last executing test programs: 8.804871637s ago: executing program 0 (id=303): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r4 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @empty}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @empty}}]}, 0x1fffc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020) 7.773693337s ago: executing program 0 (id=304): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) 7.773279522s ago: executing program 0 (id=305): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x101000) syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0xc, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000000a0a050005000000000000000a0000090900010073797a31000000000900021e546181d086e5bfd71af5a87113d6395dc0d7c894db8eccfa79b255649c452f10b8b95b2971d4ff69935d66e71fdcd35253a2ab334da54dd3303ba1a690fa4b849fd8928c9dc54bcd06275aba12103ce59f23297939ee4acf435495c851371f560e87fea6f792a9bef56e82dc6f90"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 5.738044352s ago: executing program 2 (id=310): epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r0 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x5967, 0x80, 0x3, 0x10000051}, &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000000)) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f00000000c0)=0x25a3) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r1, 0x0, 0xfffffffffffffceb, 0x0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 5.377841933s ago: executing program 0 (id=312): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @empty}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @empty}}]}, 0x1fffc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) 4.73165593s ago: executing program 3 (id=316): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000380)={0x2, 0xffff, 0x10000, 0x9, 0x13, "a294e7003e805a9d1b78d681c441000700"}) write$UHID_INPUT(r0, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006) 4.719976844s ago: executing program 1 (id=317): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file0\x00') sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x60, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0xfffc}, @CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}]}]}, 0x60}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="1e02000004"], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000019c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000003a00)={{0x1, 0x1, 0x18, r5, {r9, r10}}, './file0\x00'}) 4.599961006s ago: executing program 2 (id=318): r0 = io_uring_setup(0x178e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0a18ff0000001f1d14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$CDROMREADAUDIO(r2, 0x5392, &(0x7f0000000000)={@msf={0x9, 0x0, 0x91}, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_create_ruleset(0x0, 0x0, 0x3) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.483144149s ago: executing program 3 (id=319): r0 = openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$DVD_WRITE_STRUCT(r0, 0x2284, &(0x7f0000000f80)=@manufact={0x4, 0x1, 0x800, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x18, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES64=r2], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r5}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x4, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4) fcntl$getown(0xffffffffffffffff, 0x9) 4.250560466s ago: executing program 2 (id=320): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) (fail_nth: 2) 2.434232989s ago: executing program 0 (id=321): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x101000) syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0xc, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000000a0a050005000000000000000a0000090900010073797a31000000000900021e546181d086e5bfd71af5a87113d6395dc0d7c894db8eccfa79b255649c452f10b8b95b2971d4ff69935d66e71fdcd35253a2ab334da54dd3303ba1a690fa4b849fd8928c9dc54bcd06275aba12103ce59f23297939ee4acf435495c851371f560e87fea6f792a9bef56e82dc6f90"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 2.433835156s ago: executing program 1 (id=322): r0 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROM_DISC_STATUS(r0, 0x5327) (fail_nth: 2) 2.433507659s ago: executing program 2 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)="4780", 0x2) add_key(&(0x7f0000000240)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0e010410000002"], 0x11) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000140)=0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xfffb, 0x2}, &(0x7f0000000200)=0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000001300)=@newchain={0x144c, 0x64, 0x0, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x6}, {0x6, 0x8}, {0x3, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x9}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7d}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_basic={{0xa}, {0x13c0, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x7}}, @TCA_BASIC_ACT={0x13b4, 0x3, [@m_connmark={0x108, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0x80000000, 0x1, 0x8e5b, 0x5}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x20000004, 0x7, 0x6}, 0xf}}]}, {0x9d, 0x6, "c111548bfc457775202551e312e33efc0c8247052c29d30143fe4e1a1d833ff72a46089f374a3ebab0e3860d1bbf98abca2e017db182822907e5ac33a20fb930ef369eca4dcd5221113ef6520eb2c81ed512b767aff4ea0f192b17865ad88a710393942333215151752dc108eaec8920a6db73f3ca8202c984afbbfec02e2bbacb9aad9e71d5c30042112fa121e52ba22bd83258c7d99f059d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x138, 0xa, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x80000001}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7fff, 0xa9, 0x20000000, 0x3, 0xffff}}]}, {0xca, 0x6, "810d1b2c06ce0d4534b6f24ac859d9d627752ab93b40a5d7fbf09cd61731570aee7ac61fea31cc84b23e57496b0883ee1e5ab13369dbb2acef4018ed0c21663fee45ffdacb97af3872a3a59b7c303fd7041899da04c7c14b2370211498d99337aff50709f60cd422c14989a03a32294fd40cefdde946001d9351e459f386f09f8888fa32e825e32c324b1bfe8aed2289883ac017d7a9390f75a313013e9b5058faba02d8436f406deb5cdb96b50496766055f04805e240827a8c0e2af012b788af2e88e19177"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x1050, 0x10, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x1000, 0x20000000, 0x9e, 0x6}, 0x9}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x44, 0x3, 0x0, 0x0, {{0xc}, {0x4}, {0x18, 0x6, "0d7a2f19f78250b19d437ca16c8d5f22ba8ffb93"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0xdc, 0x12, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xabd}]}, {0xa5, 0x6, "7611a9e57ad437fb0261b987e34f7f49ba25b61d13aada6ee49305882dc82efe05015de9c23abf43bc10198254e8bf71d473da873826b10babc4694b30b196d2db09a6a2c52051e555b9bf8e789228d80c6a1ee199de954f18336b542ec987fc1069d714d6c9f2253f6b954c6bd1802cf374d9da6be7462ddf547798bf7ff3d31bc387bae89284466bd4f01b4666912107366d3f056ba8c5085b3fbb33789bf3f1"}, {0xc, 0x7, {0x4828e6c5fb1c37f8}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x10001}, @TCA_RATE={0x6, 0x5, {0x32, 0xe5}}, @TCA_RATE={0x6, 0x5, {0x4, 0x80}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xe2, 0x1}}]}, 0x144c}}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/79) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x2, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) 2.398553683s ago: executing program 3 (id=324): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new trusted:syz 0'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 2.330567954s ago: executing program 1 (id=325): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000540)={0x0, 0xfa81, 0x0, 0x0, 0x28e, 0x0, r1}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x18c3, 0x2, 0x0, 0x330, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x1, 0x1, 0x20, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x100, 0x0, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r8, 0xc0107524, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r6, '\x00', {0x2, 0xb58, 0x0, 0x0}}, &(0x7f0000001fc0)) 2.329183296s ago: executing program 2 (id=326): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r2}, 0xc) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000000)='@+]\x00', &(0x7f00000000c0)="86", 0x1) tkill(r3, 0xb) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x8}}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x4004550c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003b79a30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103f00000000001d440500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.318741871s ago: executing program 3 (id=327): r0 = socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000140)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000008c0)=""/203, 0xcb}, {&(0x7f00000009c0)=""/236, 0xec}, {&(0x7f0000000ac0)=""/179, 0xb3}, {&(0x7f0000000b80)=""/176, 0xb0}], 0x4, &(0x7f0000000c80)=""/71, 0x47}, 0x2001) iopl(0x3) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) ioctl$RTC_UIE_ON(r3, 0x7003) write$uinput_user_dev(r3, &(0x7f0000000440)={'syz1\x00', {0x2, 0x909, 0x85a8, 0x9}, 0x11, [0x31b, 0x2, 0x6, 0x5, 0x6, 0x9d, 0x5, 0x100, 0x7fff, 0x7, 0xc, 0xe4c5, 0x3, 0x8, 0x0, 0x8, 0x8, 0x7, 0x1, 0x300000, 0x3ff, 0x5c3a, 0x3, 0x3, 0x3, 0x2a7d, 0x68300000, 0x7, 0x6, 0x9, 0x7, 0x9, 0x4, 0x0, 0xffff, 0x7, 0x0, 0x0, 0x9, 0xffffffff, 0x3, 0x1, 0x9, 0x2, 0xc3, 0x3ff, 0x6, 0x7ff, 0x7f, 0x1, 0xfc, 0x6, 0x0, 0x9, 0x8001, 0xffff, 0x8000, 0x101, 0x4, 0xfffffe00, 0x9, 0x2, 0x6, 0x3f], [0xc12, 0x50d, 0x6, 0xb09, 0x3, 0x3, 0x5, 0x3, 0x9, 0x200, 0xa0, 0x1, 0x5, 0x3, 0x9156, 0xad, 0x2d53ba06, 0x1, 0xffffe6f3, 0x0, 0x8, 0xff, 0x8, 0x6, 0x2, 0x7, 0x7, 0x3411, 0x8001, 0xf5e, 0x4998, 0x3, 0x40000000, 0xff, 0x8, 0x3, 0x7ff, 0x100, 0x8001, 0x9, 0xfffffffa, 0x3, 0x7, 0x6, 0x9, 0xfff, 0x80000001, 0x7, 0x1, 0x2, 0x5, 0x3ff, 0x9, 0x3, 0x2, 0xa, 0x1, 0x8000, 0x76c, 0x4, 0x2, 0x81, 0x7, 0x1], [0x8, 0x6, 0x6, 0x1, 0x6, 0x264, 0x46a4, 0x4, 0x10001, 0x401, 0x0, 0x1, 0x7, 0x0, 0x8, 0xd, 0x91cd, 0x9, 0x1ff, 0xffff3cc8, 0x9, 0x0, 0x3, 0x3, 0x7, 0x7, 0x80000000, 0x8, 0x19, 0x6, 0x9, 0x5, 0x82c, 0x6, 0x0, 0x1, 0x2, 0x3, 0x8, 0x0, 0x7, 0x0, 0x7fff, 0x1000, 0xfffffffd, 0x9, 0x401, 0x6, 0x0, 0x7, 0x0, 0x68, 0x8, 0x80000001, 0x9, 0x0, 0x9, 0x5, 0xfffffff4, 0x5, 0x0, 0x0, 0x6, 0x4], [0x1, 0x5d, 0xb, 0xff, 0xc, 0x0, 0x7fffffff, 0x0, 0x7ff, 0x4, 0x0, 0xf0, 0x2, 0xa48, 0xffffffff, 0x2, 0x10001, 0x10001, 0x0, 0x7, 0x4, 0x5, 0x6, 0x0, 0x3, 0xffffff80, 0xf, 0x5, 0x0, 0x8001, 0x85f, 0x10000, 0x100, 0x401, 0x7, 0xffffffff, 0x8, 0x5, 0xfffff3de, 0x13a, 0x6, 0x7, 0xffff, 0x6, 0xa8822ebd, 0x2, 0x3, 0x101, 0x85, 0x2800000, 0x200, 0xbc6e, 0xe36, 0x4, 0x2, 0xfff, 0x10000, 0x1, 0x0, 0x0, 0x8, 0x3, 0x9, 0x4]}, 0x45c) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) getitimer(0x2, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="140100002000010003000000fbdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000004680), 0x924924924924a21, 0x24040800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 2.148981353s ago: executing program 1 (id=328): r0 = io_uring_setup(0x178e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0a18ff0000001f1d14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$CDROMREADAUDIO(r2, 0x5392, &(0x7f0000000000)={@msf={0x9, 0x0, 0x91}, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_create_ruleset(0x0, 0x0, 0x3) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.754304981s ago: executing program 1 (id=329): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r4 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @empty}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @empty}}]}, 0x1fffc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020) 1.571165149s ago: executing program 3 (id=330): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @empty}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @empty}}]}, 0x1fffc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) 280.768345ms ago: executing program 2 (id=331): syz_usb_connect(0x0, 0x39, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='ncpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='md ', 0x3) openat(0xffffffffffffffff, 0x0, 0x420001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) read(r3, 0x0, 0x0) write(r2, &(0x7f0000000380)='4', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r4, &(0x7f00000005c0)='0', 0x1) 245.334255ms ago: executing program 1 (id=332): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800004, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) write$tun(r1, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x63) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x8) ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x0) ioctl$CDROMEJECT(r0, 0x5309) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x0) r2 = openat$cdrom(0xffffff9c, &(0x7f0000000040), 0x183480, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x1b) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000080)={0x8, 0x9, 0x9, 0x6}) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00002f9000/0x3000)=nil, 0x3000, &(0x7f00000000c0)='\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 110.092844ms ago: executing program 0 (id=333): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ed) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/dvb_as102/parameters/fw_upload\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)="30002068146dde5eacb7964592f935a2576a58ad95fe910054e2af7f702e7082629bbf6a10ce9e0a96e7e2153f5fd9526cd765dfbfa545a971f69571172501b537a6f1706f4946d9c033e7e49e4cfa439d0c2504881882f4b11d4cb3ae258f73d80d9cf7d6fd54dc946575558e80f4ea8f4d892e47c0115472ea8ac2bcca4550f9b3216e877f1c819a90", 0xfffffffffffffffb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vidtv/unbind\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x1, 0xffffffff990f34a9, 0xfffffffffffffffc, 0x0, 0x8000000000000001, 0x4}, 0x0, &(0x7f0000000280)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) write(r1, &(0x7f0000000300)='vidtv.0', 0x7) mkdir(&(0x7f0000000040)='./sys/module/dvb_as102/parameters/fw_upload\x00', 0xb9) r3 = epoll_create1(0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fc"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc0106442, &(0x7f0000000180)) modify_ldt$write2(0x11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x10) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000000, 0x80010, r2, 0xec776000) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="746ce90073ac0000000000b8800000", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 0s ago: executing program 3 (id=334): socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x36, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8], 0x74}, 0x1, 0x0, 0x0, 0x10040803}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYRESOCT=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4008080) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="d82c69d0c972f81d98637dc36ddc131b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000033d3850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000200850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PTP_EXTTS_REQUEST2(r5, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x5}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x9, 0x7ffffffffffffffd, 0xffffffffffffffff, 0x3ffffd, 0x400000000006, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x6, 0x6, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x4, 0x4, 0x5, 0x0, 0x8, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x10008000, 0x2, 0x84, 0x3, 0x4, '\x00', 0x4, 0x100000000000002}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:39533' (ED25519) to the list of known hosts. [ 59.900571][ T5725] cgroup: Unknown subsys name 'net' [ 60.038911][ T5725] cgroup: Unknown subsys name 'cpuset' [ 60.043079][ T5725] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.005353][ T5725] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.078764][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.081936][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.303662][ T5751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.308975][ T5751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.311317][ T5753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.314454][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.317640][ T5751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.321069][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.324443][ T5751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.327500][ T5755] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.328467][ T5751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.331596][ T5755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.333519][ T5760] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.335586][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.335853][ T5760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.336114][ T5760] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.336555][ T5760] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.338325][ T5755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.339034][ T5755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.339519][ T5751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.340806][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.342486][ T5760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.418300][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.433577][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.444531][ T5744] bridge_slave_0: entered allmulticast mode [ 74.459993][ T5744] bridge_slave_0: entered promiscuous mode [ 74.488168][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.502892][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.507422][ T5744] bridge_slave_1: entered allmulticast mode [ 74.527370][ T5744] bridge_slave_1: entered promiscuous mode [ 74.587545][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.611603][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.615093][ T5745] bridge_slave_0: entered allmulticast mode [ 74.619477][ T5745] bridge_slave_0: entered promiscuous mode [ 74.700641][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.707481][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.711711][ T5758] bridge_slave_0: entered allmulticast mode [ 74.717334][ T5758] bridge_slave_0: entered promiscuous mode [ 74.722266][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.727993][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.731955][ T5745] bridge_slave_1: entered allmulticast mode [ 74.738945][ T5745] bridge_slave_1: entered promiscuous mode [ 74.757197][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.810403][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.818847][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.834716][ T5758] bridge_slave_1: entered allmulticast mode [ 74.843452][ T5758] bridge_slave_1: entered promiscuous mode [ 74.946635][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.982861][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.004818][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.032952][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.049806][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.063247][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.067255][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.074977][ T5748] bridge_slave_0: entered allmulticast mode [ 75.097200][ T5748] bridge_slave_0: entered promiscuous mode [ 75.179419][ T5744] team0: Port device team_slave_0 added [ 75.182197][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.185715][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.188781][ T5748] bridge_slave_1: entered allmulticast mode [ 75.192802][ T5748] bridge_slave_1: entered promiscuous mode [ 75.198493][ T5758] team0: Port device team_slave_0 added [ 75.205237][ T5758] team0: Port device team_slave_1 added [ 75.220073][ T5744] team0: Port device team_slave_1 added [ 75.261996][ T5745] team0: Port device team_slave_0 added [ 75.299903][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.336909][ T5745] team0: Port device team_slave_1 added [ 75.351331][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.354275][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.364611][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.372088][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.376978][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.379728][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.392841][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.398082][ T5760] Bluetooth: hci2: command tx timeout [ 75.400998][ T5753] Bluetooth: hci0: command tx timeout [ 75.409715][ T5761] Bluetooth: hci1: command tx timeout [ 75.410780][ T5762] Bluetooth: hci3: command tx timeout [ 75.423504][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.427457][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.442291][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.451656][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.454926][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.466670][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.471636][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.474876][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.496549][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.543277][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.546569][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.558161][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.565950][ T5748] team0: Port device team_slave_0 added [ 75.574443][ T5748] team0: Port device team_slave_1 added [ 75.594851][ T5758] hsr_slave_0: entered promiscuous mode [ 75.599207][ T5758] hsr_slave_1: entered promiscuous mode [ 75.652403][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.655333][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.665632][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.689617][ T5744] hsr_slave_0: entered promiscuous mode [ 75.693045][ T5744] hsr_slave_1: entered promiscuous mode [ 75.696383][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 75.699069][ T5744] Cannot create hsr debugfs directory [ 75.714655][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.717411][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.725953][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.746028][ T5745] hsr_slave_0: entered promiscuous mode [ 75.748725][ T5745] hsr_slave_1: entered promiscuous mode [ 75.750999][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 75.753268][ T5745] Cannot create hsr debugfs directory [ 75.878889][ T5748] hsr_slave_0: entered promiscuous mode [ 75.882076][ T5748] hsr_slave_1: entered promiscuous mode [ 75.884688][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 75.887502][ T5748] Cannot create hsr debugfs directory [ 76.170926][ T5758] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.183406][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.190366][ T5758] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.199694][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.203480][ T5758] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.210708][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.214458][ T5758] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.222365][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.292862][ T5744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.299016][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.302361][ T5744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.306983][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.311899][ T5744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.318895][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.322737][ T5744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.328982][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.419094][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.425218][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.432505][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.438374][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.441738][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.447565][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.450552][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.457268][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.530307][ T5748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.537358][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.543905][ T5748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.550416][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.563165][ T5748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.569476][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.577180][ T5748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.583802][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.592628][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.632532][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.648225][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.655122][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.658380][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.680324][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.683190][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.710480][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.724513][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.726813][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.740003][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.743014][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.770510][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.819970][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.836749][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.839017][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.848937][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.860667][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.862979][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.892101][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.922038][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.925290][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.931906][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.935216][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.303584][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.361238][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.382764][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.396230][ T5748] veth0_vlan: entered promiscuous mode [ 77.418475][ T5748] veth1_vlan: entered promiscuous mode [ 77.437369][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.478170][ T5762] Bluetooth: hci1: command tx timeout [ 77.479312][ T5758] veth0_vlan: entered promiscuous mode [ 77.486338][ T5762] Bluetooth: hci3: command tx timeout [ 77.486852][ T5761] Bluetooth: hci2: command tx timeout [ 77.489099][ T5760] Bluetooth: hci0: command tx timeout [ 77.514159][ T5748] veth0_macvtap: entered promiscuous mode [ 77.529963][ T5748] veth1_macvtap: entered promiscuous mode [ 77.535736][ T5758] veth1_vlan: entered promiscuous mode [ 77.557689][ T5744] veth0_vlan: entered promiscuous mode [ 77.578326][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.588036][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.595058][ T5744] veth1_vlan: entered promiscuous mode [ 77.601035][ T5745] veth0_vlan: entered promiscuous mode [ 77.647221][ T5745] veth1_vlan: entered promiscuous mode [ 77.665673][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.670703][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.685038][ T5758] veth0_macvtap: entered promiscuous mode [ 77.706506][ T5758] veth1_macvtap: entered promiscuous mode [ 77.715843][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.734058][ T5744] veth0_macvtap: entered promiscuous mode [ 77.750070][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.752383][ T5744] veth1_macvtap: entered promiscuous mode [ 77.753480][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.762857][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.780027][ T5745] veth0_macvtap: entered promiscuous mode [ 77.787045][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.811541][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.812135][ T5745] veth1_macvtap: entered promiscuous mode [ 77.814791][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.827777][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.848229][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.859312][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.875982][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.886389][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.893736][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.895208][ T5748] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.922497][ T5748] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 77.938310][ T5748] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 77.950240][ T5748] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 77.961570][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.973396][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.988505][ T5748] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 78.017742][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.025543][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.065266][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.070544][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.087802][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.092853][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.119074][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.122438][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.137994][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.141485][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.235708][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.240635][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.334963][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.342874][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.348660][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.366713][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.371653][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.375316][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.379563][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.517152][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.520773][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.534179][ T5910] comedi comedi0: Minor 3 could not be opened [ 78.591998][ T5910] binder: 5909:5910 ioctl c0306201 800001c0 returned -14 [ 78.601281][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.663679][ T5914] comedi comedi3: comedi_config --init_data is deprecated [ 78.669381][ T5914] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 79.513450][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 79.556040][ T5760] Bluetooth: hci0: command tx timeout [ 79.556130][ T5762] Bluetooth: hci2: command tx timeout [ 79.557798][ T5760] Bluetooth: hci3: command tx timeout [ 79.557816][ T5760] Bluetooth: hci1: command tx timeout [ 80.097639][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 80.183388][ T5935] MINIX-fs: blocksize too small for device [ 80.903239][ T5908] Set syz1 is full, maxelem 65536 reached [ 81.524622][ T5949] orangefs_mount: mount request failed with -4 [ 81.655566][ T5761] Bluetooth: hci1: command tx timeout [ 81.655633][ T5762] Bluetooth: hci3: command tx timeout [ 81.657604][ T5761] Bluetooth: hci0: command tx timeout [ 81.661692][ T5760] Bluetooth: hci2: command tx timeout [ 81.886386][ T63] cfg80211: failed to load regulatory.db [ 82.112871][ T5930] Set syz1 is full, maxelem 65536 reached [ 82.135606][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 82.243157][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 82.489575][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 82.906821][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 82.979986][ T5982] 9p: Could not find request transport: unx [ 84.483910][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804eac2400: rx timeout, send abort [ 84.486702][ T5998] Set syz1 is full, maxelem 65536 reached [ 84.965317][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c3eb800: rx timeout, send abort [ 84.988815][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804eac2400: abort rx timeout. Force session deactivation [ 85.471632][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c3eb800: abort rx timeout. Force session deactivation [ 87.203847][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 87.584949][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 87.589385][ T6027] bridge_slave_1: left allmulticast mode [ 87.591736][ T6027] bridge_slave_1: left promiscuous mode [ 87.595304][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.604746][ T6027] bridge_slave_0: left allmulticast mode [ 87.607605][ T6027] bridge_slave_0: left promiscuous mode [ 87.610329][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.169107][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 88.344618][ T6045] Zero length message leads to an empty skb [ 90.256145][ T6040] Set syz1 is full, maxelem 65536 reached [ 90.260404][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 90.261129][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.38'. [ 90.409621][ T6086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.44'. [ 90.576212][ T42] audit: type=1400 audit(1787538966.448:2): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6085 comm="syz.2.44" name="p" offset=43 [ 90.633886][ T6092] program syz.0.45 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.636904][ T6092] ata1.00: invalid command format 31 [ 90.869658][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 90.898504][ T6096] comedi comedi0: mpc624: I/O base address not correctly aligned [ 91.365642][ T57] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 91.387381][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 91.495336][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'. [ 91.548440][ T57] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.560672][ T57] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.568267][ T57] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.570057][ T6109] 9pnet_fd: p9_fd_create_tcp (6109): problem connecting socket to 127.0.0.1 [ 91.574160][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.588733][ T57] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 91.592061][ T57] usb 7-1: invalid MIDI out EP 0 [ 91.679677][ T57] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 91.692160][ T6116] udevd[6116]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.789527][ T6103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.793748][ T6103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.803315][ T57] usb 7-1: USB disconnect, device number 2 [ 92.347132][ T6131] comedi comedi0: mpc624: I/O base address not correctly aligned [ 92.562624][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 92.734900][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 92.742338][ T6142] capability: warning: `syz.1.59' uses 32-bit capabilities (legacy support in use) [ 92.925925][ T6150] ehci-pci 0000:00:1d.7: remove, state 1 [ 92.930724][ T6150] usb usb1: USB disconnect, device number 1 [ 92.933589][ T6150] usb 1-1: USB disconnect, device number 2 [ 93.320183][ T6150] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 93.915497][ T5894] usb 2-1: new full-speed USB device number 2 using uhci_hcd [ 94.071919][ T5894] usb 2-1: not running at top speed; connect to a high speed hub [ 94.074496][ T5894] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 94.095509][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 94.098593][ T5894] usb 2-1: Product: QEMU USB Tablet [ 94.101630][ T5894] usb 2-1: Manufacturer: QEMU [ 94.103096][ T5894] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 94.126548][ T5894] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0002/input/input5 [ 94.193256][ T5894] hid-generic 0003:0627:0001.0002: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 94.205673][ T6151] usb 2-1: USB disconnect, device number 2 [ 94.243733][ T6156] fido_id[6156]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/report_descriptor': No such file or directory [ 94.384773][ T6151] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 94.390735][ T6151] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 94.397339][ T6151] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 94.415549][ T6151] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 94.419571][ T6151] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 94.424202][ T6151] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 94.427516][ T6151] usb usb1: Product: EHCI Host Controller [ 94.429340][ T6151] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 94.431586][ T6151] usb usb1: SerialNumber: 0000:00:1d.7 [ 94.442703][ T6151] hub 1-0:1.0: USB hub found [ 94.445858][ T6151] hub 1-0:1.0: 6 ports detected [ 94.487499][ T6151] hub 2-0:1.0: USB hub found [ 94.490205][ T6151] hub 2-0:1.0: 2 ports detected [ 94.528804][ T6151] hub 3-0:1.0: USB hub found [ 94.530823][ T6151] hub 3-0:1.0: 2 ports detected [ 94.568456][ T6151] hub 4-0:1.0: USB hub found [ 94.570282][ T6151] hub 4-0:1.0: 2 ports detected [ 94.735534][ T5853] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 94.834048][ T6162] FAULT_INJECTION: forcing a failure. [ 94.834048][ T6162] name failslab, interval 1, probability 0, space 0, times 1 [ 94.840664][ T6162] CPU: 3 UID: 0 PID: 6162 Comm: syz.1.63 Not tainted syzkaller #0 PREEMPT(full) [ 94.840688][ T6162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.840698][ T6162] Call Trace: [ 94.840704][ T6162] [ 94.840710][ T6162] dump_stack_lvl+0x100/0x190 [ 94.840739][ T6162] should_fail_ex.cold+0x5/0xa [ 94.840756][ T6162] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 94.840782][ T6162] should_failslab+0xc2/0x120 [ 94.840799][ T6162] kmem_cache_alloc_noprof+0x91/0x6a0 [ 94.840828][ T6162] ? skb_clone+0x190/0x400 [ 94.840849][ T6162] skb_clone+0x190/0x400 [ 94.840868][ T6162] netlink_deliver_tap+0xaed/0xcc0 [ 94.840896][ T6162] netlink_dump+0x631/0xd00 [ 94.840922][ T6162] ? __pfx_netlink_dump+0x10/0x10 [ 94.840943][ T6162] ? kasan_quarantine_put+0x104/0x240 [ 94.841042][ T6162] ? kfree_skbmem+0x19f/0x210 [ 94.841083][ T6162] netlink_recvmsg+0x7dc/0xa90 [ 94.841110][ T6162] ? __pfx_netlink_recvmsg+0x10/0x10 [ 94.841136][ T6162] ? aa_sock_msg_perm.isra.0+0x103/0x1c0 [ 94.841160][ T6162] ? __pfx_netlink_recvmsg+0x10/0x10 [ 94.841184][ T6162] sock_recvmsg+0x1d5/0x220 [ 94.841208][ T6162] ____sys_recvmsg+0x21e/0x670 [ 94.841234][ T6162] ? __pfx_____sys_recvmsg+0x10/0x10 [ 94.841265][ T6162] ? __lock_acquire+0x4c5/0x1ec0 [ 94.841290][ T6162] ___sys_recvmsg+0x16a/0x1a0 [ 94.841316][ T6162] ? __pfx____sys_recvmsg+0x10/0x10 [ 94.841357][ T6162] do_recvmmsg+0x54d/0x740 [ 94.841384][ T6162] ? __pfx_do_recvmmsg+0x10/0x10 [ 94.841411][ T6162] ? find_held_lock+0x2b/0x80 [ 94.841436][ T6162] ? ksys_write+0x190/0x250 [ 94.841456][ T6162] ? ksys_write+0x190/0x250 [ 94.841484][ T6162] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 94.841509][ T6162] __sys_recvmmsg+0x21f/0x270 [ 94.841529][ T6162] ? __pfx___sys_recvmmsg+0x10/0x10 [ 94.841548][ T6162] ? ksys_write+0x1ac/0x250 [ 94.841570][ T6162] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 94.841593][ T6162] ? __do_fast_syscall_32+0xb3/0x8b0 [ 94.841612][ T6162] ? lockdep_hardirqs_on+0x7d/0x110 [ 94.841629][ T6162] __do_fast_syscall_32+0x13a/0x8b0 [ 94.841648][ T6162] ? lockdep_hardirqs_on+0x7d/0x110 [ 94.841667][ T6162] do_fast_syscall_32+0x32/0x70 [ 94.841688][ T6162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.841710][ T6162] RIP: 0023:0xf709efec [ 94.841734][ T6162] Code: Unable to access opcode bytes at 0xf709efc2. [ 94.841742][ T6162] RSP: 002b:00000000f546c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 94.841759][ T6162] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800021c0 [ 94.841768][ T6162] RDX: 000000000000005b RSI: 0000000000000040 RDI: 0000000000000000 [ 94.841778][ T6162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.841786][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.841796][ T6162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.841818][ T6162] [ 95.196819][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802470bc00: rx timeout, send abort [ 95.351391][ T6168] tipc: Started in network mode [ 95.354604][ T6168] tipc: Node identity 7ea7d8bc768c, cluster identity 4711 [ 95.358652][ T6168] tipc: Enabled bearer , priority 0 [ 95.553773][ T6155] tipc: Disabling bearer [ 95.698508][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802580e800: rx timeout, send abort [ 95.704034][ T5853] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 95.729957][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802470bc00: abort rx timeout. Force session deactivation [ 95.746010][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 95.749545][ T5853] usb 1-1: Product: QEMU USB Tablet [ 95.751992][ T5853] usb 1-1: Manufacturer: QEMU [ 95.754332][ T5853] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 95.970608][ T6174] Set syz1 is full, maxelem 65536 reached [ 96.061746][ T5853] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0003/input/input6 [ 96.143071][ T5853] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 96.203551][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802580e800: abort rx timeout. Force session deactivation [ 96.204957][ T6176] comedi comedi0: mpc624: I/O base address not correctly aligned [ 98.067735][ T6194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73'. [ 98.138087][ T6192] FAULT_INJECTION: forcing a failure. [ 98.138087][ T6192] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.143308][ T6192] CPU: 3 UID: 0 PID: 6192 Comm: syz.3.71 Not tainted syzkaller #0 PREEMPT(full) [ 98.143325][ T6192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.143332][ T6192] Call Trace: [ 98.143336][ T6192] [ 98.143341][ T6192] dump_stack_lvl+0x100/0x190 [ 98.143379][ T6192] should_fail_ex.cold+0x5/0xa [ 98.143394][ T6192] _copy_to_user+0x32/0xd0 [ 98.143411][ T6192] simple_read_from_buffer+0xcb/0x170 [ 98.143430][ T6192] proc_fail_nth_read+0x1af/0x230 [ 98.143447][ T6192] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.143464][ T6192] ? rw_verify_area+0xce/0x6d0 [ 98.143479][ T6192] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.143495][ T6192] vfs_read+0x1e4/0xb40 [ 98.143513][ T6192] ? __pfx_vfs_read+0x10/0x10 [ 98.143527][ T6192] ? find_held_lock+0x2b/0x80 [ 98.143547][ T6192] ? __fget_files+0x215/0x3d0 [ 98.143567][ T6192] ? __fget_files+0x21f/0x3d0 [ 98.143588][ T6192] ksys_read+0x12a/0x250 [ 98.143603][ T6192] ? __pfx_ksys_read+0x10/0x10 [ 98.143623][ T6192] do_int80_emulation+0x166/0x650 [ 98.143641][ T6192] asm_int80_emulation+0x1a/0x20 [ 98.143681][ T6192] RIP: 0023:0xf71374eb [ 98.143692][ T6192] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 98.143703][ T6192] RSP: 002b:00000000f53cc4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 98.143715][ T6192] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f53cc5d0 [ 98.143722][ T6192] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 98.143729][ T6192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.143735][ T6192] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 98.143742][ T6192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.143757][ T6192] [ 98.376641][ T42] audit: type=1326 audit(1787538974.328:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.1.77" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 98.498041][ T6204] cifs: Unknown parameter './sys/bus/platform/drivers/usbip-vudc/bind' [ 98.649910][ T6212] comedi comedi0: mpc624: I/O base address not correctly aligned [ 98.935737][ T78] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 99.085559][ T78] usb 8-1: Using ep0 maxpacket: 8 [ 99.089995][ T78] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.096444][ T78] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 99.100087][ T78] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 99.103957][ T78] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 99.108410][ T78] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 99.114213][ T78] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.166813][ T78] usbtmc 8-1:16.0: bulk endpoints not found [ 101.045831][ T6242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.86'. [ 101.229069][ T6244] cifs: Unknown parameter './sys/bus/platform/drivers/usbip-vudc/bind' [ 101.565293][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 101.725523][ T50] usb 8-1: USB disconnect, device number 2 [ 101.809386][ T6259] FAULT_INJECTION: forcing a failure. [ 101.809386][ T6259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.813689][ T6259] CPU: 3 UID: 0 PID: 6259 Comm: syz.3.91 Not tainted syzkaller #0 PREEMPT(full) [ 101.813703][ T6259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.813710][ T6259] Call Trace: [ 101.813714][ T6259] [ 101.813718][ T6259] dump_stack_lvl+0x100/0x190 [ 101.813737][ T6259] should_fail_ex.cold+0x5/0xa [ 101.813751][ T6259] _copy_from_user+0x2e/0xd0 [ 101.813764][ T6259] cdrom_ioctl+0x8ec/0x3880 [ 101.813778][ T6259] ? __pfx_cdrom_ioctl+0x10/0x10 [ 101.813788][ T6259] ? rcu_is_watching+0x13/0xc0 [ 101.813805][ T6259] ? trace_rpm_return_int+0x78/0x220 [ 101.813822][ T6259] ? __pfx_rpm_resume+0x10/0x10 [ 101.813832][ T6259] ? do_raw_spin_lock+0x128/0x260 [ 101.813848][ T6259] ? find_held_lock+0x2b/0x80 [ 101.813866][ T6259] ? mark_held_locks+0x40/0x70 [ 101.813879][ T6259] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 101.813889][ T6259] ? lockdep_hardirqs_on+0x7d/0x110 [ 101.813901][ T6259] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 101.813917][ T6259] ? __pm_runtime_resume+0xc3/0x170 [ 101.813934][ T6259] sr_block_ioctl+0x1ae/0x250 [ 101.813950][ T6259] ? __pfx_sr_block_ioctl+0x10/0x10 [ 101.813967][ T6259] blkdev_compat_ptr_ioctl+0x9f/0xe0 [ 101.813982][ T6259] ? __pfx_blkdev_compat_ptr_ioctl+0x10/0x10 [ 101.813995][ T6259] compat_blkdev_ioctl+0x682/0x7b0 [ 101.814011][ T6259] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 101.814028][ T6259] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 101.814042][ T6259] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 101.814059][ T6259] __do_fast_syscall_32+0x13a/0x8b0 [ 101.814089][ T6259] ? lockdep_hardirqs_on+0x7d/0x110 [ 101.814103][ T6259] do_fast_syscall_32+0x32/0x70 [ 101.814115][ T6259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.814130][ T6259] RIP: 0023:0xf6ffefec [ 101.814143][ T6259] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 101.814148][ T6259] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 101.814159][ T6259] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005310 [ 101.814166][ T6259] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.814172][ T6259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.814177][ T6259] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 101.814183][ T6259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.814197][ T6259] [ 101.979420][ T6262] comedi comedi0: mpc624: I/O base address not correctly aligned [ 102.361437][ T6274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.96'. [ 102.591661][ T42] audit: type=1326 audit(1787538978.548:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.2.97" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x0 [ 102.695727][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 102.983770][ T6276] Set syz1 is full, maxelem 65536 reached [ 103.335574][ T5853] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 103.465563][ T5853] usb 5-1: device descriptor read/64, error -71 [ 103.705499][ T5853] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 103.835567][ T5853] usb 5-1: device descriptor read/64, error -71 [ 103.946971][ T5853] usb usb5-port1: attempt power cycle [ 104.295561][ T5853] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 104.317429][ T5853] usb 5-1: device descriptor read/8, error -71 [ 104.575469][ T5853] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 104.606270][ T5853] usb 5-1: device descriptor read/8, error -71 [ 104.685212][ T6308] jffs2: notice: (6308) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 104.719204][ T5853] usb usb5-port1: unable to enumerate USB device [ 104.840985][ T6314] comedi comedi0: mpc624: I/O base address not correctly aligned [ 105.767531][ T42] audit: type=1326 audit(1787538981.688:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.3.109" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x0 [ 105.891341][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 106.395809][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 107.608292][ T6346] Trying to write to read-only block-device nullb0 [ 107.788002][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 107.824367][ T6351] comedi comedi0: mpc624: I/O base address not correctly aligned [ 108.365655][ T6328] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 108.366022][ T5762] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.372237][ T6328] Bluetooth: hci0: Opcode 0x0406 failed: -110 [ 108.453365][ T6354] Set syz1 is full, maxelem 65536 reached [ 108.530789][ T6362] openvswitch: netlink: Multiple metadata blocks provided [ 108.997241][ T42] audit: type=1326 audit(1787538984.958:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.1.122" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 109.060438][ T6328] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 109.110569][ T6328] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.115846][ T6328] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.591734][ T6328] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.607817][ T6328] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.610447][ T6328] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.616845][ T6328] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.624162][ T6328] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.626371][ T6328] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.639043][ T6328] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.946074][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 110.234417][ T6372] Set syz1 is full, maxelem 65536 reached [ 110.435496][ T5762] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.155767][ T5762] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.635513][ T5762] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.635621][ T5760] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.515691][ T5760] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.235530][ T5760] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.715467][ T5760] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.725550][ T5762] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.961212][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 113.978527][ T5762] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 114.416423][ T6410] binder: 6409:6410 ioctl 89e2 800001c0 returned -22 [ 114.793574][ T42] audit: type=1326 audit(1787538990.748:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.0.135" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x0 [ 115.158255][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'. [ 115.185226][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'. [ 115.330915][ T5762] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.814242][ T5762] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.279814][ T6447] comedi comedi0: mpc624: I/O base address not correctly aligned [ 117.290193][ T6458] warning: `syz.1.147' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.394009][ T42] audit: type=1326 audit(1787538993.348:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.2.151" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x0 [ 117.707188][ T6480] comedi comedi0: mpc624: I/O base address not correctly aligned [ 117.795800][ T5853] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 117.996880][ T5853] usb 8-1: device descriptor read/64, error -71 [ 118.246542][ T5853] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 118.352649][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 118.405597][ T5853] usb 8-1: device descriptor read/64, error -71 [ 118.420835][ T5762] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 118.525560][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 118.526402][ T5853] usb usb8-port1: attempt power cycle [ 118.676517][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 118.679492][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.684458][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 118.690730][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 118.694911][ T10] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.699491][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.704962][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.717667][ T10] usbtmc 7-1:16.0: bulk endpoints not found [ 118.790617][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 118.875585][ T5853] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 118.896263][ T5853] usb 8-1: device descriptor read/8, error -71 [ 119.136582][ T5853] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 119.156967][ T5853] usb 8-1: device descriptor read/8, error -71 [ 119.266817][ T5853] usb usb8-port1: unable to enumerate USB device [ 123.761386][ T10] usb 7-1: USB disconnect, device number 3 [ 123.814344][ T42] audit: type=1326 audit(1787538999.768:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.165" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x0 [ 123.990330][ T6526] FAULT_INJECTION: forcing a failure. [ 123.990330][ T6526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.995561][ T6526] CPU: 1 UID: 0 PID: 6526 Comm: syz.3.172 Not tainted syzkaller #0 PREEMPT(full) [ 123.995583][ T6526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.995592][ T6526] Call Trace: [ 123.995598][ T6526] [ 123.995605][ T6526] dump_stack_lvl+0x100/0x190 [ 123.995632][ T6526] should_fail_ex.cold+0x5/0xa [ 123.995653][ T6526] _copy_from_user+0x2e/0xd0 [ 123.995673][ T6526] __sys_bpf+0x2f5/0x4a30 [ 123.995709][ T6526] ? __pfx___sys_bpf+0x10/0x10 [ 123.995732][ T6526] ? find_held_lock+0x2b/0x80 [ 123.995756][ T6526] ? get_pid_task+0xfc/0x250 [ 123.995780][ T6526] ? get_pid_task+0xfc/0x250 [ 123.995805][ T6526] ? proc_fail_nth_write+0x9f/0x220 [ 123.995825][ T6526] ? find_held_lock+0x2b/0x80 [ 123.995853][ T6526] ? rcu_read_lock_any_held+0x6a/0x90 [ 123.995877][ T6526] ? vfs_write+0x15d/0x1050 [ 123.995899][ T6526] ? __pfx___cant_migrate+0x10/0x10 [ 123.995942][ T6526] ? __ia32_sys_bpf+0xcc/0x170 [ 123.995965][ T6526] __ia32_sys_bpf+0xcc/0x170 [ 123.995987][ T6526] ? __seccomp_permit_syscall+0x1e7/0x2d0 [ 123.996015][ T6526] __do_fast_syscall_32+0x13a/0x8b0 [ 123.996036][ T6526] ? lockdep_hardirqs_on+0x7d/0x110 [ 123.996056][ T6526] do_fast_syscall_32+0x32/0x70 [ 123.996075][ T6526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.996096][ T6526] RIP: 0023:0xf6ffefec [ 123.996116][ T6526] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 123.996123][ T6526] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 123.996141][ T6526] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000140 [ 123.996152][ T6526] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.996161][ T6526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.996170][ T6526] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 123.996180][ T6526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.996200][ T6526] [ 124.214158][ T6535] binder: 6534:6535 ioctl c0306201 800006c0 returned -14 [ 124.273027][ T6540] binder: 6534:6540 ioctl 4068aea3 80000280 returned -22 [ 124.413241][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 124.425562][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.176'. [ 124.546132][ T5853] hid-generic 0000:0000:0000.0004: unknown main item tag 0x7 [ 124.549183][ T5853] hid-generic 0000:0000:0000.0004: ignoring exceeding usage max [ 124.552815][ T5853] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 124.556667][ T5853] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 124.559687][ T5853] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 124.562171][ T5853] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 124.565203][ T5853] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 124.568649][ T5853] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 124.572839][ T5853] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 124.575984][ T5853] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 124.578921][ T5853] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 124.594609][ T5853] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 124.796010][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 124.961321][ T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 124.966488][ T24] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 124.985952][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.007467][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 125.045031][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 125.062416][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 125.087639][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.125826][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 125.141709][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 125.151986][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 125.187637][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.193181][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 125.219019][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 125.226770][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 125.252483][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.256440][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 125.279341][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 125.301503][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 125.310108][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.319301][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 125.330435][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 125.339316][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 125.356938][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.362434][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 125.370126][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 125.385828][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 125.396892][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.405612][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 125.414228][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 125.424676][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 125.432023][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.439121][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 125.440035][ T6549] trusted_key: encrypted_key: insufficient parameters specified [ 125.444764][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 125.444792][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 125.448213][ T24] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 125.478001][ T24] usb 6-1: Product: syz [ 125.480817][ T24] usb 6-1: Manufacturer: syz [ 125.483468][ T24] usb 6-1: SerialNumber: syz [ 125.499182][ T24] usb 6-1: config 0 descriptor?? [ 125.504030][ T6538] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.523382][ T24] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 125.995974][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 127.234910][ T6551] Set syz1 is full, maxelem 65536 reached [ 127.439768][ T5850] usb 6-1: USB disconnect, device number 2 [ 127.480398][ T5850] yurex 6-1:0.0: USB YUREX #0 now disconnected qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 128.030615][ T6543] fido_id[6543]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 128.841704][ T6569] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 128.844560][ T6569] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 128.867204][ T6569] vhci_hcd vhci_hcd.0: Device attached [ 129.163573][ T41] usb 42-1: SetAddress Request (2) to port 0 [ 129.166649][ T41] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 129.195089][ T6264] block nbd2: Receive control failed (result -32) [ 129.207476][ T6573] vhci_hcd: connection reset by peer [ 129.211001][ T5824] vhci_hcd vhci_hcd.2: stop threads [ 129.212879][ T5824] vhci_hcd vhci_hcd.2: release socket [ 129.216081][ T5824] vhci_hcd vhci_hcd.2: disconnect device [ 132.517817][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.520511][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.074897][ T6596] process 'syz.1.191' launched './file0' with NULL argv: empty string added [ 134.230219][ T5894] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 134.380901][ T41] usb 42-1: device descriptor read/8, error -110 [ 134.430724][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026024400: rx timeout, send abort [ 134.930854][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880292c3400: rx timeout, send abort [ 134.934520][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026024400: abort rx timeout. Force session deactivation [ 135.436605][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880292c3400: abort rx timeout. Force session deactivation [ 135.486637][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 136.139570][ T41] usb usb42-port1: attempt power cycle [ 136.485512][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 136.547995][ T5762] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 136.639577][ T5894] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 136.664992][ T5894] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 136.825503][ T5894] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 136.830193][ T5894] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 136.838386][ T5894] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 136.847707][ T5894] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.859892][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.893441][ T5894] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 136.931257][ T9] usb 7-1: USB disconnect, device number 4 [ 136.988346][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 137.306503][ T41] usb usb42-port1: unable to enumerate USB device [ 137.764886][ T6624] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 137.859610][ T6629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.197'. [ 138.235700][ T6646] block nbd2: shutting down sockets [ 138.700905][ T6650] trusted_key: encrypted_key: master key parameter 'trust' is invalid [ 138.832253][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 138.851789][ T6654] netlink: Invalid conntrack helper [ 138.855581][ T6654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.871315][ T6654] tipc: Started in network mode [ 138.875297][ T6654] tipc: Node identity cee89678e33e, cluster identity 4711 [ 138.886843][ T6654] tipc: Enabled bearer , priority 0 [ 138.897342][ T6654] syzkaller0: entered promiscuous mode [ 138.899669][ T6654] syzkaller0: entered allmulticast mode [ 138.918569][ T6654] tipc: Resetting bearer [ 138.927859][ T5445] veth1_vlan: left promiscuous mode [ 138.987810][ T6653] tipc: Resetting bearer [ 138.995766][ T6653] tipc: Disabling bearer [ 139.034559][ T6658] ehci-pci 0000:00:1d.7: remove, state 1 [ 139.038638][ T6658] usb usb1: USB disconnect, device number 1 [ 139.041220][ T6658] usb 1-1: USB disconnect, device number 2 [ 139.191204][ T6658] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 139.203052][ T6663] uhci_hcd 0000:00:1d.0: remove, state 84 [ 139.336163][ T6663] usb usb2: USB disconnect, device number 1 [ 139.405890][ T5894] usb usb2-port1: attempt power cycle [ 139.498589][ T6663] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 144.006742][ T6685] trusted_key: encrypted_key: keylen parameter is missing [ 144.181548][ T6695] Config c/1 of g1 needs at least one function. [ 144.191688][ T6695] udc dummy_udc.0: failed to start g1: -22 [ 144.199209][ T6695] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 144.266422][ T6695] UDC core: g1: couldn't find an available UDC or it's busy [ 144.928065][ T6691] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 145.000282][ T6712] jffs2: notice: (6712) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 145.545555][ T5894] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 145.725964][ T5894] usb 8-1: Using ep0 maxpacket: 8 [ 145.729140][ T5894] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.789489][ T6722] comedi comedi0: mpc624: I/O base address not correctly aligned [ 145.905606][ T5894] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 146.721642][ T5894] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 146.725943][ T5894] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 146.745817][ T5894] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 146.750180][ T5894] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.762305][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.772707][ T5894] usbtmc 8-1:16.0: probe with driver usbtmc failed with error -22 [ 147.333517][ T42] audit: type=1326 audit(1787539023.288:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7fc00000 [ 147.411398][ T6731] netlink: 14902 bytes leftover after parsing attributes in process `syz.1.225'. [ 147.418086][ T6731] netlink: 14902 bytes leftover after parsing attributes in process `syz.1.225'. [ 147.428613][ T6731] netlink: 14902 bytes leftover after parsing attributes in process `syz.1.225'. [ 147.440654][ T6731] netlink: 14902 bytes leftover after parsing attributes in process `syz.1.225'. [ 147.448553][ T6731] netlink: 14902 bytes leftover after parsing attributes in process `syz.1.225'. [ 147.458155][ T6731] netlink: 14902 bytes leftover after parsing attributes in process `syz.1.225'. [ 147.469224][ T6731] netlink: 14902 bytes leftover after parsing attributes in process `syz.1.225'. [ 147.480669][ T6731] netlink: 14902 bytes leftover after parsing attributes in process `syz.1.225'. [ 147.488218][ T6731] netlink: 14902 bytes leftover after parsing attributes in process `syz.1.225'. [ 147.510692][ T6731] netlink: 14902 bytes leftover after parsing attributes in process `syz.1.225'. [ 148.321669][ T6741] FAULT_INJECTION: forcing a failure. [ 148.321669][ T6741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.328054][ T6741] CPU: 1 UID: 0 PID: 6741 Comm: syz.2.229 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.328082][ T6741] Tainted: [L]=SOFTLOCKUP [ 148.328088][ T6741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.328098][ T6741] Call Trace: [ 148.328105][ T6741] [ 148.328127][ T6741] dump_stack_lvl+0x100/0x190 [ 148.328156][ T6741] should_fail_ex.cold+0x5/0xa [ 148.328177][ T6741] _copy_to_user+0x32/0xd0 [ 148.328198][ T6741] simple_read_from_buffer+0xcb/0x170 [ 148.328224][ T6741] proc_fail_nth_read+0x1af/0x230 [ 148.328249][ T6741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.328274][ T6741] ? rw_verify_area+0xce/0x6d0 [ 148.328294][ T6741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.328317][ T6741] vfs_read+0x1e4/0xb40 [ 148.328343][ T6741] ? __pfx_vfs_read+0x10/0x10 [ 148.328364][ T6741] ? find_held_lock+0x2b/0x80 [ 148.328391][ T6741] ? __fget_files+0x215/0x3d0 [ 148.328419][ T6741] ? __fget_files+0x21f/0x3d0 [ 148.328449][ T6741] ksys_read+0x12a/0x250 [ 148.328472][ T6741] ? __pfx_ksys_read+0x10/0x10 [ 148.328498][ T6741] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 148.328519][ T6741] ? syscall_user_dispatch+0x76/0x130 [ 148.328547][ T6741] do_int80_emulation+0x166/0x650 [ 148.328571][ T6741] asm_int80_emulation+0x1a/0x20 [ 148.328589][ T6741] RIP: 0023:0xf71b74eb [ 148.328603][ T6741] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 148.328619][ T6741] RSP: 002b:00000000f546d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 148.328637][ T6741] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f546d5d0 [ 148.328649][ T6741] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 148.328659][ T6741] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.328669][ T6741] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 148.328679][ T6741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.328702][ T6741] [ 148.439647][ T5750] usb 8-1: USB disconnect, device number 7 [ 148.505138][ T6746] qrtr: Invalid version 0 [ 148.907024][ T5750] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 148.979627][ T6762] syz.1.237 uses obsolete (PF_INET,SOCK_PACKET) [ 149.056264][ T5750] usb 8-1: device descriptor read/64, error -71 [ 149.306095][ T5750] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 149.456010][ T5750] usb 8-1: device descriptor read/64, error -71 [ 149.568960][ T5750] usb usb8-port1: attempt power cycle [ 149.705527][ T5850] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 149.905543][ T5750] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 149.932051][ T5750] usb 8-1: device descriptor read/8, error -71 [ 150.175629][ T5750] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 150.209386][ T5750] usb 8-1: device descriptor read/8, error -71 [ 150.315738][ T5750] usb usb8-port1: unable to enumerate USB device [ 150.456212][ T5850] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 150.461575][ T5850] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.465310][ T5850] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.471613][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.474562][ T5850] usb 7-1: Product: syz [ 150.476409][ T5850] usb 7-1: Manufacturer: syz [ 150.478282][ T5850] usb 7-1: SerialNumber: syz [ 153.241853][ T5850] usb 7-1: USB disconnect, device number 5 [ 153.486038][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 153.665567][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 153.692895][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.698985][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 153.703539][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 153.707675][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.710905][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.714925][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.881292][ T6788] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 153.883554][ T6788] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 153.886387][ T6788] vhci_hcd vhci_hcd.0: Device attached [ 153.896179][ T6798] comedi comedi0: mpc624: I/O base address not correctly aligned [ 153.925228][ T10] usb 8-1: usb_control_msg returned -32 [ 153.925257][ T10] usbtmc 8-1:16.0: can't read capabilities [ 154.005875][ T6799] __nla_validate_parse: 57 callbacks suppressed [ 154.005934][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 154.271208][ T10] usb 8-1: USB disconnect, device number 12 [ 154.469700][ T5852] usb 38-1: SetAddress Request (2) to port 0 [ 154.469771][ T5852] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 154.605632][ T6796] vhci_hcd: connection reset by peer [ 154.619199][ T12] vhci_hcd vhci_hcd.0: stop threads [ 154.622324][ T12] vhci_hcd vhci_hcd.0: release socket [ 154.625227][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 155.198375][ T50] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 155.278644][ T6812] cifs: Unknown parameter './sys/bus/platform/drivers/usbip-vudc/bind' [ 155.374912][ T50] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 155.380360][ T50] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.385965][ T50] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 155.424316][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.427983][ T50] usb 7-1: Product: syz [ 155.429739][ T50] usb 7-1: Manufacturer: syz [ 155.431778][ T50] usb 7-1: SerialNumber: syz [ 155.698333][ T10] usb 7-1: USB disconnect, device number 6 [ 155.747364][ T6816] FAULT_INJECTION: forcing a failure. [ 155.747364][ T6816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.755024][ T6816] CPU: 3 UID: 0 PID: 6816 Comm: syz.1.251 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.755052][ T6816] Tainted: [L]=SOFTLOCKUP [ 155.755058][ T6816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.755067][ T6816] Call Trace: [ 155.755073][ T6816] [ 155.755080][ T6816] dump_stack_lvl+0x100/0x190 [ 155.755173][ T6816] should_fail_ex.cold+0x5/0xa [ 155.755194][ T6816] _copy_from_user+0x2e/0xd0 [ 155.755239][ T6816] bpf_prog_load+0x1490/0x2a80 [ 155.755262][ T6816] ? __lock_acquire+0x4c5/0x1ec0 [ 155.755285][ T6816] ? __pfx_bpf_prog_load+0x10/0x10 [ 155.755324][ T6816] __sys_bpf+0x1f46/0x4a30 [ 155.755355][ T6816] ? __pfx___sys_bpf+0x10/0x10 [ 155.755417][ T6816] ? find_held_lock+0x2b/0x80 [ 155.755442][ T6816] ? get_pid_task+0xfc/0x250 [ 155.755467][ T6816] ? get_pid_task+0xfc/0x250 [ 155.755505][ T6816] ? proc_fail_nth_write+0x9f/0x220 [ 155.755529][ T6816] ? find_held_lock+0x2b/0x80 [ 155.755560][ T6816] ? rcu_read_lock_any_held+0x6a/0x90 [ 155.755587][ T6816] ? find_held_lock+0x2b/0x80 [ 155.755612][ T6816] ? ksys_write+0x190/0x250 [ 155.755635][ T6816] ? ksys_write+0x190/0x250 [ 155.755674][ T6816] ? fput+0x7c/0x100 [ 155.755693][ T6816] ? __ia32_sys_bpf+0xcc/0x170 [ 155.755717][ T6816] __ia32_sys_bpf+0xcc/0x170 [ 155.755743][ T6816] ? __do_fast_syscall_32+0xb3/0x8b0 [ 155.755792][ T6816] __do_fast_syscall_32+0x13a/0x8b0 [ 155.755812][ T6816] ? lockdep_hardirqs_on+0x7d/0x110 [ 155.755833][ T6816] do_fast_syscall_32+0x32/0x70 [ 155.755855][ T6816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.755876][ T6816] RIP: 0023:0xf709efec [ 155.755899][ T6816] Code: Unable to access opcode bytes at 0xf709efc2. [ 155.755907][ T6816] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 155.755924][ T6816] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 155.755935][ T6816] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.755945][ T6816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.755954][ T6816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.755964][ T6816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.755986][ T6816] [ 156.118159][ T6820] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 156.124629][ T6820] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 156.136075][ T6820] overlayfs: failed to set uuid (51/file0, err=-13); falling back to uuid=null. [ 156.514431][ T6830] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 156.555555][ T5850] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 156.679733][ T6840] cifs: Unknown parameter './sys/bus/platform/drivers/usbip-vudc/bind' [ 156.708897][ T5850] usb 7-1: Using ep0 maxpacket: 8 [ 156.712095][ T5850] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.718502][ T5850] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 156.735504][ T5850] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 156.768836][ T5850] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.776059][ T5850] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.825566][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.040731][ T5850] usb 7-1: usb_control_msg returned -32 [ 157.043131][ T5850] usbtmc 7-1:16.0: can't read capabilities [ 157.053315][ T5850] usb 7-1: USB disconnect, device number 7 [ 157.315595][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 157.486452][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.491767][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.499908][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 157.504548][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.511809][ T6844] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 157.521383][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.722847][ T10] usb 6-1: USB disconnect, device number 3 [ 158.292990][ T5762] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 158.325563][ T5853] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 158.486547][ T5853] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 158.492101][ T5853] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.496934][ T5853] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 158.506031][ T5853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.510119][ T5853] usb 7-1: Product: syz [ 158.511984][ T5853] usb 7-1: Manufacturer: syz [ 158.514121][ T5853] usb 7-1: SerialNumber: syz [ 158.727958][ T5853] usb 7-1: USB disconnect, device number 8 [ 158.968037][ T6865] FAULT_INJECTION: forcing a failure. [ 158.968037][ T6865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.973808][ T6865] CPU: 2 UID: 0 PID: 6865 Comm: syz.1.267 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.973839][ T6865] Tainted: [L]=SOFTLOCKUP [ 158.973845][ T6865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.973856][ T6865] Call Trace: [ 158.973864][ T6865] [ 158.973872][ T6865] dump_stack_lvl+0x100/0x190 [ 158.973905][ T6865] should_fail_ex.cold+0x5/0xa [ 158.973926][ T6865] _copy_from_iter+0x1f4/0x1690 [ 158.973952][ T6865] ? __asan_memset+0x23/0x50 [ 158.973978][ T6865] ? __pfx__copy_from_iter+0x10/0x10 [ 158.973998][ T6865] ? __pfx___alloc_skb+0x10/0x10 [ 158.974025][ T6865] netlink_sendmsg+0x808/0xda0 [ 158.974055][ T6865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.974085][ T6865] ? apparmor_socket_sendmsg+0x15b/0x270 [ 158.974111][ T6865] ____sys_sendmsg+0xa4d/0xbe0 [ 158.974135][ T6865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.974162][ T6865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.974194][ T6865] ___sys_sendmsg+0x190/0x1e0 [ 158.974220][ T6865] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.974251][ T6865] ? find_held_lock+0x2b/0x80 [ 158.974292][ T6865] __sys_sendmsg+0x160/0x210 [ 158.974313][ T6865] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.974338][ T6865] ? __pfx_ksys_write+0x10/0x10 [ 158.974367][ T6865] __do_fast_syscall_32+0x13a/0x8b0 [ 158.974390][ T6865] ? lockdep_hardirqs_on+0x7d/0x110 [ 158.974412][ T6865] do_fast_syscall_32+0x32/0x70 [ 158.974432][ T6865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.974455][ T6865] RIP: 0023:0xf709efec [ 158.974481][ T6865] Code: Unable to access opcode bytes at 0xf709efc2. [ 158.974489][ T6865] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 158.974508][ T6865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 158.974519][ T6865] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.974530][ T6865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.974539][ T6865] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 158.974550][ T6865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.974572][ T6865] [ 159.146045][ T6848] Set syz1 is full, maxelem 65536 reached [ 159.343555][ T6879] cifs: Unknown parameter './sys/bus/platform/drivers/usbip-vudc/bind' [ 159.565798][ T5852] usb 38-1: device descriptor read/8, error -110 [ 159.594753][ T6899] [U]  [ 159.977245][ T5852] usb usb38-port1: attempt power cycle [ 160.185617][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 160.357646][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 160.365521][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.373528][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 160.385106][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.389105][ T10] usb 5-1: Product: syz [ 160.391102][ T10] usb 5-1: Manufacturer: syz [ 160.393313][ T10] usb 5-1: SerialNumber: syz [ 160.536591][ T5852] usb usb38-port1: unable to enumerate USB device [ 160.769902][ T5852] usb 5-1: USB disconnect, device number 6 [ 161.348100][ T5850] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 161.505567][ T5850] usb 6-1: Invalid ep0 maxpacket: 64 [ 161.635572][ T5850] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 161.785550][ T5850] usb 6-1: Invalid ep0 maxpacket: 64 [ 161.788248][ T5850] usb usb6-port1: attempt power cycle [ 161.902188][ T6928] binder: 6927:6928 ioctl c0306201 80004a40 returned -22 [ 161.924933][ T6930] binder: 6929:6930 ioctl c0306201 0 returned -14 [ 161.990874][ T6930] binder: 6929:6930 ioctl c0306201 800004c0 returned -14 [ 161.995498][ T6930] binder: 6929:6930 ioctl c0306201 80000480 returned -14 [ 162.125588][ T5850] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 162.156450][ T6928] syz.3.286 (6928): drop_caches: 2 [ 162.157185][ T5850] usb 6-1: Invalid ep0 maxpacket: 64 [ 162.259922][ T6938] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 162.262214][ T6938] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 162.265296][ T6938] vhci_hcd vhci_hcd.0: Device attached [ 162.288223][ T5850] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 162.317709][ T5850] usb 6-1: Invalid ep0 maxpacket: 64 [ 162.320853][ T5850] usb usb6-port1: unable to enumerate USB device [ 162.623302][ T6948] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 162.625448][ T6948] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 162.639051][ T41] usb 38-1: SetAddress Request (6) to port 0 [ 162.643449][ T6948] vhci_hcd vhci_hcd.0: Device attached [ 162.645781][ T41] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 162.659315][ C2] vcan0: j1939_tp_rxtimer: 0xffff88806047e400: rx timeout, send abort [ 162.885424][ T6264] block nbd2: Receive control failed (result -32) [ 162.891434][ T6939] vhci_hcd: connection reset by peer [ 162.927002][ T12] vhci_hcd vhci_hcd.0: stop threads [ 162.943089][ T12] vhci_hcd vhci_hcd.0: release socket [ 162.954789][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 162.955535][ T5750] usb 44-1: SetAddress Request (2) to port 0 [ 162.959947][ T5750] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 163.134210][ T6949] vhci_hcd: connection reset by peer [ 163.138302][ T6575] block nbd3: Receive control failed (result -32) [ 163.148912][ T12] vhci_hcd vhci_hcd.3: stop threads [ 163.154288][ T12] vhci_hcd vhci_hcd.3: release socket [ 163.158031][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 163.161237][ C2] vcan0: j1939_tp_rxtimer: 0xffff88806047f800: rx timeout, send abort [ 163.165544][ C2] vcan0: j1939_tp_rxtimer: 0xffff88806047e400: abort rx timeout. Force session deactivation [ 163.661453][ C2] vcan0: j1939_tp_rxtimer: 0xffff88806047f800: abort rx timeout. Force session deactivation [ 164.256789][ T6965] comedi comedi0: mpc624: I/O base address not correctly aligned [ 164.410308][ T6967] FAULT_INJECTION: forcing a failure. [ 164.410308][ T6967] name failslab, interval 1, probability 0, space 0, times 0 [ 164.414173][ T6967] CPU: 3 UID: 0 PID: 6967 Comm: syz.1.295 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.414191][ T6967] Tainted: [L]=SOFTLOCKUP [ 164.414195][ T6967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.414201][ T6967] Call Trace: [ 164.414205][ T6967] [ 164.414210][ T6967] dump_stack_lvl+0x100/0x190 [ 164.414229][ T6967] should_fail_ex.cold+0x5/0xa [ 164.414246][ T6967] should_failslab+0xc2/0x120 [ 164.414257][ T6967] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 164.414275][ T6967] ? __d_alloc+0x35/0xa50 [ 164.414287][ T6967] __d_alloc+0x35/0xa50 [ 164.414298][ T6967] d_alloc_pseudo+0x1c/0xc0 [ 164.414312][ T6967] alloc_file_pseudo+0x118/0x290 [ 164.414324][ T6967] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 164.414336][ T6967] ? _raw_spin_unlock+0x28/0x50 [ 164.414354][ T6967] ? alloc_fd+0x471/0x7a0 [ 164.414370][ T6967] __anon_inode_getfile+0xe8/0x280 [ 164.414386][ T6967] __anon_inode_getfd+0x5c/0xe0 [ 164.414400][ T6967] map_create+0x19e1/0x30d0 [ 164.414420][ T6967] ? __pfx_map_create+0x10/0x10 [ 164.414436][ T6967] ? __might_fault+0xc5/0x140 [ 164.414456][ T6967] __sys_bpf+0x12a0/0x4a30 [ 164.414475][ T6967] ? __pfx___sys_bpf+0x10/0x10 [ 164.414491][ T6967] ? find_held_lock+0x2b/0x80 [ 164.414508][ T6967] ? get_pid_task+0xfc/0x250 [ 164.414525][ T6967] ? get_pid_task+0xfc/0x250 [ 164.414544][ T6967] ? proc_fail_nth_write+0x9f/0x220 [ 164.414559][ T6967] ? find_held_lock+0x2b/0x80 [ 164.414578][ T6967] ? rcu_read_lock_any_held+0x6a/0x90 [ 164.414595][ T6967] ? find_held_lock+0x2b/0x80 [ 164.414611][ T6967] ? ksys_write+0x190/0x250 [ 164.414625][ T6967] ? ksys_write+0x190/0x250 [ 164.414648][ T6967] ? fput+0x7c/0x100 [ 164.414658][ T6967] ? __ia32_sys_bpf+0xcc/0x170 [ 164.414674][ T6967] __ia32_sys_bpf+0xcc/0x170 [ 164.414690][ T6967] ? __do_fast_syscall_32+0xb3/0x8b0 [ 164.414705][ T6967] __do_fast_syscall_32+0x13a/0x8b0 [ 164.414717][ T6967] ? lockdep_hardirqs_on+0x7d/0x110 [ 164.414730][ T6967] do_fast_syscall_32+0x32/0x70 [ 164.414743][ T6967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.414757][ T6967] RIP: 0023:0xf709efec [ 164.414770][ T6967] Code: Unable to access opcode bytes at 0xf709efc2. [ 164.414775][ T6967] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 164.414785][ T6967] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040 [ 164.414792][ T6967] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.414798][ T6967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.414804][ T6967] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 164.414810][ T6967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.414822][ T6967] [ 164.534571][ T6969] Config c/1 of g1 needs at least one function. [ 164.536718][ T6969] udc dummy_udc.0: failed to start g1: -22 [ 164.538614][ T6969] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 164.544888][ T6969] UDC core: g1: couldn't find an available UDC or it's busy [ 165.825228][ T63] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 166.414134][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 166.431860][ T6985] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 166.435068][ T6985] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 166.441670][ T6985] vhci_hcd vhci_hcd.0: Device attached [ 166.491017][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 166.746835][ T6575] block nbd4: Receive control failed (result -32) [ 166.746916][ T63] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 166.761839][ T6999] vhci_hcd: connection closed [ 166.765246][ T12] vhci_hcd vhci_hcd.3: stop threads [ 166.770416][ T12] vhci_hcd vhci_hcd.3: release socket [ 166.774915][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 166.781647][ T63] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 166.787865][ T63] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 166.791626][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.799977][ T6983] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.804413][ T63] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.017284][ T63] usb 7-1: USB disconnect, device number 9 [ 167.105696][ T6932] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 167.276512][ T6932] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.285859][ T6932] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.293860][ T6932] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.300825][ T6932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.310417][ T7007] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 167.343653][ T6932] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.700059][ T6932] usb 6-1: USB disconnect, device number 8 [ 168.067721][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 168.583792][ T7020] Set syz1 is full, maxelem 65536 reached [ 168.586554][ T5750] usb 44-1: device descriptor read/8, error -110 [ 168.589413][ T41] usb 38-1: device descriptor read/8, error -110 [ 169.196903][ T5762] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 169.374746][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 169.441222][ T41] usb usb38-port1: attempt power cycle [ 169.444446][ T5750] usb usb44-port1: attempt power cycle [ 169.838395][ T7052] [U]  [ 169.839734][ T7052] [U] K{ [ 169.840995][ T7052] [U] T 1ŠFFˊ`GJǘGO/MC [ 169.843817][ T7052] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 169.850160][ T7052] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 169.854324][ T7052] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 169.872258][ T7052] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 169.885718][ T7052] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 169.890618][ T7052] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 169.894679][ T7052] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 169.940158][ T7052] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 169.948149][ T7052] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 169.954125][ T7052] [U] 22Ʃ۩X?0;3U [ 169.957862][ T7052] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 169.966969][ T7052] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 169.970095][ T7052] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 169.973383][ T7052] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 169.976121][ T7052] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 169.980201][ T7052] [U] EC [ 169.981521][ T7052] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 170.005889][ T7050] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 170.049392][ T7058] jffs2: notice: (7058) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 170.261559][ T7065] FAULT_INJECTION: forcing a failure. [ 170.261559][ T7065] name failslab, interval 1, probability 0, space 0, times 0 [ 170.267426][ T7065] CPU: 2 UID: 0 PID: 7065 Comm: syz.2.320 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.267472][ T7065] Tainted: [L]=SOFTLOCKUP [ 170.267479][ T7065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.267489][ T7065] Call Trace: [ 170.267495][ T7065] [ 170.267502][ T7065] dump_stack_lvl+0x100/0x190 [ 170.267525][ T7065] should_fail_ex.cold+0x5/0xa [ 170.267540][ T7065] should_failslab+0xc2/0x120 [ 170.267552][ T7065] __kmalloc_noprof+0xfc/0x820 [ 170.267569][ T7065] ? __pfx_dynamic_dname+0x10/0x10 [ 170.267591][ T7065] ? tomoyo_encode2+0xfb/0x3c0 [ 170.267614][ T7065] tomoyo_encode2+0xfb/0x3c0 [ 170.267632][ T7065] tomoyo_encode+0x29/0x50 [ 170.267643][ T7065] tomoyo_realpath_from_path+0x18c/0x690 [ 170.267659][ T7065] tomoyo_path_number_perm+0x23c/0x580 [ 170.267677][ T7065] ? tomoyo_path_number_perm+0x22e/0x580 [ 170.267695][ T7065] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 170.267713][ T7065] ? get_pid_task+0x106/0x250 [ 170.267744][ T7065] ? find_held_lock+0x2b/0x80 [ 170.267762][ T7065] ? __fget_files+0x215/0x3d0 [ 170.267778][ T7065] ? hook_file_ioctl_common+0x140/0x440 [ 170.267800][ T7065] ? __fget_files+0x215/0x3d0 [ 170.267818][ T7065] ? __fget_files+0x21f/0x3d0 [ 170.267836][ T7065] security_file_ioctl_compat+0xd3/0x230 [ 170.267856][ T7065] __ia32_compat_sys_ioctl+0xc2/0x360 [ 170.267873][ T7065] __do_fast_syscall_32+0x13a/0x8b0 [ 170.267888][ T7065] ? lockdep_hardirqs_on+0x7d/0x110 [ 170.267902][ T7065] do_fast_syscall_32+0x32/0x70 [ 170.267915][ T7065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.267931][ T7065] RIP: 0023:0xf707efec [ 170.267947][ T7065] Code: Unable to access opcode bytes at 0xf707efc2. [ 170.267952][ T7065] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 170.267964][ T7065] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 170.267971][ T7065] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.267977][ T7065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 170.267984][ T7065] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 170.267990][ T7065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.268003][ T7065] [ 170.269262][ T7065] ERROR: Out of memory at tomoyo_realpath_from_path. [ 170.303561][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.317'. [ 170.507182][ T41] usb usb38-port1: unable to enumerate USB device [ 170.510151][ T5750] usb usb44-port1: unable to enumerate USB device [ 172.091683][ T7067] FAULT_INJECTION: forcing a failure. [ 172.091683][ T7067] name failslab, interval 1, probability 0, space 0, times 0 [ 172.109032][ T7067] CPU: 0 UID: 0 PID: 7067 Comm: syz.1.322 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.109079][ T7067] Tainted: [L]=SOFTLOCKUP [ 172.109087][ T7067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.109098][ T7067] Call Trace: [ 172.109105][ T7067] [ 172.109112][ T7067] dump_stack_lvl+0x100/0x190 [ 172.109149][ T7067] should_fail_ex.cold+0x5/0xa [ 172.109174][ T7067] should_failslab+0xc2/0x120 [ 172.109195][ T7067] __kmalloc_noprof+0xfc/0x820 [ 172.109223][ T7067] ? tomoyo_encode2+0xfb/0x3c0 [ 172.109247][ T7067] tomoyo_encode2+0xfb/0x3c0 [ 172.109269][ T7067] tomoyo_encode+0x29/0x50 [ 172.109287][ T7067] tomoyo_realpath_from_path+0x18c/0x690 [ 172.109311][ T7067] tomoyo_path_number_perm+0x23c/0x580 [ 172.109337][ T7067] ? tomoyo_path_number_perm+0x22e/0x580 [ 172.109363][ T7067] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 172.109405][ T7067] ? get_pid_task+0x106/0x250 [ 172.109455][ T7067] ? find_held_lock+0x2b/0x80 [ 172.109485][ T7067] ? __fget_files+0x215/0x3d0 [ 172.109510][ T7067] ? hook_file_ioctl_common+0x140/0x440 [ 172.109535][ T7067] ? __fget_files+0x215/0x3d0 [ 172.109564][ T7067] ? __fget_files+0x21f/0x3d0 [ 172.109592][ T7067] security_file_ioctl_compat+0xd3/0x230 [ 172.109627][ T7067] __ia32_compat_sys_ioctl+0xc2/0x360 [ 172.109654][ T7067] __do_fast_syscall_32+0x13a/0x8b0 [ 172.109676][ T7067] ? lockdep_hardirqs_on+0x7d/0x110 [ 172.109697][ T7067] do_fast_syscall_32+0x32/0x70 [ 172.109718][ T7067] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.109742][ T7067] RIP: 0023:0xf709efec [ 172.109765][ T7067] Code: Unable to access opcode bytes at 0xf709efc2. [ 172.109774][ T7067] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 172.109793][ T7067] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005327 [ 172.109804][ T7067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.109814][ T7067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.109825][ T7067] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 172.109836][ T7067] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.109859][ T7067] [ 172.111124][ T7067] ERROR: Out of memory at tomoyo_realpath_from_path. [ 172.123584][ T5762] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 172.339820][ T7083] netlink: 256 bytes leftover after parsing attributes in process `syz.3.327'. [ 172.656373][ T57] libceph: connect (1)[c::]:6789 error -101 [ 172.663342][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 172.727219][ T7086] ceph: No mds server is up or the cluster is laggy [ 172.846602][ T7080] trusted_key: syz.3.327 sent an empty control message without MSG_MORE. [ 173.092912][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 173.739386][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 174.357577][ T7109] jffs2: notice: (7109) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 174.412263][ T7109] overlayfs: upper fs does not support tmpfile. [ 174.446365][ T7109] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 174.618403][ T7114] ------------[ cut here ]------------ [ 174.620706][ T7114] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 174.620720][ T7114] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x944/0x1bc0, CPU#3: syz.3.334/7114 [ 174.627677][ T7114] Modules linked in: [ 174.630658][ T7114] CPU: 3 UID: 0 PID: 7114 Comm: syz.3.334 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.635939][ T7114] Tainted: [L]=SOFTLOCKUP [ 174.637922][ T7114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.642807][ T7114] RIP: 0010:__mutex_lock+0x94b/0x1bc0 [ 174.645195][ T7114] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 b4 10 00 00 44 8b 05 b8 11 7a 05 45 85 c0 75 13 48 8d 3d 9c 16 7d 05 48 c7 c6 80 d3 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 174.653824][ T7114] RSP: 0000:ffffc90025f2fae0 EFLAGS: 00010246 [ 174.656466][ T7114] RAX: 0000000000000003 RBX: ffff888029f2d128 RCX: 1ffffffff22898cc [ 174.659785][ T7114] RDX: 0000000000000000 RSI: ffffffff8befd380 RDI: ffffffff9147cb50 [ 174.663352][ T7114] RBP: ffffc90025f2fc50 R08: 0000000000000000 R09: 0000000000000000 [ 174.666912][ T7114] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 174.670341][ T7114] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 174.673879][ T7114] FS: 0000000000000000(0000) GS:ffff888096c84000(0063) knlGS:0000000057892480 [ 174.678261][ T7114] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 174.681161][ T7114] CR2: 00000000f544aff4 CR3: 00000000577a8000 CR4: 0000000000352ef0 [ 174.684575][ T7114] Call Trace: [ 174.686321][ T7114] [ 174.688166][ T7114] ? trace_contention_end+0x126/0x160 [ 174.691180][ T7114] ? vidtv_stop_feed+0x75/0x2a0 [ 174.693626][ T7114] ? __mutex_lock+0x26c/0x1bc0 [ 174.695909][ T7114] ? dmx_ts_feed_stop_filtering+0x55/0x1d0 [ 174.698490][ T7114] ? __pfx___mutex_lock+0x10/0x10 [ 174.700833][ T7114] ? __pfx___mutex_lock+0x10/0x10 [ 174.703019][ T7114] ? __mutex_lock+0x26c/0x1bc0 [ 174.705043][ T7114] ? __pfx_vidtv_stop_feed+0x10/0x10 [ 174.707592][ T7114] ? vidtv_stop_feed+0x75/0x2a0 [ 174.709667][ T7114] vidtv_stop_feed+0x75/0x2a0 [ 174.712098][ T7114] dmx_ts_feed_stop_filtering+0xe9/0x1d0 [ 174.714714][ T7114] dvb_dmxdev_feed_stop.isra.0+0x162/0x270 [ 174.717396][ T7114] dvb_dmxdev_filter_stop+0x1d0/0x390 [ 174.719712][ T7114] dvb_demux_release+0x92/0x560 [ 174.721852][ T7114] ? evm_file_release+0x133/0x210 [ 174.724082][ T7114] ? __pfx_dvb_demux_release+0x10/0x10 [ 174.726646][ T7114] __fput+0x3ff/0xb50 [ 174.728440][ T7114] task_work_run+0x150/0x240 [ 174.730519][ T7114] ? __pfx_task_work_run+0x10/0x10 [ 174.732778][ T7114] exit_to_user_mode_loop+0x1d8/0x700 [ 174.735040][ T7114] ? rcu_is_watching+0x13/0xc0 [ 174.737598][ T7114] __do_fast_syscall_32+0x59f/0x8b0 [ 174.739980][ T7114] do_fast_syscall_32+0x32/0x70 [ 174.742160][ T7114] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.745104][ T7114] RIP: 0023:0xf6ffefec [ 174.746958][ T7114] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 174.749816][ T7114] RSP: 002b:00000000ffb45dfc EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 174.753499][ T7114] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 174.757047][ T7114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.760440][ T7114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.763552][ T7114] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 174.766826][ T7114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.770446][ T7114] [ 174.771833][ T7114] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 174.774901][ T7114] CPU: 3 UID: 0 PID: 7114 Comm: syz.3.334 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.779361][ T7114] Tainted: [L]=SOFTLOCKUP [ 174.781190][ T7114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.785918][ T7114] Call Trace: [ 174.787496][ T7114] [ 174.788813][ T7114] dump_stack_lvl+0x100/0x190 [ 174.790995][ T7114] vpanic+0x553/0x970 [ 174.793173][ T7114] ? __pfx_vpanic+0x10/0x10 [ 174.795263][ T7114] ? lock_release+0x24d/0x310 [ 174.797391][ T7114] panic+0xd1/0xe0 [ 174.799010][ T7114] ? __pfx_panic+0x10/0x10 [ 174.801202][ T7114] check_panic_on_warn.cold+0x19/0x34 [ 174.804069][ T7114] ? __mutex_lock+0x944/0x1bc0 [ 174.806047][ T7114] __warn.cold+0x191/0x318 [ 174.807972][ T7114] __report_bug+0x30f/0x440 [ 174.810062][ T7114] ? __mutex_lock+0x944/0x1bc0 [ 174.812092][ T7114] ? __pfx___report_bug+0x10/0x10 [ 174.814332][ T7114] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 174.816973][ T7114] ? unwind_get_return_address+0x59/0xa0 [ 174.819220][ T7114] ? arch_stack_walk+0xa6/0xf0 [ 174.821370][ T7114] report_bug_entry+0xe2/0x290 [ 174.823609][ T7114] ? __mutex_lock+0x94b/0x1bc0 [ 174.825597][ T7114] handle_bug+0x1cd/0x2a0 [ 174.827516][ T7114] exc_invalid_op+0x17/0x50 [ 174.829285][ T7114] asm_exc_invalid_op+0x1a/0x20 [ 174.831249][ T7114] RIP: 0010:__mutex_lock+0x94b/0x1bc0 [ 174.833306][ T7114] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 b4 10 00 00 44 8b 05 b8 11 7a 05 45 85 c0 75 13 48 8d 3d 9c 16 7d 05 48 c7 c6 80 d3 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 174.840324][ T7114] RSP: 0000:ffffc90025f2fae0 EFLAGS: 00010246 [ 174.842570][ T7114] RAX: 0000000000000003 RBX: ffff888029f2d128 RCX: 1ffffffff22898cc [ 174.845490][ T7114] RDX: 0000000000000000 RSI: ffffffff8befd380 RDI: ffffffff9147cb50 [ 174.848541][ T7114] RBP: ffffc90025f2fc50 R08: 0000000000000000 R09: 0000000000000000 [ 174.851805][ T7114] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 174.855147][ T7114] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 174.859025][ T7114] ? trace_contention_end+0x126/0x160 [ 174.861672][ T7114] ? vidtv_stop_feed+0x75/0x2a0 [ 174.863698][ T7114] ? __mutex_lock+0x26c/0x1bc0 [ 174.865676][ T7114] ? dmx_ts_feed_stop_filtering+0x55/0x1d0 [ 174.868089][ T7114] ? __pfx___mutex_lock+0x10/0x10 [ 174.870344][ T7114] ? __pfx___mutex_lock+0x10/0x10 [ 174.872811][ T7114] ? __mutex_lock+0x26c/0x1bc0 [ 174.875223][ T7114] ? __pfx_vidtv_stop_feed+0x10/0x10 [ 174.877595][ T7114] ? vidtv_stop_feed+0x75/0x2a0 [ 174.879560][ T7114] vidtv_stop_feed+0x75/0x2a0 [ 174.881552][ T7114] dmx_ts_feed_stop_filtering+0xe9/0x1d0 [ 174.884140][ T7114] dvb_dmxdev_feed_stop.isra.0+0x162/0x270 [ 174.887156][ T7114] dvb_dmxdev_filter_stop+0x1d0/0x390 [ 174.890020][ T7114] dvb_demux_release+0x92/0x560 [ 174.892133][ T7114] ? evm_file_release+0x133/0x210 [ 174.894046][ T7114] ? __pfx_dvb_demux_release+0x10/0x10 [ 174.895954][ T7114] __fput+0x3ff/0xb50 [ 174.897266][ T7114] task_work_run+0x150/0x240 [ 174.898913][ T7114] ? __pfx_task_work_run+0x10/0x10 [ 174.900734][ T7114] exit_to_user_mode_loop+0x1d8/0x700 [ 174.902570][ T7114] ? rcu_is_watching+0x13/0xc0 [ 174.904364][ T7114] __do_fast_syscall_32+0x59f/0x8b0 [ 174.906297][ T7114] do_fast_syscall_32+0x32/0x70 [ 174.908186][ T7114] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.910158][ T7114] RIP: 0023:0xf6ffefec [ 174.911512][ T7114] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 174.913577][ T7114] RSP: 002b:00000000ffb45dfc EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 174.916213][ T7114] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 174.918816][ T7114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.921869][ T7114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.924470][ T7114] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 174.927078][ T7114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.929699][ T7114] [ 174.931714][ T7114] Kernel Offset: disabled [ 174.933335][ T7114] Rebooting in 86400 seconds..