last executing test programs: 7.162753671s ago: executing program 2 (id=1902): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @mcast1, 0x5e}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0xa, 0x2, 0x0, 0x4}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000000)=0xff) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x5, 0xffffffff9080edc4, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x4}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8000000000, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000005000000060000000000000009000000000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f58000000040000000090000009000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f300397cd86d4d928d14d3a461b60245898556c20600000000002b133b0801000000000000"], 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r9, 0x0) mount$nfs(&(0x7f0000000300)='tracefs\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x80b010, &(0x7f0000000600)={[{'tracefs\x00'}, {'*'}, {'\xff\xff'}, {':'}, {}, {'overlay\x00'}, {')\xb1/['}, {}, {'^%&@#@*&'}, {'xino=auto'}], [{@appraise_type}, {@fowner_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x34, 0x63, 0x0, 0x31, 0x34, 0x66, 0x32], 0x2d, [0x61, 0x62, 0x37, 0x34], 0x2d, [0x64, 0x63, 0x34, 0x30], 0x2d, [0x33, 0x37, 0x32, 0x62], 0x2d, [0x31, 0x31, 0x37, 0x33, 0x0, 0x32, 0x37, 0x36]}}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@dont_appraise}, {@euid_lt}, {@subj_role={'subj_role', 0x3d, '.'}}, {@euid_eq={'euid', 0x3d, r5}}, {@uid_gt={'uid>', r7}}, {@fowner_lt={'fowner<', r9}}]}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r10, 0x0, 0x2, &(0x7f0000000000)={0x8, [0xffff93cd, 0x6], 0x5b4}, 0x10) r11 = epoll_create(0x0) epoll_pwait(r11, &(0x7f0000000280)=[{}, {}, {}], 0x3, 0x3, &(0x7f00000002c0)={[0xc00000, 0x1]}, 0x8) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 7.04085331s ago: executing program 2 (id=1904): setpgid(0x0, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x2, 0x5004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r1, &(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r1, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x87d4b69a72310a97) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x17c, 0x17c, 0x210, 0x2a4, 0xdc, 0x344, 0x344, 0x344, 0x344, 0x344, 0x6, 0x0, {[{{@ip={@private=0xa010102, @empty, 0xff, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0xa4, 0x1}, 0x0, 0xa8, 0xdc, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x7fffffffffffffff}], 0x1, 0x2}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x0, 0x6, 0x1}, {0xffffffffffffffff, 0x2, 0x7}, 0x4, 0x9}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'gretap0\x00', 'pim6reg\x00', {0xff}, {}, 0x36, 0x0, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x1, @multicast1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010103, @loopback, 0xffffffff, 0xff000000, 'wg1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x3, 0x1}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x5}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x434) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) process_vm_writev(r2, &(0x7f0000000e00)=[{&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000000700)=""/170, 0xaa}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f0000000d40)=""/149, 0x95}], 0x6, &(0x7f0000001240)=[{&(0x7f0000000e40)=""/85, 0x55}, {&(0x7f0000000ec0)=""/105, 0x69}, {&(0x7f0000000f40)=""/187, 0xbb}, {&(0x7f0000001000)=""/192, 0xc0}, {&(0x7f00000010c0)=""/144, 0x90}, {&(0x7f0000001180)=""/171, 0xab}], 0x6, 0x0) gettid() 6.03755474s ago: executing program 2 (id=1914): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x3, 0xfffffffe, 0x0, [{0x2, 0x4, 0x7, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x10, 0xc, '\x00', 0x5}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0x5, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x5, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x2, '\x00', 0xb}, {0xc7, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xc1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x5, 0x4, '\x00', 0x23}]}}) shmctl$SHM_LOCK(0x0, 0xb) 5.765821766s ago: executing program 2 (id=1915): sched_setscheduler(0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x18) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x134, 0x10, 0x1, 0xc0000002, 0x100, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x2, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x11}, {@in6=@mcast2, 0x4d2, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xc4cc}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380100001800010027bd700000010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230002000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000000000000000000000000000000004000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000700fc020000000000000000000000000000fe8000000000000000000000000000bb4e2400064e2200040a00202067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000000000004a0000000000000091710000000000001fc60000000000000300478e88f9f5131c7c3aa94a6ada8200000000000075090000000000000800000000000000df82000000000000ffffff7f0000000000ffffffffffffff0500000000000000090000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac2(0x2, 0xc9, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x499, 0x2001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0xff, 0x0, 0xf, {0x8, 0xb, 0x2, 0x2, 0x1, 0xf9, 0x20, 0xfd}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x81, 0x8, 0x2b, 0x1}, [@sample_rate={0xf, 0x24, 0xd, 0x1, 0x1, 0x2, [0x3, 0x3, 0x3, 0x0]}, @source_unit={0x8, 0x24, 0xa, 0xd8, 0x1, 0x3, 0x5, 0x4}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0x9, "cc6d2e6ca2a3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x9, 0x8, 0xf2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xb, 0x0, 0x10, 0x6}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x79f, 0xb, 0x1, 0x7, {0x8, 0x25, 0x1, 0x0, 0xa, 0x4, 0x3c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x0, 0x7, 0x9, 0x1}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x4d, 0x4, "c3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x40, 0xff, 0x4, {0x8, 0x25, 0x1, 0x0, 0x36, 0x5, 0x5}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0x37, 0x5, 0x3, 0x20, 0xf7}, 0xf7, &(0x7f0000000b00)={0x5, 0xf, 0xf7, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xd0, 0x1, 0x0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xfb, 0x53, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0xb, 0x0, 0x8, 0xf, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "b21222fadb603f86c145fa609511ac56"}, @generic={0xa9, 0x10, 0x0, "712ac3d347406d2a94f11dc88aa5faf2952ac465855c67718269116655c66caac03101b2150971288f56eb82fa7887a53ce795dc4bc501b12e5a259a00b5d8e0d5d833dc438713649816d024b5190e3f3a9ca243e73a528376c0f561f2483b1a0ce9a1c2f61284827de8a91703f1fe5b6f25b11e68bcbaa72688e1d048fae1ae52b62af3532eaddd19427a990fb89c1f6e4affabb3983dfd43846911caf80a81ea192e152cca"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "df0147284c13525a9c33105212ae2b96"}]}, 0x1, [{0x1c, &(0x7f0000000480)=@string={0x1c, 0x3, "ab5b1513b457c8d2c967daa406b69d42ecd6e5d1480e5b88ae41"}}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f00000004c0)={0x1f, 0x64, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xe, 0x1}, 0xe) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8br0}, './file0\x00'}) ioctl$KVM_TDX_INIT_VCPU(r1, 0xc004aeba, &(0x7f0000000040)={0x2, 0x0, 0x1}) preadv(r0, &(0x7f0000004080)=[{&(0x7f00000002c0)=""/22, 0x16}], 0x1, 0x421a, 0x0) 4.97454515s ago: executing program 3 (id=1927): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0x1c, 0x800) dup3(0xffffffffffffffff, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r7 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x48, 0x9, 0x0, 0x7, 0x1, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x1f}) epoll_pwait(r3, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010404000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="38410000440b00002400128009000100626f6e640000000014000280050001000100000008000200", @ANYBLOB="f7"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) socket$inet_sctp(0x2, 0x1, 0x84) 3.787428347s ago: executing program 3 (id=1935): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = syz_usb_connect(0x2, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd25}, 0x18}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffffffffffffffba, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r4, 0x25, 0x0, @void}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r6) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r7, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0040000040060100080020000402"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2, {0x0, 0x0, 0x1200, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 2.871495415s ago: executing program 1 (id=1942): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f3f01f7d04a37f60a74b51f629a0332b0854d78ec1123e57c7ff57f1c8b1141977fb5ac0d93db53353a9f1776ef87199e5752827c1ddf2708ce41dd41fd679ecf82470cb8063f90e041b6c1d68c036918033f210aba"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x67) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x3040042, &(0x7f0000000000)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r4 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MTDFILEMODE(r4, 0x4d13, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000001ff0), 0x10) syz_open_dev$dri(&(0x7f0000000280), 0x33f, 0x801) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="18300000020000000000000000000000317be0ffffffffff185a00000600000000000000000000008811f8ff04000000bae31850d35fd0f25f17a03d497f90511fb20cbfd512c454d68531f805956e3e083e40006f57a1c17299c76f1f5f3ce3b70c70ba3ce67fa0dbf168031c4032f11cf8c7a0491cde8a7b082fb4b718a4ce"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 2.818474527s ago: executing program 0 (id=1943): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc14000000478803", 0xd, 0x4, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 2.540394293s ago: executing program 3 (id=1944): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0xb3) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xe, 0x0, 0x0, 0x400000]}}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000fa", @ANYRES16=r7, @ANYBLOB="050029bd70000000000022000000"], 0x14}}, 0x4000000) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) prctl$PR_SET_PTRACER(0x59616d61, r4) syz_clone3(&(0x7f0000000680)={0x80000000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ffffffff0000000002000000183700000200000000000000000000008500789692dcc8cbb4c833b575bd1c2300005200000085200000010000009500"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.406157031s ago: executing program 2 (id=1945): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x8, 0x0, 0x1030}}}}}}, 0x0) 2.258939964s ago: executing program 2 (id=1946): setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000001ec0)=[{&(0x7f0000000a80)=""/233, 0xe9}], 0x1, 0x4004f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000740)='0', 0x1) syz_usb_connect(0x4, 0x24, 0x0, 0x0) r2 = socket(0x9, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x15, 0x0, 0x2}, {0x0, 0xfc, 0x7f}, {0x2}, {0x6}]}) setsockopt$inet6_tcp_int(r3, 0x11a, 0x5, &(0x7f0000000340)=0x3f9, 0x4) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) 2.114701069s ago: executing program 0 (id=1947): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c09425, &(0x7f0000000300)={"d10e5844f41158ceaa0ba418f03f6077", 0x0, 0x0, {0xff, 0x4}, {0x3, 0xdd11}, 0xe, [0x5, 0x7, 0x8, 0x80, 0x9b5, 0x6a18, 0x3, 0xb2, 0xf4, 0x8, 0x5, 0x4, 0x2, 0x0, 0x8, 0xdfb]}) recvmmsg(r0, &(0x7f00000069c0)=[{{&(0x7f00000015c0)=@hci, 0x80, &(0x7f0000001900)=[{&(0x7f0000001640)=""/233, 0xe9}, {&(0x7f0000001740)=""/141, 0x8d}, {&(0x7f0000001800)=""/243, 0xf3}], 0x3, &(0x7f0000001940)=""/4096, 0x1000}, 0x401}, {{&(0x7f0000002940)=@pppoe, 0x80, &(0x7f0000002f00)=[{&(0x7f00000029c0)=""/215, 0xd7}, {&(0x7f0000002ac0)=""/254, 0xfe}, {&(0x7f0000002bc0)=""/34, 0x22}, {&(0x7f0000002c00)=""/29, 0x1d}, {&(0x7f0000002c40)=""/228, 0xe4}, {&(0x7f0000002d40)=""/220, 0xdc}, {&(0x7f0000002e40)=""/132, 0x84}], 0x7, &(0x7f0000002f40)=""/165, 0xa5}, 0xffffff66}, {{&(0x7f0000003000)=@qipcrtr, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003080)=""/246, 0xf6}, {&(0x7f0000003180)=""/20, 0x14}], 0x2, &(0x7f0000003200)=""/57, 0x39}, 0x1}, {{&(0x7f0000003240)=@alg, 0x80, &(0x7f0000004480)=[{&(0x7f00000032c0)=""/244, 0xf4}, {&(0x7f00000033c0)=""/23, 0x17}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/15, 0xf}, {&(0x7f0000004440)=""/64, 0x40}], 0x5}, 0xb9}, {{&(0x7f00000044c0)=@generic, 0x80, &(0x7f0000006880)=[{&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/127, 0x7f}, {&(0x7f0000005880)=""/4096, 0x1000}], 0x4, &(0x7f00000068c0)=""/208, 0xd0}, 0x2}], 0x5, 0x101, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x10d801) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000700)={0x0, 0x8000000000000001, 0x0, [0x5, 0x3, 0x9, 0x6d7, 0x605a], [0x4, 0x9856, 0x3, 0x1, 0x5, 0x200, 0x1, 0xa7, 0x7, 0x900000000, 0x1, 0x0, 0xfffffffffffffffe, 0x4, 0x81, 0x69f7, 0xae, 0x1822afc0, 0x6fc4, 0x7, 0x9, 0x10001, 0xfffffffffffffffc, 0x2, 0x3, 0x4, 0x1, 0x8000000000000001, 0x5, 0xed9b, 0x8a, 0xb, 0xfff, 0x3, 0x7, 0x2, 0x9ba7, 0x8, 0x6, 0x1, 0x4, 0xd5d0, 0xfff, 0x4, 0x9c30673800000, 0x8, 0xfff, 0x5, 0x100, 0x2, 0x5, 0x0, 0x7fffffff, 0xda, 0x1, 0x5, 0x6, 0xfffffffffffffffc, 0xc, 0x401, 0x73ea, 0xa, 0x8, 0x1, 0x4, 0x1, 0x3, 0x101, 0x0, 0x7, 0x9, 0x0, 0x8cd, 0x900000000000, 0x7, 0x3, 0x3, 0x2, 0x66f1989a, 0x4, 0x2, 0x3, 0xaf, 0x3, 0x8, 0x7, 0x1000, 0x9, 0xffff, 0xfffffffffffffffa, 0x5, 0x5, 0xe4, 0x9, 0x10000000000000, 0x5, 0xb, 0x8000000000000001, 0x9, 0x4, 0x3, 0x6, 0x10001, 0x80000000, 0x81, 0x6, 0x800, 0x6, 0x5, 0x80000000, 0xb0a, 0xa9, 0x4, 0x800, 0x813e, 0x101, 0x3, 0x2f, 0x4, 0x8000, 0x8]}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000000b40)={0x2, 0x2, {0x4, @struct={0x80000001, 0x871}, r7, 0xa, 0x3, 0x3, 0x2, 0x3, 0x8, @usage=0x4, 0x1, 0x2, [0xb, 0xa8, 0x7, 0x1, 0x5fc34efe, 0x7ab]}, {0x8000000, @struct={0x6, 0x7}, r8, 0x8000, 0x7, 0x81, 0xffffffffffffffd2, 0x400, 0x1c, @struct={0x820}, 0x2, 0x400, [0x566e, 0x2, 0x7fffffffffffffff, 0x7, 0xa00, 0x7]}, {0xffffffff7fffffff, @usage=0xfffffffffffffff1, 0x0, 0x0, 0x6d, 0x9, 0x6, 0x1, 0x12, @usage=0x3, 0x800, 0x1, [0x6, 0x401, 0x0, 0x2, 0x6, 0x8]}, {0x0, 0x3, 0x188}}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000005c0)={{r3}, r4, 0x4, @inherit={0x58, &(0x7f0000000540)={0x0, 0x2, 0xc, 0x200, {0x4, 0x222d, 0x8, 0x100000001, 0x1229}, [0x7, 0x5]}}, @devid=r7}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r9, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffff2, 0x80002}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x8}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) setreuid(0x0, 0x0) 1.929605562s ago: executing program 0 (id=1948): mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) openat2$dir(0xffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x800, 0x103) mount(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000400)={0x0, 0x2000}, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0}) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-ce\x00'}, 0xffffff1f) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4022}], 0x1, 0xe13) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x5100, 0x0) accept4(r4, 0x0, 0x0, 0x800) 1.668727513s ago: executing program 1 (id=1949): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet(0xa, 0x801, 0x84) setsockopt(r0, 0x6, 0x6, &(0x7f0000000100)="0287e70847b30980e789da0294e15ff5bf1b052a26a60f373ea3fff12804f8f7b00a56249a347beac64a549fd8c5cd5ed716439e6208b1d8d430647ab3f291c0de199179a855940acd55809fbac087cc270da6b0a2f81fbd9c45e61fc5a8986f8cfe198eb39372e60fde1fb24b037fee5d06659e791756a26023e20a9fa5a9325b12d14ab692e9cba3c0cfcce2484f11ee26d74c0417bdd848dd95c93da718cdd3a5e6bd525471cd8bc1c075fd566a97abffea680e80c9963651b87e7a959ba335", 0xc1) r1 = openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002940)={0x2020, 0x0, 0x0}, 0xffffffffffffffca) signalfd4(r0, &(0x7f0000000040)={[0x9, 0xffffffff]}, 0x8, 0x80000) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2], 0xffffffffffffffac) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mremap(&(0x7f0000b9e000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ec8000/0x4000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048080) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4080, 0xff0}], 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.030092088s ago: executing program 1 (id=1950): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0xb, 0x0, 0x4, 0x0, 0x3, "0062ba7d82000000000000000000f7ffffff00"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_MSG_GETSET(r1, 0x0, 0x20004840) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a3f4fc2c9a6bb6a7a00e70a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280080003400000013014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) (async) close(0x3) 974.803136ms ago: executing program 1 (id=1951): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4, 0x14, "339f020bbe82b398e7ff0000000000000d0ec0c1b4e9b1c4369d03740250ceaad741dd17c1c50d38ef2a565ef1e8ca37691c58d66500001000", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158db74050900000000000400000100", [0xfffffffffeff7ffc, 0x1000000000]}}) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0x4c08, 0x0) r2 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x109400, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f00000000c0)) 865.694091ms ago: executing program 0 (id=1952): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x100004, 0xffff, 0x1, 0x1, 0x1}, 0x50) syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406a0800010000010203010902190001010080fa0904000001ffffff0007058102400000"], 0x0) r1 = dup3(r0, r0, 0x80000) openat$binderfs(0xffffff9c, &(0x7f00000002c0)='./binderfs/custom0\x00', 0x2, 0x0) mkdirat(r1, &(0x7f0000000280)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x11c) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)="ff00"/32, 0x20) write(r2, &(0x7f0000000200)='0\x00', 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r0}, 0x38) 863.462725ms ago: executing program 1 (id=1953): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x8, 0x5, {{0x33, 0x4, 0x0, 0x4, 0xcc, 0x68, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @broadcast, {[@timestamp={0x44, 0xc, 0xb1, 0x0, 0x5, [0x7, 0x80000001]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xaa, [@local, @dev={0xac, 0x14, 0x14, 0x27}, @remote, @private=0xa010101, @loopback, @loopback]}, @timestamp_addr={0x44, 0x54, 0xfd, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@local, 0x61}, {@private=0xa010102, 0x200}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x3}, {@private=0xa010100, 0x1}, {@rand_addr=0x64010101, 0x7d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@broadcast, 0x4}, {@loopback, 0x4}]}, @cipso={0x86, 0x39, 0x2, [{0x1, 0x7, "d77ca7b41e"}, {0x4, 0xc, "9f70590116663ac7826f"}, {0x5, 0x6, "a5c6c3df"}, {0x2, 0xd, "033acd77b467bfcd8d4553"}, {0x1, 0xd, "6727a7d8c0dbfaf9b72d1a"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000190001002dbd7000fcdbdf250a148004ff010004000c0000080010001000000008000300", @ANYRES32=r1, @ANYBLOB="6da56d08cdb61e6c50a2e1650e78fe27686a07d9315d50bccac2d3bcb81b948869181edc44dc93"], 0x2c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100697036746e75feb09c57f26c000004000280"], 0x34}}, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x4, 0x80) mq_notify(0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)="339931a8e57f9726597cb103c8611cef98c8869bc249aa823e92dd5c4bdd15e15339b6a03d8cc177f480d2e85bdff1334fd2dab10a3382102d2433b096bdd4c48950f490f041002f93a162be7ea5d398df5a8decd22af100f0dbcd", 0x5b}, {&(0x7f0000000180)="63960c77c65e2f6b4f3a7f058be0ca84bc1abb869a", 0x15}, {&(0x7f00000001c0)="c3d417f6", 0x4}, {&(0x7f0000000200)="5223424f66c0f32ba3fd", 0xa}, {&(0x7f0000000280)="332c7174438292916ef13b51716c1d4afaa3adea1d06b134146556747468acf3984227f9e5b28d1fd3456061ddf9052b0a24f30f3922baa872c9926140aae7f58258adcb12b2d24359c8a412d7cbfe6a79faa831d8b6739b9c59ef540c", 0x5d}], 0x5) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) dup3(r5, r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000002308"], 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="050000002308"], 0x80}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x10, &(0x7f0000000440), &(0x7f00000001c0), 0x8, 0x6c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r8, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 628.751603ms ago: executing program 1 (id=1954): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x4a1d, 0x800, 0x3, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0xad, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x0, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1e9, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r9}, 0x1c) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1e, 0xe5, 0x6, 0x2, 0x300, r10, 0x3, '\x00', 0x0, r11, 0x5, 0x2, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r13, 0x0, 0x10) setsockopt$SO_J1939_PROMISC(r13, 0x6b, 0x2, &(0x7f0000000280), 0x4) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000000)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) dup2(r8, r8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 628.119773ms ago: executing program 3 (id=1955): socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(0xffffffffffffffff, 0xf4240) (async) ftruncate(0xffffffffffffffff, 0xf4240) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) (async) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000640)=@vmx={0x101, 0x0, 0x2080, {0x30000, 0x50000, {}, 0x1, 0x6}, {"d07ee511cd72b653a8570092138cc70013f0853eab03c8dbab297ead745d4e087c735366f067289401204ab46286481c9fc9b34039aaaded1e8068e28cdafec8d1b4a81d99cb7387f8abbfc11ea898c9141330736dea8dacef5fc1cfd8997f29c85bbd8d9722f2b39a40f79bb342eee5f40b1e0a08befdd3e1b959c2dc23dfb45602c0a8b5267415204d04ba36bc8d090a256668a708b78df1449433ff322346ffd349319bf2881b2cd0a48d1b65b9bcff7cb69976323bc169184b217176342b5e8b46bcbb93e54522c2bdc9dfc1acff741f79e48c6d4e20e8de32506d6619cbac80b77b3cade487c106af52af9d9cb72bb168bccfbe939df813ebdbd14e84116671966bd76ebc37c2e8194d77eefbd53e343a6f7cf65c211958d2118841da37c9fe5f673f07b363c61f4d24de444260e0808ebcbaad4d199824ba5555458fdc33b4d1ec5aa1af2308d9b91e6bd2fdfb2c89682f92edb5e4dfa889844185d4c066356e0cc83437ea29d4c55ef513b254b9864934b69bf2fcbd2ffd0a01fd85b63efecf18c512ff4f33f86a771a6835436b2a2d3f25c18c0953e6203fedb2873918e33e66e2a01748cd8065f44333e200a91258ed6a93fb49e20ad24532adc108cbe0b23d08b155c2d30bc0de2ddb62536c4486f167f541bb33ad8912f6c20adb0b62431bcc77d532b2079d869a39e1936d927c63c4304b0603fea112d62179e14a65b6d7b2093f2636ec64eee40cdae01986266ee9517f5cd1de6da14bb8b0439a4d5b55d45a1baef217d99e622f40dd11ef8b090d9daf1301ac6f9f42b1ab9038e6d0ab8ed23f1132b6d4a64a34ce037aefb0f15ff073786cd54b7072132afd8d3f162f2fa6de3a238aac5160ecaf526dda92bc1545a88a501a3beef2f634fd081c0d92505565a53cf6d9aaf7207dee99cad9cde097c6a76cccc3defe1213f4048ad3c5083ad4bd7cc0d0adecdd124909f17dbd90aafcd5d564a258a7de73d99b5d5547d35f9e1a53ebc8cf1914671acaa80491f15fb4166a883235f44d28660da30013fb721ba824dab6419fe8079f0f0a946662cc4a1e644ef925a2c60a852188f83620c4ac02a07a31ddd33f3ac403bbdceb03119485e2f2804a3406ce98aaf947d36e5e70f9415e4cbcc13397e39308b4742181dad22a2ec4bfeced6972e435c0295bf124701ab0fe1f3cde68d742a1a29f6a226f37251d91a6f4cf453474115a875f1b2735618623c35e6de86832c8af93258cc8f793f69c35933a247851cc42d2c4c8a86eaa9d3e19323557147d97d9c73f9e6efdcaf64c2ef087fcb1a36bb7336e8fbbcf8026eb2fb1fb0d3f7e6cb965b3bd1eb46506451232c09d797e77fe46f2c79525aa9ac2986b5a322d5fe5910be3c55b5b4951f5cacd9ecaa5199ac1c9a3f0aee70ed5ff4c9d299194913ae226d4877c6f8e441aa4f4272110824d7077077a15179fc9423d5884c6b3987a7662c91c0d8f0c72c0638a954806a5b6f8e49d59d46891a2d0ad2596593bdc30ebafc8af1aa4a7ca71437ecc0fa245d62380ebf6b38ddac8b55ff9cd81d60560998459a7f8286fbcc2d541b6c0b23df97955a8aa48a523890c75b2cfb05fbb9b8044d9df78f914ce276e7c0fb183b68d1d83ed403bba0f6c94fe64d3183567dcd54f7074dcaa1a193d80cbdec690fa05000000000000009e9c9663bf8b76a0535c1723e10827a5cc965e42dbf89b7f959ce90b91f8423f1258a5ffe1120b541134148b9a52e540e588b58e9f583a4a6c77e261486b975222fcedea4a8d6470f367a2616a981bb3d2b3fe5fb11e951f6400eb60a945f92f5ef1078107702b11000b0122034fea7c4221ea1bcc5e6210edc149c16736607ad542d977f1b013afa948ea43516f3ff0c4d7c4fb4efd67dedc44e622e4573e7f5d0c102c866b1eacda3d864d361517dcd3ed57250453a35ffd96ba4905a999a2a09996147c7ac46e19e47d673d2f2a97a3d3407c80675a58036eeea34ad8b958618ae9a213f2458b6a013e04c81366e9d42c80eccd45fc6b2806314194e5f75a19397a5f34b508329dedad8909b6d5be46459166a9f3ff88fadbbc324b1769aec890f5cc2b442b632f29c275d4888b38dc47ebe0235a63d896e4f9dd3408fc837effbbebe6b4d5d12334b780cf46358e9e51ec74e7fb30cf2826d6311c3a19419f0164f96cf09c02d8cab3a97f5eaaff757124c71f80efa31046fec8b729f9853fda8d454df9bd47a2f9a50f1dc37fb2709f0f784297caad7073ecdbf2397d14f01175ee8ce28ea2c103186d9e53e5829a0101384da6ee6c1d514400624eb5e11f1146dcebb8eb1dd6605fd65694b60b6204232c5d821f7a67fe82d63ba5c1cd6851f9d7d6bc438a43b2379ebdee7f84c9a509b5b1b5381bafebed35b856ed2e9e33264e6ea44a5d05ac5fd93abd54b31dee7a301fe6f201abf39657d2aed95ecabcf7601608ae9b083fb49bab452c38d5370c057daffab880b21603b18e98f8ccdbabbef959c240aee6546db9de2316c0feca99b276af23148bce353070fad42a35b4ac005e9c832c3f4ab83a44dfe6d8fd4440f20870329fc2d645a2c29ebd571b7006d92ad400d824d2981a9c69df0ef5692c9d87432abe845bee7ab415a1ae5d8a5a05a607bd1512d556730ded4fc8ee70260c2201f3a2ac63c2b397834474a18308a979b8ee781e7348504dcaf702092c133a4ec9d9de1f22c70cb70f8b4e3c7b15dc7032c9c35141d4457a9685a52c4c47d43d9a20ce2ad41cf5fb6edd91dad19021cf6212593638234bd032c11cf6582aa1110348f3bff66583d360f54db403f6aae4550ce6285ad487fc467d320a3878c77061b109f6e2fe74659d8dc3bfd91ff7c23b64babfb7df1617776c254dc87804f6c4ea46df27e952b1393d4f3a5efe4ebaa94d11c115d8eb052e4119bb9b5d9fffe6975ee97295cfa4f2a877ceca70841d6b9f5b6138aace2efa7a0443fbb6603d026be4d10106a11720e8dfc9e04fe17359665f75052a34af42b3f39bd27156357630e4eb44f1908d4f8c512de8dd17a925dabd5656e3205e97f8b69868a289981cc83576e72a714ad209d1904e7a0cf8956bd3842e3f948b6a7f2b5db4beaca71ea23daf2c340dc38f87971a1ad92a63df5c23e798736fdb7e08df92121f360f3b7f639d379b7100b152d263d344e38d2ed9a953954cfa39dfc3f970e06079ca5ebc0a69ff957949c9afcf2be20f340bfba56441949fedf4ea6632cd748ad52fdeea4fa7f56f360445169f4b9b361c4f53c996a5b86242c2f4934cee1ba3e541bc5540a818e787c564f9fd101cb2664e9aeed613851edafbdcc8df83d3471f7ed6ec527264e9396626c755af01f4ed227db051383ebbe5c52de0e7a96292c690966df12eab369b2f846de9a847d2d0f2b9a36f2ea47f367074278a956ddbe587dbc49d949cf8a5be1bef14269f42cc5e98f5ed070f02c7db29e1fe3abdec02502354f02e72a9f39f2d18dcb5b8b965b46433b51205a041fa135775074027fb2c57820886aa4b0af320f2aa629bbb98eefeb39ed6e587e83bf7b45bff760d92ac670df9cb1aa10409c52dff7586bdd1ab94220e4b3d441010ce6edb1b73b74ccf2bcacf385e8a9b5bd17b40045d965a3741372188cb404069c6620cf8763c47209846888d0b3b35069cb10b2fc115613b4da37e9a7ca0e3cd4396043589e322c7ffa4e5b912f9837889a087b9a3ca095ae390ab09527a01b0d24c141d2806eab10cc4907922916c1f027d1b45a8b14d70dea82e0606973bca709d298505e6d2b689188ce2c473232818ebf65405f1f950273725d53e6a269f391f320fbaff80cfc97dc6ef0eb019e7c408aadf8a9e5f5bb783c9f559a759365320b3af270eefdbe4481ffa03962d908664855ee557d0200715d95f69caa9a2ecd78b13052454b5b73329860157d1bb45c945aa7a830628173a91280aa42c6e88f08bb4333364ef4ed1d13a804a07a0976689f6f49d1b2c2b4eb267accd661964b10e532394a695b6a5d558233c41f2bb99c5df3d59ca76fa419a1dda057514c99522ec903ae0c0f7570c7d30f6e9ad7d12c2e644bdee1e6d64e67958ffee6ddebc6dfc4478fae8453238a179887f47c67298af5445553e7ba36a49dbc838d1772e4786c38ef30ac51e5147ed8e5da0c36eae45376c356da5602b11009f6f00f1f86fc99b2570cf3c79a989bf77d04d668fcf3404a722fe7f1ab605aaf47647c8abb20d72512ff6c8a9b1752bf4d6dda43dc8fb81f701a87f5477c37a3a07a2b811f9f239cadface4a4a976580e89c49100fe2a56d182edaaa53b3988c933fb9c440402977cd3297c076904d1fe44598765a5436d98e8c92304e3d7dac1441af80d6dc91df0ca72af34d55cb3b7c1870b0f13a90ebc82a449557cbbdf0b7839a717983cedd0053183f40cb4bfde0e3a42c90ba9aa61e674e205a349c14106b81c582e359d918c1ae93c9d4404f45bc0e91fc0ca929eb03c1f66bb03e2b9f145a9d36b0eec9b66ed850430758511cfd482835d099c25c940ae43b9cde8d15ca036c8a338295a3334118a193d0b8317f9a078b11394a57f5360e883fb04c028a39a7bacf73aef592fc20f93d896171478c5e3f15abfc0c10d9ff7afb80c67bf477bcec2cee253ae8bc00b363b379d631f8eae65fff1da1b07e3097ae7e07eaec3e4c410b92ad6a14b6a71944ae9a2b0f70347248e32f6d88bac46fdc2ab2b3598793a14cc515d74cd1242ffe76d0852cb7f7d6b5221ee10d18789933f275c59ad5e972218ce63713ad873db7d12b1c7be02ecc213c0f4f81d6c151c1759eb4d972acd7d3edc0e513545b4402394c9e19d1ea54f23d3b8beb8689ba449126a0dc071f772e45e383466e1f5bede4023abadde6fb3a868b612602f1f220a7afa26996aa56fee437ce6c098bac0eac4d17ed9b3f8aee8f51879a199f804723dfaf1f6b50d75f58b8e8dc486998afc848307ee16322a003d902dd5d32c586fa1cee88ba70c6ab4e8b2ca862cf03f9d46690783b52a13fa3a17c054ebec1d36dba69e5417fd770124550258808c93395fb1cc1552b3f814614cd5206621773f3e5fea79a3b65596e0d0eca0345ebb28b78208d9d5423696c45205f3218a05792175aa0adc7970a51d019af57631ffeb4eb020eaad5cc178ea50501cdf13ac644646ac630206ee598f941d7524d519ee169e44d4fcd011ebd7c5d87439298b1ae5d8e4d9ab8b6f6d139d2b6dec3ef7570009f119cf85a081a0e1dd7dbc5db09deab95d52c477aca0796de896553cd4e1e989356862754f1a4f2af1c8c63c04822bcb899a31e22e4c7a823262dd363d086698bada1576d807933ccaad2a419c6cb675c9b0c28240169ca37eb3d904a2dd8070a36b0f041606d9b1f378c9e5bd276fa20a3d4b59623d0600000000000000baf29f3eccc9100ca7a4a86341048897fa87556690feab3304ba7c9730faf90e5753d8af5d94101456a1dd8b98e417c88f77c984a8981018ea73ddc6ff58c53c17849439b9427854d838087dfff118df6afc7404afbd15ec4f8b9cbb8e745e9607f73db0ab26958f4f671fcabb2198c5194c36be0f119d63484c92eab63810f92337a4635716de915b246fb3f6807d1fb3598150b0f19e6ee4121cb5f198dbc34eb177603f868a6c94718b54ab71542dcc37216036dfb42c28a15f367d075f984b0d68a84081050104383b9bfd827f4f73745823d1875a3740c7a3aca2e920dd906223a720752aa8cdae04add2fb0e1dd8a60900", "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"}}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0\x00') (async) rmdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) (async) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='file0', 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 194.767819ms ago: executing program 0 (id=1956): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 0s ago: executing program 0 (id=1957): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffef3, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d06, &(0x7f0000002180)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x18, 0x1, 0x2, {r5}}}], 0x18}}], 0x1, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x73}, "14bffd076773e618d39a90a7ddede0f1cbbfb5400507109f248002f538054f1d79f119c666d26733442cafd720bdb2541415da118792c9c7d05d58719ec0d92263e2739da7bc6b092a07f4122aea955b70195af1efcdf25f4a45cf1e36245c76d420b0a64fd997374c6ac536273d1c80341fe9"}, 0x77) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x14c}}, 0x4884) tkill(r5, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x7) kernel console output (not intermixed with test programs): =240 compat=1 ip=0xf70aefec code=0x0 [ 198.280607][T10230] overlayfs: failed to resolve './file1/file0': -2 [ 198.393425][T10236] binder: 10233:10236 ioctl c0306201 800007c0 returned -14 [ 198.434019][T10234] syz.0.1159 (10234): drop_caches: 2 [ 198.536846][T10239] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 199.367512][ T34] usb 8-1: USB disconnect, device number 13 [ 199.389418][ T34] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 199.399927][ T34] spcp8x5 8-1:1.0: device disconnected [ 199.458122][T10255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.650841][T10265] bond5: (slave ip6gretap2): making interface the new active one [ 199.655482][T10265] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 199.668865][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1169'. [ 199.790566][ T41] audit: type=1326 audit(1785579195.432:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.0.1170" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x0 [ 200.488136][ T5756] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 200.728657][T10284] overlayfs: failed to clone lowerpath [ 200.736017][T10284] overlayfs: failed to resolve 'obj_user=/dev/virtual_nci': -2 [ 201.051273][T10305] siw: device registration error -23 [ 201.131952][T10306] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 201.134601][T10306] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 201.176981][T10306] vhci_hcd vhci_hcd.0: Device attached [ 201.442465][ T845] usb 38-1: SetAddress Request (2) to port 0 [ 201.445045][ T845] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 201.642108][T10314] __nla_validate_parse: 1 callbacks suppressed [ 201.642121][T10314] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1182'. [ 201.777287][T10307] vhci_hcd: connection reset by peer [ 201.788316][ T5832] vhci_hcd vhci_hcd.0: stop threads [ 201.791290][ T5832] vhci_hcd vhci_hcd.0: release socket [ 201.793812][ T5832] vhci_hcd vhci_hcd.0: disconnect device [ 201.965930][T10321] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1184'. [ 201.994657][T10323] comedi comedi3: comedi_config --init_data is deprecated [ 202.256261][T10331] GUP no longer grows the stack in syz.3.1187 (10331): 80004000-8000a000 (80002000) [ 202.262112][T10331] CPU: 0 UID: 0 PID: 10331 Comm: syz.3.1187 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.262146][T10331] Tainted: [L]=SOFTLOCKUP [ 202.262153][T10331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.262190][T10331] Call Trace: [ 202.262208][T10331] [ 202.262217][T10331] dump_stack_lvl+0x100/0x190 [ 202.262399][T10331] gup_vma_lookup.cold+0x83/0x96 [ 202.262445][T10331] __get_user_pages+0x241/0x32a0 [ 202.262511][T10331] ? find_held_lock+0x2b/0x80 [ 202.262557][T10331] ? mtree_load+0x311/0xa90 [ 202.262671][T10331] ? __pfx___get_user_pages+0x10/0x10 [ 202.262706][T10331] get_user_pages_remote+0x3d2/0xb10 [ 202.262735][T10331] ? mas_root_expand+0x6e0/0x750 [ 202.262765][T10331] ? __pfx_get_user_pages_remote+0x10/0x10 [ 202.262805][T10331] __access_remote_vm+0x3bb/0x890 [ 202.262839][T10331] ? __pfx___access_remote_vm+0x10/0x10 [ 202.262864][T10331] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 202.262929][T10331] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 202.262961][T10331] proc_pid_cmdline_read+0x552/0x9a0 [ 202.262992][T10331] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 202.263023][T10331] ? rw_verify_area+0xce/0x6d0 [ 202.263063][T10331] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 202.263089][T10331] vfs_readv+0x5d8/0x8d0 [ 202.263124][T10331] ? __pfx_vfs_readv+0x10/0x10 [ 202.263153][T10333] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 202.263172][T10331] ? __fget_files+0x21f/0x3d0 [ 202.263199][T10331] ? do_preadv+0x1ac/0x270 [ 202.263227][T10331] do_preadv+0x1ac/0x270 [ 202.263258][T10331] ? __pfx_do_preadv+0x10/0x10 [ 202.263296][T10331] __do_fast_syscall_32+0xe7/0x970 [ 202.263330][T10331] ? lockdep_hardirqs_on+0x78/0x100 [ 202.263357][T10331] do_fast_syscall_32+0x32/0x70 [ 202.263383][T10331] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.263412][T10331] RIP: 0023:0xf70aefec [ 202.263435][T10331] Code: Unable to access opcode bytes at 0xf70aefc2. [ 202.263443][T10331] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 000000000000014d [ 202.263462][T10331] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 202.263476][T10331] RDX: 0000000000000001 RSI: 0000000000000300 RDI: 0000000000000000 [ 202.263487][T10331] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.263499][T10331] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 202.263510][T10331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.263535][T10331] [ 202.420323][T10338] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 202.974820][T10345] syzkaller0: entered promiscuous mode [ 202.976629][T10345] syzkaller0: entered allmulticast mode [ 203.344590][T10358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.251571][T10359] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.258525][T10359] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 204.457417][T10359] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.459439][T10359] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 204.473712][T10359] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.475751][T10359] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 204.667223][T10398] ./bus: Can't lookup blockdev [ 204.700416][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'. [ 204.704452][T10400] netlink: 'syz.2.1208': attribute type 1 has an invalid length. [ 204.851441][T10404] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1210'. [ 205.388149][T10418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1214'. [ 205.603464][ T5756] Bluetooth: hci1: command 0x0406 tx timeout [ 205.650056][T10429] overlay: ./file0 is not a directory [ 206.634731][T10437] Context (ID=0x1) not attached to queue pair (handle=0x1:0x2) [ 206.645442][T10439] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1220'. [ 206.655049][ T5756] Bluetooth: hci3: command 0x0401 tx timeout [ 206.655081][ T5752] Bluetooth: hci2: command 0x0406 tx timeout [ 206.670819][T10441] netlink: 'syz.2.1221': attribute type 7 has an invalid length. [ 207.288430][ T845] usb 38-1: device descriptor read/8, error -110 [ 207.835655][ T5112] libceph: connect (1)[c::]:6789 error -101 [ 207.839115][ T5112] libceph: mon0 (1)[c::]:6789 connect error [ 207.858110][ T5752] Bluetooth: hci1: command 0x0406 tx timeout [ 207.900288][T10456] ceph: No mds server is up or the cluster is laggy [ 208.074978][ T845] usb usb38-port1: attempt power cycle [ 208.185289][T10475] FAULT_INJECTION: forcing a failure. [ 208.185289][T10475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.194107][T10475] CPU: 3 UID: 0 PID: 10475 Comm: syz.0.1231 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.194127][T10475] Tainted: [L]=SOFTLOCKUP [ 208.194132][T10475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.194139][T10475] Call Trace: [ 208.194143][T10475] [ 208.194148][T10475] dump_stack_lvl+0x100/0x190 [ 208.194172][T10475] should_fail_ex.cold+0x5/0xa [ 208.194195][T10475] _copy_to_user+0x32/0xd0 [ 208.194249][T10475] simple_read_from_buffer+0xcb/0x170 [ 208.194277][T10475] proc_fail_nth_read+0x1af/0x230 [ 208.194294][T10475] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.194310][T10475] ? rw_verify_area+0xce/0x6d0 [ 208.194328][T10475] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.194343][T10475] vfs_read+0x1e4/0xb40 [ 208.194355][T10475] ? __pfx_vfs_read+0x10/0x10 [ 208.194364][T10475] ? find_held_lock+0x2b/0x80 [ 208.194380][T10475] ? __fget_files+0x215/0x3d0 [ 208.194394][T10475] ? __fget_files+0x21f/0x3d0 [ 208.194408][T10475] ksys_read+0x12a/0x250 [ 208.194417][T10475] ? __pfx_ksys_read+0x10/0x10 [ 208.194432][T10475] do_int80_emulation+0x14b/0x720 [ 208.194450][T10475] asm_int80_emulation+0x1a/0x20 [ 208.194463][T10475] RIP: 0023:0xf71d73eb [ 208.194473][T10475] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 208.194488][T10475] RSP: 002b:00000000f54964bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 208.194500][T10475] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54965d0 [ 208.194507][T10475] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 208.194513][T10475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.194520][T10475] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 208.194526][T10475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.194540][T10475] [ 208.814548][ T845] usb usb38-port1: unable to enumerate USB device [ 208.898334][ T5752] Bluetooth: hci2: command 0x0406 tx timeout [ 208.945114][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1238'. [ 209.850944][ T5756] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 209.851563][ T5756] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 210.090821][ T10] libceph: connect (1)[c::]:6789 error -101 [ 210.095421][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 210.140875][ T5756] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 210.141305][T10514] ceph: No mds server is up or the cluster is laggy [ 210.263747][ T1348] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 210.437134][ T1348] usb 7-1: Using ep0 maxpacket: 8 [ 210.440245][ T1348] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 210.442849][ T1348] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.445938][ T1348] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 210.449339][ T1348] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 210.452411][ T1348] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.456372][ T1348] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 210.460087][ T1348] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.612047][ T10] libceph: connect (1)[c::]:6789 error -101 [ 210.614149][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 210.652212][T10528] Cannot find set identified by id 2 to match [ 210.686085][ T41] audit: type=1326 audit(1785579204.485:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1247" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 210.699617][ T1348] usb 7-1: GET_CAPABILITIES returned 0 [ 210.703854][ T1348] usbtmc 7-1:16.0: can't read capabilities [ 210.712672][ T41] audit: type=1326 audit(1785579204.485:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1247" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 210.733197][ T41] audit: type=1326 audit(1785579204.485:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1247" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 210.756661][ T41] audit: type=1326 audit(1785579204.485:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1247" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71d73eb code=0x7ffc0000 [ 210.778123][ T41] audit: type=1326 audit(1785579204.485:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1247" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 210.796745][ T41] audit: type=1326 audit(1785579204.485:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1247" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 210.808265][ T41] audit: type=1326 audit(1785579204.485:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1247" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 210.823245][ T41] audit: type=1326 audit(1785579204.485:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1247" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71d73eb code=0x7ffc0000 [ 210.834940][ T41] audit: type=1326 audit(1785579204.485:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1247" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 210.844338][ T41] audit: type=1326 audit(1785579204.485:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10529 comm="syz.0.1247" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 210.907437][ T1348] libceph: connect (1)[c::]:6789 error -101 [ 210.912433][ T1348] libceph: mon0 (1)[c::]:6789 connect error [ 210.939701][ T1348] usb 7-1: USB disconnect, device number 16 [ 210.952555][ T5756] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 211.239270][ T5756] Bluetooth: hci3: command 0x0401 tx timeout [ 211.253022][T10531] ceph: No mds server is up or the cluster is laggy [ 211.918397][ T5756] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 211.923684][ T5756] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 211.990049][T10562] bridge0: port 1(syz_tun) entered blocking state [ 211.995422][T10562] bridge0: port 1(syz_tun) entered disabled state [ 211.998466][T10562] syz_tun: entered allmulticast mode [ 212.001757][T10562] syz_tun: entered promiscuous mode [ 212.006543][T10562] CIFS mount error: No usable UNC path provided in device string! [ 212.006543][T10562] [ 212.013430][T10562] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 212.017520][T10562] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1256'. [ 212.021490][T10562] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1256'. [ 212.025665][T10562] overlayfs: failed to resolve './file1/file0': -2 [ 212.876953][T10604] netlink: 'syz.2.1271': attribute type 2 has an invalid length. [ 213.379856][T10620] FAULT_INJECTION: forcing a failure. [ 213.379856][T10620] name failslab, interval 1, probability 0, space 0, times 0 [ 213.383967][T10620] CPU: 2 UID: 0 PID: 10620 Comm: syz.0.1276 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.383986][T10620] Tainted: [L]=SOFTLOCKUP [ 213.383990][T10620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.383997][T10620] Call Trace: [ 213.384002][T10620] [ 213.384007][T10620] dump_stack_lvl+0x100/0x190 [ 213.384028][T10620] should_fail_ex.cold+0x5/0xa [ 213.384043][T10620] should_failslab+0xc2/0x120 [ 213.384075][T10620] __kmalloc_noprof+0xfc/0x820 [ 213.384097][T10620] ? rcu_is_watching+0x12/0xc0 [ 213.384119][T10620] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 213.384182][T10620] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 213.384200][T10620] genl_family_rcv_msg_doit+0xc7/0x300 [ 213.384216][T10620] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 213.384230][T10620] ? genl_get_cmd+0x3e7/0x760 [ 213.384245][T10620] ? bpf_lsm_capable+0x9/0x10 [ 213.384264][T10620] ? security_capable+0x80/0x260 [ 213.384302][T10620] ? ns_capable+0xd2/0xf0 [ 213.384323][T10620] genl_rcv_msg+0x560/0x800 [ 213.384338][T10620] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.384352][T10620] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 213.384391][T10620] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 213.384404][T10620] ? __pfx_nl80211_post_doit+0x10/0x10 [ 213.384423][T10620] netlink_rcv_skb+0x159/0x420 [ 213.384436][T10620] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.384450][T10620] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 213.384468][T10620] ? netlink_deliver_tap+0x1ae/0xcc0 [ 213.384481][T10620] genl_rcv+0x28/0x40 [ 213.384493][T10620] netlink_unicast+0x585/0x850 [ 213.384507][T10620] ? __pfx_netlink_unicast+0x10/0x10 [ 213.384527][T10620] netlink_sendmsg+0x8b0/0xda0 [ 213.384542][T10620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.384555][T10620] ? apparmor_socket_sendmsg+0x15b/0x270 [ 213.384572][T10620] ____sys_sendmsg+0xa4d/0xbe0 [ 213.384596][T10620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.384609][T10620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.384626][T10620] ___sys_sendmsg+0x190/0x1e0 [ 213.384640][T10620] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.384658][T10620] ? find_held_lock+0x2b/0x80 [ 213.384683][T10620] __sys_sendmsg+0x160/0x210 [ 213.384701][T10620] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.384728][T10620] ? __pfx_ksys_write+0x10/0x10 [ 213.384747][T10620] __do_fast_syscall_32+0xe7/0x970 [ 213.384765][T10620] ? lockdep_hardirqs_on+0x78/0x100 [ 213.384780][T10620] do_fast_syscall_32+0x32/0x70 [ 213.384795][T10620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.384811][T10620] RIP: 0023:0xf7fd6fec [ 213.384825][T10620] Code: Unable to access opcode bytes at 0xf7fd6fc2. [ 213.384831][T10620] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 213.384842][T10620] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000b00 [ 213.384849][T10620] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.384856][T10620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.384862][T10620] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 213.384881][T10620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.384897][T10620] [ 213.493375][ T5756] Bluetooth: hci3: command 0x0401 tx timeout [ 214.019439][T10632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1279'. [ 214.029310][T10632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1279'. [ 214.032368][T10632] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 214.712263][T10657] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.876111][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'. [ 214.981465][T10667] netlink: 'syz.0.1289': attribute type 2 has an invalid length. [ 214.986062][T10667] netlink: 'syz.0.1289': attribute type 1 has an invalid length. [ 215.044335][T10673] fuse: fd is not a fuse device [ 215.073067][ T5455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 215.090125][T10675] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1291'. [ 215.302409][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 215.318821][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1297'. [ 215.323283][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1297'. [ 215.504864][T10702] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1302'. [ 215.514557][T10702] syzkaller0: left promiscuous mode [ 215.517156][T10702] syzkaller0: left allmulticast mode [ 215.747705][ T5752] Bluetooth: hci3: command 0x0401 tx timeout [ 217.032369][T10744] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 217.035158][T10744] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 217.042039][T10744] vhci_hcd vhci_hcd.0: Device attached [ 217.062605][T10744] netlink: 'syz.2.1315': attribute type 12 has an invalid length. [ 217.341023][ T5112] usb 42-1: SetAddress Request (6) to port 0 [ 217.343928][ T5112] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 217.824430][T10752] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1319'. [ 217.976745][T10746] vhci_hcd: connection reset by peer [ 217.987303][ T5832] vhci_hcd vhci_hcd.2: stop threads [ 217.989514][T10761] binder: 10760:10761 ioctl c00c6211 0 returned -14 [ 217.989542][ T5832] vhci_hcd vhci_hcd.2: release socket [ 218.001864][ T5832] vhci_hcd vhci_hcd.2: disconnect device [ 219.520957][T10800] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1328'. [ 219.859092][T10815] gfs2: error -5 reading superblock [ 219.990629][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'. [ 220.473648][T10854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.477193][T10854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.874477][T10861] overlayfs: empty lowerdir [ 220.957412][T10861] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1343'. [ 221.148686][T10866] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1345'. [ 221.208511][T10870] gretap1: entered promiscuous mode [ 221.630831][T10884] netlink: 'syz.3.1351': attribute type 1 has an invalid length. [ 221.635127][T10884] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1351'. [ 222.537436][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1359'. [ 223.438579][T10928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.518382][ T5112] usb 42-1: device descriptor read/8, error -110 [ 223.713909][T10933] 9p: Bad value for 'wfdno' [ 224.050077][ T5112] usb usb42-port1: attempt power cycle [ 224.116161][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'. [ 224.245875][T10956] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1373'. [ 224.656983][ T5112] usb usb42-port1: unable to enumerate USB device [ 224.763885][ T5752] Bluetooth: hci3: unexpected event for opcode 0xcafa [ 224.771371][ T5752] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 225.414518][ C0] sd 0:0:0:0: [sda] tag#24 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 225.420558][ C0] sd 0:0:0:0: [sda] tag#24 CDB: Test Unit Ready [ 225.444156][T10994] overlayfs: failed to resolve './cgroup': -2 [ 226.137207][T11009] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 226.140325][T11009] overlayfs: failed to set xattr on upper [ 226.143307][T11009] overlayfs: ...falling back to redirect_dir=nofollow. [ 226.146456][T11009] overlayfs: ...falling back to metacopy=off. [ 226.149251][T11009] overlayfs: ...falling back to index=off. [ 226.151950][T11009] overlayfs: ...falling back to uuid=null. [ 227.290039][ T5112] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 227.403947][T11082] overlayfs: failed to clone lowerpath [ 227.485174][ T5112] usb 7-1: Using ep0 maxpacket: 32 [ 227.490415][ T5112] usb 7-1: config 0 has no interfaces? [ 227.502646][ T5112] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 227.508676][ T5112] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 227.512735][ T5112] usb 7-1: Product: syz [ 227.514369][ T5112] usb 7-1: Manufacturer: syz [ 227.516457][ T5112] usb 7-1: SerialNumber: syz [ 227.548347][ T5112] usb 7-1: config 0 descriptor?? [ 228.998935][T11103] netlink: 'syz.0.1406': attribute type 10 has an invalid length. [ 229.913907][T11111] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1410'. [ 230.045648][ T5112] usb 7-1: USB disconnect, device number 17 [ 231.038280][T11138] raw_sendmsg: syz.1.1413 forgot to set AF_INET. Fix it! [ 231.072283][T11135] FAULT_INJECTION: forcing a failure. [ 231.072283][T11135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.082235][T11135] CPU: 1 UID: 0 PID: 11135 Comm: syz.3.1418 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.082256][T11135] Tainted: [L]=SOFTLOCKUP [ 231.082260][T11135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.082268][T11135] Call Trace: [ 231.082272][T11135] [ 231.082278][T11135] dump_stack_lvl+0x100/0x190 [ 231.082303][T11135] should_fail_ex.cold+0x5/0xa [ 231.082317][T11135] _copy_from_user+0x2e/0xd0 [ 231.082337][T11135] do_handle_open+0xeb/0xf20 [ 231.082363][T11135] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 231.082387][T11135] ? __pfx_do_handle_open+0x10/0x10 [ 231.082403][T11135] ? fput+0x79/0x100 [ 231.082418][T11135] ? ksys_write+0x1ac/0x250 [ 231.082428][T11135] ? __pfx_ksys_write+0x10/0x10 [ 231.082440][T11135] ? __do_fast_syscall_32+0xe7/0x970 [ 231.082460][T11135] __do_fast_syscall_32+0xe7/0x970 [ 231.082475][T11135] ? lockdep_hardirqs_on+0x78/0x100 [ 231.082489][T11135] do_fast_syscall_32+0x32/0x70 [ 231.082505][T11135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.082520][T11135] RIP: 0023:0xf70aefec [ 231.082535][T11135] Code: Unable to access opcode bytes at 0xf70aefc2. [ 231.082540][T11135] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000156 [ 231.082555][T11135] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 231.082562][T11135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.082568][T11135] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.082575][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.082581][T11135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.082595][T11135] [ 231.295177][T11135] overlayfs: failed lookup in lower (newroot/316, name='file1', err=-40): overlapping layers [ 231.790983][T11147] overlay: ./bus is not a directory [ 231.880315][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'. [ 232.370899][T11167] netlink: 'syz.3.1427': attribute type 39 has an invalid length. [ 232.378462][ T5752] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 232.381192][ T5752] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 233.435051][T11190] 9p: Bad value for 'rfdno' [ 234.027957][T11196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.031546][T11196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.035492][T11194] fuse: fd is not a fuse device [ 234.486765][T11207] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 234.489377][T11207] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 234.521572][T11207] vhci_hcd vhci_hcd.0: Device attached [ 234.789710][ T6206] usb 42-1: SetAddress Request (10) to port 0 [ 234.794112][ T6206] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 235.501388][T11233] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1446'. [ 235.578663][T11234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1445'. [ 235.761036][T11234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1445'. [ 236.268135][T11234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1445'. [ 236.384920][T11248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1449'. [ 236.489984][T11210] vhci_hcd: connection reset by peer [ 236.500944][ T5832] vhci_hcd vhci_hcd.2: stop threads [ 236.505106][ T5832] vhci_hcd vhci_hcd.2: release socket [ 236.508395][ T5832] vhci_hcd vhci_hcd.2: disconnect device [ 237.171580][T11255] 9p: p9: multiple sources not supported [ 237.772358][T11269] netlink: 'syz.2.1452': attribute type 1 has an invalid length. [ 237.795166][T11269] bond1: entered promiscuous mode [ 237.797099][T11269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.807147][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1452'. [ 237.810414][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1452'. [ 237.835369][T11269] bond1: (slave bridge2): making interface the new active one [ 237.837947][T11269] bridge2: entered promiscuous mode [ 237.841491][T11269] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 237.851884][T11274] syzkaller0: entered promiscuous mode [ 237.854720][T11274] syzkaller0: entered allmulticast mode [ 239.181703][T11308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.279079][T11311] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.731266][T11328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1473'. [ 239.777160][T11330] netlink: 'syz.1.1474': attribute type 1 has an invalid length. [ 239.802423][T11330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 239.950358][T11326] CIFS: Attempting to mount //127.0.0.1/share [ 239.969121][T11326] CIFS: VFS: Error connecting to socket. Aborting operation. [ 239.972791][T11326] CIFS: VFS: cifs_mount failed w/return code = -4 [ 240.100947][T11338] fuse: Bad value for 'rootmode' [ 240.284529][T11343] all (unregistering): Released all slaves [ 240.296297][ T6206] usb 42-1: device descriptor read/8, error -110 [ 240.331129][ T41] kauditd_printk_skb: 613 callbacks suppressed [ 240.331147][ T41] audit: type=1326 audit(1785579230.840:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.2.1477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 240.349756][T11347] syz.2.1477 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 240.353737][ T41] audit: type=1326 audit(1785579230.849:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.2.1477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 240.383800][ T41] audit: type=1326 audit(1785579230.849:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.2.1477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 240.403551][ T41] audit: type=1326 audit(1785579230.868:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.2.1477" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf702efec code=0x7ffc0000 [ 240.438003][ T41] audit: type=1326 audit(1785579230.877:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.2.1477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 240.438048][ T41] audit: type=1326 audit(1785579230.877:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.2.1477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 240.438086][ T41] audit: type=1326 audit(1785579230.877:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.2.1477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 240.438123][ T41] audit: type=1326 audit(1785579230.877:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.2.1477" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf702efec code=0x7ffc0000 [ 240.438160][ T41] audit: type=1326 audit(1785579230.877:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.2.1477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 240.438202][ T41] audit: type=1326 audit(1785579230.886:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.2.1477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 240.571068][T11349] netlink: 'syz.0.1479': attribute type 10 has an invalid length. [ 240.577106][T11349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1479'. [ 240.586159][T11349] dummy0: entered promiscuous mode [ 240.592334][T11349] bridge0: port 5(dummy0) entered blocking state [ 240.597495][T11349] bridge0: port 5(dummy0) entered disabled state [ 240.602446][T11349] dummy0: entered allmulticast mode [ 240.613040][T11349] bridge0: port 5(dummy0) entered blocking state [ 240.614977][T11349] bridge0: port 5(dummy0) entered listening state [ 240.640653][T11350] could not allocate digest TFM handle rmd256-generic [ 240.653259][T11349] fuse: Bad value for 'group_id' [ 240.654740][T11349] fuse: Bad value for 'group_id' [ 240.761775][ T6206] usb usb42-port1: attempt power cycle [ 241.383401][ T6206] usb usb42-port1: unable to enumerate USB device [ 241.452792][T11380] netlink: 'syz.2.1489': attribute type 1 has an invalid length. [ 241.495439][T11380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.526648][T11380] bond2: (slave gretap1): making interface the new active one [ 241.534200][T11380] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 241.651796][T11390] ehci-pci 0000:00:1d.7: remove, state 1 [ 241.661312][T11390] usb usb1: USB disconnect, device number 1 [ 241.664614][T11390] usb 1-1: USB disconnect, device number 2 [ 241.775399][T11396] 9pnet_fd: Insufficient options for proto=fd [ 241.949834][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1495'. [ 242.051944][T11390] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 242.135071][T11398] can0: slcan on ttyS3. [ 242.290961][T11398] can0 (unregistered): slcan off ttyS3. [ 242.415755][ T845] usb 2-1: new full-speed USB device number 2 using uhci_hcd [ 242.589487][ T845] usb 2-1: not running at top speed; connect to a high speed hub [ 242.634262][ T845] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 242.652058][ T845] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 242.663563][ T845] usb 2-1: Product: QEMU USB Tablet [ 242.679709][ T845] usb 2-1: Manufacturer: QEMU [ 242.692826][ T845] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 242.807093][T11423] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1499'. [ 242.988207][ T845] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0003/input/input14 [ 243.035322][ T845] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 243.138259][T11392] usb 2-1: USB disconnect, device number 2 [ 243.229535][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1500'. [ 243.280723][ T9969] udevd[9969]: symlink '../event3' '/dev/input/by-path/pci-0000:00:1d.0-usb-0:1-event-mouse.tmp-c13:67' failed: Read-only file system [ 243.364701][T11439] fido_id[11439]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/report_descriptor': No such file or directory [ 243.369194][T11446] pimreg: entered allmulticast mode [ 243.417780][T11447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.432155][T11447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.462544][ T9968] udevd[9968]: symlink '../mouse1' '/dev/input/by-path/pci-0000:00:1d.0-usb-0:1:1.0-mouse.tmp-c13:33' failed: Read-only file system [ 243.681531][T11392] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 243.702856][T11392] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 243.713702][T11392] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 243.731672][T11392] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 243.742775][T11392] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 243.748281][T11392] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 243.751824][T11392] usb usb1: Product: EHCI Host Controller [ 243.754614][T11392] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 243.757436][T11392] usb usb1: SerialNumber: 0000:00:1d.7 [ 243.787045][T11392] hub 1-0:1.0: USB hub found [ 243.792427][T11392] hub 1-0:1.0: 6 ports detected [ 243.854228][T11392] hub 2-0:1.0: USB hub found [ 243.857284][T11392] hub 2-0:1.0: 2 ports detected [ 243.909306][T11392] hub 3-0:1.0: USB hub found [ 243.911150][T11392] hub 3-0:1.0: 2 ports detected [ 243.962498][T11392] hub 4-0:1.0: USB hub found [ 243.965562][T11392] hub 4-0:1.0: 2 ports detected [ 244.101015][ T29] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 244.299361][ T29] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 244.307929][ T29] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 244.321264][ T29] usb 1-1: Product: QEMU USB Tablet [ 244.323587][ T29] usb 1-1: Manufacturer: QEMU [ 244.330512][ T29] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 244.332419][T11484] overlayfs: conflicting lowerdir path [ 244.364560][T11476] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 244.409202][ T29] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0004/input/input15 [ 244.420745][ T29] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 244.844982][ C0] sr 2:0:0:0: [sr0] tag#11 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 244.849374][ C0] sr 2:0:0:0: [sr0] tag#11 CDB: Test Unit Ready [ 245.118129][ T5857] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 245.282378][ T5857] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 245.285682][ T5857] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 245.290004][ T5857] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.294545][ T5857] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 245.298114][ T5857] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 245.302710][ T5857] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 245.305861][ T5857] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 245.310043][ T5857] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.314479][ T5857] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 245.320213][ T5857] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 245.325551][ T5857] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 245.328453][ T5857] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 245.331894][ T5857] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.335687][ T5857] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 245.339170][ T5857] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 245.345705][ T5857] usb 8-1: string descriptor 0 read error: -22 [ 245.347838][ T5857] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 245.351395][ T5857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.361125][ T5857] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 246.221055][T11529] ntfs3(nullb0): Primary boot signature is not NTFS. [ 246.224626][T11529] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 246.348805][T11533] netlink: 'syz.2.1519': attribute type 1 has an invalid length. [ 246.366245][T11533] bond3: entered promiscuous mode [ 246.368635][T11533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.196838][T11541] No such timeout policy "syz1" [ 247.299954][T11546] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1524'. [ 247.621272][ T5894] usb 8-1: USB disconnect, device number 14 [ 247.714758][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1527'. [ 248.025252][ T5752] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 248.029476][T11561] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1529'. [ 248.102810][T11565] input: syz1 as /devices/virtual/input/input16 [ 248.123528][T11565] db_root: cannot be changed because it's in use [ 248.688349][T11579] smbdirect: ib_dev[syz1] renamed to [syz0] [ 248.902355][T11587] tipc: Enabling of bearer rejected, already enabled [ 248.906114][T11587] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 248.917971][T11589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1537'. [ 249.207725][T11604] Invalid ELF header magic: != ELF [ 249.643836][T11607] netlink: 'syz.1.1542': attribute type 10 has an invalid length. [ 249.649380][T11607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.655058][T11607] team0: Device bond0 is of different type [ 250.100685][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1544'. [ 250.553905][T11634] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 250.654640][T11640] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1549'. [ 251.778861][T11660] netlink: 'syz.2.1556': attribute type 13 has an invalid length. [ 252.052803][T11669] hub 8-0:1.0: USB hub found [ 252.055122][T11669] hub 8-0:1.0: 1 port detected [ 252.175945][T11675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1562'. [ 252.244340][T11682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1564'. [ 252.249579][ T29] libceph: connect (1)[c::]:6789 error -101 [ 252.252339][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 252.254136][T11682] openvswitch: netlink: Flow key attr not present in new flow. [ 252.255508][ T29] libceph: connect (1)[c::]:6789 error -101 [ 252.261573][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 252.324346][ T5752] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 252.325587][T11680] ceph: No mds server is up or the cluster is laggy [ 252.338798][ T5752] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 252.611661][T11694] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.733162][T11699] CIFS mount error: No usable UNC path provided in device string! [ 252.733162][T11699] [ 252.738798][T11699] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 253.339407][ T41] kauditd_printk_skb: 318 callbacks suppressed [ 253.339427][ T41] audit: type=1800 audit(1785579242.845:1032): pid=11714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1575" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 253.508868][T11720] netlink: 'syz.2.1576': attribute type 2 has an invalid length. [ 253.518568][T11722] FAULT_INJECTION: forcing a failure. [ 253.518568][T11722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.523627][T11722] CPU: 3 UID: 0 PID: 11722 Comm: syz.0.1577 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.523662][T11722] Tainted: [L]=SOFTLOCKUP [ 253.523668][T11722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.523678][T11722] Call Trace: [ 253.523686][T11722] [ 253.523694][T11722] dump_stack_lvl+0x100/0x190 [ 253.523723][T11722] should_fail_ex.cold+0x5/0xa [ 253.523745][T11722] strncpy_from_user+0x3b/0x2d0 [ 253.523796][T11722] strncpy_from_user_nofault+0x81/0x180 [ 253.523845][T11722] bpf_probe_read_user_str+0x26/0x70 [ 253.523883][T11722] bpf_prog_80e7e8a273d19f42+0x46/0x4c [ 253.523899][T11722] bpf_test_run+0x39c/0xa40 [ 253.523928][T11722] ? bpf_test_run+0x1c6/0xa40 [ 253.523959][T11722] ? __pfx_bpf_test_run+0x10/0x10 [ 253.524013][T11722] bpf_prog_test_run_skb+0x15c4/0x3540 [ 253.524042][T11722] ? __fget_files+0x181/0x3d0 [ 253.524066][T11722] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 253.524088][T11722] ? fput+0x79/0x100 [ 253.524112][T11722] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 253.524131][T11722] __sys_bpf+0x2a12/0x4e80 [ 253.524167][T11722] ? __pfx___sys_bpf+0x10/0x10 [ 253.524187][T11722] ? find_held_lock+0x2b/0x80 [ 253.524210][T11722] ? get_pid_task+0xfc/0x250 [ 253.524233][T11722] ? get_pid_task+0xfc/0x250 [ 253.524260][T11722] ? proc_fail_nth_write+0x9f/0x220 [ 253.524285][T11722] ? find_held_lock+0x2b/0x80 [ 253.524311][T11722] ? rcu_read_lock_any_held+0x6a/0xa0 [ 253.524335][T11722] ? find_held_lock+0x2b/0x80 [ 253.524355][T11722] ? ksys_write+0x190/0x250 [ 253.524370][T11722] ? ksys_write+0x190/0x250 [ 253.524405][T11722] ? fput+0x79/0x100 [ 253.524426][T11722] ? __ia32_sys_bpf+0xcc/0x170 [ 253.524443][T11722] __ia32_sys_bpf+0xcc/0x170 [ 253.524463][T11722] ? __do_fast_syscall_32+0x98/0x970 [ 253.524490][T11722] __do_fast_syscall_32+0xe7/0x970 [ 253.524512][T11722] ? lockdep_hardirqs_on+0x78/0x100 [ 253.524535][T11722] do_fast_syscall_32+0x32/0x70 [ 253.524556][T11722] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 253.524577][T11722] RIP: 0023:0xf7fd6fec [ 253.524600][T11722] Code: Unable to access opcode bytes at 0xf7fd6fc2. [ 253.524608][T11722] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 253.524627][T11722] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000340 [ 253.524637][T11722] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.524653][T11722] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.524663][T11722] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 253.524674][T11722] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.524697][T11722] [ 253.625616][T11724] 9p: Bad value for 'rfdno' [ 253.625776][T11725] 9p: Bad value for 'rfdno' [ 253.635287][T11725] macsec1: entered allmulticast mode [ 253.638852][T11725] veth1_macvtap: entered allmulticast mode [ 253.643623][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1578'. [ 253.672229][T11724] veth1_macvtap (unregistering): left allmulticast mode [ 253.911120][T11738] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1584'. [ 254.072021][ T845] libceph: connect (1)[c::]:6789 error -101 [ 254.075069][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 254.128540][ T5752] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 254.129421][T11746] ceph: No mds server is up or the cluster is laggy [ 254.135159][ T5752] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 254.275946][ T5894] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 254.375037][T11757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1590'. [ 254.381021][T11759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.385292][T11759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.391588][T11757] smbdirect: ib_dev[syz0] removed [ 254.452384][ T5894] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 254.455792][ T5894] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 254.458913][ T5894] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 254.463427][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.472329][ T5894] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 254.481380][ T5894] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 254.626574][T11759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.630197][T11759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.230472][T11784] program syz.0.1601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.660838][T11787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1602'. [ 255.744152][T11793] fuse: Unknown parameter '0x000000000000059d0x00000000000000030000000000000000000000000000000000000000000' [ 255.916220][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'. [ 255.996848][T11806] set match dimension is over the limit! [ 256.299964][T11812] openvswitch: netlink: Flow key attr not present in new flow. [ 256.465541][T11814] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.473997][T11814] bridge0: port 1(bond4) entered blocking state [ 256.485650][T11814] bridge0: port 1(bond4) entered disabled state [ 256.494688][T11814] bond4: entered allmulticast mode [ 256.504799][T11814] bond4: entered promiscuous mode [ 256.539158][T11814] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 256.778265][T11820] bond0: entered promiscuous mode [ 256.781505][T11820] bond_slave_0: entered promiscuous mode [ 256.784117][T11820] bond_slave_1: entered promiscuous mode [ 256.795611][T11820] batadv0: entered promiscuous mode [ 256.803690][T11820] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 256.814447][T11820] bond0: left promiscuous mode [ 256.816562][T11820] bond_slave_0: left promiscuous mode [ 256.819072][T11820] bond_slave_1: left promiscuous mode [ 256.822409][T11820] batadv0: left promiscuous mode [ 257.108715][ C2] bridge0: port 5(dummy0) entered learning state [ 257.449431][ T10] usb 8-1: USB disconnect, device number 15 [ 257.467378][ T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 257.471571][ T10] spcp8x5 8-1:1.0: device disconnected [ 257.478539][T11831] fuse: fd is not a fuse device [ 258.374265][ T41] audit: type=1326 audit(1785579247.486:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf702efec code=0x7ffc0000 [ 258.383924][ T41] audit: type=1326 audit(1785579247.495:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf702f017 code=0x7ffc0000 [ 258.393047][ T41] audit: type=1326 audit(1785579247.495:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf702efec code=0x7ffc0000 [ 258.407958][ T41] audit: type=1326 audit(1785579247.495:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf702f017 code=0x7ffc0000 [ 258.426247][ T41] audit: type=1326 audit(1785579247.495:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf702efec code=0x7ffc0000 [ 258.437244][ T41] audit: type=1326 audit(1785579247.495:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf702f017 code=0x7ffc0000 [ 258.450246][ T41] audit: type=1326 audit(1785579247.495:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 258.463807][ T41] audit: type=1326 audit(1785579247.495:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf702efec code=0x7ffc0000 [ 258.475147][ T41] audit: type=1326 audit(1785579247.495:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf702f017 code=0x7ffc0000 [ 258.787590][ T41] kauditd_printk_skb: 209 callbacks suppressed [ 258.787611][ T41] audit: type=1326 audit(1785579247.846:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf702efec code=0x7ffc0000 [ 258.798895][ T41] audit: type=1326 audit(1785579247.864:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf702f017 code=0x7ffc0000 [ 258.807153][ T41] audit: type=1326 audit(1785579247.864:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf702efec code=0x7ffc0000 [ 258.814800][ T41] audit: type=1326 audit(1785579247.864:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf702f017 code=0x7ffc0000 [ 258.822430][ T41] audit: type=1326 audit(1785579247.864:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf702efec code=0x7ffc0000 [ 258.831645][ T41] audit: type=1326 audit(1785579247.864:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf702f017 code=0x7ffc0000 [ 258.838383][ T41] audit: type=1326 audit(1785579247.864:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf702efec code=0x7ffc0000 [ 258.845551][ T41] audit: type=1326 audit(1785579247.864:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf702f017 code=0x7ffc0000 [ 258.852830][ T41] audit: type=1326 audit(1785579247.864:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf702efec code=0x7ffc0000 [ 258.859612][ T41] audit: type=1326 audit(1785579247.864:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.2.1617" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf702f017 code=0x7ffc0000 [ 259.058537][T11864] tipc: Started in network mode [ 259.060241][T11864] tipc: Node identity b626392ceb95, cluster identity 4711 [ 259.062972][T11864] tipc: Enabled bearer , priority 0 [ 259.087278][T11864] tipc: Resetting bearer [ 259.091034][T11863] tipc: Resetting bearer [ 259.391482][ T5894] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 259.566727][ T5894] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 259.569976][ T5894] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 259.573152][ T5894] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 259.579425][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.601297][ T5894] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 259.610567][ T5894] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 259.864923][T11868] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 259.886739][T11868] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 259.928452][T11870] openvswitch: netlink: Flow key attr not present in new flow. [ 259.988480][T11871] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1629'. [ 260.204536][T11882] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1633'. [ 260.218881][ T5894] tipc: Node number set to 1572026668 [ 260.237205][ T108] tipc: Resetting bearer [ 262.430333][ T1348] usb 8-1: USB disconnect, device number 16 [ 262.444481][ T1348] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 262.458694][T11924] netlink: 'syz.2.1647': attribute type 2 has an invalid length. [ 262.460360][ T1348] spcp8x5 8-1:1.0: device disconnected [ 262.461837][T11924] netlink: 'syz.2.1647': attribute type 2 has an invalid length. [ 262.513027][T11924] syzkaller0: entered promiscuous mode [ 262.516576][T11924] syzkaller0: entered allmulticast mode [ 262.798872][T11934] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1650'. [ 262.913295][T11935] IPVS: set_ctl: invalid protocol: 0 33.0.0.0:512 [ 262.918767][T11935] IPVS: set_ctl: invalid protocol: 20551 0.0.0.0:64254 [ 263.837768][T11942] file system registered [ 263.859077][ T845] libceph: connect (1)[c::]:6789 error -101 [ 263.871599][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 263.944985][ T5752] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 263.945471][T11947] ceph: No mds server is up or the cluster is laggy [ 263.953809][ T5752] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 265.274817][ T41] kauditd_printk_skb: 6889 callbacks suppressed [ 265.274839][ T41] audit: type=1326 audit(1785579253.852:8150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11963 comm="syz.1.1659" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x0 [ 265.494338][T11968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.942182][T11973] ntfs3(sr0): Primary boot signature is not NTFS. [ 265.945627][T11973] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 265.964007][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'. [ 266.384206][T11984] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 266.423737][T11988] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1666'. [ 266.571305][T11995] netlink: 'syz.1.1668': attribute type 29 has an invalid length. [ 266.791081][T12000] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 267.330272][T12020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1675'. [ 267.371151][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 267.619345][T12030] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 267.628022][T12030] bond1 (unregistering): Released all slaves [ 267.712864][T12029] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 267.779990][T12029] bond1 (unregistering): Released all slaves [ 267.802977][T12035] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 267.806130][T12035] bridge1: entered promiscuous mode [ 268.002372][T12044] netlink: 'syz.3.1680': attribute type 3 has an invalid length. [ 268.005277][T12044] netlink: 'syz.3.1680': attribute type 3 has an invalid length. [ 268.008424][T12044] netlink: 'syz.3.1680': attribute type 3 has an invalid length. [ 268.011229][T12044] netlink: 'syz.3.1680': attribute type 3 has an invalid length. [ 268.014096][T12044] netlink: 'syz.3.1680': attribute type 3 has an invalid length. [ 268.016793][T12044] netlink: 'syz.3.1680': attribute type 3 has an invalid length. [ 268.019563][T12044] netlink: 'syz.3.1680': attribute type 3 has an invalid length. [ 268.022297][T12044] netlink: 'syz.3.1680': attribute type 3 has an invalid length. [ 268.025053][T12044] netlink: 'syz.3.1680': attribute type 3 has an invalid length. [ 268.027915][T12044] netlink: 'syz.3.1680': attribute type 3 has an invalid length. [ 268.034845][T12044] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1680'. [ 268.038032][T12044] openvswitch: netlink: Message has 512 unknown bytes. [ 268.283486][T12046] syzkaller0: entered promiscuous mode [ 268.286120][T12046] syzkaller0: entered allmulticast mode [ 269.134419][ T1348] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 269.297268][ T1348] usb 8-1: device descriptor read/64, error -71 [ 269.586363][T12086] fuse: Bad value for 'fd' [ 270.304981][ T1348] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 270.370279][T12098] input: syz1 as /devices/virtual/input/input17 [ 270.406280][ T845] hid-generic FFFF:0008:0003.0005: item fetching failed at offset 0/1 [ 270.409739][ T845] hid-generic FFFF:0008:0003.0005: probe with driver hid-generic failed with error -22 [ 270.445909][ T1348] usb 8-1: device descriptor read/64, error -71 [ 270.565504][ T1348] usb usb8-port1: attempt power cycle [ 270.944352][ T1348] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 270.969304][ T1348] usb 8-1: device descriptor read/8, error -71 [ 271.160095][T12103] tmpfs: Unknown parameter 'mpo' [ 271.226410][ T1348] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 271.262263][ T1348] usb 8-1: device descriptor read/8, error -71 [ 271.323932][T12117] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1706'. [ 271.378391][ T1348] usb usb8-port1: unable to enumerate USB device [ 271.419298][T12120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.426427][T12120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.443610][T12122] overlayfs: failed to resolve './file1': -2 [ 271.551218][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1707'. [ 272.180847][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1709'. [ 272.184741][T12130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1709'. [ 272.548371][ T1348] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 272.712620][ T1348] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.716055][ T1348] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 272.718978][ T1348] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.723643][ T1348] usb 8-1: config 0 descriptor?? [ 272.967331][T12130] bond1: Removing last ns target with arp_interval on [ 272.973254][ T1348] ath6kl: Failed to submit usb control message: -71 [ 272.978318][ T1348] ath6kl: unable to send the bmi data to the device: -71 [ 272.981369][ T1348] ath6kl: Unable to send get target info: -71 [ 273.001812][ T1348] ath6kl: Failed to init ath6kl core: -71 [ 273.006104][ T1348] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 273.020087][ T1348] usb 8-1: USB disconnect, device number 21 [ 273.751625][ C2] bridge0: port 5(dummy0) entered forwarding state [ 273.757089][ C2] bridge0: topology change detected, propagating [ 274.416838][ T41] audit: type=1326 audit(1785579262.295:8151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 274.424546][ T41] audit: type=1326 audit(1785579262.304:8152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 274.431755][ T41] audit: type=1326 audit(1785579262.304:8153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 274.463021][ T41] audit: type=1326 audit(1785579262.331:8154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 274.477564][ T41] audit: type=1326 audit(1785579262.331:8155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 274.499132][ T41] audit: type=1326 audit(1785579262.331:8156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 274.508288][ T41] audit: type=1326 audit(1785579262.331:8157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 274.531837][ T41] audit: type=1326 audit(1785579262.331:8158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 274.539967][ T41] audit: type=1326 audit(1785579262.331:8159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 274.563451][T12155] could not allocate digest TFM handle rmd256-generic [ 274.564121][ T41] audit: type=1326 audit(1785579262.331:8160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.1.1716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 274.829821][T12166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.832745][T12166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.070410][T12170] could not allocate digest TFM handle rmd256-generic [ 275.455344][T12184] CIFS mount error: No usable UNC path provided in device string! [ 275.455344][T12184] [ 275.459649][T12184] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 275.464224][T12184] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1726'. [ 275.468888][T12184] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1726'. [ 275.473424][T12184] overlayfs: missing 'lowerdir' [ 275.747718][T12197] validate_nla: 2 callbacks suppressed [ 275.747937][T12197] netlink: 'syz.0.1728': attribute type 39 has an invalid length. [ 276.074606][ T5752] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 276.081048][T12207] syz.3.1731: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 276.093008][T12207] CPU: 3 UID: 0 PID: 12207 Comm: syz.3.1731 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.093027][T12207] Tainted: [L]=SOFTLOCKUP [ 276.093032][T12207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 276.093039][T12207] Call Trace: [ 276.093044][T12207] [ 276.093049][T12207] dump_stack_lvl+0x100/0x190 [ 276.093068][T12207] warn_alloc.cold+0x94/0xa8 [ 276.093081][T12207] ? __pfx_warn_alloc+0x10/0x10 [ 276.093097][T12207] ? kasan_save_stack+0x3f/0x50 [ 276.093113][T12207] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 276.093125][T12207] ? xskq_create+0x52/0x1d0 [ 276.093138][T12207] ? xsk_setsockopt+0x743/0xab0 [ 276.093149][T12207] ? do_sock_setsockopt+0xf3/0x1d0 [ 276.093170][T12207] ? __sys_setsockopt+0x119/0x190 [ 276.093183][T12207] ? __ia32_sys_setsockopt+0xbc/0x160 [ 276.093197][T12207] ? __do_fast_syscall_32+0xe7/0x970 [ 276.093211][T12207] ? do_fast_syscall_32+0x32/0x70 [ 276.093228][T12207] ? xskq_create+0xfb/0x1d0 [ 276.093240][T12207] __vmalloc_node_range_noprof+0x136c/0x1630 [ 276.093278][T12207] ? xskq_create+0xfb/0x1d0 [ 276.093295][T12207] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 276.093314][T12207] ? kasan_save_track+0x14/0x30 [ 276.093328][T12207] ? __kasan_kmalloc+0xaa/0xb0 [ 276.093342][T12207] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 276.093353][T12207] ? xskq_create+0xfb/0x1d0 [ 276.093364][T12207] vmalloc_user_noprof+0x9e/0xe0 [ 276.093381][T12207] ? xskq_create+0xfb/0x1d0 [ 276.093393][T12207] xskq_create+0xfb/0x1d0 [ 276.093408][T12207] xsk_setsockopt+0x743/0xab0 [ 276.093420][T12207] ? __pfx_aa_sk_perm+0x10/0x10 [ 276.093436][T12207] ? __pfx_xsk_setsockopt+0x10/0x10 [ 276.093447][T12207] ? find_held_lock+0x2b/0x80 [ 276.093464][T12207] ? aa_sock_opt_perm+0xfe/0x1b0 [ 276.093477][T12207] ? __pfx_xsk_setsockopt+0x10/0x10 [ 276.093488][T12207] do_sock_setsockopt+0xf3/0x1d0 [ 276.093508][T12207] __sys_setsockopt+0x119/0x190 [ 276.093525][T12207] __ia32_sys_setsockopt+0xbc/0x160 [ 276.093538][T12207] ? __do_fast_syscall_32+0x98/0x970 [ 276.093553][T12207] ? lockdep_hardirqs_on+0x78/0x100 [ 276.093566][T12207] __do_fast_syscall_32+0xe7/0x970 [ 276.093580][T12207] ? lockdep_hardirqs_on+0x78/0x100 [ 276.093595][T12207] do_fast_syscall_32+0x32/0x70 [ 276.093610][T12207] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 276.093623][T12207] RIP: 0023:0xf70aefec [ 276.093640][T12207] Code: Unable to access opcode bytes at 0xf70aefc2. [ 276.093647][T12207] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 276.093669][T12207] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000011b [ 276.093679][T12207] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 276.093689][T12207] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.093698][T12207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.093708][T12207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.093731][T12207] [ 276.093739][T12207] Mem-Info: [ 276.104855][ T845] libceph: connect (1)[c::]:6789 error -101 [ 276.110094][T12207] active_anon:8823 inactive_anon:26799 isolated_anon:0 [ 276.110094][T12207] active_file:5528 inactive_file:20183 isolated_file:0 [ 276.110094][T12207] unevictable:769 dirty:477 writeback:0 [ 276.110094][T12207] slab_reclaimable:6340 slab_unreclaimable:57904 [ 276.110094][T12207] mapped:30693 shmem:30666 pagetables:1326 [ 276.110094][T12207] sec_pagetables:300 bounce:0 [ 276.110094][T12207] kernel_misc_reclaimable:0 [ 276.110094][T12207] free:28518 free_pcp:10175 free_cma:0 [ 276.114289][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 276.119096][T12207] Node 0 active_anon:2208kB inactive_anon:2552kB active_file:4kB inactive_file:5060kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:544kB dirty:272kB writeback:0kB shmem:5472kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8416kB pagetables:1484kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 276.125432][T12205] ceph: No mds server is up or the cluster is laggy [ 276.126543][ T845] libceph: connect (1)[c::]:6789 error -101 [ 276.127640][T12207] Node 1 active_anon:33284kB inactive_anon:104644kB active_file:22108kB inactive_file:75672kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:122428kB dirty:1636kB writeback:0kB shmem:117392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6468kB pagetables:3820kB sec_pagetables:80kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 276.132054][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 276.133280][T12207] Node 0 DMA free:2236kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 276.133341][T12207] lowmem_reserve[]: 0 280 280 280 280 [ 276.264507][T12207] Node 0 DMA32 free:20084kB boost:6144kB min:18916kB low:22108kB high:25300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2208kB inactive_anon:2552kB active_file:4kB inactive_file:5060kB unevictable:1536kB writepending:272kB zspages:0kB present:1032196kB managed:286900kB mlocked:0kB bounce:0kB free_pcp:6936kB local_pcp:3820kB free_cma:0kB [ 276.277159][T12207] lowmem_reserve[]: 0 0 0 0 0 [ 276.278728][T12207] Node 1 DMA32 free:90752kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29784kB inactive_anon:104644kB active_file:22108kB inactive_file:75672kB unevictable:1540kB writepending:1636kB zspages:1520kB present:1048432kB managed:948212kB mlocked:4kB bounce:0kB free_pcp:38208kB local_pcp:9080kB free_cma:0kB [ 276.289293][T12207] lowmem_reserve[]: 0 0 0 0 0 [ 276.290819][T12207] Node 0 DMA: 31*4kB (UM) 6*8kB (UM) 1*16kB (U) 4*32kB (U) 2*64kB (UM) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2236kB [ 276.295407][T12207] Node 0 DMA32: 441*4kB (UME) 152*8kB (UME) 47*16kB (UME) 125*32kB (UME) 51*64kB (UME) 21*128kB (UME) 7*256kB (UM) 1*512kB (M) 4*1024kB (M) 0*2048kB 0*4096kB = 20084kB [ 276.301024][T12207] Node 1 DMA32: 390*4kB (UE) 605*8kB (UME) 112*16kB (UE) 166*32kB (UME) 139*64kB (UME) 71*128kB (UME) 49*256kB (UME) 37*512kB (UME) 17*1024kB (UME) 1*2048kB (M) 2*4096kB (UM) = 90624kB [ 276.306896][T12207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.310238][T12207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 276.313365][T12207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.331292][T12207] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 276.334310][T12207] 55869 total pagecache pages [ 276.335802][T12207] 695 pages in swap cache [ 276.337150][T12207] Free swap = 119940kB [ 276.338458][T12207] Total swap = 124996kB [ 276.364588][T12207] 524155 pages RAM [ 276.368813][T12207] 0 pages HighMem/MovableOnly [ 276.384610][T12207] 211537 pages reserved [ 276.389097][T12207] 0 pages cma reserved [ 276.417559][ T845] libceph: connect (1)[c::]:6789 error -101 [ 276.422563][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 276.774544][T12216] FAULT_INJECTION: forcing a failure. [ 276.774544][T12216] name failslab, interval 1, probability 0, space 0, times 0 [ 276.784015][T12216] CPU: 2 UID: 0 PID: 12216 Comm: syz.3.1733 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.784046][T12216] Tainted: [L]=SOFTLOCKUP [ 276.784053][T12216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 276.784064][T12216] Call Trace: [ 276.784071][T12216] [ 276.784079][T12216] dump_stack_lvl+0x100/0x190 [ 276.784111][T12216] should_fail_ex.cold+0x5/0xa [ 276.784132][T12216] ? __pfx_write_leasetime+0x10/0x10 [ 276.784204][T12216] should_failslab+0xc2/0x120 [ 276.784231][T12216] ? __pfx_write_leasetime+0x10/0x10 [ 276.784256][T12216] __kmalloc_cache_noprof+0x91/0x6c0 [ 276.784279][T12216] ? simple_transaction_get+0x82/0x1a0 [ 276.784304][T12216] ? __pfx_write_leasetime+0x10/0x10 [ 276.784330][T12216] simple_transaction_get+0x82/0x1a0 [ 276.784351][T12216] nfsctl_transaction_write+0xcd/0x1a0 [ 276.784378][T12216] vfs_write+0x2aa/0x1050 [ 276.784398][T12216] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 276.784427][T12216] ? __pfx_vfs_write+0x10/0x10 [ 276.784443][T12216] ? find_held_lock+0x2b/0x80 [ 276.784469][T12216] ? __fget_files+0x215/0x3d0 [ 276.784510][T12216] ? __fget_files+0x21f/0x3d0 [ 276.784536][T12216] ksys_write+0x12a/0x250 [ 276.784554][T12216] ? __pfx_ksys_write+0x10/0x10 [ 276.784571][T12216] ? ksys_write+0x1ac/0x250 [ 276.784588][T12216] ? __pfx_ksys_write+0x10/0x10 [ 276.784611][T12216] __do_fast_syscall_32+0xe7/0x970 [ 276.784644][T12216] ? lockdep_hardirqs_on+0x78/0x100 [ 276.784669][T12216] do_fast_syscall_32+0x32/0x70 [ 276.784694][T12216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 276.784720][T12216] RIP: 0023:0xf70aefec [ 276.784740][T12216] Code: Unable to access opcode bytes at 0xf70aefc2. [ 276.784748][T12216] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 276.784767][T12216] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 276.784780][T12216] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 276.784790][T12216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.784801][T12216] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 276.784811][T12216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.784835][T12216] [ 276.918371][T12223] CIFS mount error: No usable UNC path provided in device string! [ 276.918371][T12223] [ 276.922047][T12223] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 276.925847][T12223] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1736'. [ 276.932308][T12223] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1736'. [ 276.936213][T12223] overlayfs: missing 'lowerdir' [ 276.983660][T12214] read descriptors [ 278.140731][ T5743] ffs_data_put(): freeing [ 278.255327][T12239] could not allocate digest TFM handle rmd256-generic [ 278.742659][T12247] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1743'. [ 278.828597][T12259] CIFS mount error: No usable UNC path provided in device string! [ 278.828597][T12259] [ 278.833228][T12259] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 278.839548][T12259] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1745'. [ 278.843794][T12259] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1745'. [ 278.848929][T12259] overlayfs: missing 'lowerdir' [ 278.913555][T12262] : Can't lookup blockdev [ 278.938149][T12262] lo speed is unknown, defaulting to 1000 [ 278.945112][T12262] lo speed is unknown, defaulting to 1000 [ 278.988620][T12262] lo speed is unknown, defaulting to 1000 [ 279.007099][T12262] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 279.013654][T12262] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 279.019301][T12262] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 279.088585][T12262] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 279.147850][T12270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1748'. [ 279.203913][T12262] lo speed is unknown, defaulting to 1000 [ 279.218941][T12262] lo speed is unknown, defaulting to 1000 [ 279.250284][T12262] lo speed is unknown, defaulting to 1000 [ 279.261561][T12262] lo speed is unknown, defaulting to 1000 [ 279.843430][ T41] kauditd_printk_skb: 1433 callbacks suppressed [ 279.843446][ T41] audit: type=1326 audit(1785579267.305:9594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.1746" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d73eb code=0x7ffc0000 [ 279.858527][ T41] audit: type=1326 audit(1785579267.314:9595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.1746" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d73eb code=0x7ffc0000 [ 279.873894][ T41] audit: type=1326 audit(1785579267.314:9596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.1746" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d73eb code=0x7ffc0000 [ 279.891382][ T41] audit: type=1326 audit(1785579267.314:9597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.1746" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d73eb code=0x7ffc0000 [ 279.908052][ T41] audit: type=1326 audit(1785579267.314:9598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.1746" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d73eb code=0x7ffc0000 [ 279.924454][ T41] audit: type=1326 audit(1785579267.314:9599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.1746" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d73eb code=0x7ffc0000 [ 279.939028][ T41] audit: type=1326 audit(1785579267.314:9600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.1746" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d73eb code=0x7ffc0000 [ 279.953371][ T41] audit: type=1326 audit(1785579267.314:9601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.1746" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d73eb code=0x7ffc0000 [ 279.965731][ T41] audit: type=1326 audit(1785579267.314:9602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.1746" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d73eb code=0x7ffc0000 [ 279.978934][ T41] audit: type=1326 audit(1785579267.323:9603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.0.1746" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71d73eb code=0x7ffc0000 [ 280.018852][T12303] bridge3: entered promiscuous mode [ 280.084036][T12271] could not allocate digest TFM handle rmd256-generic [ 281.062351][T12333] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 281.117523][T12333] nfs4: Unknown parameter '\:' [ 281.233287][T12331] could not allocate digest TFM handle rmd256-generic [ 281.650074][T12341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1758'. [ 281.720467][T12343] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1759'. [ 281.739991][T12345] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1761'. [ 281.784836][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1760'. [ 282.122788][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 282.130097][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 282.217556][T12367] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 282.219873][T12367] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 282.222810][T12367] vhci_hcd vhci_hcd.0: Device attached [ 282.554900][ T29] usb 42-1: SetAddress Request (14) to port 0 [ 282.559103][ T29] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 282.836154][T12388] syzkaller0: entered promiscuous mode [ 282.838428][T12388] syzkaller0: entered allmulticast mode [ 282.870402][T12378] vhci_hcd: connection reset by peer [ 282.873269][ T5832] vhci_hcd vhci_hcd.2: stop threads [ 282.878107][ T5832] vhci_hcd vhci_hcd.2: release socket [ 282.880486][ T5832] vhci_hcd vhci_hcd.2: disconnect device [ 283.098291][ T40] libceph: connect (1)[c::]:6789 error -101 [ 283.102067][ T40] libceph: mon0 (1)[c::]:6789 connect error [ 283.162774][ T5752] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 283.166444][T12395] ceph: No mds server is up or the cluster is laggy [ 283.175287][ T5752] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 283.236024][ T5752] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 283.290368][T12402] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 283.308517][ T204] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.311649][ T204] bridge0: port 2(bridge_slave_1) entered listening state [ 284.156855][ T5833] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.410092][T12432] __nla_validate_parse: 3 callbacks suppressed [ 284.410105][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1782'. [ 284.454497][T12432] hsr_slave_0: left promiscuous mode [ 284.461244][T12432] hsr_slave_1: left promiscuous mode [ 285.346931][T12442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1787'. [ 285.375001][ T5897] IPVS: starting estimator thread 0... [ 285.514731][T12455] batadv_slave_0: Caught tx_queue_len zero misconfig [ 285.575451][T12448] IPVS: using max 47 ests per chain, 112800 per kthread [ 285.615817][T12460] overlayfs: missing 'lowerdir' [ 285.692733][T12463] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 285.694834][T12463] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 285.701192][T12463] vhci_hcd vhci_hcd.0: Device attached [ 286.052752][T12472] infiniband syz1: set down [ 286.054403][T12472] infiniband syz1: added veth0 [ 286.064440][ T845] usb 44-1: SetAddress Request (6) to port 0 [ 286.077969][T12472] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 286.085085][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'. [ 286.087198][ T845] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 286.088009][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'. [ 286.095929][T12472] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 286.115845][T12472] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 286.340407][T12472] RDS/IB: syz1: added [ 286.349579][T12472] smc: adding ib device syz1 with port count 1 [ 286.354029][T12472] smc: ib device syz1 port 1 has no pnetid [ 286.491469][T12478] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1798'. [ 286.517795][T12464] vhci_hcd: connection reset by peer [ 286.524454][ T5833] vhci_hcd vhci_hcd.3: stop threads [ 286.531984][ T5833] vhci_hcd vhci_hcd.3: release socket [ 286.537268][ T5833] vhci_hcd vhci_hcd.3: disconnect device [ 286.827058][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 286.833498][ T5752] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 286.869403][T12490] FAULT_INJECTION: forcing a failure. [ 286.869403][T12490] name failslab, interval 1, probability 0, space 0, times 0 [ 286.876917][T12490] CPU: 2 UID: 0 PID: 12490 Comm: syz.2.1804 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.876936][T12490] Tainted: [L]=SOFTLOCKUP [ 286.876940][T12490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 286.876947][T12490] Call Trace: [ 286.876951][T12490] [ 286.876956][T12490] dump_stack_lvl+0x100/0x190 [ 286.876975][T12490] should_fail_ex.cold+0x5/0xa [ 286.876988][T12490] should_failslab+0xc2/0x120 [ 286.877006][T12490] kmem_cache_alloc_noprof+0x91/0x6a0 [ 286.877020][T12490] ? __pfx_map_id_range_down+0x10/0x10 [ 286.877050][T12490] ? security_inode_alloc+0x3b/0x2c0 [ 286.877068][T12490] security_inode_alloc+0x3b/0x2c0 [ 286.877082][T12490] inode_init_always_gfp+0xc77/0xfb0 [ 286.877096][T12490] alloc_inode+0x8e/0x250 [ 286.877110][T12490] new_inode+0x22/0x1c0 [ 286.877126][T12490] __debugfs_create_file+0x105/0x4f0 [ 286.877159][T12490] debugfs_create_file_full+0x41/0x60 [ 286.877177][T12490] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 286.877189][T12490] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 286.877212][T12490] ? lockdep_init_map_type+0x5c/0x250 [ 286.877242][T12490] ? __pfx_bond_setup+0x10/0x10 [ 286.877276][T12490] alloc_netdev_mqs+0x314/0x15c0 [ 286.877303][T12490] rtnl_create_link+0xc13/0xf80 [ 286.877323][T12490] rtnl_newlink+0x13bd/0x2380 [ 286.877344][T12490] ? __pfx_rtnl_newlink+0x10/0x10 [ 286.877359][T12490] ? is_bpf_text_address+0x8a/0x1a0 [ 286.877377][T12490] ? __kernel_text_address+0xd/0x30 [ 286.877395][T12490] ? unwind_get_return_address+0x59/0xa0 [ 286.877435][T12490] ? find_held_lock+0x2b/0x80 [ 286.877449][T12490] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 286.877465][T12490] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 286.877482][T12490] ? __pfx_rtnl_newlink+0x10/0x10 [ 286.877499][T12490] rtnetlink_rcv_msg+0x95e/0xe90 [ 286.877521][T12490] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.877540][T12490] ? __lock_acquire+0x49f/0x1a40 [ 286.877561][T12490] netlink_rcv_skb+0x159/0x420 [ 286.877573][T12490] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.877591][T12490] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.877608][T12490] ? netlink_deliver_tap+0x1ae/0xcc0 [ 286.877623][T12490] netlink_unicast+0x585/0x850 [ 286.877637][T12490] ? __pfx_netlink_unicast+0x10/0x10 [ 286.877653][T12490] netlink_sendmsg+0x8b0/0xda0 [ 286.877667][T12490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.877681][T12490] ? apparmor_socket_sendmsg+0x15b/0x270 [ 286.877697][T12490] ____sys_sendmsg+0xa4d/0xbe0 [ 286.877707][T12490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.877721][T12490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.877739][T12490] ___sys_sendmsg+0x190/0x1e0 [ 286.877752][T12490] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.877771][T12490] ? find_held_lock+0x2b/0x80 [ 286.877793][T12490] __sys_sendmsg+0x160/0x210 [ 286.877809][T12490] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.877828][T12490] ? __pfx_ksys_write+0x10/0x10 [ 286.877842][T12490] __do_fast_syscall_32+0xe7/0x970 [ 286.877859][T12490] ? lockdep_hardirqs_on+0x78/0x100 [ 286.877874][T12490] do_fast_syscall_32+0x32/0x70 [ 286.877889][T12490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.877904][T12490] RIP: 0023:0xf702efec [ 286.877919][T12490] Code: Unable to access opcode bytes at 0xf702efc2. [ 286.877923][T12490] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 286.877935][T12490] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 286.877942][T12490] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.877949][T12490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.877955][T12490] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 286.877961][T12490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.877975][T12490] [ 286.878145][T12490] debugfs: out of free dentries, can not create file 'netdev@ffff88804e61c700' [ 287.125641][ T56] hid-generic 1000:0000:0000.0006: unknown main item tag 0x0 [ 287.129374][ T56] hid-generic 1000:0000:0000.0006: unknown main item tag 0x0 [ 287.175206][ T56] hid-generic 1000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 287.314575][ T41] kauditd_printk_skb: 459 callbacks suppressed [ 287.314612][ T41] audit: type=1326 audit(1785579274.197:10063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.0.1805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 287.329157][ T41] audit: type=1326 audit(1785579274.197:10064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.0.1805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 287.350172][ T41] audit: type=1326 audit(1785579274.197:10065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.0.1805" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 287.358365][ T41] audit: type=1326 audit(1785579274.216:10066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.0.1805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 287.367777][ T41] audit: type=1326 audit(1785579274.216:10067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.0.1805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 287.375139][ T41] audit: type=1326 audit(1785579274.216:10068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.0.1805" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 287.381812][ T41] audit: type=1326 audit(1785579274.216:10069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.0.1805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 287.389806][ T41] audit: type=1326 audit(1785579274.216:10070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.0.1805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 287.396527][ T41] audit: type=1326 audit(1785579274.225:10071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.0.1805" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 287.403712][ T41] audit: type=1326 audit(1785579274.225:10072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12493 comm="syz.0.1805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fec code=0x7ffc0000 [ 287.474017][T12496] read descriptors [ 287.707304][T12505] ffs_data_put(): freeing [ 288.058266][ T29] usb 42-1: device descriptor read/8, error -110 [ 288.172813][ T5742] ffs_data_put(): freeing [ 288.188128][T12513] netlink: 'syz.0.1810': attribute type 21 has an invalid length. [ 288.288166][T12523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1812'. [ 288.295353][T12510] could not allocate digest TFM handle rmd256-generic [ 288.357832][T12523] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 288.491852][ T29] usb usb42-port1: attempt power cycle [ 288.755215][T12536] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1815'. [ 288.823541][T12540] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1815'. [ 289.120425][ T29] usb usb42-port1: unable to enumerate USB device [ 289.382220][T12555] could not allocate digest TFM handle rmd256-generic [ 289.526677][T12572] random: crng reseeded on system resumption [ 289.765015][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1827'. [ 289.775007][T12586] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.801590][T12586] bridge_slave_1 (unregistering): left allmulticast mode [ 289.804860][T12586] bridge_slave_1 (unregistering): left promiscuous mode [ 289.807634][T12586] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.180679][T12598] tipc: Enabling of bearer rejected, already enabled [ 290.302033][T12608] [U] ]4 [ 290.303574][T12608] [U] #iqVi-롉JZ [ 290.305194][T12608] [U] IIP~-) [ 290.306542][T12608] [U] Z;كQ-Dٱ#XnuSYܼ'G=!FŖo$r"i%8G^Giסdj}Dz*0U]Cb`޷ڮF= qȟ:yWBzB~Kp1}\a^6q&28S [ 290.311797][T12608] [U] B>4Ё4@".'4M}b-'ߨʣ5,N[C5e;cZ[ #Hۺk(J`FI/XA3-jHjJ5M0VN£`))sڌj@C [ 290.315906][T12608] [U] $TJӫ⤎RvAGO /c"&w{M5a+y] [ 290.781238][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1841'. [ 290.785729][T12618] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 290.959681][T12612] read descriptors [ 291.354157][ T5743] ffs_data_put(): freeing [ 291.409067][T12633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1844'. [ 291.461816][T12633] 8021q: adding VLAN 0 to HW filter on device bond6 [ 291.532358][T12637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1845'. [ 291.536511][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1845'. [ 291.611985][ T845] usb 44-1: device descriptor read/8, error -110 [ 291.877879][T12643] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 291.921849][T12646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1848'. [ 292.041760][T12649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.045895][T12649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.100730][ T845] usb usb44-port1: attempt power cycle [ 292.720870][ T845] usb usb44-port1: unable to enumerate USB device [ 293.052087][T12656] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 293.056277][T12656] FAULT_INJECTION: forcing a failure. [ 293.056277][T12656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.061159][T12656] CPU: 1 UID: 0 PID: 12656 Comm: syz.2.1852 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.061178][T12656] Tainted: [L]=SOFTLOCKUP [ 293.061183][T12656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 293.061189][T12656] Call Trace: [ 293.061194][T12656] [ 293.061199][T12656] dump_stack_lvl+0x100/0x190 [ 293.061220][T12656] should_fail_ex.cold+0x5/0xa [ 293.061234][T12656] _copy_to_user+0x32/0xd0 [ 293.061254][T12656] simple_read_from_buffer+0xcb/0x170 [ 293.061274][T12656] proc_fail_nth_read+0x1af/0x230 [ 293.061290][T12656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.061307][T12656] ? rw_verify_area+0xce/0x6d0 [ 293.061324][T12656] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.061339][T12656] vfs_read+0x1e4/0xb40 [ 293.061363][T12656] ? __pfx_vfs_read+0x10/0x10 [ 293.061374][T12656] ? find_held_lock+0x2b/0x80 [ 293.061390][T12656] ? __fget_files+0x215/0x3d0 [ 293.061403][T12656] ? __fget_files+0x21f/0x3d0 [ 293.061417][T12656] ksys_read+0x12a/0x250 [ 293.061428][T12656] ? __pfx_ksys_read+0x10/0x10 [ 293.061442][T12656] do_int80_emulation+0x14b/0x720 [ 293.061461][T12656] asm_int80_emulation+0x1a/0x20 [ 293.061473][T12656] RIP: 0023:0xf71673eb [ 293.061483][T12656] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 293.061494][T12656] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 293.061506][T12656] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f541d5d0 [ 293.061512][T12656] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 293.061519][T12656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.061525][T12656] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 293.061532][T12656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.061546][T12656] [ 293.202623][ T845] libceph: connect (1)[c::]:6789 error -101 [ 293.205123][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 293.294562][ T5752] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 293.308254][T12657] ceph: No mds server is up or the cluster is laggy [ 293.487321][ T845] libceph: connect (1)[c::]:6789 error -101 [ 293.497882][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 293.588172][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'. [ 293.704563][T12669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1853'. [ 293.730632][ T5752] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 293.750529][ T845] libceph: connect (1)[c::]:6789 error -101 [ 293.756520][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 293.785854][T12670] ceph: No mds server is up or the cluster is laggy [ 293.796874][T12667] 8021q: adding VLAN 0 to HW filter on device bond6 [ 294.436814][T12676] ffs_data_put(): freeing [ 294.592080][T12678] read descriptors [ 294.698180][T12691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1860'. [ 294.838964][T12697] syzkaller0: entered promiscuous mode [ 294.840797][T12697] syzkaller0: entered allmulticast mode [ 294.974755][ T5741] ffs_data_put(): freeing [ 295.067062][T12699] FAULT_INJECTION: forcing a failure. [ 295.067062][T12699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.071357][T12699] CPU: 0 UID: 0 PID: 12699 Comm: syz.2.1863 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.071376][T12699] Tainted: [L]=SOFTLOCKUP [ 295.071380][T12699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 295.071386][T12699] Call Trace: [ 295.071391][T12699] [ 295.071396][T12699] dump_stack_lvl+0x100/0x190 [ 295.071415][T12699] should_fail_ex.cold+0x5/0xa [ 295.071430][T12699] __kvm_read_guest_page+0x186/0x250 [ 295.071471][T12699] kvm_fetch_guest_virt+0x128/0x1a0 [ 295.071498][T12699] __do_insn_fetch_bytes+0x5e2/0x7b0 [ 295.071514][T12699] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 295.071529][T12699] ? __pfx_kvm_tdp_mmu_map+0x10/0x10 [ 295.071551][T12699] x86_decode_insn+0x3ca/0x6da0 [ 295.071569][T12699] ? kvm_tdp_page_fault+0x295/0x3d0 [ 295.071587][T12699] ? __pfx_x86_decode_insn+0x10/0x10 [ 295.071606][T12699] ? vmx_flush_tlb_current+0x130/0x610 [ 295.071619][T12699] ? init_decode_cache+0xd/0x2b0 [ 295.071636][T12699] ? init_emulate_ctxt+0x43c/0x700 [ 295.071655][T12699] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 295.071677][T12699] x86_emulate_instruction+0x1052/0x1df0 [ 295.071694][T12699] ? kvm_mmu_page_fault+0x289/0x1ab0 [ 295.071708][T12699] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 295.071728][T12699] handle_ud+0x100/0x5b0 [ 295.071741][T12699] ? __pfx_handle_ud+0x10/0x10 [ 295.071754][T12699] ? rcu_qs+0x2a/0xe0 [ 295.071767][T12699] ? rcu_note_context_switch+0x174/0x19c0 [ 295.071782][T12699] ? __lock_acquire+0x49f/0x1a40 [ 295.071801][T12699] ? __vmx_complete_interrupts+0x129/0x570 [ 295.071818][T12699] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 295.071838][T12699] handle_exception_nmi+0xd0c/0x1af0 [ 295.071854][T12699] ? __pfx_handle_exception_nmi+0x10/0x10 [ 295.071869][T12699] vmx_handle_exit+0x4d6/0x1ef0 [ 295.071887][T12699] vcpu_run+0x35ab/0x5de0 [ 295.071900][T12699] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 295.071923][T12699] ? __pfx_vcpu_run+0x10/0x10 [ 295.071942][T12699] ? rcu_is_watching+0x12/0xc0 [ 295.071957][T12699] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 295.071972][T12699] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 295.071991][T12699] kvm_vcpu_ioctl+0x730/0x1700 [ 295.072003][T12699] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 295.072014][T12699] ? tomoyo_path_number_perm+0x188/0x580 [ 295.072049][T12699] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 295.072065][T12699] ? get_pid_task+0x106/0x250 [ 295.072083][T12699] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 295.072100][T12699] ? do_vfs_ioctl+0x226/0x13e0 [ 295.072118][T12699] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 295.072140][T12699] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 295.072152][T12699] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 295.072164][T12699] ? __fget_files+0x21f/0x3d0 [ 295.072178][T12699] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 295.072189][T12699] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 295.072208][T12699] __do_fast_syscall_32+0xe7/0x970 [ 295.072225][T12699] ? lockdep_hardirqs_on+0x78/0x100 [ 295.072240][T12699] do_fast_syscall_32+0x32/0x70 [ 295.072255][T12699] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.072270][T12699] RIP: 0023:0xf702efec [ 295.072284][T12699] Code: Unable to access opcode bytes at 0xf702efc2. [ 295.072289][T12699] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 295.072301][T12699] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 295.072307][T12699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.072314][T12699] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.072320][T12699] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 295.072326][T12699] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.072340][T12699] [ 295.288418][T12710] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 295.368289][T12715] fuse: Unknown parameter 'roomode)' [ 295.368835][T12717] fuse: Unknown parameter 'roomode)' [ 295.670961][T12730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1871'. [ 295.850443][T12738] 9p: Bad value for 'wfdno' [ 295.908344][T12741] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 295.912362][T12741] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 296.048075][T12751] netlink: 'syz.1.1881': attribute type 2 has an invalid length. [ 297.047021][T12762] tipc: Resetting bearer [ 297.050835][T12762] syzkaller0: left promiscuous mode [ 297.053118][T12762] syzkaller0: left allmulticast mode [ 297.056345][T12762] tipc: Enabling of bearer rejected, already enabled [ 297.105404][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1885'. [ 297.110548][T12761] tipc: Resetting bearer [ 297.529759][ T6808] tipc: Resetting bearer [ 298.030995][T12741] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.032967][T12741] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 298.040278][ T5752] Bluetooth: hci2: command 0x0406 tx timeout [ 298.093077][ T5752] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.108412][ T6163] bridge0: port 1(syz_tun) entered disabled state [ 298.112350][ T5752] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.115637][ T5752] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.135745][ T6163] syz_tun (unregistering): left allmulticast mode [ 298.138898][ T6163] syz_tun (unregistering): left promiscuous mode [ 298.141859][ T6163] bridge0: port 1(syz_tun) entered disabled state [ 298.146029][ T5752] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.156335][ T5752] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.176834][ T5756] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.181078][ T5756] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.184418][ T5756] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.189787][ T5756] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.193401][ T5756] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.428285][T12756] lo speed is unknown, defaulting to 1000 [ 298.539627][T12806] sctp: [Deprecated]: syz.3.1894 (pid 12806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.539627][T12806] Use struct sctp_sack_info instead [ 298.914060][T12756] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.917291][T12756] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.922191][T12756] bridge_slave_0: entered allmulticast mode [ 298.927743][T12756] bridge_slave_0: entered promiscuous mode [ 298.929379][T12832] syz.0.1897: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 298.933597][T12756] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.935023][T12832] CPU: 2 UID: 0 PID: 12832 Comm: syz.0.1897 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.935047][T12832] Tainted: [L]=SOFTLOCKUP [ 298.935053][T12832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.935062][T12832] Call Trace: [ 298.935069][T12832] [ 298.935076][T12832] dump_stack_lvl+0x100/0x190 [ 298.935100][T12832] warn_alloc.cold+0x94/0xa8 [ 298.935119][T12832] ? __pfx_warn_alloc+0x10/0x10 [ 298.935141][T12832] ? kasan_save_stack+0x3f/0x50 [ 298.935162][T12832] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 298.935177][T12832] ? xskq_create+0x52/0x1d0 [ 298.935195][T12832] ? xsk_setsockopt+0x743/0xab0 [ 298.935210][T12832] ? do_sock_setsockopt+0xf3/0x1d0 [ 298.935235][T12832] ? __sys_setsockopt+0x119/0x190 [ 298.935253][T12832] ? __ia32_sys_setsockopt+0xbc/0x160 [ 298.935296][T12832] ? __do_fast_syscall_32+0xe7/0x970 [ 298.935318][T12832] ? do_fast_syscall_32+0x32/0x70 [ 298.935343][T12832] ? xskq_create+0xfb/0x1d0 [ 298.935362][T12832] __vmalloc_node_range_noprof+0x136c/0x1630 [ 298.935396][T12832] ? xskq_create+0xfb/0x1d0 [ 298.935419][T12832] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 298.935446][T12832] ? kasan_save_track+0x14/0x30 [ 298.935466][T12832] ? __kasan_kmalloc+0xaa/0xb0 [ 298.935484][T12832] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 298.935499][T12832] ? xskq_create+0xfb/0x1d0 [ 298.935515][T12832] vmalloc_user_noprof+0x9e/0xe0 [ 298.935538][T12832] ? xskq_create+0xfb/0x1d0 [ 298.935554][T12832] xskq_create+0xfb/0x1d0 [ 298.935572][T12832] xsk_setsockopt+0x743/0xab0 [ 298.935586][T12832] ? __pfx_aa_sk_perm+0x10/0x10 [ 298.935608][T12832] ? __pfx_xsk_setsockopt+0x10/0x10 [ 298.935628][T12832] ? find_held_lock+0x2b/0x80 [ 298.935652][T12832] ? aa_sock_opt_perm+0xfe/0x1b0 [ 298.935670][T12832] ? __pfx_xsk_setsockopt+0x10/0x10 [ 298.935687][T12832] do_sock_setsockopt+0xf3/0x1d0 [ 298.935714][T12832] __sys_setsockopt+0x119/0x190 [ 298.935738][T12832] __ia32_sys_setsockopt+0xbc/0x160 [ 298.935759][T12832] ? __do_fast_syscall_32+0x98/0x970 [ 298.935780][T12832] ? lockdep_hardirqs_on+0x78/0x100 [ 298.935800][T12832] __do_fast_syscall_32+0xe7/0x970 [ 298.935821][T12832] ? lockdep_hardirqs_on+0x78/0x100 [ 298.935842][T12832] do_fast_syscall_32+0x32/0x70 [ 298.935862][T12832] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.935881][T12832] RIP: 0023:0xf7fd6fec [ 298.935901][T12832] Code: Unable to access opcode bytes at 0xf7fd6fc2. [ 298.935908][T12832] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 298.935922][T12832] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000011b [ 298.935931][T12832] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 298.935939][T12832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.935947][T12832] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 298.935955][T12832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.935975][T12832] [ 298.935982][T12832] Mem-Info: [ 298.942811][T12756] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.943079][T12832] active_anon:5701 inactive_anon:19886 isolated_anon:0 [ 298.943079][T12832] active_file:6433 inactive_file:16794 isolated_file:0 [ 298.943079][T12832] unevictable:768 dirty:330 writeback:0 [ 298.943079][T12832] slab_reclaimable:6440 slab_unreclaimable:60902 [ 298.943079][T12832] mapped:25516 shmem:20572 pagetables:1236 [ 298.943079][T12832] sec_pagetables:300 bounce:0 [ 298.943079][T12832] kernel_misc_reclaimable:0 [ 298.943079][T12832] free:35456 free_pcp:13587 free_cma:0 [ 298.948856][T12756] bridge_slave_1: entered allmulticast mode [ 298.951237][T12832] Node 0 active_anon:3408kB inactive_anon:1228kB active_file:4kB inactive_file:5060kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:544kB dirty:0kB writeback:0kB shmem:5468kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8288kB pagetables:1428kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 298.953587][T12756] bridge_slave_1: entered promiscuous mode [ 298.954042][T12832] Node 1 active_anon:16796kB inactive_anon:78316kB active_file:25728kB inactive_file:62116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101520kB dirty:1320kB writeback:0kB shmem:74320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6436kB pagetables:3516kB sec_pagetables:80kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 298.990907][T12756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.997917][T12832] Node 0 [ 298.999869][T12756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.009893][T12832] DMA free:2236kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 299.110455][T12832] lowmem_reserve[]: 0 280 280 280 280 [ 299.112721][T12832] Node 0 DMA32 free:19924kB boost:8192kB min:20964kB low:24156kB high:27348kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3408kB inactive_anon:1228kB active_file:4kB inactive_file:5060kB unevictable:1536kB writepending:0kB zspages:0kB present:1032196kB managed:286900kB mlocked:0kB bounce:0kB free_pcp:10272kB local_pcp:992kB free_cma:0kB [ 299.124431][T12832] lowmem_reserve[]: 0 0 0 0 0 [ 299.126185][T12832] Node 1 DMA32 free:119152kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15296kB inactive_anon:78316kB active_file:25728kB inactive_file:62116kB unevictable:1536kB writepending:1320kB zspages:1360kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:48056kB local_pcp:13656kB free_cma:0kB [ 299.138112][T12832] lowmem_reserve[]: 0 0 0 0 0 [ 299.139871][T12832] Node 0 DMA: 31*4kB (UM) 6*8kB (UM) 1*16kB (U) 4*32kB (U) 2*64kB (UM) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2236kB [ 299.143690][T12756] team0: Port device team_slave_0 added [ 299.145299][T12832] Node 0 DMA32: 327*4kB (UME) 139*8kB (UME) 38*16kB (UME) 136*32kB (UME) 56*64kB (UME) 20*128kB (UME) 9*256kB (UM) 0*512kB 4*1024kB (M) 0*2048kB 0*4096kB = 19924kB [ 299.148766][T12756] team0: Port device team_slave_1 added [ 299.152866][T12832] Node 1 DMA32: 11*4kB (E) 336*8kB (ME) 586*16kB (UME) 207*32kB (UM) 207*64kB (UME) 118*128kB (UME) 63*256kB (UME) 36*512kB (UME) 0*1024kB 0*2048kB 9*4096kB (U) = 118508kB [ 299.174592][T12832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.175139][T12756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.178327][T12832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 299.180850][T12756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.183815][T12832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.183831][T12832] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 299.183843][T12832] 42090 total pagecache pages [ 299.183849][T12832] 541 pages in swap cache [ 299.183854][T12832] Free swap = 120768kB [ 299.183860][T12832] Total swap = 124996kB [ 299.183867][T12832] 524155 pages RAM [ 299.192857][T12756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.194074][T12756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.196413][T12832] 0 pages HighMem/MovableOnly [ 299.200070][T12756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.201509][T12832] 211537 pages reserved [ 299.201517][T12832] 0 pages cma reserved [ 299.227418][T12756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.261902][T12756] hsr_slave_0: entered promiscuous mode [ 299.264993][T12756] hsr_slave_1: entered promiscuous mode [ 299.267043][T12756] debugfs: 'hsr0' already exists in 'hsr' [ 299.268888][T12756] Cannot create hsr debugfs directory [ 299.347090][T12840] gadgetfs: bound to dummy_udc driver [ 299.357405][T12840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.361525][T12840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.405047][T12840] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1900'. [ 299.607443][T12756] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 299.820902][T12756] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 299.832507][T12756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.835416][T12756] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 299.857142][T12756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 299.862508][T12756] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 299.869535][T12756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.874718][T12756] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 299.879145][T12756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 299.932997][T12756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.942895][T12756] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.945797][T12851] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 299.950770][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.953214][T12851] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 299.953850][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.966067][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.969160][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.341919][T12875] xt_connbytes: Forcing CT accounting to be enabled [ 300.344956][T12875] xt_TPROXY: Can be used only with -p tcp or -p udp [ 300.359741][T12876] netlink: 'syz.3.1910': attribute type 2 has an invalid length. [ 300.461947][ T5752] Bluetooth: hci4: command tx timeout [ 300.634889][T12888] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 300.697890][T12756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.716795][T12887] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 300.767849][T12756] veth0_vlan: entered promiscuous mode [ 300.787326][T12756] veth1_vlan: entered promiscuous mode [ 300.817621][T12756] veth0_macvtap: entered promiscuous mode [ 300.823304][T12756] veth1_macvtap: entered promiscuous mode [ 300.836070][T12756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.844903][T12756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.905562][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.916626][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.966095][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.967873][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.980650][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.027679][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.044358][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.048555][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.235874][T12897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1913'. [ 301.257724][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1883'. [ 301.457281][T12911] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1915'. [ 301.870828][T12926] syzkaller0: entered promiscuous mode [ 301.873310][T12926] syzkaller0: entered allmulticast mode [ 301.939760][T12928] /dev/sg0: Can't lookup blockdev [ 302.045076][T12930] program syz.0.1925 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.382641][T12944] bond2 (unregistering): Released all slaves [ 302.686017][ T41] kauditd_printk_skb: 791 callbacks suppressed [ 302.686066][ T41] audit: type=1804 audit(1785579288.370:10864): pid=12953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1931" name="bus" dev="ramfs" ino=46871 res=1 errno=0 [ 302.710028][ T5752] Bluetooth: hci4: command tx timeout [ 302.721825][ T41] audit: type=1804 audit(1785579288.407:10865): pid=12953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1931" name="file0" dev="ramfs" ino=46870 res=1 errno=0 [ 302.958913][T12957] lo speed is unknown, defaulting to 1000 [ 302.963061][T12957] lo speed is unknown, defaulting to 1000 [ 302.966817][T12957] lo speed is unknown, defaulting to 1000 [ 302.971518][T12957] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 302.977401][T12957] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 302.986138][T12957] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 303.006377][T12957] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 303.038751][T12957] lo speed is unknown, defaulting to 1000 [ 303.047485][T12957] lo speed is unknown, defaulting to 1000 [ 303.050149][T12957] lo speed is unknown, defaulting to 1000 [ 303.054078][T12957] lo speed is unknown, defaulting to 1000 [ 303.057241][T12957] lo speed is unknown, defaulting to 1000 [ 303.099508][T12961] netlink: 'syz.1.1933': attribute type 11 has an invalid length. [ 303.195505][T12963] FAULT_INJECTION: forcing a failure. [ 303.195505][T12963] name failslab, interval 1, probability 0, space 0, times 0 [ 303.200658][T12963] CPU: 1 UID: 0 PID: 12963 Comm: syz.1.1934 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.200686][T12963] Tainted: [L]=SOFTLOCKUP [ 303.200692][T12963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 303.200699][T12963] Call Trace: [ 303.200704][T12963] [ 303.200709][T12963] dump_stack_lvl+0x100/0x190 [ 303.200730][T12963] should_fail_ex.cold+0x5/0xa [ 303.200744][T12963] should_failslab+0xc2/0x120 [ 303.200762][T12963] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 303.200778][T12963] ? __alloc_skb+0x140/0x710 [ 303.200797][T12963] __alloc_skb+0x140/0x710 [ 303.200811][T12963] ? __alloc_skb+0x5b7/0x710 [ 303.200824][T12963] ? __pfx___alloc_skb+0x10/0x10 [ 303.200843][T12963] hci_sock_sendmsg+0x1b01/0x2620 [ 303.200878][T12963] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 303.200893][T12963] ? apparmor_socket_sendmsg+0x15b/0x270 [ 303.200909][T12963] sock_write_iter+0x53a/0x5b0 [ 303.200921][T12963] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 303.200935][T12963] ? __pfx_sock_write_iter+0x10/0x10 [ 303.200950][T12963] ? bpf_lsm_file_permission+0x9/0x10 [ 303.200962][T12963] ? security_file_permission+0x76/0x210 [ 303.200978][T12963] ? rw_verify_area+0xce/0x6d0 [ 303.200997][T12963] vfs_write+0x6ac/0x1050 [ 303.201008][T12963] ? __pfx_sock_write_iter+0x10/0x10 [ 303.201020][T12963] ? __pfx_vfs_write+0x10/0x10 [ 303.201030][T12963] ? find_held_lock+0x2b/0x80 [ 303.201054][T12963] ksys_write+0x1f8/0x250 [ 303.201065][T12963] ? __pfx_ksys_write+0x10/0x10 [ 303.201075][T12963] ? ksys_write+0x1ac/0x250 [ 303.201084][T12963] ? __pfx_ksys_write+0x10/0x10 [ 303.201098][T12963] __do_fast_syscall_32+0xe7/0x970 [ 303.201114][T12963] ? lockdep_hardirqs_on+0x78/0x100 [ 303.201129][T12963] do_fast_syscall_32+0x32/0x70 [ 303.201145][T12963] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.201160][T12963] RIP: 0023:0xf7f65fec [ 303.201175][T12963] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 303.201180][T12963] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 303.201192][T12963] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 303.201199][T12963] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 303.201205][T12963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.201212][T12963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.201218][T12963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.201232][T12963] [ 303.347518][T12965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1935'. [ 303.378726][T12970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1937'. [ 303.552295][ T41] audit: type=1400 audit(1785579289.173:10866): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="/dev/ptmx" pid=12969 comm="syz.1.1937" [ 303.619168][T12976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.633073][ T41] audit: type=1800 audit(1785579289.256:10867): pid=12976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1939" name="UDC" dev="configfs" ino=45506 res=0 errno=0 [ 303.636681][T12976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.643702][T12976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.656324][T12965] veth7: entered allmulticast mode [ 303.694246][T12965] bond2: (slave veth7): Enslaving as an active interface with an up link [ 303.697915][T12970] batadv_slave_1: entered promiscuous mode [ 303.735349][T12971] bond2 (unregistering): (slave veth7): Releasing backup interface [ 303.741101][T12971] bond2 (unregistering): Released all slaves [ 303.762206][T12969] batadv_slave_1: left promiscuous mode [ 303.895235][T12979] syzkaller0: entered promiscuous mode [ 303.897017][T12979] syzkaller0: entered allmulticast mode [ 304.855106][ T41] audit: type=1326 audit(1785579290.372:10868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12993 comm="syz.2.1946" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 304.977802][ T34] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 305.066870][T12994] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.160884][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.163938][ T34] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 305.167410][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 305.170778][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 305.174342][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 305.179266][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 305.182526][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.185108][ T34] usb 8-1: Product: syz [ 305.186441][ T34] usb 8-1: Manufacturer: syz [ 305.191387][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 305.195560][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 305.198359][ T34] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 305.200306][ T34] cdc_wdm 8-1:1.0: Unknown control protocol [ 305.305253][T12994] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.446706][T12994] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.801418][T13013] futex_wake_op: syz.3.1944 tries to shift op by 144; fix this program [ 305.835164][T13013] futex_wake_op: syz.3.1944 tries to shift op by 144; fix this program [ 306.069595][ T5815] usb 8-1: USB disconnect, device number 22 [ 306.120618][T13018] loop4: detected capacity change from 0 to 524287936 [ 306.210793][T13020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.225878][T13020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.279409][ T9969] udevd[9969]: symlink '../../loop4' '/dev/disk/by-diskseq/88.tmp-b7:4' failed: Read-only file system [ 306.286972][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1953'. [ 306.303295][ T9968] udevd[9968]: symlink '../../loop4' '/dev/disk/by-diskseq/88.tmp-b7:4' failed: Read-only file system [ 306.311750][ T9968] udevd[9968]: symlink '../../loop4' '/dev/disk/by-diskseq/88.tmp-b7:4' failed: Read-only file system [ 306.348370][T13022] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 306.438126][ T5752] Bluetooth: hci4: command tx timeout [ 307.340915][T13043] Mass Storage Function, version: 2009/09/11 [ 307.350202][T13043] LUN: removable file: (no medium) [ 307.356614][ T41] audit: type=1800 audit(1785579292.679:10869): pid=13042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1955" name="file" dev="configfs" ino=47107 res=0 errno=0 [ 307.372787][T13042] [ 307.373706][T13042] ====================================================== [ 307.375910][T13042] WARNING: possible circular locking dependency detected [ 307.378093][T13042] syzkaller #0 Tainted: G L [ 307.380296][T13042] ------------------------------------------------------ [ 307.382648][T13042] syz.3.1955/13042 is trying to acquire lock: [ 307.384579][T13042] ffff888013bfc450 (sb_writers#5){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 307.387506][T13042] [ 307.387506][T13042] but task is already holding lock: [ 307.389908][T13042] ffff88806b539920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 307.392929][T13042] [ 307.392929][T13042] which lock already depends on the new lock. [ 307.392929][T13042] [ 307.396142][T13042] [ 307.396142][T13042] the existing dependency chain (in reverse order) is: [ 307.398924][T13042] [ 307.398924][T13042] -> #6 (&common->filesem){++++}-{4:4}: [ 307.401512][T13042] lock_acquire+0x1b9/0x370 [ 307.403139][T13042] down_read+0x99/0x4c0 [ 307.404658][T13042] fsg_show_file+0x20/0x180 [ 307.406249][T13042] configfs_read_iter+0x426/0x6f0 [ 307.407998][T13042] __kernel_read+0x397/0xad0 [ 307.409617][T13042] integrity_kernel_read+0x7e/0xb0 [ 307.411692][T13042] ima_calc_file_hash_tfm+0x25e/0x350 [ 307.414159][T13042] ima_calc_file_hash+0x1e3/0x380 [ 307.416458][T13042] ima_collect_measurement+0x94f/0xb30 [ 307.418956][T13042] process_measurement+0xdfe/0x2350 [ 307.421319][T13042] ima_file_check+0xcc/0x120 [ 307.423462][T13042] security_file_post_open+0xc4/0x210 [ 307.425914][T13042] path_openat+0x985/0x4280 [ 307.428001][T13042] do_file_open+0x20e/0x430 [ 307.430068][T13042] do_sys_openat2+0x10f/0x1e0 [ 307.432234][T13042] __ia32_compat_sys_openat+0x12d/0x210 [ 307.434800][T13042] __do_fast_syscall_32+0xe7/0x970 [ 307.437140][T13042] do_fast_syscall_32+0x32/0x70 [ 307.439399][T13042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.442212][T13042] [ 307.442212][T13042] -> #5 (&p->frag_sem){.+.+}-{4:4}: [ 307.445245][T13042] lock_acquire+0x1b9/0x370 [ 307.447352][T13042] down_read+0x99/0x4c0 [ 307.449326][T13042] configfs_write_iter+0x218/0x4e0 [ 307.451637][T13042] vfs_write+0x6ac/0x1050 [ 307.453679][T13042] ksys_write+0x12a/0x250 [ 307.455726][T13042] __do_fast_syscall_32+0xe7/0x970 [ 307.458034][T13042] do_fast_syscall_32+0x32/0x70 [ 307.460262][T13042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.463030][T13042] [ 307.463030][T13042] -> #4 (&buffer->mutex#2){+.+.}-{4:4}: [ 307.466216][T13042] lock_acquire+0x1b9/0x370 [ 307.468324][T13042] __mutex_lock+0x1a4/0x1bd0 [ 307.470486][T13042] configfs_read_iter+0x79/0x6f0 [ 307.472756][T13042] __kernel_read+0x397/0xad0 [ 307.474914][T13042] integrity_kernel_read+0x7e/0xb0 [ 307.477217][T13042] ima_calc_file_hash_tfm+0x25e/0x350 [ 307.479697][T13042] ima_calc_file_hash+0x1e3/0x380 [ 307.481970][T13042] ima_collect_measurement+0x94f/0xb30 [ 307.484510][T13042] process_measurement+0xdfe/0x2350 [ 307.486875][T13042] ima_file_check+0xcc/0x120 [ 307.489026][T13042] security_file_post_open+0xc4/0x210 [ 307.491367][T13042] path_openat+0x985/0x4280 [ 307.493499][T13042] do_file_open+0x20e/0x430 [ 307.495641][T13042] do_sys_openat2+0x10f/0x1e0 [ 307.497790][T13042] __ia32_compat_sys_openat+0x12d/0x210 [ 307.500319][T13042] __do_fast_syscall_32+0xe7/0x970 [ 307.502684][T13042] do_fast_syscall_32+0x32/0x70 [ 307.504897][T13042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.507693][T13042] [ 307.507693][T13042] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 307.511167][T13042] lock_acquire+0x1b9/0x370 [ 307.513328][T13042] __mutex_lock+0x1a4/0x1bd0 [ 307.515502][T13042] process_measurement+0x5ab/0x2350 [ 307.517848][T13042] ima_file_check+0xcc/0x120 [ 307.520113][T13042] security_file_post_open+0xc4/0x210 [ 307.522671][T13042] path_openat+0x985/0x4280 [ 307.524575][T13042] do_file_open_root+0x2f6/0x5a0 [ 307.526223][T13042] file_open_root+0x1c6/0x3f0 [ 307.528283][T13042] kernel_read_file_from_path_initns+0x189/0x260 [ 307.531100][T13042] _request_firmware+0x733/0x13c0 [ 307.533454][T13042] request_firmware+0x35/0x50 [ 307.535651][T13042] reg_reload_regdb+0x85/0x460 [ 307.537869][T13042] genl_family_rcv_msg_doit+0x214/0x300 [ 307.540365][T13042] genl_rcv_msg+0x560/0x800 [ 307.542469][T13042] netlink_rcv_skb+0x159/0x420 [ 307.544724][T13042] genl_rcv+0x28/0x40 [ 307.546614][T13042] netlink_unicast+0x585/0x850 [ 307.548829][T13042] netlink_sendmsg+0x8b0/0xda0 [ 307.551025][T13042] ____sys_sendmsg+0xa4d/0xbe0 [ 307.553248][T13042] ___sys_sendmsg+0x190/0x1e0 [ 307.555466][T13042] __sys_sendmsg+0x160/0x210 [ 307.557597][T13042] __do_fast_syscall_32+0xe7/0x970 [ 307.559947][T13042] do_fast_syscall_32+0x32/0x70 [ 307.562214][T13042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.565096][T13042] [ 307.565096][T13042] -> #2 (cb_lock){++++}-{4:4}: [ 307.567994][T13042] lock_acquire+0x1b9/0x370 [ 307.570092][T13042] down_read+0x99/0x4c0 [ 307.572046][T13042] genl_rcv+0x19/0x40 [ 307.573977][T13042] netlink_unicast+0x585/0x850 [ 307.576213][T13042] netlink_sendmsg+0x8b0/0xda0 [ 307.578481][T13042] sock_sendmsg+0x394/0x410 [ 307.580627][T13042] splice_to_socket+0xb3c/0x11a0 [ 307.582903][T13042] do_splice+0x109c/0x1f90 [ 307.585009][T13042] __do_splice+0x33b/0x370 [ 307.587042][T13042] __ia32_sys_splice+0x189/0x250 [ 307.589259][T13042] do_int80_emulation+0x14b/0x720 [ 307.591552][T13042] asm_int80_emulation+0x1a/0x20 [ 307.593786][T13042] [ 307.593786][T13042] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 307.596872][T13042] lock_acquire+0x1b9/0x370 [ 307.598983][T13042] __mutex_lock+0x1a4/0x1bd0 [ 307.601129][T13042] pipe_lock+0x69/0x80 [ 307.603116][T13042] iter_file_splice_write+0x1fd/0x10b0 [ 307.605621][T13042] do_splice+0x109c/0x1f90 [ 307.607704][T13042] __do_splice+0x33b/0x370 [ 307.609695][T13042] __ia32_sys_splice+0x189/0x250 [ 307.611934][T13042] __do_fast_syscall_32+0xe7/0x970 [ 307.614246][T13042] do_fast_syscall_32+0x32/0x70 [ 307.616506][T13042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.619366][T13042] [ 307.619366][T13042] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 307.622376][T13042] check_prev_add+0xeb/0xe60 [ 307.624537][T13042] __lock_acquire+0x136c/0x1a40 [ 307.626762][T13042] lock_acquire+0x1b9/0x370 [ 307.628862][T13042] mnt_want_write+0x6f/0x410 [ 307.630929][T13042] path_openat+0xad9/0x4280 [ 307.633087][T13042] do_file_open+0x20e/0x430 [ 307.635245][T13042] file_open_name+0x1c3/0x3e0 [ 307.637320][T13042] filp_open+0x2e/0x50 [ 307.639283][T13042] fsg_lun_open+0x6b/0x7b0 [ 307.641331][T13042] fsg_store_file+0x1e7/0x450 [ 307.643546][T13042] configfs_write_iter+0x302/0x4e0 [ 307.645889][T13042] vfs_write+0x6ac/0x1050 [ 307.647963][T13042] ksys_write+0x12a/0x250 [ 307.649966][T13042] __do_fast_syscall_32+0xe7/0x970 [ 307.652318][T13042] do_fast_syscall_32+0x32/0x70 [ 307.654615][T13042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.657436][T13042] [ 307.657436][T13042] other info that might help us debug this: [ 307.657436][T13042] [ 307.661602][T13042] Chain exists of: [ 307.661602][T13042] sb_writers#5 --> &p->frag_sem --> &common->filesem [ 307.661602][T13042] [ 307.666746][T13042] Possible unsafe locking scenario: [ 307.666746][T13042] [ 307.669796][T13042] CPU0 CPU1 [ 307.671993][T13042] ---- ---- [ 307.674266][T13042] lock(&common->filesem); [ 307.676026][T13042] lock(&p->frag_sem); [ 307.678775][T13042] lock(&common->filesem); [ 307.681615][T13042] rlock(sb_writers#5); [ 307.683467][T13042] [ 307.683467][T13042] *** DEADLOCK *** [ 307.683467][T13042] [ 307.686779][T13042] 5 locks held by syz.3.1955/13042: [ 307.689083][T13042] #0: ffff8880296307f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 307.692841][T13042] #1: ffff888021dba450 (sb_writers#20){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 307.696581][T13042] #2: ffff88804023c880 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 307.700686][T13042] #3: ffff88806c7fc470 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 307.704667][T13042] #4: ffff88806b539920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 307.708578][T13042] [ 307.708578][T13042] stack backtrace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 307.710977][T13042] CPU: 0 UID: 0 PID: 13042 Comm: syz.3.1955 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.711009][T13042] Tainted: [L]=SOFTLOCKUP [ 307.711016][T13042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 307.711026][T13042] Call Trace: [ 307.711036][T13042] [ 307.711045][T13042] dump_stack_lvl+0x100/0x190 [ 307.711069][T13042] print_circular_bug.cold+0x178/0x1c7 [ 307.711099][T13042] check_noncircular+0x146/0x160 [ 307.711128][T13042] check_prev_add+0xeb/0xe60 [ 307.711151][T13042] ? mark_held_locks+0x40/0x70 [ 307.711177][T13042] __lock_acquire+0x136c/0x1a40 [ 307.711207][T13042] lock_acquire+0x1b9/0x370 [ 307.711257][T13042] ? path_openat+0xad9/0x4280 [ 307.711276][T13042] ? __pfx___might_resched+0x10/0x10 [ 307.711321][T13042] mnt_want_write+0x6f/0x410 [ 307.711345][T13042] ? path_openat+0xad9/0x4280 [ 307.711360][T13042] path_openat+0xad9/0x4280 [ 307.711378][T13042] ? __pfx_path_openat+0x10/0x10 [ 307.711393][T13042] ? kasan_save_stack+0x3f/0x50 [ 307.711413][T13042] ? kasan_save_stack+0x30/0x50 [ 307.711432][T13042] ? kasan_save_track+0x14/0x30 [ 307.711449][T13042] ? __kasan_slab_alloc+0x89/0x90 [ 307.711470][T13042] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 307.711489][T13042] ? do_getname_kernel+0x5d/0x250 [ 307.711505][T13042] ? filp_open+0x1d/0x50 [ 307.711522][T13042] ? fsg_lun_open+0x6b/0x7b0 [ 307.711546][T13042] do_file_open+0x20e/0x430 [ 307.711564][T13042] ? __pfx_do_file_open+0x10/0x10 [ 307.711591][T13042] ? rcu_is_watching+0x12/0xc0 [ 307.711616][T13042] file_open_name+0x1c3/0x3e0 [ 307.711637][T13042] ? __pfx_file_open_name+0x10/0x10 [ 307.711658][T13042] ? do_getname_kernel+0x5d/0x250 [ 307.711678][T13042] ? __asan_memcpy+0x3c/0x60 [ 307.711695][T13042] ? do_getname_kernel+0x1be/0x250 [ 307.711716][T13042] filp_open+0x2e/0x50 [ 307.711735][T13042] fsg_lun_open+0x6b/0x7b0 [ 307.711756][T13042] ? __pfx_down_read+0x10/0x10 [ 307.711781][T13042] fsg_store_file+0x1e7/0x450 [ 307.711802][T13042] configfs_write_iter+0x302/0x4e0 [ 307.711820][T13042] vfs_write+0x6ac/0x1050 [ 307.711836][T13042] ? __pfx_configfs_write_iter+0x10/0x10 [ 307.711854][T13042] ? __pfx_vfs_write+0x10/0x10 [ 307.711868][T13042] ? find_held_lock+0x2b/0x80 [ 307.711897][T13042] ksys_write+0x12a/0x250 [ 307.711913][T13042] ? __pfx_ksys_write+0x10/0x10 [ 307.711932][T13042] __do_fast_syscall_32+0xe7/0x970 [ 307.711959][T13042] do_fast_syscall_32+0x32/0x70 [ 307.711982][T13042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.712015][T13042] RIP: 0023:0xf70aefec [ 307.712040][T13042] Code: Unable to access opcode bytes at 0xf70aefc2. [ 307.712048][T13042] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 307.712065][T13042] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000380 [ 307.712077][T13042] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.712087][T13042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.712098][T13042] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 307.712108][T13042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.712125][T13042] [ 307.847582][T13042] mass_storage.0/lun.0: unable to open backing file: file0 [ 308.097622][T13040] bridge0: port 3(syz_tun) entered disabled state [ 308.114005][T13040] syz_tun (unregistering): left allmulticast mode [ 308.116418][T13040] syz_tun (unregistering): left promiscuous mode [ 308.119119][T13040] bridge0: port 3(syz_tun) entered disabled state [ 308.296019][T13041] syz_tun (unregistering): left allmulticast mode [ 308.298883][T13041] syz_tun (unregistering): left promiscuous mode [ 308.301671][T13041] bridge0: port 1(syz_tun) entered disabled state [ 308.370671][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.436538][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.481494][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.555444][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.659966][ T13] bridge_slave_1: left allmulticast mode [ 308.661781][ T13] bridge_slave_1: left promiscuous mode [ 308.663642][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.666666][ T13] bridge_slave_0: left allmulticast mode [ 308.668516][ T13] bridge_slave_0: left promiscuous mode [ 308.670325][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.721483][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.726286][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.730377][ T13] bond0 (unregistering): Released all slaves [ 308.852221][ T5455] 8021q: adding VLAN 0 to HW filter on device eth2 [ 308.954171][ T5455] 8021q: adding VLAN 0 to HW filter on device eth3 [ 309.052473][ T13] hsr_slave_0: left promiscuous mode [ 309.055405][ T13] hsr_slave_1: left promiscuous mode [ 309.058138][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.061440][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.064527][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.066947][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.071470][ T13] veth1_macvtap: left promiscuous mode [ 309.073414][ T13] veth0_macvtap: left promiscuous mode [ 309.075070][ T13] veth1_vlan: left promiscuous mode [ 309.076732][ T13] veth0_vlan: left promiscuous mode [ 309.139317][ T13] team0 (unregistering): Port device team_slave_1 removed [ 309.143725][ T13] team0 (unregistering): Port device team_slave_0 removed [ 309.184340][ T5455] 8021q: adding VLAN 0 to HW filter on device eth4 [ 309.311826][ T5455] 8021q: adding VLAN 0 to HW filter on device eth5 [ 309.594040][ T13] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.659134][ T13] dummy0: left allmulticast mode [ 309.661470][ T13] dummy0: left promiscuous mode [ 309.663780][ T13] bridge0: port 5(dummy0) entered disabled state [ 309.667745][ T13] vlan0: left allmulticast mode [ 309.669930][ T13] geneve0: left allmulticast mode [ 309.672055][ T13] vlan0: left promiscuous mode [ 309.674096][ T13] geneve0: left promiscuous mode [ 309.676409][ T13] bridge0: port 4(vlan0) entered disabled state [ 309.680374][ T13] bridge_slave_0: left allmulticast mode [ 309.682809][ T13] bridge_slave_0: left promiscuous mode [ 309.685260][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.729530][ T13] bond5 (unregistering): (slave ip6gretap2): Releasing active interface [ 309.775815][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.782578][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.786038][ T13] bond0 (unregistering): Released all slaves [ 309.789379][ T13] bond1 (unregistering): Released all slaves [ 309.793451][ T13] bond2 (unregistering): Released all slaves [ 309.798030][ T13] bond3 (unregistering): (slave vlan2): Releasing active interface [ 309.801301][ T13] bond3 (unregistering): Released all slaves [ 309.805440][ T13] bond4 (unregistering): Released all slaves [ 309.811834][ T13] bond5 (unregistering): Released all slaves [ 309.818366][ T13] bond6 (unregistering): Released all slaves [ 309.901699][ T13] tipc: Left network mode [ 309.958310][ T5455] 8021q: adding VLAN 0 to HW filter on device eth6 [ 310.381970][ T13] hsr_slave_0: left promiscuous mode [ 310.384397][ T13] hsr_slave_1: left promiscuous mode [ 310.386403][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.388785][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.392711][ T13] veth1_macvtap: left promiscuous mode [ 310.398553][ T13] veth0_macvtap: left promiscuous mode [ 310.401185][ T13] veth1_vlan: left promiscuous mode [ 310.403091][ T13] veth0_vlan: left promiscuous mode [ 310.863650][ T13] IPVS: stop unused estimator thread 0...