last executing test programs: 6m50.234467865s ago: executing program 1 (id=2414): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r0, 0x40086806, 0x21) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xc002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xa000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 6m48.589145415s ago: executing program 1 (id=2415): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000000c0)=[0x3], &(0x7f0000000200)=[r3, r2, r2], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 6m48.586365405s ago: executing program 1 (id=2416): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200), 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000200)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 6m48.502333308s ago: executing program 1 (id=2417): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001802900010068617368000000001c000280080002400000000a080001400000000908000340000000d40900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(0xffffffffffffffff, 0x0) r3 = syz_usbip_server_init(0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20) write$usbip_server(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x1ffffffe) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000005c0)=0xd) sendmsg$nl_generic(r0, 0x0, 0x40000) 6m46.506569833s ago: executing program 1 (id=2422): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='./debug/failslab/times\x00', 0x2d01, 0x1) write(r1, &(0x7f0000000240)='100', 0x3) socket$unix(0x1, 0x5, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x0, 0x0) close(r0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) 6m46.407987943s ago: executing program 1 (id=2423): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf1}, 0x1c) syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) close(0x3) getuid() r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000001c0)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e1f, @empty}, 0x10) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000000c0)=0xfe, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$packet(0x11, 0x3, 0x300) 6m30.251429678s ago: executing program 32 (id=2423): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf1}, 0x1c) syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) close(0x3) getuid() r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000001c0)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e1f, @empty}, 0x10) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000000c0)=0xfe, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$packet(0x11, 0x3, 0x300) 4m47.354522698s ago: executing program 3 (id=2986): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @mcast2}, 0x1c, 0x0}}], 0x1, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r2 = openat$dir(0xffffff9c, &(0x7f0000000200)='./file0\x00', 0x80600, 0x82) symlinkat(&(0x7f0000000080)='.\x00', r2, &(0x7f0000000040)='./file0\x00') r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mknodat$null(r3, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = open(0x0, 0x143142, 0x80) ftruncate(r4, 0x2007ffb) openat(0xffffffffffffff9c, 0x0, 0x18fa82, 0x21) syz_open_dev$tty1(0xc, 0x4, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(r6, &(0x7f00000001c0)='X', 0x1, 0x40000, &(0x7f000005ffe4)={0xa, 0xfffc, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) shutdown(r6, 0x1) 4m46.928679095s ago: executing program 3 (id=2989): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x18) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="72e1ff00532d07b77d05df74973b9493b1803397239ed93b619fd6ffb6538928c7d17718b8f91b7d6f45f15c", @ANYRES16=r0, @ANYBLOB="20012bbd7000fbdbdf250c0000005800038006000400010000000800030000000000060007004e20000008000500e0000001080005000a0101000500080004000000060007004e2100001400020070696d3672656700000000000000000006000400ff03000008000400faffffff0800060001000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fsopen(0x0, 0x0) setns(0xc9, 0x0) r5 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82187201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x3, '\x00', 0x0, @fallback=0x37}, 0x94) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) creat(&(0x7f0000000000)='./bus\x00', 0x1) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) 4m45.922974242s ago: executing program 3 (id=2993): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x1000000, 0x0, &(0x7f0000000000)=0x6, 0x4ffffff) syz_usb_connect(0x1, 0x3d, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) write(r1, &(0x7f0000000180)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x5, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10008, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x14800010, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x58645d55f8cdb234) ioctl$TIOCGPTPEER(r5, 0x40480923, 0x0) 4m42.610202532s ago: executing program 3 (id=3009): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0xffff, 0x0, 0x51}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_LISTEN={0x39, 0x0, 0x0, r0, 0x0, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x2, 0x12) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r7, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r8, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r8, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r7, r6}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r10, &(0x7f0000000680)="000400", 0x3) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r12, &(0x7f0000000180)="f146237261fdf9e97d372e7392ddd7d768f9c7ddd1", 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) 4m42.5459472s ago: executing program 3 (id=3010): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x56, 0x9, 0x4, 0x10, @private1, @private0, 0x80, 0x20, 0x2, 0x80}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'gretap0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x2, 0x80, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x3ff, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@ssrr={0x89, 0x7, 0x30, [@broadcast]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x40015) fcntl$dupfd(r1, 0x406, r1) timerfd_create(0x8, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a8}}, 0x20}}, 0x800) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_setup(0x8, &(0x7f0000000600)) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x2, 0x3b9ac9bf, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}) write(r0, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) write(r8, &(0x7f00000001c0)="766863695f6863642e30003017d14db4d24453c0182cb3662ca6dfa409da0827417caf05ceda02620b8c77ecb60c32d1618b2fe6af9232bb76c6448bc79d92ebef0ebe74f687336c9745ab718018ed5943c686098a0b76b7353520e7b6535394aeeb914b935111e84bff2d4def3d9b07004e608380c7d3a338d563345ded06a0898a4a90cf155ca8459fa67634f07b52c758091bea3382d3f32b470fc89f3e03aade0d5195d8e2cd770f94dfc335eee32ccc82b6091cbd9c529a3e71f3794fb7419188c93af4eee7af8f087d5c1484a1", 0xd0) 4m41.936912841s ago: executing program 3 (id=3013): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd0714", 0x173, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 4m25.494734216s ago: executing program 33 (id=3013): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd0714", 0x173, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1m13.265874295s ago: executing program 4 (id=3871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x1) r7 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x484d, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x17, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0001}, {0x7, 0x9, 0x94, 0xff}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x88, &(0x7f0000000000)=""/136}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x12, r5, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x17f41f2157d8eae}, 0x20000000) r8 = fsopen(&(0x7f0000000000)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x8, 0x0, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f00000005c0)="be56c5b448", 0x5) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10}, 0x94) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000011000000c002b8008000100", @ANYRES32=r11, @ANYBLOB="08001b000000000082353f111401043c27f099cea3855e01b034ec0400b07a2b295d6ce81b57"], 0x34}}, 0x0) splice(r3, 0x0, r5, 0x0, 0xf8, 0x5) r13 = socket(0x6, 0x4, 0x400000) setsockopt$packet_tx_ring(r13, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) write$P9_RREADLINK(r4, &(0x7f00000001c0)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16) 1m10.73655135s ago: executing program 4 (id=3883): move_pages(0x0, 0x2, &(0x7f0000000500)=[&(0x7f0000000000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil], &(0x7f0000000040), 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x414, 0x0, 0x9403, 0x0, 0x240, 0x2c0, 0x34c, 0x3d8, 0x3d8, 0x34c, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x240, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@inet=@hashlimit2={{0x150}, {'syz_tun\x00', {0x100, 0xffffffff, 0x2, 0x56, 0x1000000, 0x1, 0x800, 0x40, 0x8}, {0xffff0001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x1}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x3, 0x40a, 0x6, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x470) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r3) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x13) tkill(r6, 0x12) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000540)={0xf97, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "8866b84e351c6d"}) syz_open_dev$sndctrl(&(0x7f0000002540), 0x7, 0x401) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x20, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0xfffffffffffffff7) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000fcffffff00000000f1ffffff18110000", @ANYRES32, @ANYBLOB="00000000000000000500000000000000850000008600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = eventfd(0x2a78) io_submit(r3, 0x2, &(0x7f0000002800)=[&(0x7f0000002680)={0x0, 0x0, 0x0, 0x2, 0xff, r1, &(0x7f0000002580)="188adaa4d2c369a6e142acc42ddc3e95a042fbb7887c69e425afe6237bbe7e1f175bd67ad8948d42eb5e3d076c9b76d862005aebe7944ede6b55476801dca1e308059ca3ee8d75fc2769508d730954c626e6b1a01ddba9073dfb70a174cc84cfa52f40aacce5b59964e27ce441e046f798384ac576e287949266beab0929a7e4bea603530d7cc3d586c3050f587334e4679471a6", 0x94, 0x2, 0x0, 0x2ef5d19b3e5b7647}, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x7, 0xb933, r10, &(0x7f00000026c0)="ab9bb76e9a03948b811fa9c5d7c11ea65f726ee52c3e56aa472da3f7ec0d8d45c9cba9f417ee6250391b861d1d271ee08fc762d6211f029bb87dd60236007faeca2c969c00d0e70c86ebaf0faf3f03cbf39079a3046b834c86f63b09d6fd8c6fe62b3c98065c8c15418fa97fc1d61f54f0fd463ff10937108ec0719a52b9b61b32fb55513a41f315abcaa5e6f823d506e65ce2b876aab8e9737c99efe8c7cf3d1861c07032ea77cb6ec44f079593ba0bfafd18f6589f8da51aecd763e6d7feac99da34d9527df9a314d97f40c5c693022cd906bf3da37aae43d9eeabf0f668b0ea", 0xe1, 0x27e8, 0x0, 0x1, r11}]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81e8943c, &(0x7f0000001640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000380)={{r12, 0x4, 0xc621, 0x6, 0x1000, 0xa, 0x7fffffffffffffff, 0x5, 0x80000001, 0x80, 0x97e2, 0x7fffffffffffffff, 0x4, 0xfffffffffffff825, 0x7}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001540)={r7, r12, "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", "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"}) timer_settime(r0, 0x0, &(0x7f00000000c0)={{r4, r5+60000000}, {0x0, 0x3938700}}, 0x0) 1m10.591241696s ago: executing program 4 (id=3884): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000002c0)=@ethtool_pauseparam={0x1d, 0x8008000, 0x7d, 0x8}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r1, &(0x7f0000000180)='nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='my_configfs/nullb/nullb1/power\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1', 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x100, 0x70bd2b, 0x6, {{}, {}, {0x14, 0x19, {0x200, 0x4, 0x2, 0xe}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4048000) 1m10.17338356s ago: executing program 4 (id=3888): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./rpc_pipefs\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000280)='./rpc_pipefs\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f0000000e80)=[{r0}], 0x2000000000000016, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='tcp 2', 0x5) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x1, 0x1) fchdir(r5) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r6, &(0x7f0000000300)=ANY=[@ANYRESDEC=r2]) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0xfffffffffffffd71, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x41}], 0x0, 0x0, 0x0}) sendto$phonet(r10, &(0x7f0000000540)="8ddc10a4ed0a55308c331e6330163c8b0ad5166dd9132e99d756b47dc41e1212b2501ed32d3ec204b5138964e96a3ff2b92554c9c1be873cf1add7685e0f42d281808139352f971393d726217be65eccb9748f51f09f929d275db082641634804054b82b083fd0c4fc74314664", 0x6d, 0x80000, &(0x7f00000005c0)={0x23, 0x1, 0xfe, 0x5}, 0x10) dup3(r10, r9, 0x80000) (async) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000500)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) (async) lseek(r7, 0x851, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000003f00de080600000000009500"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7ff}, 0x10}, 0x94) 1m9.374463618s ago: executing program 4 (id=3891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x1c, 0x6, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404a080}, 0x20040004) 53.030707459s ago: executing program 34 (id=3891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x1c, 0x6, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404a080}, 0x20040004) 6.027675617s ago: executing program 6 (id=4138): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000701fefffffffbffffff017c0000040042800c00018006000600800a000010461e90cd00038008000200", @ANYRES32=r0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$packet(0x11, 0x2, 0x300) open(&(0x7f0000000280)='./file0\x00', 0x408002, 0x81) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/110, 0x6e}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000080)=ANY=[@ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0xffffffffffffffff, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xfffffffd, 0x10000, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000002, 0x5], 0x80a0000, 0x80284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.710438808s ago: executing program 6 (id=4141): syz_open_dev$video4linux(&(0x7f0000000000), 0xe, 0x42000) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x9}}) 5.582069729s ago: executing program 6 (id=4142): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x600, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 5.532603816s ago: executing program 6 (id=4143): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0xdae, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r7, 0x32ce970513f32900) close(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000000240)=0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r8, &(0x7f00000000c0)='1\x00', 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002640)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) 4.438107716s ago: executing program 6 (id=4147): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r0, r0, 0x2f}, 0x20) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = io_uring_setup(0x1de5, &(0x7f0000000200)={0x0, 0xc530, 0x80, 0x3, 0x8}) r5 = io_uring_setup(0x99c, &(0x7f0000000140)={0x0, 0xbcb8, 0x80, 0xfffffffe, 0x8a, 0x0, r4}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r5, 0x19, &(0x7f00000001c0)={0x58}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r6 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) poll(&(0x7f0000000180)=[{r6, 0x3}], 0x1, 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r10, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) close_range(r2, 0xffffffffffffffff, 0x2000000000000) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r11, 0x6, 0x1a, 0x0, 0x0) 4.240122002s ago: executing program 2 (id=4148): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000640)=0x8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockname$packet(r2, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2) syz_open_dev$dri(&(0x7f0000000200), 0x7, 0x101000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x0, @remote, 0x4e24, 0x2, 'lc\x00', 0x20, 0x5, 0x53}, {@multicast1, 0x4e21, 0x2000, 0x4, 0x7fffffff, 0xb}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r6, 0x40087447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0xce}]}) close(r6) write(r5, &(0x7f00000001c0)='1\x00', 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc00c64b5, &(0x7f0000000280)={&(0x7f0000000240)}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 3.910976919s ago: executing program 5 (id=4149): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xfffff5d4}}, './file0\x00'}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0x4) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) read$FUSE(r3, &(0x7f0000004800)={0x2020}, 0x2020) 3.706166342s ago: executing program 2 (id=4150): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, r1, 0x1f) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) mq_open(&(0x7f0000000280)='^\xe6[,\'\x00', 0x1, 0x144, &(0x7f0000000300)={0x3, 0x4d17, 0x7ff, 0x7ff}) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x850d}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}}, 0x8000) 3.360212721s ago: executing program 2 (id=4151): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000240)={0x3, 0x0, &(0x7f00000000c0), 0x0}, 0x20) r4 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f00000001c0)={{r6, r5, 0x1, [0x0, 0xf7df]}, {r6, r7, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x2, 0x2, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, 0x1402, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SNDCTL_TMR_CONTINUE(r8, 0x5404) write$sequencer(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="810100"], 0x8) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20020, &(0x7f0000000500)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="1700"]) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r12, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r13, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0xc000) r14 = syz_open_dev$loop(&(0x7f00000001c0), 0x9, 0x280200) ioctl$LOOP_CONFIGURE(r14, 0x4c0a, &(0x7f0000000340)={0xffffffffffffffff, 0x1, {0x0, 0x0, 0x0, 0x88a7, 0x5, 0x0, 0x6, 0x17, 0x4, "e43a8f9f85558b6b5006a2a25caedd17738f52fa9e42b9868c1a5c9156896558f4a422ff0d3e4641c5c989884ea3d4f2cedf68bc418807748a5c01aeab858cbd", "b562ae0dba0b17dd611fa119bdf27f63be64ada4a058b02fc4194314523f5f9ca1bb71990610fe34a75fabbdeafd80f15756a8add7ef5483c50ecd9d05cb6c77", "7e9e05e7b39e98ff4d0c8c9dd50d9cdf68e33cd11f1b7bbc3c6642e3b9768d89", [0x0, 0x6]}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003002e4a2c2da7f567a73dc9aa8a1e6f000000000000000000000000000020000000102700000500000010"], 0x10c}}, 0x0) 3.229374674s ago: executing program 2 (id=4152): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x6c, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000}, 0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x3, @loopback={0x3ec}, 0xb578}}}, 0x84) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x8000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r0, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) 2.900307077s ago: executing program 5 (id=4153): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000640)=0x8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockname$packet(r2, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2) syz_open_dev$dri(&(0x7f0000000200), 0x7, 0x101000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x0, @remote, 0x4e24, 0x2, 'lc\x00', 0x20, 0x5, 0x53}, {@multicast1, 0x4e21, 0x2000, 0x4, 0x7fffffff, 0xb}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r6, 0x40087447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0xce}]}) close(r6) write(r5, &(0x7f00000001c0)='1\x00', 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc00c64b5, &(0x7f0000000280)={&(0x7f0000000240)}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2.341737731s ago: executing program 5 (id=4154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000700)='dummy_udc.0', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="2e0000000514010025bd7000fbdbdf250800010001000000080003"], 0x30}, 0x1, 0x0, 0x0, 0x17}, 0x48080) write(r1, &(0x7f0000000a00)='t', 0x1) listen(r0, 0x5) r3 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r4, 0x1, &(0x7f00000009c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x400, r0, 0x0, 0x0, 0x6, 0x0, 0x2, r3}]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xfffffdfd) io_pgetevents(r4, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000040)) io_submit(r4, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_getevents(r4, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) shutdown(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.294586288s ago: executing program 2 (id=4155): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0x80000000, 0xf}, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x1, 0x0, 0x0, @time={0xffff, 0xa5}, {0xff}, {0x2}, @control={0x80, 0x0, 0x7fff}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x0, 0x8}, {0x0, 0x2}, @control}, {0x0, 0x20, 0x0, 0x0, @tick=0x5, {}, {0x0, 0xbf}, @connect={{}, {0x0, 0x45}}}], 0x70) 2.19536898s ago: executing program 2 (id=4156): r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000001c0)) dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x2, 0x6, 0x3, 0x87, 0xffffffff, 0x2}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r5, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x1, &(0x7f0000000040)='$', 0x0, 0x0, 0x1, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x20, 0x0, 0xeb}) 1.717514136s ago: executing program 0 (id=4134): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF(r0, 0x402c582b, &(0x7f0000000140)={0xe47, 0x7, 0x2080060f, 0xffffbffe, 0x12, "1c52b4c2e70c0088c84f1f00"}) 1.642263699s ago: executing program 0 (id=4157): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x80, 0x800}]}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @loopback}], 0x20) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x1c851, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) ioctl(r2, 0x400, &(0x7f0000000180)="07004e335b1c032d3bc777327a4a545ffe13d89e61fb926631e2acff25fbd19f7642d23f9df147c456a1b4c87d47ba6fabae84ad2cdca4336b7708c90f17650c170539486eb14eb047059daecd8610fa63ac1c16ec36e344e940554c8a11fd74e9615289262fba56d518ac000000000000000000000000000045356f8d427db8d754e102db79cdd190e507e00020fa5e3a7c84eb698abb51a5016ec12d405fe38aec1fb88baa7c8e11f43a34f0007f11d776986cc21440896721f737738363d090226bcd5d2e1c1ba740b2fbc2f17081087015c24737a06c2f077937d95b8e40ca3d8c5c10151ae9021dc26098c8deceeb") 1.640949675s ago: executing program 0 (id=4158): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x5, 0x379}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x1035, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0x3}}) syz_ublk_setup_io_uring(0x46bc, &(0x7f0000000340)={0x0, 0x10f8, 0x4, 0x40002, 0x1e4}, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x6d, "383ab22104b67a5a3404f239c2f27346c2c91cb04271f082bf0df460b8e5260408e06349d63c32671da72bd34e0325e2cadabf5a94601445380930e10deb07ab9faa31ddef4083e5b308b2956392b55c2abac3ebad7b85718f80f16ad11f46e0d170a9cac8fe8d7508743eb1a2"}, &(0x7f0000000180)=0x75) 1.497740306s ago: executing program 0 (id=4159): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x40000, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002340)="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", 0x342, &(0x7f0000004f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.426007521s ago: executing program 0 (id=4160): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xfffff5d4}}, './file0\x00'}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0x4) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) read$FUSE(r3, &(0x7f0000004800)={0x2020}, 0x2020) 1.303269429s ago: executing program 5 (id=4161): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x850003d1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, 0x0, 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) syslog(0x3, &(0x7f0000000000)=""/112, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff0000", @ANYRES32], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 857.306086ms ago: executing program 0 (id=4162): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) close(0x3) creat(&(0x7f0000000000)='file0\x00', 0x1ff) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='my_configfs/usb_gadget/g1\x00', 0x25) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0xa, @empty, 0x7, 0x3}, 0x20) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) mount(&(0x7f0000000040)=@sg0, &(0x7f0000001080)='./file0\x00', 0x0, 0x81001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) write(r1, &(0x7f0000000f00)='fFle0', 0x5) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000982ed65d5c149c38af00"/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 588.404797ms ago: executing program 6 (id=4163): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x149000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) getpid() r3 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, &(0x7f0000003cc0)=@ublk_io_need_get_data_sqe={0x2e, 0x5c, 0x0, r2, 0xc0107522, 0x0, 0x0, 0x0, 0x1, {0x101}, 0x0, r7, '\x00', {0x3, 0xe30, 0x3, &(0x7f0000002cc0)=@buf_4k="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"}}) syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r10, 0x2) shutdown(r10, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000c80)={0x2020}, 0x2020) writev(r9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 1.527704ms ago: executing program 5 (id=4164): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xffc}, 0x2d, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)="5245ec3c5066b8070d00c1bb6fff9014e4f0ce4aafba063fce55a11ffeb0fd3acb611ffd2c8830d7fb835a86d09c75ef7f3c0d4c15d4f8ff846998a001d901a53be1f1655e096d9d1ee2ce57c0", 0x4d, 0xfffffffffffffffe) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0001}, {0x5, 0x24, 0x3, 0x2}]}) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000003540)=@vmx={0x9, 0x0, 0x2080, {0xa000, 0xc000, {}, 0x1, 0x9}, {"d07ee511f368b2a747251cf1a94a5870db8535a3258ed7ba4130c84d13bc1903e6882414875944b82f10a32adad59953b7a890eff248264533942a68add3cd784a01567c6b0d9560e938d5a95542f7c44ffc40a36a3fb7f4578b61af429294817929705e32b6b48f388e93ca051ed017c49a75ba08d2220e3c4a16845c32fbd0f1f02e1fa8845a8982a3ac2a241adabdb23500b7be45c2995db01232accacc0c6a6f39b3cbd4b8009b7608dadf3ae9bd27b6be4aaec5c2666b8d08df62b6b7187cc43faeeed57a95407a81d8677b2f4b7dfd403adeaaa978afe637d027bcdc81ef81ee9345c362621d8eaefff4dac96def624351935f2ac6d573abae93a2ed5e1120a4e28a6f6a29fe2f8ee17582b17b682e66e576a5e42391d6b991f31795a7f3fb1a49a956d3d11d7b3ef39239065a548704677d9bc89f619fcd96d88b7a8674ae9d23da53c9c4a258fdc2d937213bd5b5e43f5550a0a4f4f5df6a428694a2b83b0cd2aeb1eb7dbae38c86f27292eae23e79a33a5264657ccf35ccd4507b8f0d879db556faf8278371ab25ac2c35d7d77fbe00dfdffeb722a90a2a6e78b56fa092bca0eb8a57e9784bedb38403903eaa0948c0611d30f8e2823daf14abd13207cc18f420d8ed21a29c53ee3c821ebefdddec8dd7e80bad1cca1acd2dfce368b6d3d87830517f5c06959ed3d9402664cf167998b3cf784c4787733f5d644e79b670952fb33b6be1f84ce73bd863b87d506dbd517dc247b1d54b6325bdf0f8cc026bb2c7aa64541e8e37c98cb17d5a7bbfe731994f780bcd91f5a7327d849bc718d3b669bde81bce23c0b516684b771dc961273a7e32917231a2b15a0554b3bc631efad8a807f8e8c910e788b59af76f28eddf3261856c2cad8330a0420b757872075201fd7e0a94761ffa10a26da432389e778ffd7d402cbcaed958f979a57fd82efc290d7540e7eff753606c663c046be13526e0a37faf74d9fb2f4518840a671b687a7616ad6987764d43cde4c295cc7c8720c642e72a6cb821b020385310af2cfc941131718d50c9f53ee807ba969db68a97bef3ebdc0c18c74b9ea64d91d408ca446d6ccf14c24f6153794721752f74ba44f575a1d66f002c49f18f7b35428f1bac27f758872c5624caa0ed3b76ca43a5907153dc0305c608f1498eff49fcae7b775cb1db295b40f59c0d47f18a2a5b2449c8e7aff042cf6e38b956a9893d6e43b1a9e95c90a1c08326ddb6cf1beac903717d8c2b89be82a2db9f4a42eb6b43368988345689a7ec76c2da4865caff776ed09cc51e6c3343b6d39b1cf318e0d5c251e3c741e384b971b3901ab57b35bd6d517aae1935ddce6296e60109f43f78b3e3d8cc203992015feda1d8036748e1bfa2ccdb7c2939bc4221944974d01d6a31dd1bbf6a6b9b17decedd550f2a8f6d2cdc7410e893375bf363b69d765a285a57762216dd6428f9cc4b4e2fe4f89b1cc92c629e64b29700fe75fe4a7929424769db1de2974473c2ef68cb104e79132e1cf29432a57552472451c78455f14aa3bcd6e2f0afe298a399e23270f3ce6075472e46d5fd22b0cf7f53005bc0a8fbc08bd88533c9a73d290b469b71d4f9f6fbc0c174f19b31dc05e54117d583d2879d90add5d2abbac1880f5459f9c501d39cdc85019401e87f4f1ff44675107e9db6e02bb8b894422cd95a1e1e133abd7a070f4184753973853613760743d618992f9515597297e345c5571731de7031e21faa156944f9cebcc2a2a2f81750766e9be2bc21d66ff24933cde48e387bac6e94f92f5a5beb261a7570d74782d5e7588c963a52b5f8d88b8abb60c9f3a1e23c5d803819a1c5523d23291164d33a4c1303963f420f07eb28e444cc5ac1e046a5c9682f1d050d03fc94720fa11f21fda510c32e2406c0f63e47860d59811af2a8d53b7acacecdbcfb60ee38897f02c7d72abab49a16e9c0711122f89a22d1f01db605804d270938a86973fdd517a7178912a8e7b9cc78c88700cf862e524c4d152d2d0201b1d5b080c97a58e25843c1b04e143937dcbd5d2875eb2c3b38003bd9c200a81367a9d6129a06db33085df12dd65ec1e19ca013a284fc5666e8a0f66173c9dc7519a83349c0cea1ba33847ceb5ee150eddc6c7e823f43a336ff06690182515c8230e6ddf69c3e70e08c2900f1fdfe0ba4c6dd10e96cead6a7ed21a261d2e8e15bf041590439db57539d10cae9683a822dd2a6631abe3941a86b05d815ce91fdb0d7a783ef8870a81bda624f65b049b16ad2ec373e0d9af75132ab3cabd0dc424c004b5e90a732f6b6c7ac3c676e779de4a0561c52ffc880c170872143144b133886912263e56b7dfb97d23f0e2491ba46a5053c1a5e42cb0fac52970a834496f1d10310f3b0946e531aacacc9d526a337f77c5a0e35fe6d2ca8c9eb87fce0fcfb659a86dbdc0fe6ff1de1ae8549c29274ec7e2daac612e2e0194974c6b0a9e65e724a76e54d3ebede753cf9f027759c79529eaac74ba94ef0da27cbf2fbdc7f06cd08243716826f7c901e257c3b40cb6392726a523010c4a7f4023043c715973a39db3683804f309bfe045280d204ca000505aa9efe079819f63f08e23adea81e0f8fc73a8ab1827476509410917b0091aa0702dedaae8b1e8bb1aad23b97a23d010c3fec37e625820d9375304cb318a0cd3865ff56f96f19dfd9110fa1ba8ba17bdf992c5aebf165053ce2e2245af1dda0b6af2770e968116ea6735e2f2136ca09d42a43da54801395a5e7134ed6d4f50f4ccddec16d8fce4252352bcb9dfdcef2ab1770f8f6707f4ea1630d58edfdb200e5e8ade514b750721ab7c52c614ba51cd437fa238e9ae3b09f78c712febe138c754b27bafdbe8859ce1e5133e825ea8d8bd68684a8d2c4db066203f336b54207761b8ce0ed940a8ea494ed18b46c891c4b9c4b580c44cc04e53007a289f734db4d7dbb80d7b5183cf466c549af7ae3a9394e6b6c9fc2cb9e732a66c38acc858a8e12077d2de8827adf521661edfd317887fd9f1d4b8f17478ca2a7d1463c681a12f6abd70d8d12a3aff448182e0e08e1263d9edbad4d0c29aac3794a24e85d47defa58659b945d6add52b074660bc88423a5379819044274be0c23a7e08c08b7411337ddd2a6b3bed2647cf467c2edb78add7410b723577b7eb9a3a368829d250ffd173978b7e0066fe577586c2584442349cd1962104e22b128db56e7a7f1ab59ee963cee9e463647aafb0ba9ef90169c69fcbb2851d8340597f478d7201c67e8990b85f1d47a8dc78d5fe4ef321bdd8d52f79bc7ecb2ec3c29ddb0ab2859074af6635e3bec5e1679ace0b088e76a7f5232cbf93eb52b5435e58d3ae528cc8253009914bb8f9cf26966264243909a8dafc62989eda979a0a05b8e562d518fa3e2d92eafe1f2831a77d06abd69817644519576fb07a88c17f52fc74de32f140d8cc53ba673c7434c328cfd58f343f8ed0f19840ae80f0aaefeede42b74b4b5d0870280e6233890f41e9147bb4a1d8d15f62e4a1d0254b3013402b1300c078f251c8a336e80d003318d8e5b5e2e0afd7dbe3b57022adebc1de85209d24949c63af34bbab681747ef5960f58fd8db1b0c6d59cc9eabd023400e2fccf71f8151bdce47b2a694bf7932b6a30639275a612c77f589101f571221bf0d4e64ce2a23301c53a380c53175fcca302563efb50452d3f4419f1f81e9dfd8e40bede6f9c73dfcb79ed06b8c60ffa738718765fd0b65859da8542e67f6ba3556d595cf8859810a83ca6161ef8381d348d7342c3b66edb402e323af4aef6684a7f72f3b49e5dc3c20c154db11fe4807dbb7876c7c7d84e5cf831da693e65b7769950872578ce87ff1696b2f26a8ae900154fd129a62c3dce2620cb753a7f1c96c6628df7b338a00ba20557ab15f8623b7c1bdf3f15e9b662bb65e1bb8dfaadf407d97f468b51dc7817a1f3978848996f99c62bdd12ceeadf2be3d4bbc3e83c01bab738899568f1d90c799b9170c107645f543633e5cca5ba598ce28da37312e50dd3cc1413cb21c596920ab8d5779200682d527267e6564a93549b1ca13a10f57e593de6edfb9e1cd68108903f54e5a78a4c68cdffb31048c735161991fa149268fff0967c379ef1645f7716610c3230b452488f13632563a0d86d02d0e47546123d1e6b1dbeb8d1a38c6d2752c570142a30fbdb1e1daff58d065403dc731a650bf65e9f94492c4ff60ced6a0631cf1d9ddc9318bf067d4d28a0845b6b0b2b448f6c7d22b8490e17fcd602bdf954f7ec0183cb0f6df78935829d0c00372dee9102c9ff0f5423767b9d62d9a8ffd92d3af25fccc23e7961f5fd218903a136478754c53adf93e355ed5f12060c4bb707cd4875015617ab5f1f232a7cf044b7f50a1590613ec30be930edc70cb391d400a1406b02d612918a5c1d99bce875f260e40a3b779b38a1daa1054ad50f9a96d0204d7ce7ee96b3d03ae5c13e0ac53f374676fb457de8dc978c7331810dadbc6444f5fa7596a943b7f7836654e8387cfd07170134eac21428609bac2b85619d87789c51396fb04afefdea95848cc55054b0d3099f974ffee828e255be1a13d7e6a17e81562e55eca306d438f36cd5a9863c76f9d519b0d0afbaf33ebf7c948840b9b8d130339193893c4914512cd2dc401f01f538696c30b9964bd04e2be4b8aaa90a7891c6e8a2806ead78cb170db650c68a7a844590c578788caf13f48d8b375dd725eee00bd0b17b0d2a87418c684ece2fd66db58eb7b601257ad692e8a6f27125f5cf77287a6da495ce839aad3fc9077abfb28e28ef09a1fd103045310e62faaa36198a6a22810585d90599f8d7988ad786057d57888cddb48152afcbcca3979bad2f2a498e96f11855be2481bfa17218c10b8962ca094d898e1f2a60cb7d663569739cd1195fbcb436c9cdbf729206d1d937276b4e67d47ef325c3e1abf7defd3bd69f4b5f47b05ef86f501527694fa16f17d266f4de07654c4e547908da3b8ebf89e87cd633509261418f6009cf53f6d73d4df249642dc9b65e1d762376c9a75ad057871b26479c9fd42b9fff1eb59f6817251014f1777a9be2d249dcd3eea21e92444c0e13a019100b7effb9d0c6c95448a72a1ae7ad520fe8809683545052fbe5dbad18ed399e317a0dbfd738f53b2405239b9ef60b076f768274da79bb674782f10789e506c38713d27c7996b6bfe516ac6dbf0fe1188ce65150ffa4e000d9dc1c28b7a8b00830719666c1d6b927fdebf23533be84b8250850f98160e2de1a97221aec2726e64677951dc1af88a1ad05ab3dabbb6407894663648f92e082b8c8cedb3c894c95bdfeea0218f16ed942b9bf7be2ecbae1df061c0d7a6c5f491605c1161deb626eba3587d17610f13cc3aa4bfda536cffcbee7a22de7826ba43047ed98f0474fc24d42246dcad449d346f21f557043099c5bbae70286a09c37f6976d11b31ac6af6e07b87bcf1949e777374314fbc807dfd88c9f0740728898fa88d93ab45731e41cc09ce235fbb4458a65510c67ae3909ed5d5fc56980436dccebedc51b0ca383d2868438c5a10435ec8d13b67f0171b6d67ba15db4d66ddcaec6227d1e3b1d0c9fcd72b99fced4b76e8f6bd4dfb8cd2adec2593d5933fcaff774136da3d754523bbfb68fc388dba190a8bf11238e2536178ba9a480bb5abeba376fcebeb1403e0d223e3afc1a6a6688352056671a3ecde86cc9b7a6b08c1c096c024e12d40410a00487dcafed8520599f678b1f6b74f08ee595534fdd455baf5f7b6400", "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"}}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000003980)=0x343, 0x4) signalfd(r0, &(0x7f0000000040)={[0x5, 0x81]}, 0x8) 0s ago: executing program 5 (id=4165): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000640)=0x8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockname$packet(r2, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2) syz_open_dev$dri(&(0x7f0000000200), 0x7, 0x101000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x0, @remote, 0x4e24, 0x2, 'lc\x00', 0x20, 0x5, 0x53}, {@multicast1, 0x4e21, 0x2000, 0x4, 0x7fffffff, 0xb}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r6, 0x40087447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0xce}]}) close(r6) write(r5, &(0x7f00000001c0)='1\x00', 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc00c64b5, &(0x7f0000000280)={&(0x7f0000000240)}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x470, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x3}, {0x6, 0x3}, {0x9, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x444, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffff}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x0, [{0x7, 0x1, 0x4, 0x7}]}}, @TCA_U32_SEL={0x414, 0x5, {0x7, 0x8, 0x0, 0x1, 0x4, 0x0, 0x4, 0x9, [{0x1, 0x6, 0x0, 0x1}, {0x9d00, 0x8, 0x81, 0xffffffff}, {0x8, 0x7262, 0x2, 0x93}, {0x7, 0xe9e, 0x5db, 0x7}, {0x2, 0x800, 0x40000005, 0x5}, {0x6, 0x1000, 0x7, 0x20000000}, {0x5, 0x0, 0x1000, 0x6}, {0x8, 0x100, 0x3, 0xb37}, {0x80000001, 0x10000, 0x9, 0x80000000}, {0xfffffff7, 0x3ff, 0x6, 0x80000000}, {0x4, 0x1, 0xac1e, 0xe00}, {0x1, 0x0, 0x8, 0x85d8}, {0x9, 0x7, 0x0, 0xb}, {0x86, 0x6, 0x9, 0x1ca6}, {0x100, 0x6, 0xa9, 0x6}, {0x80000000, 0x7, 0x8, 0xe}, {0x767, 0x1, 0x6, 0x1}, {0x5, 0x6, 0x6, 0x2}, {0x9, 0x79, 0x3, 0x100}, {0x7, 0x9, 0x5, 0x6}, {0xf5d, 0x4, 0x3, 0x8}, {0x6, 0xfffffc01, 0x4, 0x9b}, {0x1, 0x3, 0x6f27, 0x8a9a}, {0x0, 0x8, 0x3, 0x10001}, {0x7, 0x6c, 0x7fffffff, 0x6}, {0x39e, 0x80020000, 0x9, 0x7}, {0x1, 0x7, 0x4}, {0x52d, 0x3, 0xb}, {0x6, 0x73, 0x75e, 0x5}, {0x0, 0x1, 0x5, 0x1}, {0x5, 0x5, 0x4, 0x154}, {0xfff, 0x6, 0xf30, 0xb}, {0x5, 0x0, 0x7fffffff, 0x800}, {0x1, 0x1, 0x4, 0x8}, {0x100, 0xffff, 0x3, 0x6}, {0x9, 0x9, 0x9, 0x98a2}, {0x8, 0x9, 0xd766, 0x3ff}, {0x9, 0x8abd, 0x6, 0x8}, {0xffffffff, 0x2, 0x6a, 0xbb}, {0x400, 0x2, 0x9, 0x200}, {0x23e, 0x2, 0xd, 0xfffffc01}, {0x7, 0x9, 0x1, 0x7fffffff}, {0x3, 0x3, 0x5, 0x6}, {0x8001, 0x800, 0x1, 0x5}, {0x1d8fbe38, 0x8, 0x8, 0xa}, {0x401, 0x5, 0x7, 0xb}, {0x6d9, 0xfffff06e, 0x8, 0xfffffffe}, {0xb, 0xffffffff, 0x2462}, {0x5, 0x6, 0x6, 0x7}, {0x936, 0x6, 0x7, 0x3}, {0x0, 0x7, 0x40, 0xffffffff}, {0x136, 0xe1, 0x2, 0x31ce107}, {0x7fffffff, 0x5f, 0x9, 0x5}, {0x2, 0x7, 0xffbfd984, 0x8000}, {0xfffffff4, 0x4, 0x4, 0x3}, {0x2, 0x40, 0xfffffffd, 0x4}, {0x803d145a, 0x3, 0x360, 0x7}, {0x7, 0x0, 0x6, 0x3785}, {0x2, 0x4, 0xe10, 0x8}, {0x5, 0x0, 0xfff}, {0x5, 0x7fffffff, 0x7802, 0x4}, {0x2c38, 0x401, 0x6, 0x2}, {0x1, 0x5, 0xd761, 0x40}, {0x2, 0x6, 0x9800, 0x7}]}}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x40}, 0x24040084) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): confined op=collect_data cause=failed comm="syz.2.3635" name="bColorPrimaries" dev="configfs" ino=69576 res=0 errno=0 [ 543.450530][ T42] audit: type=1800 audit(1785441492.473:4216): pid=19373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3635" name="bTransferCharacteristics" dev="configfs" ino=69577 res=0 errno=0 [ 543.484481][ T42] audit: type=1800 audit(1785441492.473:4217): pid=19373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3635" name="bColorPrimaries" dev="configfs" ino=69578 res=0 errno=0 [ 543.485598][T19363] can0 (unregistered): slcan off ttyS3. [ 544.088785][T19388] comedi comedi3: 8255: I/O base address not correctly aligned [ 544.220455][T19391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3640'. [ 544.481865][T19394] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 544.482038][T19394] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 544.482119][T19394] vhci_hcd vhci_hcd.0: Device attached [ 544.500010][T19393] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 544.500041][T19393] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 544.500071][T19393] vhci_hcd vhci_hcd.0: Device attached [ 544.687800][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.687827][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.809817][T19405] IPVS: ip_vs_add_dest(): server weight less than zero [ 544.822046][T19399] vhci_hcd: connection closed [ 544.822367][ T5799] vhci_hcd vhci_hcd.2: stop threads [ 544.822396][ T5799] vhci_hcd vhci_hcd.2: release socket [ 544.822415][ T5799] vhci_hcd vhci_hcd.2: disconnect device [ 544.848739][T19398] vhci_hcd: connection closed [ 544.849050][T13078] IPVS: starting estimator thread 0... [ 544.871327][ T5799] vhci_hcd vhci_hcd.2: stop threads [ 544.871360][ T5799] vhci_hcd vhci_hcd.2: release socket [ 544.871408][ T5799] vhci_hcd vhci_hcd.2: disconnect device [ 544.944488][ T846] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 544.954854][T19407] IPVS: using max 26 ests per chain, 62400 per kthread [ 545.704254][T19423] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 547.012708][ T5797] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 547.155894][ T5797] usb 10-1: device descriptor read/64, error -71 [ 547.194719][T19477] comedi comedi3: pcl818: I/O base address or length out of range [ 547.412537][ T5797] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 547.551517][ T5797] usb 10-1: device descriptor read/64, error -71 [ 547.660058][T19479] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 547.664483][ T42] audit: type=1800 audit(1785441496.430:4218): pid=19485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3655" name="bColorPrimaries" dev="configfs" ino=69758 res=0 errno=0 [ 547.678556][ T5797] usb usb10-port1: attempt power cycle [ 547.684967][ T42] audit: type=1800 audit(1785441496.439:4219): pid=19485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3655" name="bTransferCharacteristics" dev="configfs" ino=69759 res=0 errno=0 [ 547.704446][ T42] audit: type=1800 audit(1785441496.439:4220): pid=19485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3655" name="bMatrixCoefficients" dev="configfs" ino=69760 res=0 errno=0 [ 547.713210][ T42] audit: type=1800 audit(1785441496.439:4221): pid=19485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3655" name="bColorPrimaries" dev="configfs" ino=69761 res=0 errno=0 [ 547.827260][T19493] fuse: Bad value for 'user_id' [ 547.830840][T19493] fuse: Bad value for 'user_id' [ 547.972504][T19499] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 548.043354][ T5797] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 548.065475][ T5797] usb 10-1: device descriptor read/8, error -71 [ 548.321308][ T5797] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 548.343437][ T5797] usb 10-1: device descriptor read/8, error -71 [ 548.460465][ T5797] usb usb10-port1: unable to enumerate USB device [ 548.707464][T19505] binder: 19504:19505 ioctl c0306201 0 returned -14 [ 548.770229][T19506] binder: 19504:19506 ioctl c0306201 0 returned -14 [ 548.829548][T19507] binder: 19504:19507 ioctl 40189206 0 returned -22 [ 549.269360][T19514] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 549.676285][T19519] netlink: 1132 bytes leftover after parsing attributes in process `syz.2.3663'. [ 550.464770][T19522] binder: 19521:19522 ioctl c0506107 80000180 returned -22 [ 550.638247][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3669'. [ 551.553534][T19561] comedi comedi3: pcl818: I/O base address or length out of range [ 551.817517][T19564] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 551.820697][T19537] Set syz1 is full, maxelem 65536 reached [ 551.940539][T19572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3676'. [ 552.833746][T19580] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 553.346248][T19605] tmpfs: Unknown parameter 'usrquota@' [ 553.746485][T19632] FAULT_INJECTION: forcing a failure. [ 553.746485][T19632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.777689][T19632] CPU: 3 UID: 0 PID: 19632 Comm: syz.0.3687 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.777724][T19632] Tainted: [L]=SOFTLOCKUP [ 553.777746][T19632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 553.777756][T19632] Call Trace: [ 553.777764][T19632] [ 553.777771][T19632] dump_stack_lvl+0x100/0x190 [ 553.777800][T19632] should_fail_ex.cold+0x5/0xa [ 553.777828][T19632] _copy_from_user+0x2e/0xd0 [ 553.777853][T19632] ? __pfx_binder_ioctl+0x10/0x10 [ 553.777904][T19632] binder_ioctl+0x4cb/0x74a0 [ 553.777933][T19632] ? find_held_lock+0x2b/0x80 [ 553.777952][T19632] ? tomoyo_path_number_perm+0x28f/0x580 [ 553.777975][T19632] ? tomoyo_path_number_perm+0x28f/0x580 [ 553.778001][T19632] ? tomoyo_path_number_perm+0x188/0x580 [ 553.778025][T19632] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 553.778049][T19632] ? __pfx_binder_ioctl+0x10/0x10 [ 553.778078][T19632] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 553.778115][T19632] ? do_vfs_ioctl+0x226/0x13e0 [ 553.778142][T19632] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 553.778171][T19632] ? find_held_lock+0x2b/0x80 [ 553.778190][T19632] ? __fget_files+0x215/0x3d0 [ 553.778205][T19632] ? hook_file_ioctl_common+0x140/0x440 [ 553.778233][T19632] ? __fget_files+0x21f/0x3d0 [ 553.778251][T19632] ? __pfx_binder_ioctl+0x10/0x10 [ 553.778276][T19632] compat_ptr_ioctl+0x6e/0xa0 [ 553.778301][T19632] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 553.778324][T19632] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 553.778353][T19632] __do_fast_syscall_32+0xe7/0x970 [ 553.778375][T19632] ? lockdep_hardirqs_on+0x78/0x100 [ 553.778401][T19632] do_fast_syscall_32+0x32/0x70 [ 553.778422][T19632] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 553.778445][T19632] RIP: 0023:0xf7fe8fec [ 553.778467][T19632] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 553.778475][T19632] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 553.778494][T19632] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 553.778522][T19632] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 553.778535][T19632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 553.778544][T19632] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 553.778570][T19632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 553.778593][T19632] [ 553.781262][T19632] binder: 19631:19632 ioctl c0306201 800001c0 returned -14 [ 554.078430][T19642] pimreg: tun_chr_ioctl cmd 1074025684 [ 554.099310][ T42] audit: type=1804 audit(1785441502.454:4222): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3689" name="/newroot/458/file0" dev="tmpfs" ino=2524 res=1 errno=0 [ 554.241042][T19671] binder: 19670:19671 unknown command 1078485781 [ 554.243175][T19671] binder: 19670:19671 ioctl c0306201 80000480 returned -22 [ 554.851204][T19689] 8021q: VLANs not supported on ip6tnl0 [ 554.862046][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3696'. [ 554.865317][T19689] hsr_slave_0: left promiscuous mode [ 554.867801][T19689] hsr_slave_1: left promiscuous mode [ 556.560236][T19722] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 558.005352][ T42] audit: type=1800 audit(1785441506.102:4223): pid=19753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3708" name="bColorPrimaries" dev="configfs" ino=72442 res=0 errno=0 [ 558.022567][ T42] audit: type=1800 audit(1785441506.111:4224): pid=19753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3708" name="bMatrixCoefficients" dev="configfs" ino=72443 res=0 errno=0 [ 558.045478][ T42] audit: type=1800 audit(1785441506.121:4225): pid=19753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3708" name="bColorPrimaries" dev="configfs" ino=72444 res=0 errno=0 [ 558.097951][T19756] bond2: (slave dummy0): Releasing backup interface [ 558.168506][T19756] bridge_slave_0: left allmulticast mode [ 558.202746][T19756] bridge_slave_0: left promiscuous mode [ 558.221332][T19756] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.234944][T19766] comedi: valid board names for 8255 driver are: [ 558.237723][T19766] 8255 [ 558.239067][T19766] comedi: valid board names for vmk80xx driver are: [ 558.244852][T19766] vmk80xx [ 558.246050][T19766] comedi: valid board names for usbduxsigma driver are: [ 558.248454][T19766] usbduxsigma [ 558.248817][ T42] audit: type=1400 audit(1785441506.327:4226): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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comedi: valid board names for usbduxfast driver are: [ 558.250503][T19756] bridge_slave_1: left allmulticast mode [ 558.283896][T19766] usbduxfast [ 558.283912][T19766] comedi: valid board names for usbdux driver are: [ 558.283921][T19766] usbdux [ 558.283928][T19766] comedi: valid board names for ni6501 driver are: [ 558.283936][T19766] ni6501 [ 558.283943][T19766] comedi: valid board names for dt9812 driver are: [ 558.283951][T19766] dt9812 [ 558.283957][T19766] comedi: valid board names for ni_labpc_cs driver are: [ 558.283965][T19766] ni_labpc_cs [ 558.310584][T19766] comedi: valid board names for ni_daq_700 driver are: [ 558.314530][T19766] ni_daq_700 [ 558.316089][T19766] comedi: valid board names for labpc_pci driver are: [ 558.319283][T19766] labpc_pci [ 558.320790][T19766] comedi: valid board names for adl_pci9118 driver are: [ 558.323711][T19766] pci9118dg [ 558.324753][T19766] pci9118hg [ 558.326120][T19766] pci9118hr [ 558.327783][T19766] comedi: valid board names for 8255_pci driver are: [ 558.330488][T19766] 8255_pci [ 558.331697][T19766] comedi: valid board names for s526 driver are: [ 558.334416][T19766] s526 [ 558.335736][T19766] comedi: valid board names for multiq3 driver are: [ 558.338862][T19766] multiq3 [ 558.340291][T19766] comedi: valid board names for pcmuio driver are: [ 558.344317][T19766] pcmuio48 [ 558.347079][T19766] pcmuio96 [ 558.348585][T19766] comedi: valid board names for pcmmio driver are: [ 558.354132][T19766] pcmmio [ 558.356751][T19766] comedi: valid board names for pcmda12 driver are: [ 558.360995][T19766] pcmda12 [ 558.362993][T19766] comedi: valid board names for pcmad driver are: [ 558.364255][T19756] bridge_slave_1: left promiscuous mode [ 558.365849][T19766] pcmad12 [ 558.371330][T19766] pcmad16 [ 558.373431][T19766] comedi: valid board names for ni_labpc driver are: [ 558.373723][T19756] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.377223][T19766] lab-pc-1200 [ 558.380287][T19766] lab-pc-1200ai [ 558.382443][T19766] lab-pc+ [ 558.383925][T19766] comedi: valid board names for atmio16 driver are: [ 558.389171][T19766] atmio16 [ 558.390659][T19766] atmio16d [ 558.392284][T19766] comedi: valid board names for ni_at_ao driver are: [ 558.395611][T19766] at-ao-6 [ 558.397353][T19766] at-ao-10 [ 558.397483][T19756] bond0: (slave bond_slave_0): Releasing backup interface [ 558.399183][T19766] comedi: valid board names for ni_at_a2150 driver are: [ 558.404261][T19766] ni_at_a2150 [ 558.405835][T19766] comedi: valid board names for adq12b driver are: [ 558.408603][T19766] adq12b [ 558.410015][T19766] comedi: valid board names for mpc624 driver are: [ 558.412874][T19766] mpc624 [ 558.415193][T19766] comedi: valid board names for c6xdigio driver are: [ 558.418295][T19766] c6xdigio [ 558.420225][T19766] comedi: valid board names for aio_iiro_16 driver are: [ 558.423125][T19766] aio_iiro_16 [ 558.426951][T19766] comedi: valid board names for aio_aio12_8 driver are: [ 558.429931][T19766] aio_aio12_8 [ 558.431485][T19766] aio_ai12_8 [ 558.432978][T19766] aio_ao12_4 [ 558.434677][T19766] comedi: valid board names for fl512 driver are: [ 558.437624][T19766] fl512 [ 558.438990][T19766] comedi: valid board names for dmm32at driver are: [ 558.441889][T19766] dmm32at [ 558.443289][T19766] comedi: valid board names for dt282x driver are: [ 558.446101][T19766] dt2821 [ 558.447524][T19766] dt2821-f [ 558.449108][T19766] dt2821-g [ 558.450585][T19766] dt2823 [ 558.451931][T19766] dt2824-pgh [ 558.453380][T19766] dt2824-pgl [ 558.454884][T19766] dt2825 [ 558.460275][T19756] bond0: (slave bond_slave_1): Releasing backup interface [ 558.475565][T19766] dt2827 [ 558.481311][T19766] dt2828 [ 558.482574][T19766] dt2829 [ 558.487200][T19766] dt21-ez [ 558.489775][T19766] dt23-ez [ 558.491797][T19766] dt24-ez [ 558.493978][T19766] dt24-ez-pgl [ 558.496563][T19766] comedi: valid board names for dt2817 driver are: [ 558.504277][T19766] dt2817 [ 558.508778][T19766] comedi: valid board names for dt2815 driver are: [ 558.513118][T19766] dt2815 [ 558.515582][T19766] comedi: valid board names for dt2814 driver are: [ 558.516992][T19756] team0: Port device team_slave_0 removed [ 558.528923][T19766] dt2814 [ 558.531341][T19766] comedi: valid board names for dt2811 driver are: [ 558.536590][T19766] dt2811-pgh [ 558.538035][T19766] dt2811-pgl [ 558.541899][T19766] comedi: valid board names for dt2801 driver are: [ 558.546025][T19766] dt2801 [ 558.548461][T19766] comedi: valid board names for das6402 driver are: [ 558.549344][T19756] team0: Port device team_slave_1 removed [ 558.556520][T19766] das6402-12 [ 558.556763][T19756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.561648][T19766] das6402-16 [ 558.561840][T19756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.565739][T19766] comedi: valid board names for das1800 driver are: [ 558.568783][T19766] das-1701st [ 558.570473][T19766] das-1701st-da [ 558.573711][T19766] das-1702st [ 558.575561][T19766] das-1702st-da [ 558.577693][T19766] das-1702hr [ 558.580696][T19766] das-1702hr-da [ 558.582443][T19766] das-1701ao [ 558.587260][T19766] das-1702ao [ 558.589782][T19766] das-1801st [ 558.591441][T19766] das-1801st-da [ 558.593859][T19766] das-1802st [ 558.596331][T19766] das-1802st-da [ 558.598861][T19766] das-1802hr [ 558.601310][T19766] das-1802hr-da [ 558.603511][T19766] das-1801hc [ 558.605662][T19766] das-1802hc [ 558.607627][T19766] das-1801ao [ 558.610033][T19766] das-1802ao [ 558.612357][T19766] comedi: valid board names for das800 driver are: [ 558.615639][T19766] das-800 [ 558.617811][T19766] cio-das800 [ 558.619704][T19766] das-801 [ 558.622379][T19766] cio-das801 [ 558.624997][T19766] das-802 [ 558.627070][T19766] cio-das802 [ 558.629130][T19766] cio-das802/16 [ 558.631551][T19766] comedi: valid board names for isa-das08 driver are: [ 558.632807][T19756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.636791][T19766] isa-das08 [ 558.638357][T19766] das08-pgm [ 558.640621][T19766] das08-pgh [ 558.642602][T19766] das08-pgl [ 558.644579][T19766] das08-aoh [ 558.647156][T19766] das08-aol [ 558.649566][T19766] das08-aom [ 558.651420][T19766] das08/jr-ao [ 558.653598][T19766] das08jr-16-ao [ 558.654557][T19756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.657961][T19766] pc104-das08 [ 558.659795][T19766] das08jr/16 [ 558.661341][T19766] comedi: valid board names for das16m1 driver are: [ 558.665734][T19766] das16m1 [ 558.667711][T19766] comedi: valid board names for dac02 driver are: [ 558.675357][T19766] dac02 [ 558.676722][T19766] comedi: valid board names for rti802 driver are: [ 558.679446][T19766] rti802 [ 558.680881][T19766] comedi: valid board names for rti800 driver are: [ 558.684043][T19766] rti800 [ 558.689812][T19766] rti815 [ 558.691836][T19766] comedi: valid board names for pcm3724 driver are: [ 558.694729][T19766] pcm3724 [ 558.696132][T19766] comedi: valid board names for pcl818 driver are: [ 558.699292][T19766] pcl818l [ 558.701240][T19766] pcl818h [ 558.703694][T19766] pcl818hd [ 558.705350][T19766] pcl818hg [ 558.707555][T19766] pcl818 [ 558.712055][T19766] pcl718 [ 558.713535][T19766] pcm3718 [ 558.714971][T19766] comedi: valid board names for pcl816 driver are: [ 558.717861][T19766] pcl816 [ 558.720136][T19766] pcl814b [ 558.728806][T19766] comedi: valid board names for pcl812 driver are: [ 558.732877][T19766] pcl812 [ 558.734329][T19766] pcl812pg [ 558.737880][T19766] acl8112pg [ 558.739288][T19766] acl8112dg [ 558.744530][T19766] acl8112hg [ 558.745702][T19766] a821pgl [ 558.747152][T19766] a821pglnda [ 558.748702][T19756] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 558.756483][T19766] a821pgh [ 558.757882][T19766] a822pgl [ 558.760731][T19766] a822pgh [ 558.761864][T19766] a823pgl [ 558.762958][T19766] a823pgh [ 558.774122][T19766] pcl813 [ 558.783018][T19766] pcl813b [ 558.901701][T19766] acl8113 [ 558.903308][T19766] iso813 [ 558.911692][T19766] acl8216 [ 558.913096][T19766] a826pg [ 558.914473][T19766] comedi: valid board names for pcl730 driver are: [ 558.933338][T19766] pcl730 [ 558.934331][T19766] iso730 [ 558.935359][T19766] acl7130 [ 558.945338][T19766] pcm3730 [ 558.946736][T19766] pcl725 [ 558.948246][T19766] p8r8dio [ 558.951265][T19766] acl7225b [ 558.957273][T19766] p16r16dio [ 558.967698][T19766] pcl733 [ 558.970246][T19766] pcl734 [ 558.976834][T19766] opmm-1616-xt [ 558.978527][T19766] pearl-mm-p [ 558.991040][T19766] ir104-pbf [ 558.993199][T19766] comedi: valid board names for pcl726 driver are: [ 559.001929][T19766] pcl726 [ 559.043701][T19766] pcl727 [ 559.052013][T19766] pcl728 [ 559.053293][T19766] acl6126 [ 559.086636][T19766] acl6128 [ 559.088738][T19766] comedi: valid board names for pcl724 driver are: [ 559.093848][T19766] pcl724 [ 559.094869][T19766] pcl722 [ 559.095891][T19766] pcl731 [ 559.097010][T19766] acl7122 [ 559.099851][T19766] acl7124 [ 559.101052][T19766] pet48dio [ 559.103424][T19766] pcmio48 [ 559.104898][T19766] onyx-mm-dio [ 559.106109][T19766] comedi: valid board names for pcl711 driver are: [ 559.109129][T19766] pcl711 [ 559.110150][T19766] pcl711b [ 559.111171][T19766] acl8112hg [ 559.116050][T19766] acl8112dg [ 559.121670][T19766] comedi: valid board names for amplc_pc263 driver are: [ 559.137545][T19766] pc263 [ 559.138589][T19766] comedi: valid board names for amplc_pc236 driver are: [ 559.141020][T19766] pc36at [ 559.142093][T19766] comedi: valid board names for amplc_dio200 driver are: [ 559.145059][T19766] pc212e [ 559.146024][T19766] pc214e [ 559.147008][T19766] pc215e [ 559.150174][T19766] pc218e [ 559.151463][T19766] pc272e [ 559.152633][T19766] comedi: valid board names for comedi_parport driver are: [ 559.154923][T19766] comedi_parport [ 559.157924][T19766] comedi: valid board names for comedi_test driver are: [ 559.160553][T19766] comedi_test [ 559.161807][T19766] comedi: valid board names for comedi_bond driver are: [ 559.164877][T19766] comedi_bond [ 559.480310][ T42] audit: type=1800 audit(1785441507.477:4227): pid=19803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3720" name="bMatrixCoefficients" dev="configfs" ino=72489 res=0 errno=0 [ 559.490075][ T42] audit: type=1800 audit(1785441507.486:4228): pid=19803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3720" name="bColorPrimaries" dev="configfs" ino=72490 res=0 errno=0 [ 559.666064][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3724'. [ 559.670227][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3724'. [ 559.673501][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3724'. [ 559.677506][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3724'. [ 559.690081][T19810] 9pnet_virtio: no channels available for device syz [ 559.690603][T19811] 9pnet_virtio: no channels available for device syz [ 560.422915][T12286] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 560.489029][ T42] audit: type=1800 audit(1785441508.431:4229): pid=19855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3732" name="bMatrixCoefficients" dev="configfs" ino=72516 res=0 errno=0 [ 560.496508][ T42] audit: type=1800 audit(1785441508.431:4230): pid=19855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3732" name="bColorPrimaries" dev="configfs" ino=73026 res=0 errno=0 [ 560.506030][T19856] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3730'. [ 560.510828][T19856] Set syz0 is full, maxelem 0 reached [ 560.598135][T12286] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.605424][T12286] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 560.608538][T12286] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 560.611624][T12286] usb 7-1: Product: syz [ 560.613223][T12286] usb 7-1: Manufacturer: syz [ 560.614717][T12286] usb 7-1: SerialNumber: syz [ 561.075877][ T80] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 562.749513][T19891] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 563.036780][T12286] usb 7-1: USB disconnect, device number 47 [ 563.967240][ T5897] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.971521][ T5897] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.980564][ T5897] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.992660][ T5897] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.238472][ T42] audit: type=1800 audit(1785441511.930:4231): pid=19928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3741" name="bMatrixCoefficients" dev="configfs" ino=72588 res=0 errno=0 [ 564.252448][ T42] audit: type=1800 audit(1785441511.948:4232): pid=19928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3741" name="bColorPrimaries" dev="configfs" ino=72589 res=0 errno=0 [ 564.458419][T19946] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 564.551932][T19955] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3748'. [ 565.095469][T19965] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 565.731070][ T42] audit: type=1800 audit(1785441513.333:4233): pid=19979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3753" name="bMatrixCoefficients" dev="configfs" ino=73357 res=0 errno=0 [ 565.752223][ T42] audit: type=1800 audit(1785441513.333:4234): pid=19979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3753" name="bColorPrimaries" dev="configfs" ino=73358 res=0 errno=0 [ 565.767090][T19982] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3754'. [ 565.778305][T19982] netlink: 'syz.5.3754': attribute type 2 has an invalid length. [ 565.794866][T19982] : entered promiscuous mode [ 567.350512][T20016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.372369][T20016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.438964][T20020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.690792][T20035] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3762'. [ 567.734730][T20035] lo speed is unknown, defaulting to 1000 [ 567.777335][T20035] lo speed is unknown, defaulting to 1000 [ 567.779931][T20035] lo speed is unknown, defaulting to 1000 [ 567.850111][T20029] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 567.852222][T20029] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 567.855061][T20029] vhci_hcd vhci_hcd.0: Device attached [ 567.862113][T20029] geneve2: entered allmulticast mode [ 567.868220][T20039] vhci_hcd: connection closed [ 567.868601][ T5799] vhci_hcd vhci_hcd.0: stop threads [ 567.875017][ T5799] vhci_hcd vhci_hcd.0: release socket [ 567.877352][ T5799] vhci_hcd vhci_hcd.0: disconnect device [ 567.943445][ T34] lo speed is unknown, defaulting to 1000 [ 567.947246][T20035] infiniband syz0: set active [ 567.949622][T20035] infiniband syz0: added lo [ 567.967992][T20035] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 567.974955][T20035] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 567.982858][T20035] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 568.016706][T20035] RDS/IB: syz0: added [ 568.018615][T20035] smc: adding ib device syz0 with port count 1 [ 568.021193][T20035] smc: ib device syz0 port 1 has no pnetid [ 568.027606][T13078] lo speed is unknown, defaulting to 1000 [ 568.032647][T20035] lo speed is unknown, defaulting to 1000 [ 568.163216][T20035] lo speed is unknown, defaulting to 1000 [ 568.244881][T20050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3763'. [ 568.328950][T20035] lo speed is unknown, defaulting to 1000 [ 568.416560][T20035] lo speed is unknown, defaulting to 1000 [ 568.579542][T20035] lo speed is unknown, defaulting to 1000 [ 568.712629][T20035] lo speed is unknown, defaulting to 1000 [ 568.733531][T20066] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 568.854819][T20035] lo speed is unknown, defaulting to 1000 [ 568.989624][T20035] lo speed is unknown, defaulting to 1000 [ 569.119458][T20035] lo speed is unknown, defaulting to 1000 [ 570.411705][T20094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3773'. [ 570.590265][ T34] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 570.770345][ T34] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 570.774525][ T34] usb 10-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 570.791635][ T34] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 570.796787][ T34] usb 10-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 570.825668][ T34] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 570.831192][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.835351][ T34] usb 10-1: Product: syz [ 570.838416][ T34] usb 10-1: Manufacturer: syz [ 570.841044][ T34] usb 10-1: SerialNumber: syz [ 571.200678][T20102] netlink: 'syz.0.3775': attribute type 1 has an invalid length. [ 571.208654][T20102] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3775'. [ 571.224397][T20102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3775'. [ 571.320983][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3776'. [ 571.901341][T20118] comedi comedi3: pcl818: I/O base address or length out of range [ 573.525009][ T9] usb 10-1: USB disconnect, device number 14 [ 574.144321][T20139] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 574.146472][T20139] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 574.162637][T20139] vhci_hcd vhci_hcd.0: Device attached [ 574.231621][T20139] rdma_rxe: rxe_newlink: failed to add wg2 [ 574.421323][T20151] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 574.423450][T20151] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 574.426737][T20151] vhci_hcd vhci_hcd.0: Device attached [ 574.431630][T20152] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 5 [ 574.436956][ T5825] vhci_hcd vhci_hcd.2: stop threads [ 574.439959][ T5825] vhci_hcd vhci_hcd.2: release socket [ 574.441844][ T5825] vhci_hcd vhci_hcd.2: disconnect device [ 574.449243][ T9] usb 48-1: SetAddress Request (6) to port 0 [ 574.497278][ T9] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 574.951977][T20140] vhci_hcd: connection reset by peer [ 574.954564][ T5897] vhci_hcd vhci_hcd.5: stop threads [ 574.956492][ T5897] vhci_hcd vhci_hcd.5: release socket [ 574.958528][ T5897] vhci_hcd vhci_hcd.5: disconnect device [ 575.336429][ T5797] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 575.512473][ T5797] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 575.516940][ T5797] usb 9-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 575.517524][T20176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3791'. [ 575.532975][ T5797] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 575.542104][ T5797] usb 9-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 575.555377][ T5797] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 575.560883][ T5797] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.566537][ T5797] usb 9-1: Product: syz [ 575.568263][ T5797] usb 9-1: Manufacturer: syz [ 575.570349][ T5797] usb 9-1: SerialNumber: syz [ 575.654847][T20176] overlay: Unknown parameter 'dont_measure' [ 575.711791][T20176] uhci_hcd 0000:00:1d.0: remove, state 4 [ 575.718085][T20176] usb usb1: USB disconnect, device number 1 [ 575.790980][T20176] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 576.114421][T20198] FAULT_INJECTION: forcing a failure. [ 576.114421][T20198] name failslab, interval 1, probability 0, space 0, times 0 [ 576.119686][T20198] CPU: 3 UID: 0 PID: 20198 Comm: syz.5.3793 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.119715][T20198] Tainted: [L]=SOFTLOCKUP [ 576.119720][T20198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 576.119729][T20198] Call Trace: [ 576.119736][T20198] [ 576.119744][T20198] dump_stack_lvl+0x100/0x190 [ 576.119773][T20198] should_fail_ex.cold+0x5/0xa [ 576.119795][T20198] should_failslab+0xc2/0x120 [ 576.119819][T20198] kmem_cache_alloc_noprof+0x91/0x6a0 [ 576.119842][T20198] ? stack_trace_save+0x8e/0xc0 [ 576.119863][T20198] ? alloc_empty_file+0x5b/0x1c0 [ 576.119888][T20198] alloc_empty_file+0x5b/0x1c0 [ 576.119909][T20198] path_openat+0xe7/0x4280 [ 576.119925][T20198] ? kasan_save_track+0x14/0x30 [ 576.119944][T20198] ? __kasan_slab_alloc+0x89/0x90 [ 576.119963][T20198] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 576.119983][T20198] ? do_getname+0x35/0x390 [ 576.120001][T20198] ? do_sys_openat2+0xc7/0x1e0 [ 576.120020][T20198] ? __ia32_compat_sys_openat+0x12d/0x210 [ 576.120042][T20198] ? __do_fast_syscall_32+0xe7/0x970 [ 576.120080][T20198] ? __pfx_path_openat+0x10/0x10 [ 576.120104][T20198] do_file_open+0x20e/0x430 [ 576.120119][T20198] ? __lock_acquire+0x49f/0x1a40 [ 576.120148][T20198] ? __pfx_do_file_open+0x10/0x10 [ 576.120179][T20198] ? _raw_spin_unlock+0x28/0x50 [ 576.120193][T20198] ? alloc_fd+0x471/0x7a0 [ 576.120214][T20198] do_sys_openat2+0x10f/0x1e0 [ 576.120232][T20198] ? __pfx_do_sys_openat2+0x10/0x10 [ 576.120255][T20198] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 576.120280][T20198] __ia32_compat_sys_openat+0x12d/0x210 [ 576.120306][T20198] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 576.120329][T20198] ? fput+0x79/0x100 [ 576.120349][T20198] ? ksys_write+0x1ac/0x250 [ 576.120365][T20198] ? __pfx_ksys_write+0x10/0x10 [ 576.120386][T20198] __do_fast_syscall_32+0xe7/0x970 [ 576.120408][T20198] ? lockdep_hardirqs_on+0x78/0x100 [ 576.120429][T20198] do_fast_syscall_32+0x32/0x70 [ 576.120452][T20198] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 576.120475][T20198] RIP: 0023:0xf7fc8fec [ 576.120497][T20198] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 576.120505][T20198] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 576.120524][T20198] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800013c0 [ 576.120535][T20198] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.120545][T20198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.120554][T20198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.120564][T20198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.120587][T20198] [ 576.399321][T20214] comedi comedi3: pcl818: I/O base address or length out of range [ 577.092680][ T42] audit: type=1326 audit(1785441523.959:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 577.128604][ T42] audit: type=1326 audit(1785441523.959:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 577.138151][ T42] audit: type=1326 audit(1785441523.959:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3800" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 577.146910][ T42] audit: type=1326 audit(1785441523.959:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 577.156147][ T42] audit: type=1326 audit(1785441523.959:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3800" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 577.165120][ T42] audit: type=1326 audit(1785441523.959:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 577.176227][ T42] audit: type=1326 audit(1785441523.959:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3800" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 577.185206][ T42] audit: type=1326 audit(1785441523.959:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3800" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 577.196197][ T42] audit: type=1326 audit(1785441523.968:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3800" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 577.205007][ T42] audit: type=1326 audit(1785441523.968:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20221 comm="syz.5.3800" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 577.402818][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3800'. [ 578.302359][ T34] usb 9-1: USB disconnect, device number 14 [ 578.340745][T20239] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 578.360167][T20249] tipc: Enabled bearer , priority 0 [ 578.391135][T20249] syzkaller0: entered promiscuous mode [ 578.396376][T20249] syzkaller0: entered allmulticast mode [ 578.399109][T20249] tipc: Resetting bearer [ 578.411591][T20249] CIFS: Attempting to mount //127.0.0.1/share [ 579.240917][T20248] tipc: Resetting bearer [ 579.664677][T20271] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 579.673296][T20271] FAULT_INJECTION: forcing a failure. [ 579.673296][T20271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.679329][T20271] CPU: 3 UID: 0 PID: 20271 Comm: syz.2.3809 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.679357][T20271] Tainted: [L]=SOFTLOCKUP [ 579.679363][T20271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 579.679372][T20271] Call Trace: [ 579.679378][T20271] [ 579.679390][T20271] dump_stack_lvl+0x100/0x190 [ 579.679415][T20271] should_fail_ex.cold+0x5/0xa [ 579.679436][T20271] _copy_to_user+0x32/0xd0 [ 579.679464][T20271] simple_read_from_buffer+0xcb/0x170 [ 579.679493][T20271] proc_fail_nth_read+0x1af/0x230 [ 579.679517][T20271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 579.679540][T20271] ? rw_verify_area+0xce/0x6d0 [ 579.679565][T20271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 579.679586][T20271] vfs_read+0x1e4/0xb40 [ 579.679604][T20271] ? __pfx_vfs_read+0x10/0x10 [ 579.679626][T20271] ? find_held_lock+0x2b/0x80 [ 579.679668][T20271] ? __fget_files+0x215/0x3d0 [ 579.679689][T20271] ? __fget_files+0x21f/0x3d0 [ 579.679711][T20271] ksys_read+0x12a/0x250 [ 579.679726][T20271] ? __pfx_ksys_read+0x10/0x10 [ 579.679748][T20271] do_int80_emulation+0x14b/0x720 [ 579.679772][T20271] asm_int80_emulation+0x1a/0x20 [ 579.679788][T20271] RIP: 0023:0xf716736b [ 579.679803][T20271] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 579.679818][T20271] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 579.679835][T20271] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f541d5d0 [ 579.679845][T20271] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 579.679854][T20271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 579.679863][T20271] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 579.679872][T20271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 579.679894][T20271] [ 579.965871][ T9] usb 48-1: device descriptor read/8, error -110 [ 580.473248][ T9] usb usb48-port1: attempt power cycle [ 581.069895][ T9] usb usb48-port1: unable to enumerate USB device [ 581.577023][T20249] CIFS: VFS: cifs_mount failed w/return code = -512 [ 582.448311][T20248] tipc: Disabling bearer [ 582.464873][ T5797] tipc: Node number set to 1716851060 [ 582.602479][T20305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.606783][T20305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.660452][T20300] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 583.283485][T20324] comedi comedi3: pcl818: I/O base address or length out of range [ 583.572001][T12286] e1000 0000:00:06.0 eth0: Reset adapter [ 583.809723][T20339] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 584.268450][T20362] Set syz0 is full, maxelem 0 reached [ 584.736141][T20378] Set syz0 is full, maxelem 0 reached [ 586.135291][T12286] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 590.232021][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 590.235818][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 594.355455][ T83] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 601.316438][ T5896] usb 5-1: USB disconnect, device number 2 [ 601.405992][T20407] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 602.535912][T20455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3831'. [ 602.619138][T20455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3831'. [ 602.667484][T20459] clocksource: Switched to clocksource kvm-clock [ 602.756769][T20455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3831'. [ 602.977905][ T42] kauditd_printk_skb: 41 callbacks suppressed [ 602.977918][ T42] audit: type=1800 audit(1785441548.167:4286): pid=20472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3833" name="trace_pipe" dev="tracefs" ino=2152 res=0 errno=0 [ 603.747516][T20494] tipc: Enabled bearer , priority 10 [ 604.125532][T20518] smc: removing ib device syz2 [ 604.201577][T20518] smbdirect: ib_dev[syz2] removed [ 604.213204][T20523] tracefs: Bad value for 'gid' [ 604.214925][T20523] tracefs: Bad value for 'gid' [ 604.265838][T20523] xt_hashlimit: overflow, try lower: 0/0 [ 606.224287][T20563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.230298][T20563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.543357][T20563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.555903][T20563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.676073][T20582] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 606.685995][T20582] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 606.752925][T20582] pci 0000:00:1d.0: Adding to iommu group 7 [ 606.824752][T20582] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 606.839952][T20588] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 607.179230][T20582] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 286360 usecs [ 607.405355][T20582] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 607.495549][T20582] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 607.498735][T20582] uhci_hcd 0000:00:1d.0: detected 2 ports [ 607.522232][T20582] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 607.534116][T20582] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 607.537678][T20582] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 607.541893][T20582] usb usb1: Product: UHCI Host Controller [ 607.543833][T20582] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 607.547693][T20582] usb usb1: SerialNumber: 0000:00:1d.0 [ 607.962221][T20607] netlink: 'syz.2.3853': attribute type 62 has an invalid length. [ 609.226256][T20666] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 609.228380][T20666] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 609.231200][T20666] vhci_hcd vhci_hcd.0: Device attached [ 609.513165][ T9] usb 42-1: SetAddress Request (6) to port 0 [ 609.516038][ T9] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 609.705417][T13078] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 609.882901][T20708] tipc: Started in network mode [ 609.885600][T20708] tipc: Node identity 06c35313996b, cluster identity 4711 [ 609.890178][T20708] tipc: Enabled bearer , priority 0 [ 609.897939][T20708] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 609.908812][T13078] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 610.250622][T13078] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.310069][T13078] usb 10-1: Product: syz [ 610.311866][T13078] usb 10-1: Manufacturer: syz [ 610.313440][T13078] usb 10-1: SerialNumber: syz [ 610.714735][T20719] syzkaller0: entered promiscuous mode [ 610.716771][T20719] syzkaller0: entered allmulticast mode [ 611.095522][ T5840] tipc: Node number set to 2678608659 [ 612.164556][T20703] tipc: Disabling bearer [ 612.666083][T12286] usb 10-1: USB disconnect, device number 15 [ 612.934321][T20667] vhci_hcd: connection reset by peer [ 612.954369][ T5897] vhci_hcd vhci_hcd.2: stop threads [ 612.968132][ T5897] vhci_hcd vhci_hcd.2: release socket [ 612.979119][ T5897] vhci_hcd vhci_hcd.2: disconnect device [ 613.125471][T20776] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 613.375088][T20777] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.379572][T20777] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.436948][T20777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.442502][T20777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.555367][ T5825] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.558520][ T5825] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.561517][ T5825] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.564537][ T5825] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.726264][T20805] xt_hashlimit: max too large, truncated to 1048576 [ 614.092233][T20819] openvswitch: netlink: Message has 4 unknown bytes. [ 614.095074][T20819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.200871][T20813] null_blk: disk nullb1 created [ 614.283421][T20834] ubi: mtd0 is already attached to ubi0 [ 614.944231][ T9] usb 42-1: device descriptor read/8, error -110 [ 615.085772][T20848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.116563][T20850] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 615.193975][T20848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3889'. [ 615.231443][T20859] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 615.320615][T20850] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 615.359862][T20850] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 615.370475][T20850] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 615.375509][ T9] usb usb42-port1: attempt power cycle [ 615.398385][T20850] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 615.407829][T20850] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 615.437319][T20850] pci 0000:00:01.0: Adding to iommu group 1 [ 615.446863][T20850] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 615.449083][T20850] pci 0000:00:01.0: vgaarb: bridge control possible [ 615.451137][T20850] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 615.474513][T20850] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 615.480523][T20850] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 615.494683][T20850] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 615.542834][T20850] [drm] Found bochs VGA, ID 0xb0c5. [ 615.549524][T20850] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 615.612109][T20850] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 615.664303][T20850] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 616.003335][ T9] usb usb42-port1: unable to enumerate USB device [ 616.323915][ T42] audit: type=1804 audit(1785441560.627:4287): pid=20887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3895" name="bus" dev="ramfs" ino=77919 res=1 errno=0 [ 616.332019][ T42] audit: type=1804 audit(1785441560.636:4288): pid=20887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3895" name="bus" dev="ramfs" ino=77919 res=1 errno=0 [ 616.598711][T20888] xt_CT: You must specify a L4 protocol and not use inversions on it [ 618.046357][T20899] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3897'. [ 618.114429][T20903] FAULT_INJECTION: forcing a failure. [ 618.114429][T20903] name failslab, interval 1, probability 0, space 0, times 0 [ 618.119849][T20903] CPU: 2 UID: 0 PID: 20903 Comm: syz.2.3898 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.119875][T20903] Tainted: [L]=SOFTLOCKUP [ 618.119881][T20903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 618.119890][T20903] Call Trace: [ 618.119926][T20903] [ 618.119933][T20903] dump_stack_lvl+0x100/0x190 [ 618.120146][T20903] should_fail_ex.cold+0x5/0xa [ 618.120192][T20903] should_failslab+0xc2/0x120 [ 618.120276][T20903] __kmalloc_cache_noprof+0x91/0x6c0 [ 618.120305][T20903] ? __pfx_add_uevent_var+0x10/0x10 [ 618.120417][T20903] ? call_usermodehelper_setup+0xaf/0x360 [ 618.120482][T20903] ? __pfx_cleanup_uevent_env+0x10/0x10 [ 618.120511][T20903] call_usermodehelper_setup+0xaf/0x360 [ 618.120541][T20903] kobject_uevent_env+0x17c1/0x18b0 [ 618.120565][T20903] ? bus_to_subsys+0x114/0x150 [ 618.120670][T20903] device_del+0x605/0x9b0 [ 618.120696][T20903] ? __pfx_device_del+0x10/0x10 [ 618.120726][T20903] device_unregister+0x1d/0xe0 [ 618.120748][T20903] device_destroy+0x99/0xe0 [ 618.120771][T20903] ? __pfx_device_destroy+0x10/0x10 [ 618.120800][T20903] tty_unregister_device+0x82/0x1c0 [ 618.120847][T20903] gserial_free_line+0x107/0x1e0 [ 618.120903][T20903] obex_free_inst+0x3b/0x50 [ 618.120924][T20903] usb_put_function_instance+0x89/0xc0 [ 618.120952][T20903] ? __pfx_obex_attr_release+0x10/0x10 [ 618.120971][T20903] config_item_cleanup+0x146/0x240 [ 618.121017][T20903] config_item_put+0x93/0xb0 [ 618.121039][T20903] configfs_rmdir+0x5e3/0x950 [ 618.121065][T20903] ? __pfx_configfs_rmdir+0x10/0x10 [ 618.121085][T20903] ? __pfx_down_write+0x10/0x10 [ 618.121138][T20903] vfs_rmdir+0x328/0x8a0 [ 618.121214][T20903] filename_rmdir+0x31a/0x5c0 [ 618.121237][T20903] ? __pfx_filename_rmdir+0x10/0x10 [ 618.121267][T20903] ? do_getname+0x191/0x390 [ 618.121291][T20903] __ia32_sys_rmdir+0x45/0x60 [ 618.121311][T20903] __do_fast_syscall_32+0xe7/0x970 [ 618.121334][T20903] ? lockdep_hardirqs_on+0x78/0x100 [ 618.121358][T20903] do_fast_syscall_32+0x32/0x70 [ 618.121381][T20903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 618.121417][T20903] RIP: 0023:0xf702efec [ 618.121444][T20903] Code: Unable to access opcode bytes at 0xf702efc2. [ 618.121482][T20903] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000028 [ 618.121499][T20903] RAX: ffffffffffffffda RBX: 0000000080000440 RCX: 0000000000000000 [ 618.121510][T20903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.121520][T20903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.121530][T20903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.121540][T20903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.121564][T20903] [ 618.330579][T20911] gretap2: entered promiscuous mode [ 618.474943][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3900'. [ 618.489693][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3900'. [ 618.496041][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3900'. [ 618.507033][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3900'. [ 618.512278][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3900'. [ 618.537129][T13078] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 618.698445][T13078] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.702091][T13078] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 618.708179][T13078] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 618.711427][T13078] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.714201][T13078] usb 10-1: Product: syz [ 618.715753][T13078] usb 10-1: Manufacturer: syz [ 618.718060][T13078] usb 10-1: SerialNumber: syz [ 619.765057][T20924] Set syz0 is full, maxelem 0 reached [ 619.798768][T20925] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 619.801586][T20925] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 619.805585][T20925] vhci_hcd vhci_hcd.0: Device attached [ 619.848685][T20925] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 620.139988][ T846] usb 38-1: SetAddress Request (2) to port 0 [ 620.141851][ T846] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 620.531192][T20926] vhci_hcd: connection reset by peer [ 620.535595][ T5825] vhci_hcd vhci_hcd.0: stop threads [ 620.540676][ T5825] vhci_hcd vhci_hcd.0: release socket [ 620.545142][ T5825] vhci_hcd vhci_hcd.0: disconnect device [ 620.870366][T20939] tracefs: Bad value for 'gid' [ 620.872020][T20939] tracefs: Bad value for 'gid' [ 621.535190][T13078] usb 10-1: USB disconnect, device number 16 [ 621.728903][T20954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3908'. [ 621.771006][T20954] input: syz0 as /devices/virtual/input/input25 [ 622.833744][T20977] tracefs: Bad value for 'gid' [ 622.844141][T20977] tracefs: Bad value for 'gid' [ 622.883077][T20977] xt_hashlimit: overflow, try lower: 0/0 [ 622.896443][ T42] audit: type=1400 audit(1785441566.800:4289): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20971 comm="syz.2.3910" [ 622.898842][T20978] 9p: Bad value for 'rfdno' [ 623.746908][ T1044] hid_parser_main: 13 callbacks suppressed [ 623.746934][ T1044] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 623.793108][ T1044] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 624.019913][T21004] syzkaller0: entered allmulticast mode [ 624.620423][T21040] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 625.551846][ T846] usb 38-1: device descriptor read/8, error -110 [ 625.968105][T21075] comedi comedi3: pcl818: I/O base address or length out of range [ 625.978237][ T846] usb usb38-port1: attempt power cycle [ 626.203626][T21083] input: syz0 as /devices/virtual/input/input26 [ 626.211402][T21083] FAULT_INJECTION: forcing a failure. [ 626.211402][T21083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.216609][T21083] CPU: 3 UID: 0 PID: 21083 Comm: syz.0.3927 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.216629][T21083] Tainted: [L]=SOFTLOCKUP [ 626.216633][T21083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 626.216640][T21083] Call Trace: [ 626.216644][T21083] [ 626.216649][T21083] dump_stack_lvl+0x100/0x190 [ 626.216668][T21083] should_fail_ex.cold+0x5/0xa [ 626.216681][T21083] _copy_from_user+0x2e/0xd0 [ 626.216754][T21083] input_event_from_user+0x137/0x290 [ 626.216838][T21083] ? __pfx_input_event_from_user+0x10/0x10 [ 626.216867][T21083] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 626.216890][T21083] ? input_event+0x93/0xb0 [ 626.216908][T21083] uinput_write+0xb9f/0xf60 [ 626.216923][T21083] ? __pfx_uinput_write+0x10/0x10 [ 626.216936][T21083] ? bpf_lsm_file_permission+0x9/0x10 [ 626.216958][T21083] ? security_file_permission+0x76/0x210 [ 626.217015][T21083] ? rw_verify_area+0xce/0x6d0 [ 626.217034][T21083] vfs_write+0x2aa/0x1050 [ 626.217045][T21083] ? __pfx_uinput_write+0x10/0x10 [ 626.217057][T21083] ? __pfx_vfs_write+0x10/0x10 [ 626.217066][T21083] ? find_held_lock+0x2b/0x80 [ 626.217101][T21083] ? __fget_files+0x215/0x3d0 [ 626.217111][T21083] ? __fget_files+0x215/0x3d0 [ 626.217123][T21083] ? __fget_files+0x21f/0x3d0 [ 626.217137][T21083] ksys_write+0x1f8/0x250 [ 626.217147][T21083] ? __pfx_ksys_write+0x10/0x10 [ 626.217184][T21083] ? ksys_write+0x1ac/0x250 [ 626.217194][T21083] ? __pfx_ksys_write+0x10/0x10 [ 626.217207][T21083] __do_fast_syscall_32+0xe7/0x970 [ 626.217221][T21083] ? lockdep_hardirqs_on+0x78/0x100 [ 626.217235][T21083] do_fast_syscall_32+0x32/0x70 [ 626.217249][T21083] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 626.217263][T21083] RIP: 0023:0xf7fe8fec [ 626.217278][T21083] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 626.217296][T21083] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 626.217307][T21083] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 626.217314][T21083] RDX: 000000000000fe4f RSI: 0000000000000000 RDI: 0000000000000000 [ 626.217320][T21083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 626.217330][T21083] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 626.217337][T21083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 626.217351][T21083] [ 626.650754][T21090] FAULT_INJECTION: forcing a failure. [ 626.650754][T21090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.655049][T21090] CPU: 3 UID: 0 PID: 21090 Comm: syz.0.3928 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.655079][T21090] Tainted: [L]=SOFTLOCKUP [ 626.655083][T21090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 626.655091][T21090] Call Trace: [ 626.655095][T21090] [ 626.655100][T21090] dump_stack_lvl+0x100/0x190 [ 626.655118][T21090] should_fail_ex.cold+0x5/0xa [ 626.655131][T21090] _copy_from_user+0x2e/0xd0 [ 626.655149][T21090] generic_map_update_batch+0x452/0x800 [ 626.655179][T21090] ? __pfx_generic_map_update_batch+0x10/0x10 [ 626.655193][T21090] ? __pfx_generic_map_update_batch+0x10/0x10 [ 626.655204][T21090] bpf_map_do_batch+0x66f/0x6d0 [ 626.655223][T21090] __sys_bpf+0x4ce/0x4e80 [ 626.655238][T21090] ? __pfx___sys_bpf+0x10/0x10 [ 626.655250][T21090] ? find_held_lock+0x2b/0x80 [ 626.655264][T21090] ? get_pid_task+0xfc/0x250 [ 626.655279][T21090] ? get_pid_task+0xfc/0x250 [ 626.655295][T21090] ? proc_fail_nth_write+0x9f/0x220 [ 626.655313][T21090] ? find_held_lock+0x2b/0x80 [ 626.655329][T21090] ? rcu_read_lock_any_held+0x6a/0xa0 [ 626.655344][T21090] ? find_held_lock+0x2b/0x80 [ 626.655356][T21090] ? ksys_write+0x190/0x250 [ 626.655366][T21090] ? ksys_write+0x190/0x250 [ 626.655386][T21090] ? fput+0x79/0x100 [ 626.655399][T21090] ? __ia32_sys_bpf+0xcc/0x170 [ 626.655410][T21090] __ia32_sys_bpf+0xcc/0x170 [ 626.655422][T21090] ? __do_fast_syscall_32+0x98/0x970 [ 626.655438][T21090] __do_fast_syscall_32+0xe7/0x970 [ 626.655451][T21090] ? lockdep_hardirqs_on+0x78/0x100 [ 626.655466][T21090] do_fast_syscall_32+0x32/0x70 [ 626.655484][T21090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 626.655498][T21090] RIP: 0023:0xf7fe8fec [ 626.655511][T21090] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 626.655516][T21090] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 626.655528][T21090] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000a80 [ 626.655534][T21090] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 626.655540][T21090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 626.655546][T21090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.655565][T21090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 626.655579][T21090] [ 626.832934][ T846] usb usb38-port1: unable to enumerate USB device [ 627.414335][T14707] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 628.689761][T21107] tracefs: Bad value for 'gid' [ 628.691537][T21107] tracefs: Bad value for 'gid' [ 628.696703][T21107] xt_hashlimit: overflow, try lower: 0/0 [ 628.799711][T21110] overlay: Unknown parameter '/' [ 628.804141][T21110] netlink: zone id is out of range [ 628.806023][T21110] netlink: zone id is out of range [ 628.807842][T21110] netlink: zone id is out of range [ 628.810633][T21110] netlink: zone id is out of range [ 630.098717][T21139] tracefs: Bad value for 'gid' [ 630.100750][T21139] tracefs: Bad value for 'gid' [ 630.107712][T21139] xt_hashlimit: overflow, try lower: 0/0 [ 630.371764][T21142] overlay: Unknown parameter 'dont_hash' [ 630.838514][T21151] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 631.248956][T21161] netlink: 'syz.5.3947': attribute type 4 has an invalid length. [ 631.309798][T21162] netlink: 'syz.5.3947': attribute type 4 has an invalid length. [ 631.526596][ T5535] lo speed is unknown, defaulting to 1000 [ 631.535109][T12286] lo speed is unknown, defaulting to 1000 [ 631.542544][T12286] lo speed is unknown, defaulting to 1000 [ 631.816547][T21170] FAULT_INJECTION: forcing a failure. [ 631.816547][T21170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.821747][T17895] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 631.829549][T21170] CPU: 3 UID: 0 PID: 21170 Comm: syz.5.3949 Tainted: G L syzkaller #0 PREEMPT(full) [ 631.829582][T21170] Tainted: [L]=SOFTLOCKUP [ 631.829588][T21170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 631.829599][T21170] Call Trace: [ 631.829606][T21170] [ 631.829613][T21170] dump_stack_lvl+0x100/0x190 [ 631.829641][T21170] should_fail_ex.cold+0x5/0xa [ 631.829664][T21170] _copy_to_user+0x32/0xd0 [ 631.829690][T21170] simple_read_from_buffer+0xcb/0x170 [ 631.829731][T21170] proc_fail_nth_read+0x1af/0x230 [ 631.829755][T21170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 631.829778][T21170] ? rw_verify_area+0xce/0x6d0 [ 631.829803][T21170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 631.829826][T21170] vfs_read+0x1e4/0xb40 [ 631.829845][T21170] ? __pfx_vfs_read+0x10/0x10 [ 631.829870][T21170] ? find_held_lock+0x2b/0x80 [ 631.829893][T21170] ? __fget_files+0x215/0x3d0 [ 631.829915][T21170] ? __fget_files+0x21f/0x3d0 [ 631.829940][T21170] ksys_read+0x12a/0x250 [ 631.829956][T21170] ? __pfx_ksys_read+0x10/0x10 [ 631.829979][T21170] do_int80_emulation+0x14b/0x720 [ 631.830006][T21170] asm_int80_emulation+0x1a/0x20 [ 631.830023][T21170] RIP: 0023:0xf71c736b [ 631.830036][T21170] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 631.830052][T21170] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 631.830071][T21170] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54865d0 [ 631.830081][T21170] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 631.830091][T21170] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 631.830101][T21170] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 631.830112][T21170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 631.830136][T21170] [ 631.831274][T17895] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 631.903091][T21173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3950'. [ 631.930912][T17895] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 631.949516][T17895] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 631.957397][T17895] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 632.072181][T21184] netlink: 'syz.5.3950': attribute type 1 has an invalid length. [ 632.074827][T21184] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3950'. [ 632.192458][T21192] tracefs: Bad value for 'gid' [ 632.198467][T21192] tracefs: Bad value for 'gid' [ 632.204652][T21192] xt_hashlimit: overflow, try lower: 0/0 [ 632.417838][T21166] lo speed is unknown, defaulting to 1000 [ 633.023174][T21166] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.028042][T21166] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.033398][T21166] bridge_slave_0: entered allmulticast mode [ 633.038823][T21166] bridge_slave_0: entered promiscuous mode [ 633.047266][T21166] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.052145][T21166] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.057447][T21166] bridge_slave_1: entered allmulticast mode [ 633.062673][T21166] bridge_slave_1: entered promiscuous mode [ 633.113313][T21166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.131497][T21166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.181828][T21166] team0: Port device team_slave_0 added [ 633.195694][T21166] team0: Port device team_slave_1 added [ 633.250234][T21166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.255373][T21166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.275017][T21166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.282424][T21166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.287118][T21166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.306504][T21166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.365505][T21166] hsr_slave_0: entered promiscuous mode [ 633.370097][T21166] hsr_slave_1: entered promiscuous mode [ 633.376788][T21166] debugfs: 'hsr0' already exists in 'hsr' [ 633.385267][T21166] Cannot create hsr debugfs directory [ 633.649164][ T846] libceph: connect (1)[c::]:6789 error -101 [ 633.652728][ T846] libceph: mon0 (1)[c::]:6789 connect error [ 633.658529][T21198] ceph: No mds server is up or the cluster is laggy [ 633.869638][T21166] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 633.875017][T21166] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 633.878128][T21166] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 633.882673][T21166] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 633.885540][T21166] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 633.890413][T21166] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 633.893615][T21166] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 633.904530][T21166] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 633.977558][T21166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.995866][T21166] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.006197][T14708] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.008582][T14708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.025170][T14708] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.027538][T14708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.198112][ T5104] Bluetooth: hci3: command tx timeout [ 634.212756][T21520] tracefs: Bad value for 'gid' [ 634.214435][T21520] tracefs: Bad value for 'gid' [ 634.217024][T21520] xt_hashlimit: overflow, try lower: 0/0 [ 634.386014][T21166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.536174][T21456] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 634.548952][T21166] veth0_vlan: entered promiscuous mode [ 634.554600][T21456] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 634.559550][T21456] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 634.563257][T21166] veth1_vlan: entered promiscuous mode [ 634.604190][T21166] veth0_macvtap: entered promiscuous mode [ 634.616902][T21166] veth1_macvtap: entered promiscuous mode [ 634.657432][T21166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.665790][T21456] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 634.674180][T21166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.676913][T21456] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 634.689513][ T5897] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.692336][ T5897] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.699147][T21456] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 634.701849][ T5897] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.706139][ T5897] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.859976][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.869693][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.916054][T14706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.920835][T14706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.833465][T21593] tracefs: Bad value for 'gid' [ 635.841632][T21593] tracefs: Bad value for 'gid' [ 635.850747][T21593] xt_hashlimit: overflow, try lower: 0/0 [ 635.983234][ T5104] Bluetooth: hci4: command 0x0c1a tx timeout [ 636.112030][T21596] batadv_slave_1: entered promiscuous mode [ 636.367029][T21602] FAULT_INJECTION: forcing a failure. [ 636.367029][T21602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.377612][T21602] CPU: 0 UID: 0 PID: 21602 Comm: syz.6.3971 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.377634][T21602] Tainted: [L]=SOFTLOCKUP [ 636.377638][T21602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 636.377644][T21602] Call Trace: [ 636.377649][T21602] [ 636.377654][T21602] dump_stack_lvl+0x100/0x190 [ 636.377673][T21602] should_fail_ex.cold+0x5/0xa [ 636.377686][T21602] _copy_to_user+0x32/0xd0 [ 636.377705][T21602] simple_read_from_buffer+0xcb/0x170 [ 636.377724][T21602] proc_fail_nth_read+0x1af/0x230 [ 636.377740][T21602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 636.377755][T21602] ? rw_verify_area+0xce/0x6d0 [ 636.377771][T21602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 636.377785][T21602] vfs_read+0x1e4/0xb40 [ 636.377797][T21602] ? __pfx_vfs_read+0x10/0x10 [ 636.377813][T21602] ? find_held_lock+0x2b/0x80 [ 636.377827][T21602] ? __fget_files+0x215/0x3d0 [ 636.377840][T21602] ? __fget_files+0x21f/0x3d0 [ 636.377853][T21602] ksys_read+0x12a/0x250 [ 636.377863][T21602] ? __pfx_ksys_read+0x10/0x10 [ 636.377877][T21602] do_int80_emulation+0x14b/0x720 [ 636.377894][T21602] asm_int80_emulation+0x1a/0x20 [ 636.377905][T21602] RIP: 0023:0xf711736b [ 636.377914][T21602] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 636.377928][T21602] RSP: 002b:00000000f53ac4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 636.377941][T21602] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53ac5d0 [ 636.377949][T21602] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 636.377955][T21602] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 636.377961][T21602] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 636.377967][T21602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 636.377981][T21602] [ 636.763456][ T5104] Bluetooth: hci1: command 0x0406 tx timeout [ 636.841233][ T5104] Bluetooth: hci3: command 0x040f tx timeout [ 636.880132][T21594] batadv_slave_1: left promiscuous mode [ 636.967167][T21642] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 636.990230][T21643] tracefs: Bad value for 'gid' [ 636.995939][T21643] tracefs: Bad value for 'gid' [ 637.005072][T21643] xt_hashlimit: overflow, try lower: 0/0 [ 637.264752][T21654] binder: 21648:21654 ioctl 80089418 80000280 returned -22 [ 637.936211][T21626] netlink: 'syz.2.3975': attribute type 2 has an invalid length. [ 637.945555][T21626] : entered promiscuous mode [ 638.296792][T21700] hugetlbfs: syz.0.3987 (21700): Using mlock ulimits for SHM_HUGETLB is obsolete [ 638.350862][T21704] netlink: 'syz.0.3989': attribute type 13 has an invalid length. [ 638.388378][ T5896] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 638.431398][T18125] bond1: (slave gretap1): link status up again after 0 ms [ 638.438413][T18125] bond1: (slave dummy0): link status up again after 0 ms [ 638.440697][T18125] bond1: (slave gretap1): failed to get link speed/duplex [ 638.460036][T18125] bond1: (slave dummy0): failed to get link speed/duplex [ 638.570167][T18125] bond1: (slave gretap1): failed to get link speed/duplex [ 638.576038][T18125] bond1: (slave dummy0): failed to get link speed/duplex [ 638.607388][ T5896] usb 7-1: device descriptor read/64, error -71 [ 638.709088][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 638.712744][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 638.826676][T18125] bond1: (slave gretap1): failed to get link speed/duplex [ 638.828995][T18125] bond1: (slave dummy0): failed to get link speed/duplex [ 638.858837][ T5896] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 638.922202][T21736] 8021q: VLANs not supported on ip6_vti0 [ 638.951164][T21743] FAULT_INJECTION: forcing a failure. [ 638.951164][T21743] name failslab, interval 1, probability 0, space 0, times 0 [ 638.956439][T21743] CPU: 0 UID: 0 PID: 21743 Comm: syz.5.3998 Tainted: G L syzkaller #0 PREEMPT(full) [ 638.956458][T21743] Tainted: [L]=SOFTLOCKUP [ 638.956462][T21743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 638.956468][T21743] Call Trace: [ 638.956472][T21743] [ 638.956477][T21743] dump_stack_lvl+0x100/0x190 [ 638.956495][T21743] should_fail_ex.cold+0x5/0xa [ 638.956508][T21743] should_failslab+0xc2/0x120 [ 638.956525][T21743] __kmalloc_noprof+0xfc/0x820 [ 638.956539][T21743] ? rcu_is_watching+0x12/0xc0 [ 638.956553][T21743] ? tomoyo_realpath_from_path+0xb6/0x690 [ 638.956573][T21743] tomoyo_realpath_from_path+0xb6/0x690 [ 638.956592][T21743] tomoyo_path_number_perm+0x23c/0x580 [ 638.956605][T21743] ? tomoyo_path_number_perm+0x22e/0x580 [ 638.956620][T21743] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 638.956634][T21743] ? get_pid_task+0x106/0x250 [ 638.956661][T21743] ? find_held_lock+0x2b/0x80 [ 638.956674][T21743] ? __fget_files+0x215/0x3d0 [ 638.956684][T21743] ? hook_file_ioctl_common+0x140/0x440 [ 638.956729][T21743] ? __fget_files+0x215/0x3d0 [ 638.956742][T21743] ? __fget_files+0x21f/0x3d0 [ 638.956754][T21743] security_file_ioctl_compat+0xd3/0x230 [ 638.956769][T21743] __ia32_compat_sys_ioctl+0xc2/0x360 [ 638.956788][T21743] __do_fast_syscall_32+0xe7/0x970 [ 638.956803][T21743] ? lockdep_hardirqs_on+0x78/0x100 [ 638.956817][T21743] do_fast_syscall_32+0x32/0x70 [ 638.956831][T21743] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 638.956850][T21743] RIP: 0023:0xf7fc8fec [ 638.956864][T21743] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 638.956869][T21743] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 638.956880][T21743] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 638.956887][T21743] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 638.956893][T21743] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 638.956899][T21743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.956905][T21743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 638.956918][T21743] [ 638.957336][T21743] ERROR: Out of memory at tomoyo_realpath_from_path. [ 638.976398][ T5104] Bluetooth: hci1: command 0x0406 tx timeout [ 639.037248][ T5896] usb 7-1: device descriptor read/64, error -71 [ 639.062053][ T5104] Bluetooth: hci3: command 0x040f tx timeout [ 639.107614][T21747] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 639.149165][ T5896] usb usb7-port1: attempt power cycle [ 639.510836][ T5896] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 639.607510][ T5896] usb 7-1: device descriptor read/8, error -71 [ 639.896216][ T5896] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 639.928614][ T5896] usb 7-1: device descriptor read/8, error -71 [ 640.045782][ T5896] usb usb7-port1: unable to enumerate USB device [ 640.108103][T21781] FAULT_INJECTION: forcing a failure. [ 640.108103][T21781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.114619][T21781] CPU: 3 UID: 0 PID: 21781 Comm: syz.5.4006 Tainted: G L syzkaller #0 PREEMPT(full) [ 640.114640][T21781] Tainted: [L]=SOFTLOCKUP [ 640.114644][T21781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 640.114651][T21781] Call Trace: [ 640.114656][T21781] [ 640.114660][T21781] dump_stack_lvl+0x100/0x190 [ 640.114679][T21781] should_fail_ex.cold+0x5/0xa [ 640.114693][T21781] _copy_to_user+0x32/0xd0 [ 640.114711][T21781] simple_read_from_buffer+0xcb/0x170 [ 640.114731][T21781] proc_fail_nth_read+0x1af/0x230 [ 640.114747][T21781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 640.114762][T21781] ? rw_verify_area+0xce/0x6d0 [ 640.114779][T21781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 640.114794][T21781] vfs_read+0x1e4/0xb40 [ 640.114806][T21781] ? __pfx_vfs_read+0x10/0x10 [ 640.114825][T21781] ? find_held_lock+0x2b/0x80 [ 640.114840][T21781] ? __fget_files+0x215/0x3d0 [ 640.114853][T21781] ? __fget_files+0x21f/0x3d0 [ 640.114867][T21781] ksys_read+0x12a/0x250 [ 640.114877][T21781] ? __pfx_ksys_read+0x10/0x10 [ 640.114892][T21781] do_int80_emulation+0x14b/0x720 [ 640.114909][T21781] asm_int80_emulation+0x1a/0x20 [ 640.114921][T21781] RIP: 0023:0xf71c736b [ 640.114931][T21781] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 640.114941][T21781] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 640.114953][T21781] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54865d0 [ 640.114960][T21781] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 640.114967][T21781] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 640.114973][T21781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.114979][T21781] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 640.114993][T21781] [ 640.464670][T21809] fuse: fd is not a fuse device [ 640.505316][ T1044] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 640.678262][ T1044] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 640.681073][ T1044] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 640.684474][ T1044] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 640.687895][ T1044] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 640.691412][ T1044] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 640.696304][ T1044] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 640.700031][ T1044] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 640.702614][ T1044] usb 11-1: Product: syz [ 640.703974][ T1044] usb 11-1: Manufacturer: syz [ 640.940915][T21825] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 641.224768][T21830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4015'. [ 641.227696][T21830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4015'. [ 641.285581][ T5104] Bluetooth: hci3: command 0x040f tx timeout [ 641.350727][T21838] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4018'. [ 641.984568][T21859] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 642.006503][T21864] comedi comedi3: pcl818: I/O base address or length out of range [ 642.285233][T21866] FAULT_INJECTION: forcing a failure. [ 642.285233][T21866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.289978][T21866] CPU: 2 UID: 0 PID: 21866 Comm: syz.5.4025 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.289998][T21866] Tainted: [L]=SOFTLOCKUP [ 642.290002][T21866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 642.290010][T21866] Call Trace: [ 642.290015][T21866] [ 642.290020][T21866] dump_stack_lvl+0x100/0x190 [ 642.290039][T21866] should_fail_ex.cold+0x5/0xa [ 642.290052][T21866] _copy_from_user+0x2e/0xd0 [ 642.290070][T21866] get_compat_msghdr+0xb3/0x480 [ 642.290153][T21866] ? __pfx_get_compat_msghdr+0x10/0x10 [ 642.290178][T21866] ___sys_sendmsg+0x1b6/0x1e0 [ 642.290201][T21866] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.290220][T21866] ? find_held_lock+0x2b/0x80 [ 642.290242][T21866] __sys_sendmsg+0x160/0x210 [ 642.290273][T21866] ? __pfx___sys_sendmsg+0x10/0x10 [ 642.290292][T21866] ? __pfx_ksys_write+0x10/0x10 [ 642.290306][T21866] __do_fast_syscall_32+0xe7/0x970 [ 642.290321][T21866] ? lockdep_hardirqs_on+0x78/0x100 [ 642.290339][T21866] do_fast_syscall_32+0x32/0x70 [ 642.290359][T21866] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 642.290374][T21866] RIP: 0023:0xf7fc8fec [ 642.290388][T21866] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 642.290393][T21866] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 642.290405][T21866] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 642.290412][T21866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 642.290418][T21866] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 642.290424][T21866] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 642.290431][T21866] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 642.290444][T21866] [ 642.400928][ T42] audit: type=1800 audit(1785441814.048:4290): pid=21868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4026" name="bMatrixCoefficients" dev="configfs" ino=78755 res=0 errno=0 [ 642.412057][ T42] audit: type=1800 audit(1785441814.048:4291): pid=21868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4026" name="bColorPrimaries" dev="configfs" ino=78756 res=0 errno=0 [ 642.431191][T21870] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4027'. [ 642.460922][ T5104] Bluetooth: hci4: Malformed LE Event: 0x0b [ 642.560392][T21881] tunl0: entered promiscuous mode [ 642.565647][T21881] netlink: 'syz.5.4031': attribute type 4 has an invalid length. [ 642.569902][T21881] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4031'. [ 643.133365][T21894] FAULT_INJECTION: forcing a failure. [ 643.133365][T21894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.139218][T21894] CPU: 0 UID: 0 PID: 21894 Comm: syz.0.4036 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.139251][T21894] Tainted: [L]=SOFTLOCKUP [ 643.139258][T21894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 643.139270][T21894] Call Trace: [ 643.139277][T21894] [ 643.139285][T21894] dump_stack_lvl+0x100/0x190 [ 643.139314][T21894] should_fail_ex.cold+0x5/0xa [ 643.139336][T21894] _copy_from_iter+0x1f4/0x1690 [ 643.139375][T21894] ? __lock_acquire+0x49f/0x1a40 [ 643.139407][T21894] ? __pfx__copy_from_iter+0x10/0x10 [ 643.139437][T21894] ? _parse_integer_limit+0x1ac/0x220 [ 643.139467][T21894] tun_get_user+0x265/0x3c20 [ 643.139506][T21894] ? aa_file_perm+0x7f3/0x14d0 [ 643.139541][T21894] ? __pfx_tun_get_user+0x10/0x10 [ 643.139564][T21894] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 643.139592][T21894] ? find_held_lock+0x2b/0x80 [ 643.139614][T21894] ? tun_get+0x191/0x370 [ 643.139632][T21894] ? tun_get+0x191/0x370 [ 643.139658][T21894] tun_chr_write_iter+0xdc/0x200 [ 643.139682][T21894] vfs_write+0x6ac/0x1050 [ 643.139702][T21894] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 643.139727][T21894] ? __pfx_vfs_write+0x10/0x10 [ 643.139743][T21894] ? find_held_lock+0x2b/0x80 [ 643.139782][T21894] ksys_write+0x12a/0x250 [ 643.139801][T21894] ? __pfx_ksys_write+0x10/0x10 [ 643.139816][T21894] ? ksys_write+0x1ac/0x250 [ 643.139834][T21894] ? __pfx_ksys_write+0x10/0x10 [ 643.139855][T21894] __do_fast_syscall_32+0xe7/0x970 [ 643.139880][T21894] ? lockdep_hardirqs_on+0x78/0x100 [ 643.139904][T21894] do_fast_syscall_32+0x32/0x70 [ 643.139929][T21894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 643.139953][T21894] RIP: 0023:0xf7fe8fec [ 643.139974][T21894] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 643.139984][T21894] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 643.140003][T21894] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 643.140015][T21894] RDX: 000000000000004a RSI: 0000000000000000 RDI: 0000000000000000 [ 643.140026][T21894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 643.140036][T21894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.140047][T21894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 643.140072][T21894] [ 643.437152][T21905] fuse: fd is not a fuse device [ 643.509376][ T5104] Bluetooth: hci3: command 0x040f tx timeout [ 643.581555][ T1044] usb 11-1: USB disconnect, device number 2 [ 643.750289][T21917] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4039'. [ 643.754591][T21917] veth1_macvtap: left promiscuous mode [ 643.894201][T18125] net_ratelimit: 80 callbacks suppressed [ 643.894219][T18125] bond1: (slave gretap1): failed to get link speed/duplex [ 643.899601][T18125] bond1: (slave dummy0): failed to get link speed/duplex [ 644.009580][T21940] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4042'. [ 644.011663][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 644.016357][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 644.129601][T18125] bond1: (slave gretap1): failed to get link speed/duplex [ 644.132877][T18125] bond1: (slave dummy0): failed to get link speed/duplex [ 644.246829][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 644.349373][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 644.378030][T21948] lo speed is unknown, defaulting to 1000 [ 644.515109][T18125] bond1: (slave gretap1): failed to get link speed/duplex [ 644.517796][T18125] bond1: (slave dummy0): failed to get link speed/duplex [ 645.160581][T21983] lo speed is unknown, defaulting to 1000 [ 645.163427][T21983] lo speed is unknown, defaulting to 1000 [ 645.175782][T21983] lo speed is unknown, defaulting to 1000 [ 645.196447][T21983] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 645.202145][T21983] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 645.208405][T21983] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 645.315569][T21983] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 645.514498][T21983] lo speed is unknown, defaulting to 1000 [ 645.534183][T21983] lo speed is unknown, defaulting to 1000 [ 645.558599][T21983] lo speed is unknown, defaulting to 1000 [ 645.571631][T21983] lo speed is unknown, defaulting to 1000 [ 645.585429][T21983] lo speed is unknown, defaulting to 1000 [ 645.596936][T21983] lo speed is unknown, defaulting to 1000 [ 645.600556][T22008] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 645.612853][T21983] lo speed is unknown, defaulting to 1000 [ 645.671952][T21983] lo speed is unknown, defaulting to 1000 [ 645.697282][T21983] lo speed is unknown, defaulting to 1000 [ 645.709525][T21983] lo speed is unknown, defaulting to 1000 [ 645.717453][T21983] lo speed is unknown, defaulting to 1000 [ 645.733839][ T5104] Bluetooth: hci3: command 0x040f tx timeout [ 646.284524][T22031] xt_hashlimit: overflow, try lower: 0/0 [ 646.773951][T22038] program syz.0.4054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 647.196153][T22050] fuse: fd is not a fuse device [ 647.390146][ T5840] e1000 0000:00:06.0 eth0: Reset adapter [ 647.594673][T22086] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 647.596856][T22086] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 647.614395][T22086] vhci_hcd vhci_hcd.0: Device attached [ 647.644891][T22083] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 647.811834][T22092] tmpfs: Bad value for 'mpol' [ 647.914488][ T5840] e1000 0000:00:06.0 eth0: Reset adapter [ 647.977972][T12494] usb 48-1: SetAddress Request (10) to port 0 [ 647.980467][T12494] usb 48-1: new SuperSpeed USB device number 10 using vhci_hcd [ 648.067778][T13078] e1000e 0000:00:02.0 eth5: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 648.159848][ T5840] e1000 0000:00:06.0 eth0: Reset adapter [ 648.392802][T22087] vhci_hcd: connection reset by peer [ 648.411042][ T5825] vhci_hcd vhci_hcd.5: stop threads [ 648.416173][ T5840] e1000 0000:00:06.0 eth0: Reset adapter [ 648.418766][ T5825] vhci_hcd vhci_hcd.5: release socket [ 648.421479][ T5825] vhci_hcd vhci_hcd.5: disconnect device [ 649.356987][ T5825] net_ratelimit: 52 callbacks suppressed [ 649.357012][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 649.362252][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 649.474607][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 649.476957][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 649.592310][T18125] bond1: (slave gretap1): failed to get link speed/duplex [ 649.595302][T18125] bond1: (slave dummy0): failed to get link speed/duplex [ 649.720416][T18125] bond1: (slave gretap1): failed to get link speed/duplex [ 649.722746][T18125] bond1: (slave dummy0): failed to get link speed/duplex [ 649.838159][T18125] bond1: (slave gretap1): failed to get link speed/duplex [ 649.841182][T18125] bond1: (slave dummy0): failed to get link speed/duplex [ 650.790418][ T5535] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 653.430509][T12494] usb 48-1: device descriptor read/8, error -110 [ 653.858590][T12494] usb usb48-port1: attempt power cycle [ 654.457677][T12494] usb usb48-port1: unable to enumerate USB device [ 654.788575][ T5825] net_ratelimit: 82 callbacks suppressed [ 654.788600][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 654.792931][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 654.916285][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 654.920101][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 655.033700][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 655.035906][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 655.151298][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 655.154193][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 655.268877][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 655.271187][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 655.923494][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 655.925572][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.143842][ T5825] net_ratelimit: 80 callbacks suppressed [ 660.143860][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 660.148599][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 660.261444][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 660.263797][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 660.389834][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 660.392349][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 660.507349][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 660.510513][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 660.584327][T14708] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 660.624949][T18125] bond1: (slave gretap1): failed to get link speed/duplex [ 660.628085][T18125] bond1: (slave dummy0): failed to get link speed/duplex [ 662.129780][T22156] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4071'. [ 662.199396][T22163] fuse: fd is not a fuse device [ 662.451410][T22157] batadv_slave_1: entered promiscuous mode [ 662.579104][T22155] batadv_slave_1: left promiscuous mode [ 663.445633][T22177] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 663.512904][T22180] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 663.583030][T22180] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 663.647676][T22180] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 663.669406][T22182] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 663.681460][T22180] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 663.704876][T22180] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 663.723060][T22180] pci 0000:00:01.0: Adding to iommu group 1 [ 663.731293][T22180] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 663.733615][T22180] pci 0000:00:01.0: vgaarb: bridge control possible [ 663.736088][T22180] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 663.751329][T22180] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 663.754894][T22180] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 663.765675][T22186] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 663.768340][T22180] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 664.016265][T22194] tunl0: left promiscuous mode [ 664.085347][T22180] [drm] Found bochs VGA, ID 0xb0c5. [ 664.088720][T22180] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 664.188303][T22180] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 664.555867][T22212] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 664.755421][T22215] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 665.233213][T22180] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 665.623436][T22214] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 665.792300][T22230] netlink: 'syz.2.4080': attribute type 1 has an invalid length. [ 665.824221][T22214] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 665.827417][T22214] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 665.830421][T22214] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 665.836486][T22214] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 665.883689][T22214] pci 0000:00:01.0: Adding to iommu group 1 [ 665.910491][T22194] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.914324][T22194] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.927677][T22214] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 665.930484][T22214] pci 0000:00:01.0: vgaarb: bridge control possible [ 665.933156][T22214] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 665.996338][T22214] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 666.010120][T22214] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 666.025955][T22214] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 666.065493][T22214] [drm] Found bochs VGA, ID 0xb0c5. [ 666.076503][T22214] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 666.114151][T22214] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 666.289109][T22243] fuse: fd is not a fuse device [ 666.479240][T22194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.485151][T22194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.545159][ T846] lo speed is unknown, defaulting to 1000 [ 666.547534][T18125] net_ratelimit: 49 callbacks suppressed [ 666.547562][T18125] bond1: (slave gretap1): failed to get link speed/duplex [ 666.547581][T18125] bond1: (slave dummy0): failed to get link speed/duplex [ 666.570984][ T846] syz2: Port: 1 Link DOWN [ 666.593100][T22230] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 666.595885][T22237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4080'. [ 666.665798][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 666.673260][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 666.793804][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 666.798965][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 666.921647][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 666.926980][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 667.050292][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 667.056037][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 667.253085][ T5840] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 667.436539][ T5840] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 667.442757][ T5840] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 667.450244][ T5840] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 667.455730][ T5840] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 667.464796][ T5840] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 667.472045][ T5840] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 667.481348][ T5840] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 667.485927][ T5840] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 667.492475][ T5840] usb 10-1: Product: syz [ 667.494716][ T5840] usb 10-1: Manufacturer: syz [ 668.416552][T22297] netlink: 'syz.0.4090': attribute type 10 has an invalid length. [ 668.429797][T22297] team0: Device bond0 is already an upper device of the team interface [ 668.658584][T22297] syz_tun: left promiscuous mode [ 668.807494][T22297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.862831][T22297] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.880761][T22297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.294192][T22297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.319164][T22297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.405542][T22297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 669.426678][T22297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 669.460308][T22297] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 669.743694][T22297] veth1_vlan: left promiscuous mode [ 669.749553][T22297] veth0_vlan: left promiscuous mode [ 669.753383][T22297] veth0_vlan: entered promiscuous mode [ 669.764118][T22297] veth1_vlan: entered promiscuous mode [ 669.780314][T22297] veth1_macvtap: left promiscuous mode [ 669.783246][T22310] fuse: fd is not a fuse device [ 669.785488][T22297] veth0_macvtap: left promiscuous mode [ 669.872637][T22297] veth0_macvtap: entered promiscuous mode [ 669.913946][T22297] veth1_macvtap: entered promiscuous mode [ 669.944036][T22297] netdevsim netdevsim0 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 669.949240][T22297] 8021q: adding VLAN 0 to HW filter on device eth0 [ 669.953122][T22297] netdevsim netdevsim0 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 669.959151][T22297] 8021q: adding VLAN 0 to HW filter on device eth1 [ 669.965286][T22297] netdevsim netdevsim0 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 669.971345][T22297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 669.977221][T22297] netdevsim netdevsim0 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 669.985655][T22297] 8021q: adding VLAN 0 to HW filter on device eth3 [ 670.003499][T14707] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.006001][T14707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.013270][T14707] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.016299][T14707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.166604][T18125] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.169935][T18125] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 670.194131][ T1044] usb 10-1: USB disconnect, device number 17 [ 670.198791][T18125] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.209443][T18125] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 670.220097][T18125] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.223690][T18125] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 670.241698][T18125] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.244984][T18125] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 671.534522][T22345] netlink: 'syz.6.4099': attribute type 1 has an invalid length. [ 671.814413][ T42] audit: type=1800 audit(1785441841.558:4292): pid=22354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4101" name="midi1_num_groups" dev="configfs" ino=81576 res=0 errno=0 [ 671.833131][T22354] ip6erspan0: entered promiscuous mode [ 671.935674][ T5799] net_ratelimit: 123 callbacks suppressed [ 671.935690][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 671.939796][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 672.063847][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 672.066649][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 672.184881][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 672.192428][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 672.213096][T22381] comedi comedi3: pcl818: I/O base address or length out of range [ 672.310524][T18125] bond1: (slave gretap1): failed to get link speed/duplex [ 672.315885][T18125] bond1: (slave dummy0): failed to get link speed/duplex [ 672.438809][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 672.461223][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 673.003064][T22369] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4103'. [ 673.163465][T22395] FAULT_INJECTION: forcing a failure. [ 673.163465][T22395] name failslab, interval 1, probability 0, space 0, times 0 [ 673.168403][T22395] CPU: 3 UID: 0 PID: 22395 Comm: syz.6.4107 Tainted: G L syzkaller #0 PREEMPT(full) [ 673.168423][T22395] Tainted: [L]=SOFTLOCKUP [ 673.168427][T22395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 673.168434][T22395] Call Trace: [ 673.168465][T22395] [ 673.168470][T22395] dump_stack_lvl+0x100/0x190 [ 673.168651][T22395] should_fail_ex.cold+0x5/0xa [ 673.168689][T22395] should_failslab+0xc2/0x120 [ 673.168750][T22395] __kmalloc_noprof+0xfc/0x820 [ 673.168773][T22395] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 673.168850][T22395] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 673.168868][T22395] genl_family_rcv_msg_doit+0xc7/0x300 [ 673.168883][T22395] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 673.168897][T22395] ? genl_get_cmd+0x3e7/0x760 [ 673.168914][T22395] ? bpf_lsm_capable+0x9/0x10 [ 673.168936][T22395] ? security_capable+0x80/0x260 [ 673.169032][T22395] genl_rcv_msg+0x560/0x800 [ 673.169048][T22395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.169062][T22395] ? __pfx_nfc_genl_enable_se+0x10/0x10 [ 673.169138][T22395] ? __lock_acquire+0x49f/0x1a40 [ 673.169181][T22395] netlink_rcv_skb+0x159/0x420 [ 673.169194][T22395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.169208][T22395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.169226][T22395] ? netlink_deliver_tap+0x1ae/0xcc0 [ 673.169240][T22395] genl_rcv+0x28/0x40 [ 673.169252][T22395] netlink_unicast+0x585/0x850 [ 673.169266][T22395] ? __pfx_netlink_unicast+0x10/0x10 [ 673.169282][T22395] netlink_sendmsg+0x8b0/0xda0 [ 673.169300][T22395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.169314][T22395] ? apparmor_socket_sendmsg+0x15b/0x270 [ 673.169332][T22395] ____sys_sendmsg+0xa4d/0xbe0 [ 673.169353][T22395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.169366][T22395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.169384][T22395] ___sys_sendmsg+0x190/0x1e0 [ 673.169397][T22395] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.169415][T22395] ? find_held_lock+0x2b/0x80 [ 673.169438][T22395] __sys_sendmsg+0x160/0x210 [ 673.169453][T22395] ? __pfx___sys_sendmsg+0x10/0x10 [ 673.169472][T22395] ? __pfx_ksys_write+0x10/0x10 [ 673.169507][T22395] __do_fast_syscall_32+0xe7/0x970 [ 673.169543][T22395] ? lockdep_hardirqs_on+0x78/0x100 [ 673.169577][T22395] do_fast_syscall_32+0x32/0x70 [ 673.169592][T22395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 673.169614][T22395] RIP: 0023:0xf6fdefec [ 673.169630][T22395] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 673.169656][T22395] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 673.169669][T22395] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000bc0 [ 673.169676][T22395] RDX: 0000000004044802 RSI: 0000000000000000 RDI: 0000000000000000 [ 673.169683][T22395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 673.169689][T22395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.169695][T22395] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 673.169710][T22395] [ 673.362510][T22398] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 673.986093][T22423] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 674.064289][T22430] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 674.103772][T22430] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 674.107428][T22430] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 674.109858][T22430] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 674.114184][T22430] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 674.127508][T22430] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 12309 usecs [ 674.195089][T22423] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 674.216826][T22430] pci 0000:00:01.0: Adding to iommu group 1 [ 674.225717][T22430] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 674.228034][T22430] pci 0000:00:01.0: vgaarb: bridge control possible [ 674.230150][T22430] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 674.249813][T22430] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 674.252677][T22430] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 674.257838][T22430] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 674.326520][T22430] [drm] Found bochs VGA, ID 0xb0c5. [ 674.328460][T22430] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 674.377955][T22430] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 674.784233][T22430] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 675.430085][T22450] binder: 22449:22450 unknown command 0 [ 675.432637][T22450] binder: 22449:22450 ioctl c0306201 800004c0 returned -22 [ 675.436088][T22450] binder: 22449:22450 ioctl c0306201 80000180 returned -14 [ 675.761777][T22475] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4123'. [ 675.987527][T22486] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 676.102732][T22485] netlink: 'syz.5.4122': attribute type 1 has an invalid length. [ 676.273219][T22497] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 676.544078][T22490] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 676.658705][T22490] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 676.666431][T22490] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 676.672519][T22490] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 676.687754][T22490] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 676.703183][T22490] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 14212 usecs [ 676.731641][T22490] pci 0000:00:01.0: Adding to iommu group 1 [ 676.754823][T22490] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 676.757033][T22490] pci 0000:00:01.0: vgaarb: bridge control possible [ 676.759103][T22490] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 676.787642][T22490] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 676.794246][T22490] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 676.798914][T22490] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 676.855624][T22490] [drm] Found bochs VGA, ID 0xb0c5. [ 676.860956][T22490] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 676.890057][T22490] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 677.039760][T22490] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 677.123417][T22582] pimreg: tun_chr_ioctl cmd 35108 [ 677.388989][ T5799] net_ratelimit: 62 callbacks suppressed [ 677.389177][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 677.394711][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 677.505464][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 677.510713][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 677.591632][T22602] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 677.635197][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 677.637618][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 677.719712][T22596] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 677.764165][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 677.770447][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 677.778381][T22596] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 677.789536][T22602] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 677.796421][T22596] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 677.799920][T22596] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 677.819430][T22596] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 677.840840][T22596] pci 0000:00:01.0: Adding to iommu group 1 [ 677.848829][T22596] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 677.851175][T22596] pci 0000:00:01.0: vgaarb: bridge control possible [ 677.853286][T22596] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 677.888232][T22596] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 677.901876][T22596] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 677.914145][T22596] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 677.916558][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 677.918838][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 677.945675][T22596] [drm] Found bochs VGA, ID 0xb0c5. [ 677.949789][T22596] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 678.007165][T22596] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 678.129898][T17895] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 678.139935][T17895] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 678.146486][T17895] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 678.149099][T22596] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 678.154525][T17895] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 678.159834][T17895] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 678.511351][T22628] lo speed is unknown, defaulting to 1000 [ 678.607924][T22667] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 678.715485][T22677] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 678.804773][T22677] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 678.819955][T22628] lo speed is unknown, defaulting to 1000 [ 678.827894][T22677] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 678.830288][T22677] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 678.858476][T22677] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 678.883089][T22677] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 22616 usecs [ 678.922413][T22677] pci 0000:00:01.0: Adding to iommu group 1 [ 678.940545][T22677] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 678.942805][T22677] pci 0000:00:01.0: vgaarb: bridge control possible [ 678.944797][T22677] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 678.958633][T22677] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 678.962774][T22677] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 678.971568][T22677] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 679.016880][T22677] [drm] Found bochs VGA, ID 0xb0c5. [ 679.020083][T22677] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 679.045924][T22677] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 679.054874][T22661] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 679.148798][T22677] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 679.482217][T22628] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.487075][T22628] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.490177][T22628] bridge_slave_0: entered allmulticast mode [ 679.494543][T22628] bridge_slave_0: entered promiscuous mode [ 679.501817][T22628] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.506345][T22628] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.509294][T22628] bridge_slave_1: entered allmulticast mode [ 679.566917][T22628] bridge_slave_1: entered promiscuous mode [ 679.721099][T22628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.730842][T22628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.794159][T22628] team0: Port device team_slave_0 added [ 679.812696][T22628] team0: Port device team_slave_1 added [ 679.996507][T22628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.996533][T22628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.996549][T22628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.000703][T22628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.000717][T22628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.000732][T22628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.067829][T22628] hsr_slave_0: entered promiscuous mode [ 680.102781][T22628] hsr_slave_1: entered promiscuous mode [ 680.106004][T22628] debugfs: 'hsr0' already exists in 'hsr' [ 680.106021][T22628] Cannot create hsr debugfs directory [ 680.228364][T22976] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 680.296963][T22976] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 680.329567][ T5797] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 680.337865][T22976] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 680.343102][T22976] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 680.348084][T22976] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 680.352591][T22976] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 680.365833][T23001] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 680.383749][ T5104] Bluetooth: hci2: command tx timeout [ 680.411949][T22976] pci 0000:00:01.0: Adding to iommu group 1 [ 680.413623][T22628] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.418938][T22628] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 680.420310][T22976] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 680.425314][T22976] pci 0000:00:01.0: vgaarb: bridge control possible [ 680.427993][T22976] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 680.479523][T22976] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 680.483194][T22976] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 680.488537][T22976] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 680.499170][ T5797] usb 11-1: Using ep0 maxpacket: 8 [ 680.509946][ T5797] usb 11-1: config index 0 descriptor too short (expected 5924, got 36) [ 680.513126][T22976] [drm] Found bochs VGA, ID 0xb0c5. [ 680.514870][T22976] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 680.521651][ T5797] usb 11-1: config 250 has an invalid interface number: 228 but max is -1 [ 680.529870][ T5797] usb 11-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 680.533715][T22976] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 680.538395][ T5797] usb 11-1: config 250 has no interface number 0 [ 680.544467][ T5797] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 680.554693][ T5797] usb 11-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 680.563225][ T5797] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 680.569564][ T5797] usb 11-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 680.573011][ T5797] usb 11-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 680.580814][ T5797] usb 11-1: config 250 interface 228 has no altsetting 0 [ 680.602011][ T5797] usb 11-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 680.605287][ T5797] usb 11-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 680.608330][T22976] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 680.611174][ T5797] usb 11-1: Product: syz [ 680.611188][ T5797] usb 11-1: SerialNumber: syz [ 680.727096][T22628] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.733837][T22628] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 681.099595][T22628] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.102965][T22628] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 681.137832][T23025] tracefs: Bad value for 'gid' [ 681.143045][T23025] tracefs: Bad value for 'gid' [ 681.166808][T23022] xt_hashlimit: overflow, try lower: 0/0 [ 681.274957][T22628] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.280162][T22628] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 681.618882][T23044] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 681.678986][T22628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 681.683989][T22628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 681.687516][T22628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 681.692045][T22628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 681.694929][T22628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 681.701177][T22628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 681.706496][T22628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 681.717619][T22628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 681.774235][T23035] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 681.802584][T23035] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 681.809307][T23035] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 681.812217][T23035] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 681.816363][T23035] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 681.848342][T23044] trusted_key: encrypted_key: insufficient parameters specified [ 681.851107][T22628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.852401][T23035] pci 0000:00:01.0: Adding to iommu group 1 [ 681.864217][T23035] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 681.864270][T22628] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.867080][T23035] pci 0000:00:01.0: vgaarb: bridge control possible [ 681.867100][T23035] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 681.884147][T23035] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 681.885351][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.886896][T23035] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 681.889444][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.891746][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.894364][T23035] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 681.895587][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.922115][T23035] [drm] Found bochs VGA, ID 0xb0c5. [ 681.923878][T23035] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 681.956480][T23035] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 682.009243][T23035] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 682.123067][T23077] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4154'. [ 682.332385][T22628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.360067][T22628] veth0_vlan: entered promiscuous mode [ 682.367476][T22628] veth1_vlan: entered promiscuous mode [ 682.400566][T22628] veth0_macvtap: entered promiscuous mode [ 682.409339][T22628] veth1_macvtap: entered promiscuous mode [ 682.431826][T22628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.441524][T22628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.452182][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.455649][T23089] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 682.457883][T23089] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 682.460690][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.467816][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.471446][T23089] vhci_hcd vhci_hcd.0: Device attached [ 682.476921][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.601976][ T5104] Bluetooth: hci2: command tx timeout [ 682.609447][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.609464][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.674634][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.674651][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.766464][ T5799] net_ratelimit: 50 callbacks suppressed [ 682.766486][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 682.771215][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 682.797767][ T1044] usb 42-1: SetAddress Request (10) to port 0 [ 682.800211][ T1044] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 682.882697][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 682.885509][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 683.001571][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 683.004542][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 683.094018][T23090] vhci_hcd: connection reset by peer [ 683.099155][ T5799] vhci_hcd vhci_hcd.2: stop threads [ 683.101364][ T5799] vhci_hcd vhci_hcd.2: release socket [ 683.104134][ T5799] vhci_hcd vhci_hcd.2: disconnect device [ 683.118414][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 683.121489][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 683.177213][T23124] overlayfs: overlapping lowerdir path [ 683.242195][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 683.253974][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 683.775697][ T5797] usb 11-1: USB disconnect, device number 3 [ 683.982751][T23133] Mass Storage Function, version: 2009/09/11 [ 683.985807][T23133] LUN: removable file: (no medium) [ 684.288466][T23138] trusted_key: encrypted_key: insufficient parameters specified [ 684.430137][T23142] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 684.438614][T23135] [ 684.439770][T23135] ====================================================== [ 684.442692][T23135] WARNING: possible circular locking dependency detected [ 684.445599][T23135] syzkaller #0 Tainted: G L [ 684.448157][T23135] ------------------------------------------------------ [ 684.451085][T23135] syz.0.4162/23135 is trying to acquire lock: [ 684.453561][T23135] ffff88806bdbe450 (sb_writers#5){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 684.456867][T23135] [ 684.456867][T23135] but task is already holding lock: [ 684.459610][T23135] ffff888021a5a920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 684.463544][T23135] [ 684.463544][T23135] which lock already depends on the new lock. [ 684.463544][T23135] [ 684.467854][T23135] [ 684.467854][T23135] the existing dependency chain (in reverse order) is: [ 684.471077][T23135] [ 684.471077][T23135] -> #6 (&common->filesem){++++}-{4:4}: [ 684.474000][T23135] lock_acquire+0x1b9/0x370 [ 684.476211][T23135] down_read+0x99/0x4c0 [ 684.478313][T23135] fsg_show_file+0x20/0x180 [ 684.480478][T23135] configfs_read_iter+0x426/0x6f0 [ 684.482877][T23135] __kernel_read+0x397/0xad0 [ 684.485078][T23135] integrity_kernel_read+0x7e/0xb0 [ 684.487520][T23135] ima_calc_file_hash_tfm+0x25e/0x350 [ 684.490036][T23135] ima_calc_file_hash+0x1e3/0x380 [ 684.492446][T23135] ima_collect_measurement+0x94f/0xb30 [ 684.494982][T23135] process_measurement+0xdfe/0x2350 [ 684.497004][T23135] ima_file_check+0xcc/0x120 [ 684.498667][T23135] security_file_post_open+0xc4/0x210 [ 684.500570][T23135] path_openat+0x985/0x4280 [ 684.502339][T23135] do_file_open+0x20e/0x430 [ 684.504435][T23135] do_sys_openat2+0x10f/0x1e0 [ 684.506585][T23135] __ia32_compat_sys_openat+0x12d/0x210 [ 684.509104][T23135] __do_fast_syscall_32+0xe7/0x970 [ 684.511496][T23135] do_fast_syscall_32+0x32/0x70 [ 684.513846][T23135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 684.516732][T23135] [ 684.516732][T23135] -> #5 (&p->frag_sem){++++}-{4:4}: [ 684.519895][T23135] lock_acquire+0x1b9/0x370 [ 684.522084][T23135] down_read+0x99/0x4c0 [ 684.523787][T23135] configfs_read_iter+0x346/0x6f0 [ 684.526048][T23135] __kernel_read+0x397/0xad0 [ 684.528245][T23135] integrity_kernel_read+0x7e/0xb0 [ 684.530641][T23135] ima_calc_file_hash_tfm+0x25e/0x350 [ 684.533120][T23135] ima_calc_file_hash+0x1e3/0x380 [ 684.535355][T23135] ima_collect_measurement+0x94f/0xb30 [ 684.537715][T23135] process_measurement+0xdfe/0x2350 [ 684.539754][T23135] ima_file_check+0xcc/0x120 [ 684.541589][T23135] security_file_post_open+0xc4/0x210 [ 684.543840][T23135] path_openat+0x985/0x4280 [ 684.545834][T23135] do_file_open+0x20e/0x430 [ 684.547852][T23135] do_sys_openat2+0x10f/0x1e0 [ 684.549949][T23135] __ia32_compat_sys_openat+0x12d/0x210 [ 684.552427][T23135] __do_fast_syscall_32+0xe7/0x970 [ 684.554729][T23135] do_fast_syscall_32+0x32/0x70 [ 684.556969][T23135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 684.559773][T23135] [ 684.559773][T23135] -> #4 (&buffer->mutex){+.+.}-{4:4}: [ 684.562947][T23135] lock_acquire+0x1b9/0x370 [ 684.565073][T23135] __mutex_lock+0x1a4/0x1bd0 [ 684.567128][T23135] configfs_read_iter+0x79/0x6f0 [ 684.569346][T23135] __kernel_read+0x397/0xad0 [ 684.571482][T23135] integrity_kernel_read+0x7e/0xb0 [ 684.573771][T23135] ima_calc_file_hash_tfm+0x25e/0x350 [ 684.576187][T23135] ima_calc_file_hash+0x1e3/0x380 [ 684.578241][T23135] ima_collect_measurement+0x94f/0xb30 [ 684.580624][T23135] process_measurement+0xdfe/0x2350 [ 684.583104][T23135] ima_file_check+0xcc/0x120 [ 684.585277][T23135] security_file_post_open+0xc4/0x210 [ 684.587745][T23135] path_openat+0x985/0x4280 [ 684.589789][T23135] do_file_open+0x20e/0x430 [ 684.591897][T23135] do_sys_openat2+0x10f/0x1e0 [ 684.594124][T23135] __ia32_compat_sys_openat+0x12d/0x210 [ 684.596592][T23135] __do_fast_syscall_32+0xe7/0x970 [ 684.598938][T23135] do_fast_syscall_32+0x32/0x70 [ 684.601217][T23135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 684.603959][T23135] [ 684.603959][T23135] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 684.607338][T23135] lock_acquire+0x1b9/0x370 [ 684.608978][T23135] __mutex_lock+0x1a4/0x1bd0 [ 684.610597][T23135] process_measurement+0x5ab/0x2350 [ 684.612415][T23135] ima_file_check+0xcc/0x120 [ 684.614040][T23135] security_file_post_open+0xc4/0x210 [ 684.615898][T23135] path_openat+0x985/0x4280 [ 684.617595][T23135] do_file_open_root+0x2f6/0x5a0 [ 684.619206][T23135] file_open_root+0x1c6/0x3f0 [ 684.620842][T23135] kernel_read_file_from_path_initns+0x189/0x260 [ 684.622989][T23135] _request_firmware+0x733/0x13c0 [ 684.624774][T23135] request_firmware+0x35/0x50 [ 684.626437][T23135] reg_reload_regdb+0x85/0x460 [ 684.628166][T23135] genl_family_rcv_msg_doit+0x214/0x300 [ 684.630446][T23135] genl_rcv_msg+0x560/0x800 [ 684.632165][T23135] netlink_rcv_skb+0x159/0x420 [ 684.633836][T23135] genl_rcv+0x28/0x40 [ 684.635238][T23135] netlink_unicast+0x585/0x850 [ 684.636908][T23135] netlink_sendmsg+0x8b0/0xda0 [ 684.638567][T23135] ____sys_sendmsg+0xa4d/0xbe0 [ 684.640308][T23135] ___sys_sendmsg+0x190/0x1e0 [ 684.641963][T23135] __sys_sendmsg+0x160/0x210 [ 684.643567][T23135] __do_fast_syscall_32+0xe7/0x970 [ 684.645343][T23135] do_fast_syscall_32+0x32/0x70 [ 684.647001][T23135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 684.649120][T23135] [ 684.649120][T23135] -> #2 (cb_lock){++++}-{4:4}: [ 684.651254][T23135] lock_acquire+0x1b9/0x370 [ 684.652765][T23135] down_read+0x99/0x4c0 [ 684.654276][T23135] genl_rcv+0x19/0x40 [ 684.655760][T23135] netlink_unicast+0x585/0x850 [ 684.657481][T23135] netlink_sendmsg+0x8b0/0xda0 [ 684.659147][T23135] sock_sendmsg+0x394/0x410 [ 684.660733][T23135] splice_to_socket+0xb3c/0x11a0 [ 684.662497][T23135] do_splice+0x109c/0x1f90 [ 684.664081][T23135] __do_splice+0x33b/0x370 [ 684.665658][T23135] __ia32_sys_splice+0x189/0x250 [ 684.667374][T23135] __do_fast_syscall_32+0xe7/0x970 [ 684.669157][T23135] do_fast_syscall_32+0x32/0x70 [ 684.670857][T23135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 684.672996][T23135] [ 684.672996][T23135] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 684.675348][T23135] lock_acquire+0x1b9/0x370 [ 684.677500][T23135] __mutex_lock+0x1a4/0x1bd0 [ 684.679621][T23135] pipe_lock+0x69/0x80 [ 684.681161][T23135] iter_file_splice_write+0x1fd/0x10b0 [ 684.683351][T23135] do_splice+0x109c/0x1f90 [ 684.684956][T23135] __do_splice+0x33b/0x370 [ 684.686669][T23135] __ia32_sys_splice+0x189/0x250 [ 684.688760][T23135] __do_fast_syscall_32+0xe7/0x970 [ 684.691127][T23135] do_fast_syscall_32+0x32/0x70 [ 684.693219][T23135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 684.695933][T23135] [ 684.695933][T23135] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 684.698839][T23135] check_prev_add+0xeb/0xe60 [ 684.701017][T23135] __lock_acquire+0x136c/0x1a40 [ 684.703314][T23135] lock_acquire+0x1b9/0x370 [ 684.705525][T23135] mnt_want_write+0x6f/0x410 [ 684.707324][T23135] path_openat+0xad9/0x4280 [ 684.708951][T23135] do_file_open+0x20e/0x430 [ 684.710612][T23135] file_open_name+0x1c3/0x3e0 [ 684.712327][T23135] filp_open+0x2e/0x50 [ 684.713916][T23135] fsg_lun_open+0x6b/0x7b0 [ 684.715605][T23135] fsg_store_file+0x1e7/0x450 [ 684.717532][T23135] configfs_write_iter+0x302/0x4e0 [ 684.719915][T23135] vfs_write+0x6ac/0x1050 [ 684.721994][T23135] ksys_write+0x12a/0x250 [ 684.724053][T23135] __do_fast_syscall_32+0xe7/0x970 [ 684.726335][T23135] do_fast_syscall_32+0x32/0x70 [ 684.728256][T23135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 684.730888][T23135] [ 684.730888][T23135] other info that might help us debug this: [ 684.730888][T23135] [ 684.735134][T23135] Chain exists of: [ 684.735134][T23135] sb_writers#5 --> &p->frag_sem --> &common->filesem [ 684.735134][T23135] [ 684.740186][T23135] Possible unsafe locking scenario: [ 684.740186][T23135] [ 684.743293][T23135] CPU0 CPU1 [ 684.745530][T23135] ---- ---- [ 684.747760][T23135] lock(&common->filesem); [ 684.749695][T23135] lock(&p->frag_sem); [ 684.751880][T23135] lock(&common->filesem); [ 684.754056][T23135] rlock(sb_writers#5); [ 684.755502][T23135] [ 684.755502][T23135] *** DEADLOCK *** [ 684.755502][T23135] [ 684.758596][T23135] 5 locks held by syz.0.4162/23135: [ 684.760423][T23135] #0: ffff888013c06470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 684.764251][T23135] #1: ffff888022270450 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 684.767986][T23135] #2: ffff888068cbac80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 684.771970][T23135] #3: ffff888052f8fe70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 684.775941][T23135] #4: ffff888021a5a920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 684.779960][T23135] [ 684.779960][T23135] stack backtrace: [ 684.782215][T23135] CPU: 2 UID: 0 PID: 23135 Comm: syz.0.4162 Tainted: G L syzkaller #0 PREEMPT(full) [ 684.782236][T23135] Tainted: [L]=SOFTLOCKUP [ 684.782242][T23135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 684.782250][T23135] Call Trace: [ 684.782280][T23135] [ 684.782287][T23135] dump_stack_lvl+0x100/0x190 [ 684.782331][T23135] print_circular_bug.cold+0x178/0x1c7 [ 684.782354][T23135] check_noncircular+0x146/0x160 [ 684.782372][T23135] ? __lock_acquire+0x49f/0x1a40 [ 684.782393][T23135] check_prev_add+0xeb/0xe60 [ 684.782412][T23135] __lock_acquire+0x136c/0x1a40 [ 684.782431][T23135] ? try_to_unlazy+0x296/0x910 [ 684.782448][T23135] lock_acquire+0x1b9/0x370 [ 684.782464][T23135] ? path_openat+0xad9/0x4280 [ 684.782475][T23135] ? __pfx___might_resched+0x10/0x10 [ 684.782501][T23135] mnt_want_write+0x6f/0x410 [ 684.782517][T23135] ? path_openat+0xad9/0x4280 [ 684.782527][T23135] path_openat+0xad9/0x4280 [ 684.782539][T23135] ? unwind_get_return_address+0x59/0xa0 [ 684.782565][T23135] ? __pfx_path_openat+0x10/0x10 [ 684.782575][T23135] ? kasan_save_stack+0x3f/0x50 [ 684.782597][T23135] ? kasan_save_stack+0x30/0x50 [ 684.782611][T23135] ? kasan_save_track+0x14/0x30 [ 684.782629][T23135] ? __kasan_slab_alloc+0x89/0x90 [ 684.782650][T23135] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 684.782684][T23135] ? do_getname_kernel+0x5d/0x250 [ 684.782704][T23135] ? filp_open+0x1d/0x50 [ 684.782727][T23135] ? fsg_lun_open+0x6b/0x7b0 [ 684.782754][T23135] do_file_open+0x20e/0x430 [ 684.782774][T23135] ? __pfx_do_file_open+0x10/0x10 [ 684.782805][T23135] ? rcu_is_watching+0x12/0xc0 [ 684.782829][T23135] file_open_name+0x1c3/0x3e0 [ 684.782853][T23135] ? __pfx_file_open_name+0x10/0x10 [ 684.782876][T23135] ? do_getname_kernel+0x5d/0x250 [ 684.782898][T23135] ? __asan_memcpy+0x3c/0x60 [ 684.782917][T23135] ? do_getname_kernel+0x1be/0x250 [ 684.782939][T23135] filp_open+0x2e/0x50 [ 684.782961][T23135] fsg_lun_open+0x6b/0x7b0 [ 684.782983][T23135] ? __pfx_down_read+0x10/0x10 [ 684.783011][T23135] fsg_store_file+0x1e7/0x450 [ 684.783035][T23135] configfs_write_iter+0x302/0x4e0 [ 684.783056][T23135] vfs_write+0x6ac/0x1050 [ 684.783073][T23135] ? __pfx_configfs_write_iter+0x10/0x10 [ 684.783093][T23135] ? __pfx_vfs_write+0x10/0x10 [ 684.783113][T23135] ? find_held_lock+0x2b/0x80 [ 684.783144][T23135] ksys_write+0x12a/0x250 [ 684.783160][T23135] ? __pfx_ksys_write+0x10/0x10 [ 684.783181][T23135] __do_fast_syscall_32+0xe7/0x970 [ 684.783205][T23135] do_fast_syscall_32+0x32/0x70 [ 684.783229][T23135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 684.783253][T23135] RIP: 0023:0xf70befec [ 684.783278][T23135] Code: Unable to access opcode bytes at 0xf70befc2. [ 684.783301][T23135] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 684.783322][T23135] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000f00 [ 684.783334][T23135] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 684.783346][T23135] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 684.783357][T23135] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 684.783369][T23135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 684.783386][T23135] [ 684.906138][ T5104] Bluetooth: hci2: command tx timeout [ 684.964631][T23135] mass_storage.usb0/lun.0: unable to open backing file: fFle0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 685.092431][T23151] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 685.145016][T23151] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 685.147550][T23151] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 685.156556][T23151] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 685.160693][T23151] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 685.175219][T23151] pci 0000:00:01.0: Adding to iommu group 1 [ 685.183074][T23151] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 685.185249][T23151] pci 0000:00:01.0: vgaarb: bridge control possible [ 685.187650][T23151] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 685.280506][T23151] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 685.285910][T23151] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 685.291186][T23151] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 685.302500][T23151] [drm] Found bochs VGA, ID 0xb0c5. [ 685.304265][T23151] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 685.316874][T23151] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 685.355723][T23151] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 685.576167][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.655202][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.775064][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.873245][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.995739][ T13] bridge_slave_1: left allmulticast mode [ 685.998269][ T13] bridge_slave_1: left promiscuous mode [ 686.000878][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.005741][ T13] bridge_slave_0: left allmulticast mode [ 686.008222][ T13] bridge_slave_0: left promiscuous mode [ 686.010728][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.085558][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.093269][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.098020][ T13] bond0 (unregistering): Released all slaves [ 686.244556][ T5458] 8021q: adding VLAN 0 to HW filter on device eth6 [ 686.344339][ T5458] 8021q: adding VLAN 0 to HW filter on device eth7 [ 686.377656][ T13] hsr_slave_0: left promiscuous mode [ 686.386267][ T13] hsr_slave_1: left promiscuous mode [ 686.394240][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.396601][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.399349][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.406958][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.413136][ T13] veth0_macvtap: left promiscuous mode [ 686.415511][ T13] veth1_vlan: left promiscuous mode [ 686.417776][ T13] veth0_vlan: left promiscuous mode [ 686.487235][ T13] team0 (unregistering): Port device team_slave_1 removed [ 686.492071][ T13] team0 (unregistering): Port device team_slave_0 removed [ 686.663061][ T5458] 8021q: adding VLAN 0 to HW filter on device eth9 [ 686.808313][ T5458] 8021q: adding VLAN 0 to HW filter on device eth8 [ 686.964867][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.040626][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.139356][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.210646][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.309620][ T13] bridge_slave_1: left allmulticast mode [ 687.312018][ T13] bridge_slave_1: left promiscuous mode [ 687.314485][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.319128][ T13] bridge_slave_0: left allmulticast mode [ 687.321850][ T13] bridge_slave_0: left promiscuous mode [ 687.324414][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.444636][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.449737][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.454080][ T13] bond0 (unregistering): Released all slaves [ 687.531761][ T13] : left promiscuous mode [ 687.572937][ T5458] 8021q: adding VLAN 0 to HW filter on device eth10 [ 687.631265][ T13] tipc: Left network mode [ 687.683220][ T5458] 8021q: adding VLAN 0 to HW filter on device eth11 [ 687.788612][ T13] hsr_slave_0: left promiscuous mode [ 687.792318][ T13] hsr_slave_1: left promiscuous mode [ 687.794422][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.799047][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.857576][ T13] team0 (unregistering): Port device team_slave_1 removed [ 687.862483][ T13] team0 (unregistering): Port device team_slave_0 removed [ 687.926453][T14704] smc: removing ib device syz0 [ 687.930468][T14708] smbdirect: ib_dev[syz2] removed [ 687.930770][ T5458] 8021q: adding VLAN 0 to HW filter on device eth12 [ 687.936165][T14704] smbdirect: ib_dev[syz0] removed [ 688.125063][ T5458] 8021q: adding VLAN 0 to HW filter on device eth13 [ 688.199613][ T5825] net_ratelimit: 60 callbacks suppressed [ 688.199636][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 688.204105][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 688.249659][ T1044] usb 42-1: device descriptor read/8, error -110 [ 688.324711][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 688.327509][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 688.332578][ T13] IPVS: stop unused estimator thread 0... [ 688.383210][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.441840][T18125] bond1: (slave gretap1): failed to get link speed/duplex [ 688.445374][T18125] bond1: (slave dummy0): failed to get link speed/duplex [ 688.467094][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.536309][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.559853][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 688.562870][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 688.597308][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.667382][ T1044] usb usb42-port1: attempt power cycle [ 688.677279][ T5799] bond1: (slave gretap1): failed to get link speed/duplex [ 688.680304][ T5799] bond1: (slave dummy0): failed to get link speed/duplex [ 688.721233][ T13] bridge_slave_1: left allmulticast mode [ 688.723262][ T13] bridge_slave_1: left promiscuous mode [ 688.725409][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.728857][ T13] bridge_slave_0: left allmulticast mode [ 688.731379][ T13] bridge_slave_0: left promiscuous mode [ 688.733371][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.776002][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.781322][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.788005][ T13] bond0 (unregistering): Released all slaves [ 688.854019][ T5458] 8021q: adding VLAN 0 to HW filter on device eth14 [ 688.986238][ T5458] 8021q: adding VLAN 0 to HW filter on device eth15 [ 689.041320][ T13] hsr_slave_0: left promiscuous mode [ 689.044147][ T13] hsr_slave_1: left promiscuous mode [ 689.046845][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.049400][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.055061][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.057416][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.062490][ T13] veth1_macvtap: left promiscuous mode [ 689.064476][ T13] veth0_macvtap: left promiscuous mode [ 689.066682][ T13] veth1_vlan: left promiscuous mode [ 689.069023][ T13] veth0_vlan: left promiscuous mode [ 689.158273][ T13] team0 (unregistering): Port device team_slave_1 removed [ 689.162991][ T13] team0 (unregistering): Port device team_slave_0 removed [ 689.224942][ T5458] 8021q: adding VLAN 0 to HW filter on device eth16 [ 689.293742][ T1044] usb usb42-port1: unable to enumerate USB device [ 689.372842][ T5458] 8021q: adding VLAN 0 to HW filter on device eth17 [ 693.562640][ T13] net_ratelimit: 76 callbacks suppressed [ 693.562665][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 693.568170][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 693.680195][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 693.682530][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 693.798176][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 693.802700][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 693.915426][ T5825] bond1: (slave gretap1): failed to get link speed/duplex [ 693.918040][ T5825] bond1: (slave dummy0): failed to get link speed/duplex [ 694.033008][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 694.035187][ T13] bond1: (slave dummy0): failed to get link speed/duplex