last executing test programs: 3m15.929968694s ago: executing program 1 (id=1002): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000380)="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", 0x2000, &(0x7f0000006d00)={&(0x7f0000002380)={0x50, 0x0, 0x7, {0x7, 0x2d, 0xfffffffb, 0x20102004, 0x0, 0x3cc5, 0x7, 0x1, 0x0, 0x0, 0x8, 0x2}}, &(0x7f0000002400)={0x18, 0x0, 0x7, {0xfffffffffffff38d}}, &(0x7f0000002440)={0x18, 0x0, 0xcb, {0x7}}, &(0x7f0000002480)={0x18, 0x0, 0xd1, {0x9}}, &(0x7f00000024c0)={0x18, 0x0, 0x3, {0x4}}, &(0x7f0000002500)={0x28, 0x0, 0xfffffffffffffff7, {{0x7, 0x9, 0x1, r0}}}, &(0x7f0000002540)={0x60, 0x0, 0x4, {{0x0, 0x9, 0xbd72, 0x9, 0x3, 0x80, 0x7, 0xc}}}, &(0x7f00000025c0)={0x18, 0x0, 0x9e0, {0x7}}, &(0x7f0000002600)={0x14, 0xfffffffffffffff5, 0xe, {'ife\x00'}}, &(0x7f0000002640)={0x20, 0x0, 0x7d0}, &(0x7f0000002680)={0x78, 0x0, 0x1, {0xe, 0xde6, 0x0, {0x6, 0xfffffffffffffffc, 0x6, 0x7fff, 0x100000000, 0x3, 0x9, 0x2, 0x2, 0xc000, 0x1, 0xee00, 0x0, 0x49f, 0x2aeb97a5}}}, &(0x7f0000002840)={0x90, 0xffffffffffffffda, 0x800, {0x1, 0x3, 0x8001, 0x8, 0x9, 0x80000001, {0x3, 0x2, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff, 0x7, 0x4, 0x0, 0x5, 0x6000, 0x8, 0x0, 0x0, 0x1, 0x9}}}, &(0x7f0000002900)={0x70, 0xfffffffffffffffe, 0x6, [{0x2, 0x5, 0x4, 0x2, 'ife\x00'}, {0x0, 0xfffffffffffffffc, 0x4, 0x1, 'ife\x00'}, {0x6, 0x3, 0x1, 0x4, '\xa6'}]}, &(0x7f0000006780)={0x298, 0x0, 0x2, [{{0x3, 0x0, 0x2a, 0x6, 0x16e, 0x6, {0x0, 0x9, 0x4, 0xfffffffffffffffc, 0xc, 0xe, 0x40, 0x2, 0x8, 0xc000, 0x5, 0x0, 0x0, 0xcf, 0xe}}, {0x6, 0x9, 0x1, 0x0, '#'}}, {{0x3, 0x1, 0x5, 0x5f, 0x9, 0x3, {0x0, 0x8000000000000000, 0x9, 0x8, 0x7, 0x7, 0x0, 0xffffdfd8, 0xe, 0x8000, 0x4, 0x0, 0x0, 0x200, 0x5}}, {0x1, 0x4, 0x5, 0xc, 'syz0\x00'}}, {{0x1, 0x3, 0x0, 0x6, 0x949, 0x7, {0x1, 0x3ff, 0x6, 0xcfc, 0x0, 0xffffffffffff9e8a, 0x9, 0x6, 0xd, 0x3fb1c77afa1afb7, 0x7, 0x0, 0x0, 0x7d, 0x7ff}}, {0x3, 0x9, 0x3, 0x7ff, 'ct\x00'}}, {{0x3, 0x2, 0x4, 0x1, 0x0, 0x1, {0x0, 0x100000001, 0x1, 0x1, 0x0, 0x800, 0x834d, 0x80000000, 0x1ff, 0xc000, 0x5, 0x0, 0x0, 0x1, 0x1e7}}, {0x3, 0xffffffffffffff64, 0xc, 0x7, 'hash:ip,mac\x00'}}]}, &(0x7f0000006a80)={0xa0, 0x0, 0x8, {{0x2, 0x0, 0x7ff, 0x6, 0x685, 0x0, {0x2, 0x3, 0x3, 0x9, 0x1d9, 0xffffffff, 0x4212, 0xb90, 0x8, 0x2000, 0x80000001, 0x0, 0x0, 0x2, 0x6}}}}, &(0x7f0000006b40)={0x20, 0xfffffffffffffff5, 0x0, {0x401, 0x0, 0x6, 0x6}}, &(0x7f0000006bc0)={0x130, 0x0, 0x100000000, {0x6, 0x2, 0x0, '\x00', {0x2000, 0x8, 0x2, 0x9, 0x0, 0x0, 0xa000, '\x00', 0x7f, 0x80000001, 0x200, 0x8, {0x6, 0x4}, {0x4, 0xa69}, {0x5, 0x1}, {0xfffffffffffffff3, 0x5c}, 0xffff, 0x10000, 0xf2, 0x2}}}}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) socket$kcm(0x2, 0x1, 0x0) 3m15.6293269s ago: executing program 1 (id=1005): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)="0a01", 0x2}], 0x1, 0x4, 0x9) r1 = openat(r0, &(0x7f0000000480)='./tracefs_dir/trace\x00', 0x2fe8, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={&(0x7f0000000140)="ec0aadcfa34fd3c943fd98dcaceda294d1e3ce2ba88c73703e2fb6a1db3d8b915eec17e71b7683e903ab5e5da526399b19832211b1e9ce6b85b8347dd32837ad7b98fe2cdc1c5d74b27736ab57f787b0895b331e24b5ee8e5f75d3d8098d7f58077b43c9617e5b03a3b863542b49148247ffc00bd6945f8228b3a07e972b3a87d5a549496701ab537ce17f0681ee5059136be06998", &(0x7f0000000200)=""/3, &(0x7f0000000280)="3466e6d9ae349dc524c3ea10eb1c1cdbf7fa4638a2fb7be81c6b82b7fda6d1d83c7ec5e5f6510afb08ecb4dfe863391c5d8809e9e6576717db1cf8c1ba2bfacfdc92a8c91673ac481e4dd6a16b7c1a97d0ff23b0de83e50566", &(0x7f00000004c0)="7755ed8df8af1070a501a2bf517a0aae109ce70a10025e1dc4c2495f98436f68073ed06860861272fe8da7414bd18c794bbf064636fdb6082b82866754ff5083c7e94600817ee3ee4ea50724f08f02f3cca8859405e959c43299185ad4763e25763177af2cfa68ab1607be878d03a2048534ba4f98bc6a5a6bb943434e0f8dbc582cdc4803fa319515763580d658a90908c04df5ca7a0b3d4776179cb5d6a6238dff0498f961f9b895d253884980f8deeaa4b353e3f818645cbc2a0df23552bb6b7a677422cece88f6fb39306e790a4a5112b5953f4fa1510ea05744484882985475f1c067a3786b79d21ddb293ab8f77a28a6378e49d8f136", 0x0, r1, 0x4}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) io_setup(0x1, &(0x7f0000000b80)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f"], 0x0, 0x46, 0x0, 0x9}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1a}, 0x20) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x10000000000002cc, 0x14, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000a004e200000000fff02000000000000000000000000000112000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00"/108], 0x8c) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x7c4}]) 3m15.297239212s ago: executing program 1 (id=1008): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x80000007) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 3m14.665397367s ago: executing program 1 (id=1017): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x6, 0xfffffff9, 0x5}, 0x10) 3m14.12915608s ago: executing program 1 (id=1019): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1014041, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000001c0)={0x1, 0x1, 0x40, "2d3c133193316bcf6a153cd996f2749b979c6a06e70accc16e471179ff5f4a0e", 0x42303159}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) getresuid(0x0, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff}}, './file0\x00'}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x118, 0xffffb453) ptrace$pokeuser(0x6, r6, 0x118, 0x7) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3m13.420961853s ago: executing program 1 (id=1022): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x10, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) 2m58.357142616s ago: executing program 32 (id=1022): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x10, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) 2m12.733905192s ago: executing program 4 (id=1312): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000180)=0xe4) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x1b8, 0x10, 0x1, 0xfffffffe, 0x25dfdc00, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c, 0x0, r1}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffff8, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_comp={0xcc, 0x3, {{'deflate\x00'}, 0x420, "d91cecf783a3e23bc01348224aed96b3c89d918f2340fe76ca885f0a2fffdf206d5b6c7a45423e5ce8782be924a715874be3fa4c902cbdd2fea9640f594106735f96382421fb4d645946890ab2b03e4a4623d8b2a48197fcb764e77cf9d75cc2721286d2bec0bc865debdf5fd295cb44c2c11dccf69170f5d9796a2c0cef0365d2243c62"}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m12.733757854s ago: executing program 4 (id=1313): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000240)='\n03', 0x3, 0xc120) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) nanosleep(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/devices/dwc3.0.auto/power/control\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:03.0/power/control\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='auto', 0x4) (fail_nth: 3) 2m12.733451385s ago: executing program 4 (id=1314): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') r6 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) ioctl$NBD_DISCONNECT(r6, 0xab08) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000100)=0x60) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2m12.724182418s ago: executing program 4 (id=1320): syz_open_dev$usbfs(&(0x7f0000003f80), 0x77a, 0x80002) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x4) write(r0, &(0x7f0000000040)='\x00J', 0x2) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000000)) 2m12.622553416s ago: executing program 4 (id=1323): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='0000:00:02.0', 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/lpc_ich/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF ', 0x24) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000f00)='0000:00:03.0', 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x142, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x5, 0x6}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x3a, 0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@rnullb, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', &(0x7f00000001c0)='mqueue\x00', 0x10052, &(0x7f0000000240)='sysfs\x00') 2m11.898474001s ago: executing program 4 (id=1325): r0 = inotify_init1(0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r4) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r5, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r4) r6 = socket(0x2d, 0x2, 0x0) setsockopt(r6, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendmsg(r6, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "00000000000008011800020000000600000400"}, 0x80, 0x0}, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x0, 0x2) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) fchdir(r7) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) 1m56.891849554s ago: executing program 33 (id=1325): r0 = inotify_init1(0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r4) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r5, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r4) r6 = socket(0x2d, 0x2, 0x0) setsockopt(r6, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendmsg(r6, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "00000000000008011800020000000600000400"}, 0x80, 0x0}, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x0, 0x2) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) fchdir(r7) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) 27.639837253s ago: executing program 5 (id=2036): socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) gettid() timer_create(0x4, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f00000002c0)={0x2}, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="05000000010001", 0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r4, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 26.053530303s ago: executing program 5 (id=2042): mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) getresuid(0x0, &(0x7f0000000100), &(0x7f0000000140)=0x0) mount$pvfs2(&(0x7f0000000000), &(0x7f0000000040)='./sys\x00', 0x0, 0x430, &(0x7f0000000080)=ANY=[@ANYBLOB='euid<', @ANYRESDEC=r0, @ANYBLOB=',s\\ackfshat=unused\x00,\x00']) r1 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x36}, 0x8, 0x1, 0xff, 0x4, 0x0, 0xf2fe}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x40c0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) socket$inet_mptcp(0x2, 0x1, 0x106) umount2(0x0, 0x9) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write(r1, &(0x7f0000005000)='synaptics-smbus', 0xf) 25.108118136s ago: executing program 5 (id=2046): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x10, &(0x7f0000000040)=0xfffffffc, 0x4) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x5}) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0x40cc19, 0x10806, 0x0, 0x3c5}, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 19.884964628s ago: executing program 5 (id=2060): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x26fffffb) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x5b04, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x2, 0x80805, 0x0) flistxattr(r3, 0x0, 0x0) getpeername$tipc(r2, &(0x7f0000000040)=@name, &(0x7f00000000c0)=0x10) 16.210426362s ago: executing program 5 (id=2075): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000040)=0xfffffffc, 0x4) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r1 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x5}) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0x40cc19, 0x10806, 0x0, 0x3c5}, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000000)) 14.732080845s ago: executing program 5 (id=2081): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88582, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000fd7bd22cfda2a8c081ef9ab8525ebf856ccc82218cf771109a3c38d83400f8e2719665117bfe999e5611d9231826df1392e13c77d6c11c6869e1358213dfd008f47d9755ba4e14f5fa257b07a8ae1b9886558482ef22968c57ff2ea970c2ce85401452966cc97c0c27052a90d9e0214bee8a49d729a70dc65e357ec0bcc976e070c7e34dd940738bf35d6b6b3998d1c4caaf7f654e0ab8743af2fc609bb0dbc1f114a80f8ff1990262d49ca85426116de607f6996606b234e98a3daaa79d8470ec3e9e020639fd2c963282f479221090f3403ab0ce", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r6, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x8, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000006, 0x4c831, r4, 0x1000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@gettfilter={0x2c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1f}, {0xffff, 0xc}, {0xfff1, 0xc}}, [{0x8, 0xb, 0x80}]}, 0x2c}}, 0x20004084) 14.202306739s ago: executing program 34 (id=2081): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88582, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000fd7bd22cfda2a8c081ef9ab8525ebf856ccc82218cf771109a3c38d83400f8e2719665117bfe999e5611d9231826df1392e13c77d6c11c6869e1358213dfd008f47d9755ba4e14f5fa257b07a8ae1b9886558482ef22968c57ff2ea970c2ce85401452966cc97c0c27052a90d9e0214bee8a49d729a70dc65e357ec0bcc976e070c7e34dd940738bf35d6b6b3998d1c4caaf7f654e0ab8743af2fc609bb0dbc1f114a80f8ff1990262d49ca85426116de607f6996606b234e98a3daaa79d8470ec3e9e020639fd2c963282f479221090f3403ab0ce", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r6, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x8, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000006, 0x4c831, r4, 0x1000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@gettfilter={0x2c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1f}, {0xffff, 0xc}, {0xfff1, 0xc}}, [{0x8, 0xb, 0x80}]}, 0x2c}}, 0x20004084) 8.159463201s ago: executing program 2 (id=2098): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)={0x10e0, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10c8, 0x1, 0x0, 0x1, [@nested={0x10c4, 0x75, 0x0, 0x1, [@nested={0x10c0, 0x80, 0x0, 0x1, [@nested={0x10bb, 0x129, 0x0, 0x1, [@generic, @generic="bc6abb6d8ae4a0dbf82ca6552885bc31b040105d49d5c19d85b656e29652e07a29c5318c0daafcd125a637752555af92f59a40aa38e69497d6822c38fc8d7c0ebe35a33a314c1f", @nested={0x106f, 0x57, 0x0, 0x1, [@generic="cdb0905e9d69a9589185a0e103a9ce58b8b42ceaa426914b1549f6d4f1e9ec6e08a081295a5e30c78175c9df1566bb1034c7d62014bdc66f75d42435dc04acc051e7c5e86868e724eb7068da1a85e72ef32cc4d09a5ef42bfdaa7db0dccb198d295689df5cd9a4076f723737f188cfa76dcbcadb11d8c5c6ae9adf931cd956088ca7e4570a6e8d25a541d594e5ab8c30166bd40b8a04ccd7c70e0d5e97842bb05e1504e75ce6d73d2003e6e37fb1e44056c7bbffb95c8153a4d827d48b5d1f072c3a3e001ae869c318041a26240cfb98a1ee78afe1a667598e0d122833fc66e37e43ad3e39114a646fbf6a559e4cd2ef521b91a9f9d34b2a69053ef96bdd33c6b50209c2670622b8abd41eba3c6104dac2855281400638d52910f389351abe3af26beeb63e1b72d2cecbf4f993577ae2d1b62908ebe87a10f9fec084f0a5b0c8a56eb6dd8a6a6fee9d4abd762151b94cf0033cd9a0fd516410627ec3710eb370975d3a3f45d643538e5ab081e044b86afb281565eca41b1e4db9b1dc47999a71239479efc3efd07f20436d653eef111f5ccdfd1991b95aee0fd647fd4d24007abb3946def21da4b1ba6aa47b431f66bce1fd69348baef59a5db3374dde4660599a7b768fa9268af6d0e848cdef2881cd57ff29917a8524ae1d0b728e9360fbb811569fe9490429128a7ed26e291b75c97512d82768141b0855e2688d24b757068bbe3f8a4ce32dc5af4a50fe7b4315fef0f539885b2a4dfaf381bdea41c49bfd337140814e4f080337867feacc8f929a9f150e50150abfe6204622f5e62eb2c33ed3358ef3fdae08023de8e9d996a9e1d4b3537598bee33d15456ff4a9a9ce86fc8062d9434955e3e9b144816c3f666b25c347df66d721599c852fa16bccb2c00b7d5270c41d6c9d941799c64302aace39fab48dac895f46544578496aeab0630721b5658279dd465e78b162823552f4a7800ae03ce648a15c381a81465dad90126bddc60d30b6650d95eb28d5aeedce24645787686fec3891af7b64a746310d753c56330008abcaf0f2a0583a20911223e56129ee15dcf02097dd6af254ccd3de79f9340e3f523c0c3cc5e83e08f7aece46bef8e6ce36d29ed71edc5c9a4b41382ef55370c4ee66fe0ea8e2f63c5c3cecab202127b6a8961049aeb2e6337210dd4d534861606e2ea68a9cc141b91d05dfd07d2f623f28170d413754c70d5c5fe4dd75bb7cbb768e1133ffab55ae83910c4f01a2e07b1e7ff3dd3b799b2b7a59d7137a85fbd9a9f025907ec2f8e6af847735853d583f2e669b549b896cf3ca4f3defd73ff71c78fc9111bb9a9a2337a06743fa5662d3ddeda8dd3c227036a5ea51e1c04fb68039d7fc0db9fac5ffc7a9b927d0c96a294e041fbe7232c2702010629e541a7739ee0d7bfe15b954b9668dda7256e8ed5af6bba137efed7d3b9b4c4b69c3534793c7965ac51220895910add147ae85e304d9b0ef4389a42e9f61912a45d5671f70c507bae6a50d05dd68a24161c070d995730b71719c3b43f2f56d928c956a2650c83215e3b8d7ce5cfce722b574bb5c7d68c4110f18c07899c0a8c31e5ac9129005d7615e3fb298dc0b4d541e66d0e6c9b56a10cf1e4170f1acb6034cd150f2e97f560573c707082dc5196ee5649090bac0c936478665f1aba9ed57adc4793b064830a4843d752016d59e02916570fddb598d410106654369aa3421c91d3ea0b8b7c69eec5ea862d7a1caad98c12627d8d9d65d2baf25c778c0d3260b9795e7d7c6e31bb985b5346c3f590b172b01a3d6804253f4477fa3041c6daf90d8d861caa05533539a7222cf2f42cc564a003a8f3424ce7547597d37ea2318ae0dbcb5996ae645db6c5f531b6d86f681cc3ed60ca956b7354a4c5436eadddf9895c078846064fe12c9d75bd4051853f4b584800241e8caf24dab2c9a30da601be983fbafb97400d7f757c86f478eee821641974962a3af7f3b9b4de41e437c4a72d695d530b478b8b2147dcc2e9862236ef8069a7f90a0b325ad3a7b3ea366c22ec5f0fee86654d208c81f0eb188bdd5dc27b8631d5571dbd904827c75b97c774ce12b746a6bc041ac5c13c7fbb683236cfeb9be38aaa4d966fad4dc3079de281ebc00d0c8fe67dbeea80b76fc3808ab49efd4153d6237b742f1a8febc7c49e256231d1cd211540f8fe2a3daa583b1aae73bac3fb849326f750aa8c8b980248ca601807467313288700c5845e0a34ae97878e5049d89a5b80d2fcf732ccf254a9b4477c5192555ccef9f05bac4c5503581821b6f40019ceeff4612f62051821747fc1747999caedc12d7053c4701220fa1cd87d45fa9b88a7b26f62a0172d3c4e936b25d501d89548d4079b58760a53cbb4b6b09e0a22515f4f5077339c124f88e9449cecd9573588bf40a36626058db7e8a4358c2fa756d928161dfb675a6189eeeb7bd3b7eb4b18e71e18dcacad8e24833abe1de7a3ade821c4dbf7efe0355735fe739153d1d6be16f2899f69e5f42b8ae77c09afe46ed41df53b46454e5cc2584f61c46e1e6752c62087e9dbf0daf5254fe77a914125a74d34c4e0fc74dcfe887f4630557369118d7e14a926719e5b3cdda5a4ac45de1ad3784191906aee27e5f4face7b9422b6d429c0ecd37e6504c3f1bf7086c1a9d4c93a422277356290de24dbcc47354366022164239eda7cd17828c4c6c6711f536900eef5f60af30cb5766f1bba58425e9ce4264b1f8f3a002c0425cb30853d4a1e177649366f83bfd33d0cb6ddfb4eeed50c90c8b8db5da7c0e978ab79787c103b78e3a11c37c425e7939fdcdc3d16cc45bf0a96ea5f7bd5a36371a60eafeef4ddb5500d146154ab8de08db955733ecf300e97b58e022714d79f967cab5f143191cea673c5d618d08a8ad5f26efd14eb560ee053d2229c1f3dde71372b8bdbf7aafdf7d3819375a907ec868e26a55bfb6889a480592eabacda2462c0da9319c8cecb411c3719038a2b49ea258b1a04c89b8ae815121b2f7d253758d0e1f70851d1640598b161a3d74695bee095c7ba980f06e4aa6d81d3d64b9210605f7e3ca4009ead0c35d7a4dce98f7f47d9ef081028ed5ee92aa4927a8b05b047b615d9254b9426f33d6438fe57a855b8108d44273a79c3b29e49b79be19a310cd09cdb335ff47ea5e0ea4fdd69356302666749a9808f4d63b33d21e0fe64e99a6854d4c93ba86f21b426ae0f30c938837e93f8c30c691dd607783d09524e7e97ebb6d28e1fb73233c7cd9b0069748c7fc3d0d7d3723534dc79539e0184b016f5a9c5c63cf1740a57ae43bc8b0ab9a2292266a4b315c3caa4810fc808d3c60a7e31c49d7dc0448184608e85e19b5db5b692b15120cb586aab022b448e6197439a19f9fe22cdd6d13d637eed77cc86fbb6ef4959de82594de1898c56d9173e005021bb7f07dcc3e7d11f4a705c4581c275d3c89fca121537c38dd432e1aa8f341b8db7f9db987a8eff4418dc887f85c43bebe8ccbd4f0c80fa61a278fce01718dc89ca621d517cac3ae7f0da95c0bd5688422402ed54c4280d705dbbc7f63e0c398385baa2aa6f85436eb639e7576d70a3e2baa371bd51e38eb0fe36ca1366847908abde16ea82a244359b2810465f055c832aa5a78ab08ffb0f25756bf9d21ff5f84fe1135c65d641044d898595248ce322b0820bfc0c1af4a71a195ffe8c5fa0d9016b727875c0ef15d5ab55e9618f5ff16093dd7c57fa0f9697a36d7131ca5105b6f2e2ef61cc30812afbcf193799b2873ed55431ae2aa3600f9e2b463dbe1742bb40f4cc8a2ccf850f356eb5adbc37058db6e7817144310fcaf75a70a852ad18ed816e9563317eec815e5e2b94b4cf3592709566808f911a6395f1bfc856b622e43a9e115495325c1579cf82aef7bea444626124461709cccbd72637e11db5f67ec8037c01c05dd5252aa5476575e6188b95d3900948aff80130c4ed07a526b9bbefff05e44520f2e9ec8e72692ea5065cd30880ae35309dfd2709aa776bd5f96e6df5abf95660d54ef2ee915cd4866d31e971a299c9998e362e87ea8ebef5480789cdb45b3ddf1b45295a19270fde44d1d477db864bd85752defd9467f96b16c3feb394be9bc1dd31a80cd20db19e31ed8a6528244e35941f2c808f203d33784d6bd6d83c05c8e71c8a98e4e866e08de77e56b8972ebddf4d180934b02bfe0b930b772c1305b4cf85ac92a8365ef56e7a1e5cb6f00e439a211fcff57f2edeb933b54e6c37cdf31007eb5278bb8f460f7cc2cce76f362eceb2ee90fd930f296a135c3f250c1736444d181cb7fa66f17e9648ea28b3d55e220806d5347b81039e12673e4e1ef89cb8c489a05ab133811f86692f0b86deb6c37bd6cc959b45a86f687a34853ce92d316882f7c700ffae09fc5bc2c9c406d6be9106f91cad86580c17e483d127ed385fc81d75e56b22a1afeb79471fa7e9eecd521f3cb0ada0188a12e8befa7dda71638f63155c99c48c95bc7b796414a99ae7429d91def203a9de2300d6db0e7542831da4b1a50c036fe40a5967e2e330acd3006c792544994ff1f959e6dc897644837a92f16ac4101d6e9f7087df2612ac5c62e32dc4729764ac516d0dce73309f6e95e028f78f21a60d8e87e6fc86eb2df2ae23219036c2c20140718f47143ebb3df421944eb9ca04a7110aeda0794d16f14ba798c50aa77fef0ff4de4d5a22b1df70663269e93ab6961eb7cdbeddb003005eb64978a16766755a148a73a0c93acc4d3b697b9d49e9fcc1c99e7aac36b5e9189ebad8e4b6f62cd20fd7c49a21dbfbe9365e5e9283aee3a1fb748d29d7d539809d0a8d9a91dc5d9fea7f2b64c8dcc8a9d08195ef52a6755d2b795d2fbe786e9a991d9cb87fcdfaf3b21772ba857ed9ea213efea37860ebb794a3709497f388a1958f3053f14b677dc80dc310c24bf1fc5a85a03512de11c661357d1851dd9762782769643f26e15d4305366ae7ffddf46fb52b7610d95226c685220cb8c4be8b166f5934c2a9f379655022f25fd23a7d471819f72750b97fa73a2675c20e08460d56546aa7c5a7b29826f0b63e0c9c9dde5fcf23f015f9fd5cabde5badccd2ff305ba188b7e3ea4b5d14057cc0d00aeba13ef507f766e348170bf9b9cf87edaaee290c8ab6a40d48f0feaa81d28b03013546b53fd6258c65bc289b99e843e402ce6ad9ef9611c14ae0499385b69099c330e7cbc11ba162c6bee605fa2b9c48af76761cdb87b21eef81a0a6465cffd0f182501e8c6679ca56b67beb7981441fe0d34ddc750b8488c04b75db5dccf7cba6177afa62f5a136d0b4e7b5ad0f8f9e11291b33504dacf0fa756bb35799c55cfa87d4c13de0c4e35cc6a729dff5df426b863ea72f2ffefc530d9183975f3bd2533cbb7b6c94b6a45cd14843539f22d2a6f66c5ca337194a036673c39cba55789b47681a64880665283a674d13528a7f8fbb92d256889c7756fb1b2f0efb0c62c31837ead33eb572722249aae0aab37e3e1d3175c7c9f8b764c76e2028750d8c1f4f3cd2c68f6dc50826a167f798c3c6aa99fa416cbfc53581340982ce4bc7c45a35385414a62c307908af275388c6ef500cb989232790fb77513286cf34e7e98408f21356c58483d88e0c4cecfc36187fac6b44c582834bca2e8b060d558d2d463f31d05013ef367444d89fa333067858a095158c4f5331215fd04c7e89c8397e92cefa8606b2fa2c73d28b71c0085ff608149d30fbdbc895743951af5edfb9739a84e22f900bb691068e362b9ad7ed77e27d1f7cb7fc247c6aa469059f912f3", @generic="17f8148dfbb38d38c256a51c7f0c2a0cc599b6953a82d70d23503207edf44e718e32feac34ddc2d17e7c3a9878932617cbd8d323ee7c2454bfab2d530b54627389d1873686e9eede3f2367d438965a", @typed={0x8, 0x15d, 0x0, 0x0, @u32=0x800}, @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@mcast2}]}]}]}]}]}]}, 0x10e0}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4b}, @void, @val={0xc, 0x99, {0x4, 0x4b}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x41) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f0000000240)={[{'noacl'}]}) ioctl$COMEDI_INSNLIST(r5, 0x8008640b, &(0x7f00000edb40)={0x0, 0x0}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 7.197655977s ago: executing program 2 (id=2099): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) renameat(r4, &(0x7f0000000080)='./file1\x00', r4, &(0x7f0000000000)='./file0\x00') r6 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) ioctl$NBD_DISCONNECT(r6, 0xab08) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000100)=0x60) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) close_range(r8, 0xffffffffffffffff, 0x0) 6.199050882s ago: executing program 2 (id=2103): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='lzo', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1', 0x1) 4.88923631s ago: executing program 0 (id=2107): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = memfd_create(&(0x7f0000000540)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86c\xe7\xc6\x88\xce%0\x05\x9d4M\tH\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x8c\'\xf5\x18PvY\xbe\xd1J6\xd9\xa6\xec\xde\xd4\xb9I5\x1a\xc6S\x14\x18]K\xe0\xef\x97Vv\xbe\x8a\xffG\xc79\x9d\x19\x10\x8c\xb2\xe0` >D\x11*V\xb9\xcfi\x03FnU\t|b\xbe\x10\xc4\xd4\x01\xb2=\x11%\xd0`-\xe2\x1d\x8e\x7f\xd1\x16\x03\xa5(\x1e\x05H\xe8\'[0\xc2\vO\xdc\xf8?QT[8G3\xe9f\x9b\xd3\xe2:\xa2b\xa3\x89\n\x9d\n\xe2\xb7\xf6\xa6\xbe\x82]YF\x90\x8e\xde\xbd\xb1w\xf7\x15\xed\xd8\xea\xa8\xef\xfbM\x82oX\x80~\xe3\x1fH\xf4\x99\xa4\xd2E\'@\xab\x13\x94\xc2\xef\x81R\xa2\xaah\xd2D\xce\x1f\'\x8b9\xa5\x88\xf1C\x1a\a!\x95\x165R[1\x9e[\xf4\xa9v\xfah\xc1;\xd0\xcb\x85\xcbs\xad\x14\xf5\xd5\xd7M\x06\x15\x9d\xa2\xfb\xfc\x9c\x94`x\xdfma\xa6\x04\x06\xcb\xeb\vC{b\xceW3l\x8a\x9cO\"\xb5\xeb#\x03k\xe4\x99\xeb\xe3\x9d\xba\xd0\xb5\x0fi\xf2\xdc\x01\x81\xb48\xea\xaf\xd0*\x9c\x1d\xba,;\x17\xfb\x94M1\xe2\x1f\xbf\tCj1\xca\xc1\x01#:q\x8bz\x06\xd6\x14\xda\xfd\xae\x19j\xa1\xb2\xa3\n\x95\t?V\x00\xd0\xad_\xf9*\xb5;\xb5M\xe2*\x96\x13\xf3V\x92\f\"n8An*\xbfm=ce\xa9\xb65\xb6\xdd\xbd\xe2I\xbf.8I\xac\xf2\x9b\r\x85\xdfmC\x98Y\xc2\x92:\xfb\xa2V\x8d7@[q\x9a-M\x89\x88\xe1\f\nYX6h\xafT\x8d\xec\xd598\xa0\x15\xa4\xd3\xcc\xab$\xe7\x00C\xc6\xd3\x97\x86u\xd5w\x9f\x95FN\xf6l%L\x18\a\xa1\a\xceHn\x9fv\xe4\x1a\x8f\xb9N]?\xf8\xbe\x97\xc0\xd0\xc3\xa2p/\xfd#\xcd\xf3\xfe\x0f\x10\xa9\xdd\x8b\xb3L\xc3jbv\xa3\xb14\xa1\xb3^\xb0\x00\xd2\x9c\x87\x01\x9eM\xb5\xcf\xda\xfb\xf8[\xcdp%}\xd7\t^_\xa7\x8e\r\x1a\xa6\x0ed\x03\xda/\x11\"\x7f\xf3)u\x92\\<\x9cg&0\xca\xc5\a\xe8d\xd7r\x03\xda\xd4q\x12\xd0\xba\x7fH\xd2\xd0g', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000180)={0x0, 0x2, 0x80000, 0xb3}) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000000)={0x0, 0x2, 0xecca0000, 0x6}) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x50, r1, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r4], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r6, r5, 0x25, 0x18, @val=@netfilter={0x0, 0x0, 0x7, 0x1}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYRES64=r5, @ANYBLOB="27a1da4b99c8adcdce197d72d36330626994a29122efac94a81fa8c201826ed9d937365064e9d0640139f091291688f6d002e4cec3150b4cc3d455209286"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x80008, 0x8}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0xa43a6d}) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) 4.888289841s ago: executing program 2 (id=2108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x94}, 0x1, 0x0, 0x0, 0x4004080}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0x2020) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000010000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl(r5, 0x4048aec9, &(0x7f0000000600)="010000000000000001") getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004ac0), &(0x7f0000004b00)=0xc) getegid() sendmmsg$unix(r2, 0x0, 0x0, 0x20008000) vmsplice(r3, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r7, 0x6, 0xfffffff9, 0x5}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r9 = fcntl$dupfd(r8, 0x0, r8) sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r11, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000100)={r11, @in={{0x2, 0x4e21, @broadcast}}, 0x4, 0x0, 0x1ff, 0x6, 0x2, 0xb9e8, 0x3}, &(0x7f00000001c0)=0x9c) 4.738878142s ago: executing program 0 (id=2109): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r0, 0x4068aea3, &(0x7f00000003c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'erspan0\x00', {0x2, 0x4e22, @local}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xb}}]}}]}, 0x38}}, 0x0) setns(0xc9, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) getpid() process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r4 = accept4(r1, 0x0, 0x0, 0x800) sendto$inet(r4, &(0x7f0000000140)="6e89555a6479f2bdfe09ad2dafd99a73f1268a7be4339c6dafa87675ef80fe51f22940bb4635e72a73b20c9163a3abeb0bd0073e2cd81aaed1711a36e7b3c1cf1a2e64fcaf771ff9382946", 0x4b, 0x10008080, &(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) r5 = syz_open_dev$loop(&(0x7f0000000000), 0xe, 0x200000) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) r7 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000300)={'nat\x00', 0x0, [0x5, 0x1, 0x6, 0x4, 0x5]}, &(0x7f0000000380)=0x54) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="89", 0xffe3) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r9, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x3, 0x6, 0x0, {0x5, 0x4, 0x0, 0x11f, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x300, 0x80000000, 0xe}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x1, 0x4, 0x0, {0x2, 0xe, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x5eb663a5, 0xeb}}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10000}, 0x4c0c0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x40, r8, 0x601, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa1}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) 4.417075778s ago: executing program 3 (id=2110): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) renameat(r4, &(0x7f0000000080)='./file1\x00', r4, &(0x7f0000000000)='./file0\x00') r6 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) ioctl$NBD_DISCONNECT(r6, 0xab08) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000100)=0x60) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) close_range(r8, 0xffffffffffffffff, 0x0) 3.650148978s ago: executing program 0 (id=2111): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x10, &(0x7f0000000040)=0xfffffffc, 0x4) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x5}) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0x40cc19, 0x10806, 0x0, 0x3c5}, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 3.47976034s ago: executing program 3 (id=2112): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, 0x0, 0x4b}, 0x30004001) syz_init_net_socket$x25(0x9, 0x5, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002200)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1fe) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)="6d996065617375c8ec65f85ecf7a680156dc94f6037265206675", 0x1a) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_queues(0xffffffffffffffff, r7, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x1, 0x69, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 3.478838091s ago: executing program 2 (id=2113): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000020)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl(r1, 0x400455c8, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x1, @loopback, 0x3}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_tcp_int(r2, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) 2.34297925s ago: executing program 3 (id=2114): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) personality(0x4100001) ppoll(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) 2.28912051s ago: executing program 0 (id=2115): mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) getresuid(0x0, &(0x7f0000000100), &(0x7f0000000140)=0x0) mount$pvfs2(&(0x7f0000000000), &(0x7f0000000040)='./sys\x00', 0x0, 0x430, &(0x7f0000000080)=ANY=[@ANYBLOB='euid<', @ANYRESDEC=r0, @ANYBLOB=',s\\ackfshat=unused\x00,\x00']) r1 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x36}, 0x8, 0x1, 0xff, 0x4, 0x0, 0xf2fe}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) socket$inet_mptcp(0x2, 0x1, 0x106) umount2(0x0, 0x9) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write(r1, &(0x7f0000005000)='synaptics-smbus', 0xf) 2.275211351s ago: executing program 6 (id=2082): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) (fail_nth: 3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) 1.35192031s ago: executing program 0 (id=2116): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = memfd_create(&(0x7f0000000540)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86c\xe7\xc6\x88\xce%0\x05\x9d4M\tH\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x8c\'\xf5\x18PvY\xbe\xd1J6\xd9\xa6\xec\xde\xd4\xb9I5\x1a\xc6S\x14\x18]K\xe0\xef\x97Vv\xbe\x8a\xffG\xc79\x9d\x19\x10\x8c\xb2\xe0` >D\x11*V\xb9\xcfi\x03FnU\t|b\xbe\x10\xc4\xd4\x01\xb2=\x11%\xd0`-\xe2\x1d\x8e\x7f\xd1\x16\x03\xa5(\x1e\x05H\xe8\'[0\xc2\vO\xdc\xf8?QT[8G3\xe9f\x9b\xd3\xe2:\xa2b\xa3\x89\n\x9d\n\xe2\xb7\xf6\xa6\xbe\x82]YF\x90\x8e\xde\xbd\xb1w\xf7\x15\xed\xd8\xea\xa8\xef\xfbM\x82oX\x80~\xe3\x1fH\xf4\x99\xa4\xd2E\'@\xab\x13\x94\xc2\xef\x81R\xa2\xaah\xd2D\xce\x1f\'\x8b9\xa5\x88\xf1C\x1a\a!\x95\x165R[1\x9e[\xf4\xa9v\xfah\xc1;\xd0\xcb\x85\xcbs\xad\x14\xf5\xd5\xd7M\x06\x15\x9d\xa2\xfb\xfc\x9c\x94`x\xdfma\xa6\x04\x06\xcb\xeb\vC{b\xceW3l\x8a\x9cO\"\xb5\xeb#\x03k\xe4\x99\xeb\xe3\x9d\xba\xd0\xb5\x0fi\xf2\xdc\x01\x81\xb48\xea\xaf\xd0*\x9c\x1d\xba,;\x17\xfb\x94M1\xe2\x1f\xbf\tCj1\xca\xc1\x01#:q\x8bz\x06\xd6\x14\xda\xfd\xae\x19j\xa1\xb2\xa3\n\x95\t?V\x00\xd0\xad_\xf9*\xb5;\xb5M\xe2*\x96\x13\xf3V\x92\f\"n8An*\xbfm=ce\xa9\xb65\xb6\xdd\xbd\xe2I\xbf.8I\xac\xf2\x9b\r\x85\xdfmC\x98Y\xc2\x92:\xfb\xa2V\x8d7@[q\x9a-M\x89\x88\xe1\f\nYX6h\xafT\x8d\xec\xd598\xa0\x15\xa4\xd3\xcc\xab$\xe7\x00C\xc6\xd3\x97\x86u\xd5w\x9f\x95FN\xf6l%L\x18\a\xa1\a\xceHn\x9fv\xe4\x1a\x8f\xb9N]?\xf8\xbe\x97\xc0\xd0\xc3\xa2p/\xfd#\xcd\xf3\xfe\x0f\x10\xa9\xdd\x8b\xb3L\xc3jbv\xa3\xb14\xa1\xb3^\xb0\x00\xd2\x9c\x87\x01\x9eM\xb5\xcf\xda\xfb\xf8[\xcdp%}\xd7\t^_\xa7\x8e\r\x1a\xa6\x0ed\x03\xda/\x11\"\x7f\xf3)u\x92\\<\x9cg&0\xca\xc5\a\xe8d\xd7r\x03\xda\xd4q\x12\xd0\xba\x7fH\xd2\xd0g', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000180)={0x0, 0x2, 0x80000, 0xb3}) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000000)={0x0, 0x2, 0xecca0000, 0x6}) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x50, r1, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r4], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r6, r5, 0x25, 0x18, @val=@netfilter={0x0, 0x0, 0x7, 0x1}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYRES64=r5, @ANYBLOB="27a1da4b99c8adcdce197d72d36330626994a29122efac94a81fa8c201826ed9d937365064e9d0640139f091291688f6d002e4cec3150b4cc3d455209286"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x80008, 0x8}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x3) r7 = memfd_create(&(0x7f0000000dc0)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\xd5\xec\x10\xd7\x01M\x7f\xb7\x17@)\x8fG&\xcb\xe3\xc2\x80\xc3MD\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xe7\x9d\x9a\x8a\x86>\f\xa8b\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xb6\x1c+\xf7gT\x9a\x02\x99\xc2\x00\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84X\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1\x00\x00\x00\x00\x00\x00E\xfc', 0x4) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0xa43a6d}) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) 1.351031889s ago: executing program 3 (id=2117): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)={0x10e0, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10c8, 0x1, 0x0, 0x1, [@nested={0x10c4, 0x75, 0x0, 0x1, [@nested={0x10c0, 0x80, 0x0, 0x1, [@nested={0x10bb, 0x129, 0x0, 0x1, [@generic, @generic="bc6abb6d8ae4a0dbf82ca6552885bc31b040105d49d5c19d85b656e29652e07a29c5318c0daafcd125a637752555af92f59a40aa38e69497d6822c38fc8d7c0ebe35a33a314c1f", @nested={0x106f, 0x57, 0x0, 0x1, [@generic="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", @generic="17f8148dfbb38d38c256a51c7f0c2a0cc599b6953a82d70d23503207edf44e718e32feac34ddc2d17e7c3a9878932617cbd8d323ee7c2454bfab2d530b54627389d1873686e9eede3f2367d438965a", @typed={0x8, 0x15d, 0x0, 0x0, @u32=0x800}, @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@mcast2}]}]}]}]}]}]}, 0x10e0}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4b}, @void, @val={0xc, 0x99, {0x4, 0x4b}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x41) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f0000000240)={[{'noacl'}]}) ioctl$COMEDI_INSNLIST(r5, 0x8008640b, &(0x7f00000edb40)={0x0, 0x0}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.066341204s ago: executing program 2 (id=2118): socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) gettid() timer_create(0x4, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f00000002c0)={0x2}, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="05000000010001", 0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r4, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 529.990137ms ago: executing program 6 (id=2119): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) renameat(r4, &(0x7f0000000080)='./file1\x00', r4, &(0x7f0000000000)='./file0\x00') r6 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) ioctl$NBD_DISCONNECT(r6, 0xab08) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000100)=0x60) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) close_range(r8, 0xffffffffffffffff, 0x0) 409.961032ms ago: executing program 3 (id=2120): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x6b, 0xa, 0x7, 0x0, 0x0, 0x0, 0x4, 0x7, 0xd, 0xa0, 0x3, 0x5, 0x0, 0x2, 0x8, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x400007fc, 0xffffffffffffffff, 0x81, 0x4, 0x1, 0x0, 0x3, 0x12, 0x1, 0x4, 0x0, 0x7, 0x7, 0x4, 0x100000000001, 0x6], 0x1000, 0x47f00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x8000a, 0x0, 0xff, 0x1, 0x8}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$xdp(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000240)="f8f112a20d9937771f54edceb3bdce1a1d51ecc9107a0724ac5861bbc7922ed581a34990edc750c01d91d3f2ffee685b8f1153a68cf9f9a0fab561a54e0f547582e71dc2ca2c82240b7f9187971cb0046c0884810a1cfcfcbebe128e4811ac9eade6fd47eef25cc86bf50957bafaccf103e8bb36d28cfe91fe48e7a017c71c5861929a25d441f48e7a51ed6de10016024c5e335e0a1bbb80e111999ad8f46e0965382e78aa61e7d45dbfaac4da7652bd118c700860c0c197b51c18147b16bfc67ac526a86993809a943acce22e913915075e0e55ce2499d91cfe93f60f48807fbab6eb188e", 0xe5}, {&(0x7f0000002640)="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", 0xf1d}], 0x2, 0x0, 0x0, 0x80}, 0x4) recvmsg$can_j1939(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001600)=""/4097, 0x1001}], 0x1}, 0x10021) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f00000002c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) timer_getoverrun(r6) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000002000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 340.158818ms ago: executing program 0 (id=2121): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x400007, 0x2) readlinkat(r0, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00', &(0x7f0000000080)=""/203, 0xcb) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000002100)='usbip-vudc.0', 0xc) 0s ago: executing program 3 (id=2122): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1', 0x1) kernel console output (not intermixed with test programs): mit has 8 unknown bytes [ 424.367232][ T7123] IPVS: starting estimator thread 0... [ 424.467828][T11475] IPVS: using max 27 ests per chain, 64800 per kthread [ 424.735881][ T3257] usbserial_generic 8-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 424.744429][ T3257] usbserial_generic 8-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 424.749096][ T3257] usbserial_generic 8-1:189.127: device has no bulk endpoints [ 424.755124][ T3257] safe_serial 8-1:189.127: safe_serial converter detected [ 424.758181][ T3257] safe_serial 8-1:189.127: probe with driver safe_serial failed with error -22 [ 424.781469][ T3257] usb 8-1: USB disconnect, device number 17 [ 424.799402][T11486] ehci-pci 0000:00:1d.7: remove, state 4 [ 424.807998][T11486] usb usb1: USB disconnect, device number 1 [ 424.846651][T11486] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 424.855976][ T48] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 424.859956][ T48] (NULL device *): queue 0 connect admin queue failed (-111). [ 424.862365][ T48] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 424.866187][ T48] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 425.095504][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.150447][T11487] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 425.152793][T11491] FAULT_INJECTION: forcing a failure. [ 425.152793][T11491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.152819][T11491] CPU: 1 UID: 0 PID: 11491 Comm: syz.5.1739 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.152836][T11491] Tainted: [L]=SOFTLOCKUP [ 425.152840][T11491] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 425.152847][T11491] Call Trace: [ 425.152852][T11491] [ 425.152856][T11491] dump_stack_lvl+0x100/0x190 [ 425.152875][T11491] should_fail_ex.cold+0x5/0xa [ 425.152889][T11491] _copy_from_user+0x2e/0xd0 [ 425.152909][T11491] kvm_arch_vcpu_ioctl+0x25d6/0x57a0 [ 425.152928][T11491] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 425.152946][T11491] ? is_bpf_text_address+0x94/0x1a0 [ 425.152965][T11491] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 425.152981][T11491] ? arch_stack_walk+0xa6/0xf0 [ 425.153004][T11491] ? __lock_acquire+0x49f/0x1a40 [ 425.153016][T11491] ? stack_depot_save_flags+0x27/0x9d0 [ 425.153035][T11491] ? __lock_acquire+0x49f/0x1a40 [ 425.153048][T11491] ? lock_acquire+0x1b9/0x370 [ 425.153060][T11491] ? rcu_is_watching+0x12/0xc0 [ 425.153074][T11491] ? trace_contention_end+0x126/0x160 [ 425.153087][T11491] ? __mutex_lock+0x26d/0x1bd0 [ 425.153102][T11491] ? kvm_vcpu_ioctl+0x322/0x1700 [ 425.153117][T11491] ? __pfx___mutex_lock+0x10/0x10 [ 425.153140][T11491] ? kvm_vcpu_ioctl+0x8a0/0x1700 [ 425.153150][T11491] kvm_vcpu_ioctl+0x8a0/0x1700 [ 425.153176][T11491] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 425.153190][T11491] ? tomoyo_path_number_perm+0x188/0x580 [ 425.153207][T11491] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 425.153222][T11491] ? get_pid_task+0x106/0x250 [ 425.153240][T11491] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 425.153259][T11491] ? do_vfs_ioctl+0x226/0x13e0 [ 425.153277][T11491] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 425.153299][T11491] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 425.153311][T11491] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 425.153323][T11491] ? __fget_files+0x21f/0x3d0 [ 425.153338][T11491] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 425.153350][T11491] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 425.153372][T11491] __do_fast_syscall_32+0xe7/0x970 [ 425.153387][T11491] ? lockdep_hardirqs_on+0x78/0x100 [ 425.153401][T11491] do_fast_syscall_32+0x32/0x70 [ 425.153416][T11491] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 425.153431][T11491] RIP: 0023:0xf704efec [ 425.153445][T11491] Code: Unable to access opcode bytes at 0xf704efc2. [ 425.153451][T11491] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 425.153462][T11491] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004080aea2 [ 425.153470][T11491] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 425.153476][T11491] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 425.153482][T11491] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 425.153488][T11491] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 425.153502][T11491] [ 425.267520][T11487] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 425.274707][T11487] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 425.324515][T11487] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 425.362031][T11487] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 425.368460][T11487] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 425.372530][T11487] usb usb1: Product: EHCI Host Controller [ 425.374580][T11487] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 425.376677][T11487] usb usb1: SerialNumber: 0000:00:1d.7 [ 425.437819][T11500] block nbd5: NBD_DISCONNECT [ 425.446838][ T42] audit: type=1326 audit(1786981740.861:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11499 comm="syz.5.1743" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x0 [ 425.493338][T11487] hub 1-0:1.0: USB hub found [ 425.499124][T11487] hub 1-0:1.0: 6 ports detected [ 425.514639][T11501] FAULT_INJECTION: forcing a failure. [ 425.514639][T11501] name failslab, interval 1, probability 10, space 0, times 0 [ 425.534044][T11501] CPU: 2 UID: 0 PID: 11501 Comm: syz.3.1742 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.534091][T11501] Tainted: [L]=SOFTLOCKUP [ 425.534098][T11501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 425.534108][T11501] Call Trace: [ 425.534115][T11501] [ 425.534123][T11501] dump_stack_lvl+0x100/0x190 [ 425.534154][T11501] should_fail_ex.cold+0x5/0xa [ 425.534176][T11501] should_failslab+0xc2/0x120 [ 425.534203][T11501] __kmalloc_noprof+0xfc/0x820 [ 425.534227][T11501] ? event_inject_write+0x36b/0x2190 [ 425.534256][T11501] event_inject_write+0x36b/0x2190 [ 425.534277][T11501] ? __pfx_aa_file_perm+0x10/0x10 [ 425.534312][T11501] ? __pfx_event_inject_write+0x10/0x10 [ 425.534332][T11501] ? __pfx___might_resched+0x10/0x10 [ 425.534360][T11501] ? __lock_acquire+0x49f/0x1a40 [ 425.534376][T11501] ? import_ubuf+0x1b6/0x220 [ 425.534420][T11501] ? __pfx_event_inject_write+0x10/0x10 [ 425.534440][T11501] vfs_writev+0x5ed/0xdd0 [ 425.534495][T11501] ? __pfx_vfs_writev+0x10/0x10 [ 425.534541][T11501] ? __fget_files+0x21f/0x3d0 [ 425.534565][T11501] ? do_pwritev+0x1ac/0x270 [ 425.534590][T11501] do_pwritev+0x1ac/0x270 [ 425.534617][T11501] ? __pfx_do_pwritev+0x10/0x10 [ 425.534641][T11501] ? ksys_write+0x1ac/0x250 [ 425.534658][T11501] ? __pfx_ksys_write+0x10/0x10 [ 425.534679][T11501] __do_fast_syscall_32+0xe7/0x970 [ 425.534705][T11501] ? lockdep_hardirqs_on+0x78/0x100 [ 425.534729][T11501] do_fast_syscall_32+0x32/0x70 [ 425.534766][T11501] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 425.534791][T11501] RIP: 0023:0xf7f68fec [ 425.534814][T11501] Code: Unable to access opcode bytes at 0xf7f68fc2. [ 425.534823][T11501] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 000000000000014e [ 425.534841][T11501] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000100 [ 425.534852][T11501] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000009 [ 425.534868][T11501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 425.534879][T11501] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 425.534890][T11501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 425.534914][T11501] [ 425.635475][T11487] hub 2-0:1.0: USB hub found [ 425.638316][T11487] hub 2-0:1.0: 2 ports detected [ 425.706256][T11487] hub 3-0:1.0: USB hub found [ 425.711675][T11487] hub 3-0:1.0: 2 ports detected [ 425.775099][T11487] hub 4-0:1.0: USB hub found [ 425.783296][T11487] hub 4-0:1.0: 2 ports detected [ 425.885727][ T10] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 426.028175][T11338] netdevsim netdevsim12: probe with driver netdevsim failed with error -12 [ 426.106152][ T10] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 426.121110][ T10] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 426.126295][ T10] usb 1-1: Product: QEMU USB Tablet [ 426.129817][ T10] usb 1-1: Manufacturer: QEMU [ 426.132003][ T10] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 426.183697][ T10] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0004/input/input19 [ 426.272546][ T10] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 426.848874][T11520] sysfs: Unknown parameter 'euid<18446744073709551615' [ 426.934669][ T48] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 426.939329][ T48] (NULL device *): queue 0 connect admin queue failed (-111). [ 426.950644][ T48] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 426.955752][ T48] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 426.981040][T11523] rdma_rxe: rxe_newlink: failed to add bond0 [ 427.140611][T11523] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input20 [ 427.940914][T11534] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 427.943662][T11534] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1753'. [ 428.429398][T11563] Mass Storage Function, version: 2009/09/11 [ 428.432718][T11563] LUN: removable file: (no medium) [ 428.446517][ T42] audit: type=1800 audit(1786981743.861:2837): pid=11563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1763" name="cdrom" dev="configfs" ino=41329 res=0 errno=0 [ 428.450440][T11563] FAULT_INJECTION: forcing a failure. [ 428.450440][T11563] name failslab, interval 1, probability 10, space 0, times 0 [ 428.455503][ T42] audit: type=1800 audit(1786981743.861:2838): pid=11563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1763" name="file" dev="configfs" ino=41330 res=0 errno=0 [ 428.552303][T11563] CPU: 0 UID: 0 PID: 11563 Comm: syz.5.1763 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.552325][T11563] Tainted: [L]=SOFTLOCKUP [ 428.552329][T11563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 428.552336][T11563] Call Trace: [ 428.552341][T11563] [ 428.552346][T11563] dump_stack_lvl+0x100/0x190 [ 428.552366][T11563] should_fail_ex.cold+0x5/0xa [ 428.552379][T11563] should_failslab+0xc2/0x120 [ 428.552397][T11563] kmem_cache_alloc_noprof+0x91/0x6a0 [ 428.552413][T11563] ? do_getname+0x35/0x390 [ 428.552431][T11563] do_getname+0x35/0x390 [ 428.552447][T11563] __ia32_sys_symlink+0x65/0xb0 [ 428.552461][T11563] __do_fast_syscall_32+0xe7/0x970 [ 428.552500][T11563] ? lockdep_hardirqs_on+0x78/0x100 [ 428.552516][T11563] do_fast_syscall_32+0x32/0x70 [ 428.552531][T11563] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.552546][T11563] RIP: 0023:0xf704efec [ 428.552565][T11563] Code: Unable to access opcode bytes at 0xf704efc2. [ 428.552571][T11563] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000053 [ 428.552582][T11563] RAX: ffffffffffffffda RBX: 0000000080000400 RCX: 0000000080000440 [ 428.552589][T11563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.552596][T11563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.552602][T11563] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 428.552608][T11563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.552623][T11563] [ 428.793227][T11573] FAULT_INJECTION: forcing a failure. [ 428.793227][T11573] name failslab, interval 1, probability 10, space 0, times 0 [ 428.800101][T11573] CPU: 2 UID: 0 PID: 11573 Comm: syz.5.1767 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.800135][T11573] Tainted: [L]=SOFTLOCKUP [ 428.800142][T11573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 428.800153][T11573] Call Trace: [ 428.800162][T11573] [ 428.800170][T11573] dump_stack_lvl+0x100/0x190 [ 428.800201][T11573] should_fail_ex.cold+0x5/0xa [ 428.800230][T11573] should_failslab+0xc2/0x120 [ 428.800257][T11573] kmem_cache_alloc_noprof+0x91/0x6a0 [ 428.800281][T11573] ? do_getname+0x35/0x390 [ 428.800307][T11573] do_getname+0x35/0x390 [ 428.800331][T11573] user_path_at+0x26/0x60 [ 428.800347][T11573] __ia32_sys_mount+0x1fb/0x310 [ 428.800370][T11573] ? __pfx___ia32_sys_mount+0x10/0x10 [ 428.800392][T11573] ? rcu_is_watching+0x12/0xc0 [ 428.800418][T11573] __do_fast_syscall_32+0xe7/0x970 [ 428.800442][T11573] ? lockdep_hardirqs_on+0x78/0x100 [ 428.800498][T11573] do_fast_syscall_32+0x32/0x70 [ 428.800523][T11573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.800545][T11573] RIP: 0023:0xf704efec [ 428.800567][T11573] Code: Unable to access opcode bytes at 0xf704efc2. [ 428.800575][T11573] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 428.800593][T11573] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000140 [ 428.800604][T11573] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.800614][T11573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.800624][T11573] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 428.800634][T11573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.800657][T11573] [ 429.024687][ T79] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 429.035457][ T79] (NULL device *): queue 0 connect admin queue failed (-111). [ 429.038248][ T79] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 429.040804][ T79] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 429.174877][ T5820] net_ratelimit: 737 callbacks suppressed [ 429.174901][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.460191][ T42] audit: type=1807 audit(1786981744.871:2839): UNKNOWN=m™`easuÈìeø^ÏzhVÜ”öre res=0 [ 429.469797][ T42] audit: type=1802 audit(1786981744.871:2840): pid=11597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1776" res=0 errno=0 [ 429.539382][T11604] sysfs: Unknown parameter 'euid<18446744073709551615' [ 429.783617][T11608] rdma_rxe: rxe_newlink: failed to add bond0 [ 429.798959][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.233295][T11593] ima: policy update failed [ 430.247437][ T42] audit: type=1802 audit(1786981745.651:2841): pid=11593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1776" res=0 errno=0 [ 430.455624][ T42] audit: type=1326 audit(1786981745.871:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11615 comm="syz.2.1780" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x0 [ 430.765034][T11626] FAULT_INJECTION: forcing a failure. [ 430.765034][T11626] name failslab, interval 1, probability 10, space 0, times 0 [ 430.773785][T11626] CPU: 3 UID: 0 PID: 11626 Comm: syz.3.1782 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.773808][T11626] Tainted: [L]=SOFTLOCKUP [ 430.773812][T11626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 430.773820][T11626] Call Trace: [ 430.773825][T11626] [ 430.773830][T11626] dump_stack_lvl+0x100/0x190 [ 430.773851][T11626] should_fail_ex.cold+0x5/0xa [ 430.773866][T11626] should_failslab+0xc2/0x120 [ 430.773888][T11626] __kvmalloc_node_noprof+0x116/0x970 [ 430.773907][T11626] ? find_held_lock+0x2b/0x80 [ 430.773927][T11626] ? proc_sys_call_handler+0x169/0x5a0 [ 430.773947][T11626] ? proc_sys_call_handler+0x169/0x5a0 [ 430.773963][T11626] ? proc_sys_call_handler+0x2c7/0x5a0 [ 430.773978][T11626] proc_sys_call_handler+0x2c7/0x5a0 [ 430.773991][T11626] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 430.774008][T11626] vfs_write+0x6ac/0x1050 [ 430.774020][T11626] ? __pfx_proc_sys_write+0x10/0x10 [ 430.774033][T11626] ? __pfx_vfs_write+0x10/0x10 [ 430.774043][T11626] ? find_held_lock+0x2b/0x80 [ 430.774065][T11626] ksys_write+0x12a/0x250 [ 430.774076][T11626] ? __pfx_ksys_write+0x10/0x10 [ 430.774085][T11626] ? ksys_write+0x1ac/0x250 [ 430.774096][T11626] ? __pfx_ksys_write+0x10/0x10 [ 430.774109][T11626] __do_fast_syscall_32+0xe7/0x970 [ 430.774124][T11626] ? lockdep_hardirqs_on+0x78/0x100 [ 430.774139][T11626] do_fast_syscall_32+0x32/0x70 [ 430.774153][T11626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 430.774168][T11626] RIP: 0023:0xf7f68fec [ 430.774183][T11626] Code: Unable to access opcode bytes at 0xf7f68fc2. [ 430.774188][T11626] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 430.774199][T11626] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 430.774206][T11626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 430.774212][T11626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 430.774218][T11626] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 430.774225][T11626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 430.774238][T11626] [ 430.866444][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.031585][T11641] netlink: zone id is out of range [ 431.033336][T11641] netlink: zone id is out of range [ 431.035069][T11641] netlink: zone id is out of range [ 431.036694][T11641] netlink: zone id is out of range [ 431.038434][T11641] netlink: zone id is out of range [ 431.040042][T11641] netlink: zone id is out of range [ 431.041695][T11641] netlink: zone id is out of range [ 431.107483][ T258] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 431.115805][ T258] (NULL device *): queue 0 connect admin queue failed (-111). [ 431.121151][ T258] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 431.126439][ T258] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 431.135190][ T5820] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 431.208515][ T42] audit: type=1807 audit(1786981746.501:2843): UNKNOWN=m™`easuÈìeø^ÏzhVÜ”öre res=0 [ 431.323442][ T5820] usb 10-1: unable to get BOS descriptor or descriptor too short [ 431.350521][ T5820] usb 10-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 431.390367][ T5820] usb 10-1: config 189 has an invalid interface number: 127 but max is 0 [ 431.403221][ T5820] usb 10-1: config 189 has no interface number 0 [ 431.424971][ T5820] usb 10-1: config 189 interface 127 has no altsetting 0 [ 431.453947][ T5820] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.464931][ T5820] usb 10-1: Product: syz [ 431.466615][ T5820] usb 10-1: Manufacturer: syz [ 431.472913][ T5820] usb 10-1: SerialNumber: syz [ 431.528690][ T42] audit: type=1802 audit(1786981746.511:2844): pid=11642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1788" res=0 errno=0 [ 431.624856][T11645] sysfs: Unknown parameter 'euid<18446744073709551615' [ 431.726097][T11646] rdma_rxe: rxe_newlink: failed to add bond0 [ 431.811221][T11646] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input21 [ 432.133713][T11638] ima: policy update failed [ 432.149454][ T42] audit: type=1802 audit(1786981747.551:2845): pid=11638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1788" res=0 errno=0 [ 432.298752][T11655] netlink: 'syz.3.1792': attribute type 1 has an invalid length. [ 432.313386][T11655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1792'. [ 433.185625][ T258] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 433.194367][ T258] (NULL device *): queue 0 connect admin queue failed (-111). [ 433.200287][ T258] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 433.215206][ T258] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 433.515969][T11664] FAULT_INJECTION: forcing a failure. [ 433.515969][T11664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.522108][T11664] CPU: 1 UID: 0 PID: 11664 Comm: syz.2.1795 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.522139][T11664] Tainted: [L]=SOFTLOCKUP [ 433.522145][T11664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 433.522157][T11664] Call Trace: [ 433.522164][T11664] [ 433.522173][T11664] dump_stack_lvl+0x100/0x190 [ 433.522203][T11664] should_fail_ex.cold+0x5/0xa [ 433.522225][T11664] _copy_from_user+0x2e/0xd0 [ 433.522255][T11664] get_compat_msghdr+0xb3/0x480 [ 433.522275][T11664] ? __css_rstat_updated+0x1ce/0x5a0 [ 433.522303][T11664] ? __pfx_get_compat_msghdr+0x10/0x10 [ 433.522324][T11664] ? __lock_acquire+0x49f/0x1a40 [ 433.522347][T11664] ___sys_sendmsg+0x1b6/0x1e0 [ 433.522372][T11664] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.522395][T11664] ? find_held_lock+0x2b/0x80 [ 433.522424][T11664] ? find_held_lock+0x2b/0x80 [ 433.522456][T11664] __sys_sendmsg+0x160/0x210 [ 433.522480][T11664] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.522510][T11664] ? exit_to_user_mode_loop+0x166/0x700 [ 433.522527][T11664] ? rcu_is_watching+0x12/0xc0 [ 433.522552][T11664] __do_fast_syscall_32+0xe7/0x970 [ 433.522576][T11664] ? lockdep_hardirqs_on+0x78/0x100 [ 433.522601][T11664] do_fast_syscall_32+0x32/0x70 [ 433.522624][T11664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 433.522646][T11664] RIP: 0023:0xf70befec [ 433.522667][T11664] Code: Unable to access opcode bytes at 0xf70befc2. [ 433.522675][T11664] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 433.522692][T11664] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 433.522702][T11664] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.522712][T11664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.522721][T11664] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 433.522731][T11664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 433.522754][T11664] [ 433.586681][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1796'. [ 433.664157][ T5820] usbserial_generic 10-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 433.674533][ T5820] usbserial_generic 10-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 433.681036][ T5820] usbserial_generic 10-1:189.127: device has no bulk endpoints [ 433.684700][ T5820] safe_serial 10-1:189.127: safe_serial converter detected [ 433.687709][ T5820] safe_serial 10-1:189.127: probe with driver safe_serial failed with error -22 [ 433.695028][ T5820] usb 10-1: USB disconnect, device number 3 [ 433.720086][T11674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1796'. [ 434.269086][T11690] sysfs: Unknown parameter 'euid<18446744073709551615' [ 434.289585][T11692] FAULT_INJECTION: forcing a failure. [ 434.289585][T11692] name failslab, interval 1, probability 10, space 0, times 0 [ 434.296976][T11692] CPU: 0 UID: 0 PID: 11692 Comm: syz.0.1804 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.297007][T11692] Tainted: [L]=SOFTLOCKUP [ 434.297029][T11692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.297038][T11692] Call Trace: [ 434.297047][T11692] [ 434.297067][T11692] dump_stack_lvl+0x100/0x190 [ 434.297097][T11692] should_fail_ex.cold+0x5/0xa [ 434.297120][T11692] should_failslab+0xc2/0x120 [ 434.297148][T11692] __kmalloc_noprof+0xfc/0x820 [ 434.297171][T11692] ? rcu_is_watching+0x12/0xc0 [ 434.297197][T11692] ? tomoyo_realpath_from_path+0xb6/0x690 [ 434.297232][T11692] tomoyo_realpath_from_path+0xb6/0x690 [ 434.297266][T11692] tomoyo_path_number_perm+0x23c/0x580 [ 434.297291][T11692] ? tomoyo_path_number_perm+0x22e/0x580 [ 434.297314][T11692] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 434.297341][T11692] ? get_pid_task+0x106/0x250 [ 434.297391][T11692] ? find_held_lock+0x2b/0x80 [ 434.297415][T11692] ? __fget_files+0x215/0x3d0 [ 434.297433][T11692] ? hook_file_ioctl_common+0x140/0x440 [ 434.297456][T11692] ? __fget_files+0x215/0x3d0 [ 434.297477][T11692] ? __fget_files+0x21f/0x3d0 [ 434.297499][T11692] security_file_ioctl_compat+0xd3/0x230 [ 434.297527][T11692] __ia32_compat_sys_ioctl+0xc2/0x360 [ 434.297557][T11692] __do_fast_syscall_32+0xe7/0x970 [ 434.297584][T11692] ? lockdep_hardirqs_on+0x78/0x100 [ 434.297611][T11692] do_fast_syscall_32+0x32/0x70 [ 434.297636][T11692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.297658][T11692] RIP: 0023:0xf706efec [ 434.297682][T11692] Code: Unable to access opcode bytes at 0xf706efc2. [ 434.297691][T11692] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 434.297710][T11692] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0045002 [ 434.297721][T11692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 434.297731][T11692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.297743][T11692] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 434.297752][T11692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 434.297782][T11692] [ 434.298225][T11692] ERROR: Out of memory at tomoyo_realpath_from_path. [ 434.437460][T11693] rdma_rxe: rxe_newlink: failed to add bond0 [ 434.456906][ T55] net_ratelimit: 1091 callbacks suppressed [ 434.456922][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.254583][ T48] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 435.261082][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.266651][ T48] (NULL device *): queue 0 connect admin queue failed (-111). [ 435.272272][ T48] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 435.277106][ T48] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 435.328425][T11701] typec_fusb302 0-0022: supply vbus not found, using dummy regulator [ 435.345689][T11701] typec_fusb302 0-0022: failed to request gpio_int_n [ 435.368069][T11703] can: request_module (can-proto-5) failed. [ 435.386546][T11701] typec_fusb302 0-0022: probe with driver typec_fusb302 failed with error -2 [ 435.386996][T11706] typec_fusb302 1-0022: I2C/SMBus block functionality not supported! [ 435.392150][T11701] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 435.394121][T11706] i2c i2c-1: new_device: Instantiated device typec_fusb302 at 0x22 [ 435.403491][T11701] FAULT_INJECTION: forcing a failure. [ 435.403491][T11701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.412879][T11701] CPU: 1 UID: 0 PID: 11701 Comm: syz.3.1807 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.412900][T11701] Tainted: [L]=SOFTLOCKUP [ 435.412905][T11701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 435.412912][T11701] Call Trace: [ 435.412918][T11701] [ 435.412924][T11701] dump_stack_lvl+0x100/0x190 [ 435.412944][T11701] should_fail_ex.cold+0x5/0xa [ 435.412958][T11701] strncpy_from_user+0x3b/0x2d0 [ 435.412977][T11701] __do_sys_add_key+0xd4/0x460 [ 435.412992][T11701] ? __pfx___do_sys_add_key+0x10/0x10 [ 435.413002][T11701] ? fput+0x79/0x100 [ 435.413017][T11701] ? __pfx_ksys_write+0x10/0x10 [ 435.413031][T11701] __do_fast_syscall_32+0xe7/0x970 [ 435.413047][T11701] ? lockdep_hardirqs_on+0x78/0x100 [ 435.413062][T11701] do_fast_syscall_32+0x32/0x70 [ 435.413077][T11701] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 435.413093][T11701] RIP: 0023:0xf7f68fec [ 435.413114][T11701] Code: Unable to access opcode bytes at 0xf7f68fc2. [ 435.413122][T11701] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 435.413138][T11701] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000000 [ 435.413148][T11701] RDX: 0000000080000100 RSI: 00000000000fffff RDI: 00000000ffffffff [ 435.413159][T11701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 435.413166][T11701] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 435.413172][T11701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 435.413191][T11701] [ 435.475766][T11708] sysfs: Unknown parameter 'euid<18446744073709551615' [ 435.534746][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.544951][T11709] rdma_rxe: rxe_newlink: failed to add bond0 [ 435.596220][T11709] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input22 [ 435.674397][T11714] sysfs: Unknown parameter 'euid<18446744073709551615' [ 435.748603][T11715] syz1: rxe_newlink: already configured on bond0 [ 436.550425][ T42] audit: type=1807 audit(1786981751.901:2846): UNKNOWN=m™`easuÈìeø^ÏzhVÜ”öre res=0 [ 436.555146][ T42] audit: type=1802 audit(1786981751.901:2847): pid=11720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.1813" res=0 errno=0 [ 436.620614][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.829511][T11724] sysfs: Unknown parameter 'euid<18446744073709551615' [ 436.902185][T11727] syz1: rxe_newlink: already configured on bond0 [ 437.341711][ T1095] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 437.348106][ T1095] (NULL device *): queue 0 connect admin queue failed (-111). [ 437.350611][ T1095] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 437.353122][ T1095] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 437.375479][T11726] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 437.655354][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.688471][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.896558][T11718] ima: policy update failed [ 437.908209][ T42] audit: type=1802 audit(1786981753.321:2848): pid=11718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1813" res=0 errno=0 [ 438.033465][T11732] sysfs: Unknown parameter 'euid<18446744073709551615' [ 438.097959][T11740] block nbd5: NBD_DISCONNECT [ 438.099575][ T42] audit: type=1800 audit(1786981753.511:2849): pid=11738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1816" name="use" dev="configfs" ino=43352 res=0 errno=0 [ 438.111249][ T42] audit: type=1326 audit(1786981753.521:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11739 comm="syz.5.1820" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x0 [ 438.152586][T11743] sysfs: Unknown parameter 'euid<18446744073709551615' [ 438.233006][T11742] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input23 [ 438.239968][T11747] rdma_rxe: rxe_newlink: failed to add bond0 [ 438.302451][T11745] tipc: Enabling of bearer rejected, already enabled [ 438.460681][T11747] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input24 [ 438.575945][T10061] udevd[10061]: setting mode of /dev/input/mouse2 to 020660 failed: No such file or directory [ 438.613606][T10061] udevd[10061]: setting owner of /dev/input/mouse2 to uid=0, gid=104 failed: No such file or directory [ 438.637073][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.685137][T11751] syzkaller0: mtu less than device minimum [ 438.711521][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.414774][T10507] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 439.419164][T10507] (NULL device *): queue 0 connect admin queue failed (-111). [ 439.421760][T10507] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 439.424111][T10507] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 439.439817][ T42] audit: type=1326 audit(1786981754.801:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.5.1823" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 439.451583][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1829'. [ 439.461491][ T42] audit: type=1326 audit(1786981754.801:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.5.1823" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 439.482620][ T42] audit: type=1326 audit(1786981754.801:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.5.1823" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 439.503593][ T42] audit: type=1326 audit(1786981754.801:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.5.1823" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 439.528936][T11773] block nbd5: NBD_DISCONNECT [ 439.529191][ T42] audit: type=1326 audit(1786981754.811:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.5.1823" exe="/syz-executor" sig=0 arch=40000003 syscall=256 compat=1 ip=0xf704efec code=0x7ffc0000 [ 439.577576][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.580322][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.644584][ T3257] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 439.734967][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.815908][ T3257] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 439.821297][ T3257] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 439.826032][ T3257] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 439.829134][ T3257] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.209900][ T5820] usb 7-1: USB disconnect, device number 20 [ 440.992563][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.078643][T11783] overlayfs: failed to resolve './file1': -2 [ 441.130942][T11796] FAULT_INJECTION: forcing a failure. [ 441.130942][T11796] name failslab, interval 1, probability 10, space 0, times 0 [ 441.137635][T11796] CPU: 0 UID: 0 PID: 11796 Comm: syz.2.1838 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.137673][T11796] Tainted: [L]=SOFTLOCKUP [ 441.137680][T11796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.137690][T11796] Call Trace: [ 441.137699][T11796] [ 441.137708][T11796] dump_stack_lvl+0x100/0x190 [ 441.137739][T11796] should_fail_ex.cold+0x5/0xa [ 441.137763][T11796] should_failslab+0xc2/0x120 [ 441.137807][T11796] __kmalloc_noprof+0xfc/0x820 [ 441.137835][T11796] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 441.137864][T11796] kernfs_fop_write_iter+0x26a/0x5f0 [ 441.137891][T11796] vfs_write+0x6ac/0x1050 [ 441.137913][T11796] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 441.137937][T11796] ? __pfx_vfs_write+0x10/0x10 [ 441.137954][T11796] ? find_held_lock+0x2b/0x80 [ 441.137995][T11796] ksys_write+0x12a/0x250 [ 441.138015][T11796] ? __pfx_ksys_write+0x10/0x10 [ 441.138033][T11796] ? ksys_write+0x1ac/0x250 [ 441.138049][T11796] ? __pfx_ksys_write+0x10/0x10 [ 441.138071][T11796] __do_fast_syscall_32+0xe7/0x970 [ 441.138098][T11796] ? lockdep_hardirqs_on+0x78/0x100 [ 441.138120][T11796] do_fast_syscall_32+0x32/0x70 [ 441.138144][T11796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.138168][T11796] RIP: 0023:0xf70befec [ 441.138195][T11796] Code: Unable to access opcode bytes at 0xf70befc2. [ 441.138204][T11796] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 441.138225][T11796] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 441.138239][T11796] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.138250][T11796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 441.138261][T11796] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 441.138272][T11796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.138297][T11796] [ 441.253567][ T5090] Bluetooth: hci3: unexpected cc 0x2029 length: 100 > 1 [ 441.256080][ T5090] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 441.505297][ T1155] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 441.633245][T11809] netlink: zone id is out of range [ 441.636315][T11809] netlink: zone id is out of range [ 441.638002][T11809] netlink: zone id is out of range [ 441.639763][T11809] netlink: zone id is out of range [ 441.641475][T11809] netlink: zone id is out of range [ 441.643201][T11809] netlink: zone id is out of range [ 441.645409][T11809] netlink: zone id is out of range [ 441.647099][T11809] netlink: zone id is out of range [ 441.707825][ T1155] (NULL device *): queue 0 connect admin queue failed (-111). [ 441.713331][ T1155] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 441.721583][ T1155] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 442.107128][T11794] ima: policy update failed [ 442.109209][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 442.109283][ T42] audit: type=1802 audit(1786981757.521:2865): pid=11794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1837" res=0 errno=0 [ 442.201114][T11813] sysfs: Unknown parameter 'euid<18446744073709551615' [ 442.281524][T11814] syz1: rxe_newlink: already configured on bond0 [ 442.331758][T11814] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input25 [ 442.438597][T11810] syz.2.1839: vmalloc error: size 15032385536, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 442.646941][T11810] CPU: 2 UID: 0 PID: 11810 Comm: syz.2.1839 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.646976][T11810] Tainted: [L]=SOFTLOCKUP [ 442.646982][T11810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 442.646989][T11810] Call Trace: [ 442.646996][T11810] [ 442.647002][T11810] dump_stack_lvl+0x100/0x190 [ 442.647024][T11810] warn_alloc.cold+0x94/0xa8 [ 442.647038][T11810] ? __pfx_warn_alloc+0x10/0x10 [ 442.647066][T11810] __vmalloc_node_range_noprof+0x136c/0x1630 [ 442.647093][T11810] ? __lock_acquire+0x49f/0x1a40 [ 442.647106][T11810] ? disksize_store+0x11a/0x4d0 [ 442.647135][T11810] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 442.647157][T11810] ? __pfx___might_resched+0x10/0x10 [ 442.647176][T11810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 442.647200][T11810] ? disksize_store+0x11a/0x4d0 [ 442.647213][T11810] __vmalloc_node_noprof+0xad/0xf0 [ 442.647232][T11810] ? disksize_store+0x11a/0x4d0 [ 442.647247][T11810] disksize_store+0x11a/0x4d0 [ 442.647263][T11810] ? sysfs_file_kobj+0xe4/0x290 [ 442.647281][T11810] ? __pfx_disksize_store+0x10/0x10 [ 442.647295][T11810] dev_attr_store+0x58/0x80 [ 442.647307][T11810] ? __pfx_dev_attr_store+0x10/0x10 [ 442.647317][T11810] sysfs_kf_write+0xf2/0x150 [ 442.647336][T11810] kernfs_fop_write_iter+0x3e0/0x5f0 [ 442.647350][T11810] ? __pfx_sysfs_kf_write+0x10/0x10 [ 442.647367][T11810] vfs_write+0x6ac/0x1050 [ 442.647381][T11810] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 442.647397][T11810] ? __pfx_vfs_write+0x10/0x10 [ 442.647406][T11810] ? find_held_lock+0x2b/0x80 [ 442.647431][T11810] ksys_write+0x12a/0x250 [ 442.647442][T11810] ? __pfx_ksys_write+0x10/0x10 [ 442.647458][T11810] __do_fast_syscall_32+0xe7/0x970 [ 442.647477][T11810] do_fast_syscall_32+0x32/0x70 [ 442.647492][T11810] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 442.647506][T11810] RIP: 0023:0xf70befec [ 442.647524][T11810] Code: Unable to access opcode bytes at 0xf70befc2. [ 442.647529][T11810] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 442.647541][T11810] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000340 [ 442.647548][T11810] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 442.647555][T11810] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.647561][T11810] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 442.647567][T11810] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.647583][T11810] [ 442.779631][T11810] Mem-Info: [ 442.782881][T11810] active_anon:5549 inactive_anon:73 isolated_anon:0 [ 442.782881][T11810] active_file:2522 inactive_file:25758 isolated_file:0 [ 442.782881][T11810] unevictable:0 dirty:654 writeback:0 [ 442.782881][T11810] slab_reclaimable:6513 slab_unreclaimable:62959 [ 442.782881][T11810] mapped:24990 shmem:227 pagetables:1349 [ 442.782881][T11810] sec_pagetables:302 bounce:0 [ 442.782881][T11810] kernel_misc_reclaimable:0 [ 442.782881][T11810] free:51434 free_pcp:15125 free_cma:0 [ 442.797392][T11810] Node 0 active_anon:180kB inactive_anon:148kB active_file:64kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:8kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8288kB pagetables:1544kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 442.816564][T11810] Node 1 active_anon:22016kB inactive_anon:144kB active_file:10024kB inactive_file:103028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100064kB dirty:2608kB writeback:0kB shmem:904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5584kB pagetables:3752kB sec_pagetables:96kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 442.910157][T11810] Node 0 DMA free:2528kB boost:0kB min:744kB low:928kB high:1112kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 442.921940][T11810] lowmem_reserve[]: 0 280 280 280 280 [ 442.923756][T11810] Node 0 DMA32 free:25828kB boost:0kB min:13920kB low:17400kB high:20880kB reserved_highatomic:0KB free_highatomic:0KB active_anon:180kB inactive_anon:148kB active_file:64kB inactive_file:4kB unevictable:0kB writepending:8kB zspages:0kB present:1032196kB managed:286888kB mlocked:0kB bounce:0kB free_pcp:1052kB local_pcp:228kB free_cma:0kB [ 442.949519][T11810] lowmem_reserve[]: 0 0 0 0 0 [ 442.953452][T11810] Node 1 DMA32 free:182704kB boost:0kB min:46012kB low:57512kB high:69012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22016kB inactive_anon:144kB active_file:10024kB inactive_file:103028kB unevictable:0kB writepending:2608kB zspages:2304kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:54420kB local_pcp:8488kB free_cma:0kB [ 442.963809][T11810] lowmem_reserve[]: 0 0 0 0 0 [ 442.965585][T11810] Node 0 DMA: 56*4kB (U) 10*8kB (U) 1*16kB (U) 9*32kB (U) 2*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2528kB [ 442.970048][T11810] Node 0 DMA32: 523*4kB (UE) 124*8kB (UME) 113*16kB (UME) 83*32kB (ME) 45*64kB (ME) 20*128kB (ME) 5*256kB (UME) 4*512kB (UM) 5*1024kB (UM) 2*2048kB (UM) 0*4096kB = 25532kB [ 442.976498][T11810] Node 1 DMA32: 394*4kB (U) 117*8kB (UM) 50*16kB (UE) 251*32kB (UE) 143*64kB (UE) 78*128kB (UE) 89*256kB (UME) 73*512kB (UM) 72*1024kB (UM) 7*2048kB (M) 1*4096kB (U) = 182800kB [ 442.982019][T11810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.985083][T11810] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 442.988092][T11810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.991082][T11810] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 442.993949][T11810] 28692 total pagecache pages [ 442.996129][T11810] 187 pages in swap cache [ 442.997431][T11810] Free swap = 119004kB [ 442.998834][T11810] Total swap = 124996kB [ 443.000128][T11810] 524155 pages RAM [ 443.001317][T11810] 0 pages HighMem/MovableOnly [ 443.002785][T11810] 211540 pages reserved [ 443.004047][T11810] 0 pages cma reserved [ 443.229109][ T850] libceph: connect (1)[c::]:6789 error -101 [ 443.317954][ T850] libceph: mon0 (1)[c::]:6789 connect error [ 443.352523][T11825] sysfs: Unknown parameter 'euid<18446744073709551615' [ 443.445980][T11826] rdma_rxe: rxe_newlink: failed to add bond0 [ 443.491355][T11826] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input26 [ 443.497692][T11830] FAULT_INJECTION: forcing a failure. [ 443.497692][T11830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.504667][T11830] CPU: 1 UID: 0 PID: 11830 Comm: syz.3.1847 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.504698][T11830] Tainted: [L]=SOFTLOCKUP [ 443.504705][T11830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 443.504716][T11830] Call Trace: [ 443.504724][T11830] [ 443.504733][T11830] dump_stack_lvl+0x100/0x190 [ 443.504762][T11830] should_fail_ex.cold+0x5/0xa [ 443.504786][T11830] _copy_from_user+0x2e/0xd0 [ 443.504817][T11830] do_ipv6_setsockopt+0x73d/0x43a0 [ 443.504852][T11830] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 443.504876][T11830] ? __lock_acquire+0x49f/0x1a40 [ 443.504895][T11830] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 443.504932][T11830] ? find_held_lock+0x2b/0x80 [ 443.504966][T11830] ? __pfx___might_resched+0x10/0x10 [ 443.505006][T11830] ? ipv6_setsockopt+0xcb/0x170 [ 443.505026][T11830] ipv6_setsockopt+0xcb/0x170 [ 443.505050][T11830] rawv6_setsockopt+0xee/0x5a0 [ 443.505070][T11830] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 443.505096][T11830] ? aa_sock_opt_perm+0xfe/0x1b0 [ 443.505114][T11830] ? sock_common_setsockopt+0x2e/0xf0 [ 443.505133][T11830] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 443.505150][T11830] do_sock_setsockopt+0xf3/0x1d0 [ 443.505187][T11830] __sys_setsockopt+0x119/0x190 [ 443.505217][T11830] __ia32_sys_setsockopt+0xbc/0x160 [ 443.505239][T11830] ? __do_fast_syscall_32+0x98/0x970 [ 443.505265][T11830] ? lockdep_hardirqs_on+0x78/0x100 [ 443.505287][T11830] __do_fast_syscall_32+0xe7/0x970 [ 443.505307][T11830] ? lockdep_hardirqs_on+0x78/0x100 [ 443.505330][T11830] do_fast_syscall_32+0x32/0x70 [ 443.505370][T11830] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 443.505393][T11830] RIP: 0023:0xf7f68fec [ 443.505416][T11830] Code: Unable to access opcode bytes at 0xf7f68fc2. [ 443.505423][T11830] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 443.505441][T11830] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 443.505452][T11830] RDX: 00000000000000d1 RSI: 0000000080000040 RDI: 0000000000000004 [ 443.505462][T11830] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 443.505472][T11830] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 443.505481][T11830] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 443.505505][T11830] [ 443.634995][ T850] libceph: connect (1)[c::]:6789 error -101 [ 443.637630][ T850] libceph: mon0 (1)[c::]:6789 connect error [ 443.734689][ T1156] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 443.744367][ T1156] (NULL device *): queue 0 connect admin queue failed (-111). [ 443.752693][ T1156] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 443.757931][ T1156] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 443.784788][T11836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.842247][T11837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.896309][T11817] ceph: No mds server is up or the cluster is laggy [ 443.923158][T11838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.124391][T11843] block nbd5: NBD_DISCONNECT [ 444.132566][ T42] audit: type=1326 audit(1786981759.541:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.5.1851" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x0 [ 444.450925][T11855] sysfs: Unknown parameter 'euid<18446744073709551615' [ 444.456784][T11857] sysfs: Unknown parameter 'euid<18446744073709551615' [ 444.516336][T11858] rdma_rxe: rxe_newlink: failed to add bond0 [ 444.536225][T11859] rdma_rxe: rxe_newlink: failed to add bond0 [ 444.579790][T11858] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input27 [ 445.201946][T11857] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input28 [ 445.306626][ T42] audit: type=1807 audit(1786981760.671:2867): UNKNOWN=m™`easuÈìeø^ÏzhVÜ”öre res=0 [ 445.310712][ T42] audit: type=1802 audit(1786981760.671:2868): pid=11863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1858" res=0 errno=0 [ 445.320471][T11867] block nbd5: NBD_DISCONNECT [ 445.333290][ T42] audit: type=1326 audit(1786981760.741:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11866 comm="syz.5.1857" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x0 [ 445.346929][ T5090] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 445.584696][ T55] net_ratelimit: 362 callbacks suppressed [ 445.584721][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.682882][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1864'. [ 445.695181][ T5842] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 445.805466][T11887] sysfs: Unknown parameter 'euid<18446744073709551615' [ 445.814853][ T258] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 445.824200][ T258] (NULL device *): queue 0 connect admin queue failed (-111). [ 445.828952][ T258] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 445.832285][ T258] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 445.882709][T11888] syz1: rxe_newlink: already configured on bond0 [ 445.883986][ T5842] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 445.894608][ T5842] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 445.901662][ T5842] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 445.907119][ T5842] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.928641][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 445.932855][ T5842] usb 7-1: Product: syz [ 445.941487][ T5842] usb 7-1: Manufacturer: syz [ 445.943832][ T5842] usb 7-1: SerialNumber: syz [ 445.965115][T11888] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input29 [ 446.217712][T11861] ima: policy update failed [ 446.219320][ T42] audit: type=1802 audit(1786981761.631:2870): pid=11861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1858" res=0 errno=0 [ 446.219739][ T5842] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 446.453402][ T5842] usb 7-1: USB disconnect, device number 21 [ 446.459545][ T5842] usblp0: removed [ 446.611349][T11898] overlayfs: missing 'lowerdir' [ 446.675966][T11902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.679001][T11902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.682073][T11902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.685771][T11902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.688604][T11902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.692483][T11902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.697045][T11902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.699896][T11902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.823549][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.015531][T11909] block nbd0: NBD_DISCONNECT [ 447.073220][ T42] audit: type=1326 audit(1786981762.481:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.0.1875" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x0 [ 447.096698][T11918] FAULT_INJECTION: forcing a failure. [ 447.096698][T11918] name failslab, interval 1, probability 10, space 0, times 0 [ 447.100685][T11918] CPU: 0 UID: 0 PID: 11918 Comm: syz.2.1877 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.100705][T11918] Tainted: [L]=SOFTLOCKUP [ 447.100709][T11918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 447.100716][T11918] Call Trace: [ 447.100727][T11918] [ 447.100732][T11918] dump_stack_lvl+0x100/0x190 [ 447.100839][T11918] should_fail_ex.cold+0x5/0xa [ 447.100869][T11918] should_failslab+0xc2/0x120 [ 447.100909][T11918] __kmalloc_noprof+0xfc/0x820 [ 447.100925][T11918] ? bpf_test_init.isra.0+0x88/0x100 [ 447.100995][T11918] bpf_test_init.isra.0+0x88/0x100 [ 447.101015][T11918] bpf_prog_test_run_flow_dissector+0x236/0x980 [ 447.101048][T11918] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 447.101063][T11918] ? find_held_lock+0x2b/0x80 [ 447.101103][T11918] ? __fget_files+0x215/0x3d0 [ 447.101125][T11918] ? __fget_files+0x21f/0x3d0 [ 447.101138][T11918] ? fput+0x79/0x100 [ 447.101157][T11918] ? __bpf_prog_get+0x97/0x2a0 [ 447.101180][T11918] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 447.101193][T11918] __sys_bpf+0x2a12/0x4e80 [ 447.101210][T11918] ? __pfx___sys_bpf+0x10/0x10 [ 447.101223][T11918] ? find_held_lock+0x2b/0x80 [ 447.101236][T11918] ? get_pid_task+0xfc/0x250 [ 447.101257][T11918] ? get_pid_task+0xfc/0x250 [ 447.101274][T11918] ? proc_fail_nth_write+0x9f/0x220 [ 447.101305][T11918] ? find_held_lock+0x2b/0x80 [ 447.101322][T11918] ? rcu_read_lock_any_held+0x6a/0xa0 [ 447.101344][T11918] ? find_held_lock+0x2b/0x80 [ 447.101357][T11918] ? ksys_write+0x190/0x250 [ 447.101368][T11918] ? ksys_write+0x190/0x250 [ 447.101389][T11918] ? fput+0x79/0x100 [ 447.101403][T11918] ? __ia32_sys_bpf+0xcc/0x170 [ 447.101415][T11918] __ia32_sys_bpf+0xcc/0x170 [ 447.101427][T11918] ? __do_fast_syscall_32+0x98/0x970 [ 447.101492][T11918] __do_fast_syscall_32+0xe7/0x970 [ 447.101505][T11918] ? lockdep_hardirqs_on+0x78/0x100 [ 447.101520][T11918] do_fast_syscall_32+0x32/0x70 [ 447.101535][T11918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.101551][T11918] RIP: 0023:0xf70befec [ 447.101578][T11918] Code: Unable to access opcode bytes at 0xf70befc2. [ 447.101592][T11918] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 447.101604][T11918] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000800 [ 447.101611][T11918] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 447.101618][T11918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 447.101624][T11918] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 447.101630][T11918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 447.101644][T11918] [ 447.216730][T11919] netlink: 'syz.5.1867': attribute type 4 has an invalid length. [ 447.240650][T11919] netlink: 'syz.5.1867': attribute type 4 has an invalid length. [ 447.253144][T11922] sysfs: Unknown parameter 'euid<18446744073709551615' [ 447.330111][T11925] rdma_rxe: rxe_newlink: failed to add bond0 [ 447.363820][T11925] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input30 [ 447.445309][ T42] audit: type=1807 audit(1786981762.821:2872): UNKNOWN=m™`easuÈìeø^ÏzhVÜ”öre res=0 [ 447.466170][ T42] audit: type=1802 audit(1786981762.821:2873): pid=11926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1878" res=0 errno=0 [ 447.896013][ T258] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 447.926407][ T258] (NULL device *): queue 0 connect admin queue failed (-111). [ 447.949337][ T258] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 447.971584][ T258] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 448.258477][T11921] ima: policy update failed [ 448.261342][ T42] audit: type=1802 audit(1786981763.671:2874): pid=11921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1878" res=0 errno=0 [ 448.477460][T11947] FAULT_INJECTION: forcing a failure. [ 448.477460][T11947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.483360][T11947] CPU: 3 UID: 0 PID: 11947 Comm: syz.5.1887 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.483501][T11947] Tainted: [L]=SOFTLOCKUP [ 448.483509][T11947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 448.483519][T11947] Call Trace: [ 448.483527][T11947] [ 448.483535][T11947] dump_stack_lvl+0x100/0x190 [ 448.483571][T11947] should_fail_ex.cold+0x5/0xa [ 448.483594][T11947] _copy_from_user+0x2e/0xd0 [ 448.483682][T11947] bpf_test_init.isra.0+0xaf/0x100 [ 448.483716][T11947] bpf_prog_test_run_skb+0x497/0x3540 [ 448.483740][T11947] ? find_held_lock+0x2b/0x80 [ 448.483764][T11947] ? __fget_files+0x150/0x3d0 [ 448.483789][T11947] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 448.483813][T11947] ? fput+0x79/0x100 [ 448.483839][T11947] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 448.483861][T11947] __sys_bpf+0x2a12/0x4e80 [ 448.483888][T11947] ? __pfx___sys_bpf+0x10/0x10 [ 448.483910][T11947] ? find_held_lock+0x2b/0x80 [ 448.483932][T11947] ? get_pid_task+0xfc/0x250 [ 448.483955][T11947] ? get_pid_task+0xfc/0x250 [ 448.483996][T11947] ? proc_fail_nth_write+0x9f/0x220 [ 448.484027][T11947] ? find_held_lock+0x2b/0x80 [ 448.484055][T11947] ? rcu_read_lock_any_held+0x6a/0xa0 [ 448.484079][T11947] ? find_held_lock+0x2b/0x80 [ 448.484101][T11947] ? ksys_write+0x190/0x250 [ 448.484118][T11947] ? ksys_write+0x190/0x250 [ 448.484153][T11947] ? fput+0x79/0x100 [ 448.484177][T11947] ? __ia32_sys_bpf+0xcc/0x170 [ 448.484196][T11947] __ia32_sys_bpf+0xcc/0x170 [ 448.484218][T11947] ? __do_fast_syscall_32+0x98/0x970 [ 448.484247][T11947] __do_fast_syscall_32+0xe7/0x970 [ 448.484270][T11947] ? lockdep_hardirqs_on+0x78/0x100 [ 448.484294][T11947] do_fast_syscall_32+0x32/0x70 [ 448.484319][T11947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 448.484344][T11947] RIP: 0023:0xf704efec [ 448.484368][T11947] Code: Unable to access opcode bytes at 0xf704efc2. [ 448.484378][T11947] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 448.484423][T11947] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 448.484436][T11947] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 448.484447][T11947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.484458][T11947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.484469][T11947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.484495][T11947] [ 448.549065][T11949] block nbd3: NBD_DISCONNECT [ 448.590420][ T42] audit: type=1326 audit(1786981764.001:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11948 comm="syz.3.1888" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x0 [ 448.674628][ T5842] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 448.845738][ T5842] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 448.849766][ T5842] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 448.853045][ T5842] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 448.856523][ T5842] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.862498][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 448.865454][ T5842] usb 7-1: Product: syz [ 448.867048][ T5842] usb 7-1: Manufacturer: syz [ 448.868598][ T5842] usb 7-1: SerialNumber: syz [ 448.960007][T11967] sysfs: Unknown parameter 'euid<18446744073709551615' [ 449.021586][T11968] rdma_rxe: rxe_newlink: failed to add bond0 [ 449.039161][T11968] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input31 [ 449.094330][ T5842] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 449.290621][ T5842] usb 7-1: USB disconnect, device number 22 [ 449.301540][ T5842] usblp0: removed [ 449.836531][ T5842] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 450.004681][ T5842] usb 8-1: Using ep0 maxpacket: 8 [ 450.006838][ T5842] usb 8-1: New USB device found, idVendor=0bb4, idProduct=0a39, bcdDevice=c5.0d [ 450.010785][ T5842] usb 8-1: config 4 has an invalid interface number: 37 but max is 2 [ 450.013873][ T5842] usb 8-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 450.016708][ T5842] usb 8-1: config 4 has an invalid interface number: 201 but max is 2 [ 450.019170][ T5842] usb 8-1: config 4 has an invalid interface number: 226 but max is 2 [ 450.021594][ T5842] usb 8-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 450.024358][ T5842] usb 8-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 450.027895][ T5842] usb 8-1: config 4 has no interface number 0 [ 450.029878][ T5842] usb 8-1: config 4 has no interface number 1 [ 450.031775][ T5842] usb 8-1: config 4 has no interface number 2 [ 450.033652][ T5842] usb 8-1: config 4 interface 37 altsetting 5 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 450.037363][ T5842] usb 8-1: config 4 interface 37 altsetting 5 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 450.040713][ T5842] usb 8-1: config 4 interface 37 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 450.043899][ T5842] usb 8-1: config 4 interface 37 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 450.048055][ T5842] usb 8-1: config 4 interface 37 altsetting 5 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 450.051369][ T5842] usb 8-1: config 4 interface 37 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 64 [ 450.054411][ T5842] usb 8-1: config 4 interface 201 altsetting 7 endpoint 0x8 has invalid wMaxPacketSize 0 [ 450.057519][ T1155] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 450.061764][ T5842] usb 8-1: config 4 interface 201 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 450.065540][ T5842] usb 8-1: config 4 interface 201 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 450.069010][ T1155] (NULL device *): queue 0 connect admin queue failed (-111). [ 450.071407][ T1155] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 450.074022][ T1155] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 450.076752][ T5842] usb 8-1: config 4 interface 201 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 450.080210][ T5842] usb 8-1: config 4 interface 201 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 450.084164][ T5842] usb 8-1: config 4 interface 226 altsetting 203 has an invalid descriptor for endpoint zero, skipping [ 450.087984][ T5842] usb 8-1: config 4 interface 226 altsetting 203 has a duplicate endpoint with address 0x5, skipping [ 450.091442][ T5842] usb 8-1: config 4 interface 226 altsetting 203 has a duplicate endpoint with address 0xF, skipping [ 450.095632][ T5842] usb 8-1: config 4 interface 226 altsetting 203 has an invalid descriptor for endpoint zero, skipping [ 450.099120][ T5842] usb 8-1: config 4 interface 226 altsetting 203 has a duplicate endpoint with address 0x4, skipping [ 450.102568][ T5842] usb 8-1: config 4 interface 226 altsetting 203 has a duplicate endpoint with address 0xC, skipping [ 450.106320][ T5842] usb 8-1: config 4 interface 226 altsetting 203 has a duplicate endpoint with address 0xF, skipping [ 450.109709][ T5842] usb 8-1: config 4 interface 226 altsetting 203 has a duplicate endpoint with address 0x2, skipping [ 450.113287][ T5842] usb 8-1: config 4 interface 226 altsetting 203 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 450.117298][ T5842] usb 8-1: config 4 interface 226 altsetting 203 has a duplicate endpoint with address 0x88, skipping [ 450.120675][ T5842] usb 8-1: config 4 interface 226 altsetting 203 has a duplicate endpoint with address 0x4, skipping [ 450.124034][ T5842] usb 8-1: config 4 interface 37 has no altsetting 0 [ 450.126490][ T5842] usb 8-1: config 4 interface 201 has no altsetting 0 [ 450.128860][ T5842] usb 8-1: config 4 interface 226 has no altsetting 0 [ 450.132968][ T5842] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.135737][ T5842] usb 8-1: Product: ㄣߜ籓扑䉧Ṵ簮휜훹á鞣ç›àº˜ï„ªâ£°îŸ•â•­èî½¶ [ 450.138593][ T5842] usb 8-1: Manufacturer: Ь [ 450.140135][ T5842] usb 8-1: SerialNumber: 쎭åŠÙ•毕櫷êªã¯²î˜®áƒ§â†€î¡¹è”Žçˆì®á½šé‘“淸Ღ膋⌙⮰涴녊⧯讯᱆à஥é¾â³½å“›ï„掅㺙쉌㘸嗷穩貗䎸㻀哼æ§ã¾±éž¸Ð»é¶ºæ²¨ê‡¿é‹¶í‡žë´í‘˜ç­ºæ™ƒè–°ë¾±ëŽªç­£ä–°ë‹ìŒ¤êˆ•⻑鴗æŸâ–‹ëˆ¥ïº€ã¸è†§ã¯ë™–綳徧屳é¹ì˜¿ïŠ›â…“îœ”â©¶ì¼ é³¥â¬½æ€ºå‡ç²á¬Ÿå§è¡¥æ”™ [ 450.151940][T11970] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 450.503312][T11987] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 450.690151][ T5842] usb 8-1: USB disconnect, device number 18 [ 450.774791][ T7225] net_ratelimit: 6 callbacks suppressed [ 450.774815][ T7225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.046809][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1900'. [ 451.340349][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.364423][T11992] block nbd3: NBD_DISCONNECT [ 451.368541][ T42] audit: type=1326 audit(1786981766.781:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11991 comm="syz.3.1904" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x0 [ 451.864814][ T5842] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 452.035389][ T5842] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 452.040985][ T5842] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 452.045853][ T5842] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 452.049589][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.134859][ T258] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 452.140288][ T258] (NULL device *): queue 0 connect admin queue failed (-111). [ 452.143681][ T258] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 452.147899][ T258] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 452.440141][ T5842] usb 7-1: USB disconnect, device number 23 [ 452.526567][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.562616][T12015] netlink: zone id is out of range [ 452.565130][T12015] netlink: zone id is out of range [ 452.567119][T12015] netlink: zone id is out of range [ 452.569154][T12015] netlink: zone id is out of range [ 452.571060][T12015] netlink: zone id is out of range [ 452.573176][T12015] netlink: zone id is out of range [ 452.577777][T12015] netlink: zone id is out of range [ 452.828025][T12019] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 452.851897][ T1095] Bluetooth: hci4: Frame reassembly failed (-84) [ 453.106911][T12035] sysfs: Unknown parameter 'euid<18446744073709551615' [ 453.192356][T12037] rdma_rxe: rxe_newlink: failed to add bond0 [ 453.243833][T12037] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input32 [ 453.631874][T12040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 453.844954][T12042] block nbd0: NBD_DISCONNECT [ 453.850040][ T42] audit: type=1326 audit(1786981769.261:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12041 comm="syz.0.1918" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x0 [ 454.206263][T12053] sysfs: Unknown parameter 'euid<18446744073709551615' [ 454.214683][ T258] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 454.218668][ T258] (NULL device *): queue 0 connect admin queue failed (-111). [ 454.221028][ T258] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 454.224140][ T258] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 454.275427][T12054] rdma_rxe: rxe_newlink: failed to add bond0 [ 454.347236][T12054] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input33 [ 454.674607][ T850] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 454.825947][ T850] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 454.829846][ T850] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 454.833165][ T850] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 454.836264][ T850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.859072][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 454.863841][ T5090] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 455.232932][ T5842] usb 8-1: USB disconnect, device number 19 [ 455.235227][ T42] audit: type=1807 audit(1786981770.631:2878): UNKNOWN=m™`easuÈìeø^ÏzhVÜ”öre res=0 [ 455.256648][ T42] audit: type=1802 audit(1786981770.631:2879): pid=12061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1924" res=0 errno=0 [ 455.289993][T12063] sysfs: Unknown parameter 'euid<18446744073709551615' [ 455.365656][T12064] rdma_rxe: rxe_newlink: failed to add bond0 [ 455.399536][T12064] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input34 [ 455.978009][T12059] ima: policy update failed [ 455.979828][ T42] audit: type=1802 audit(1786981771.391:2880): pid=12059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1924" res=0 errno=0 [ 456.258851][ T7225] libceph: connect (1)[c::]:6789 error -101 [ 456.297799][ T7225] libceph: mon0 (1)[c::]:6789 connect error [ 456.303209][ T1095] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 456.347165][T12071] ceph: No mds server is up or the cluster is laggy [ 456.435361][ T1095] (NULL device *): queue 0 connect admin queue failed (-111). [ 456.461466][ T1095] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 456.471386][ T1095] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 456.740844][ T5815] net_ratelimit: 364 callbacks suppressed [ 456.740861][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.854850][ T7225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.875586][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.074455][T12082] ntfs3(nullb0): Primary boot signature is not NTFS. [ 457.080430][T12082] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 457.257607][T12087] sysfs: Unknown parameter 'euid<18446744073709551615' [ 457.451385][T12087] rdma_rxe: rxe_newlink: failed to add bond0 [ 457.488023][T12087] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input35 [ 457.898762][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.214439][T12105] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 458.365482][ T7980] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 458.487283][T12093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.490771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.511594][T12093] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1932'. [ 458.515952][ T7980] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 458.522984][ T7980] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 458.529293][ T7980] usb 10-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 458.534836][ T1155] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 458.537441][ T7980] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.539923][ T1155] (NULL device *): queue 0 connect admin queue failed (-111). [ 458.546050][ T1155] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 458.552134][ T1155] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 458.923948][ T7980] usb 10-1: USB disconnect, device number 4 [ 459.019982][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.086053][T10532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.114783][T10532] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.118216][T10532] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.121938][T10532] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.127348][T10532] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.272411][T12111] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 459.443665][T12115] sg_read: process 1411 (syz.3.1939) changed security contexts after opening file descriptor, this is not allowed. [ 459.805330][ T8089] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 459.898864][ T7980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.967406][ T8089] usb 10-1: Using ep0 maxpacket: 32 [ 459.970477][ T8089] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 459.975476][ T8089] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.979421][ T8089] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.983343][ T8089] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 459.991254][ T8089] usb 10-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 459.995126][ T8089] usb 10-1: Product: syz [ 459.996961][ T8089] usb 10-1: Manufacturer: syz [ 459.998995][ T8089] usb 10-1: SerialNumber: syz [ 460.012160][ T8089] input: appletouch as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/input/input36 [ 460.055088][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.439000][ T5840] usb 10-1: USB disconnect, device number 5 [ 460.556132][ T5840] appletouch 10-1:1.0: input: appletouch disconnected [ 460.614621][ T1095] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 460.619965][ T1095] (NULL device *): queue 0 connect admin queue failed (-111). [ 460.623520][ T1095] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 460.634762][ T1095] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 460.764599][ T5815] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 461.330064][ T5815] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 461.336210][ T5815] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 461.341184][ T5815] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 461.346612][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.473027][T12158] sysfs: Unknown parameter 'euid<18446744073709551615' [ 461.538694][T12159] rdma_rxe: rxe_newlink: failed to add bond0 [ 461.583530][T12159] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input37 [ 462.022124][ T5840] usb 7-1: USB disconnect, device number 24 [ 462.214756][ T5815] net_ratelimit: 368 callbacks suppressed [ 462.214773][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.525657][T12167] sysfs: Unknown parameter 'euid<18446744073709551615' [ 462.618452][T12168] rdma_rxe: rxe_newlink: failed to add bond0 [ 462.636618][T12168] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input38 [ 462.650909][T12172] sysfs: Unknown parameter 'euid<18446744073709551615' [ 462.696007][ T1095] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 462.713737][ T1095] (NULL device *): queue 0 connect admin queue failed (-111). [ 462.724350][ T1095] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 462.730277][T12174] rdma_rxe: rxe_newlink: failed to add bond0 [ 462.733313][ T1095] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 462.956137][T12174] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input39 [ 463.187858][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.233977][ T7225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.393542][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.494910][ T5090] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 463.603998][T12180] Bluetooth: ISO socket layer initialized [ 463.657629][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1960'. [ 463.822204][T12194] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 464.043948][T12203] netlink: 134608 bytes leftover after parsing attributes in process `syz.3.1964'. [ 464.050354][T12203] netlink: 'syz.3.1964': attribute type 1 has an invalid length. [ 464.077726][T12203] netlink: 65174 bytes leftover after parsing attributes in process `syz.3.1964'. [ 464.489095][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.774596][T10502] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 464.778826][T10502] (NULL device *): queue 0 connect admin queue failed (-111). [ 464.781725][T10502] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 464.787008][T10502] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 464.799173][T12220] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1969'. [ 464.894668][ T5815] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 465.023658][T12225] sysfs: Unknown parameter 'euid<18446744073709551615' [ 465.102231][T12228] rdma_rxe: rxe_newlink: failed to add bond0 [ 465.162930][T12228] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input40 [ 465.484694][ T7980] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 465.570138][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.635314][ T7980] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 465.639392][ T7980] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 465.642320][ T7980] usb 8-1: config 0 has no interface number 0 [ 465.644425][ T7980] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 465.651591][ T7980] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.654904][ T7980] usb 8-1: Product: syz [ 465.656618][ T7980] usb 8-1: Manufacturer: syz [ 465.658136][ T7980] usb 8-1: SerialNumber: syz [ 465.662679][ T7980] usb 8-1: config 0 descriptor?? [ 465.686435][ T7980] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 465.726812][ T5815] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 465.730547][ T5815] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 465.733857][ T5815] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 465.739399][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.864017][T12233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.867320][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.876220][T12231] FAULT_INJECTION: forcing a failure. [ 465.876220][T12231] name failslab, interval 1, probability 10, space 0, times 0 [ 465.882051][T12231] CPU: 2 UID: 0 PID: 12231 Comm: syz.3.1972 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.882082][T12231] Tainted: [L]=SOFTLOCKUP [ 465.882087][T12231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 465.882094][T12231] Call Trace: [ 465.882099][T12231] [ 465.882104][T12231] dump_stack_lvl+0x100/0x190 [ 465.882125][T12231] should_fail_ex.cold+0x5/0xa [ 465.882139][T12231] should_failslab+0xc2/0x120 [ 465.882157][T12231] kmem_cache_alloc_noprof+0x91/0x6a0 [ 465.882172][T12231] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 465.882196][T12231] ? ptlock_alloc+0x1f/0x70 [ 465.882222][T12231] ptlock_alloc+0x1f/0x70 [ 465.882233][T12231] pte_alloc_one+0x82/0x3d0 [ 465.882263][T12231] do_fault+0x86c/0x1750 [ 465.882283][T12231] __handle_mm_fault+0x187d/0x2a00 [ 465.882297][T12231] ? mt_find+0x45e/0x8e0 [ 465.882315][T12231] ? __pfx___handle_mm_fault+0x10/0x10 [ 465.882326][T12231] ? __pfx_mt_find+0x10/0x10 [ 465.882349][T12231] ? find_vma+0xbf/0x140 [ 465.882363][T12231] ? __pfx_find_vma+0x10/0x10 [ 465.882379][T12231] handle_mm_fault+0x37b/0xa30 [ 465.882393][T12231] do_user_addr_fault+0x74c/0x12f0 [ 465.882413][T12231] exc_page_fault+0x6f/0xd0 [ 465.882427][T12231] asm_exc_page_fault+0x26/0x30 [ 465.882438][T12231] RIP: 0010:_copy_from_user+0x93/0xd0 [ 465.882457][T12231] Code: 3e ee fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 79 d7 5d fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 35 39 [ 465.882468][T12231] RSP: 0018:ffffc9000c6dfb98 EFLAGS: 00050246 [ 465.882478][T12231] RAX: 0000000000000001 RBX: 0000000080000680 RCX: 0000000000000001 [ 465.882485][T12231] RDX: 0000000000000001 RSI: 0000000080000680 RDI: ffffc9000c6dfc60 [ 465.882492][T12231] RBP: 0000000000000001 R08: 0000000000000001 R09: fffff520018dbf8c [ 465.882498][T12231] R10: ffffc9000c6dfc60 R11: 000000000000001f R12: 0000000000000000 [ 465.882505][T12231] R13: ffffc9000c6dfc60 R14: ffffc9000c6dfc60 R15: dffffc0000000000 [ 465.882519][T12231] ? _copy_from_user+0x87/0xd0 [ 465.882536][T12231] yurex_write+0x20b/0x910 [ 465.882588][T12231] ? __pfx___might_resched+0x10/0x10 [ 465.882608][T12231] ? __pfx_yurex_write+0x10/0x10 [ 465.882623][T12231] ? get_pid_task+0xfc/0x250 [ 465.882638][T12231] ? __pfx_autoremove_wake_function+0x10/0x10 [ 465.882660][T12231] ? bpf_lsm_file_permission+0x9/0x10 [ 465.882681][T12231] ? security_file_permission+0x76/0x210 [ 465.882716][T12231] ? rw_verify_area+0xce/0x6d0 [ 465.882735][T12231] vfs_write+0x2aa/0x1050 [ 465.882746][T12231] ? __pfx_yurex_write+0x10/0x10 [ 465.882763][T12231] ? __pfx_vfs_write+0x10/0x10 [ 465.882773][T12231] ? find_held_lock+0x2b/0x80 [ 465.882787][T12231] ? __fget_files+0x215/0x3d0 [ 465.882798][T12231] ? __fget_files+0x215/0x3d0 [ 465.882810][T12231] ? __fget_files+0x21f/0x3d0 [ 465.882825][T12231] ksys_write+0x12a/0x250 [ 465.882835][T12231] ? __pfx_ksys_write+0x10/0x10 [ 465.882845][T12231] ? ksys_write+0x1ac/0x250 [ 465.882855][T12231] ? __pfx_ksys_write+0x10/0x10 [ 465.882868][T12231] __do_fast_syscall_32+0xe7/0x970 [ 465.882883][T12231] ? lockdep_hardirqs_on+0x78/0x100 [ 465.882898][T12231] do_fast_syscall_32+0x32/0x70 [ 465.882913][T12231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 465.882926][T12231] RIP: 0023:0xf7f68fec [ 465.882941][T12231] Code: Unable to access opcode bytes at 0xf7f68fc2. [ 465.882946][T12231] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 465.882956][T12231] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000680 [ 465.882962][T12231] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 465.882968][T12231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 465.882975][T12231] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 465.882981][T12231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 465.882995][T12231] [ 465.883941][ T7980] usb 8-1: USB disconnect, device number 20 [ 465.935296][T12235] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1974'. [ 465.990021][ T7980] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 465.991836][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1974'. [ 465.996464][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1974'. [ 466.128147][ T36] nvmet: connect request for invalid subsystem testsubsys! [ 466.136423][T12242] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 466.149167][ T9] usb 7-1: USB disconnect, device number 25 [ 466.295322][ T7980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.337313][T12249] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 466.455037][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.631501][T12262] sysfs: Unknown parameter 'euid<18446744073709551615' [ 466.711964][T12263] rdma_rxe: rxe_newlink: failed to add bond0 [ 466.764975][T12263] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input41 [ 466.854758][ T258] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 466.862788][ T258] (NULL device *): queue 0 connect admin queue failed (-111). [ 466.868185][ T258] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 466.871655][ T258] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 467.365561][T12265] sysfs: Unknown parameter 'euid<18446744073709551615' [ 467.435986][T12266] syz1: rxe_newlink: already configured on bond0 [ 467.458903][T12266] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input42 [ 467.654617][T12269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.673267][ T5840] net_ratelimit: 1 callbacks suppressed [ 467.673281][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.718131][T12269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.114718][ T5090] Bluetooth: hci1: unexpected event 0x0f length: 13 > 4 [ 468.309786][T12284] sysfs: Unknown parameter 'euid<18446744073709551615' [ 468.380543][T12289] rdma_rxe: rxe_newlink: failed to add bond0 [ 468.428586][T12289] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input43 [ 468.758631][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.113005][ T1156] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 469.228542][ T1156] (NULL device *): queue 0 connect admin queue failed (-111). [ 469.232827][ T1156] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 469.240472][ T1156] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 469.291719][T12297] netlink: zone id is out of range [ 469.293403][T12297] netlink: zone id is out of range [ 469.295263][T12297] netlink: zone id is out of range [ 469.297206][T12297] netlink: zone id is out of range [ 469.298997][T12297] netlink: zone id is out of range [ 469.304841][T12297] netlink: zone id is out of range [ 469.306474][T12297] netlink: zone id is out of range [ 469.308688][T12297] netlink: zone id is out of range [ 469.599811][T12307] sysfs: Unknown parameter 'euid<18446744073709551615' [ 469.661344][T12308] syz1: rxe_newlink: already configured on bond0 [ 469.690490][T12308] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input44 [ 470.414226][T12331] sysfs: Unknown parameter 'euid<18446744073709551615' [ 470.491827][T12332] rdma_rxe: rxe_newlink: failed to add bond0 [ 470.555227][T12332] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input45 [ 471.263046][T12312] can0 (unregistered): slcan off ttyS3. [ 471.280409][T10502] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 471.333399][T10502] (NULL device *): queue 0 connect admin queue failed (-111). [ 471.340840][T10502] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 471.350151][T10502] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 471.829106][T12378] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20002 [ 471.898975][T12380] can0: slcan on ttyS3. [ 472.026258][ T5840] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 472.136892][ T64] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 472.141875][ T64] Bluetooth: hci1: Injecting HCI hardware error event [ 472.155184][ T5742] Bluetooth: hci1: hardware error 0x00 [ 472.175441][ T5840] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 472.180677][ T5840] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 472.185157][ T5840] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 472.189337][ T5840] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.197169][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 472.200743][ T5840] usb 7-1: Product: syz [ 472.202544][ T5840] usb 7-1: Manufacturer: syz [ 472.204610][ T5840] usb 7-1: SerialNumber: syz [ 472.274694][ T8089] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 472.420873][ T5840] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 472.425047][ T8089] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 472.433997][ T8089] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 472.437777][ T8089] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.442017][ T8089] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 472.448334][ T8089] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.451983][ T8089] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.457519][ T8089] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 472.460561][ T8089] usb 10-1: Product: syz [ 472.462358][ T8089] usb 10-1: Manufacturer: syz [ 472.469072][ T8089] cdc_wdm 10-1:1.0: skipping garbage [ 472.471346][ T8089] cdc_wdm 10-1:1.0: skipping garbage [ 472.477400][ T8089] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device [ 472.480457][ T8089] cdc_wdm 10-1:1.0: Unknown control protocol [ 472.626204][ T8089] usb 7-1: USB disconnect, device number 26 [ 472.631760][ T8089] usblp0: removed [ 472.692422][T12398] sysfs: Unknown parameter 'euid<18446744073709551615' [ 472.695609][ T5840] usb 10-1: USB disconnect, device number 6 [ 472.770502][T12401] syz1: rxe_newlink: already configured on bond0 [ 472.803155][T12401] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input46 [ 472.970629][T12403] sysfs: Unknown parameter 'euid<18446744073709551615' [ 473.030879][ T5815] net_ratelimit: 732 callbacks suppressed [ 473.030894][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.038986][T12404] rdma_rxe: rxe_newlink: failed to add bond0 [ 473.072237][T12404] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input47 [ 473.424760][ T48] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 473.431410][ T48] (NULL device *): queue 0 connect admin queue failed (-111). [ 473.433960][ T48] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 473.447070][ T48] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 473.581778][ T5090] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 473.585929][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 473.649415][T12406] sysfs: Unknown parameter 'euid<18446744073709551615' [ 473.720774][T12407] syz1: rxe_newlink: already configured on bond0 [ 473.751319][T12407] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input48 [ 474.064914][T12409] tipc: Enabling of bearer rejected, already enabled [ 474.294153][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.393767][ T5742] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 474.741268][T12422] tipc: Enabled bearer , priority 0 [ 474.745253][T12422] syzkaller0: entered promiscuous mode [ 474.747670][T12422] syzkaller0: entered allmulticast mode [ 474.906959][T12421] tipc: Resetting bearer [ 475.024254][T12428] netlink: zone id is out of range [ 475.027314][T12428] netlink: zone id is out of range [ 475.029549][T12428] netlink: zone id is out of range [ 475.031715][T12428] netlink: zone id is out of range [ 475.034283][T12428] netlink: zone id is out of range [ 475.036439][T12421] tipc: Disabling bearer [ 475.040635][T12428] netlink: zone id is out of range [ 475.043856][T12428] netlink: zone id is out of range [ 475.047506][T12428] netlink: zone id is out of range [ 475.494625][ T48] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 475.500779][ T48] (NULL device *): queue 0 connect admin queue failed (-111). [ 475.503167][ T48] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 475.507742][ T48] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 475.669357][T12433] sysfs: Unknown parameter 'euid<18446744073709551615' [ 475.764247][T12434] rdma_rxe: rxe_newlink: failed to add bond0 [ 475.945925][T12434] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input49 [ 477.017483][T12436] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 477.024406][T12436] binder: 12435:12436 ioctl 4018620d 80000040 returned -1 [ 477.138450][T12441] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 477.143533][T12441] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 477.188727][T12441] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 477.190525][T12441] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 477.219390][T12451] tipc: Enabling of bearer rejected, already enabled [ 477.252727][T12453] nvmet: adding nsid 1 to subsystem testsubsys [ 477.266018][T12453] FAULT_INJECTION: forcing a failure. [ 477.266018][T12453] name failslab, interval 1, probability 10, space 0, times 0 [ 477.273032][T12453] CPU: 1 UID: 0 PID: 12453 Comm: syz.2.2033 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.273061][T12453] Tainted: [L]=SOFTLOCKUP [ 477.273066][T12453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 477.273077][T12453] Call Trace: [ 477.273085][T12453] [ 477.273093][T12453] dump_stack_lvl+0x100/0x190 [ 477.273124][T12453] should_fail_ex.cold+0x5/0xa [ 477.273146][T12453] should_failslab+0xc2/0x120 [ 477.273172][T12453] kmem_cache_alloc_noprof+0x91/0x6a0 [ 477.273195][T12453] ? do_getname_kernel+0x5d/0x250 [ 477.273222][T12453] do_getname_kernel+0x5d/0x250 [ 477.273245][T12453] filp_open+0x1d/0x50 [ 477.273268][T12453] nvmet_file_ns_enable+0x95/0x420 [ 477.273330][T12453] nvmet_ns_enable+0x35f/0x5d0 [ 477.273357][T12453] nvmet_ns_enable_store+0x11e/0x160 [ 477.273375][T12453] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 477.273389][T12453] ? configfs_write_iter+0x388/0x4e0 [ 477.273415][T12453] configfs_write_iter+0x302/0x4e0 [ 477.273437][T12453] vfs_write+0x6ac/0x1050 [ 477.273455][T12453] ? __pfx_configfs_write_iter+0x10/0x10 [ 477.273474][T12453] ? __pfx_vfs_write+0x10/0x10 [ 477.273486][T12453] ? find_held_lock+0x2b/0x80 [ 477.273526][T12453] ksys_write+0x12a/0x250 [ 477.273541][T12453] ? __pfx_ksys_write+0x10/0x10 [ 477.273556][T12453] ? ksys_write+0x1ac/0x250 [ 477.273587][T12453] ? __pfx_ksys_write+0x10/0x10 [ 477.273609][T12453] __do_fast_syscall_32+0xe7/0x970 [ 477.273638][T12453] ? lockdep_hardirqs_on+0x78/0x100 [ 477.273661][T12453] do_fast_syscall_32+0x32/0x70 [ 477.273684][T12453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 477.273706][T12453] RIP: 0023:0xf70befec [ 477.273729][T12453] Code: Unable to access opcode bytes at 0xf70befc2. [ 477.273735][T12453] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 477.273746][T12453] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800004c0 [ 477.273753][T12453] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 477.273759][T12453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 477.273765][T12453] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 477.273772][T12453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.273787][T12453] [ 477.348605][T12453] nvmet: failed to open file ./file0: (-12) [ 477.392209][ T36] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:d2009bf6-11dd-40e0-892d-5d8b2dbe5db1. [ 477.434579][T12441] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 477.436662][T12441] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 477.455849][T12457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.463575][T12457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.475743][T12453] nvme nvme1: creating 4 I/O queues. [ 477.492031][T12453] nvme nvme1: new ctrl: "testsubsys" [ 477.575350][ T79] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 477.581481][ T79] (NULL device *): queue 0 connect admin queue failed (-111). [ 477.584278][ T79] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 477.589643][ T79] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 478.419019][T12477] sysfs: Unknown parameter 'euid<18446744073709551615' [ 478.536990][ T55] net_ratelimit: 731 callbacks suppressed [ 478.537007][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.564807][ T7980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.588825][T12480] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input50 [ 478.987599][T12479] rdma_rxe: rxe_newlink: failed to add bond0 [ 479.192016][T12483] sysfs: Unknown parameter 'euid<18446744073709551615' [ 479.273836][T12484] rdma_rxe: rxe_newlink: failed to add bond0 [ 479.309670][T12484] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input51 [ 479.586678][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.604924][T12486] netlink: 'syz.0.2043': attribute type 1 has an invalid length. [ 479.654653][ T1156] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 479.658949][ T1156] (NULL device *): queue 0 connect admin queue failed (-111). [ 479.666286][ T1156] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 479.682171][ T1156] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 479.739368][T12486] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.757075][T12491] bond2: (slave ip6erspan0): making interface the new active one [ 479.766510][T12491] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 481.181601][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.194775][ T5820] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 481.285337][T12508] netlink: 'syz.2.2048': attribute type 1 has an invalid length. [ 481.396422][ T5820] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 481.548362][T12508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.738048][ T36] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 481.751654][ T36] (NULL device *): queue 0 connect admin queue failed (-111). [ 481.754308][ T36] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 481.770920][ T36] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 481.938643][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.097896][ T5820] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 482.174175][ T5820] usb 10-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 482.178169][ T5820] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.216776][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.785725][T12533] netlink: zone id is out of range [ 482.787625][T12533] netlink: zone id is out of range [ 482.805214][T12533] netlink: zone id is out of range [ 482.808203][T12533] netlink: zone id is out of range [ 483.622274][ T41] usb 10-1: USB disconnect, device number 7 [ 483.824293][ T48] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 483.890144][ T48] (NULL device *): queue 0 connect admin queue failed (-111). [ 483.908926][ T48] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 483.929232][ T48] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 484.124618][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 484.275092][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 484.279788][ T9] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 484.283298][ T9] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 484.286493][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.309714][ T850] net_ratelimit: 364 callbacks suppressed [ 484.309733][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.329703][T12549] sysfs: Unknown parameter 'euid<18446744073709551615' [ 484.416749][T12551] rdma_rxe: rxe_newlink: failed to add bond0 [ 484.548032][T12551] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input52 [ 484.685027][ T5842] usb 7-1: USB disconnect, device number 27 [ 485.050777][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.351621][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.593413][T12568] sysfs: Unknown parameter 'euid<18446744073709551615' [ 485.665039][T12570] syz1: rxe_newlink: already configured on bond0 [ 485.756588][T12570] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input53 [ 485.845084][ T10] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 485.975114][ T1156] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 485.979212][ T1156] (NULL device *): queue 0 connect admin queue failed (-111). [ 485.981747][ T1156] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 485.999880][ T42] audit: type=1807 audit(1786981801.411:2881): UNKNOWN=m™`easuÈìeø^ÏzhVÜ”öre res=0 [ 486.009777][ T1156] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 486.016881][ T42] audit: type=1802 audit(1786981801.411:2882): pid=12574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.2063" res=0 errno=0 [ 486.387765][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.483155][T12579] netlink: zone id is out of range [ 486.484998][T12579] netlink: zone id is out of range [ 486.486678][T12579] netlink: zone id is out of range [ 486.488489][T12579] netlink: zone id is out of range [ 486.490107][T12579] netlink: zone id is out of range [ 486.492508][T12579] netlink: zone id is out of range [ 486.771546][T12572] ima: policy update failed [ 486.787417][ T42] audit: type=1802 audit(1786981802.181:2883): pid=12572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2063" res=0 errno=0 [ 486.869324][T12584] affs: No valid root block on device sr0 [ 486.879777][T12584] netlink: 'syz.2.2066': attribute type 1 has an invalid length. [ 486.882232][T12584] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2066'. [ 486.934635][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 486.936840][ T10] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 486.940648][ T10] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 486.943360][ T10] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 486.946870][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 486.950294][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 486.953424][ T10] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.958028][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.203562][ T10] usb 10-1: usb_control_msg returned -32 [ 487.206147][ T10] usbtmc 10-1:16.0: can't read capabilities [ 487.610527][T12596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.613884][T12596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.065896][ T1095] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 488.071286][ T1095] (NULL device *): queue 0 connect admin queue failed (-111). [ 488.076062][ T1095] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 488.079345][ T1095] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 488.164696][ T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 488.327720][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 488.338855][ T10] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 488.344069][ T10] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 488.350252][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.514183][ T42] audit: type=1807 audit(1786981803.921:2884): UNKNOWN=m™`easuÈìeø^ÏzhVÜ”öre res=0 [ 488.520344][ T42] audit: type=1802 audit(1786981803.931:2885): pid=12614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2074" res=0 errno=0 [ 488.921150][ T5842] usb 10-1: USB disconnect, device number 8 [ 489.302114][T12612] ima: policy update failed [ 489.325489][ T42] audit: type=1802 audit(1786981804.721:2886): pid=12612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2074" res=0 errno=0 [ 489.326497][ T5815] usb 7-1: USB disconnect, device number 28 [ 489.414434][T12621] block nbd3: NBD_DISCONNECT [ 489.423839][ T42] audit: type=1326 audit(1786981804.831:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.3.2077" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x0 [ 489.496649][ T55] net_ratelimit: 724 callbacks suppressed [ 489.496667][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.879908][T12624] sysfs: Unknown parameter 'euid<18446744073709551615' [ 489.990060][T12625] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input54 [ 490.138857][ T1095] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 490.149294][ T1095] (NULL device *): queue 0 connect admin queue failed (-111). [ 490.152513][ T1095] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 490.162663][ T1095] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 490.296307][T10625] can0 (unregistered): slcan off ttyS3. [ 490.616289][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.834523][T12638] sysfs: Unknown parameter 'euid<18446744073709551615' [ 490.947256][T12640] syz1: rxe_newlink: already configured on bond0 [ 491.113848][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.114855][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 491.141739][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 491.145603][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 491.149924][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 491.153626][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 491.164123][T12653] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input55 [ 491.273908][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 491.302565][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 491.329135][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 491.348645][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 491.379970][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.184896][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.216465][ T36] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 492.292590][ T36] (NULL device *): queue 0 connect admin queue failed (-111). [ 492.317729][ T36] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 492.336074][ T36] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 492.551262][ T5602] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.794724][ T5815] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 492.938344][ T5602] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.957512][ T5815] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 492.963268][ T5815] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 492.967203][ T5815] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 492.970608][ T5815] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 492.979022][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 492.982429][ T5815] usb 7-1: Product: syz [ 492.984159][ T5815] usb 7-1: Manufacturer: syz [ 492.986858][ T5815] usb 7-1: SerialNumber: syz [ 493.122508][T12676] sysfs: Unknown parameter 'euid<18446744073709551615' [ 493.191896][T12679] syz1: rxe_newlink: already configured on bond0 [ 493.237908][ T5815] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 493.244460][T12679] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input56 [ 493.275739][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.325698][ T5602] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.469918][ T5815] usb 7-1: USB disconnect, device number 29 [ 493.498068][ T5742] Bluetooth: hci1: command tx timeout [ 493.523691][ T5815] usblp0: removed [ 493.745598][ T5602] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.080610][T12684] netlink: zone id is out of range [ 494.082457][T12684] netlink: zone id is out of range [ 494.088442][T12684] netlink: zone id is out of range [ 494.090546][T12684] netlink: zone id is out of range [ 494.092601][T12684] netlink: zone id is out of range [ 494.378127][ T79] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 494.399540][ T79] (NULL device *): queue 0 connect admin queue failed (-111). [ 494.402021][ T79] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 494.409562][ T79] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 495.127647][T12649] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.130103][T12649] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.132638][T12649] bridge_slave_0: entered allmulticast mode [ 495.135765][T12649] bridge_slave_0: entered promiscuous mode [ 495.148139][T12649] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.151245][T12649] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.154192][T12649] bridge_slave_1: entered allmulticast mode [ 495.177892][T12649] bridge_slave_1: entered promiscuous mode [ 495.251640][ T5602] bridge_slave_1: left allmulticast mode [ 495.253453][ T5602] bridge_slave_1: left promiscuous mode [ 495.267435][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.357194][ T5602] bridge_slave_0: left allmulticast mode [ 495.359253][ T5602] bridge_slave_0: left promiscuous mode [ 495.364308][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.418782][ T850] net_ratelimit: 355 callbacks suppressed [ 495.418804][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.574753][ T5742] Bluetooth: hci1: command tx timeout [ 495.895063][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.126122][ T5602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.206390][ T5602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.255854][ T5602] bond0 (unregistering): Released all slaves [ 496.287017][ T5443] 8021q: adding VLAN 0 to HW filter on device eth10 [ 496.301711][T12649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.320565][T12649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.351577][T12649] team0: Port device team_slave_0 added [ 496.356345][T12649] team0: Port device team_slave_1 added [ 496.383828][T12649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.390113][T12649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.404528][T12649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.409493][T12649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.415187][T12649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.430447][T12649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.456498][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.457189][ T36] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 496.470914][T10502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.474370][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.480342][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.487797][ T36] (NULL device *): queue 0 connect admin queue failed (-111). [ 496.501851][ T36] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 496.509263][ T36] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 496.520109][T12649] hsr_slave_0: entered promiscuous mode [ 496.529419][T12649] hsr_slave_1: entered promiscuous mode [ 496.535151][T12649] debugfs: 'hsr0' already exists in 'hsr' [ 496.544142][T12649] Cannot create hsr debugfs directory [ 496.767998][ T5443] 8021q: adding VLAN 0 to HW filter on device eth11 [ 496.839991][ T5602] IPVS: stopping master sync thread 10608 ... [ 497.079960][ T5443] 8021q: adding VLAN 0 to HW filter on device eth12 [ 497.087310][T12649] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 497.132093][T12738] netlink: zone id is out of range [ 497.134287][T12738] netlink: zone id is out of range [ 497.137655][T12738] netlink: zone id is out of range [ 497.151587][T12738] netlink: zone id is out of range [ 497.176504][T12649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 497.189466][T12649] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 497.655497][ T5742] Bluetooth: hci1: command tx timeout [ 497.764076][T12649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 498.086912][T12745] binder: 12744:12745 ioctl 4018620d 0 returned -22 [ 498.129905][T12745] block nbd2: NBD_DISCONNECT [ 498.133122][ T42] audit: type=1326 audit(1786981813.541:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12744 comm="syz.2.2099" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x0 [ 498.312984][T12752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.317737][T12752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.328188][T12649] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 498.402180][T12649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 498.475191][T12649] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 498.518544][T12649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 498.534582][ T36] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 498.547069][ T36] (NULL device *): queue 0 connect admin queue failed (-111). [ 498.560496][ T36] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 498.573188][ T36] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 498.620235][T12649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.633613][T12649] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.651952][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.655040][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.751363][ T42] audit: type=1807 audit(1786981814.161:2889): UNKNOWN=m™`easuÈìeø^ÏzhVÜ”öre res=0 [ 498.756066][ T42] audit: type=1802 audit(1786981814.171:2890): pid=12766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2102" res=0 errno=0 [ 499.054513][ T5602] hsr_slave_0: left promiscuous mode [ 499.144541][ T5602] hsr_slave_1: left promiscuous mode [ 499.160967][ T5602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.197962][ T5602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.265515][ T5602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.291057][ T5602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.409719][T12718] syz.0.2094 (12718) used greatest stack depth: 18952 bytes left [ 499.424342][T12772] sysfs: Unknown parameter 'euid<18446744073709551615' [ 499.532070][T12764] ima: policy update failed [ 499.545427][ T42] audit: type=1802 audit(1786981814.941:2891): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2102" res=0 errno=0 [ 499.552339][T12774] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input57 [ 499.610946][ T5602] veth1_macvtap: left promiscuous mode [ 499.616266][ T5602] veth0_macvtap: left promiscuous mode [ 499.617983][ T5602] veth1_vlan: left promiscuous mode [ 499.624593][ T5602] veth0_vlan: left promiscuous mode [ 499.735673][ T5742] Bluetooth: hci1: command tx timeout [ 500.627402][ T79] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 500.633823][ T850] net_ratelimit: 720 callbacks suppressed [ 500.633840][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.642725][ T79] (NULL device *): queue 0 connect admin queue failed (-111). [ 500.645469][ T79] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 500.647834][ T79] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 500.805238][T12734] syz.3.2096 (12734) used greatest stack depth: 18712 bytes left [ 500.819646][T12794] block nbd3: NBD_DISCONNECT [ 500.822940][ T42] audit: type=1326 audit(1786981816.231:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.3.2110" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f68fec code=0x0 [ 501.016887][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.247441][ T5602] team0 (unregistering): Port device team_slave_1 removed [ 501.285310][ T5602] team0 (unregistering): Port device team_slave_0 removed [ 501.497000][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.499188][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.503170][ T5443] 8021q: adding VLAN 0 to HW filter on device eth13 [ 501.539884][T12800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.548039][T12800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.666309][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.670478][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.674274][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.678124][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.825193][T12649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.034538][T12649] veth0_vlan: entered promiscuous mode [ 502.040526][T12649] veth1_vlan: entered promiscuous mode [ 502.070106][ T42] audit: type=1807 audit(1786981817.481:2893): UNKNOWN=m™`easuÈìeø^ÏzhVÜ”öre res=0 [ 502.075339][T12649] veth0_macvtap: entered promiscuous mode [ 502.079666][T12649] veth1_macvtap: entered promiscuous mode [ 502.092034][ T42] audit: type=1802 audit(1786981817.481:2894): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2112" res=0 errno=0 [ 502.110068][T12649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.119802][T12649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.694677][ T36] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 502.694870][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.699415][ T36] (NULL device *): queue 0 connect admin queue failed (-111). [ 502.703949][ T36] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 502.716661][ T36] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 502.760772][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.764769][ T5812] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.765426][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.769332][ T5812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.776472][ T5812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.782484][ T5812] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.813183][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.816870][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.819157][T12823] ima: policy update failed [ 502.821991][ T42] audit: type=1802 audit(1786981818.231:2895): pid=12823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2112" res=0 errno=0 [ 502.914621][ T5602] IPVS: stop unused estimator thread 0... [ 502.941245][T12829] sysfs: Unknown parameter 'euid<18446744073709551615' [ 503.090003][T12836] rdma_rxe: rxe_newlink: failed to add bond0 [ 503.136865][T12836] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input58 [ 503.334808][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.748540][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.814604][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 503.820032][ T5742] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 503.891842][T12839] netlink: zone id is out of range [ 503.893512][T12839] netlink: zone id is out of range [ 504.690432][T12848] block nbd6: NBD_DISCONNECT [ 504.694704][ T42] audit: type=1326 audit(1786981820.101:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.6.2119" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f38fec code=0x0 [ 504.774845][ T258] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 504.779652][ T258] (NULL device *): queue 0 connect admin queue failed (-111). [ 504.782604][ T258] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 504.786200][ T258] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 504.919877][T12853] configfs-gadget.g1 gadget.32: HOST MAC ca:87:41:bc:e0:08 [ 504.928089][T12853] configfs-gadget.g1 gadget.32: MAC ae:ed:40:2a:9e:26 [ 505.060390][T12853] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 505.161985][T12853] udc usbip-vudc.0: failed to start g1: -19 [ 505.166321][T12853] UDC core: g1: couldn't find an available UDC or it's busy [ 505.224353][ T36] ------------[ cut here ]------------ [ 505.226414][ T36] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 505.228593][ T36] WARNING: net/mac80211/driver-ops.h:1723 at ieee80211_set_active_links+0x2d0/0x970, CPU#1: kworker/u33:0/36 [ 505.232077][ T36] Modules linked in: [ 505.234136][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u33:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.237464][ T36] Tainted: [L]=SOFTLOCKUP [ 505.238748][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 505.241811][ T36] Workqueue: events_unbound cfg80211_wiphy_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 505.243676][ T36] RIP: 0010:ieee80211_set_active_links+0x2d7/0x970 [ 505.245924][ T36] Code: 05 00 00 e8 6b 5a db f6 48 8b 34 24 48 81 c6 20 01 00 00 48 89 34 24 e8 57 5a db f6 48 8d 3d b0 4d 05 06 48 8b 34 24 44 89 fa <67> 48 0f b9 3a e9 e0 fe ff ff e8 3a 5a db f6 0f b7 c5 4c 8d bb 50 [ 505.251494][ T36] RSP: 0018:ffffc900005f7af8 EFLAGS: 00010293 [ 505.253597][ T36] RAX: 0000000000000000 RBX: ffff8880293f6c70 RCX: ffffffff8b2e752e [ 505.256705][ T36] RDX: 0000000000000000 RSI: ffff8880293f4120 RDI: ffffffff9133c340 [ 505.259662][ T36] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 505.262928][ T36] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880293f5928 [ 505.266214][ T36] R13: 0000000000000000 R14: ffff888042370f40 R15: 0000000000000000 [ 505.269509][ T36] FS: 0000000000000000(0000) GS:ffff888096ce6000(0000) knlGS:0000000000000000 [ 505.272501][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 505.274608][ T36] CR2: 000000000c2c5330 CR3: 000000005f899000 CR4: 0000000000352ef0 [ 505.277918][ T36] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000002 [ 505.280854][ T36] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 505.284098][ T36] Call Trace: [ 505.285564][ T36] [ 505.286759][ T36] ieee80211_if_parse_active_links+0xbb/0x120 [ 505.289262][ T36] ? __pfx_ieee80211_if_parse_active_links+0x10/0x10 [ 505.291884][ T36] ? __pfx_debug_mutex_add_waiter+0x1/0x10 [ 505.294281][ T36] ? find_held_lock+0x2b/0x80 [ 505.295968][ T36] ? ieee80211_if_write_sdata_handler+0x1a/0x90 [ 505.297814][ T36] ? __pfx_ieee80211_if_write_sdata_handler+0x10/0x10 [ 505.300307][ T36] wiphy_locked_debugfs_write_work+0xe6/0x1c0 [ 505.302796][ T36] ? trace_wiphy_work_run+0x73/0x220 [ 505.305076][ T36] cfg80211_wiphy_work+0x2b7/0x550 [ 505.307157][ T36] process_one_work+0xa23/0x1940 [ 505.309190][ T36] ? __pfx_process_one_work+0x10/0x10 [ 505.311267][ T36] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 505.313029][ T36] worker_thread+0x5ef/0xe50 [ 505.314450][ T36] ? kthread+0x13a/0x450 [ 505.315913][ T36] ? __pfx_worker_thread+0x10/0x10 [ 505.317486][ T36] kthread+0x370/0x450 [ 505.318735][ T36] ? __pfx_kthread+0x10/0x10 [ 505.320180][ T36] ret_from_fork+0x72b/0xd50 [ 505.321633][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 505.323247][ T36] ? __switch_to+0x800/0x10f0 [ 505.324931][ T36] ? __pfx_kthread+0x10/0x10 [ 505.326376][ T36] ret_from_fork_asm+0x1a/0x30 [ 505.327837][ T36] [ 505.328790][ T36] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 505.330956][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u33:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.334746][ T36] Tainted: [L]=SOFTLOCKUP [ 505.336707][ T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 505.340316][ T36] Workqueue: events_unbound cfg80211_wiphy_work [ 505.342198][ T36] Call Trace: [ 505.343215][ T36] [ 505.344122][ T36] dump_stack_lvl+0x100/0x190 [ 505.345667][ T36] vpanic+0x552/0x970 [ 505.346924][ T36] ? __pfx_vpanic+0x10/0x10 [ 505.348578][ T36] panic+0xd1/0xe0 [ 505.350100][ T36] ? __pfx_panic+0x10/0x10 [ 505.351860][ T36] ? check_panic_on_warn+0x1f/0x90 [ 505.353906][ T36] check_panic_on_warn.cold+0x19/0x34 [ 505.356170][ T36] ? ieee80211_set_active_links+0x2d0/0x970 [ 505.358500][ T36] __warn.cold+0x191/0x318 [ 505.360315][ T36] __report_bug+0x30f/0x440 [ 505.362148][ T36] ? ieee80211_set_active_links+0x2d0/0x970 [ 505.364508][ T36] ? __pfx___report_bug+0x10/0x10 [ 505.366643][ T36] ? ieee80211_set_active_links+0x26e/0x970 [ 505.368493][ T36] ? enqueue_task+0x1dc/0x4f0 [ 505.369912][ T36] report_bug_entry+0xe1/0x290 [ 505.371344][ T36] ? ieee80211_set_active_links+0x2d7/0x970 [ 505.373121][ T36] handle_bug+0x1cd/0x2a0 [ 505.374412][ T36] exc_invalid_op+0x17/0x50 [ 505.375820][ T36] asm_exc_invalid_op+0x1a/0x20 [ 505.377298][ T36] RIP: 0010:ieee80211_set_active_links+0x2d7/0x970 [ 505.379246][ T36] Code: 05 00 00 e8 6b 5a db f6 48 8b 34 24 48 81 c6 20 01 00 00 48 89 34 24 e8 57 5a db f6 48 8d 3d b0 4d 05 06 48 8b 34 24 44 89 fa <67> 48 0f b9 3a e9 e0 fe ff ff e8 3a 5a db f6 0f b7 c5 4c 8d bb 50 [ 505.384867][ T36] RSP: 0018:ffffc900005f7af8 EFLAGS: 00010293 [ 505.387240][ T36] RAX: 0000000000000000 RBX: ffff8880293f6c70 RCX: ffffffff8b2e752e [ 505.390141][ T36] RDX: 0000000000000000 RSI: ffff8880293f4120 RDI: ffffffff9133c340 [ 505.393058][ T36] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 505.396233][ T36] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880293f5928 [ 505.399398][ T36] R13: 0000000000000000 R14: ffff888042370f40 R15: 0000000000000000 [ 505.402508][ T36] ? ieee80211_set_active_links+0x26e/0x970 [ 505.404926][ T36] ? ieee80211_set_active_links+0x2c9/0x970 [ 505.407383][ T36] ieee80211_if_parse_active_links+0xbb/0x120 [ 505.409891][ T36] ? __pfx_ieee80211_if_parse_active_links+0x10/0x10 [ 505.412609][ T36] ? __pfx_debug_mutex_add_waiter+0x1/0x10 [ 505.414714][ T36] ? find_held_lock+0x2b/0x80 [ 505.416442][ T36] ? ieee80211_if_write_sdata_handler+0x1a/0x90 [ 505.418601][ T36] ? __pfx_ieee80211_if_write_sdata_handler+0x10/0x10 [ 505.420931][ T36] wiphy_locked_debugfs_write_work+0xe6/0x1c0 [ 505.423002][ T36] ? trace_wiphy_work_run+0x73/0x220 [ 505.424861][ T36] cfg80211_wiphy_work+0x2b7/0x550 [ 505.426647][ T36] process_one_work+0xa23/0x1940 [ 505.428402][ T36] ? __pfx_process_one_work+0x10/0x10 [ 505.430221][ T36] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 505.432122][ T36] worker_thread+0x5ef/0xe50 [ 505.433721][ T36] ? kthread+0x13a/0x450 [ 505.435216][ T36] ? __pfx_worker_thread+0x10/0x10 [ 505.436977][ T36] kthread+0x370/0x450 [ 505.438376][ T36] ? __pfx_kthread+0x10/0x10 [ 505.439979][ T36] ret_from_fork+0x72b/0xd50 [ 505.441581][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 505.443317][ T36] ? __switch_to+0x800/0x10f0 [ 505.444940][ T36] ? __pfx_kthread+0x10/0x10 [ 505.446611][ T36] ret_from_fork_asm+0x1a/0x30 [ 505.448274][ T36] [ 505.449945][ T36] Kernel Offset: disabled [ 505.451236][ T36] Rebooting in 86400 seconds..