last executing test programs: 3m24.543865894s ago: executing program 0 (id=968): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./security\x00', &(0x7f00000005c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./security/apparmor/.load\x00', 0x1, 0x0) write(r0, &(0x7f0000000640)="04080076657273696f6e00020500000004080070726f66696c6500070502007000", 0x21) (fail_nth: 9) 3m24.41619414s ago: executing program 0 (id=969): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x3252, &(0x7f0000000080)={0x0, 0xaceb, 0x8, 0x0, 0x204f}, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x8, &(0x7f0000000200), 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$DVB_DVR_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000280)={0x1, 0x20000000, 0x9, 0xb, 0x9, 0x6}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000002c0)={0x9}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000440)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x8, 0x3, 0x8, 0x4, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0x2, 0x0, 0x4, 0x6, 0x80, 0x1000000020c}, {0xf1bf, 0x3, 0x38, 0x2, 0x5, 0x7, 0x3, 0x3, 0xb, 0x5, 0x4, 0x5, 0x3c}], 0xfffffffd}) openat$vimc2(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES16], 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="3c03000000000000c2046efa0000000204010400010005020000073d00008000007f0900050200070000"], 0x28) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000680)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040011}}], 0x1, 0x80) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(&(0x7f0000000780)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m23.464242617s ago: executing program 0 (id=975): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001100)=@in6={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x4e23, 0x16f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=[@hopopts={{0x30, 0x29, 0x32, {0xff, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}], 0x30}}], 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000840)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x15, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) unshare(0x2c020400) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x35a3, &(0x7f0000000480)={0x0, 0x799, 0x1, 0x1, 0x1d4}, 0x0, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) syz_ublk_add_dev(r4, 0x0, r5, r6, &(0x7f0000000b40)={0x2e, 0x0, 0x0, r3, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000bc0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x11}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c40)={'geneve0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x500) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000d40)={'syzkaller0\x00', 0x7101}) ioctl(0xffffffffffffffff, 0x8901, &(0x7f0000000d80)) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000dc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 3m23.366592379s ago: executing program 0 (id=976): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="8adb9c030c1efc3e465a48aef609cb35e240e34b9650cf5e238a0ef7125a44e3c21559bfa55abb66482d61eb102b2347df248d75ee6399fa2c54bfa5e44eeee5d620e84d4d6a2a0a99f23bc323e6e48ebff85e20d42d5a41c18d09592cf3ce8d5c1ed30ebdda3943f7c688dcc3c45b9be4674c11c9d6a24a95a7977f708098985a10177beb7ecc8dff59a0f9554db2c5bb2f", 0x92}], 0x1}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f00000006c0)="0400000002000000000000007e0100003801") r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000780)={0x109, 0x29, 0x1, {0x2, [{{0x1, 0x2, 0x6}, 0x2c, 0xaa, 0x5, './dev'}, {{0x4, 0x0, 0x2}, 0x2, 0xb5, 0x14, './dev/mapper/control'}, {{0x80, 0x2, 0x8}, 0xffff, 0x7, 0x8, './cgroup'}, {{0x40, 0x1, 0x1}, 0x3, 0x8, 0x14, './dev/mapper/control'}, {{0x10, 0x4, 0x6}, 0xb2, 0x40, 0x14, './dev/mapper/control'}, {{0x80, 0x4, 0x2}, 0x3, 0x4, 0x5, './dev'}, {{0x80, 0x2, 0x7}, 0x1, 0x10, 0x8, './cgroup'}]}}, 0x109) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './dev/mapper/control\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x278, 0x3d8, 0x3d8, 0x278, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x40}, [0xffffff00, 0xff, 0xffffffff, 0xff], [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], 'veth0_virt_wifi\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x29, 0x20, 0x0, 0x20}, 0x0, 0xec, 0x148, 0x0, {}, [@common=@hl={{0x24}, {0x1, 0x7}}, @common=@inet=@socket2={{0x24}, 0x1}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e24, 0x4e22, 0x7, 0x3, 0x1, 0x6, 0x7}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, [0x807fff00, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0xffffff00, 0xffffff00, 0xff000000], 'veth1_to_team\x00', 'wg0\x00', {0xff}, {0xff}, 0x3b, 0x72, 0x2, 0xc}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@eui64={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x7, 0x2a7, 0x6fa6, 0xf60, 'snmp\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x39c) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x2301008, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x2d]}}}}]}) ptrace(0x10, r1) ptrace$cont(0x420e, r1, 0x5, 0x4) open_by_handle_at(r0, &(0x7f0000000700)=@fuse_with_parent={0x18, 0x82, {{0x9, 0x8, 0x5}, {0x4, 0x3, 0x4}}}, 0x204001) 3m23.264747057s ago: executing program 0 (id=979): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x4b15, &(0x7f0000000240)={&(0x7f0000000100)=@setlink={0x30, 0x13, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x1020, 0x409}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004000}, 0x48804) 3m22.864013895s ago: executing program 0 (id=980): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/kernel/firmware_config/ignore_sysfs_fallback\x00', 0x1, 0x0) unlinkat(r0, &(0x7f0000000100)='./proc/sys/kernel/firmware_config/ignore_sysfs_fallback\x00', 0x200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc140011800c000100636f756e7465720004000280400000000c0a010100000000000000000a00000a0900020073797a31000000000900010073797a310004000014000380100000800c000180050001"], 0xb8}}, 0x40) write(r0, 0x0, 0x0) 3m22.822480901s ago: executing program 32 (id=980): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/kernel/firmware_config/ignore_sysfs_fallback\x00', 0x1, 0x0) unlinkat(r0, &(0x7f0000000100)='./proc/sys/kernel/firmware_config/ignore_sysfs_fallback\x00', 0x200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc140011800c000100636f756e7465720004000280400000000c0a010100000000000000000a00000a0900020073797a31000000000900010073797a310004000014000380100000800c000180050001"], 0xb8}}, 0x40) write(r0, 0x0, 0x0) 55.671673652s ago: executing program 4 (id=2005): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000240)={{r0}, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') mknodat$loop(r1, &(0x7f0000000180)='./sys\x00', 0x6000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000000000000000010400000020000000050000000100e1c3040000000002000004080000001300000002000000000000000100000001000000200000000076616c0062704f5b171587b0a8ca6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x5) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000001280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001340)='illinois', 0x8) shutdown(r3, 0x1) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x61e1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001380)={0x1, &(0x7f00000013c0)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) openat$loop_ctrl(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001440)={0x8, 0x80000008b}, 0x0) 55.555015527s ago: executing program 4 (id=2006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4000, 0x0, 0x4, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xf5b439e5fa041319, 0xc3}}}}}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x110) write(r1, &(0x7f0000000240)="3c6b65726e656c3e202fbd76696c652072656164202f6574632f706173737764207461736b2e7569643d30207461736b2e657569643d300a73656c65637420646f6d61696e3d3c6b65726e655c3e20fdac1d19b4a8981244f11ec1eae970ae50431a52e3d2000000000000417100000000000000000000000000000000000000000000000000d323d22701bf312510b6ace065a0d0365103ae99deeb114d357fb322e34c3da8c438307a1da24ab0121ea749182d", 0xb4) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000065c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006580)={&(0x7f0000002780)={0x6b4, 0xd, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x670, 0x3, 0x0, 0x1, [{0x164, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x11c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdd, 0x1, "216666deb44b66de4e74fa452840f0c0b83a95eddb4e167941e46d3532d078344067d392aa274e88ef2390265628151a831d66f24adcd1da35efac34a8e443b7b433a45e29ea7f827f66c642b8df2fe27bc35df9aa4406683e8d46bba6717e2260ed7e5eda61836edc3571ade66ab8f587c8ea1819a185840f974fa71c069383535c56986f5ab2b53d843a519e65eace74c9222902d2738989b8a0a1b7d28332cdcd44e762ef20d6038223684bcfe9a34239d691940cdbfe4cae1b149e6b1fe5cf738a1732e59875043797e365c1a68f875f7021b62afc1209"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x34, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x3ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x214, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xf8, 0x1, "b5a5b251ea14058c77972cc7e49182989e7922a71f16e505ff826f30c40bc5ea0b9d3c9b69347f8787786a79dea2c9b80860b8ea5c63608894a812283eb5c836a7714b950712a9e5a05d0eb85d20f151d1b5ab3000c29e363b0cbee7e30da81cb8cc9a7e7772af229e70ee31f06d80f30c01dadb3f32f7e3a2ebaf21ac80c6b0fad9472059007ca78e839affe9e8caa46e73b7caae9cd1101244f9bb3577ffb4fed1f3f38c2b1bab325e41ea09c4269d93b5314a88b08f07a2558dc4ee77e114ae26865e194d01e7943d46616cc3b11c1435875a4675e55e0e957d67558f17103014d91cd0f85cf44a33eaa8a9f35c22ec89516f"}, @NFTA_DATA_VALUE={0x69, 0x1, "2bc11337badbabbd3c6b8ae2fcadb37e9f6fbd6ebf7a2e4e5b585a4fa887278d680d08f8d746c7467169fa4d5b86392f69aefcd4dc778eb588e9b7fe8baad35e5e498cb9b653c9e41537ab1a2e6c1c63160e9d18e75082061183c9b85450653399bbf83e0a"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x60, 0x1, "d227bdb2f0c33677a058199e3abaadb0d4bf0706f1e30e3a1702ad85906da5bfc7b90b1b88cb3e0a18aedbabfc7a0955251a08b5a0361c032ff01c3363afc72fee0ddc8e79f7bd446be447b622bcc43e91b884d0bbf95a433092c93c"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2e6}, @NFTA_SET_ELEM_EXPRESSIONS={0x150, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_IMMEDIATE_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf, 0x1, "215784e8bac4a5314525f0"}]}]}}}, {0x44, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, {0x94, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8e, 0x6, 0x1, 0x0, "f4d44f8f79a70a4af255d6066a3963dd2fa5d345826e800a06c442aa8c1f0549c8fa596bbfef159dc683bfb7200834d793a7958d2f4ad249f42b0f8d9cb1eb773562858718e09f7a438709bab7a7898e44cac3ad02e96a56c479fd315bdab5cf7436d332a281edc1970869d0078bbf250cb2bbe0f4ceda7fccb26b01efa649b946074aa689590909808b"}]}, {0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xb4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "e14af1258d"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x31, 0x1, "48ec4aa7270f8bcd2950bbf08351844f938998cf093d15ef7de1fc8c5c696c1a242b5806955ba63d065c9f2882"}, @NFTA_DATA_VALUE={0xa, 0x1, "cff82eb3236a"}, @NFTA_DATA_VALUE={0x25, 0x1, "f90664208cbb69794021a69dabdf600a5f7f1930669c3ab71943961a21e6ceeea4"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x880}, 0x4800) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vnet(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0x7f, 0x6, @random="2d22aece4334"}, 0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, 0x0, 0x25, 0x8, @void}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000340), &(0x7f0000000440)=0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) r5 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, r5, 0x0, 0x8, 'syz1\x00', 0x0}) 54.317189016s ago: executing program 4 (id=2011): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000600)={0x4d, 0x0}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000680)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000006c0)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000780)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000800)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000900)={0x0, 0x3}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, 0x0, 0x0}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000940)={0x1, &(0x7f0000000980)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 53.378208473s ago: executing program 4 (id=2020): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001880)={{0x12, 0x1, 0x201, 0x34, 0x49, 0x4f, 0x40, 0x1a0a, 0x102, 0x9c8d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0x4e, 0x0, 0xc7, "", [{{0x9, 0x4, 0xd5, 0x9, 0x0, 0x4e, 0x32, 0x89, 0x5}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0x20, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xa}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0xa74}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0xff, 0x34324152, 0x7, 0xa, [{0x419, 0x9}, {0xfffffff9}, {0x3ff, 0x8}, {0x5, 0x4aa}, {0x1, 0xfdfdffff}, {0xfffffffb, 0x8e}, {0x1, 0x8}, {0xf, 0x4}], 0x3, 0x3, 0x3, 0x2}}) io_setup(0x6, &(0x7f0000000d80)=0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) eventfd2(0x83, 0x80001) io_submit(r5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdafc, 0x80000}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc) sendmsg$nl_generic(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42004}, 0x80000) ioctl$VT_DISALLOCATE(r6, 0x5608) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_MPLS_TTL={0x0, 0x43, 0x10}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8848}, 0xc880) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308201103081bea003020102020101300a06082a85030701010302300e310c300a06035504030c0373797a3020170d3232303531383232333234315a180f32313232303432343232333234315a300e310c300a06035504030c0373797a3066301f06082a85030701010101301306072a85030202230106082a850307010102020343000440d5a777f926", 0x8a, 0xfffffffffffffffe) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c8000000420001000200000000000000030100004242000050000100aabbccddeee1aabbccddeee286dd600000000014064020010db8000000000000404a0000000120010db800000000000000000000000204d2005000f531566aa9757b9102100000000000000004000200"], 0xc8}, 0x1, 0x0, 0x0, 0x140}, 0x240000c5) 51.982988739s ago: executing program 4 (id=2039): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='27', 0x2) r1 = getpgid(0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000025c0)={0x10, 0x4, &(0x7f0000002680)=ANY=[@ANYBLOB="b400000000000000791048000000000079003800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000"], &(0x7f0000002740)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000002780)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x36) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0xff) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000340)={&(0x7f0000000380)=""/112, 0x70}) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$getownex(r0, 0x10, &(0x7f0000002440)={0x0, 0x0}) syz_clone3(&(0x7f00000024c0)={0x4000000, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200), {0x18}, &(0x7f0000000240)=""/4, 0x4, &(0x7f0000000280)=""/187, &(0x7f0000002480)=[r1, r2, r3, r4, r5], 0x5, {r0}}, 0x58) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000002580)={0x9b0000, 0x40, 0x1, r0, 0x0, &(0x7f0000002540)={0x99096e, 0x200, '\x00', @value=0x3}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x121301, 0x0) 51.882179595s ago: executing program 4 (id=2040): r0 = syz_open_dev$video(&(0x7f0000000040), 0x889c, 0x280480) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 36.829798957s ago: executing program 33 (id=2040): r0 = syz_open_dev$video(&(0x7f0000000040), 0x889c, 0x280480) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 5.477789341s ago: executing program 3 (id=2256): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000240)={{r0}, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) mknodat$loop(r1, &(0x7f0000000180)='./sys\x00', 0x6000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000000000000000010400000020000000050000000100e1c3040000000002000004080000001300000002000000000000000100000001000000200000000076616c0062704f5b171587b0a8ca6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x5) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000001280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000001340)='illinois', 0x8) shutdown(r4, 0x1) setns(0xc9, 0x0) r5 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x61e1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001380)={0x1, &(0x7f00000013c0)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) openat$loop_ctrl(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001440)={0x8, 0x80000008b}, 0x0) 4.987495775s ago: executing program 3 (id=2258): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) clock_adjtime(0xffffffd3, &(0x7f0000000380)={0x10000, 0x6, 0xc, 0x1000000, 0x7, 0xe, 0x5, 0x1, 0x8000009654, 0x1, 0x7fffffff, 0x0, 0x6, 0xb, 0xffff, 0x200cc0, 0x1, 0x5, 0x4, 0xfffffffffffffffc, 0x3, 0x809, 0x0, 0x5, 0xa, 0x9}) r0 = openat$cdrom(0xffffff9c, 0x0, 0x801, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/20, 0x14}], 0x1) mount$bind(&(0x7f0000000480)='./cgroup\x00', &(0x7f00000004c0)='./cgroup\x00', &(0x7f0000000500), 0x1051014, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x12, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3e}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socket$xdp(0x2c, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000300)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000902, 0x0, &(0x7f0000000540)) sched_setaffinity(r3, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 4.005352882s ago: executing program 3 (id=2261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfe, {0x0, 0x0, 0x0, r5, {0xffe0}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dd}, 0x4000080) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0xfeff) 3.81994865s ago: executing program 3 (id=2262): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x80000300, 0x80000330, 0x80000360], 0x0, 0x0, &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='0', 0x1) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1e, 0x0, 0x7, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0xc, &(0x7f0000000b00)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000c00)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x44}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000004900010026bd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="000000000800020007000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000580)="97ee365d67d52dbd410c87706349888cbf4333855b8912c8e99793df78d1c39b27e2641f3d0f8ee0d533cc0299eb916e596aef82ad68dd88eb928dbee8f65d00e7dbd16171fb48b5477c8fde734ac32d4d8848e1ccb5faa474f0e0e604daae74fdf5854c8053fbb4f52f0855d7bc724af335002c46e4e53765d02aeca27ad236e00f", 0x82) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x4ffe6, 0x8864000000000000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @local}, &(0x7f00000000c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x8, 0x1, 0x2, 0x400, 0x1, 0xd9, '\x00', r7, r3, 0x4, 0x1, 0x4, 0xc}, 0x50) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) 3.558102264s ago: executing program 1 (id=2264): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82187202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dir\x00', &(0x7f0000000100)='cifs\x00', 0x0, &(0x7f0000000140)='vers=2.0,sec=ntlmssp,ip=127.0.0.1,port=20000,nodfs,username=root,password=root\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.515773873s ago: executing program 1 (id=2265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0xf4ff, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001"], 0x870}}, 0x0) 3.444476321s ago: executing program 5 (id=2266): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000240)={{r0}, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') mknodat$loop(r1, &(0x7f0000000180)='./sys\x00', 0x6000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000000000000000010400000020000000050000000100e1c3040000000002000004080000001300000002000000000000000100000001000000200000000076616c0062704f5b171587b0a8ca6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x5) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000001280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001340)='illinois', 0x8) shutdown(r3, 0x1) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x61e1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001380)={0x1, &(0x7f00000013c0)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) openat$loop_ctrl(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001440)={0x8, 0x80000008b}, 0x0) 3.216952037s ago: executing program 1 (id=2267): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000240)={{r0}, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) mknodat$loop(r1, &(0x7f0000000180)='./sys\x00', 0x6000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000000000000000010400000020000000050000000100e1c3040000000002000004080000001300000002000000000000000100000001000000200000000076616c0062704f5b171587b0a8ca6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x5) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000001280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000001340)='illinois', 0x8) shutdown(r4, 0x1) setns(0xc9, 0x0) r5 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x61e1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001380)={0x1, &(0x7f00000013c0)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) openat$loop_ctrl(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001440)={0x8, 0x80000008b}, 0x0) 3.140701451s ago: executing program 2 (id=2268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4000, 0x0, 0x4, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xf5b439e5fa041319, 0xc3}}}}}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x110) write(r1, &(0x7f0000000240)="3c6b65726e656c3e202fbd76696c652072656164202f6574632f706173737764207461736b2e7569643d30207461736b2e657569643d300a73656c65637420646f6d61696e3d3c6b65726e655c3e20fdac1d19b4a8981244f11ec1eae970ae50431a52e3d2000000000000417100000000000000000000000000000000000000000000000000d323d22701bf312510b6ace065a0d0365103ae99deeb114d357fb322e34c3da8c438307a1da24ab0121ea749182d", 0xb4) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000065c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006580)={&(0x7f0000002780)={0x6b0, 0xd, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x66c, 0x3, 0x0, 0x1, [{0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x118, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd0, 0x1, "216666deb44b66de4e74fa452840f0c0b83a95eddb4e167941e46d3532d078344067d392aa274e88ef2390265628151a831d66f24adcd1da35efac34a8e443b7b433a45e29ea7f827f66c642b8df2fe27bc35df9aa4406683e8d46bba6717e2260ed7e5eda61836edc3571ade66ab8f587c8ea1819a185840f974fa71c069383535c56986f5ab2b53d843a519e65eace74c9222902d2738989b8a0a1b7d28332cdcd44e762ef20d6038223684bcfe9a34239d691940cdbfe4cae1b149e6b1fe5cf738a1732e59875043797e3"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x34, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x3ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x214, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xf8, 0x1, "b5a5b251ea14058c77972cc7e49182989e7922a71f16e505ff826f30c40bc5ea0b9d3c9b69347f8787786a79dea2c9b80860b8ea5c63608894a812283eb5c836a7714b950712a9e5a05d0eb85d20f151d1b5ab3000c29e363b0cbee7e30da81cb8cc9a7e7772af229e70ee31f06d80f30c01dadb3f32f7e3a2ebaf21ac80c6b0fad9472059007ca78e839affe9e8caa46e73b7caae9cd1101244f9bb3577ffb4fed1f3f38c2b1bab325e41ea09c4269d93b5314a88b08f07a2558dc4ee77e114ae26865e194d01e7943d46616cc3b11c1435875a4675e55e0e957d67558f17103014d91cd0f85cf44a33eaa8a9f35c22ec89516f"}, @NFTA_DATA_VALUE={0x69, 0x1, "2bc11337badbabbd3c6b8ae2fcadb37e9f6fbd6ebf7a2e4e5b585a4fa887278d680d08f8d746c7467169fa4d5b86392f69aefcd4dc778eb588e9b7fe8baad35e5e498cb9b653c9e41537ab1a2e6c1c63160e9d18e75082061183c9b85450653399bbf83e0a"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x60, 0x1, "d227bdb2f0c33677a058199e3abaadb0d4bf0706f1e30e3a1702ad85906da5bfc7b90b1b88cb3e0a18aedbabfc7a0955251a08b5a0361c032ff01c3363afc72fee0ddc8e79f7bd446be447b622bcc43e91b884d0bbf95a433092c93c"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2e6}, @NFTA_SET_ELEM_EXPRESSIONS={0x150, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_IMMEDIATE_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf, 0x1, "215784e8bac4a5314525f0"}]}]}}}, {0x44, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, {0x94, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8e, 0x6, 0x1, 0x0, "f4d44f8f79a70a4af255d6066a3963dd2fa5d345826e800a06c442aa8c1f0549c8fa596bbfef159dc683bfb7200834d793a7958d2f4ad249f42b0f8d9cb1eb773562858718e09f7a438709bab7a7898e44cac3ad02e96a56c479fd315bdab5cf7436d332a281edc1970869d0078bbf250cb2bbe0f4ceda7fccb26b01efa649b946074aa689590909808b"}]}, {0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xb4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "e14af1258d"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x31, 0x1, "48ec4aa7270f8bcd2950bbf08351844f938998cf093d15ef7de1fc8c5c696c1a242b5806955ba63d065c9f2882"}, @NFTA_DATA_VALUE={0xa, 0x1, "cff82eb3236a"}, @NFTA_DATA_VALUE={0x25, 0x1, "f90664208cbb69794021a69dabdf600a5f7f1930669c3ab71943961a21e6ceeea4"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x6b0}, 0x1, 0x0, 0x0, 0x880}, 0x4800) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vnet(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0x7f, 0x6, @random="2d22aece4334"}, 0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, 0x0, 0x25, 0x8, @void}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000340), &(0x7f0000000440)=0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) r5 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, r5, 0x0, 0x8, 'syz1\x00', 0x0}) 2.492607708s ago: executing program 5 (id=2269): socket(0xa, 0x3, 0x87) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), 0x2000005, r1}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000200000000040010000000000"], 0x50) syz_emit_vhci(0x0, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x840, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) lseek(r0, 0x2, 0xe2c4858b3c35b2c6) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050) ioctl$SNDCTL_SYNTH_ID(r5, 0xc08c5114, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x290}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) syz_open_dev$ndb(0x0, 0x0, 0x8180) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000cc0000000072a2bf3d340c000000000475ac919fac5d4934dbdc7bf14e93086af18c14dc423a46fd215fc440f7c4df0ff5e53bd879ee22ccc23da3a34db63984186594ac048f1ab5380274348097d0294bc934d5f98106d3c4bd4b8371c46eb86c70e08138c1cdd1069f1c2593cd0ec5780d6fd7940a29e9c8b423729bc7018e6929d09b8c2e10cdb2c17bb6a0ba68a8e32516687fe1592dd731633a32e0a6f075addb192331de53e0ec445b12bc8d1a8e8675d2bec781cd9a8c4683bf0ff079ad33cbe7482f9652b9a6fd6293814c11585df296be9bf93ad1cd", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) 2.24630033s ago: executing program 2 (id=2270): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x20, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000500)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000006c0), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="1b0000001a007f029e741683c28f7b331d00000000390000000000", 0x1b}], 0x1}, 0x24000080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x400, 0x470bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 2.092425034s ago: executing program 1 (id=2271): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x20, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1, r0}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r2, &(0x7f0000000500)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f00000006c0), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="1b0000001a007f029e741683c28f7b331d00000000390000000000", 0x1b}], 0x1}, 0x24000080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x400, 0x470bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 1.349349313s ago: executing program 5 (id=2272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001"], 0x870}}, 0x0) (fail_nth: 11) 1.348882704s ago: executing program 2 (id=2273): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x20, 0x3, &(0x7f0000001ac0)=@framed, &(0x7f0000001b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001b40)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xffffff1f, 0x1}}, 0x20) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000300)=""/4096, 0x0, 0x1000}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001b80)={0x8, 0x0, &(0x7f0000001bc0)=[@increfs], 0x0, 0x0, 0x0}) fcntl$dupfd(r3, 0x406, r3) r5 = dup3(r4, r3, 0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001c00)={0x10, 0x0, &(0x7f0000001c40)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001c80)={0x8, 0x0, &(0x7f0000001cc0)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x200, 0x4) setsockopt(r2, 0x11b, 0x9, 0x0, 0x4) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x8000) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000000080)={r6, 0x8, 0xda, 0x4}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000001600)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc2c45513, &(0x7f0000001300)={{0x9, 0x7, 0x3, 0x8, 'syz0\x00', 0x7b}, 0x0, [0x1, 0x100, 0x1000, 0x6950, 0x1d1, 0x7fffffff, 0x5, 0x5, 0xbc1, 0xd89e, 0x15b, 0xb27, 0x5948, 0x5, 0x2, 0x10001, 0x9, 0x5, 0xb, 0x2, 0x3ff, 0x400, 0x2000040, 0x10040002, 0x7, 0x0, 0x2, 0x887f, 0x803, 0x3, 0xffffffff, 0x6, 0xffffffff, 0xfff, 0x3ff, 0x1, 0x5, 0x9, 0x3, 0x10000006, 0x100003, 0x78a, 0xbfff8007, 0x200000e, 0xa, 0x0, 0x1, 0x4, 0x3, 0x4, 0x9, 0x80000001, 0x3fe, 0x1ff, 0x9, 0xfffff647, 0x7, 0x4, 0x4000001, 0x9, 0x800009, 0x5, 0x5, 0x8, 0x98, 0xbe, 0x3, 0x4, 0x4, 0x3, 0x81, 0x10004, 0x2, 0x80000001, 0x69e, 0xc, 0x4, 0x1, 0x8, 0x1e2, 0x7, 0x4, 0x4, 0x8, 0xffffeffd, 0x11002, 0x1, 0x5, 0x5, 0xcbe, 0x8, 0xff, 0x2, 0xfffffff9, 0xf86, 0x58a0, 0xfc13, 0x9, 0x895, 0xc, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0x8e0b2, 0x9, 0x3, 0x12, 0x3, 0x3, 0xfffffff8, 0x3, 0x2, 0x0, 0x2bd, 0x0, 0xe, 0x5, 0x8, 0x2, 0x3ff, 0xfff, 0x6, 0x7, 0xffffffff, 0x1007, 0x6, 0x200ff]}) sigaltstack(0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000280)={0x0, 0x2, &(0x7f00000002c0)=[r8, r8], &(0x7f0000000300), 0x0, 0x0, 0x0, 0x1}) 1.260350691s ago: executing program 2 (id=2274): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x7}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x1, 0x2}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0xaa}}}, &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) renameat2(r0, &(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', r0, &(0x7f0000000040)='./cgroup.cpu/memory.force_empty\x00', 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r4, @ANYBLOB="01fffff0000000000000200100000c000280080002006c6f0000180003800400010008000200050000000800040076"], 0x38}}, 0x0) write(r0, &(0x7f0000000140)='0', 0x1) 1.191118039s ago: executing program 5 (id=2275): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82187202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f00000000c0)='./dir\x00', 0x0, 0x0, &(0x7f0000000140)='vers=2.0,sec=ntlmssp,ip=127.0.0.1,port=20000,nodfs,username=root,password=root\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.17609244s ago: executing program 1 (id=2276): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="620ad0ff45002c00620ad4ff00000000620ad8ff40060000620adcff7f000001620ae0ff7f000001620ae4ff12345678620ae8ff11223344620aecff00000000620af0ff60021000620af4ff00000000620af8ff02040000620afcff00000000bfa100000000000007010000d0ffffffbfa200000000000007020000e4ffffffb70300001800000085000000cc000000b70000000200000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000940)="00000000000100000000000208004500002800000000400600007f0000017f000001", 0x0, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_pts(0xffffffffffffffff, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x1000451, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x38728a2, 0x0) syz_open_pts(r1, 0x2) 1.073411692s ago: executing program 5 (id=2277): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000240)={{r0}, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') mknodat$loop(r1, &(0x7f0000000180)='./sys\x00', 0x6000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000000000000000010400000020000000050000000100e1c3040000000002000004080000001300000002000000000000000100000001000000200000000076616c0062704f5b171587b0a8ca6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x5) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000001280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001340)='illinois', 0x8) shutdown(r3, 0x1) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x61e1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001380)={0x1, &(0x7f00000013c0)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) openat$loop_ctrl(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001440)={0x8, 0x80000008b}, 0x0) 1.005904279s ago: executing program 2 (id=2278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4000, 0x0, 0x4, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xf5b439e5fa041319, 0xc3}}}}}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x110) write(r1, &(0x7f0000000240)="3c6b65726e656c3e202fbd76696c652072656164202f6574632f706173737764207461736b2e7569643d30207461736b2e657569643d300a73656c65637420646f6d61696e3d3c6b65726e655c3e20fdac1d19b4a8981244f11ec1eae970ae50431a52e3d2000000000000417100000000000000000000000000000000000000000000000000d323d22701bf312510b6ace065a0d0365103ae99deeb114d357fb322e34c3da8c438307a1da24ab0121ea749182d", 0xb4) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000065c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006580)={&(0x7f0000002780)={0x6b0, 0xd, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x66c, 0x3, 0x0, 0x1, [{0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x118, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd0, 0x1, "216666deb44b66de4e74fa452840f0c0b83a95eddb4e167941e46d3532d078344067d392aa274e88ef2390265628151a831d66f24adcd1da35efac34a8e443b7b433a45e29ea7f827f66c642b8df2fe27bc35df9aa4406683e8d46bba6717e2260ed7e5eda61836edc3571ade66ab8f587c8ea1819a185840f974fa71c069383535c56986f5ab2b53d843a519e65eace74c9222902d2738989b8a0a1b7d28332cdcd44e762ef20d6038223684bcfe9a34239d691940cdbfe4cae1b149e6b1fe5cf738a1732e59875043797e3"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x34, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x3ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x214, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xf8, 0x1, "b5a5b251ea14058c77972cc7e49182989e7922a71f16e505ff826f30c40bc5ea0b9d3c9b69347f8787786a79dea2c9b80860b8ea5c63608894a812283eb5c836a7714b950712a9e5a05d0eb85d20f151d1b5ab3000c29e363b0cbee7e30da81cb8cc9a7e7772af229e70ee31f06d80f30c01dadb3f32f7e3a2ebaf21ac80c6b0fad9472059007ca78e839affe9e8caa46e73b7caae9cd1101244f9bb3577ffb4fed1f3f38c2b1bab325e41ea09c4269d93b5314a88b08f07a2558dc4ee77e114ae26865e194d01e7943d46616cc3b11c1435875a4675e55e0e957d67558f17103014d91cd0f85cf44a33eaa8a9f35c22ec89516f"}, @NFTA_DATA_VALUE={0x69, 0x1, "2bc11337badbabbd3c6b8ae2fcadb37e9f6fbd6ebf7a2e4e5b585a4fa887278d680d08f8d746c7467169fa4d5b86392f69aefcd4dc778eb588e9b7fe8baad35e5e498cb9b653c9e41537ab1a2e6c1c63160e9d18e75082061183c9b85450653399bbf83e0a"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x60, 0x1, "d227bdb2f0c33677a058199e3abaadb0d4bf0706f1e30e3a1702ad85906da5bfc7b90b1b88cb3e0a18aedbabfc7a0955251a08b5a0361c032ff01c3363afc72fee0ddc8e79f7bd446be447b622bcc43e91b884d0bbf95a433092c93c"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2e6}, @NFTA_SET_ELEM_EXPRESSIONS={0x150, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_IMMEDIATE_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf, 0x1, "215784e8bac4a5314525f0"}]}]}}}, {0x44, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, {0x94, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8e, 0x6, 0x1, 0x0, "f4d44f8f79a70a4af255d6066a3963dd2fa5d345826e800a06c442aa8c1f0549c8fa596bbfef159dc683bfb7200834d793a7958d2f4ad249f42b0f8d9cb1eb773562858718e09f7a438709bab7a7898e44cac3ad02e96a56c479fd315bdab5cf7436d332a281edc1970869d0078bbf250cb2bbe0f4ceda7fccb26b01efa649b946074aa689590909808b"}]}, {0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xb4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "e14af1258d"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x31, 0x1, "48ec4aa7270f8bcd2950bbf08351844f938998cf093d15ef7de1fc8c5c696c1a242b5806955ba63d065c9f2882"}, @NFTA_DATA_VALUE={0xa, 0x1, "cff82eb3236a"}, @NFTA_DATA_VALUE={0x25, 0x1, "f90664208cbb69794021a69dabdf600a5f7f1930669c3ab71943961a21e6ceeea4"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x6b0}, 0x1, 0x0, 0x0, 0x880}, 0x4800) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vnet(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0x7f, 0x6, @random="2d22aece4334"}, 0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, 0x0, 0x25, 0x8, @void}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000340), &(0x7f0000000440)=0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) r5 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, r5, 0x0, 0x8, 'syz1\x00', 0x0}) 502.857206ms ago: executing program 3 (id=2279): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x0, 0x140e, 0x2, 0x70bd30, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x2c040851}, 0x8014) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001f00)={'filter\x00', 0x7, 0x4, 0x3c0, 0x0, 0x200, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000500), {[{{@uncond, 0xbc, 0x104}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe, 'syz0\x00', {0x707}}}}, {{@uncond, 0xbc, 0xfc}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xfc, 0x2, {0x8}}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x40c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000025c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 104.911288ms ago: executing program 1 (id=2280): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000000800794a778d905fae430080", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x40) setns(0xc9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000001000010025bd2004fbdbdf2500000000", @ANYRES32, @ANYBLOB="00000000034a04000a0001"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r4, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000019080)='map_files\x00') getdents64(r6, &(0x7f0000019180)=""/4098, 0x1002) openat$sw_sync_info(0xffffff9c, &(0x7f0000000240), 0x690000, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000200)={0x0, r5, 0xe, 0x3, 0x1}) write$cgroup_int(r2, &(0x7f0000000040)=0x8000000001cb, 0x12) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x101501, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000019140)='net/ip6_mr_vif\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x8) 103.912418ms ago: executing program 2 (id=2281): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x20, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000500)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000006c0), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="1b0000001a007f029e741683c28f7b331d00000000390000000000", 0x1b}], 0x1}, 0x24000080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x400, 0x470bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 80.708392ms ago: executing program 5 (id=2282): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x1, 0x8, 0x2f, 0xe2}]}) epoll_create1(0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x81800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) execveat(r1, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b23d"], 0x0) r3 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, &(0x7f0000000140)) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000140)=0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) r6 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r5) keyctl$read(0xb, r6, &(0x7f0000000040)=""/61, 0x3d) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000000)={{&(0x7f000096f000/0x7000)=nil, 0x7000}}) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000682000/0x4000)=nil, 0xa) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x1, 0x255, 0x0, r7}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0xffffffc, 0x3b7, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc92, 0x800, 0x1, 0x287, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367, 0x0, r7}}], 0x1, &(0x7f0000000780)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x4, 0x0, 0x0}}, 0x0) 0s ago: executing program 3 (id=2283): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x59) mount(0x0, 0x0, &(0x7f0000000040)='esdfs\x00', 0x2981000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x329683, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f00000001c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000200)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) r5 = open(&(0x7f0000000240)='.\x00', 0x0, 0x244) r6 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r7, &(0x7f00000002c0)=0x4000921, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0x9362, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x4) writev(r1, &(0x7f0000000380)=[{0x0}], 0x1) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="280000000200000066aea8f615f44155093443da4feb05a78faf00009999df7a99425dd09b0f4db922a6891004000000"], 0x202000) openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket(0xa, 0x6, 0x0) r8 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_int(r8, 0x29, 0x46, 0x0, 0x0) kernel console output (not intermixed with test programs): 4982][ T2544] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 310.163595][ T2544] usb 9-1: unable to get BOS descriptor or descriptor too short [ 310.163636][ T2544] usb 9-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 310.165419][ T2544] usb 9-1: config 254 has an invalid interface number: 213 but max is 0 [ 310.165434][ T2544] usb 9-1: config 254 has no interface number 0 [ 310.165447][ T2544] usb 9-1: config 254 interface 213 has no altsetting 0 [ 310.167070][ T2544] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.167083][ T2544] usb 9-1: Product: syz [ 310.167091][ T2544] usb 9-1: Manufacturer: syz [ 310.167098][ T2544] usb 9-1: SerialNumber: syz [ 310.515045][ T2544] usb_ehset_test 9-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 310.519720][ T2544] usb 9-1: USB disconnect, device number 12 [ 310.829947][T12236] CIFS: Attempting to mount //127.0.0.1/share [ 310.942727][T12236] CIFS: VFS: cifs_mount failed w/return code = -112 [ 311.560070][T12244] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.674112][T12246] CIFS: Attempting to mount //127.0.0.1/share [ 311.736766][T12246] CIFS: VFS: cifs_mount failed w/return code = -112 [ 311.767488][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 311.831795][T12250] netlink: Failed to add helper -22 [ 311.831823][T12250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.974414][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1962'. [ 312.141040][ T2544] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 312.270442][ T2544] usb 8-1: device descriptor read/64, error -71 [ 312.270446][ T35] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 312.334528][T12279] netlink: 'syz.2.1965': attribute type 10 has an invalid length. [ 312.334686][T12279] geneve1: entered promiscuous mode [ 312.342327][T12279] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 312.444158][ T35] usb 9-1: unable to get BOS descriptor or descriptor too short [ 312.444185][ T35] usb 9-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 312.445046][ T35] usb 9-1: config 254 has an invalid interface number: 213 but max is 0 [ 312.445061][ T35] usb 9-1: config 254 has no interface number 0 [ 312.445082][ T35] usb 9-1: config 254 interface 213 has no altsetting 0 [ 312.446785][ T35] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.446798][ T35] usb 9-1: Product: syz [ 312.446805][ T35] usb 9-1: Manufacturer: syz [ 312.446813][ T35] usb 9-1: SerialNumber: syz [ 312.510525][ T2544] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 312.516287][T12287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.516309][T12287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.517262][T12287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.517277][T12287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.640579][ T2544] usb 8-1: device descriptor read/64, error -71 [ 312.750819][ T2544] usb usb8-port1: attempt power cycle [ 313.090411][ T2544] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 313.110884][ T2544] usb 8-1: device descriptor read/8, error -71 [ 313.159505][ T35] usb_ehset_test 9-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 313.307820][T12299] warn_alloc: 5 callbacks suppressed [ 313.307836][T12299] syz.2.1968: vmalloc error: size 4096, failed to allocate pages, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 313.307874][T12299] CPU: 0 UID: 0 PID: 12299 Comm: syz.2.1968 Not tainted syzkaller #0 PREEMPT(full) [ 313.307888][T12299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 313.307896][T12299] Call Trace: [ 313.307900][T12299] [ 313.307905][T12299] dump_stack_lvl+0x100/0x190 [ 313.307925][T12299] warn_alloc.cold+0x9e/0xb2 [ 313.307938][T12299] ? __pfx_warn_alloc+0x10/0x10 [ 313.307952][T12299] ? policy_nodemask+0xed/0x4f0 [ 313.307971][T12299] ? alloc_pages_mpol+0x260/0x550 [ 313.307983][T12299] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 313.308003][T12299] ? __get_vm_area_node+0x22b/0x350 [ 313.308023][T12299] __vmalloc_node_range_noprof+0x111c/0x1420 [ 313.308058][T12299] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 313.308084][T12299] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 313.308104][T12299] ? rcu_is_watching+0x13/0xc0 [ 313.308118][T12299] ? trace_hrtimer_start+0x77/0x220 [ 313.308134][T12299] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 313.308151][T12299] __vmalloc_node_noprof+0xad/0xf0 [ 313.308170][T12299] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 313.308194][T12299] __vmalloc_noprof+0xa3/0x120 [ 313.308206][T12299] ? __pfx___vmalloc_noprof+0x10/0x10 [ 313.308216][T12299] ? rcu_is_watching+0x13/0xc0 [ 313.308230][T12299] ? rcu_is_watching+0x13/0xc0 [ 313.308244][T12299] ? apparmor_capable+0x1d7/0x4d0 [ 313.308258][T12299] bpf_prog_alloc_no_stats+0x58/0x690 [ 313.308275][T12299] ? security_capable+0x80/0x260 [ 313.308295][T12299] bpf_prog_alloc+0x3b/0x200 [ 313.308311][T12299] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 313.308330][T12299] bpf_prog_load+0x49e/0x2ab0 [ 313.308348][T12299] ? __lock_acquire+0x5c0/0x1f40 [ 313.308368][T12299] ? __pfx_bpf_prog_load+0x10/0x10 [ 313.308385][T12299] ? lock_acquire+0x1d1/0x380 [ 313.308414][T12299] __sys_bpf+0x1f46/0x4a30 [ 313.308431][T12299] ? __pfx___sys_bpf+0x10/0x10 [ 313.308444][T12299] ? find_held_lock+0x2b/0x80 [ 313.308457][T12299] ? futex_wake+0x4ea/0x5e0 [ 313.308496][T12299] ? rcu_is_watching+0x13/0xc0 [ 313.308510][T12299] ? trace_kmem_cache_alloc+0xdd/0x100 [ 313.308537][T12299] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 313.308557][T12299] ? xfd_validate_state+0x129/0x190 [ 313.308589][T12299] ? __ia32_sys_bpf+0xcc/0x170 [ 313.308603][T12299] __ia32_sys_bpf+0xcc/0x170 [ 313.308617][T12299] ? __do_fast_syscall_32+0xb3/0x8b0 [ 313.308632][T12299] __do_fast_syscall_32+0x13a/0x8b0 [ 313.308653][T12299] do_fast_syscall_32+0x32/0x70 [ 313.308673][T12299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.308696][T12299] RIP: 0023:0xf7f78fec [ 313.308710][T12299] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 313.308716][T12299] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 313.308728][T12299] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000900 [ 313.308735][T12299] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.308746][T12299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.308757][T12299] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 313.308768][T12299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.308792][T12299] [ 313.308799][T12299] Mem-Info: [ 313.308807][T12299] active_anon:18694 inactive_anon:3907 isolated_anon:0 [ 313.308807][T12299] active_file:10097 inactive_file:15911 isolated_file:0 [ 313.308807][T12299] unevictable:1000 dirty:297 writeback:0 [ 313.308807][T12299] slab_reclaimable:9315 slab_unreclaimable:63469 [ 313.308807][T12299] mapped:23555 shmem:17583 pagetables:1948 [ 313.308807][T12299] sec_pagetables:321 bounce:0 [ 313.308807][T12299] kernel_misc_reclaimable:0 [ 313.308807][T12299] free:30420 free_pcp:14849 free_cma:0 [ 313.308897][T12299] Node 0 active_anon:4kB inactive_anon:120kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1056kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9568kB pagetables:1996kB sec_pagetables:1144kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 313.308942][T12299] Node 1 active_anon:74772kB inactive_anon:15508kB active_file:40380kB inactive_file:63624kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:93164kB dirty:1180kB writeback:0kB shmem:70332kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6192kB pagetables:5796kB sec_pagetables:140kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 313.308987][T12299] Node 0 DMA free:1960kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:560kB local_pcp:212kB free_cma:0kB [ 313.309035][T12299] lowmem_reserve[]: 0 259 259 259 259 [ 313.309066][T12299] Node 0 DMA32 free:14560kB boost:0kB min:11704kB low:14628kB high:17552kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:120kB active_file:4kB inactive_file:20kB unevictable:0kB writepending:4kB zspages:0kB present:1032196kB managed:265356kB mlocked:0kB bounce:0kB free_pcp:7136kB local_pcp:612kB free_cma:0kB [ 313.309113][T12299] lowmem_reserve[]: 0 0 0 0 0 [ 313.309255][T12299] Node 1 DMA32 free:105160kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:74772kB inactive_anon:15508kB active_file:40380kB inactive_file:63624kB unevictable:4000kB writepending:1180kB zspages:2444kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:51724kB local_pcp:10576kB free_cma:0kB [ 313.309288][T12299] lowmem_reserve[]: 0 0 0 0 0 [ 313.309306][T12299] Node 0 DMA: 26*4kB (UE) 2*8kB (E) 1*16kB (U) 17*32kB (UE) 14*64kB (UE) 3*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1960kB [ 313.309411][T12299] Node 0 DMA32: 2*4kB (UE) 35*8kB (ME) 29*16kB (UME) 89*32kB (UME) 47*64kB (UME) 30*128kB (UME) 12*256kB (UM) 2*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 14544kB [ 313.309529][T12299] Node 1 DMA32: 396*4kB (UME) 128*8kB (UME) 116*16kB (UM) 115*32kB (UM) 78*64kB (UME) 35*128kB (UME) 58*256kB (UME) 32*512kB (M) 25*1024kB (UME) 7*2048kB (UME) 4*4096kB (UM) = 105168kB [ 313.309663][T12299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.309678][T12299] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 313.309692][T12299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.309705][T12299] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 313.309717][T12299] 44622 total pagecache pages [ 313.309726][T12299] 1033 pages in swap cache [ 313.309734][T12299] Free swap = 113104kB [ 313.309741][T12299] Total swap = 124996kB [ 313.309748][T12299] 524155 pages RAM [ 313.309755][T12299] 0 pages HighMem/MovableOnly [ 313.309761][T12299] 216924 pages reserved [ 313.309767][T12299] 0 pages cma reserved [ 313.388113][T12301] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1969'. [ 313.423746][ T2544] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 313.479956][ T2544] usb 8-1: device descriptor read/8, error -71 [ 313.534226][ T35] usb 9-1: USB disconnect, device number 13 [ 313.581997][ T2544] usb usb8-port1: unable to enumerate USB device [ 314.800329][ T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 315.270399][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 315.270444][ T9] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 315.322142][ T9] usb 6-1: config 254 has an invalid interface number: 213 but max is 0 [ 315.322170][ T9] usb 6-1: config 254 has no interface number 0 [ 315.322196][ T9] usb 6-1: config 254 interface 213 has no altsetting 0 [ 315.498074][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.498092][ T9] usb 6-1: Product: syz [ 315.498100][ T9] usb 6-1: Manufacturer: syz [ 315.498108][ T9] usb 6-1: SerialNumber: syz [ 315.756207][T12345] netlink: 'syz.3.1983': attribute type 10 has an invalid length. [ 315.809908][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 315.809927][ T43] audit: type=1107 audit(1792048765.813:3593): pid=12344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 315.991832][ T9] usb_ehset_test 6-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 315.993203][ T9] usb 6-1: USB disconnect, device number 30 [ 316.346695][T12377] FAULT_INJECTION: forcing a failure. [ 316.346695][T12377] name failslab, interval 1, probability 0, space 0, times 0 [ 316.346725][T12377] CPU: 3 UID: 0 PID: 12377 Comm: syz.2.1986 Not tainted syzkaller #0 PREEMPT(full) [ 316.346762][T12377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 316.346774][T12377] Call Trace: [ 316.346781][T12377] [ 316.346790][T12377] dump_stack_lvl+0x100/0x190 [ 316.346820][T12377] should_fail_ex.cold+0x5/0xa [ 316.346846][T12377] should_failslab+0xc2/0x120 [ 316.346875][T12377] kmem_cache_alloc_noprof+0x92/0x6a0 [ 316.346900][T12377] ? __pfx_map_id_range_down+0x10/0x10 [ 316.346928][T12377] ? security_inode_alloc+0x3b/0x2c0 [ 316.346954][T12377] security_inode_alloc+0x3b/0x2c0 [ 316.347002][T12377] inode_init_always_gfp+0xc6f/0xfb0 [ 316.347033][T12377] alloc_inode+0x8e/0x250 [ 316.347054][T12377] new_inode+0x22/0x1c0 [ 316.347077][T12377] proc_pid_make_inode+0x22/0x160 [ 316.347104][T12377] ? do_raw_spin_unlock+0x145/0x1e0 [ 316.347126][T12377] proc_fd_instantiate+0x57/0x230 [ 316.347152][T12377] proc_lookupfd+0x11f/0x200 [ 316.347177][T12377] ? __pfx_proc_lookupfd+0x10/0x10 [ 316.347204][T12377] ? __pfx_proc_lookupfd+0x10/0x10 [ 316.347229][T12377] lookup_open+0xa79/0x1990 [ 316.347264][T12377] path_openat+0xa2c/0x2440 [ 316.347295][T12377] ? __pfx_path_openat+0x10/0x10 [ 316.347330][T12377] do_file_open+0x20e/0x430 [ 316.347359][T12377] ? __pfx_do_file_open+0x10/0x10 [ 316.347396][T12377] ? __pfx_kfree_link+0x10/0x10 [ 316.347428][T12377] ? _raw_spin_unlock+0x28/0x50 [ 316.347453][T12377] ? alloc_fd+0x471/0x7a0 [ 316.347487][T12377] do_sys_openat2+0x10f/0x1e0 [ 316.347507][T12377] ? __pfx_do_sys_openat2+0x10/0x10 [ 316.347528][T12377] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 316.347549][T12377] ? __fget_files+0x21f/0x3d0 [ 316.347579][T12377] __ia32_compat_sys_openat+0x12d/0x210 [ 316.347602][T12377] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 316.347626][T12377] ? ksys_write+0x1ac/0x250 [ 316.347661][T12377] do_int80_emulation+0x166/0x650 [ 316.347684][T12377] asm_int80_emulation+0x1a/0x20 [ 316.347704][T12377] RIP: 0023:0xf71677eb [ 316.347721][T12377] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 316.347739][T12377] RSP: 002b:00000000f54263cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 316.347759][T12377] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5426490 [ 316.347772][T12377] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.347783][T12377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.347794][T12377] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 316.347806][T12377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.347833][T12377] [ 316.413996][T12381] jffs2: notice: (12381) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 316.421254][ T2544] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 316.603850][ T2544] usb 8-1: Using ep0 maxpacket: 16 [ 316.604374][ T2544] usb 8-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 316.607527][ T2544] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 316.607541][ T2544] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.607551][ T2544] usb 8-1: config 0 has no interface number 0 [ 316.615325][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.626244][ T2544] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.626258][ T2544] usb 8-1: Product: syz [ 316.626266][ T2544] usb 8-1: Manufacturer: syz [ 316.626274][ T2544] usb 8-1: SerialNumber: syz [ 316.627547][ T2544] usb 8-1: config 0 descriptor?? [ 316.639234][ T2544] uvcvideo 8-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 316.639252][ T2544] uvcvideo 8-1:0.105: No valid video chain found. [ 316.685217][ T43] audit: type=1326 audit(1792048766.693:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.4.1992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efec code=0x7ffc0000 [ 316.685336][ T43] audit: type=1326 audit(1792048766.693:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.4.1992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efec code=0x7ffc0000 [ 316.685892][ T43] audit: type=1326 audit(1792048766.693:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.4.1992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efec code=0x7ffc0000 [ 316.685916][ T43] audit: type=1326 audit(1792048766.693:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.4.1992" exe="/syz-executor" sig=0 arch=40000003 syscall=24 compat=1 ip=0xf741efec code=0x7ffc0000 [ 316.685937][ T43] audit: type=1326 audit(1792048766.693:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.4.1992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efec code=0x7ffc0000 [ 316.685958][ T43] audit: type=1326 audit(1792048766.693:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.4.1992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efec code=0x7ffc0000 [ 316.686013][ T43] audit: type=1326 audit(1792048766.693:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.4.1992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741efec code=0x7ffc0000 [ 316.686213][ T43] audit: type=1326 audit(1792048766.693:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.4.1992" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf741efec code=0x7ffc0000 [ 316.686307][ T43] audit: type=1326 audit(1792048766.693:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.4.1992" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf741efec code=0x7ffc0000 [ 317.741890][ T4398] usb 8-1: USB disconnect, device number 48 [ 318.046133][T12434] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 318.090216][ T4398] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 318.258666][T12441] CIFS: Attempting to mount //127.0.0.1/share [ 318.258869][T12439] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 318.275438][ T4398] usb 8-1: unable to get BOS descriptor or descriptor too short [ 318.275467][ T4398] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 318.350461][ T4398] usb 8-1: config 254 has an invalid interface number: 213 but max is 0 [ 318.350492][ T4398] usb 8-1: config 254 has no interface number 0 [ 318.350508][ T4398] usb 8-1: config 254 interface 213 has no altsetting 0 [ 318.390765][ T4398] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.390781][ T4398] usb 8-1: Product: syz [ 318.390788][ T4398] usb 8-1: Manufacturer: syz [ 318.390796][ T4398] usb 8-1: SerialNumber: syz [ 318.803318][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2008'. [ 319.094976][T12441] CIFS: VFS: cifs_mount failed w/return code = -112 [ 319.181755][T12456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2010'. [ 319.325399][ T4398] usb_ehset_test 8-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 319.375995][ T4398] usb 8-1: USB disconnect, device number 49 [ 319.628511][T12459] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.628989][T12459] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.645843][T12462] jffs2: notice: (12462) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 319.655023][T12459] batman_adv: batadv0: Interface deactivated: dummy0 [ 319.750722][T12459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.759618][T12459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.939435][T12459] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 319.943698][T12459] bond3: left promiscuous mode [ 319.943718][T12459] bond3: left allmulticast mode [ 319.960159][ T5803] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.960201][ T5803] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.960232][ T5803] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.960264][ T5803] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.610112][ T856] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 320.761716][ T856] usb 9-1: unable to get BOS descriptor or descriptor too short [ 320.761741][ T856] usb 9-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 320.762486][ T856] usb 9-1: config 254 has an invalid interface number: 213 but max is 0 [ 320.762507][ T856] usb 9-1: config 254 has no interface number 0 [ 320.762521][ T856] usb 9-1: config 254 interface 213 has no altsetting 0 [ 320.764018][ T856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.764031][ T856] usb 9-1: Product: syz [ 320.764039][ T856] usb 9-1: Manufacturer: syz [ 320.764046][ T856] usb 9-1: SerialNumber: syz [ 320.920038][ T6547] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 321.052273][ T6547] usb 8-1: device descriptor read/64, error -71 [ 321.108676][ T856] usb_ehset_test 9-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 321.109666][ T856] usb 9-1: USB disconnect, device number 14 [ 321.290117][ T6547] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 321.420021][ T6547] usb 8-1: device descriptor read/64, error -71 [ 321.497886][T12524] kAFS: No cell specified [ 321.530356][ T6547] usb usb8-port1: attempt power cycle [ 321.869944][ T6547] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 321.890985][ T6547] usb 8-1: device descriptor read/8, error -71 [ 322.129930][ T6547] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 322.150768][ T6547] usb 8-1: device descriptor read/8, error -71 [ 322.260140][ T6547] usb usb8-port1: unable to enumerate USB device [ 322.430438][T12540] jffs2: notice: (12540) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 322.537365][T12547] netlink: 'syz.1.2046': attribute type 3 has an invalid length. [ 322.719891][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 322.819969][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 322.870467][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 322.871013][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.871844][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.871867][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.872663][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 322.872677][ T10] usb 7-1: SerialNumber: syz [ 322.982640][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 322.982705][ T9] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 322.983494][ T9] usb 6-1: config 254 has an invalid interface number: 213 but max is 0 [ 322.983507][ T9] usb 6-1: config 254 has no interface number 0 [ 322.983521][ T9] usb 6-1: config 254 interface 213 has no altsetting 0 [ 322.985205][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.985217][ T9] usb 6-1: Product: syz [ 322.985272][ T9] usb 6-1: Manufacturer: syz [ 322.985281][ T9] usb 6-1: SerialNumber: syz [ 323.183234][ T10] cdc_acm 7-1:1.0: skipping garbage [ 323.185059][ T10] usb 7-1: USB disconnect, device number 10 [ 323.281994][ T9] usb_ehset_test 6-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 323.283872][ T9] usb 6-1: USB disconnect, device number 31 [ 323.706963][T12555] tmpfs: Cannot change global quota limit on remount [ 323.712449][T12555] sg_write: data in/out 19942/44 bytes for SCSI command 0x32-- guessing data in; [ 323.712449][T12555] program syz.3.2048 not setting count and/or reply_len properly [ 323.828916][T12559] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 324.498106][T12560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2050'. [ 325.235309][T12569] FAULT_INJECTION: forcing a failure. [ 325.235309][T12569] name failslab, interval 1, probability 0, space 0, times 0 [ 325.235329][T12569] CPU: 3 UID: 0 PID: 12569 Comm: syz.1.2054 Not tainted syzkaller #0 PREEMPT(full) [ 325.235343][T12569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 325.235350][T12569] Call Trace: [ 325.235355][T12569] [ 325.235359][T12569] dump_stack_lvl+0x100/0x190 [ 325.235378][T12569] should_fail_ex.cold+0x5/0xa [ 325.235393][T12569] should_failslab+0xc2/0x120 [ 325.235412][T12569] __kmalloc_noprof+0xfc/0x840 [ 325.235446][T12569] ? __pfx_dynamic_dname+0x10/0x10 [ 325.235466][T12569] ? tomoyo_encode2+0xfb/0x3c0 [ 325.235495][T12569] tomoyo_encode2+0xfb/0x3c0 [ 325.235522][T12569] tomoyo_encode+0x29/0x50 [ 325.235545][T12569] tomoyo_realpath_from_path+0x18c/0x690 [ 325.235572][T12569] tomoyo_path_number_perm+0x23c/0x580 [ 325.235585][T12569] ? tomoyo_path_number_perm+0x22e/0x580 [ 325.235600][T12569] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 325.235614][T12569] ? get_pid_task+0x106/0x250 [ 325.235630][T12569] ? __lock_acquire+0x5c0/0x1f40 [ 325.235654][T12569] ? __fget_files+0x34/0x3d0 [ 325.235673][T12569] ? find_held_lock+0x2b/0x80 [ 325.235687][T12569] ? __fget_files+0x215/0x3d0 [ 325.235701][T12569] ? hook_file_ioctl_common+0x140/0x440 [ 325.235715][T12569] ? __fget_files+0x215/0x3d0 [ 325.235733][T12569] ? __fget_files+0x21f/0x3d0 [ 325.235750][T12569] security_file_ioctl_compat+0xd3/0x230 [ 325.235765][T12569] __ia32_compat_sys_ioctl+0xc2/0x360 [ 325.235781][T12569] __do_fast_syscall_32+0x13a/0x8b0 [ 325.235794][T12569] ? lockdep_hardirqs_on+0x7d/0x110 [ 325.235820][T12569] do_fast_syscall_32+0x32/0x70 [ 325.235839][T12569] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 325.235863][T12569] RIP: 0023:0xf7fc7fec [ 325.235886][T12569] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 325.235897][T12569] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 325.235914][T12569] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020ae76 [ 325.235922][T12569] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.235929][T12569] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 325.235935][T12569] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 325.235943][T12569] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 325.235958][T12569] [ 325.236000][T12569] ERROR: Out of memory at tomoyo_realpath_from_path. [ 325.304952][T12571] ftl_cs: FTL header not found. [ 325.358230][T12571] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536] [ 325.375292][T12575] ubi0: attaching mtd1 [ 325.382828][T12575] ubi0: scanning is finished [ 325.382857][T12575] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 325.503473][T12579] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 325.598129][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 325.598149][ T43] audit: type=1800 audit(1792048775.603:3613): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2060" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 325.638874][T12586] 9p: Bad value for 'wfdno' [ 325.686413][T12575] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 325.820024][ T2544] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 325.972206][ T2544] usb 6-1: unable to get BOS descriptor or descriptor too short [ 325.972233][ T2544] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 325.973083][ T2544] usb 6-1: config 254 has an invalid interface number: 213 but max is 0 [ 325.973097][ T2544] usb 6-1: config 254 has no interface number 0 [ 325.973110][ T2544] usb 6-1: config 254 interface 213 has no altsetting 0 [ 325.974811][ T2544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.974824][ T2544] usb 6-1: Product: syz [ 325.974831][ T2544] usb 6-1: Manufacturer: syz [ 325.974838][ T2544] usb 6-1: SerialNumber: syz [ 326.079881][ T5744] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 326.211236][T12594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2064'. [ 326.262190][ T5744] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 326.262996][ T5744] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 326.263009][ T5744] usb 7-1: config 0 has no interface number 0 [ 326.263026][ T5744] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 326.263040][ T5744] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 326.263058][ T5744] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.264289][ T5744] usb 7-1: config 0 descriptor?? [ 326.264749][T12592] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 326.270809][ T5744] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 326.305028][ T2544] usb_ehset_test 6-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 326.306543][ T2544] usb 6-1: USB disconnect, device number 32 [ 326.615182][ T5744] usb 7-1: USB disconnect, device number 11 [ 327.381983][T12607] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 327.536963][ T43] audit: type=1804 audit(1792048777.543:3614): pid=12610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2068" name="/newroot/152/file0" dev="tmpfs" ino=858 res=1 errno=0 [ 327.631465][T12617] comedi comedi0: comedi_bond: 3:0 3:1 attached, 48 channels from 2 devices [ 327.941566][T12625] tipc: Enabling of bearer rejected, failed to enable media [ 328.488981][T12633] FAULT_INJECTION: forcing a failure. [ 328.488981][T12633] name failslab, interval 1, probability 0, space 0, times 0 [ 328.489018][T12633] CPU: 0 UID: 0 PID: 12633 Comm: syz.2.2076 Not tainted syzkaller #0 PREEMPT(full) [ 328.489044][T12633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 328.489058][T12633] Call Trace: [ 328.489066][T12633] [ 328.489075][T12633] dump_stack_lvl+0x100/0x190 [ 328.489109][T12633] should_fail_ex.cold+0x5/0xa [ 328.489139][T12633] should_failslab+0xc2/0x120 [ 328.489174][T12633] kmem_cache_alloc_noprof+0x92/0x6a0 [ 328.489202][T12633] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 328.489234][T12633] ? acpi_ut_create_update_state+0x72/0x130 [ 328.489269][T12633] acpi_ut_create_update_state+0x72/0x130 [ 328.489300][T12633] acpi_ut_create_update_state_and_push+0x2f/0x70 [ 328.489328][T12633] acpi_ut_update_object_reference+0x32f/0x800 [ 328.489357][T12633] ? __pfx_acpi_ut_update_object_reference+0x10/0x10 [ 328.489380][T12633] ? __pfx_acpi_ut_trace+0x10/0x10 [ 328.489409][T12633] ? __pfx_acpi_ut_trace+0x10/0x10 [ 328.489456][T12633] ? acpi_ut_status_exit+0x111/0x1c0 [ 328.489499][T12633] acpi_ut_add_reference+0x80/0x170 [ 328.489522][T12633] acpi_ex_resolve_node_to_value+0x7e1/0x9a0 [ 328.489549][T12633] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 328.489577][T12633] ? acpi_ds_create_operand+0x267/0xc20 [ 328.489610][T12633] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 328.489634][T12633] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 328.489656][T12633] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 328.489686][T12633] ? __asan_memset+0x23/0x50 [ 328.489712][T12633] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 328.489746][T12633] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 328.489776][T12633] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 328.489806][T12633] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 328.489834][T12633] ? acpi_ut_trace_ptr+0x141/0x2a0 [ 328.489868][T12633] acpi_ds_exec_end_op+0xb78/0x1e60 [ 328.489901][T12633] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 328.489928][T12633] acpi_ps_parse_loop+0x5e1/0x26e0 [ 328.489965][T12633] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 328.489991][T12633] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 328.490019][T12633] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 328.490050][T12633] ? acpi_ut_create_thread_state+0x6d/0x170 [ 328.490087][T12633] acpi_ps_parse_aml+0x81e/0x1120 [ 328.490155][T12633] acpi_ps_execute_method+0x5c4/0xe90 [ 328.490194][T12633] acpi_ns_evaluate+0x640/0x1670 [ 328.490223][T12633] acpi_ut_evaluate_object+0xf7/0x610 [ 328.490251][T12633] acpi_rs_get_prt_method_data+0xa0/0x150 [ 328.490273][T12633] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 328.490295][T12633] ? acpi_ut_status_exit+0x111/0x1c0 [ 328.490327][T12633] ? acpi_rs_validate_parameters+0x104/0x210 [ 328.490352][T12633] acpi_get_irq_routing_table+0xb8/0x140 [ 328.490375][T12633] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 328.490401][T12633] ? do_raw_spin_lock+0x128/0x260 [ 328.490444][T12633] acpi_pci_irq_find_prt_entry+0x179/0xdd0 [ 328.490471][T12633] ? do_raw_spin_lock+0x128/0x260 [ 328.490502][T12633] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 328.490528][T12633] ? mark_held_locks+0x40/0x70 [ 328.490560][T12633] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 328.490598][T12633] acpi_pci_irq_lookup+0x8e/0x6b0 [ 328.490622][T12633] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 328.490653][T12633] acpi_pci_irq_disable+0x1a8/0x360 [ 328.490675][T12633] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 328.490697][T12633] pcibios_disable_device+0x89/0xb0 [ 328.490726][T12633] do_pci_disable_device+0x9f/0x100 [ 328.490749][T12633] ? __pfx_do_pci_disable_device+0x10/0x10 [ 328.490773][T12633] ? pci_release_region.part.0+0x15b/0x2e0 [ 328.490802][T12633] pci_disable_device+0x130/0x270 [ 328.490824][T12633] virtio_pci_remove+0xcf/0x110 [ 328.490855][T12633] pci_device_remove+0xb2/0x1d0 [ 328.490883][T12633] ? __pfx_pci_device_remove+0x10/0x10 [ 328.490937][T12633] device_remove+0xcb/0x180 [ 328.490962][T12633] device_release_driver_internal+0x44e/0x620 [ 328.490994][T12633] pci_stop_bus_device+0x120/0x160 [ 328.491027][T12633] pci_stop_and_remove_bus_device+0x58/0xa0 [ 328.491050][T12633] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 328.491072][T12633] remove_store+0x123/0x140 [ 328.491096][T12633] ? __pfx_remove_store+0x10/0x10 [ 328.491117][T12633] ? find_held_lock+0x2b/0x80 [ 328.491140][T12633] ? sysfs_file_kobj+0xe4/0x290 [ 328.491166][T12633] ? sysfs_file_kobj+0xe4/0x290 [ 328.491194][T12633] ? __pfx_remove_store+0x10/0x10 [ 328.491216][T12633] dev_attr_store+0x58/0x80 [ 328.491242][T12633] ? __pfx_dev_attr_store+0x10/0x10 [ 328.491267][T12633] sysfs_kf_write+0xf2/0x150 [ 328.491295][T12633] kernfs_fop_write_iter+0x3e0/0x5f0 [ 328.491318][T12633] ? __pfx_sysfs_kf_write+0x10/0x10 [ 328.491347][T12633] vfs_write+0x6af/0x1050 [ 328.491374][T12633] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 328.491402][T12633] ? __pfx_vfs_write+0x10/0x10 [ 328.491426][T12633] ? find_held_lock+0x2b/0x80 [ 328.491469][T12633] ksys_write+0x12a/0x250 [ 328.491501][T12633] ? __pfx_ksys_write+0x10/0x10 [ 328.491536][T12633] __do_fast_syscall_32+0x13a/0x8b0 [ 328.491559][T12633] ? lockdep_hardirqs_on+0x7d/0x110 [ 328.491594][T12633] do_fast_syscall_32+0x32/0x70 [ 328.491618][T12633] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.491645][T12633] RIP: 0023:0xf7f78fec [ 328.491668][T12633] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 328.491678][T12633] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 328.491699][T12633] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000ac0 [ 328.491714][T12633] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.491726][T12633] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.491739][T12633] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 328.491753][T12633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.491784][T12633] [ 328.512218][T12633] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651) [ 328.680588][ T2544] hid-generic 684B:0002:0002.0005: unknown main item tag 0x0 [ 328.680607][ T2544] hid-generic 684B:0002:0002.0005: unknown main item tag 0x0 [ 328.680619][ T2544] hid-generic 684B:0002:0002.0005: unknown main item tag 0x0 [ 328.681840][ T2544] hid-generic 684B:0002:0002.0005: unknown main item tag 0x0 [ 328.681857][ T2544] hid-generic 684B:0002:0002.0005: unknown main item tag 0x0 [ 328.681869][ T2544] hid-generic 684B:0002:0002.0005: unknown main item tag 0x0 [ 328.681881][ T2544] hid-generic 684B:0002:0002.0005: unknown main item tag 0x0 [ 328.681893][ T2544] hid-generic 684B:0002:0002.0005: unknown main item tag 0x0 [ 328.681905][ T2544] hid-generic 684B:0002:0002.0005: unknown main item tag 0x0 [ 328.681918][ T2544] hid-generic 684B:0002:0002.0005: unknown main item tag 0x0 [ 328.693041][T12636] FAULT_INJECTION: forcing a failure. [ 328.693041][T12636] name failslab, interval 1, probability 0, space 0, times 0 [ 328.693061][T12636] CPU: 1 UID: 0 PID: 12636 Comm: syz.1.2077 Not tainted syzkaller #0 PREEMPT(full) [ 328.693075][T12636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 328.693082][T12636] Call Trace: [ 328.693087][T12636] [ 328.693091][T12636] dump_stack_lvl+0x100/0x190 [ 328.693111][T12636] should_fail_ex.cold+0x5/0xa [ 328.693126][T12636] should_failslab+0xc2/0x120 [ 328.693144][T12636] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 328.693161][T12636] ? __d_alloc+0x35/0xa50 [ 328.693195][T12636] __d_alloc+0x35/0xa50 [ 328.693215][T12636] d_alloc_pseudo+0x1c/0xc0 [ 328.693228][T12636] alloc_file_pseudo+0x118/0x290 [ 328.693240][T12636] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 328.693252][T12636] ? alloc_fd+0x471/0x7a0 [ 328.693271][T12636] sock_alloc_file+0x50/0x210 [ 328.693287][T12636] __sys_socket+0x1c0/0x260 [ 328.693305][T12636] ? __pfx___sys_socket+0x10/0x10 [ 328.693327][T12636] __ia32_compat_sys_socketcall+0x65b/0x770 [ 328.693347][T12636] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 328.693365][T12636] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 328.693381][T12636] ? xfd_validate_state+0x129/0x190 [ 328.693405][T12636] __do_fast_syscall_32+0x13a/0x8b0 [ 328.693420][T12636] do_fast_syscall_32+0x32/0x70 [ 328.693431][T12636] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.693446][T12636] RIP: 0023:0xf7fc7fec [ 328.693460][T12636] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 328.693465][T12636] RSP: 002b:00000000f54754a0 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 328.693477][T12636] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f54754b0 [ 328.693489][T12636] RDX: 00000000f744aff4 RSI: 0000000000000000 RDI: 00000000f744aff4 [ 328.693496][T12636] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.693502][T12636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.693509][T12636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.693530][T12636] [ 328.693851][ T2544] hid-generic 684B:0002:0002.0005: hidraw1: HID v0.08 Device [syz0] on syz1 [ 330.249261][ T43] audit: type=1326 audit(1792048780.253:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12658 comm="syz.1.2086" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc7fec code=0x0 [ 332.262835][T12668] raw_sendmsg: syz.2.2088 forgot to set AF_INET. Fix it! [ 332.358360][ T35] rxe_eth0 speed is unknown, defaulting to 1000 [ 332.377514][T12668] netlink: 'syz.2.2088': attribute type 16 has an invalid length. [ 332.377530][T12668] netlink: 'syz.2.2088': attribute type 17 has an invalid length. [ 332.454312][T12668] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 332.515933][T12677] input: syz0 as /devices/virtual/input/input18 [ 332.545754][ T5739] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 332.899350][ T35] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 332.935483][T12697] jffs2: notice: (12697) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 332.975520][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2093'. [ 332.992457][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2093'. [ 333.049263][ T35] usb 7-1: Using ep0 maxpacket: 16 [ 333.049762][ T35] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 333.051555][ T35] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 333.051571][ T35] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 333.051585][ T35] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 333.051596][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 333.055439][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.055453][ T35] usb 7-1: Product: syz [ 333.055461][ T35] usb 7-1: Manufacturer: syz [ 333.055468][ T35] usb 7-1: SerialNumber: syz [ 333.058260][ T35] usb 7-1: config 0 descriptor?? [ 333.116141][T12708] FAULT_INJECTION: forcing a failure. [ 333.116141][T12708] name failslab, interval 1, probability 0, space 0, times 0 [ 333.116163][T12708] CPU: 0 UID: 0 PID: 12708 Comm: syz.1.2095 Not tainted syzkaller #0 PREEMPT(full) [ 333.116177][T12708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 333.116185][T12708] Call Trace: [ 333.116189][T12708] [ 333.116195][T12708] dump_stack_lvl+0x100/0x190 [ 333.116214][T12708] should_fail_ex.cold+0x5/0xa [ 333.116229][T12708] should_failslab+0xc2/0x120 [ 333.116249][T12708] __kmalloc_cache_noprof+0x91/0x6d0 [ 333.116262][T12708] ? ref_tracker_alloc+0x307/0x590 [ 333.116278][T12708] ? inetdev_init+0x66/0x570 [ 333.116296][T12708] inetdev_init+0x66/0x570 [ 333.116313][T12708] inetdev_event+0x827/0x17f0 [ 333.116330][T12708] ? ib_netdevice_event+0xfc/0x330 [ 333.116344][T12708] ? __pfx_inetdev_event+0x10/0x10 [ 333.116365][T12708] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 333.116395][T12708] notifier_call_chain+0x99/0x3f0 [ 333.116424][T12708] call_netdevice_notifiers_info+0xbe/0x110 [ 333.116454][T12708] register_netdevice+0x1998/0x25a0 [ 333.116481][T12708] ? __pfx_register_netdevice+0x10/0x10 [ 333.116500][T12708] __tun_chr_ioctl+0x1ef4/0x4880 [ 333.116513][T12708] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 333.116529][T12708] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 333.116541][T12708] ? __fget_files+0x34/0x3d0 [ 333.116563][T12708] ? hook_file_ioctl_common+0x140/0x440 [ 333.116582][T12708] ? __fget_files+0x21f/0x3d0 [ 333.116600][T12708] ? __pfx_tun_chr_compat_ioctl+0x10/0x10 [ 333.116615][T12708] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 333.116631][T12708] __do_fast_syscall_32+0x13a/0x8b0 [ 333.116646][T12708] ? lockdep_hardirqs_on+0x7d/0x110 [ 333.116664][T12708] do_fast_syscall_32+0x32/0x70 [ 333.116676][T12708] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.116691][T12708] RIP: 0023:0xf7fc7fec [ 333.116705][T12708] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 333.116710][T12708] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 333.116721][T12708] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000400454ca [ 333.116729][T12708] RDX: 0000000080001c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.116736][T12708] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.116743][T12708] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 333.116749][T12708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.116764][T12708] [ 333.270292][ T35] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input19 [ 333.271240][ T5134] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 333.278293][ T5134] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 333.278839][ T5134] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 333.281156][ T5134] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 333.317424][T12721] netlink: 'syz.3.2096': attribute type 1 has an invalid length. [ 333.317442][T12721] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2096'. [ 333.317455][T12721] netlink: 'syz.3.2096': attribute type 2 has an invalid length. [ 333.317464][T12721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2096'. [ 333.352178][T12721] null_blk: my_zoned_dev: using native zone append [ 333.378190][T12721] null_blk: disk my_zoned_dev created [ 333.471236][T12686] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 333.520580][T12733] misc userio: Invalid payload size [ 333.520732][T12733] misc userio: No port type given on /dev/userio [ 333.520776][T12733] misc userio: The device must be registered before sending interrupts [ 333.520818][T12733] misc userio: The device must be registered before sending interrupts [ 333.582734][T12736] jffs2: notice: (12736) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 333.715104][T12735] syz.1.2099: vmalloc error: size 4096, failed to allocate pages, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 333.715170][T12735] CPU: 1 UID: 0 PID: 12735 Comm: syz.1.2099 Not tainted syzkaller #0 PREEMPT(full) [ 333.715194][T12735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 333.715207][T12735] Call Trace: [ 333.715214][T12735] [ 333.715223][T12735] dump_stack_lvl+0x100/0x190 [ 333.715253][T12735] warn_alloc.cold+0x9e/0xb2 [ 333.715274][T12735] ? __pfx_warn_alloc+0x10/0x10 [ 333.715295][T12735] ? policy_nodemask+0xed/0x4f0 [ 333.715328][T12735] ? alloc_pages_mpol+0x260/0x550 [ 333.715365][T12735] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 333.715400][T12735] ? __get_vm_area_node+0x22b/0x350 [ 333.715433][T12735] __vmalloc_node_range_noprof+0x111c/0x1420 [ 333.715474][T12735] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 333.715509][T12735] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 333.715543][T12735] ? rcu_is_watching+0x13/0xc0 [ 333.715562][T12735] ? trace_hrtimer_start+0x77/0x220 [ 333.715586][T12735] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 333.715609][T12735] __vmalloc_node_noprof+0xad/0xf0 [ 333.715635][T12735] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 333.715661][T12735] __vmalloc_noprof+0xa3/0x120 [ 333.715677][T12735] ? __pfx___vmalloc_noprof+0x10/0x10 [ 333.715691][T12735] ? rcu_is_watching+0x13/0xc0 [ 333.715712][T12735] ? rcu_is_watching+0x13/0xc0 [ 333.715731][T12735] ? apparmor_capable+0x1d7/0x4d0 [ 333.715757][T12735] bpf_prog_alloc_no_stats+0x58/0x690 [ 333.715783][T12735] ? security_capable+0x80/0x260 [ 333.715816][T12735] bpf_prog_alloc+0x3b/0x200 [ 333.715841][T12735] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 333.715873][T12735] bpf_prog_load+0x49e/0x2ab0 [ 333.715902][T12735] ? __lock_acquire+0x5c0/0x1f40 [ 333.715940][T12735] ? __pfx_bpf_prog_load+0x10/0x10 [ 333.715968][T12735] ? lock_acquire+0x1d1/0x380 [ 333.716017][T12735] __sys_bpf+0x1f46/0x4a30 [ 333.716047][T12735] ? __pfx___sys_bpf+0x10/0x10 [ 333.716068][T12735] ? find_held_lock+0x2b/0x80 [ 333.716090][T12735] ? futex_wake+0x4ea/0x5e0 [ 333.716136][T12735] ? rcu_is_watching+0x13/0xc0 [ 333.716159][T12735] ? trace_kmem_cache_alloc+0xdd/0x100 [ 333.716205][T12735] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 333.716232][T12735] ? xfd_validate_state+0x129/0x190 [ 333.716268][T12735] ? __ia32_sys_bpf+0xcc/0x170 [ 333.716290][T12735] __ia32_sys_bpf+0xcc/0x170 [ 333.716314][T12735] ? __do_fast_syscall_32+0xb3/0x8b0 [ 333.716338][T12735] __do_fast_syscall_32+0x13a/0x8b0 [ 333.716361][T12735] do_fast_syscall_32+0x32/0x70 [ 333.716382][T12735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.716408][T12735] RIP: 0023:0xf7fc7fec [ 333.716431][T12735] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 333.716441][T12735] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 333.716461][T12735] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000900 [ 333.716474][T12735] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.716486][T12735] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.716497][T12735] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 333.716509][T12735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.716534][T12735] [ 333.716708][T12735] Mem-Info: [ 333.716720][T12735] active_anon:2383 inactive_anon:11006 isolated_anon:0 [ 333.716720][T12735] active_file:6900 inactive_file:16030 isolated_file:0 [ 333.716720][T12735] unevictable:1000 dirty:248 writeback:0 [ 333.716720][T12735] slab_reclaimable:7830 slab_unreclaimable:67414 [ 333.716720][T12735] mapped:23589 shmem:8284 pagetables:1929 [ 333.716720][T12735] sec_pagetables:318 bounce:0 [ 333.716720][T12735] kernel_misc_reclaimable:0 [ 333.716720][T12735] free:38109 free_pcp:16482 free_cma:0 [ 333.716829][T12735] Node 0 active_anon:24kB inactive_anon:96kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1052kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9472kB pagetables:1844kB sec_pagetables:1140kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 333.716941][T12735] Node 1 active_anon:9508kB inactive_anon:43928kB active_file:27596kB inactive_file:64112kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:93304kB dirty:988kB writeback:0kB shmem:33136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6252kB pagetables:5872kB sec_pagetables:132kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 333.717055][T12735] Node 0 DMA free:2288kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:460kB local_pcp:100kB free_cma:0kB [ 333.717166][T12735] lowmem_reserve[]: 0 259 259 259 259 [ 333.717261][T12735] Node 0 DMA32 free:14596kB boost:0kB min:11704kB low:14628kB high:17552kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24kB inactive_anon:96kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:4kB zspages:0kB present:1032196kB managed:265356kB mlocked:0kB bounce:0kB free_pcp:8328kB local_pcp:3088kB free_cma:0kB [ 333.717374][T12735] lowmem_reserve[]: 0 0 0 0 0 [ 333.717402][T12735] Node 1 DMA32 free:135552kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:9508kB inactive_anon:43928kB active_file:27596kB inactive_file:64112kB unevictable:4000kB writepending:988kB zspages:4428kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:57108kB local_pcp:12904kB free_cma:0kB [ 333.717505][T12735] lowmem_reserve[]: 0 0 0 0 0 [ 333.717588][T12735] Node 0 DMA: 42*4kB (UE) 7*8kB (UE) 7*16kB (UE) 13*32kB (UE) 10*64kB (UE) 3*128kB (E) 0*256kB 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2288kB [ 333.717997][T12735] Node 0 DMA32: 201*4kB (UME) 170*8kB (UM) 51*16kB (UME) 27*32kB (UME) 34*64kB (UME) 17*128kB (UME) 7*256kB (M) 7*512kB (UME) 1*1024kB (U) 0*2048kB 0*4096kB = 14596kB [ 333.718756][T12735] Node 1 DMA32: 836*4kB (UME) 972*8kB (UME) 712*16kB (UME) 534*32kB (UME) 210*64kB (UME) 132*128kB (UME) 44*256kB (UME) 28*512kB (UME) 19*1024kB (UME) 10*2048kB (ME) 0*4096kB = 135472kB [ 333.721784][T12735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.721938][T12735] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 333.721955][T12735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.722108][T12735] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 333.722121][T12735] 32251 total pagecache pages [ 333.722127][T12735] 1039 pages in swap cache [ 333.722133][T12735] Free swap = 76172kB [ 333.722139][T12735] Total swap = 124996kB [ 333.722546][T12735] 524155 pages RAM [ 333.722556][T12735] 0 pages HighMem/MovableOnly [ 333.722563][T12735] 216924 pages reserved [ 333.722634][T12735] 0 pages cma reserved [ 334.532292][T12756] socket: no more sockets [ 335.450561][ T5744] usb 7-1: USB disconnect, device number 12 [ 336.095177][T12814] Invalid ELF header magic: != ELF [ 336.098337][T12817] overlay: Unknown parameter '/' [ 336.610835][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2105'. [ 337.005322][ T5736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.008760][ T5736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.014266][ T5736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.027038][ T5736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.027555][ T5736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.374235][T12890] CIFS: Attempting to mount //127.0.0.1/share [ 337.385787][T12890] CIFS: VFS: Error connecting to socket. Aborting operation. [ 337.385829][T12890] CIFS: VFS: cifs_mount failed w/return code = -111 [ 337.601243][T12870] rxe_eth0 speed is unknown, defaulting to 1000 [ 337.644683][T12904] netlink: 'syz.2.2113': attribute type 12 has an invalid length. [ 338.042296][T12919] misc userio: Invalid payload size [ 338.292497][ T5833] bridge_slave_1: left allmulticast mode [ 338.292523][ T5833] bridge_slave_1: left promiscuous mode [ 338.292745][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.296147][ T5833] bridge_slave_0: left allmulticast mode [ 338.296169][ T5833] bridge_slave_0: left promiscuous mode [ 338.296329][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.405713][ T5833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.407343][ T5833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.407989][ T5833] bond0 (unregistering): Released all slaves [ 338.418703][ T5833] bond1 (unregistering): (slave lo): Releasing backup interface [ 338.425009][ T5833] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 338.425167][ T5833] bond1 (unregistering): Released all slaves [ 338.430326][ T5833] bond2 (unregistering): Released all slaves [ 338.435457][ T5833] bond3 (unregistering): Released all slaves [ 338.468991][ T6547] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 338.506412][T12870] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.506549][T12870] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.506647][T12870] bridge_slave_0: entered allmulticast mode [ 338.508087][T12870] bridge_slave_0: entered promiscuous mode [ 338.520501][T12870] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.520575][T12870] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.520637][T12870] bridge_slave_1: entered allmulticast mode [ 338.521573][T12870] bridge_slave_1: entered promiscuous mode [ 338.539231][T12870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.541932][T12870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.562614][T12870] team0: Port device team_slave_0 added [ 338.564992][T12870] team0: Port device team_slave_1 added [ 338.597333][T12870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.597349][T12870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.597371][T12870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.598629][T12870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.598641][T12870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.598663][T12870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.623000][ T6547] usb 8-1: unable to get BOS descriptor or descriptor too short [ 338.623026][ T6547] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 338.623869][ T6547] usb 8-1: config 254 has an invalid interface number: 213 but max is 0 [ 338.623882][ T6547] usb 8-1: config 254 has no interface number 0 [ 338.623895][ T6547] usb 8-1: config 254 interface 213 has no altsetting 0 [ 338.625545][ T6547] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.625557][ T6547] usb 8-1: Product: syz [ 338.625565][ T6547] usb 8-1: Manufacturer: syz [ 338.625573][ T6547] usb 8-1: SerialNumber: syz [ 338.637782][T12870] hsr_slave_0: entered promiscuous mode [ 338.638504][T12870] hsr_slave_1: entered promiscuous mode [ 338.639143][T12870] debugfs: 'hsr0' already exists in 'hsr' [ 338.639156][T12870] Cannot create hsr debugfs directory [ 338.677548][T12946] socket: no more sockets [ 338.703970][T12950] CIFS: Attempting to mount //127.0.0.1/share [ 338.706778][T12950] CIFS: VFS: Error connecting to socket. Aborting operation. [ 338.706802][T12950] CIFS: VFS: cifs_mount failed w/return code = -111 [ 338.816714][T12870] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 338.832034][T12870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 338.832874][T12870] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 338.843749][T12870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 338.844216][T12870] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 338.846368][T12870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 338.847014][T12870] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 338.859620][T12870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 338.886960][T12870] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.887007][T12870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.887108][T12870] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.887152][T12870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.986492][T12870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.997033][T12202] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.997597][T12202] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.021260][T12870] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.033115][T12208] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.033198][T12208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.038716][T12208] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.038791][T12208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.079689][ T5736] Bluetooth: hci0: command tx timeout [ 339.126065][ T6547] usb_ehset_test 8-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 339.134055][ T6547] usb 8-1: USB disconnect, device number 54 [ 339.212242][ T5833] ovs-dp0: left promiscuous mode [ 339.462592][T12870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.776039][T12870] veth0_vlan: entered promiscuous mode [ 339.782590][T12870] veth1_vlan: entered promiscuous mode [ 339.807276][T12870] veth0_macvtap: entered promiscuous mode [ 339.810526][T12870] veth1_macvtap: entered promiscuous mode [ 339.817214][T12870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.819648][T12870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.089068][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.089360][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.089387][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.089411][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.107397][T12204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.107415][T12204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.183637][T12204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.183657][T12204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.720804][T13046] CIFS: Attempting to mount //127.0.0.1/share [ 340.798059][T13046] CIFS: VFS: cifs_mount failed w/return code = -112 [ 340.832691][T13052] CIFS: Attempting to mount //127.0.0.1/share [ 340.871027][T13056] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 340.907825][T13052] CIFS: VFS: cifs_mount failed w/return code = -112 [ 340.911708][T13056] md: could not open device unknown-block(1,0). [ 341.016436][T13066] FAULT_INJECTION: forcing a failure. [ 341.016436][T13066] name failslab, interval 1, probability 0, space 0, times 0 [ 341.016457][T13066] CPU: 3 UID: 0 PID: 13066 Comm: syz.3.2129 Not tainted syzkaller #0 PREEMPT(full) [ 341.016470][T13066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 341.016477][T13066] Call Trace: [ 341.016482][T13066] [ 341.016486][T13066] dump_stack_lvl+0x100/0x190 [ 341.016507][T13066] should_fail_ex.cold+0x5/0xa [ 341.016522][T13066] should_failslab+0xc2/0x120 [ 341.016540][T13066] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 341.016556][T13066] ? __alloc_skb+0x5b7/0x710 [ 341.016568][T13066] ? __alloc_skb+0x140/0x710 [ 341.016582][T13066] __alloc_skb+0x140/0x710 [ 341.016593][T13066] ? __alloc_skb+0x5b7/0x710 [ 341.016605][T13066] ? __pfx___alloc_skb+0x10/0x10 [ 341.016619][T13066] ? aa_sk_perm+0x389/0xab0 [ 341.016634][T13066] netlink_alloc_large_skb+0x69/0x150 [ 341.016649][T13066] netlink_sendmsg+0x680/0xda0 [ 341.016663][T13066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.016677][T13066] ? apparmor_socket_sendmsg+0x165/0x280 [ 341.016692][T13066] ____sys_sendmsg+0xa4d/0xbe0 [ 341.016708][T13066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.016721][T13066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.016743][T13066] ___sys_sendmsg+0x190/0x1e0 [ 341.016761][T13066] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.016784][T13066] ? find_held_lock+0x2b/0x80 [ 341.016806][T13066] __sys_sendmsg+0x160/0x210 [ 341.016820][T13066] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.016837][T13066] ? __pfx_ksys_write+0x10/0x10 [ 341.016854][T13066] __do_fast_syscall_32+0x13a/0x8b0 [ 341.016867][T13066] ? lockdep_hardirqs_on+0x7d/0x110 [ 341.016885][T13066] do_fast_syscall_32+0x32/0x70 [ 341.016897][T13066] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.016912][T13066] RIP: 0023:0xf7f88fec [ 341.016925][T13066] Code: Unable to access opcode bytes at 0xf7f88fc2. [ 341.016930][T13066] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 341.016942][T13066] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 341.016949][T13066] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.016956][T13066] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.016963][T13066] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 341.016969][T13066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.016983][T13066] [ 341.088369][T13069] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2131'. [ 341.088503][T13069] 0·: renamed from hsr0 (while UP) [ 341.114330][T13069] 0·: entered allmulticast mode [ 341.114349][T13069] hsr_slave_0: entered allmulticast mode [ 341.114362][T13069] hsr_slave_1: entered allmulticast mode [ 341.114716][T13069] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 341.158949][ T5736] Bluetooth: hci0: command tx timeout [ 341.309745][ T43] audit: type=1400 audit(1792048791.314:3616): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13070 comm="syz.1.2130" [ 341.611453][ T5833] hsr_slave_0: left promiscuous mode [ 341.626782][ T5833] hsr_slave_1: left promiscuous mode [ 341.627248][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.631804][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.646516][ T5833] batman_adv: batadv0: Removing interface: dummy0 [ 342.188824][ T5744] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 342.348865][ T5744] usb 10-1: Using ep0 maxpacket: 16 [ 342.349727][ T5744] usb 10-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 342.351777][ T5744] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.351803][ T5744] usb 10-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.351826][ T5744] usb 10-1: config 0 interface 0 has no altsetting 0 [ 342.351852][ T5744] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.370540][ T5744] usb 10-1: config 0 descriptor?? [ 342.801419][ T5744] input: HID 046d:c215 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:046D:C215.0006/input/input22 [ 342.823878][ T5833] team0 (unregistering): Port device team_slave_1 removed [ 342.840730][ T5833] team0 (unregistering): Port device team_slave_0 removed [ 342.908516][ T5744] logitech 0003:046D:C215.0006: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.5-1/input0 [ 342.975363][T13103] FAULT_INJECTION: forcing a failure. [ 342.975363][T13103] name failslab, interval 1, probability 0, space 0, times 0 [ 342.975392][T13103] CPU: 2 UID: 0 PID: 13103 Comm: syz.1.2135 Not tainted syzkaller #0 PREEMPT(full) [ 342.975407][T13103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 342.975415][T13103] Call Trace: [ 342.975420][T13103] [ 342.975425][T13103] dump_stack_lvl+0x100/0x190 [ 342.975446][T13103] should_fail_ex.cold+0x5/0xa [ 342.975462][T13103] should_failslab+0xc2/0x120 [ 342.975481][T13103] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 342.975499][T13103] ? __alloc_skb+0x140/0x710 [ 342.975515][T13103] __alloc_skb+0x140/0x710 [ 342.975527][T13103] ? __alloc_skb+0x5b7/0x710 [ 342.975540][T13103] ? __pfx___alloc_skb+0x10/0x10 [ 342.975553][T13103] ? if_nlmsg_size+0x4b/0xdc0 [ 342.975572][T13103] rtmsg_ifinfo_build_skb+0x81/0x260 [ 342.975591][T13103] rtmsg_ifinfo+0xa4/0x1b0 [ 342.975610][T13103] netif_state_change+0x17f/0x380 [ 342.975642][T13103] ? __pfx_netif_state_change+0x10/0x10 [ 342.975663][T13103] ? netif_change_flags+0x10d/0x160 [ 342.975679][T13103] do_setlink.isra.0+0x31ce/0x3e60 [ 342.975700][T13103] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 342.975717][T13103] ? __lock_acquire+0x5c0/0x1f40 [ 342.975739][T13103] ? do_raw_spin_lock+0x128/0x260 [ 342.975753][T13103] ? find_held_lock+0x2b/0x80 [ 342.975766][T13103] ? debug_mutex_remove_waiter+0xa0/0x320 [ 342.975780][T13103] ? debug_mutex_remove_waiter+0xa0/0x320 [ 342.975799][T13103] ? mark_held_locks+0x40/0x70 [ 342.975815][T13103] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 342.975832][T13103] ? __mutex_lock+0x829/0x1bd0 [ 342.975843][T13103] ? lockdep_hardirqs_on+0x7d/0x110 [ 342.975861][T13103] ? __mutex_lock+0x829/0x1bd0 [ 342.975871][T13103] ? __mutex_lock+0x26c/0x1bd0 [ 342.975882][T13103] ? rtnl_newlink+0xac3/0x2620 [ 342.975899][T13103] ? __pfx___mutex_lock+0x10/0x10 [ 342.975910][T13103] ? rcu_is_watching+0x13/0xc0 [ 342.975924][T13103] ? apparmor_capable+0x1d7/0x4d0 [ 342.975946][T13103] rtnl_newlink+0x1dc4/0x2620 [ 342.975967][T13103] ? __pfx_rtnl_newlink+0x10/0x10 [ 342.975983][T13103] ? rcu_is_watching+0x13/0xc0 [ 342.975996][T13103] ? kasan_quarantine_put+0x104/0x240 [ 342.976012][T13103] ? lockdep_hardirqs_on+0x7d/0x110 [ 342.976036][T13103] ? __lock_acquire+0x5c0/0x1f40 [ 342.976055][T13103] ? find_held_lock+0x2b/0x80 [ 342.976071][T13103] ? lock_acquire+0x1d1/0x380 [ 342.976087][T13103] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 342.976103][T13103] ? find_held_lock+0x2b/0x80 [ 342.976116][T13103] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 342.976130][T13103] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 342.976146][T13103] ? __pfx_rtnl_newlink+0x10/0x10 [ 342.976162][T13103] rtnetlink_rcv_msg+0x95e/0xe90 [ 342.976179][T13103] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.976199][T13103] ? ref_tracker_free+0x37e/0x6c0 [ 342.976216][T13103] netlink_rcv_skb+0x159/0x420 [ 342.976229][T13103] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.976245][T13103] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.976263][T13103] ? netlink_deliver_tap+0x1ae/0xcc0 [ 342.976285][T13103] netlink_unicast+0x585/0x850 [ 342.976299][T13103] ? __pfx_netlink_unicast+0x10/0x10 [ 342.976316][T13103] netlink_sendmsg+0x8b0/0xda0 [ 342.976331][T13103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.976345][T13103] ? apparmor_socket_sendmsg+0x165/0x280 [ 342.976359][T13103] ____sys_sendmsg+0xa4d/0xbe0 [ 342.976381][T13103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.976396][T13103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.976420][T13103] ___sys_sendmsg+0x190/0x1e0 [ 342.976440][T13103] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.976460][T13103] ? futex_wait+0x11e/0x370 [ 342.976483][T13103] ? find_held_lock+0x2b/0x80 [ 342.976507][T13103] __sys_sendmsg+0x160/0x210 [ 342.976521][T13103] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.976544][T13103] __do_fast_syscall_32+0x13a/0x8b0 [ 342.976559][T13103] do_fast_syscall_32+0x32/0x70 [ 342.976571][T13103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.976587][T13103] RIP: 0023:0xf7fc7fec [ 342.976603][T13103] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 342.976608][T13103] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 342.976620][T13103] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 342.976627][T13103] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.976635][T13103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.976642][T13103] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 342.976650][T13103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.976666][T13103] [ 342.990031][T13106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.990240][T13106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.045371][T13103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 343.142876][T13108] ovs-dp0: entered promiscuous mode [ 343.148527][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 343.248976][ T5736] Bluetooth: hci0: command tx timeout [ 343.350339][T13121] xt_CT: No such helper "pptp" [ 343.442645][ T5859] usb 10-1: USB disconnect, device number 2 [ 344.126212][T13152] warn_alloc: 4 callbacks suppressed [ 344.126227][T13152] syz.1.2142: vmalloc error: size 4096, failed to allocate pages, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 344.126264][T13152] CPU: 3 UID: 0 PID: 13152 Comm: syz.1.2142 Not tainted syzkaller #0 PREEMPT(full) [ 344.126279][T13152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 344.126287][T13152] Call Trace: [ 344.126292][T13152] [ 344.126297][T13152] dump_stack_lvl+0x100/0x190 [ 344.126316][T13152] warn_alloc.cold+0x9e/0xb2 [ 344.126330][T13152] ? __pfx_warn_alloc+0x10/0x10 [ 344.126343][T13152] ? policy_nodemask+0xed/0x4f0 [ 344.126363][T13152] ? alloc_pages_mpol+0x260/0x550 [ 344.126375][T13152] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 344.126395][T13152] ? __get_vm_area_node+0x22b/0x350 [ 344.126416][T13152] __vmalloc_node_range_noprof+0x111c/0x1420 [ 344.126440][T13152] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 344.126461][T13152] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 344.126485][T13152] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 344.126502][T13152] __vmalloc_node_noprof+0xad/0xf0 [ 344.126521][T13152] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 344.126540][T13152] __vmalloc_noprof+0xa3/0x120 [ 344.126550][T13152] ? __pfx___vmalloc_noprof+0x10/0x10 [ 344.126561][T13152] ? rcu_is_watching+0x13/0xc0 [ 344.126575][T13152] ? rcu_is_watching+0x13/0xc0 [ 344.126588][T13152] ? apparmor_capable+0x1d7/0x4d0 [ 344.126603][T13152] bpf_prog_alloc_no_stats+0x58/0x690 [ 344.126619][T13152] ? security_capable+0x80/0x260 [ 344.126639][T13152] bpf_prog_alloc+0x3b/0x200 [ 344.126655][T13152] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 344.126673][T13152] bpf_prog_load+0x49e/0x2ab0 [ 344.126691][T13152] ? __lock_acquire+0x5c0/0x1f40 [ 344.126711][T13152] ? __pfx_bpf_prog_load+0x10/0x10 [ 344.126728][T13152] ? lock_acquire+0x1d1/0x380 [ 344.126757][T13152] __sys_bpf+0x1f46/0x4a30 [ 344.126774][T13152] ? __pfx___sys_bpf+0x10/0x10 [ 344.126787][T13152] ? find_held_lock+0x2b/0x80 [ 344.126800][T13152] ? futex_wake+0x4ea/0x5e0 [ 344.126826][T13152] ? rcu_is_watching+0x13/0xc0 [ 344.126862][T13152] ? trace_kmem_cache_alloc+0xdd/0x100 [ 344.126894][T13152] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 344.126910][T13152] ? xfd_validate_state+0x129/0x190 [ 344.126931][T13152] ? __ia32_sys_bpf+0xcc/0x170 [ 344.126945][T13152] __ia32_sys_bpf+0xcc/0x170 [ 344.126959][T13152] ? __do_fast_syscall_32+0xb3/0x8b0 [ 344.126973][T13152] __do_fast_syscall_32+0x13a/0x8b0 [ 344.126987][T13152] do_fast_syscall_32+0x32/0x70 [ 344.126999][T13152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 344.127014][T13152] RIP: 0023:0xf7fc7fec [ 344.127027][T13152] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 344.127033][T13152] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 344.127044][T13152] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000900 [ 344.127051][T13152] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 344.127059][T13152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 344.127065][T13152] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 344.127072][T13152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 344.127087][T13152] [ 344.127091][T13152] Mem-Info: [ 344.127096][T13152] active_anon:2477 inactive_anon:5780 isolated_anon:0 [ 344.127096][T13152] active_file:4003 inactive_file:21067 isolated_file:0 [ 344.127096][T13152] unevictable:1000 dirty:412 writeback:0 [ 344.127096][T13152] slab_reclaimable:9469 slab_unreclaimable:63700 [ 344.127096][T13152] mapped:23636 shmem:3604 pagetables:1819 [ 344.127096][T13152] sec_pagetables:319 bounce:0 [ 344.127096][T13152] kernel_misc_reclaimable:0 [ 344.127096][T13152] free:39218 free_pcp:18677 free_cma:0 [ 344.127124][T13152] Node 0 active_anon:80kB inactive_anon:36kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1052kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9152kB pagetables:1700kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 344.127152][T13152] Node 1 active_anon:9828kB inactive_anon:23084kB active_file:16008kB inactive_file:84264kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:93492kB dirty:1644kB writeback:0kB shmem:14416kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6124kB pagetables:5576kB sec_pagetables:136kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 344.127181][T13152] Node 0 DMA free:1936kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:480kB local_pcp:176kB free_cma:0kB [ 344.127211][T13152] lowmem_reserve[]: 0 259 259 259 259 [ 344.127230][T13152] Node 0 DMA32 free:14208kB boost:0kB min:11704kB low:14628kB high:17552kB reserved_highatomic:0kB free_highatomic:0kB active_anon:80kB inactive_anon:36kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB zspages:16kB present:1032196kB managed:265356kB mlocked:0kB bounce:0kB free_pcp:10756kB local_pcp:2532kB free_cma:0kB [ 344.127261][T13152] lowmem_reserve[]: 0 0 0 0 0 [ 344.127279][T13152] Node 1 DMA32 free:140728kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:9828kB inactive_anon:23084kB active_file:16008kB inactive_file:84264kB unevictable:4000kB writepending:1644kB zspages:8020kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:63476kB local_pcp:14516kB free_cma:0kB [ 344.127309][T13152] lowmem_reserve[]: 0 0 0 0 0 [ 344.127327][T13152] Node 0 DMA: 4*4kB (UE) 2*8kB (UE) 1*16kB (E) 11*32kB (UE) 10*64kB (UE) 3*128kB (E) 0*256kB 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 1936kB [ 344.127400][T13152] Node 0 DMA32: 6*4kB (UE) 173*8kB (UE) 28*16kB (UE) 26*32kB (UME) 34*64kB (UME) 17*128kB (UME) 6*256kB (M) 9*512kB (UME) 1*1024kB (U) 0*2048kB 0*4096kB = 14208kB [ 344.127477][T13152] Node 1 DMA32: 1717*4kB (UME) 1206*8kB (UME) 536*16kB (UME) 459*32kB (UM) 350*64kB (UME) 198*128kB (UME) 67*256kB (UME) 42*512kB (UME) 2*1024kB (UM) 2*2048kB (UM) 2*4096kB (U) = 140516kB [ 344.127562][T13152] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.127571][T13152] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 344.127580][T13152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.127588][T13152] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 344.127597][T13152] 29831 total pagecache pages [ 344.127601][T13152] 1159 pages in swap cache [ 344.127605][T13152] Free swap = 56336kB [ 344.127609][T13152] Total swap = 124996kB [ 344.127614][T13152] 524155 pages RAM [ 344.127618][T13152] 0 pages HighMem/MovableOnly [ 344.127622][T13152] 216924 pages reserved [ 344.127626][T13152] 0 pages cma reserved [ 344.300943][T13117] ceph: No mds server is up or the cluster is laggy [ 344.909855][T13182] CIFS: Attempting to mount //127.0.0.1/share [ 344.969578][T13182] CIFS: VFS: cifs_mount failed w/return code = -112 [ 345.210851][T13193] socket: no more sockets [ 345.318710][ T5736] Bluetooth: hci0: command tx timeout [ 346.739125][ T856] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 346.890900][ T856] usb 8-1: unable to get BOS descriptor or descriptor too short [ 346.890937][ T856] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 346.891939][ T856] usb 8-1: config 254 has an invalid interface number: 213 but max is 0 [ 346.891957][ T856] usb 8-1: config 254 has no interface number 0 [ 346.891978][ T856] usb 8-1: config 254 interface 213 has no altsetting 0 [ 346.894041][ T856] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.894059][ T856] usb 8-1: Product: syz [ 346.894070][ T856] usb 8-1: Manufacturer: syz [ 346.894082][ T856] usb 8-1: SerialNumber: syz [ 347.125537][T13207] FAULT_INJECTION: forcing a failure. [ 347.125537][T13207] name failslab, interval 1, probability 0, space 0, times 0 [ 347.125566][T13207] CPU: 2 UID: 0 PID: 13207 Comm: syz.1.2148 Not tainted syzkaller #0 PREEMPT(full) [ 347.125589][T13207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 347.125600][T13207] Call Trace: [ 347.125607][T13207] [ 347.125614][T13207] dump_stack_lvl+0x100/0x190 [ 347.125644][T13207] should_fail_ex.cold+0x5/0xa [ 347.125670][T13207] should_failslab+0xc2/0x120 [ 347.125697][T13207] __kmalloc_noprof+0xfc/0x840 [ 347.125719][T13207] ? is_bpf_text_address+0x8a/0x1a0 [ 347.125746][T13207] ? bpf_test_init.isra.0+0x88/0x100 [ 347.125780][T13207] bpf_test_init.isra.0+0x88/0x100 [ 347.125808][T13207] bpf_prog_test_run_skb+0x48e/0x3530 [ 347.125828][T13207] ? lock_acquire+0x1d1/0x380 [ 347.125853][T13207] ? __fget_files+0x34/0x3d0 [ 347.125876][T13207] ? find_held_lock+0x2b/0x80 [ 347.125900][T13207] ? __fget_files+0x201/0x3d0 [ 347.125930][T13207] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 347.125954][T13207] ? fput+0x7c/0x100 [ 347.125982][T13207] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 347.125999][T13207] __sys_bpf+0x2265/0x4a30 [ 347.126026][T13207] ? __pfx___sys_bpf+0x10/0x10 [ 347.126044][T13207] ? lock_acquire+0x1d1/0x380 [ 347.126067][T13207] ? get_pid_task+0x2a/0x250 [ 347.126085][T13207] ? find_held_lock+0x2b/0x80 [ 347.126104][T13207] ? get_pid_task+0xfc/0x250 [ 347.126120][T13207] ? get_pid_task+0xfc/0x250 [ 347.126144][T13207] ? proc_fail_nth_write+0x9f/0x220 [ 347.126168][T13207] ? find_held_lock+0x2b/0x80 [ 347.126192][T13207] ? rcu_read_lock_any_held+0x6a/0x90 [ 347.126207][T13207] ? find_held_lock+0x2b/0x80 [ 347.126219][T13207] ? ksys_write+0x190/0x250 [ 347.126233][T13207] ? ksys_write+0x190/0x250 [ 347.126247][T13207] ? lock_acquire+0x1d1/0x380 [ 347.126273][T13207] ? fput+0x7c/0x100 [ 347.126290][T13207] ? __ia32_sys_bpf+0xcc/0x170 [ 347.126304][T13207] __ia32_sys_bpf+0xcc/0x170 [ 347.126318][T13207] ? __do_fast_syscall_32+0xb3/0x8b0 [ 347.126332][T13207] __do_fast_syscall_32+0x13a/0x8b0 [ 347.126343][T13207] ? lockdep_hardirqs_on+0x7d/0x110 [ 347.126361][T13207] do_fast_syscall_32+0x32/0x70 [ 347.126373][T13207] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.126399][T13207] RIP: 0023:0xf7fc7fec [ 347.126419][T13207] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 347.126429][T13207] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 347.126449][T13207] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000f40 [ 347.126461][T13207] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 347.126472][T13207] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.126482][T13207] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 347.126492][T13207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.126515][T13207] [ 347.238788][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 347.294658][ T856] usb_ehset_test 8-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 347.295984][ T856] usb 8-1: USB disconnect, device number 55 [ 347.458469][ T35] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 347.588509][ T35] usb 6-1: device descriptor read/64, error -71 [ 347.828469][ T35] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 347.968558][ T35] usb 6-1: device descriptor read/64, error -71 [ 348.090073][ T35] usb usb6-port1: attempt power cycle [ 348.448531][ T35] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 348.478860][ T35] usb 6-1: device descriptor read/8, error -71 [ 348.742743][ T35] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 348.761486][ T35] usb 6-1: device descriptor read/8, error -71 [ 348.881779][ T35] usb usb6-port1: unable to enumerate USB device [ 348.910076][T13225] CIFS: Attempting to mount //127.0.0.1/share [ 348.962539][T13225] CIFS: VFS: cifs_mount failed w/return code = -112 [ 349.095659][T13223] rxe_eth0 speed is unknown, defaulting to 1000 [ 349.418604][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 349.568422][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 349.572375][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 349.579175][ T9] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 349.579777][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.580021][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.581148][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 349.581307][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 349.581325][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.581919][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.619346][ T9] usbtmc 10-1:16.0: probe with driver usbtmc failed with error -22 [ 349.974601][ T9] usb 10-1: USB disconnect, device number 3 [ 350.237492][T13237] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 350.405229][T12208] Bluetooth: hci3: Frame reassembly failed (-84) [ 351.387183][T13252] Bluetooth: MGMT ver 1.23 [ 351.490953][T13258] CIFS: Attempting to mount //127.0.0.1/share [ 351.608553][ T5744] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 351.781426][ T5744] usb 10-1: unable to get BOS descriptor or descriptor too short [ 351.781467][ T5744] usb 10-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 351.783236][ T5744] usb 10-1: config 254 has an invalid interface number: 213 but max is 0 [ 351.783258][ T5744] usb 10-1: config 254 has no interface number 0 [ 351.783281][ T5744] usb 10-1: config 254 interface 213 has no altsetting 0 [ 351.785414][ T5744] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.785428][ T5744] usb 10-1: Product: syz [ 351.785435][ T5744] usb 10-1: Manufacturer: syz [ 351.785443][ T5744] usb 10-1: SerialNumber: syz [ 352.123401][ T5744] usb_ehset_test 10-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 352.124442][ T5744] usb 10-1: USB disconnect, device number 4 [ 352.320306][T13258] CIFS: VFS: Error connecting to socket. Aborting operation. [ 352.320348][T13258] CIFS: VFS: cifs_mount failed w/return code = -4 [ 352.417398][T13269] CIFS: Attempting to mount //127.0.0.1/share [ 352.439073][ T5098] Bluetooth: hci3: command 0x1003 tx timeout [ 352.447532][ T5736] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 352.758347][ T5744] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 352.908341][ T5744] usb 6-1: device descriptor read/64, error -71 [ 353.148173][ T5744] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 353.259308][T13269] CIFS: VFS: Error connecting to socket. Aborting operation. [ 353.260431][T13269] CIFS: VFS: cifs_mount failed w/return code = -4 [ 353.278577][ T5744] usb 6-1: device descriptor read/64, error -71 [ 353.392226][ T5744] usb usb6-port1: attempt power cycle [ 353.478405][ T5736] Bluetooth: hci0: command 0x1405 tx timeout [ 353.481231][ T5739] Bluetooth: hci0: Opcode 0x1405 failed: -110 [ 353.748288][ T5744] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 353.770754][ T5744] usb 6-1: device descriptor read/8, error -71 [ 353.778162][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 353.950112][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 353.950138][ T10] usb 7-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 353.951337][ T10] usb 7-1: config 254 has an invalid interface number: 213 but max is 0 [ 353.951352][ T10] usb 7-1: config 254 has no interface number 0 [ 353.951366][ T10] usb 7-1: config 254 interface 213 has no altsetting 0 [ 353.953199][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.953213][ T10] usb 7-1: Product: syz [ 353.953221][ T10] usb 7-1: Manufacturer: syz [ 353.953229][ T10] usb 7-1: SerialNumber: syz [ 354.027391][T13291] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 354.260880][ T5744] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 354.290867][ T5744] usb 6-1: device descriptor read/8, error -71 [ 354.398268][ T5744] usb usb6-port1: unable to enumerate USB device [ 355.445721][ T10] usb_ehset_test 7-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 355.449390][ T10] usb 7-1: USB disconnect, device number 13 [ 355.648405][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.979348][ T5744] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 356.049043][T13323] 0x000000000000-0x000000010000 : "" [ 356.054754][T13323] ftl_cs: FTL header not found. [ 356.055057][ T856] hid_parser_main: 210 callbacks suppressed [ 356.055077][ T856] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 356.076005][ T856] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 356.126296][T13331] syz.2.2183 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 356.145296][ T5744] usb 8-1: unable to get BOS descriptor or descriptor too short [ 356.145323][ T5744] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 356.146198][ T5744] usb 8-1: config 254 has an invalid interface number: 213 but max is 0 [ 356.146219][ T5744] usb 8-1: config 254 has no interface number 0 [ 356.146241][ T5744] usb 8-1: config 254 interface 213 has no altsetting 0 [ 356.148014][ T5744] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.148032][ T5744] usb 8-1: Product: syz [ 356.148044][ T5744] usb 8-1: Manufacturer: syz [ 356.148055][ T5744] usb 8-1: SerialNumber: syz [ 356.488081][ T5744] usb_ehset_test 8-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 356.490355][ T5744] usb 8-1: USB disconnect, device number 56 [ 356.717433][T13339] warn_alloc: 2 callbacks suppressed [ 356.717449][T13339] syz.5.2184: vmalloc error: size 4096, failed to allocate pages, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 356.717492][T13339] CPU: 0 UID: 0 PID: 13339 Comm: syz.5.2184 Not tainted syzkaller #0 PREEMPT(full) [ 356.717506][T13339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 356.717513][T13339] Call Trace: [ 356.717518][T13339] [ 356.717523][T13339] dump_stack_lvl+0x100/0x190 [ 356.717543][T13339] warn_alloc.cold+0x9e/0xb2 [ 356.717557][T13339] ? __pfx_warn_alloc+0x10/0x10 [ 356.717571][T13339] ? policy_nodemask+0xed/0x4f0 [ 356.717591][T13339] ? alloc_pages_mpol+0x260/0x550 [ 356.717603][T13339] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 356.717623][T13339] ? __get_vm_area_node+0x22b/0x350 [ 356.717644][T13339] __vmalloc_node_range_noprof+0x111c/0x1420 [ 356.717668][T13339] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 356.717689][T13339] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 356.717709][T13339] ? rcu_is_watching+0x13/0xc0 [ 356.717723][T13339] ? trace_hrtimer_start+0x77/0x220 [ 356.717739][T13339] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 356.717756][T13339] __vmalloc_node_noprof+0xad/0xf0 [ 356.717775][T13339] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 356.717793][T13339] __vmalloc_noprof+0xa3/0x120 [ 356.717804][T13339] ? __pfx___vmalloc_noprof+0x10/0x10 [ 356.717815][T13339] ? rcu_is_watching+0x13/0xc0 [ 356.717829][T13339] ? rcu_is_watching+0x13/0xc0 [ 356.717842][T13339] ? apparmor_capable+0x1d7/0x4d0 [ 356.717874][T13339] bpf_prog_alloc_no_stats+0x58/0x690 [ 356.717891][T13339] ? security_capable+0x80/0x260 [ 356.717910][T13339] bpf_prog_alloc+0x3b/0x200 [ 356.717926][T13339] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 356.717945][T13339] bpf_prog_load+0x49e/0x2ab0 [ 356.717963][T13339] ? __lock_acquire+0x5c0/0x1f40 [ 356.717983][T13339] ? __pfx_bpf_prog_load+0x10/0x10 [ 356.718000][T13339] ? lock_acquire+0x1d1/0x380 [ 356.718029][T13339] __sys_bpf+0x1f46/0x4a30 [ 356.718047][T13339] ? __pfx___sys_bpf+0x10/0x10 [ 356.718059][T13339] ? find_held_lock+0x2b/0x80 [ 356.718073][T13339] ? futex_wake+0x4ea/0x5e0 [ 356.718099][T13339] ? rcu_is_watching+0x13/0xc0 [ 356.718112][T13339] ? trace_kmem_cache_alloc+0xdd/0x100 [ 356.718140][T13339] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 356.718156][T13339] ? xfd_validate_state+0x129/0x190 [ 356.718177][T13339] ? __ia32_sys_bpf+0xcc/0x170 [ 356.718190][T13339] __ia32_sys_bpf+0xcc/0x170 [ 356.718204][T13339] ? __do_fast_syscall_32+0xb3/0x8b0 [ 356.718218][T13339] __do_fast_syscall_32+0x13a/0x8b0 [ 356.718232][T13339] do_fast_syscall_32+0x32/0x70 [ 356.718244][T13339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 356.718259][T13339] RIP: 0023:0xf746efec [ 356.718273][T13339] Code: Unable to access opcode bytes at 0xf746efc2. [ 356.718279][T13339] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 356.718291][T13339] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000900 [ 356.718298][T13339] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 356.718305][T13339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 356.718312][T13339] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 356.718319][T13339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 356.718334][T13339] [ 356.748541][T13339] Mem-Info: [ 356.748555][T13339] active_anon:2512 inactive_anon:3014 isolated_anon:0 [ 356.748555][T13339] active_file:5319 inactive_file:21649 isolated_file:0 [ 356.748555][T13339] unevictable:1000 dirty:359 writeback:0 [ 356.748555][T13339] slab_reclaimable:9935 slab_unreclaimable:65280 [ 356.748555][T13339] mapped:23372 shmem:1031 pagetables:1755 [ 356.748555][T13339] sec_pagetables:319 bounce:0 [ 356.748555][T13339] kernel_misc_reclaimable:0 [ 356.748555][T13339] free:36979 free_pcp:18642 free_cma:0 [ 356.748602][T13339] Node 0 active_anon:88kB inactive_anon:24kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1052kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9056kB pagetables:1700kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 356.748651][T13339] Node 1 active_anon:9960kB inactive_anon:12032kB active_file:21276kB inactive_file:86588kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:92436kB dirty:1432kB writeback:0kB shmem:4124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6320kB pagetables:5320kB sec_pagetables:136kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 356.748698][T13339] Node 0 DMA free:1936kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:492kB local_pcp:116kB free_cma:0kB [ 356.748752][T13339] lowmem_reserve[]: 0 259 259 259 259 [ 356.748786][T13339] Node 0 DMA32 free:14208kB boost:0kB min:11704kB low:14628kB high:17552kB reserved_highatomic:0kB free_highatomic:0kB active_anon:88kB inactive_anon:24kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:4kB zspages:16kB present:1032196kB managed:265356kB mlocked:0kB bounce:0kB free_pcp:11460kB local_pcp:2976kB free_cma:0kB [ 356.748838][T13339] lowmem_reserve[]: 0 0 0 0 0 [ 356.748868][T13339] Node 1 DMA32 free:131772kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:9960kB inactive_anon:12032kB active_file:21276kB inactive_file:86588kB unevictable:4000kB writepending:1432kB zspages:9332kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:62616kB local_pcp:21376kB free_cma:0kB [ 356.748930][T13339] lowmem_reserve[]: 0 0 0 0 0 [ 356.748961][T13339] Node 0 DMA: 4*4kB (UE) 2*8kB (UE) 1*16kB (E) 11*32kB (UE) 10*64kB (UE) 3*128kB (E) 0*256kB 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 1936kB [ 356.749088][T13339] Node 0 DMA32: 6*4kB (UE) 173*8kB (UE) 28*16kB (UE) 26*32kB (UME) 34*64kB (UME) 17*128kB (UME) 6*256kB (M) 9*512kB (UME) 1*1024kB (U) 0*2048kB 0*4096kB = 14208kB [ 356.749223][T13339] Node 1 DMA32: 320*4kB (UME) 371*8kB (UME) 185*16kB (UME) 203*32kB (UME) 311*64kB (UME) 138*128kB (UME) 104*256kB (UME) 51*512kB (UME) 17*1024kB (UME) 5*2048kB (M) 0*4096kB = 131656kB [ 356.749359][T13339] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.749375][T13339] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 356.749389][T13339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.749405][T13339] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 356.749419][T13339] 29125 total pagecache pages [ 356.749427][T13339] 1119 pages in swap cache [ 356.749434][T13339] Free swap = 46184kB [ 356.749442][T13339] Total swap = 124996kB [ 356.749449][T13339] 524155 pages RAM [ 356.749456][T13339] 0 pages HighMem/MovableOnly [ 356.749463][T13339] 216924 pages reserved [ 356.749470][T13339] 0 pages cma reserved [ 356.872453][T13339] socket: no more sockets [ 356.999946][T13341] rxe_eth0 speed is unknown, defaulting to 1000 [ 357.100876][ T5739] Bluetooth: hci1: unexpected subevent 0x37 length: 25 > 13 [ 357.141615][T13342] rxe_eth0 speed is unknown, defaulting to 1000 [ 358.767952][ T35] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 358.920162][ T35] usb 7-1: unable to get BOS descriptor or descriptor too short [ 358.920199][ T35] usb 7-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 358.921061][ T35] usb 7-1: config 254 has an invalid interface number: 213 but max is 0 [ 358.921079][ T35] usb 7-1: config 254 has no interface number 0 [ 358.921097][ T35] usb 7-1: config 254 interface 213 has no altsetting 0 [ 358.922801][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.922822][ T35] usb 7-1: Product: syz [ 358.922832][ T35] usb 7-1: Manufacturer: syz [ 358.922842][ T35] usb 7-1: SerialNumber: syz [ 359.244285][ T5739] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 359.308691][ T35] usb_ehset_test 7-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 359.316319][ T35] usb 7-1: USB disconnect, device number 14 [ 359.814063][T13387] CIFS: Attempting to mount //127.0.0.1/share [ 359.817876][T13387] CIFS: VFS: Error connecting to socket. Aborting operation. [ 359.817903][T13387] CIFS: VFS: cifs_mount failed w/return code = -111 [ 360.094319][T13396] FAULT_INJECTION: forcing a failure. [ 360.094319][T13396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.094349][T13396] CPU: 2 UID: 0 PID: 13396 Comm: syz.2.2201 Not tainted syzkaller #0 PREEMPT(full) [ 360.094369][T13396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 360.094379][T13396] Call Trace: [ 360.094385][T13396] [ 360.094390][T13396] dump_stack_lvl+0x100/0x190 [ 360.094410][T13396] should_fail_ex.cold+0x5/0xa [ 360.094425][T13396] strncpy_from_user+0x3b/0x2d0 [ 360.094439][T13396] do_getname+0x78/0x390 [ 360.094453][T13396] __do_compat_sys_newstat+0x8c/0x130 [ 360.094471][T13396] ? __pfx___do_compat_sys_newstat+0x10/0x10 [ 360.094497][T13396] ? ksys_write+0x1ac/0x250 [ 360.094511][T13396] ? __pfx_ksys_write+0x10/0x10 [ 360.094544][T13396] __do_fast_syscall_32+0x13a/0x8b0 [ 360.094563][T13396] ? lockdep_hardirqs_on+0x7d/0x110 [ 360.094590][T13396] do_fast_syscall_32+0x32/0x70 [ 360.094609][T13396] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 360.094630][T13396] RIP: 0023:0xf7f78fec [ 360.094649][T13396] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 360.094658][T13396] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 000000000000006a [ 360.094676][T13396] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 00000000800000c0 [ 360.094687][T13396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.094697][T13396] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 360.094707][T13396] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 360.094717][T13396] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 360.094740][T13396] [ 360.405626][T13416] EXT4-fs warning (device sda1): __ext4_ioctl:1563: Setting inode version is not supported with metadata_csum enabled. [ 360.907768][T13428] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 361.160237][T13436] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 362.991106][T13448] FAULT_INJECTION: forcing a failure. [ 362.991106][T13448] name failslab, interval 1, probability 0, space 0, times 0 [ 362.991126][T13448] CPU: 3 UID: 0 PID: 13448 Comm: syz.1.2213 Not tainted syzkaller #0 PREEMPT(full) [ 362.991139][T13448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 362.991146][T13448] Call Trace: [ 362.991150][T13448] [ 362.991155][T13448] dump_stack_lvl+0x100/0x190 [ 362.991174][T13448] should_fail_ex.cold+0x5/0xa [ 362.991189][T13448] should_failslab+0xc2/0x120 [ 362.991207][T13448] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 362.991224][T13448] ? register_lock_class+0x3f/0x7b0 [ 362.991255][T13448] ? __d_alloc+0x35/0xa50 [ 362.991275][T13448] __d_alloc+0x35/0xa50 [ 362.991291][T13448] ? __lock_acquire+0x5c0/0x1f40 [ 362.991309][T13448] d_alloc_parallel+0x105/0x14c0 [ 362.991323][T13448] ? lock_acquire+0x1d1/0x380 [ 362.991341][T13448] ? lock_acquire+0x1d1/0x380 [ 362.991357][T13448] ? lookup_slow+0x42/0x70 [ 362.991368][T13448] ? __pfx_d_alloc_parallel+0x10/0x10 [ 362.991382][T13448] ? __pfx___might_resched+0x10/0x10 [ 362.991398][T13448] ? find_held_lock+0x2b/0x80 [ 362.991413][T13448] ? down_read+0x13b/0x4c0 [ 362.991427][T13448] ? __pfx_down_read+0x10/0x10 [ 362.991440][T13448] __lookup_slow+0x98/0x320 [ 362.991453][T13448] lookup_slow+0x50/0x70 [ 362.991465][T13448] link_path_walk+0x1377/0x1cc0 [ 362.991490][T13448] path_lookupat+0x74/0xc40 [ 362.991506][T13448] filename_lookup+0x202/0x590 [ 362.991524][T13448] ? __pfx_filename_lookup+0x10/0x10 [ 362.991550][T13448] ? strncpy_from_user+0x19d/0x2d0 [ 362.991564][T13448] ? do_getname+0x191/0x390 [ 362.991577][T13448] path_listxattrat+0x128/0x370 [ 362.991594][T13448] ? __pfx_path_listxattrat+0x10/0x10 [ 362.991609][T13448] ? ksys_write+0x1ac/0x250 [ 362.991623][T13448] ? __pfx_ksys_write+0x10/0x10 [ 362.991640][T13448] __do_fast_syscall_32+0x13a/0x8b0 [ 362.991653][T13448] ? lockdep_hardirqs_on+0x7d/0x110 [ 362.991672][T13448] do_fast_syscall_32+0x32/0x70 [ 362.991684][T13448] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 362.991698][T13448] RIP: 0023:0xf7fc7fec [ 362.991711][T13448] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 362.991717][T13448] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 00000000000000e8 [ 362.991728][T13448] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 362.991736][T13448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 362.991743][T13448] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 362.991749][T13448] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 362.991756][T13448] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 362.991771][T13448] [ 363.127862][ T5859] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 363.238166][T13459] FAULT_INJECTION: forcing a failure. [ 363.238166][T13459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.238190][T13459] CPU: 2 UID: 0 PID: 13459 Comm: syz.1.2217 Not tainted syzkaller #0 PREEMPT(full) [ 363.238210][T13459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 363.238222][T13459] Call Trace: [ 363.238228][T13459] [ 363.238236][T13459] dump_stack_lvl+0x100/0x190 [ 363.238264][T13459] should_fail_ex.cold+0x5/0xa [ 363.238283][T13459] _copy_from_user+0x2e/0xd0 [ 363.238304][T13459] mtdchar_compat_ioctl+0x21d/0x440 [ 363.238332][T13459] ? find_held_lock+0x2b/0x80 [ 363.238352][T13459] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 363.238392][T13459] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 363.238419][T13459] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 363.238444][T13459] __do_fast_syscall_32+0x13a/0x8b0 [ 363.238461][T13459] ? lockdep_hardirqs_on+0x7d/0x110 [ 363.238486][T13459] do_fast_syscall_32+0x32/0x70 [ 363.238505][T13459] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.238526][T13459] RIP: 0023:0xf7fc7fec [ 363.238545][T13459] Code: Unable to access opcode bytes at 0xf7fc7fc2. [ 363.238553][T13459] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 363.238567][T13459] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000001269 [ 363.238577][T13459] RDX: 00000000800009c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 363.238588][T13459] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.238599][T13459] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 363.238610][T13459] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.238635][T13459] [ 363.313765][ T5859] usb 8-1: unable to get BOS descriptor or descriptor too short [ 363.313789][ T5859] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 363.314567][ T5859] usb 8-1: config 254 has an invalid interface number: 213 but max is 0 [ 363.314580][ T5859] usb 8-1: config 254 has no interface number 0 [ 363.314594][ T5859] usb 8-1: config 254 interface 213 has no altsetting 0 [ 363.316158][ T5859] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.316171][ T5859] usb 8-1: Product: syz [ 363.316179][ T5859] usb 8-1: Manufacturer: syz [ 363.316186][ T5859] usb 8-1: SerialNumber: syz [ 363.719523][T13464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.226043][ T5859] usb_ehset_test 8-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 364.228511][ T5859] usb 8-1: USB disconnect, device number 57 [ 364.375421][T13472] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2222'. [ 364.379537][T13472] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2222'. [ 364.394274][T13477] 0x000000000000-0x000000010000 : "" [ 364.405242][T13477] ftl_cs: FTL header not found. [ 364.412803][T13482] CIFS mount error: No usable UNC path provided in device string! [ 364.412803][T13482] [ 364.412995][T13482] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 364.464126][T13486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2226'. [ 364.521380][T13492] x_tables: duplicate underflow at hook 2 [ 364.526955][T13492] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2226'. [ 364.542987][T13491] 9p: Bad value for 'wfdno' [ 364.665023][T13494] socket: no more sockets [ 364.753324][T13506] Could not find key with description: [syz] [ 364.753339][T13506] process_request_key_err: No key [ 364.753348][T13506] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 364.753357][T13506] One or more global auth toks could not properly register; rc = [-2] [ 364.753384][T13506] Error validating options; rc = [-2] [ 364.852465][T13508] CIFS mount error: No usable UNC path provided in device string! [ 364.852465][T13508] [ 364.852485][T13508] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 364.935272][T13512] jffs2: notice: (13512) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 365.048375][T13522] syzkaller0: entered promiscuous mode [ 365.048398][T13522] syzkaller0: entered allmulticast mode [ 365.300677][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2238'. [ 365.330861][T13517] vlan3: entered allmulticast mode [ 365.330886][T13517] dummy0: entered allmulticast mode [ 365.727476][ T35] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 365.899755][ T35] usb 10-1: unable to get BOS descriptor or descriptor too short [ 365.899782][ T35] usb 10-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 365.900765][ T35] usb 10-1: config 254 has an invalid interface number: 213 but max is 0 [ 365.900780][ T35] usb 10-1: config 254 has no interface number 0 [ 365.900794][ T35] usb 10-1: config 254 interface 213 has no altsetting 0 [ 365.902681][ T35] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.902700][ T35] usb 10-1: Product: syz [ 365.902712][ T35] usb 10-1: Manufacturer: syz [ 365.902724][ T35] usb 10-1: SerialNumber: syz [ 366.225583][ T35] usb_ehset_test 10-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 366.231514][ T35] usb 10-1: USB disconnect, device number 5 [ 366.424319][T12198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.424334][T12198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.433662][T13545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.454361][T13547] synth uevent: /devices/pci0000:00/0000:00:02.0: unknown uevent action string [ 366.454439][T13547] e1000e 0000:00:02.0: uevent: failed to send synthetic uevent: -22 [ 366.454820][T13547] synth uevent: /devices/pci0000:00/0000:00:02.0: unknown uevent action string [ 366.454848][T13547] e1000e 0000:00:02.0: uevent: failed to send synthetic uevent: -22 [ 366.514301][T13549] synth uevent: /devices/pci0000:00/0000:00:02.0: unknown uevent action string [ 366.514336][T13549] e1000e 0000:00:02.0: uevent: failed to send synthetic uevent: -22 [ 366.834609][T13551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2247'. [ 366.978590][T13557] veth0_to_bond: entered allmulticast mode [ 367.297515][ T4398] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 367.447449][ T4398] usb 10-1: Using ep0 maxpacket: 8 [ 367.448128][ T4398] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 367.451057][ T4398] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 367.451081][ T4398] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 367.451093][ T4398] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 367.451105][ T4398] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 367.451117][ T4398] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.451136][ T4398] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.676724][ T4398] usb 10-1: usb_control_msg returned -32 [ 367.676765][ T4398] usbtmc 10-1:16.0: can't read capabilities [ 368.097331][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 368.270412][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 368.270453][ T9] usb 7-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 368.271568][ T9] usb 7-1: config 254 has an invalid interface number: 213 but max is 0 [ 368.271590][ T9] usb 7-1: config 254 has no interface number 0 [ 368.271613][ T9] usb 7-1: config 254 interface 213 has no altsetting 0 [ 368.273518][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.273538][ T9] usb 7-1: Product: syz [ 368.273550][ T9] usb 7-1: Manufacturer: syz [ 368.273562][ T9] usb 7-1: SerialNumber: syz [ 368.748823][ T9] usb_ehset_test 7-1:254.213: probe with driver usb_ehset_test failed with error -32 [ 368.749854][ T9] usb 7-1: USB disconnect, device number 15 [ 369.651547][T13595] bond1: entered promiscuous mode [ 369.651561][T13595] bond1: entered allmulticast mode [ 369.654412][T13597] dummy0 speed is unknown, defaulting to 1000 [ 369.654470][T13597] dummy0 speed is unknown, defaulting to 1000 [ 369.668466][T13597] dummy0 speed is unknown, defaulting to 1000 [ 369.669250][T13597] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 369.669280][T13597] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 369.669320][T13597] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 369.673591][T13597] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 369.693334][T13597] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 369.732792][T13597] dummy0 speed is unknown, defaulting to 1000 [ 369.733687][T13597] dummy0 speed is unknown, defaulting to 1000 [ 369.734946][T13597] dummy0 speed is unknown, defaulting to 1000 [ 369.736516][T13597] dummy0 speed is unknown, defaulting to 1000 [ 369.741043][T13595] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 369.741064][T13595] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 369.741087][T13595] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 369.745158][T13595] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 369.771515][T13597] smc: removing ib device rxe0 [ 369.855871][T13597] smbdirect: ib_dev[rxe0] removed [ 369.918880][T13601] warn_alloc: 3 callbacks suppressed [ 369.918895][T13601] syz.3.2262: vmalloc error: size 4096, failed to allocate pages, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 369.920155][T13601] CPU: 1 UID: 0 PID: 13601 Comm: syz.3.2262 Not tainted syzkaller #0 PREEMPT(full) [ 369.920170][T13601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 369.920178][T13601] Call Trace: [ 369.920182][T13601] [ 369.920187][T13601] dump_stack_lvl+0x100/0x190 [ 369.920207][T13601] warn_alloc.cold+0x9e/0xb2 [ 369.920221][T13601] ? __pfx_warn_alloc+0x10/0x10 [ 369.920235][T13601] ? policy_nodemask+0xed/0x4f0 [ 369.920256][T13601] ? alloc_pages_mpol+0x260/0x550 [ 369.920269][T13601] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 369.920291][T13601] ? __get_vm_area_node+0x22b/0x350 [ 369.920312][T13601] __vmalloc_node_range_noprof+0x111c/0x1420 [ 369.920337][T13601] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 369.920358][T13601] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 369.920378][T13601] ? rcu_is_watching+0x13/0xc0 [ 369.920397][T13601] ? trace_hrtimer_start+0x77/0x220 [ 369.920414][T13601] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 369.920432][T13601] __vmalloc_node_noprof+0xad/0xf0 [ 369.920450][T13601] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 369.920469][T13601] __vmalloc_noprof+0xa3/0x120 [ 369.920480][T13601] ? __pfx___vmalloc_noprof+0x10/0x10 [ 369.920492][T13601] ? rcu_is_watching+0x13/0xc0 [ 369.920506][T13601] ? rcu_is_watching+0x13/0xc0 [ 369.920519][T13601] ? apparmor_capable+0x1d7/0x4d0 [ 369.920534][T13601] bpf_prog_alloc_no_stats+0x58/0x690 [ 369.920550][T13601] ? security_capable+0x80/0x260 [ 369.920570][T13601] bpf_prog_alloc+0x3b/0x200 [ 369.920587][T13601] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 369.920605][T13601] bpf_prog_load+0x49e/0x2ab0 [ 369.920623][T13601] ? __lock_acquire+0x5c0/0x1f40 [ 369.920643][T13601] ? __pfx_bpf_prog_load+0x10/0x10 [ 369.920661][T13601] ? lock_acquire+0x1d1/0x380 [ 369.920689][T13601] __sys_bpf+0x1f46/0x4a30 [ 369.920707][T13601] ? __pfx___sys_bpf+0x10/0x10 [ 369.920719][T13601] ? find_held_lock+0x2b/0x80 [ 369.920733][T13601] ? futex_wake+0x4ea/0x5e0 [ 369.920763][T13601] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 369.920783][T13601] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 369.920810][T13601] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 369.920826][T13601] ? xfd_validate_state+0x129/0x190 [ 369.920848][T13601] ? __ia32_sys_bpf+0xcc/0x170 [ 369.920862][T13601] __ia32_sys_bpf+0xcc/0x170 [ 369.920877][T13601] ? __do_fast_syscall_32+0xb3/0x8b0 [ 369.920891][T13601] __do_fast_syscall_32+0x13a/0x8b0 [ 369.920905][T13601] do_fast_syscall_32+0x32/0x70 [ 369.920919][T13601] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 369.920934][T13601] RIP: 0023:0xf7f88fec [ 369.920948][T13601] Code: Unable to access opcode bytes at 0xf7f88fc2. [ 369.920954][T13601] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 369.920965][T13601] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000900 [ 369.920973][T13601] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 369.920980][T13601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 369.920987][T13601] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 369.920994][T13601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 369.921008][T13601] [ 369.921013][T13601] Mem-Info: [ 369.921018][T13601] active_anon:2537 inactive_anon:2749 isolated_anon:0 [ 369.921018][T13601] active_file:7455 inactive_file:16458 isolated_file:0 [ 369.921018][T13601] unevictable:1000 dirty:91 writeback:0 [ 369.921018][T13601] slab_reclaimable:9573 slab_unreclaimable:66488 [ 369.921018][T13601] mapped:23201 shmem:1009 pagetables:1722 [ 369.921018][T13601] sec_pagetables:324 bounce:0 [ 369.921018][T13601] kernel_misc_reclaimable:0 [ 369.921018][T13601] free:47225 free_pcp:11782 free_cma:0 [ 369.921046][T13601] Node 0 active_anon:88kB inactive_anon:24kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1052kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9056kB pagetables:1700kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 369.921075][T13601] Node 1 active_anon:10060kB inactive_anon:10972kB active_file:29820kB inactive_file:65824kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:91752kB dirty:360kB writeback:0kB shmem:4036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6044kB pagetables:5188kB sec_pagetables:156kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 369.921104][T13601] Node 0 DMA free:1932kB boost:0kB min:744kB low:928kB high:1112kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:120kB free_cma:0kB [ 369.921135][T13601] lowmem_reserve[]: 0 259 259 259 259 [ 369.921154][T13601] Node 0 DMA32 free:13808kB boost:0kB min:12868kB low:16084kB high:19300kB reserved_highatomic:0kB free_highatomic:0kB active_anon:88kB inactive_anon:24kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:4kB zspages:16kB present:1032196kB managed:265356kB mlocked:0kB bounce:0kB free_pcp:11852kB local_pcp:2580kB free_cma:0kB [ 369.923497][T13601] lowmem_reserve[]: 0 0 0 0 0 [ 369.923519][T13601] Node 1 DMA32 free:173160kB boost:0kB min:45992kB low:57488kB high:68984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:10060kB inactive_anon:10972kB active_file:29820kB inactive_file:65824kB unevictable:4000kB writepending:360kB zspages:9284kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:34756kB local_pcp:11364kB free_cma:0kB [ 369.923552][T13601] lowmem_reserve[]: 0 0 0 0 0 [ 369.923570][T13601] Node 0 DMA: 3*4kB (U) 2*8kB (UM) 1*16kB (M) 11*32kB (UM) 10*64kB (UM) 3*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1932kB [ 369.923643][T13601] Node 0 DMA32: 42*4kB (UME) 211*8kB (UME) 55*16kB (UME) 40*32kB (UME) 33*64kB (UME) 14*128kB (UME) 1*256kB (M) 9*512kB (UME) 1*1024kB (U) 0*2048kB 0*4096kB = 13808kB [ 369.923722][T13601] Node 1 DMA32: 914*4kB (UM) 812*8kB (UME) 236*16kB (UME) 180*32kB (UME) 311*64kB (UME) 162*128kB (UME) 99*256kB (UME) 59*512kB (UM) 24*1024kB (M) 12*2048kB (M) 2*4096kB (UM) = 173224kB [ 369.923811][T13601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.923821][T13601] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 369.923830][T13601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.923839][T13601] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 369.923848][T13601] 26053 total pagecache pages [ 369.923853][T13601] 1126 pages in swap cache [ 369.923857][T13601] Free swap = 45252kB [ 369.923861][T13601] Total swap = 124996kB [ 369.923866][T13601] 524155 pages RAM [ 369.923870][T13601] 0 pages HighMem/MovableOnly [ 369.923874][T13601] 216924 pages reserved [ 369.923878][T13601] 0 pages cma reserved [ 370.056083][ T4398] usb 10-1: USB disconnect, device number 6 [ 370.138706][T13606] CIFS mount error: No usable UNC path provided in device string! [ 370.138706][T13606] [ 370.138749][T13606] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 370.193827][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2265'. [ 370.193852][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2265'. [ 370.193869][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2265'. [ 370.231393][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2265'. [ 370.231545][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2265'. [ 370.231563][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2265'. [ 370.315291][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2265'. [ 370.315309][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2265'. [ 370.315318][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2265'. [ 370.646543][T13619] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 372.287141][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.360357][T13637] FAULT_INJECTION: forcing a failure. [ 372.360357][T13637] name failslab, interval 1, probability 0, space 0, times 0 [ 372.360385][T13637] CPU: 1 UID: 0 PID: 13637 Comm: syz.5.2272 Not tainted syzkaller #0 PREEMPT(full) [ 372.360400][T13637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 372.360407][T13637] Call Trace: [ 372.360412][T13637] [ 372.360417][T13637] dump_stack_lvl+0x100/0x190 [ 372.360436][T13637] should_fail_ex.cold+0x5/0xa [ 372.360452][T13637] should_failslab+0xc2/0x120 [ 372.360470][T13637] __kvmalloc_node_noprof+0x113/0x9b0 [ 372.360487][T13637] ? bucket_table_alloc.isra.0+0x88/0x460 [ 372.360507][T13637] bucket_table_alloc.isra.0+0x88/0x460 [ 372.360525][T13637] __rhashtable_init_noprof+0x43a/0x890 [ 372.360544][T13637] __rhltable_init_noprof+0x28/0x70 [ 372.360561][T13637] nf_tables_newtable+0xf70/0x1a90 [ 372.360596][T13637] ? __pfx_nf_tables_newtable+0x10/0x10 [ 372.360612][T13637] ? net_generic+0x25/0x2a0 [ 372.360629][T13637] ? __nla_parse+0x40/0x60 [ 372.360648][T13637] nfnetlink_rcv_batch+0x1410/0x2880 [ 372.360671][T13637] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 372.360687][T13637] ? find_held_lock+0x2b/0x80 [ 372.360702][T13637] ? __local_bh_enable_ip+0xa5/0x120 [ 372.360720][T13637] ? lockdep_hardirqs_on+0x7d/0x110 [ 372.360738][T13637] ? __dev_queue_xmit+0xa60/0x4a40 [ 372.360784][T13637] ? __nla_parse+0x40/0x60 [ 372.360816][T13637] nfnetlink_rcv+0x3bd/0x440 [ 372.360838][T13637] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 372.360866][T13637] netlink_unicast+0x585/0x850 [ 372.360880][T13637] ? __pfx_netlink_unicast+0x10/0x10 [ 372.360897][T13637] netlink_sendmsg+0x8b0/0xda0 [ 372.360911][T13637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.360925][T13637] ? apparmor_socket_sendmsg+0x165/0x280 [ 372.360940][T13637] ____sys_sendmsg+0xa4d/0xbe0 [ 372.360956][T13637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.360969][T13637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.360993][T13637] ___sys_sendmsg+0x190/0x1e0 [ 372.361011][T13637] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.361036][T13637] ? find_held_lock+0x2b/0x80 [ 372.361059][T13637] __sys_sendmsg+0x160/0x210 [ 372.361073][T13637] ? __pfx___sys_sendmsg+0x10/0x10 [ 372.361091][T13637] ? __pfx_ksys_write+0x10/0x10 [ 372.361109][T13637] __do_fast_syscall_32+0x13a/0x8b0 [ 372.361120][T13637] ? lockdep_hardirqs_on+0x7d/0x110 [ 372.361139][T13637] do_fast_syscall_32+0x32/0x70 [ 372.361151][T13637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 372.361166][T13637] RIP: 0023:0xf746efec [ 372.361180][T13637] Code: Unable to access opcode bytes at 0xf746efc2. [ 372.361185][T13637] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 372.361197][T13637] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 372.361204][T13637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 372.361211][T13637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 372.361217][T13637] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 372.361224][T13637] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 372.361239][T13637] [ 372.361343][T13637] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2272'. [ 372.782554][T13654] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 373.750278][T13664] random: crng reseeded on system resumption [ 373.857120][T13666] [ 373.858166][T13666] ====================================================== [ 373.860939][T13666] WARNING: possible circular locking dependency detected [ 373.863734][T13666] syzkaller #0 Not tainted [ 373.865801][T13666] ------------------------------------------------------ [ 373.868735][T13666] syz.3.2283/13666 is trying to acquire lock: [ 373.871208][T13666] ffff88806b2f7938 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4f8/0xd90 [ 373.875051][T13666] [ 373.875051][T13666] but task is already holding lock: [ 373.877933][T13666] ffff88802ad09480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 373.881546][T13666] [ 373.881546][T13666] which lock already depends on the new lock. [ 373.881546][T13666] [ 373.885618][T13666] [ 373.885618][T13666] the existing dependency chain (in reverse order) is: [ 373.889099][T13666] [ 373.889099][T13666] -> #2 (&of->mutex){+.+.}-{4:4}: [ 373.891989][T13666] lock_acquire+0x1d1/0x380 [ 373.894039][T13666] __mutex_lock+0x1a4/0x1bd0 [ 373.896101][T13666] kernfs_fop_write_iter+0x2c2/0x5f0 [ 373.898398][T13666] iter_file_splice_write+0x830/0x10b0 [ 373.900776][T13666] do_splice+0x109c/0x1fa0 [ 373.902735][T13666] __do_splice+0x33b/0x370 [ 373.904696][T13666] __ia32_sys_splice+0x189/0x250 [ 373.906862][T13666] __do_fast_syscall_32+0x13a/0x8b0 [ 373.909087][T13666] do_fast_syscall_32+0x32/0x70 [ 373.911239][T13666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 373.913908][T13666] [ 373.913908][T13666] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 373.916803][T13666] lock_acquire+0x1d1/0x380 [ 373.918791][T13666] __mutex_lock+0x1a4/0x1bd0 [ 373.920854][T13666] anon_pipe_prefill_and_lock+0x16c/0x580 [ 373.923343][T13666] anon_pipe_write+0x164/0x1b50 [ 373.925462][T13666] __kernel_write_iter+0x6bb/0x930 [ 373.927687][T13666] __kernel_write+0xf6/0x140 [ 373.929732][T13666] autofs_notify_daemon+0x50d/0xd90 [ 373.932031][T13666] autofs_wait+0x10fd/0x1b50 [ 373.934082][T13666] autofs_mount_wait+0x132/0x3b0 [ 373.936274][T13666] autofs_d_automount+0x490/0x950 [ 373.938531][T13666] __traverse_mounts+0x1b9/0x8a0 [ 373.940684][T13666] step_into_slowpath+0xcb4/0x1150 [ 373.942898][T13666] path_lookupat+0x58b/0xc40 [ 373.944951][T13666] filename_lookup+0x202/0x590 [ 373.947091][T13666] vfs_statx+0xff/0x3f0 [ 373.948958][T13666] __do_compat_sys_newlstat+0xaa/0x130 [ 373.951371][T13666] __do_fast_syscall_32+0x13a/0x8b0 [ 373.953628][T13666] do_fast_syscall_32+0x32/0x70 [ 373.955779][T13666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 373.958469][T13666] [ 373.958469][T13666] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 373.961506][T13666] check_prev_add+0xeb/0xe60 [ 373.963567][T13666] __lock_acquire+0x1528/0x1f40 [ 373.965694][T13666] lock_acquire+0x1d1/0x380 [ 373.967727][T13666] __mutex_lock+0x1a4/0x1bd0 [ 373.969778][T13666] autofs_notify_daemon+0x4f8/0xd90 [ 373.972047][T13666] autofs_wait+0x10fd/0x1b50 [ 373.974036][T13666] autofs_mount_wait+0x132/0x3b0 [ 373.976247][T13666] autofs_d_automount+0x490/0x950 [ 373.978472][T13666] __traverse_mounts+0x1b9/0x8a0 [ 373.980674][T13666] step_into_slowpath+0xcb4/0x1150 [ 373.982896][T13666] path_lookupat+0x58b/0xc40 [ 373.984951][T13666] filename_lookup+0x202/0x590 [ 373.987070][T13666] kern_path+0x37/0x50 [ 373.988948][T13666] lookup_bdev+0xd8/0x2a0 [ 373.990973][T13666] resume_store+0x1d6/0x460 [ 373.993017][T13666] kobj_attr_store+0x58/0x80 [ 373.995077][T13666] sysfs_kf_write+0xf2/0x150 [ 373.997105][T13666] kernfs_fop_write_iter+0x3e0/0x5f0 [ 373.999416][T13666] vfs_write+0x6af/0x1050 [ 374.001348][T13666] ksys_write+0x12a/0x250 [ 374.003313][T13666] __do_fast_syscall_32+0x13a/0x8b0 [ 374.005568][T13666] do_fast_syscall_32+0x32/0x70 [ 374.007704][T13666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 374.010470][T13666] [ 374.010470][T13666] other info that might help us debug this: [ 374.010470][T13666] [ 374.014486][T13666] Chain exists of: [ 374.014486][T13666] &sbi->pipe_mutex --> &pipe->mutex --> &of->mutex [ 374.014486][T13666] [ 374.019355][T13666] Possible unsafe locking scenario: [ 374.019355][T13666] [ 374.022248][T13666] CPU0 CPU1 [ 374.024354][T13666] ---- ---- [ 374.026472][T13666] lock(&of->mutex); [ 374.028069][T13666] lock(&pipe->mutex); [ 374.030680][T13666] lock(&of->mutex); [ 374.033263][T13666] lock(&sbi->pipe_mutex); [ 374.035058][T13666] [ 374.035058][T13666] *** DEADLOCK *** [ 374.035058][T13666] [ 374.038063][T13666] locks held by syz.3.2283/13666: 4, last CPU#3: [ 374.040532][T13666] #0: ffff888025ee9eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 374.044048][T13666] #1: ffff8880269a4460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 374.047587][T13666] #2: ffff88802ad09480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 374.051404][T13666] #3: ffff88801e7f2788 (kn->active#81){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 374.055292][T13666] [ 374.055292][T13666] stack backtrace: [ 374.057590][T13666] CPU: 3 UID: 0 PID: 13666 Comm: syz.3.2283 Not tainted syzkaller #0 PREEMPT(full) [ 374.061219][T13666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 374.065156][T13666] Call Trace: [ 374.066500][T13666] [ 374.067696][T13666] dump_stack_lvl+0x100/0x190 [ 374.069581][T13666] print_circular_bug.cold+0x178/0x1be [ 374.071771][T13666] check_noncircular+0x146/0x160 [ 374.073739][T13666] check_prev_add+0xeb/0xe60 [ 374.075603][T13666] __lock_acquire+0x1528/0x1f40 [ 374.077537][T13666] lock_acquire+0x1d1/0x380 [ 374.079377][T13666] ? autofs_notify_daemon+0x4f8/0xd90 [ 374.081527][T13666] ? __pfx___might_resched+0x10/0x10 [ 374.083615][T13666] __mutex_lock+0x1a4/0x1bd0 [ 374.085443][T13666] ? autofs_notify_daemon+0x4f8/0xd90 [ 374.087515][T13666] ? autofs_notify_daemon+0x4f8/0xd90 [ 374.089675][T13666] ? find_held_lock+0x2b/0x80 [ 374.091605][T13666] ? autofs_notify_daemon+0x4a0/0xd90 [ 374.093691][T13666] ? autofs_notify_daemon+0x4a0/0xd90 [ 374.095897][T13666] ? __pfx___mutex_lock+0x10/0x10 [ 374.097904][T13666] ? __mutex_unlock_slowpath+0x35d/0x930 [ 374.100136][T13666] ? from_kgid_munged+0xab/0x130 [ 374.102129][T13666] ? __pfx_from_kgid_munged+0x10/0x10 [ 374.104297][T13666] ? path_lookupat+0x58b/0xc40 [ 374.106219][T13666] ? autofs_notify_daemon+0x4f8/0xd90 [ 374.108373][T13666] autofs_notify_daemon+0x4f8/0xd90 [ 374.110495][T13666] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 374.112753][T13666] ? lockdep_init_map_type+0x5c/0x250 [ 374.114951][T13666] ? lockdep_init_map_type+0x5c/0x250 [ 374.117079][T13666] autofs_wait+0x10fd/0x1b50 [ 374.118968][T13666] ? __pfx_autofs_wait+0x10/0x10 [ 374.120988][T13666] ? find_held_lock+0x2b/0x80 [ 374.122877][T13666] ? path_has_submounts+0xcf/0x120 [ 374.124871][T13666] ? do_raw_spin_unlock+0x145/0x1e0 [ 374.126935][T13666] ? find_held_lock+0x2b/0x80 [ 374.128813][T13666] autofs_mount_wait+0x132/0x3b0 [ 374.130839][T13666] autofs_d_automount+0x490/0x950 [ 374.132863][T13666] __traverse_mounts+0x1b9/0x8a0 [ 374.134872][T13666] step_into_slowpath+0xcb4/0x1150 [ 374.136933][T13666] ? rcu_is_watching+0x13/0xc0 [ 374.138896][T13666] ? __pfx_step_into_slowpath+0x10/0x10 [ 374.141160][T13666] ? lookup_slow+0x5b/0x70 [ 374.142981][T13666] ? lookup_slow+0x5b/0x70 [ 374.144733][T13666] path_lookupat+0x58b/0xc40 [ 374.146614][T13666] filename_lookup+0x202/0x590 [ 374.148552][T13666] ? __pfx_filename_lookup+0x10/0x10 [ 374.150679][T13666] ? do_getname_kernel+0x5d/0x250 [ 374.152732][T13666] ? __asan_memcpy+0x3c/0x60 [ 374.154632][T13666] kern_path+0x37/0x50 [ 374.156298][T13666] lookup_bdev+0xd8/0x2a0 [ 374.158025][T13666] ? __pfx_lookup_bdev+0x10/0x10 [ 374.160057][T13666] ? __asan_memcpy+0x3c/0x60 [ 374.161918][T13666] resume_store+0x1d6/0x460 [ 374.163780][T13666] ? __pfx_resume_store+0x10/0x10 [ 374.165787][T13666] ? lock_acquire+0x1d1/0x380 [ 374.167702][T13666] ? sysfs_file_kobj+0x21/0x290 [ 374.169681][T13666] ? find_held_lock+0x2b/0x80 [ 374.171613][T13666] ? sysfs_file_kobj+0xe4/0x290 [ 374.173559][T13666] ? sysfs_file_kobj+0xe4/0x290 [ 374.175512][T13666] ? __pfx_resume_store+0x10/0x10 [ 374.177556][T13666] kobj_attr_store+0x58/0x80 [ 374.179484][T13666] ? __pfx_kobj_attr_store+0x10/0x10 [ 374.181603][T13666] sysfs_kf_write+0xf2/0x150 [ 374.183495][T13666] kernfs_fop_write_iter+0x3e0/0x5f0 [ 374.185623][T13666] ? __pfx_sysfs_kf_write+0x10/0x10 [ 374.187741][T13666] vfs_write+0x6af/0x1050 [ 374.189477][T13666] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 374.191837][T13666] ? __pfx_vfs_write+0x10/0x10 [ 374.193780][T13666] ? find_held_lock+0x2b/0x80 [ 374.195710][T13666] ksys_write+0x12a/0x250 [ 374.197466][T13666] ? __pfx_ksys_write+0x10/0x10 [ 374.199409][T13666] __do_fast_syscall_32+0x13a/0x8b0 [ 374.201497][T13666] do_fast_syscall_32+0x32/0x70 [ 374.203490][T13666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 374.205990][T13666] RIP: 0023:0xf7f88fec [ 374.207651][T13666] Code: Unable to access opcode bytes at 0xf7f88fc2. [ 374.210350][T13666] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 374.213621][T13666] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800002c0 [ 374.216770][T13666] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.219886][T13666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.223054][T13666] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 374.226239][T13666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.229415][T13666] [ 374.307417][ T43] audit: type=1326 audit(1792048824.316:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.5.2282" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf746efec code=0x0 [ 374.467474][T13666] PM: Image not found (code -6) [ 374.629224][ T4398] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 374.632699][T13657] PM: hibernation: Basic memory bitmaps freed [ 374.797601][ T4398] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 374.798462][ T4398] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 374.798486][ T4398] usb 10-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 374.798507][ T4398] usb 10-1: config 0 interface 0 has no altsetting 0 [ 374.800366][ T4398] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 374.800386][ T4398] usb 10-1: Product: syz [ 374.800398][ T4398] usb 10-1: Manufacturer: syz [ 374.800409][ T4398] usb 10-1: SerialNumber: syz [ 374.801349][ T4398] usb 10-1: config 0 descriptor?? [ 374.801881][T13671] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 374.803861][ T4398] usb 10-1: selecting invalid altsetting 0 [ 376.684457][ T9] usb 10-1: USB disconnect, device number 7 [ 378.037969][ T1434] ieee802154 phy0 wpan0: encryption failed: -22