syz.4.3121': attribute type 11 has an invalid length. [ 754.811794][T16412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3118'. [ 754.811941][T16412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3118'. [ 754.822278][T16434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.874539][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 754.984437][ T9560] usb 37-1: device descriptor read/64, error -71 [ 755.009031][ T5848] usb 5-1: USB disconnect, device number 30 [ 755.012880][T16415] vhci_hcd: connection closed [ 755.014622][ T5824] vhci_hcd vhci_hcd.0: stop threads [ 755.014743][ T5824] vhci_hcd vhci_hcd.0: release socket [ 755.016327][ T5824] vhci_hcd vhci_hcd.0: disconnect device [ 755.074903][ T10] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 755.112739][ T9] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 755.164605][ T9560] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 755.280516][T16410] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 755.316885][T16414] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 755.501324][ T10] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 755.501378][ T10] em28xx 8-1:0.0: board has no eeprom [ 755.528172][ T9] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 755.532189][ T9] em28xx 7-1:0.0: board has no eeprom [ 755.564760][ T10] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 755.568293][ T10] em28xx 8-1:0.0: dvb set to bulk mode. [ 755.574877][ T5848] em28xx 8-1:0.0: Binding DVB extension [ 755.584706][ T10] usb 8-1: USB disconnect, device number 33 [ 755.585599][ T10] em28xx 8-1:0.0: Disconnecting em28xx [ 755.594536][ T9] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 755.594597][ T9] em28xx 7-1:0.0: dvb set to bulk mode. [ 755.638629][ T9] usb 7-1: USB disconnect, device number 58 [ 755.639573][ T9] em28xx 7-1:0.0: Disconnecting em28xx [ 755.702574][ T5848] em28xx 8-1:0.0: Registering input extension [ 755.713911][T16417] em28xx 7-1:0.0: Binding DVB extension [ 755.777828][ T43] audit: type=1800 audit(1788503561.406:661): pid=16440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3122" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 755.788181][T16440] netlink: 'syz.0.3122': attribute type 1 has an invalid length. [ 755.795439][T16417] em28xx 7-1:0.0: Registering input extension [ 755.809544][ T10] em28xx 8-1:0.0: Closing input extension [ 755.818611][ T9] em28xx 7-1:0.0: Closing input extension [ 755.845828][ T10] em28xx: Freeing device [ 755.867226][T16440] bond2: entered promiscuous mode [ 755.870339][T16440] 8021q: adding VLAN 0 to HW filter on device bond2 [ 755.875730][ T9] em28xx: Freeing device [ 755.914493][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 755.928382][T16442] bond2: (slave bridge1): making interface the new active one [ 755.932049][T16442] bridge1: entered promiscuous mode [ 755.945979][T16442] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 756.130538][T16448] gadgetfs: bound to dummy_udc driver [ 756.416938][T16459] gadgetfs: bound to dummy_udc driver [ 756.559602][T16465] gadgetfs: bound to dummy_udc driver [ 756.573377][T16467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.574153][T16467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.579074][T16467] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 756.884577][ T5898] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 756.954565][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 757.044850][ T5898] usb 9-1: Using ep0 maxpacket: 16 [ 757.045843][ T5898] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 757.051277][ T5898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 757.052984][ T5898] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.053000][ T5898] usb 9-1: Product: syz [ 757.053009][ T5898] usb 9-1: Manufacturer: syz [ 757.053016][ T5898] usb 9-1: SerialNumber: syz [ 757.054785][ T5898] usb 9-1: config 0 descriptor?? [ 757.058762][ T5898] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 757.058792][ T5898] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 757.204484][ T50] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 757.253148][T16478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3137'. [ 757.332075][T16481] gadgetfs: bound to dummy_udc driver [ 757.436315][ T50] usb 8-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 757.440586][ T50] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.440668][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.440736][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.440748][ T50] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 757.460426][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.460475][ T50] usb 8-1: Product: syz [ 757.460504][ T50] usb 8-1: Manufacturer: syz [ 757.460513][ T50] usb 8-1: SerialNumber: syz [ 757.702829][ T5898] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 757.904664][T16485] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3134'. [ 757.994589][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 758.203264][T16469] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 758.219861][T16488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.220191][T16488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.222670][T16471] lo speed is unknown, defaulting to 1000 [ 758.223436][T16471] wlan0 speed is unknown, defaulting to 1000 [ 758.257203][ T5898] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 758.257265][ T5898] em28xx 9-1:0.0: board has no eeprom [ 758.324664][ T5898] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 758.324734][ T5898] em28xx 9-1:0.0: dvb set to bulk mode. [ 758.325275][ T50] em28xx 9-1:0.0: Binding DVB extension [ 758.332037][ T5898] usb 9-1: USB disconnect, device number 20 [ 758.333343][ T5898] em28xx 9-1:0.0: Disconnecting em28xx [ 758.362679][T16498] netlink: 'syz.0.3144': attribute type 10 has an invalid length. [ 758.366678][ T50] em28xx 9-1:0.0: Registering input extension [ 758.366839][ T5898] em28xx 9-1:0.0: Closing input extension [ 758.392720][T16498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 758.399791][T16498] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 758.405584][ T5898] em28xx: Freeing device [ 758.419657][T16498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3144'. [ 758.528734][T16512] gadgetfs: bound to dummy_udc driver [ 759.034664][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 759.430414][T16536] devtmpfs: Bad value for 'usrquota_block_hardlimit' [ 759.650532][T16546] FAULT_INJECTION: forcing a failure. [ 759.650532][T16546] name failslab, interval 1, probability 0, space 0, times 0 [ 759.656211][T16546] CPU: 0 UID: 0 PID: 16546 Comm: syz.0.3161 Tainted: G L syzkaller #0 PREEMPT(full) [ 759.656254][T16546] Tainted: [L]=SOFTLOCKUP [ 759.656264][T16546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 759.656274][T16546] Call Trace: [ 759.656284][T16546] [ 759.656294][T16546] dump_stack_lvl+0x100/0x190 [ 759.656329][T16546] should_fail_ex.cold+0x5/0xa [ 759.656358][T16546] should_failslab+0xc2/0x120 [ 759.656387][T16546] kmem_cache_alloc_noprof+0x92/0x6a0 [ 759.656408][T16546] ? rcu_read_lock_any_held+0x6a/0x90 [ 759.656431][T16546] ? do_getname+0x35/0x390 [ 759.656463][T16546] do_getname+0x35/0x390 [ 759.656490][T16546] do_sys_openat2+0xc7/0x1e0 [ 759.656515][T16546] ? __pfx_do_sys_openat2+0x10/0x10 [ 759.656539][T16546] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 759.656566][T16546] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 759.656594][T16546] __ia32_compat_sys_openat+0x12d/0x210 [ 759.656621][T16546] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 759.656658][T16546] do_int80_emulation+0x166/0x650 [ 759.656685][T16546] asm_int80_emulation+0x1a/0x20 [ 759.656705][T16546] RIP: 0023:0xf71175ab [ 759.656722][T16546] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 759.656744][T16546] RSP: 002b:00000000f53d63cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 759.656767][T16546] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53d6490 [ 759.656780][T16546] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 759.656791][T16546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 759.656802][T16546] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 759.656814][T16546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 759.656838][T16546] [ 759.742189][T16551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3162'. [ 759.760905][T16551] libceph: resolve ' [ 759.760905][T16551] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 759.760905][T16551] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 759.934555][ T9] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 759.979333][ T5898] usb 8-1: USB disconnect, device number 34 [ 760.074442][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 760.084704][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 760.087844][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 760.091086][T16558] pim6reg: entered allmulticast mode [ 760.092335][T16558] pim6reg: left allmulticast mode [ 760.096165][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 760.101557][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.101615][ T9] usb 7-1: Product: syz [ 760.101637][ T9] usb 7-1: Manufacturer: syz [ 760.101660][ T9] usb 7-1: SerialNumber: syz [ 760.114034][ T9] usb 7-1: config 0 descriptor?? [ 760.118027][ T9] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 760.121929][ T9] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 760.127717][T13887] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 760.220909][T16561] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 760.276221][T13887] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 760.279895][T13887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.279996][T13887] usb 5-1: Product: syz [ 760.280012][T13887] usb 5-1: Manufacturer: syz [ 760.280030][T13887] usb 5-1: SerialNumber: syz [ 760.602508][T16565] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 760.607650][T16565] loop0: detected capacity change from 0 to 1 [ 760.686016][T16565] ldm_validate_privheads(): Disk read failed. [ 760.686508][T16565] loop0: [ 760.686521][T16565] loop0: partition table partially beyond EOD, truncated [ 760.729745][ T9] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 760.815359][ T5151] ldm_validate_privheads(): Disk read failed. [ 760.815480][ T5151] loop0: [ 760.815516][ T5151] loop0: partition table partially beyond EOD, truncated [ 760.848641][T13887] rtl8150 5-1:1.0: couldn't reset the device [ 760.850822][T13887] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 760.866980][T13887] usb 5-1: USB disconnect, device number 31 [ 760.931158][T16550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 760.935293][T16570] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 761.102200][T16575] FAULT_INJECTION: forcing a failure. [ 761.102200][T16575] name failslab, interval 1, probability 0, space 0, times 0 [ 761.102317][T16575] CPU: 0 UID: 0 PID: 16575 Comm: syz.3.3171 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.102345][T16575] Tainted: [L]=SOFTLOCKUP [ 761.102350][T16575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 761.102358][T16575] Call Trace: [ 761.102363][T16575] [ 761.102369][T16575] dump_stack_lvl+0x100/0x190 [ 761.102400][T16575] should_fail_ex.cold+0x5/0xa [ 761.102417][T16575] should_failslab+0xc2/0x120 [ 761.102433][T16575] kmem_cache_alloc_noprof+0x92/0x6a0 [ 761.102447][T16575] ? rcu_read_lock_any_held+0x6a/0x90 [ 761.102463][T16575] ? do_getname+0x35/0x390 [ 761.102480][T16575] do_getname+0x35/0x390 [ 761.102499][T16575] do_sys_openat2+0xc7/0x1e0 [ 761.102515][T16575] ? __pfx_do_sys_openat2+0x10/0x10 [ 761.102530][T16575] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 761.102550][T16575] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 761.102563][T16575] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 761.102577][T16575] __ia32_compat_sys_openat+0x12d/0x210 [ 761.102600][T16575] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 761.102624][T16575] do_int80_emulation+0x166/0x650 [ 761.102644][T16575] asm_int80_emulation+0x1a/0x20 [ 761.102658][T16575] RIP: 0023:0xf71d75ab [ 761.102669][T16575] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 761.102682][T16575] RSP: 002b:00000000f548d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 761.102695][T16575] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f548d490 [ 761.102703][T16575] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 761.102710][T16575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 761.102716][T16575] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 761.102723][T16575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 761.102737][T16575] [ 761.114540][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 761.141635][ T9] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 761.141656][ T9] em28xx 7-1:0.0: board has no eeprom [ 761.206539][ T9] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 761.206607][ T9] em28xx 7-1:0.0: dvb set to bulk mode. [ 761.207630][T16417] em28xx 7-1:0.0: Binding DVB extension [ 761.213527][ T9] usb 7-1: USB disconnect, device number 59 [ 761.215275][T16577] tmpfs: Cannot change global quota limit on remount [ 761.217102][ T9] em28xx 7-1:0.0: Disconnecting em28xx [ 761.235670][T16417] em28xx 7-1:0.0: Registering input extension [ 761.235933][ T9] em28xx 7-1:0.0: Closing input extension [ 761.251404][ T9] em28xx: Freeing device [ 761.385341][T16580] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 761.418943][T16580] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.450520][T16582] pim6reg: entered allmulticast mode [ 761.451977][T16582] pim6reg: left allmulticast mode [ 761.566836][T16587] CIFS mount error: No usable UNC path provided in device string! [ 761.566836][T16587] [ 761.566899][T16587] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 761.639258][T16580] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.783284][T16580] bond0: (slave netdevsim1): Releasing backup interface [ 761.796192][T16580] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.890838][T16599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.979407][T16602] gadgetfs: bound to dummy_udc driver [ 762.154498][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 762.169136][T16580] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.415409][ T5556] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.434668][T16598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.438649][ T5556] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.438695][ T5556] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.438723][ T5556] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.695620][T16618] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.0), cmd(2) [ 762.714446][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 762.796990][ T43] audit: type=1800 audit(1788503568.436:662): pid=16620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3186" name="alua_access_type" dev="configfs" ino=56232 res=0 errno=0 [ 762.797580][T16620] Unable to extract alua_access_type [ 762.864536][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 762.865524][ T9] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 762.866703][ T9] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 762.866726][ T9] usb 9-1: config 0 has no interface number 0 [ 762.866756][ T9] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 762.866777][ T9] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 762.866798][ T9] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 207, changing to 11 [ 762.866819][ T9] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 10104, setting to 1024 [ 762.866840][ T9] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 762.866876][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.870036][ T9] usb 9-1: config 0 descriptor?? [ 762.871133][T16608] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 762.879172][ T9] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 762.904663][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 763.054583][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 763.055501][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 763.056648][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 763.058957][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.058978][ T10] usb 5-1: Product: syz [ 763.058990][ T10] usb 5-1: Manufacturer: syz [ 763.059001][ T10] usb 5-1: SerialNumber: syz [ 763.060559][ T10] usb 5-1: config 0 descriptor?? [ 763.062957][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 763.062978][ T10] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 763.143587][T16608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.147220][T16608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.174415][T16607] tmpfs: Unknown parameter 'subj_role' [ 763.183242][T12715] usb 9-1: USB disconnect, device number 21 [ 763.189691][T12715] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 763.204430][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 763.372137][T16641] pim6reg: entered allmulticast mode [ 763.378750][T16641] pim6reg: left allmulticast mode [ 763.680673][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 763.806202][T16655] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.0), cmd(2) [ 763.885707][T16616] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 763.888716][T16659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.947446][T16661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3197'. [ 763.948175][T16661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3197'. [ 763.955999][T16661] FAULT_INJECTION: forcing a failure. [ 763.955999][T16661] name failslab, interval 1, probability 0, space 0, times 0 [ 763.956072][T16661] CPU: 2 UID: 0 PID: 16661 Comm: syz.2.3197 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.956094][T16661] Tainted: [L]=SOFTLOCKUP [ 763.956099][T16661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 763.956109][T16661] Call Trace: [ 763.956114][T16661] [ 763.956121][T16661] dump_stack_lvl+0x100/0x190 [ 763.956143][T16661] should_fail_ex.cold+0x5/0xa [ 763.956163][T16661] should_failslab+0xc2/0x120 [ 763.956183][T16661] kmem_cache_alloc_noprof+0x92/0x6a0 [ 763.956198][T16661] ? rcu_read_lock_any_held+0x6a/0x90 [ 763.956213][T16661] ? do_getname+0x35/0x390 [ 763.956232][T16661] do_getname+0x35/0x390 [ 763.956249][T16661] do_sys_openat2+0xc7/0x1e0 [ 763.956269][T16661] ? __pfx_do_sys_openat2+0x10/0x10 [ 763.956298][T16661] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 763.956318][T16661] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 763.956333][T16661] __ia32_compat_sys_openat+0x12d/0x210 [ 763.956351][T16661] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 763.956377][T16661] do_int80_emulation+0x166/0x650 [ 763.956395][T16661] asm_int80_emulation+0x1a/0x20 [ 763.956410][T16661] RIP: 0023:0xf71c75ab [ 763.956421][T16661] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 763.956436][T16661] RSP: 002b:00000000f547d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 763.956449][T16661] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f547d490 [ 763.956457][T16661] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 763.956464][T16661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 763.956471][T16661] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 763.956478][T16661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 763.956493][T16661] [ 764.105600][ T10] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 764.105650][ T10] em28xx 5-1:0.0: board has no eeprom [ 764.120703][T16672] pim6reg: entered allmulticast mode [ 764.122316][T16672] pim6reg: left allmulticast mode [ 764.174464][ T10] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 764.177406][ T10] em28xx 5-1:0.0: dvb set to bulk mode. [ 764.182419][ T10] usb 5-1: USB disconnect, device number 32 [ 764.186699][ T9] em28xx 5-1:0.0: Binding DVB extension [ 764.189956][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 764.232595][ T9] em28xx 5-1:0.0: Registering input extension [ 764.235650][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 764.241936][ T10] em28xx 5-1:0.0: Closing input extension [ 764.259638][ T10] em28xx: Freeing device [ 764.295162][T16675] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3201'. [ 764.465291][T16689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.478629][T16657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.495729][T16690] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 764.520292][T16691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.524720][T16691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.651215][T16697] pim6reg: entered allmulticast mode [ 764.653244][T16697] pim6reg: left allmulticast mode [ 765.049003][T16709] FAULT_INJECTION: forcing a failure. [ 765.049003][T16709] name failslab, interval 1, probability 0, space 0, times 0 [ 765.053235][T16709] CPU: 0 UID: 0 PID: 16709 Comm: syz.4.3212 Tainted: G L syzkaller #0 PREEMPT(full) [ 765.053269][T16709] Tainted: [L]=SOFTLOCKUP [ 765.053275][T16709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 765.053283][T16709] Call Trace: [ 765.053289][T16709] [ 765.053295][T16709] dump_stack_lvl+0x100/0x190 [ 765.053316][T16709] should_fail_ex.cold+0x5/0xa [ 765.053333][T16709] should_failslab+0xc2/0x120 [ 765.053349][T16709] kmem_cache_alloc_noprof+0x92/0x6a0 [ 765.053364][T16709] ? rcu_read_lock_any_held+0x6a/0x90 [ 765.053379][T16709] ? do_getname+0x35/0x390 [ 765.053397][T16709] do_getname+0x35/0x390 [ 765.053414][T16709] do_sys_openat2+0xc7/0x1e0 [ 765.053431][T16709] ? __pfx_do_sys_openat2+0x10/0x10 [ 765.053445][T16709] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 765.053464][T16709] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 765.053480][T16709] __ia32_compat_sys_openat+0x12d/0x210 [ 765.053497][T16709] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 765.053519][T16709] do_int80_emulation+0x166/0x650 [ 765.053537][T16709] asm_int80_emulation+0x1a/0x20 [ 765.053550][T16709] RIP: 0023:0xf71c75ab [ 765.053561][T16709] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 765.053573][T16709] RSP: 002b:00000000f547d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 765.053585][T16709] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f547d490 [ 765.053592][T16709] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 765.053599][T16709] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 765.053606][T16709] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 765.053613][T16709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 765.053633][T16709] [ 765.274536][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 766.087716][T16723] FAULT_INJECTION: forcing a failure. [ 766.087716][T16723] name failslab, interval 1, probability 0, space 0, times 0 [ 766.096844][T16723] CPU: 3 UID: 0 PID: 16723 Comm: syz.4.3217 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.096902][T16723] Tainted: [L]=SOFTLOCKUP [ 766.096909][T16723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 766.096920][T16723] Call Trace: [ 766.096930][T16723] [ 766.096940][T16723] dump_stack_lvl+0x100/0x190 [ 766.096975][T16723] should_fail_ex.cold+0x5/0xa [ 766.096996][T16723] should_failslab+0xc2/0x120 [ 766.097018][T16723] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 766.097036][T16723] ? alloc_vmap_area+0x1814/0x2bb0 [ 766.097059][T16723] alloc_vmap_area+0x1814/0x2bb0 [ 766.097082][T16723] ? kasan_save_track+0x14/0x30 [ 766.097099][T16723] ? __kasan_kmalloc+0xaa/0xb0 [ 766.097118][T16723] ? __pfx_alloc_vmap_area+0x10/0x10 [ 766.097138][T16723] ? __get_vm_area_node+0x124/0x350 [ 766.097163][T16723] __get_vm_area_node+0x1ed/0x350 [ 766.097187][T16723] __vmalloc_node_range_noprof+0x268/0x1420 [ 766.097213][T16723] ? n_tty_open+0x1a/0x170 [ 766.097241][T16723] ? lock_acquire+0x1d1/0x380 [ 766.097267][T16723] ? n_tty_open+0x1a/0x170 [ 766.097290][T16723] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 766.097310][T16723] ? vc_allocate+0x132/0x880 [ 766.097350][T16723] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 766.097382][T16723] ? n_tty_open+0x1a/0x170 [ 766.097406][T16723] __vmalloc_node_noprof+0xad/0xf0 [ 766.097426][T16723] ? n_tty_open+0x1a/0x170 [ 766.097446][T16723] ? __pfx_n_tty_open+0x10/0x10 [ 766.097468][T16723] n_tty_open+0x1a/0x170 [ 766.097488][T16723] tty_ldisc_open+0xa2/0x120 [ 766.097505][T16723] tty_ldisc_setup+0x40/0xf0 [ 766.097523][T16723] tty_init_dev.part.0+0x1b5/0x470 [ 766.097543][T16723] tty_open+0x953/0xe20 [ 766.097566][T16723] ? __pfx_tty_open+0x10/0x10 [ 766.097584][T16723] ? chrdev_open+0x10b/0x6a0 [ 766.097603][T16723] ? chrdev_open+0x10b/0x6a0 [ 766.097624][T16723] ? __pfx_tty_open+0x10/0x10 [ 766.097643][T16723] chrdev_open+0x234/0x6a0 [ 766.097659][T16723] ? __pfx_apparmor_file_open+0x10/0x10 [ 766.097686][T16723] ? __pfx_chrdev_open+0x10/0x10 [ 766.097707][T16723] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 766.097733][T16723] do_dentry_open+0x6ab/0x14d0 [ 766.097749][T16723] ? __pfx_chrdev_open+0x10/0x10 [ 766.097771][T16723] vfs_open+0x82/0x3f0 [ 766.097795][T16723] path_openat+0x19fa/0x2440 [ 766.097817][T16723] ? __pfx_path_openat+0x10/0x10 [ 766.097900][T16723] do_file_open+0x20e/0x430 [ 766.097927][T16723] ? __pfx_do_file_open+0x10/0x10 [ 766.097967][T16723] ? _raw_spin_unlock+0x28/0x50 [ 766.097995][T16723] ? alloc_fd+0x471/0x7a0 [ 766.098021][T16723] do_sys_openat2+0x10f/0x1e0 [ 766.098070][T16723] ? __pfx_do_sys_openat2+0x10/0x10 [ 766.098101][T16723] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 766.098122][T16723] __ia32_compat_sys_openat+0x12d/0x210 [ 766.098147][T16723] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 766.098181][T16723] do_int80_emulation+0x166/0x650 [ 766.098205][T16723] asm_int80_emulation+0x1a/0x20 [ 766.098223][T16723] RIP: 0023:0xf71c75ab [ 766.098239][T16723] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 766.098257][T16723] RSP: 002b:00000000f547d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 766.098279][T16723] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f547d100 [ 766.098289][T16723] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 766.098299][T16723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 766.098310][T16723] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 766.098320][T16723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 766.098339][T16723] [ 766.160564][T16730] gadgetfs: bound to dummy_udc driver [ 766.167679][T16727] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3217'. [ 766.314579][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 766.523341][T16746] netlink: 'syz.0.3223': attribute type 13 has an invalid length. [ 766.528001][T16745] tmpfs: Bad value for 'nr_blocks' [ 767.285316][T16761] lo speed is unknown, defaulting to 1000 [ 767.286053][T16761] wlan0 speed is unknown, defaulting to 1000 [ 767.364606][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 767.418724][T16768] gadgetfs: bound to dummy_udc driver [ 767.820877][T16782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3236'. [ 767.830992][T16784] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3236'. [ 767.835796][ T10] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 767.995608][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 767.996177][ T10] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 767.997887][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.997901][ T10] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 767.999911][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.999927][ T10] usb 9-1: Product: syz [ 767.999935][ T10] usb 9-1: Manufacturer: syz [ 767.999943][ T10] usb 9-1: SerialNumber: syz [ 768.001506][ T10] usb 9-1: config 0 descriptor?? [ 768.232212][ T10] usb 9-1: USB disconnect, device number 22 [ 768.394430][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 769.007538][T16837] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3249'. [ 769.014079][T16837] program syz.3.3249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 769.044425][ T50] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 769.164475][ T5898] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 769.224561][ T50] usb 9-1: Using ep0 maxpacket: 16 [ 769.225493][ T50] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 769.226519][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 769.228284][ T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.228298][ T50] usb 9-1: Product: syz [ 769.228306][ T50] usb 9-1: Manufacturer: syz [ 769.228314][ T50] usb 9-1: SerialNumber: syz [ 769.246165][ T50] usb 9-1: config 0 descriptor?? [ 769.250135][ T50] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 769.250213][ T50] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 769.297560][T16826] tmpfs: Bad value for 'nr_blocks' [ 769.334391][ T5898] usb 7-1: Using ep0 maxpacket: 16 [ 769.335165][ T5898] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 769.336057][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 769.338126][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.338141][ T5898] usb 7-1: Product: syz [ 769.338149][ T5898] usb 7-1: Manufacturer: syz [ 769.338157][ T5898] usb 7-1: SerialNumber: syz [ 769.346240][ T5898] usb 7-1: config 0 descriptor?? [ 769.349037][ T5898] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 769.349056][ T5898] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 769.434415][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 769.850858][T16850] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3255'. [ 769.850934][T16850] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3255'. [ 769.851007][T16850] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3255'. [ 769.872232][ T50] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 769.955630][ T5898] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 770.077597][T16833] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 770.163909][T16835] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 770.170347][ T7813] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 770.174064][ T7813] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 770.177246][ T7813] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 770.180353][ T7813] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 770.193181][ T7813] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 770.195693][ T7813] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 770.198210][ T7813] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 770.200899][ T7813] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 770.203574][ T7813] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 770.206178][ T7813] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 770.210878][ T7813] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [sy] on syz0 [ 770.291423][T16875] fido_id[16875]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 770.298259][ T50] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 770.302290][ T50] em28xx 9-1:0.0: board has no eeprom [ 770.364742][ T50] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 770.367739][ T50] em28xx 9-1:0.0: dvb set to bulk mode. [ 770.370880][ T7813] em28xx 9-1:0.0: Binding DVB extension [ 770.374791][ T5898] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 770.374828][ T5898] em28xx 7-1:0.0: board has no eeprom [ 770.388158][ T50] usb 9-1: USB disconnect, device number 23 [ 770.391326][ T50] em28xx 9-1:0.0: Disconnecting em28xx [ 770.421784][ T7813] em28xx 9-1:0.0: Registering input extension [ 770.423867][ T50] em28xx 9-1:0.0: Closing input extension [ 770.432201][ T50] em28xx: Freeing device [ 770.444748][ T5898] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 770.445008][ T5898] em28xx 7-1:0.0: dvb set to bulk mode. [ 770.451775][ T5898] usb 7-1: USB disconnect, device number 60 [ 770.455031][ T5898] em28xx 7-1:0.0: Disconnecting em28xx [ 770.457001][ T7813] em28xx 7-1:0.0: Binding DVB extension [ 770.484486][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 770.509713][ T7813] em28xx 7-1:0.0: Registering input extension [ 770.512145][ T5898] em28xx 7-1:0.0: Closing input extension [ 770.533542][ T5898] em28xx: Freeing device [ 770.904918][T16889] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 770.904954][T16889] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 770.909898][T16889] vhci_hcd vhci_hcd.0: Device attached [ 771.154995][ T7797] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 771.164478][ T5898] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 771.305222][ T7797] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 771.305700][ T7797] usb 5-1: config 0 has no interfaces? [ 771.305721][ T7797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.308284][ T7797] usb 5-1: config 0 descriptor?? [ 771.514426][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 771.515439][T16889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3262'. [ 771.515466][T16889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3262'. [ 771.566173][T16890] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 771.569071][ T5556] vhci_hcd vhci_hcd.0: stop threads [ 771.575085][ T5556] vhci_hcd vhci_hcd.0: release socket [ 771.577506][ T5556] vhci_hcd vhci_hcd.0: disconnect device [ 771.780311][T16903] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 771.780356][T16903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 771.787477][T16903] vhci_hcd vhci_hcd.0: Device attached [ 771.887881][T16887] tmpfs: Bad value for 'nr_blocks' [ 771.965579][T12715] usb 5-1: USB disconnect, device number 34 [ 772.025035][ T7797] usb 7-1: new low-speed USB device number 61 using dummy_hcd [ 772.044622][ T50] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 772.174523][ T7813] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 772.175737][ T7797] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 772.176396][ T7797] usb 7-1: config 0 has no interfaces? [ 772.176417][ T7797] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.180600][ T7797] usb 7-1: config 0 descriptor?? [ 772.355930][ T7813] usb 9-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 772.356932][ T7813] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.356955][ T7813] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.356969][ T7813] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.356981][ T7813] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 772.358666][ T7813] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.358685][ T7813] usb 9-1: Product: syz [ 772.358693][ T7813] usb 9-1: Manufacturer: syz [ 772.358701][ T7813] usb 9-1: SerialNumber: syz [ 772.387608][T16903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3264'. [ 772.387632][T16903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3264'. [ 772.496379][T16910] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.530127][ T7813] usb 7-1: USB disconnect, device number 61 [ 772.535458][T16904] vhci_hcd: connection closed [ 772.536156][ T50] usb 41-1: device descriptor read/64, error -71 [ 772.536594][ T5556] vhci_hcd vhci_hcd.2: stop threads [ 772.536615][ T5556] vhci_hcd vhci_hcd.2: release socket [ 772.536660][ T5556] vhci_hcd vhci_hcd.2: disconnect device [ 772.554507][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 772.633635][T16907] lo speed is unknown, defaulting to 1000 [ 772.636825][T16907] wlan0 speed is unknown, defaulting to 1000 [ 772.647292][ T5453] netdevsim netdevsim3 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 772.647682][ T5453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 772.664136][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3270'. [ 772.664225][T16920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3270'. [ 772.724818][ T50] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 772.898557][T16907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.907373][T16907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.016580][T16922] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 773.091894][T16927] trusted_key: encrypted_key: keyword 'upeate' not recognized [ 773.218345][T16929] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 773.594402][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 773.690920][T16938] pim6reg: entered allmulticast mode [ 773.695089][T16938] pim6reg: left allmulticast mode [ 773.760005][T16940] pim6reg: entered allmulticast mode [ 773.767398][T16940] pim6reg: left allmulticast mode [ 773.812987][T16943] gadgetfs: bound to dummy_udc driver [ 774.027683][T16950] gadgetfs: bound to dummy_udc driver [ 774.028655][T16951] loop0: detected capacity change from 0 to 1 [ 774.067454][T16951] ldm_validate_privheads(): Disk read failed. [ 774.067557][T16951] loop0: [ 774.067577][T16951] loop0: partition table partially beyond EOD, truncated [ 774.087371][ T5151] ldm_validate_privheads(): Disk read failed. [ 774.087471][ T5151] loop0: [ 774.087540][ T5151] loop0: partition table partially beyond EOD, truncated [ 774.331545][T16960] pim6reg: entered allmulticast mode [ 774.337040][T16960] pim6reg: left allmulticast mode [ 774.393195][T16964] pim6reg: entered allmulticast mode [ 774.404181][T16964] pim6reg: left allmulticast mode [ 774.634610][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 774.681152][ T43] audit: type=1326 audit(1788503580.316:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.3.3290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 774.681231][ T43] audit: type=1326 audit(1788503580.316:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.3.3290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 774.682151][ T43] audit: type=1326 audit(1788503580.316:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.3.3290" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf709efec code=0x7ffc0000 [ 774.691764][ T43] audit: type=1326 audit(1788503580.326:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.3.3290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 774.691900][ T43] audit: type=1326 audit(1788503580.326:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.3.3290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 774.692113][ T43] audit: type=1326 audit(1788503580.326:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16978 comm="syz.3.3290" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d75ab code=0x7ffc0000 [ 774.733013][ T43] audit: type=1326 audit(1788503580.366:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.3.3290" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf709efec code=0x7ffc0000 [ 774.733059][ T43] audit: type=1326 audit(1788503580.366:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.3.3290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 774.733088][ T43] audit: type=1326 audit(1788503580.366:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.3.3290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 774.733117][ T43] audit: type=1326 audit(1788503580.366:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.3.3290" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf709efec code=0x7ffc0000 [ 774.950040][ T50] usb 9-1: USB disconnect, device number 24 [ 774.979906][T16989] pim6reg: entered allmulticast mode [ 774.982395][T16989] pim6reg: left allmulticast mode [ 775.276179][T17007] FAULT_INJECTION: forcing a failure. [ 775.276179][T17007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.276249][T17007] CPU: 2 UID: 0 PID: 17007 Comm: syz.3.3303 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.276279][T17007] Tainted: [L]=SOFTLOCKUP [ 775.276286][T17007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 775.276297][T17007] Call Trace: [ 775.276304][T17007] [ 775.276311][T17007] dump_stack_lvl+0x100/0x190 [ 775.276343][T17007] should_fail_ex.cold+0x5/0xa [ 775.276373][T17007] _copy_from_user+0x2e/0xd0 [ 775.276395][T17007] get_compat_msghdr+0xb3/0x480 [ 775.276426][T17007] ? __pfx_get_compat_msghdr+0x10/0x10 [ 775.276455][T17007] ? _kstrtoull+0x144/0x200 [ 775.276476][T17007] ? __pfx__kstrtoull+0x10/0x10 [ 775.276493][T17007] ___sys_sendmsg+0x1b6/0x1e0 [ 775.276528][T17007] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.276545][T17007] ? __lock_acquire+0x4c5/0x1ec0 [ 775.276566][T17007] ? __fget_files+0x34/0x3d0 [ 775.276589][T17007] __sys_sendmmsg+0x309/0x440 [ 775.276605][T17007] ? __pfx___sys_sendmmsg+0x10/0x10 [ 775.276618][T17007] ? find_held_lock+0x2b/0x80 [ 775.276633][T17007] ? __mutex_unlock_slowpath+0x35d/0x930 [ 775.276658][T17007] ? fput+0x7c/0x100 [ 775.276672][T17007] ? ksys_write+0x1ac/0x250 [ 775.276686][T17007] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 775.276702][T17007] ? lockdep_hardirqs_on+0x7d/0x110 [ 775.276717][T17007] __do_fast_syscall_32+0x13a/0x8b0 [ 775.276733][T17007] ? lockdep_hardirqs_on+0x7d/0x110 [ 775.276749][T17007] do_fast_syscall_32+0x32/0x70 [ 775.276764][T17007] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 775.276781][T17007] RIP: 0023:0xf709efec [ 775.276816][T17007] Code: Unable to access opcode bytes at 0xf709efc2. [ 775.276822][T17007] RSP: 002b:00000000f546c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 775.276836][T17007] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800030c0 [ 775.276843][T17007] RDX: 0000000000000181 RSI: 0000000000000000 RDI: 0000000000000000 [ 775.276850][T17007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 775.276857][T17007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.276864][T17007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 775.276879][T17007] [ 775.674796][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 776.144957][T17023] pim6reg: entered allmulticast mode [ 776.151218][T17023] pim6reg: left allmulticast mode [ 776.297118][T17035] gadgetfs: bound to dummy_udc driver [ 776.325044][ T5898] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 776.650616][T17054] pim6reg: entered allmulticast mode [ 776.652292][T17054] pim6reg: left allmulticast mode [ 776.714506][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 776.777900][T17062] __nla_validate_parse: 1 callbacks suppressed [ 776.777980][T17062] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3325'. [ 777.319417][T17072] tipc: Started in network mode [ 777.415928][T17072] tipc: Node identity 5e1bbe0db476, cluster identity 4711 [ 777.416155][T17072] tipc: Enabled bearer , priority 0 [ 777.431156][T17072] tipc: Resetting bearer [ 777.726437][T17081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.754567][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 778.303439][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3337'. [ 778.304020][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3337'. [ 778.343620][T17100] FAULT_INJECTION: forcing a failure. [ 778.343620][T17100] name failslab, interval 1, probability 0, space 0, times 0 [ 778.343696][T17100] CPU: 0 UID: 0 PID: 17100 Comm: syz.2.3337 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.343732][T17100] Tainted: [L]=SOFTLOCKUP [ 778.343739][T17100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 778.343747][T17100] Call Trace: [ 778.343753][T17100] [ 778.343759][T17100] dump_stack_lvl+0x100/0x190 [ 778.343783][T17100] should_fail_ex.cold+0x5/0xa [ 778.343801][T17100] should_failslab+0xc2/0x120 [ 778.343820][T17100] kmem_cache_alloc_noprof+0x92/0x6a0 [ 778.343836][T17100] ? rcu_read_lock_any_held+0x6a/0x90 [ 778.343851][T17100] ? do_getname+0x35/0x390 [ 778.343872][T17100] do_getname+0x35/0x390 [ 778.343892][T17100] do_sys_openat2+0xc7/0x1e0 [ 778.343910][T17100] ? __pfx_do_sys_openat2+0x10/0x10 [ 778.343926][T17100] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 778.343947][T17100] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 778.343990][T17100] __ia32_compat_sys_openat+0x12d/0x210 [ 778.344011][T17100] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 778.344038][T17100] do_int80_emulation+0x166/0x650 [ 778.344059][T17100] asm_int80_emulation+0x1a/0x20 [ 778.344074][T17100] RIP: 0023:0xf71c75ab [ 778.344086][T17100] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 778.344100][T17100] RSP: 002b:00000000f547d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 778.344113][T17100] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f547d490 [ 778.344121][T17100] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 778.344129][T17100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 778.344137][T17100] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 778.344145][T17100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 778.344161][T17100] [ 778.413520][T17104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3338'. [ 778.413565][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3338'. [ 778.426376][T12715] tipc: Node number set to 3933060621 [ 778.794489][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 779.429031][T17133] gadgetfs: bound to dummy_udc driver [ 779.589431][T17137] FAULT_INJECTION: forcing a failure. [ 779.589431][T17137] name failslab, interval 1, probability 0, space 0, times 0 [ 779.598525][T17137] CPU: 0 UID: 60928 PID: 17137 Comm: syz.2.3349 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.598587][T17137] Tainted: [L]=SOFTLOCKUP [ 779.598598][T17137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 779.598615][T17137] Call Trace: [ 779.598623][T17137] [ 779.598636][T17137] dump_stack_lvl+0x100/0x190 [ 779.598675][T17137] should_fail_ex.cold+0x5/0xa [ 779.598706][T17137] should_failslab+0xc2/0x120 [ 779.598734][T17137] kmem_cache_alloc_noprof+0x92/0x6a0 [ 779.598821][T17137] ? sk_prot_alloc+0x60/0x2a0 [ 779.598854][T17137] sk_prot_alloc+0x60/0x2a0 [ 779.598882][T17137] sk_alloc+0x36/0xe80 [ 779.598907][T17137] tipc_sk_create+0xfc/0x2400 [ 779.598935][T17137] ? lock_acquire+0x1d1/0x380 [ 779.598960][T17137] ? __sock_create+0x163/0x860 [ 779.598992][T17137] ? __sock_create+0x2f3/0x860 [ 779.599020][T17137] ? __sock_create+0x2f3/0x860 [ 779.599051][T17137] __sock_create+0x339/0x860 [ 779.599086][T17137] __sys_socket+0x14d/0x260 [ 779.599112][T17137] ? xfd_validate_state+0x129/0x190 [ 779.599143][T17137] ? __pfx___sys_socket+0x10/0x10 [ 779.599184][T17137] __ia32_sys_socket+0x72/0xb0 [ 779.599215][T17137] ? lockdep_hardirqs_on+0x7d/0x110 [ 779.599241][T17137] __do_fast_syscall_32+0x13a/0x8b0 [ 779.599307][T17137] do_fast_syscall_32+0x32/0x70 [ 779.599340][T17137] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.599367][T17137] RIP: 0023:0xf708efec [ 779.599395][T17137] Code: Unable to access opcode bytes at 0xf708efc2. [ 779.599406][T17137] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 779.599428][T17137] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000000002 [ 779.599443][T17137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 779.599458][T17137] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 779.599471][T17137] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 779.599486][T17137] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 779.599514][T17137] [ 779.834504][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 779.914102][ T43] kauditd_printk_skb: 49 callbacks suppressed [ 779.914189][ T43] audit: type=1804 audit(1788503585.546:722): pid=17143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3350" name="bus" dev="ramfs" ino=62041 res=1 errno=0 [ 779.978311][ T43] audit: type=1804 audit(1788503585.616:723): pid=17145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3350" name="bus" dev="ramfs" ino=62041 res=1 errno=0 [ 780.296046][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3353'. [ 780.874480][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 780.986927][T17172] loop0: detected capacity change from 0 to 1 [ 781.028880][T17172] loop0: [ 781.028924][T17172] loop0: partition table partially beyond EOD, truncated [ 781.109858][T17176] FAULT_INJECTION: forcing a failure. [ 781.109858][T17176] name failslab, interval 1, probability 0, space 0, times 0 [ 781.109971][T17176] CPU: 3 UID: 0 PID: 17176 Comm: syz.0.3362 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.110018][T17176] Tainted: [L]=SOFTLOCKUP [ 781.110028][T17176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 781.110045][T17176] Call Trace: [ 781.110055][T17176] [ 781.110066][T17176] dump_stack_lvl+0x100/0x190 [ 781.110104][T17176] should_fail_ex.cold+0x5/0xa [ 781.110136][T17176] should_failslab+0xc2/0x120 [ 781.110168][T17176] __kmalloc_cache_node_noprof+0x94/0x720 [ 781.110197][T17176] ? __alloc_workqueue+0x1211/0x1950 [ 781.110239][T17176] __alloc_workqueue+0x1211/0x1950 [ 781.110285][T17176] alloc_workqueue_noprof+0xc7/0x130 [ 781.110309][T17176] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 781.110342][T17176] ? lockdep_init_map_type+0x5c/0x250 [ 781.110377][T17176] ? lockdep_init_map_type+0x5c/0x250 [ 781.110414][T17176] __rds_conn_create+0x1234/0x25a0 [ 781.110458][T17176] ? __pfx___rds_conn_create+0x10/0x10 [ 781.110490][T17176] ? trace_kmalloc+0xeb/0x110 [ 781.110515][T17176] ? __kasan_kmalloc+0xaa/0xb0 [ 781.110543][T17176] ? lockdep_init_map_type+0x5c/0x250 [ 781.110581][T17176] rds_conn_create_outgoing+0x44/0x60 [ 781.110620][T17176] rds_sendmsg+0x10da/0x34d0 [ 781.110644][T17176] ? __lock_acquire+0x4c5/0x1ec0 [ 781.110687][T17176] ? __pfx_rds_sendmsg+0x10/0x10 [ 781.110714][T17176] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 781.110759][T17176] ? aa_sock_msg_perm+0x11e/0x200 [ 781.110788][T17176] ? apparmor_socket_sendmsg+0x165/0x280 [ 781.110820][T17176] ? __sys_sendto+0x48b/0x4e0 [ 781.110845][T17176] __sys_sendto+0x48b/0x4e0 [ 781.110870][T17176] ? __pfx_rds_sendmsg+0x10/0x10 [ 781.110896][T17176] ? __pfx___sys_sendto+0x10/0x10 [ 781.110929][T17176] ? __sys_bind+0x1c7/0x260 [ 781.110987][T17176] __ia32_sys_sendto+0xdd/0x1b0 [ 781.111023][T17176] ? __do_fast_syscall_32+0xb3/0x8b0 [ 781.111062][T17176] ? lockdep_hardirqs_on+0x7d/0x110 [ 781.111096][T17176] __do_fast_syscall_32+0x13a/0x8b0 [ 781.111132][T17176] do_fast_syscall_32+0x32/0x70 [ 781.111165][T17176] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 781.111194][T17176] RIP: 0023:0xf7f17fec [ 781.111221][T17176] Code: Unable to access opcode bytes at 0xf7f17fc2. [ 781.111233][T17176] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 781.111258][T17176] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 781.111275][T17176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 781.111291][T17176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 781.111337][T17176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.111357][T17176] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 781.111395][T17176] [ 781.523782][T17183] tipc: Enabled bearer , priority 0 [ 781.539160][T17183] tipc: Resetting bearer [ 781.583019][T17182] tipc: Disabling bearer [ 781.747900][T17192] netlink: 'syz.4.3368': attribute type 1 has an invalid length. [ 781.855274][T17192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 781.880815][T17194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 781.885346][T17194] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 781.893997][T17194] bond1: (slave gre1): Error -95 calling set_mac_address [ 781.902595][T17201] FAULT_INJECTION: forcing a failure. [ 781.902595][T17201] name failslab, interval 1, probability 0, space 0, times 0 [ 781.907131][T17201] CPU: 0 UID: 0 PID: 17201 Comm: syz.3.3371 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.907157][T17201] Tainted: [L]=SOFTLOCKUP [ 781.907163][T17201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 781.907171][T17201] Call Trace: [ 781.907179][T17201] [ 781.907187][T17201] dump_stack_lvl+0x100/0x190 [ 781.907211][T17201] should_fail_ex.cold+0x5/0xa [ 781.907231][T17201] should_failslab+0xc2/0x120 [ 781.907251][T17201] kmem_cache_alloc_noprof+0x92/0x6a0 [ 781.907273][T17201] ? alloc_empty_file+0x5b/0x1c0 [ 781.907292][T17201] alloc_empty_file+0x5b/0x1c0 [ 781.907308][T17201] path_openat+0xdb/0x2440 [ 781.907327][T17201] ? __pfx_path_openat+0x10/0x10 [ 781.907348][T17201] do_file_open+0x20e/0x430 [ 781.907365][T17201] ? __pfx_do_file_open+0x10/0x10 [ 781.907392][T17201] ? _raw_spin_unlock+0x28/0x50 [ 781.907407][T17201] ? alloc_fd+0x471/0x7a0 [ 781.907425][T17201] do_sys_openat2+0x10f/0x1e0 [ 781.907442][T17201] ? __pfx_do_sys_openat2+0x10/0x10 [ 781.907458][T17201] ? find_held_lock+0x2b/0x80 [ 781.907488][T17201] ? __fget_files+0x215/0x3d0 [ 781.907504][T17201] __ia32_compat_sys_openat+0x12d/0x210 [ 781.907526][T17201] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 781.907552][T17201] __do_fast_syscall_32+0x13a/0x8b0 [ 781.907574][T17201] do_fast_syscall_32+0x32/0x70 [ 781.907594][T17201] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 781.907613][T17201] RIP: 0023:0xf709efec [ 781.907631][T17201] Code: Unable to access opcode bytes at 0xf709efc2. [ 781.907637][T17201] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 781.907650][T17201] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 781.907658][T17201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 781.907665][T17201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 781.907672][T17201] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 781.907679][T17201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 781.907693][T17201] [ 781.918142][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 782.018288][T17192] gretap1: entered promiscuous mode [ 782.027110][T17192] bond1: (slave gretap1): making interface the new active one [ 782.032567][T17192] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 782.061257][T17198] 8021q: adding VLAN 0 to HW filter on device bond2 [ 782.064059][T17198] bond1: (slave bond2): Enslaving as an active interface with a down link [ 782.071339][T17203] pim6reg: entered allmulticast mode [ 782.077889][T17192] bond1 (unregistering): (slave gretap1): Releasing active interface [ 782.090689][T17192] bond1 (unregistering): (slave bond2): Releasing active interface [ 782.100905][T17192] bond1 (unregistering): Released all slaves [ 782.257799][T17211] netlink: 'syz.3.3375': attribute type 6 has an invalid length. [ 782.471107][T17227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.529557][T17230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.531125][T17231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.587484][T17232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.667370][T17233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.700071][T17233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.954548][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 783.152778][T17237] pim6reg: entered allmulticast mode [ 783.358188][T17245] netlink: 'syz.0.3386': attribute type 6 has an invalid length. [ 783.861297][T17268] FAULT_INJECTION: forcing a failure. [ 783.861297][T17268] name failslab, interval 1, probability 0, space 0, times 0 [ 783.861356][T17268] CPU: 0 UID: 0 PID: 17268 Comm: syz.3.3395 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.861392][T17268] Tainted: [L]=SOFTLOCKUP [ 783.861398][T17268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 783.861407][T17268] Call Trace: [ 783.861413][T17268] [ 783.861419][T17268] dump_stack_lvl+0x100/0x190 [ 783.861443][T17268] should_fail_ex.cold+0x5/0xa [ 783.861461][T17268] should_failslab+0xc2/0x120 [ 783.861481][T17268] __kmalloc_noprof+0xfc/0x840 [ 783.861496][T17268] ? vhost_dev_set_owner+0x3b2/0xa30 [ 783.861520][T17268] vhost_dev_set_owner+0x3b2/0xa30 [ 783.861546][T17268] vhost_dev_ioctl+0x521/0xe70 [ 783.861578][T17268] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 783.861597][T17268] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 783.861618][T17268] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 783.861646][T17268] vhost_vsock_dev_ioctl+0x320/0xb60 [ 783.861665][T17268] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 783.861681][T17268] ? hook_file_ioctl_common+0x140/0x440 [ 783.861704][T17268] ? __fget_files+0x21f/0x3d0 [ 783.861721][T17268] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 783.861734][T17268] compat_ptr_ioctl+0x6e/0xa0 [ 783.861754][T17268] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 783.861774][T17268] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 783.861800][T17268] __do_fast_syscall_32+0x13a/0x8b0 [ 783.861830][T17268] do_fast_syscall_32+0x32/0x70 [ 783.861851][T17268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 783.861873][T17268] RIP: 0023:0xf709efec [ 783.861891][T17268] Code: Unable to access opcode bytes at 0xf709efc2. [ 783.861899][T17268] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 783.861914][T17268] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000af01 [ 783.861923][T17268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 783.861933][T17268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 783.861941][T17268] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 783.861951][T17268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 783.861971][T17268] [ 784.004476][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 784.260705][T17282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3401'. [ 784.276881][T17282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3401'. [ 784.346075][T17282] FAULT_INJECTION: forcing a failure. [ 784.346075][T17282] name failslab, interval 1, probability 0, space 0, times 0 [ 784.346157][T17282] CPU: 0 UID: 0 PID: 17282 Comm: syz.3.3401 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.346241][T17282] Tainted: [L]=SOFTLOCKUP [ 784.346248][T17282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 784.346259][T17282] Call Trace: [ 784.346266][T17282] [ 784.346273][T17282] dump_stack_lvl+0x100/0x190 [ 784.346303][T17282] should_fail_ex.cold+0x5/0xa [ 784.346324][T17282] should_failslab+0xc2/0x120 [ 784.346345][T17282] kmem_cache_alloc_noprof+0x92/0x6a0 [ 784.346362][T17282] ? rcu_read_lock_any_held+0x6a/0x90 [ 784.346380][T17282] ? do_getname+0x35/0x390 [ 784.346404][T17282] do_getname+0x35/0x390 [ 784.346425][T17282] do_sys_openat2+0xc7/0x1e0 [ 784.346446][T17282] ? __pfx_do_sys_openat2+0x10/0x10 [ 784.346464][T17282] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 784.346489][T17282] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 784.346508][T17282] __ia32_compat_sys_openat+0x12d/0x210 [ 784.346531][T17282] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 784.346560][T17282] do_int80_emulation+0x166/0x650 [ 784.346583][T17282] asm_int80_emulation+0x1a/0x20 [ 784.346598][T17282] RIP: 0023:0xf71d75ab [ 784.346612][T17282] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 784.346627][T17282] RSP: 002b:00000000f548d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 784.346643][T17282] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f548d490 [ 784.346653][T17282] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 784.346662][T17282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 784.346673][T17282] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 784.346682][T17282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 784.346701][T17282] [ 784.478650][T17293] [ 784.479421][T17293] ====================================================== [ 784.481959][T17293] WARNING: possible circular locking dependency detected [ 784.484306][T17293] syzkaller #0 Tainted: G L [ 784.486956][T17293] ------------------------------------------------------ [ 784.489889][T17293] syz.4.3405/17293 is trying to acquire lock: [ 784.492084][T17293] ffffffff9047e920 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x20/0x440 [ 784.495057][T17293] [ 784.495057][T17293] but task is already holding lock: [ 784.497469][T17293] ffff888026f50390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 784.500614][T17293] [ 784.500614][T17293] which lock already depends on the new lock. [ 784.500614][T17293] [ 784.504323][T17293] [ 784.504323][T17293] the existing dependency chain (in reverse order) is: [ 784.508623][T17293] [ 784.508623][T17293] -> #2 (&gi->lock){+.+.}-{4:4}: [ 784.510991][T17293] lock_acquire+0x1d1/0x380 [ 784.513454][T17293] __mutex_lock+0x1a4/0x1bd0 [ 784.515529][T17293] config_usb_cfg_link+0x57/0x3a0 [ 784.517577][T17293] configfs_symlink+0x540/0x11f0 [ 784.519781][T17293] vfs_symlink+0x178/0x4d0 [ 784.522126][T17293] filename_symlinkat+0x2a6/0x560 [ 784.524481][T17293] __ia32_sys_symlinkat+0x9b/0xe0 [ 784.526845][T17293] __do_fast_syscall_32+0x13a/0x8b0 [ 784.528748][T17293] do_fast_syscall_32+0x32/0x70 [ 784.530531][T17293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 784.532696][T17293] [ 784.532696][T17293] -> #1 (&sb->s_type->i_mutex_key#32){++++}-{4:4}: [ 784.535480][T17293] lock_acquire+0x1d1/0x380 [ 784.537151][T17293] down_write+0x8b/0x1f0 [ 784.538883][T17293] configfs_depend_item_unlocked+0xf3/0x6a0 [ 784.541352][T17293] usbg_make_tpg+0x251/0x610 [ 784.543253][T17293] target_fabric_make_tpg+0xab/0x8c0 [ 784.545651][T17293] configfs_mkdir+0x525/0xd40 [ 784.547817][T17293] vfs_mkdir+0x364/0x850 [ 784.549886][T17293] filename_mkdirat+0x48b/0x5e0 [ 784.552119][T17293] __ia32_sys_mkdir+0x6a/0x90 [ 784.554016][T17293] __do_fast_syscall_32+0x13a/0x8b0 [ 784.556174][T17293] do_fast_syscall_32+0x32/0x70 [ 784.558092][T17293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 784.561272][T17293] [ 784.561272][T17293] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 784.565314][T17293] check_prev_add+0xeb/0xe60 [ 784.567771][T17293] __lock_acquire+0x1492/0x1ec0 [ 784.569534][T17293] lock_acquire+0x1d1/0x380 [ 784.571232][T17293] __mutex_lock+0x1a4/0x1bd0 [ 784.572928][T17293] tcm_alloc+0x20/0x440 [ 784.574540][T17293] usb_get_function+0x5e/0xd0 [ 784.576153][T17293] config_usb_cfg_link+0x1ed/0x3a0 [ 784.578383][T17293] configfs_symlink+0x540/0x11f0 [ 784.580775][T17293] vfs_symlink+0x178/0x4d0 [ 784.582625][T17293] filename_symlinkat+0x2a6/0x560 [ 784.584856][T17293] __ia32_sys_symlinkat+0x9b/0xe0 [ 784.587135][T17293] __do_fast_syscall_32+0x13a/0x8b0 [ 784.589783][T17293] do_fast_syscall_32+0x32/0x70 [ 784.591806][T17293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 784.594369][T17293] [ 784.594369][T17293] other info that might help us debug this: [ 784.594369][T17293] [ 784.598642][T17293] Chain exists of: [ 784.598642][T17293] tpg_instances_lock --> &sb->s_type->i_mutex_key#32 --> &gi->lock [ 784.598642][T17293] [ 784.603812][T17293] Possible unsafe locking scenario: [ 784.603812][T17293] [ 784.606724][T17293] CPU0 CPU1 [ 784.609094][T17293] ---- ---- [ 784.611089][T17293] lock(&gi->lock); [ 784.612691][T17293] lock(&sb->s_type->i_mutex_key#32); [ 784.616075][T17293] lock(&gi->lock); [ 784.618326][T17293] lock(tpg_instances_lock); [ 784.619973][T17293] [ 784.619973][T17293] *** DEADLOCK *** [ 784.619973][T17293] [ 784.622297][T17293] locks held by syz.4.3405/17293: 3, last CPU#0: [ 784.624283][T17293] #0: ffff88802239e460 (sb_writers#21){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 784.627412][T17293] #1: ffff8880139a1900 (&sb->s_type->i_mutex_key#32){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 784.631188][T17293] #2: ffff888026f50390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 784.634680][T17293] [ 784.634680][T17293] stack backtrace: [ 784.636876][T17293] CPU: 0 UID: 0 PID: 17293 Comm: syz.4.3405 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.640769][T17293] Tainted: [L]=SOFTLOCKUP [ 784.642613][T17293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 784.646316][T17293] Call Trace: [ 784.647494][T17293] [ 784.648595][T17293] dump_stack_lvl+0x100/0x190 [ 784.650413][T17293] print_circular_bug.cold+0x178/0x1be [ 784.652605][T17293] check_noncircular+0x146/0x160 [ 784.654866][T17293] check_prev_add+0xeb/0xe60 [ 784.656903][T17293] __lock_acquire+0x1492/0x1ec0 [ 784.658587][T17293] lock_acquire+0x1d1/0x380 [ 784.660146][T17293] ? tcm_alloc+0x20/0x440 [ 784.661619][T17293] ? __pfx___might_resched+0x10/0x10 [ 784.663316][T17293] ? config_usb_cfg_link+0x57/0x3a0 [ 784.665109][T17293] __mutex_lock+0x1a4/0x1bd0 [ 784.666645][T17293] ? tcm_alloc+0x20/0x440 [ 784.668178][T17293] ? tcm_alloc+0x20/0x440 [ 784.669770][T17293] ? __mutex_lock+0x26c/0x1bd0 [ 784.671709][T17293] ? config_usb_cfg_link+0x57/0x3a0 [ 784.673827][T17293] ? __pfx___mutex_lock+0x10/0x10 [ 784.675705][T17293] ? __lock_acquire+0x4c5/0x1ec0 [ 784.677445][T17293] ? tcm_alloc+0x20/0x440 [ 784.678810][T17293] tcm_alloc+0x20/0x440 [ 784.680194][T17293] usb_get_function+0x5e/0xd0 [ 784.681747][T17293] config_usb_cfg_link+0x1ed/0x3a0 [ 784.683643][T17293] ? mntput_no_expire+0xe7/0x220 [ 784.685593][T17293] configfs_symlink+0x540/0x11f0 [ 784.687698][T17293] ? bpf_lsm_inode_permission+0x9/0x10 [ 784.689817][T17293] ? security_inode_permission+0xbf/0x250 [ 784.691823][T17293] ? __pfx_configfs_symlink+0x10/0x10 [ 784.693574][T17293] vfs_symlink+0x178/0x4d0 [ 784.695088][T17293] filename_symlinkat+0x2a6/0x560 [ 784.696755][T17293] ? __pfx_filename_symlinkat+0x10/0x10 [ 784.698600][T17293] ? strncpy_from_user+0x19d/0x2d0 [ 784.700918][T17293] ? do_getname+0x191/0x390 [ 784.702809][T17293] __ia32_sys_symlinkat+0x9b/0xe0 [ 784.704595][T17293] __do_fast_syscall_32+0x13a/0x8b0 [ 784.706376][T17293] do_fast_syscall_32+0x32/0x70 [ 784.708018][T17293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 784.710122][T17293] RIP: 0023:0xf708efec [ 784.711739][T17293] Code: Unable to access opcode bytes at 0xf708efc2. [ 784.714613][T17293] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 784.718261][T17293] RAX: ffffffffffffffda RBX: 0000000080000f00 RCX: 00000000ffffff9c [ 784.721950][T17293] RDX: 0000000080001000 RSI: 0000000000000000 RDI: 0000000000000000 [ 784.725407][T17293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 784.728830][T17293] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 784.732286][T17293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 784.735893][T17293] [ 785.035113][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 786.074519][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 787.114633][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 788.154633][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 789.194542][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 790.244474][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 791.274505][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 792.324541][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 793.364544][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 794.404559][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available