last executing test programs: 6.428682165s ago: executing program 1 (id=1887): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc49, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x80000001, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x25000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x700, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.53960497s ago: executing program 2 (id=1893): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) getresuid(&(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) r8 = openat$procfs(0xffffff9c, &(0x7f0000000500)='/proc/asound/seq/timer\x00', 0x0, 0x0) r9 = socket$isdn(0x22, 0x3, 0x2) r10 = syz_open_dev$media(&(0x7f0000000540), 0x0, 0x230000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000580)={'\x00', 0x0, 0x6, 0x9663, 0x7, 0x0, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xe4) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000007c0)=0x0) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getgid() sendmsg$unix(r1, &(0x7f0000000940)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000000c0)="84d084749ccf4b49d0e5f13d4c4d5b2603853aff7adf68fc44c2cc63dc049c0fd171d5c7374a60c44c2844867438b2b47e81100425677e2707476ab0a20fc35d8c279467a727f2f3e00d2f7043106da76f552fc61e6eb1a1c3c13b6af8f87c4f8f1e71ec36ed74c30e9be27fa5f0c83e8dfc19efb7ffe348a811c498906a0b0245337e56d24bacfa5724e684e0164e6ff99a859b15f3077d1b75e6c00d6301091ccb34e61c93b100caa5cd6b97615a8cf0f43f8223ba51fe9527feda5265953f0ce01fb4e1f5e4e5ed3580a379515dbf0b4736aad311c6d7925c00e7f091dd4632bb106e25e6bbbfcbb7720237b481", 0xef}, {&(0x7f00000001c0)="1ed9431bf6f766c082809b723465c07cceea57a834a214c7746ee955a12984facff56871206e688328a51c3a1e3f422b9227cf4c7be370c2e0e169c865398f", 0x3f}, {&(0x7f0000000200)="3d0cc8aa5c6c77e4b53d296eebd2f593e7149d9d0b0f9d85f47faa1e671d667dc3287bb034cbe7f5990c88bd9ef5afa6c3298e420a916f468fde133f26c9345a3ea6047c4c31601bc17baebbaf7bab8f1e0535d0fcbffa31094672a340743a5cec5754b2a0163a54be7016909b8d2cd2565a472fc08d566e84a6a157de966176e2ee2df09cb0361d1e1f4292138b34cc3c74f021272c8f29aaaf45ce7a52df2739bd081701f5bb29944ad85e1ce55bb88535d418c68067bd52694dc6ac3924900e2a99d57fa2", 0xc6}], 0x3, &(0x7f00000008c0)=[@cred={{0x18, 0x1, 0x2, {r2, r5, r6}}}, @rights={{0x20, 0x1, 0x1, [r7, r8, r9, r10, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r11, r12, r14}}}, @cred={{0x18, 0x1, 0x2, {r15, r16, r17}}}], 0x68, 0x40e9acf89a8076af}, 0x20000000) io_setup(0x442dbae1, &(0x7f0000000980)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r8, {r13, r14}}, './file0\x00'}) fstat(r9, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = accept4$alg(r8, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003b40)={0x0}, &(0x7f0000003b80)=0xc) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000003bc0)={0x0, 0x0, 0x0}, &(0x7f0000003c00)=0xc) statx(r8, &(0x7f00000044c0)='./file0\x00', 0x2000, 0x10, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getgid() sendmmsg$unix(r18, &(0x7f0000004680)=[{{&(0x7f0000000a00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000a80)="7b4d0d924067c8dbebe03501ab2edf2a5853594646071fcb3eeba62b0a3e724c4adf33c135c9ca8b0750edd4c1a24332881218856795f4eb3b1b23da1cc0cc52cca4658f460e622eafc9a6ff105a2043ef44696439d12e2dd706a024e4f3ad7d83bdc0ef", 0x64}, {&(0x7f0000000b00)="f329bee1fa756c7cdbcfbdcc246e613475b7d600c475010f9695e5b85d14b0657d3e0cc3ce786d4ac7bd1c746d127de31bff325468e5933a374cb5ec641ceceb0b1c31519f0aff8f7fffa8c5218aedeab57c94711775cf49069b", 0x5a}, {&(0x7f0000000b80)="2d7a401cfaaaa9c03d68d4fe6dec9af156bba20c4b39bc99f102f0b9582d1dce660658f2ff3c559508c6995876763c390c5673555f2674d6cbf2bc737de41bc51bc2ab5100f357022f51b0c714b16a2cb182f9dc661fad71769b4f0756e77c04f68cd69a1d1d12e0e8135573420609c80c0d27e6716209720a95ba09b2f0cf6beeb55ca02560ab31", 0x88}, {&(0x7f0000000c40)="4cf4c78372ca320403e18eba83e0a68b75c2e325dc44f82ffb1f221bfab143080c0dcca12dfaec7c75362a6fbc6614988e0c649485d227e13f2a6c0c05d1fb1641f8ec7745e0cb21104afb0127f7559c0bb086e212377fd81ad1cc6e14734e50838a53cc06958b1bdbf6ad349eae7d4c25a607dc0816bd792d8f71bdf7439aa34edd90ac8db41a5ff1188b174e60a8b9798f24c1ee66", 0x96}], 0x4, &(0x7f0000000e00)=[@cred={{0x18, 0x1, 0x2, {r15, r13, r20}}}, @cred={{0x18, 0x1, 0x2, {r15, r16, r21}}}, @rights={{0x18, 0x1, 0x1, [r22, r0, r9]}}], 0x48}}, {{&(0x7f0000000e80)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="c69e4de3e65e7bbd5342f9d0daf1fa128218998c4f1aeb1ce466acb02072f0530721ccd4404b4339c3", 0x29}, {&(0x7f0000000f40)="9ad8a7a90a2b581be3732c4b694a333003903633f85330383495edc03e1a989dfedb5a8fbbaa7077950392d46b4aa2e7112133f04770558cbe0c2de74b87152154197b28", 0x44}], 0x2, 0x0, 0x0, 0x48800}}, {{&(0x7f0000001000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000001080)="e0fa28e036e433b51b9dc1c67afe7b82ec8caf11e96d16129b1613e75cd84c60f8ea0698f5afa01f1c4046fdc89e", 0x2e}, {&(0x7f00000010c0)="022dd2b881b36ab31ee2d847d020a1f62fc3042e0b46d36f740f9189060101c727cc462020f8bafee18bf9a636398e97", 0x30}, {&(0x7f0000001100)="0a99e41eabe9e5cf9608c519b4f910708fd8b17768387d06804bdf5cea42ab69d046ef5845db5f9574dbb80d8e5c6f75f72f141361ccd23c6da296102edaa0e1783e253f65b66e09940ebea2b9648077f8ff724b8a5e9d1095072f0f942925abdacd8c5f2be398000351e558b621fe7816c954446474b38036a73e97f4e0e08b13c37366620cce88b729a6242a7a02def6353c097d69caac890e812876aa28ba3fb37b5cf8457be299a370dca76f1feace9d6b1b95e869cc7ab11cba8b0c557a7084771b3562f231c0d12c47ba21e8fb3b5bd47d793cf3b8b2a765a467a07860547e92a78a54a16c93a1b2aede3c74507c4119995b", 0xf5}, {&(0x7f0000001200)="0a1b393683bb42d356d9c80f9290a85a7f6dd6ac1ff38efb3fb55fc4", 0x1c}, {&(0x7f0000001240)="b88395c54a626aec76614e3acf66ea7d1ed6717bfa6e8344052eabd9fd4829f2effb269c89f1577899e2db94d88148922062a6c527621b1b2db86f029dc32bda6d39f3b905c35a89697413c68668e5ace4395ca57df27a87a0692e10863005d4931385697fe4053be994fa2f01f585e7a4d33ec80a6c352b23c4d6b3f3abfde47632c254fe400eed2f2a6080703981f900df8161b160ab3f167b7dcd13faf721d572554ee1533d73b2bf3ae70d03a70a9dbcc12271474a188362bc0b8d3c8a7b6d5a99d6ff41bc0f0879cbabaed667cebea038cf323d755277c152", 0xdb}, {&(0x7f0000001340)="569fe435b6d092a9071caa34aff735361d40d11a859d25c233cc2b416dec6326a6780432cbcecf97268c84abdfd57b048631a4572b50f64d8f3ca4f714b8edee48c2c5eef613712931887210757e497257ba7bf5fd2764b0bd9d98bada9692ba0c4139579b355df9bb1126c79c8eae86a8fa7175ff0d6dfed4cb1842258b2fbfe5eb2c3019b890bf9de458e7588656618f9b496fcb93f7", 0x97}], 0x6, 0x0, 0x0, 0x8010}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001440)="e50c16a461ea1618a91a077985f0650e63c086e62e9cac0acfd7918f080f90f6db85561ae407dcf8f792f7242657ad040252b58a7b137f4c82b7274044fa59165228d52b46d6236e9a0b13339700be007a449b063db6d42917a11357cc216046dc662f922a3dae7d0412383888a5927802c8f1eb489fca8c1ea0e9ba823640293118ad3cb0b98822c618d739d65e1388f07f21c7df7f5d4eb8f83fe34bbcd0b897c5f0912289bc43418fb55666a0a4f2ad9d8204b32a0edac2c874c5972e33aa1ff391f47283ea28236366c0a72e48545088b650db2761cee262617e063b4970d7eb4a2c677cf5f2193c03c19eab13271403a31203c156", 0xf7}, {&(0x7f0000001540)="7e97700c55844e53ee5d0ead818fd85fe924fc0c91b012003acf136488d9438387406d3ef52869ec2afafaf52315ef7bbbcbebae8c83706226c049f58d0dfdcc260aa990d7910a3e3b4985ab1475d2695bfb7f0d", 0x54}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="da6dbecd53adeb4564d77d1482d2", 0xe}, {&(0x7f0000002600)="f5a96e251a6c26b14418d89cef12de6b466174c9340680c91ea8cc0fb96075ad228863c9c05803879bbbfe9db7fc5f2c0615172b7d81b2a8bc78a384991c2fa59acc62628e9a66fe19b7d4c735f4181ca5ac07f5cdc7be7fe67b69379e2b3fc395c3d33882db23f0a4341d570c8a0a97b8a58dbff685c48527fdd032681a55f8bbd9c053db2034eb94654b070f41927b7548d08359b97fbf7f3e40503bae9107aa777b963c0caa3d18373dac423ddf58ebf9f0f19a", 0xb5}, {&(0x7f00000026c0)="b75f9167063d8f4726a16b2bd3c1d82c012d69c92bd9c7398ac6146314cf313664d561ffb6d9fb73a223721327460662f1e43ff44c15d71fc5d30d667766dfeb67b5093dd043812a6746bd6ee1622a11094a3486007cef6160a955e47fd6c33f77324212aa48b6690a654f6a9b3e8f3780490a327c05cc13d8fe7b7ec6fe97d1f3307aa0aa3753fccee14c0bd567f53408db0df7dc1afe65f2256f8992afcb2624a58d14fc062d0815a549122541bfee3938c4ad1f7b0d7cb58016d257c67fbea9", 0xc1}, {&(0x7f00000027c0)="66a040f54d850caa2fa8c3620411c7fa814e951a73ad82e029959a183260e687e9fa1f418d4787fcd759b0f1b39bb3a0173580506dae4f7100f1cc5d87ce5e4ee592f6cfa25fbad531335059d52ae96d66a5bdcafc4e880a58ea9338a508", 0x5e}, {&(0x7f0000002840)="a79b9cf34bd149d7feefa6478f38fdda2813cca670ba37dba84e0bb044ef8ebdd19a088787319552597f8538065b03fcd88158c58d59e1488f5ed8e7b0b487121851c96593c6f3281971731bbf63def9f753cf9ca8e03487b096dd06674190a07c4be2b1289c0c5d3a040451bce6eeebb812c0bb9c34f9f61bcccdb21d5de05504cff30f614a89f6b961103efd427c26db717369896e7d19a50bde97", 0x9c}], 0x8}}, {{&(0x7f0000002940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003b00)=[{&(0x7f00000029c0)="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", 0x1000}, {&(0x7f00000039c0)}, {&(0x7f0000003a00)="2a6cc5dfea5175a27c0aef89d3f1bbbd561f41d6c9df9c63a5ad496ab94b9d8ec5e705316784fafdc25e3466466b3e71f7bddea97f9bfcb898c1833885e27d879bed9048effeb2289c5ddb722f43492992adff341d335305eb23f72d9d1ff9ce0e076cbff6d441619350eea0e1e25af22a6fb7ea04f41e085879ce2d763d1b6ff7f24b8ac6b336eda1a5224fd613036932488bafc137a4bb5e765d9c283892ced67d0cf4cbbc209dfeca72f4d1463f6d168b828aacbb4a3ae965e48ad326a488d07d4c427d9fd1814702a38bb5d496ab19775f59c5f514140f51468156d2f42ef7b26abacabc6ebaba7a022fe645654033886e0ba80cae7c23", 0xf9}], 0x3, &(0x7f0000003c40)=[@cred={{0x18, 0x1, 0x2, {r23, r4, r24}}}], 0x18, 0xc8c1}}, {{&(0x7f0000003c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004000)=[{&(0x7f0000003d00)="3e1bdc5cde268fa10d5afef2313b40fdcec48ccbbb7dcbb1e4fe74730c8459308cea65c78e9798e7c0e81729ad811e49d936e43799d454fde4972cd492877267ec66b66f7b5c340435fdd7f0df0c32965f84f1ae3ec7bdccafc61c6751cee6e8c58f8770c7e9d5b9dd8fc213646b003f097b32ecd446", 0x76}, {&(0x7f0000003d80)="1c1607efabee0e23d72973a765806f0aedcd50489d9beb2e51110000bdb12bbb14782eadf2e869805a1d69877bba2eb07785146a270382804403a35100e74af1b8", 0x41}, {&(0x7f0000003e00)="61e991e62339b585618c11e3d60e3a5e1fe212070f011f275b7aee9151858ed16f439051b66fefb53b516005d95dafbe8b7fc3eca9bfb7bbec8d3131b97398edcc9c7c5cdf9d520a41bce05bf2b474aa1b69e91f0ea9e78a668f27c607856ab811269172714097ba4550bd6ca15494b4e34e38cdf08f1210f851e4854eaefe2fdee9a344d7f9436cff1bbf3c558fe9b23b070d63a5fe78f2b4e21782bc98c48127fb304887214e89b0f60115d959ca6786eb193ccb7aaa67f586f5b3ac9dca7f2462d5806b0e82db7528", 0xca}, {&(0x7f0000003f00)="4786bfd9afe32c2b30a241d5dbbe8b7ae5bf9cd3644e211cf2b7235093c42f2547c0ba5db4200e3bb894c623a3f2c07f4d03205e", 0x34}, {&(0x7f0000003f40)="1d42ce1545d12d895fcf627c540da5db200c9f9a0f34b2b66ba78c86a19c82e3895604c3b2104f843d6bfdee2b3538a465c5c0353792235533d00f1979563c31a66439baead2d39671ecfc07f974a92bd8033c90f9d2cc028cf6e7f0f2ab8dd03aa4ed0dbeaa6cf3a9362060a7475d6a755e7d87b69337b19d4b434caaaefb355efbc6e21e0a24d37c5dbbd29fff7295be1865ce2337d91a7946424bf9b245294001dd", 0xa3}], 0x5, 0x0, 0x0, 0x8004}}, {{&(0x7f0000004040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004480)=[{&(0x7f00000040c0)="c0b67803a1920942ffdc46decbd64a4c9e6d3c0c64a3a85730720ca24808d90d32409c49e29bacff76da11bb626bc4cbce69c3d313ca317ee01c438b4c8c988ea04579af95ac807d9cdd81818393", 0x4e}, {&(0x7f0000004140)="9dfc3cd60a16153e061349a067be0d6b62307d0593b4051b7f3fa083bcf029218d", 0x21}, {&(0x7f0000004180)="8957c174decc63fc6b18efd694b693c2ce4d3bf065429adb473b361dfbd680354ab539a135c48c6c6bb75df18b5bcc658e889d1d0bb6a310c65407d304b29dd15acb4888ac3bbd78370790a3379813d96414b8d81699110e4c09cecb6d9aa4f415b7b2704f3bdd47154a886f1b5c52321122a68b0392cbcfedf05db5e2d153d2278c432ea91bf7f6eb67db2653963c356c0d221d12cf7c531e00499cf9836893b4a30193e462948cc905283541b21305a70fa872f0ae623131bb15153fa441485a8e60e18d5dce5326edecc7ffb14bf46254e275e1321ce416f41e7aba81442a4014750492912d1e4d13d6d1f61e684b58e68c3e49", 0xf5}, {&(0x7f0000004280)="262797bd4e8f5cada7d489e0d90ab9854258c38e70afe7c6acada755390df1abbd2676a3f6a2f24b569570dfe226c2e8de689a29de9ff4c20460fa0bcebe245bcfe80c6b96677bd8042897d2cfc1214a9c4df5a355e83cf3d61d7e59d7317828752532c5dcdbfed9999a4b4afc6bcde21e668225079f41082ecfa28444e5acca431d44fd184735556ea11c7957051fc1b7", 0x91}, {&(0x7f0000004340)="43b30cf8bf344aee", 0x8}, {&(0x7f0000004380)="2e174b0f2384be0c9bb3f3c4b655c36cc7976aaaf7982ee2635996c20cb8b7def1489ca428a7d7712b6a7633df4c0b27a9737db4c75a68e44326f810b5d2ffdd7e1d27af1092f3869ed22ea94450e1bc684a65b4d5f2bd23d7338214524a705c036999b1440d03830cf3b016fe4beb6b4f6a3459d8599871f859a64b64f2946c254a0e272c5243c2b2f72b8dc398c4597e434cc6bc1da6389eccd4324d6064a9559a4d8938261b75ffd91a9f011e185e8b1add536f9c136c0f8d0a4417127045de3ac66f", 0xc4}], 0x6, &(0x7f0000004600)=[@cred={{0x18, 0x1, 0x2, {r15, r12, r25}}}, @cred={{0x18, 0x1, 0x2, {0x0, r3, r17}}}, @cred={{0x18, 0x1, 0x2, {r11, r4, r26}}}, @rights={{0x10, 0x1, 0x1, [r1]}}], 0x58}}], 0x7, 0x24004011) writev(r0, &(0x7f0000004b80)=[{&(0x7f0000004780)="9302ad595b51d77a3516f8b4dffd250992cff3f621082b1c9c2306acae1c9d0b8049997d9be1cb86ba88d8c1c0e7931236d626de9e382406d9a16ff5b4a8707262c6803e61d078b242d8c4de8e83f768711f80568f66cee56558e82465a984b2b29aa2fef8c113e4", 0x68}, {&(0x7f0000004800)="21ccf58836fe54df3156f08a73f2eccb6a17e6eb0ab709f36a6ebbf462", 0x1d}, {&(0x7f0000004840)="d74f7f257db77f631df04adaecb8733f956d2c21008e0ca436d4bdb1ed76df8ee95146b2330c6106cff7d45b8442619427a3808c22696ecb22b972310bfab6c8461d48f020548a3eb8d24651c7bd904cf7f460421280ce2408bb4f78246a8b593b91d992f27dd9764aa6a6fb41", 0x6d}, {&(0x7f00000048c0)="5796f80e14f51cd2c1b46adce671aba27f8094cc45138a9adc3bbfaa6e3c41ceaf93d146c2aebb77ca674c73a14f7b6f11d457901abf48a40162de08c496705bd89f3e05bac147691a643d0a53af1ef250b21df3d52738b93e613804fbc69422343b91ec9019b52d83da9b5a7efc64a4d48fb514b90b8af43a6ff01bba2f7bddb18df140975d2aa722f409e8b601b58590c3952a38d1742799a20c87c894e514d180a41a7307efa57e93f024f48bba9158f4f846fe54fda8b8a2e34abc318df1fe", 0xc1}, {&(0x7f00000049c0)="79a28fd030adbd1ff2169f87d05588c2f11f30ea3bc086980696ab445f8d326546a4d286c68e5e04b93894da1c4a0ce2e3204f2709b57f2e84e391ba545178f050a3659556cf0c6a03fe1083196d932fb6033cd86b58251a48b24cfb08513a66317b2b1cd8ff33dab6754f8964af880d17ce6f4071d3e99a85a385ee87ece9f261", 0x81}, {&(0x7f0000004a80)="523d6eae72eb504125ce6724fe08c4ef384357e9fea06a32bf858c8586d7d591148f38b33911be490132609b7f5f0dab4e8c05b7f7a1021152f12dc09402a5088f1c3b77d543083d9d992003776e8408455b180fc25770ab393934088dfe52b2886a1abfc9a059c3a255780d8b92874635e561d68a4d74def60178abf999f6fba17ab6c761a74eaebdf4b7667fcd81c02720373111dfe2099eb741937afb129a58f6b4e930bb038293dfb3af1dc508f07711684abd2c782a47496c0d71efc586fbc7676ca464727a0c9b04abfcb2aa358d2a2a91ac659338279afab69824cf5e92", 0xe1}], 0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r18, 0xc018937b, &(0x7f0000004bc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r12, r17}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r27, &(0x7f0000004cc0)={&(0x7f0000004c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c40)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r19, 0x81e8943c, &(0x7f0000004d00)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r18, &(0x7f0000005000)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004f80)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 5.539295925s ago: executing program 2 (id=1894): r0 = syz_clone3(&(0x7f0000000200)={0x8000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x6}, &(0x7f00000010c0)=""/4096, 0x1000, &(0x7f0000000100)=""/41, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x6}, 0x58) r1 = syz_open_procfs$pagemap(r0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x20001) write$P9_RVERSION(r2, 0x0, 0xfffffcd9) 5.438638994s ago: executing program 1 (id=1895): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)) close_range(r0, 0xffffffffffffffff, 0x0) 5.438070071s ago: executing program 1 (id=1896): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x10000000, 0x3, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x5c, 0x0, 0x1, 0x0, 0x0, 0x10, 0x65}, 0x8) listen(r2, 0x100101) accept4(r2, 0x0, 0x0, 0x80800) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000190001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000001000001440005002001060000000000000000000000000000000002320000000a000000fc010000000000000000000008000000000000000400"/175], 0xf8}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 3.42996366s ago: executing program 3 (id=1907): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3.326654367s ago: executing program 3 (id=1909): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd012205000905810308000300fda1286dc1c0d3e692e856e47bb817c94d8695884cd3427d6398a172388e57404a9ec9385e9324ac96ae72765a3dfde05c6806bafe0a72f5d5d59146b3bdc93c8c8c045d3ba10b3700bf7a40dff6c8aec6115e4be16469a2ac"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0x11, 0x5, {0x5, 0xe, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) r1 = syz_open_dev$evdev(&(0x7f0000000580), 0x1, 0x2800) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000005c0)=""/277) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25df9bff, {0x0, 0x0, 0x0, r5, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x20004006) exit(0x4000000000009) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) close(0x3) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfef, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000240)='.\xc0:\x00', &(0x7f00000002c0)='#.\x01\'-[-\x00']}, &(0x7f0000000580)={[&(0x7f0000000440)='/dev/radio#\x00']}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000500000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\a\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) fchdir(r2) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) 3.219245553s ago: executing program 0 (id=1910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="cdf4f8f1444899031b46da50629c3a1dbdccd4"], 0x5) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) sendfile(r2, r1, 0x0, 0x10000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001000000000000000afdff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1}, 0x50) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r5, 0x0, 0x0}, 0x1c) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000001030101000002000000000005ffffff"], 0x20}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x64, 0x19, 0x1, 0x70bd2a, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@typed={0xc, 0xbf, 0x0, 0x0, @u64=0xd}, @typed={0x8, 0x92, 0x0, 0x0, @pid}, @nested={0x35, 0x2, 0x0, 0x1, [@generic="91d6c815134fe3f4c0630985a7a03bf200933d1b4071e205b9eaf9c5aeacdf49e1d5b653168afc17dfd17232a64c156ec4"]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000480)=[@in6={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000380)={r8, @in={{0x2, 0x4e24, @private=0xa010101}}, 0xc, 0x3, 0x0, 0x7, 0x52, 0x7f, 0x7}, 0x9c) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000100)={0x28, 0x0, 0xffffffff}, 0x10) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r10, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1a, &(0x7f0000000200)=[{0x6, 0xd, 0x0, 0x7fffffff}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14}, &(0x7f0000002300), 0x0) ioctl$sock_SIOCINQ(r10, 0x541b, &(0x7f0000000040)) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f88f7", 0x12}, {&(0x7f0000000040)="dd7fb78fb52ae97c75f16d067e11415380270996f3f4b616b45322a4415fdf5d003b", 0x22}], 0x2) 2.470152125s ago: executing program 2 (id=1911): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x300}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1c4, 0x2a8, 0x2a8, 0x1c4, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @rand_addr=0x64010100, 0xff, 0xff000000, 'veth1_to_bond\x00', 'wlan0\x00', {}, {}, 0x88, 0x2}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast2, @multicast1, 0xffffff00, 0xffffffff, 'wlan0\x00', 'veth0\x00', {}, {0xff}, 0xff, 0x2, 0x18}, 0x0, 0xcc, 0x134, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x4, 0x4, 0x121a5bb6, 0x1}}, @common=@addrtype={{0x2c}, {0x1, 0x328, 0x1, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x4, 0x1, 0x6, 'snmp\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2b4) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000300)={0x7fffffff, 0x0, 0xffffffffffffffff}) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000000000000000000000000000000000009500000000000000bf0001000100000095000000e5747da4"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000140)) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a6e870400000000000007200000000306060080110000000000000008000000000000017a00000000000000050200040000422fb87fa3651e"], 0x30) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000e661123d12a31fd56f49a2878cc1fcdda1d753124fc1d6dda7101429f604aac8880e2b6980ab", @ANYRES16=r7, @ANYBLOB="210b00000000000000006700000008000e00", @ANYRES32, @ANYBLOB="0c002a010000000000000000", @ANYRES64=r4], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x100}, 0x94) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0xa800, 0x0) r8 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROM_CLEAR_OPTIONS(r8, 0x5321, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) 2.392939206s ago: executing program 2 (id=1912): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket(0x22, 0x2, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_io_uring_setup(0x24f5, &(0x7f0000000b80)={0x0, 0x88fb, 0x20, 0x10000007, 0x433a}, &(0x7f0000000100), &(0x7f0000000040)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'GPL\x00'}, {0x20, 'GPL\x00'}], 0xa, "535b9022d51da459047d5c0cffc24575a2dcd2b5fc345167d1536bcc421873584a400088399d781112a1f48646086966c28381a068661b57eb6c327f13c32aae141269c378feabd9785ec96d4f600346b11937208d9b31f033634f00ac95caffdef85d296c99177986a686a095b59370590a56369e3b72bcd672c6d68ca689be3b5ad26edcfe81702c1630b1eef97a3a27c5b7d17fbc0a6af8423a23"}, 0xb1) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x7f) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb3d) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000f10f000d042abd70000033360120532b7e9e0b7631dfa5bdb11e405721e1ea81d2de04adf28d52f711cd00a3c27d240aca27fef328574b521ec27992545de9d9079d94d6437e3d143d841feddfb89adbbbd8677464080a6eba67479fe98c0d5a7b0f1dab4c2e125d054e5f900ef723aa699ed7ca549d780994171c499a3219191124d3c4b0238a8a052b1d8adfa499d90d519d089c2989d1abd80075d31ba9e46f74a7cd493f613a2d4d6851206ac7dd21a7912f45f9", @ANYRES32=r4, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800500010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24048080}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0xa, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) 2.317452525s ago: executing program 1 (id=1913): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0xff070000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x24000050) 2.317148584s ago: executing program 2 (id=1914): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x404080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) mkdir(0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$KEYCTL_MOVE(0x1e, r7, r7, r6, 0xfeffff) syz_io_uring_setup(0x10c, 0x0, &(0x7f0000000400)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4) 2.239739812s ago: executing program 1 (id=1915): r0 = socket(0x11, 0x80000, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, 0x0, &(0x7f0000000240)) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r2, 0x0) r3 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) socket$inet(0x2, 0xa, 0x5) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) getsockopt(r1, 0xffffffff, 0x0, &(0x7f0000000100)=""/243, &(0x7f0000000000)=0xf3) 1.241463447s ago: executing program 1 (id=1916): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xf}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0xd491, 0xd2b4eaa414a760b5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0xfffffffc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x3d, 0x20403, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x4, @remote, 0x5}, {0xa, 0x4e20, 0x1000000, @mcast2, 0xfff}, 0xfffc, {[0x10005, 0xfffffffd, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x40]}}, 0x5c) r9 = openat$comedi(0xffffff9c, &(0x7f0000001a80)='/dev/comedi3\x00', 0x103400, 0x0) r10 = epoll_create(0x7) socket$inet(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x1, 0xfffffffd}]}, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r4, 0xc0106440, &(0x7f0000000380)={0x2, 0xd2, &(0x7f00000003c0)}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000040)={0x20000000}) ioctl$COMEDI_INSNLIST(r9, 0x8008640b, &(0x7f0000000240)={0x868, &(0x7f00000020c0)=[{0x4000000, 0xff92, 0x0, 0x0, 0x1}]}) 1.240983484s ago: executing program 0 (id=1917): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x13, r0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="aff1405aadd8b883725bcebdcf4d8270", 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x5, 0x7fe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r3 = socket$inet6(0xa, 0x1, 0x84) shutdown(r3, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000400)={0x1}, 0x5) connect$inet6(r3, 0x0, 0x0) close(r3) r4 = syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = getpid() sched_setscheduler(r7, 0x3, &(0x7f0000000100)=0x3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) io_uring_enter(r4, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 990.067029ms ago: executing program 0 (id=1918): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2b4, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffff7a, 0xffffffff, 0x220, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xffffffff, 'veth1\x00', 'geneve1\x00', {}, {}, 0x8, 0x0, 0x41}, 0x6, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "e4ff0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9eb85f401b0000000000ffffff7f00", 0x7d}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_batadv\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x33, 0x2, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7, 0x7f00, 0x7f00, 0x7f00]}, {0xffff, [0x7f00, 0x1, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x310) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x20, 0x0, 0x2, 0x7fffffffffffffff, 0x6, 0x8, 0x0, 0x400003}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1cc, 0xffffffff, 0xffffffff, 0x1cc, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0xff, 'bond_slave_1\x00', 'netpci0\x00', {}, {0xff}, 0x21, 0x2, 0x4}, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}]}, @common=@unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0xcccb}}}, {{@uncond, 0x0, 0xb8, 0x114, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@ttl={{0x24}, {0x3, 0x1b}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x2, 0x1, [0xb, 0x2, 0x2e, 0x1c, 0x17, 0x34, 0x21, 0x27, 0x1b, 0x13, 0xd, 0x37, 0x11, 0x26, 0xb, 0x13], 0x1, 0x3, 0x1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2bc) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x4000) 937.453064ms ago: executing program 2 (id=1919): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = dup(r1) accept4(r2, 0x0, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[{}, {}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x21, 0x5, 0x1) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006680)=@newtfilter={0x34, 0x2c, 0x400, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x7, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x24000880) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="040028bd7000fedbdf25020000000800050005000000080005008f00000008000400040000000800050000800000080004000000000008000400030000000800060007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4081) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380), 0x80, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r10, @ANYRES8=0x0, @ANYRES8, @ANYRES8=r5, @ANYRES32=r6, @ANYBLOB="f531f30506510dbaef706c2674cf6ae1ba9dbaf3a61cf232dd6cbbd1a0176243874b5b7ba68f6f3f"]) 229.883744ms ago: executing program 3 (id=1920): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x14, 0x11, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f00000007c0)=@getsadinfo={0x14, 0x23, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000180)={@loopback, @multicast1, 0x0}, &(0x7f0000000200)=0xc) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000c40)={0x3f0, 0x12, 0x800, 0x70bd29, 0x25dfdbfe, {0x5, 0x2, 0x8, 0x6, {0x4e22, 0x4e22, [0xffff86f7, 0x7, 0x6, 0x9], [0xb6fb, 0x5, 0x0, 0xb6], r5, [0x6, 0x8]}, 0xf65, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xab, 0x1, "1711f01e9691b849e8cda808d1746c75b966f78ae06ed9a4bce55e5ced6d7b406e3ce836939759e3a7e656cd85f2b19e82cf6f3c8c27be2d85164b7f3a00facbe711b1a92e6932bda543362c20be3cf4f23d341ae515bfdadf7a97856add7e9b3c5dd27b42295dc1464acb2beec2d81c5493129db90f89631324ee445efcfbe66caa7a29e50f1c526a50d3b37b85e13dd5a3a0631a724c11f00d7db3b0debd711b13622d0a8733"}, @INET_DIAG_REQ_BYTECODE={0x5, 0x1, "b9"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "b3b615c253335c86a3c0419b2c7be79f09e03c8acb6975648021733b33daf77bf37dbe21f23235c29ee8c00a1b6ea89a437a9401e478fe5b32eac99a2c5fe4b6a8582013152c97bb789192f69c3a31a38176bfac2a79aeaf3ec13beb1ff7ec14aafe51dcdbbcfd8204276b40a622efc782f9d0bd7e0867c5b9b069c8bdb19c6abf1bb9e178e3d91e57653d9f2df9efbfef45a2d56494073edc09c6"}, @INET_DIAG_REQ_BYTECODE={0x90, 0x1, "d0d8fcbb83a3e71e84ae5092c58be27e70843d63522d521b090a0aa862f27760b844fff0366ec85d79a9ea292b0fd8d93e0ac21d2c52e9dc6ef495b4657e7cfcb2af8d57fe8782502dad954a69c4eff691757065a3aee0e8e234a28531fbebb99bdbbe54c3c52987ffd538bdf6ad4f40a8aca2a8625f7a643ebcd988c81afe6537fd6487166e44ea3bdbd50e"}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "aa55b80f8720787f95ae79c64c972754c253baac624649e5f366f9ee88d61d67f8534c435995cbe5c9cf331e8fe1a1cd8c1b1fad06f7edbdc79b396f7c"}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "559776225c8d3005aa992c0507389e136133bfde2b431e7e06a1a9e75d5cf26378799b36e69cc686e7ec5785d16fb552ff0556edb1dd58b6f595d44419c1ca648b755b8afa68b78a4f6c5057144023c2af1abf974979469098850fba9cece64603f3ba0f182cba98679b00986c8fd868ab8de9d73adca6650f"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "a0d27e83aa05b56c54eafc2819be667e71ff57ac3e14165c21091fefb3eb601c29"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "0cc0c697a7be765f25298402f2000e818a67b55ac9e9c9cc78b078af657b6a0c9a2eb7d26cbf65ddea9ba910a7d0d3ca9fd344318cae1bedc6a00e5694a23febe0ba2cb0d2e619d7661144b6d2286f1e2b98f591842e286a29f1a292b463f944896e5f1c3bf47f362c78fcd8a0ee13c106ebb09c6f941e887857a30234affac9fb72898a1ef00b2d2d82d6f82969631731fce863023ec792d9d1d445ca9f932621f47dc7e78f9dc7cba18aa751d266211593498a8868ca295f072ae3fb58a0c89c14d0c0655b59f8af"}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x40}, 0x44080) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = socket$inet(0x2, 0xa, 0x8000000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000440)={0x0, 0x48000000, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x34, 0x1, 0x470bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x1, 0xfffffffd}]}, 0x8) 156.595678ms ago: executing program 0 (id=1921): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaa2aaaaaaaaaaaaabb08004500001c000000000002907800000000e0000300110090780000000041907dc208cd53c7b99546c75e0856bf8790766bda22bd5404fa45be5f57d059f5408ced81e8014b450b7c879dca3e7d911b5a81439a1a3a9775d128c4e86ea7a32df5e0506ab4c60f3d1b3c5a8f4d18d4b74b26cd11fd"], 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 155.970708ms ago: executing program 3 (id=1922): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x6, 0x4, 0x9, 0x80000000, 0x5, 0x8e, 0x8, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000020a5d"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0) (async) ioctl$CEC_DQEVENT(r4, 0xc0506107, &(0x7f0000000480)) (async) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000e00)={0x0, 0x45a5, 0x0, 0x3, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r5, 0x0, 0x0, 0x1, 0x1}) (async) io_uring_enter(r5, 0x22d0, 0x20, 0x0, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000040)={0xd0}) (async, rerun: 64) write$vhost_msg_v2(r3, &(0x7f0000000300)={0x2, 0x0, {&(0x7f0000000280)=""/110, 0x6e, &(0x7f0000000400)=""/174, 0x7, 0x4}}, 0x48) (async, rerun: 64) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') (async) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0x8a4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7f, 0x7, 0x5, 0xd2600000, 0x2, 0x2, 0x4, 0x64c, 0x7, 0xd91, 0x4, 0x80000000, 0x3, 0xb0cb, 0x5, 0x7, 0x7, 0x1, 0x7, 0xfffffc01, 0x8, 0xd, 0x1, 0x7, 0x355, 0x3, 0x0, 0x1, 0x401, 0x4, 0x1, 0x0, 0x1, 0x2, 0x7, 0x8, 0x6, 0x5, 0x9, 0x1, 0x0, 0xcca, 0xb, 0x2, 0x4, 0x8253, 0xfffffffa, 0x0, 0x5, 0x200ba19b, 0x7, 0x7, 0x7, 0x8001, 0x7f, 0x2, 0x5, 0x10, 0x6, 0x9, 0x800, 0x0, 0x5, 0x3, 0x90, 0xe4a, 0x9, 0x4, 0x4, 0x7ff, 0x200, 0x9, 0x7, 0x4, 0xfffffffa, 0xfffffff8, 0x80001b14, 0x9, 0x2, 0x8, 0x5, 0x7, 0x153f, 0x8, 0xa, 0x1, 0xfffffffd, 0x40, 0x9, 0x0, 0x3, 0xff, 0xff, 0x1, 0x2f4e, 0x1, 0x1, 0x0, 0x40, 0x7, 0xdf3, 0x1, 0x2, 0x3, 0xffffffff, 0x1, 0x359d1dd5, 0x7ff, 0x7, 0x1000038, 0xe, 0xb, 0xc40f, 0xffff, 0x0, 0x7fffffff, 0x0, 0x4, 0xfffffff9, 0x400, 0x2, 0x8, 0x3, 0x3, 0x9, 0x5, 0x9, 0xf, 0xfb, 0x2a, 0xe48, 0x7ff8000, 0x8c5, 0x8, 0x400, 0x9, 0x6, 0x9, 0x10, 0x6, 0x8000, 0x100, 0x40, 0x4, 0x0, 0x8f2, 0x1, 0x1, 0x4, 0x2, 0xfffffffa, 0x4, 0x0, 0x800, 0x2, 0xc0000000, 0x80000000, 0x7, 0x9, 0xe, 0x7fff, 0x1, 0x0, 0x10000, 0xb, 0x1, 0x2, 0x3, 0x0, 0x7, 0x4, 0x8, 0x0, 0x4, 0x6, 0xff, 0x9, 0x2, 0x2, 0x1, 0x48, 0x7, 0x4, 0x6, 0xfffffffa, 0x40, 0x6, 0x4, 0xb, 0x6, 0x7, 0xcbad, 0xffffffff, 0x8392, 0x5, 0xfffffffa, 0x3a, 0x9, 0xffff, 0x7, 0xfffffff9, 0x1, 0x8, 0x4f06, 0x6, 0x4, 0x4, 0x6, 0xffffff69, 0x9, 0x401, 0xfffffff5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xffff7ca4, 0x8, 0x7fff, 0x3c2, 0xd, 0x7fffffff, 0x0, 0x0, 0x5e52, 0x1, 0x7, 0x7, 0x5, 0x5, 0x5, 0x9, 0x7fffffff, 0x4, 0x7, 0x8, 0x9, 0x1, 0x3, 0x0, 0xe2ac, 0x8000, 0x0, 0x4, 0x0, 0x401, 0x434, 0xff, 0x0, 0x3, 0x7, 0x3, 0xe7e1, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x1, 0x9, 0x0, 0x1000, 0xace8, 0xe7, 0xffff, 0x5, 0x81, 0x2, 0x7, 0x10000, 0xf, 0x3, 0x7f, 0x10000, 0xfff, 0x0, 0x5, 0x3, 0x8, 0x2, 0x9, 0x19, 0x8000, 0x6, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0xf, 0xad, 0xffffff01, 0x79bf, 0x2, 0x3, 0x0, 0x5, 0x0, 0x7, 0x5, 0x9, 0x3, 0x3, 0x8d9, 0x9, 0x907, 0x3, 0x9, 0x1, 0x0, 0x9, 0x3, 0x3, 0x3ff, 0x8, 0x6, 0x80, 0x2, 0xb093, 0x4, 0xe, 0x80000000, 0x5, 0x4d8, 0xfffffffb, 0x8, 0x200, 0x100, 0x752c, 0xa4, 0x5, 0x5, 0x6, 0x4, 0x10000, 0x8000, 0x80000000, 0x5, 0x1, 0x7f, 0x5b1d, 0xfffffffc, 0x200, 0x200, 0x1, 0xffffffff, 0x4, 0x0, 0x67, 0x3972, 0x8, 0x8, 0x7, 0x3, 0x1, 0x80000001, 0x5, 0x9265, 0xfffffffe, 0xffffff7f, 0x8, 0x3, 0x9, 0x10001, 0x4, 0x2, 0x3, 0x0, 0xfff, 0x3, 0x8, 0x800, 0x0, 0x3, 0x1000, 0xffb6, 0xa, 0xf, 0x5, 0x7, 0xd, 0x92, 0x1, 0x3, 0xfffffff9, 0x3, 0x2, 0x8, 0x0, 0x11e, 0xfff, 0x1, 0x3, 0x3, 0x12000000, 0x3, 0x3, 0x7, 0x800, 0x0, 0x7ff, 0x0, 0x10, 0x6, 0x2, 0x100, 0x5, 0x3, 0x0, 0x5, 0x8f1, 0x3, 0x6, 0x9, 0x8001, 0x9, 0x9, 0x9, 0x2, 0x3, 0x1, 0x5, 0x6, 0x81, 0x5, 0x5, 0x4c, 0x2, 0x6, 0xff, 0x3, 0x1, 0x9, 0xe, 0xb868, 0x8, 0xa, 0x5, 0x180, 0x285, 0x31c5, 0x400, 0x0, 0x5, 0x400, 0x1, 0x9, 0x80000001, 0xfffffffa, 0x2, 0xc9, 0x1, 0x3ff, 0xff, 0x9, 0xa8, 0xc, 0x8eb, 0x400, 0x9, 0x800, 0x5, 0x200, 0xd, 0x3, 0x9, 0x837, 0x1ff, 0x6, 0xcd00000, 0x9, 0xfff, 0x2, 0x2, 0x3, 0x6, 0xff, 0x8, 0x1, 0x10000, 0x4, 0x1, 0x0, 0x0, 0x8, 0x81, 0x8, 0x2197, 0x7, 0xc4, 0x400, 0x1, 0x5, 0x2, 0x2, 0x807, 0x0, 0x5, 0x8, 0xc, 0x2b, 0x9bf, 0x5, 0x9, 0x4, 0x1, 0xa4f4, 0x0, 0xa3, 0x8, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x6, 0x0, 0x3ff, {0x9, 0x2, 0x6, 0x3, 0xd, 0x2d548f23}, {0xd8, 0x2, 0x781, 0x3, 0x9, 0x3e5a}, 0xc, 0x5, 0xd6a}}]}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x8a4}}, 0x404c004) (rerun: 64) 151.824664ms ago: executing program 0 (id=1923): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaa2aaaaaaaaaaaaabb08004500001c000000000002907800000000e0000300110090780000000041907dc208cd53c7b99546c75e0856bf8790766bda22bd5404fa45be5f57d059f5408ced81e8014b450b7c879dca3e7d911b5a81439a1a3a9775d128c4e86ea7a32df5e0506ab4c60f3d1b3c5a8f4d18d4b74b26cd11fd"], 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 68.318833ms ago: executing program 0 (id=1924): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fallocate(0xffffffffffffffff, 0x10, 0x40000, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x30c, 0x148, 0x111, 0x4b4, 0x0, 0x700, 0x244, 0x278, 0x278, 0x244, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0xfe000100, 0xff, 0xff000000, 0xff], 'vlan0\x00', 'vlan1\x00', {}, {}, 0x88, 0x0, 0x0, 0x1a}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x4, [0xfffd, 0x0, 0x0, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x4e23], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfd, 0x0, 0x0, 0x0, 0x1], 0x1}}, @inet=@rpfilter={{0x24}, {0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x2, 0x1}, 0x0, 0x9}}}, {{@uncond, 0x0, 0xdc, 0xfc, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0xfffffffc}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x368) 68.092794ms ago: executing program 3 (id=1925): openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x7, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x8004, 0x2, 0xa, 0x3c5b, 0x6, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x11, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x80002, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x4019, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x1, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0xe72, 0xac8, 0xc2, 0x2, 0x6, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x10001, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x6, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x3, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 0s ago: executing program 3 (id=1926): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000300)=0x2000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r1, 0x300) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) 0s ago: executing program 0 (id=1927): r0 = socket$pppl2tp(0x18, 0x1, 0x1) chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$sr(0xffffff9c, &(0x7f00000000c0), 0xad81, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='b *'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r3, 0x0, r6, 0x0, 0x11, 0x4) write$UHID_INPUT(r2, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0xfffffffffffffedf) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000240)=ANY=[@ANYRESDEC=r7], 0x0) socket$kcm(0x29, 0x1, 0x0) kernel console output (not intermixed with test programs): vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 248.606106][ T9143] vhci_hcd vhci_hcd.0: Device attached [ 248.698035][ T9155] syzkaller0: entered promiscuous mode [ 248.699775][ T9155] syzkaller0: entered allmulticast mode [ 248.894893][ T10] usb 42-1: SetAddress Request (6) to port 0 [ 248.896822][ T10] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 250.457861][ T9168] syzkaller0: entered promiscuous mode [ 250.459813][ T9168] syzkaller0: entered allmulticast mode [ 250.665494][ T9180] ip6t_srh: unknown srh invflags 4000 [ 250.702725][ T9151] vhci_hcd: connection reset by peer [ 250.705224][ T1144] vhci_hcd vhci_hcd.2: stop threads [ 250.715235][ T1144] vhci_hcd vhci_hcd.2: release socket [ 250.717080][ T1144] vhci_hcd vhci_hcd.2: disconnect device [ 250.809673][ T9173] netlink: 32 bytes leftover after parsing attributes in process `syz.1.876'. [ 251.104823][ T6022] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 251.257618][ T6022] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 251.261878][ T6022] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 251.265776][ T6022] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 54297, setting to 1023 [ 251.269733][ T6022] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.274656][ T6022] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 251.277819][ T6022] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 251.280324][ T6022] usb 5-1: Product: syz [ 251.281625][ T6022] usb 5-1: Manufacturer: syz [ 251.283146][ T6022] usb 5-1: SerialNumber: syz [ 251.286324][ T6022] usb 5-1: config 0 descriptor?? [ 251.291389][ T6022] usb 5-1: selecting invalid altsetting 0 [ 251.425842][ T9194] syz_tun: entered allmulticast mode [ 251.429340][ T9193] syz_tun: left allmulticast mode [ 251.699066][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.703005][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.997982][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.890'. [ 252.489071][ T6340] usb 5-1: USB disconnect, device number 11 [ 252.783358][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'. [ 253.031867][ T9223] pimreg: left allmulticast mode [ 253.124604][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 253.127619][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 253.130290][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 253.133026][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 254.129059][ T10] usb 42-1: device descriptor read/8, error -110 [ 254.275338][ T9249] syz_tun: entered allmulticast mode [ 254.281076][ T9248] syz_tun: left allmulticast mode [ 254.448648][ T9253] tipc: Enabled bearer , priority 0 [ 254.451284][ T9253] syzkaller0: entered promiscuous mode [ 254.453415][ T9253] syzkaller0: entered allmulticast mode [ 254.458968][ T9253] tipc: Resetting bearer [ 254.525382][ T9252] tipc: Resetting bearer [ 254.538537][ T9252] tipc: Disabling bearer [ 254.775962][ T10] usb usb42-port1: attempt power cycle [ 255.345672][ T10] usb usb42-port1: unable to enumerate USB device [ 255.591313][ T9283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.916'. [ 255.609493][ T9285] lo: entered allmulticast mode [ 255.613919][ T9284] lo: left allmulticast mode [ 255.744819][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 255.914888][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 255.915169][ T53] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 255.918010][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 255.924935][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 255.927993][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 255.930677][ T10] usb 5-1: Product: syz [ 255.932102][ T10] usb 5-1: Manufacturer: syz [ 255.933806][ T10] usb 5-1: SerialNumber: syz [ 255.936846][ T10] usb 5-1: config 0 descriptor?? [ 255.939019][ T9278] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.066629][ T53] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 256.069197][ T53] usb 8-1: can't read configurations, error -61 [ 256.195230][ T53] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 256.298833][ T9296] fuse: Unknown parameter '*8B]B0x0000000000000004' [ 256.357093][ T53] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 256.363052][ T53] usb 8-1: can't read configurations, error -61 [ 256.366837][ T53] usb usb8-port1: attempt power cycle [ 256.715343][ T53] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 256.748533][ T53] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 256.751228][ T53] usb 8-1: can't read configurations, error -61 [ 256.885170][ T53] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 256.907659][ T53] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 256.910180][ T53] usb 8-1: can't read configurations, error -61 [ 256.913069][ T53] usb usb8-port1: unable to enumerate USB device [ 258.050030][ T9316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.925'. [ 258.499985][ T53] usb 5-1: USB disconnect, device number 12 [ 258.586535][ T9326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.929'. [ 258.776922][ T9338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.934'. [ 258.862779][ T830] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 258.868098][ T830] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 258.870500][ T830] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 258.872823][ T830] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 258.875937][ T830] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 258.878420][ T830] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 258.880840][ T830] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 258.883207][ T830] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 258.886029][ T830] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 258.888535][ T830] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 258.900077][ T830] hid-generic 0001:0000:0000.0006: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 258.939352][ T9347] fido_id[9347]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 259.271763][ T9357] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.940'. [ 259.347689][ T9365] overlayfs: failed to resolve './file0': -2 [ 260.336888][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.505231][ T34] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 260.610596][ T9398] syz.3.955 (9398): drop_caches: 2 [ 260.643695][ T9432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.964'. [ 260.666254][ T34] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 260.668905][ T34] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 260.671599][ T34] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 260.674522][ T34] usb 6-1: config 250 has no interface number 0 [ 260.678533][ T34] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 260.682708][ T34] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 260.687961][ T34] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 260.692412][ T34] usb 6-1: config 250 interface 228 has no altsetting 0 [ 260.705785][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 260.714933][ T34] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 260.717774][ T34] usb 6-1: Product: syz [ 260.719180][ T34] usb 6-1: SerialNumber: syz [ 260.732084][ T34] hub 6-1:250.228: bad descriptor, ignoring hub [ 260.734140][ T34] hub 6-1:250.228: probe with driver hub failed with error -5 [ 260.863024][ T9405] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.868987][ T9405] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 260.872510][ T9405] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 260.885220][ T9405] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 260.900398][ T9405] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 260.902406][ T9405] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 260.918089][ T9405] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 260.920504][ T9405] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 260.941483][ T34] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 261.109995][ T9461] xt_hashlimit: size too large, truncated to 1048576 [ 261.112255][ T9461] xt_hashlimit: Unknown mode mask FFFFFFE, kernel too old? [ 261.525788][ T9478] netlink: 68 bytes leftover after parsing attributes in process `syz.3.973'. [ 261.525788][ T9476] netlink: 68 bytes leftover after parsing attributes in process `syz.3.973'. [ 261.733752][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 263.348884][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 263.825398][ T34] usb 6-1: USB disconnect, device number 13 [ 263.829172][ T34] usblp0: removed [ 263.953317][ T40] kauditd_printk_skb: 550 callbacks suppressed [ 263.953329][ T40] audit: type=1400 audit(1770673970.672:1101): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9517 comm="syz.0.985" [ 263.965312][ T9518] tipc: Enabling of bearer rejected, already enabled [ 264.302319][ T40] audit: type=1326 audit(1770673971.022:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.1.987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 264.314883][ T40] audit: type=1326 audit(1770673971.032:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.1.987" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 264.323252][ T40] audit: type=1326 audit(1770673971.032:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.1.987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 264.332742][ T40] audit: type=1326 audit(1770673971.032:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.1.987" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 264.343187][ T40] audit: type=1326 audit(1770673971.032:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.1.987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 264.352755][ T40] audit: type=1326 audit(1770673971.032:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.1.987" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 264.361420][ T40] audit: type=1326 audit(1770673971.032:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.1.987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 264.371955][ T40] audit: type=1326 audit(1770673971.032:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.1.987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 264.381507][ T40] audit: type=1326 audit(1770673971.032:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.1.987" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 264.510157][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'. [ 264.566464][ T9524] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 264.568654][ T9524] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 264.571294][ T9524] vhci_hcd vhci_hcd.0: Device attached [ 264.577475][ T9534] vhci_hcd: connection closed [ 264.577712][ T1169] vhci_hcd vhci_hcd.1: stop threads [ 264.581200][ T1169] vhci_hcd vhci_hcd.1: release socket [ 264.583149][ T1169] vhci_hcd vhci_hcd.1: disconnect device [ 265.553724][ T9554] binder: 9553:9554 ioctl c01864c6 800002c0 returned -22 [ 265.784084][ T9557] overlayfs: missing 'lowerdir' [ 266.282542][ T9561] tmpfs: Unknown parameter 'tmpfs' [ 266.515778][ T9568] fuse: Bad value for 'fd' [ 266.582363][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'. [ 266.609790][ T9573] syz_tun: entered allmulticast mode [ 266.616087][ T9572] syz_tun: left allmulticast mode [ 266.720267][ T9575] ata1.00: invalid multi_count 128 ignored [ 267.457204][ T9594] tipc: Enabling of bearer rejected, failed to enable media [ 267.506895][ T9600] fuse: Bad value for 'fd' [ 267.570673][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1006'. [ 267.573672][ T9602] bridge_slave_1: left allmulticast mode [ 267.575799][ T9602] bridge_slave_1: left promiscuous mode [ 267.580018][ T9602] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.591442][ T9602] bridge_slave_0: left allmulticast mode [ 267.593384][ T9602] bridge_slave_0: left promiscuous mode [ 267.596171][ T9602] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.158257][ T9644] fuse: Bad value for 'fd' [ 268.263180][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1013'. [ 268.765168][ T9637] lo speed is unknown, defaulting to 1000 [ 269.305573][ T9658] tmpfs: Unknown parameter 'tmpfs' [ 269.562564][ T9666] 9pnet_virtio: no channels available for device syz [ 270.061046][ T9686] fuse: Bad value for 'fd' [ 270.117061][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1024'. [ 270.419296][ T9693] syzkaller1: entered promiscuous mode [ 270.421362][ T9693] syzkaller1: entered allmulticast mode [ 271.280880][ T9718] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 271.283107][ T9718] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 271.290062][ T9718] vhci_hcd vhci_hcd.0: Device attached [ 271.295787][ T9718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1032'. [ 271.298231][ T9719] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 271.309717][ T9720] 9pnet_fd: Insufficient options for proto=fd [ 271.417324][ T9732] fuse: Bad value for 'fd' [ 271.466610][ T6022] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 271.524839][ T6022] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 271.528353][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'. [ 271.933371][ T9721] vhci_hcd: connection reset by peer [ 271.938223][ T1144] vhci_hcd vhci_hcd.1: stop threads [ 271.940700][ T1144] vhci_hcd vhci_hcd.1: release socket [ 271.942704][ T1144] vhci_hcd vhci_hcd.1: disconnect device [ 272.483465][ T9751] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 272.485571][ T9751] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 272.496361][ T9751] vhci_hcd vhci_hcd.0: Device attached [ 272.527981][ T9751] netlink: 'syz.3.1042': attribute type 1 has an invalid length. [ 272.729094][ T9751] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.735381][ T60] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 272.789809][ T9759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1046'. [ 272.994930][ T34] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 273.135374][ T34] usb 7-1: device descriptor read/64, error -71 [ 273.374981][ T34] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 273.505085][ T34] usb 7-1: device descriptor read/64, error -71 [ 273.615023][ T34] usb usb7-port1: attempt power cycle [ 273.665173][ T830] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 273.814870][ T830] usb 5-1: Using ep0 maxpacket: 8 [ 273.818028][ T830] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.820290][ T830] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 273.823270][ T830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.827825][ T830] usb 5-1: config 0 descriptor?? [ 273.871985][ T9752] vhci_hcd: connection reset by peer [ 273.875850][ T1243] vhci_hcd vhci_hcd.3: stop threads [ 273.877555][ T1243] vhci_hcd vhci_hcd.3: release socket [ 273.884834][ T1243] vhci_hcd vhci_hcd.3: disconnect device [ 273.964855][ T34] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 273.985601][ T34] usb 7-1: device descriptor read/8, error -71 [ 274.243385][ T830] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 274.245347][ T34] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 274.285425][ T34] usb 7-1: device descriptor read/8, error -71 [ 274.395491][ T34] usb usb7-port1: unable to enumerate USB device [ 274.444285][ T830] usb 5-1: USB disconnect, device number 13 [ 275.874432][ T9820] lo speed is unknown, defaulting to 1000 [ 275.972837][ T9826] overlayfs: missing 'lowerdir' [ 276.983048][ T9828] syz_tun: entered allmulticast mode [ 276.986454][ T9827] syz_tun: left allmulticast mode [ 277.128337][ T9835] overlayfs: missing 'lowerdir' [ 277.268802][ T9837] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 277.273139][ T6022] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 277.596003][ T9855] syz_tun: entered allmulticast mode [ 277.599489][ T9854] syz_tun: left allmulticast mode [ 277.855652][ T60] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 278.624098][ T9872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1079'. [ 278.826435][ T9879] random: crng reseeded on system resumption [ 278.917836][ T9891] syz_tun: entered allmulticast mode [ 278.922243][ T9889] syz_tun: left allmulticast mode [ 278.957320][ T9897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1089'. [ 280.168578][ T9918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.963718][ T9934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1101'. [ 282.659697][ T9962] trusted_key: encrypted_key: insufficient parameters specified [ 283.677158][ T9966] netlink: 'syz.0.1110': attribute type 13 has an invalid length. [ 283.683368][ T9968] netlink: 'syz.0.1110': attribute type 13 has an invalid length. [ 283.715055][ T10] lo speed is unknown, defaulting to 1000 [ 283.734249][ T9966] tipc: Disabling bearer [ 284.090113][ T9984] fuse: Bad value for 'fd' [ 284.101458][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1114'. [ 284.566328][ T9995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1118'. [ 285.767191][T10013] 9pnet_fd: Insufficient options for proto=fd [ 285.977867][T10029] ip6tnl0: left promiscuous mode [ 285.987469][T10029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.529864][T10044] geneve2: entered promiscuous mode [ 286.575175][ T6340] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 286.766598][ T6340] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 286.769203][ T6340] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 286.772569][ T6340] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 286.789105][ T6340] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 286.792247][ T6340] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 286.797940][ T6340] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 286.800651][ T6340] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 286.802971][ T6340] usb 5-1: Product: syz [ 286.804198][ T6340] usb 5-1: Manufacturer: syz [ 286.813000][ T6340] cdc_wdm 5-1:1.0: skipping garbage [ 286.814576][ T6340] cdc_wdm 5-1:1.0: skipping garbage [ 286.816217][ T6340] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 287.024092][ T6340] usb 5-1: USB disconnect, device number 14 [ 288.405917][T10093] fuse: Bad value for 'group_id' [ 288.407684][T10093] fuse: Bad value for 'group_id' [ 288.645196][T10097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.650020][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'. [ 288.653075][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 288.699812][T10099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.704686][T10099] bond1: (slave bond0): making interface the new active one [ 288.722278][T10099] bond1: (slave bond0): Enslaving as an active interface with an up link [ 288.775403][T10097] bond1: (slave bond0): Releasing active interface [ 288.874668][T10097] bridge_slave_0: left allmulticast mode [ 288.877574][T10097] bridge_slave_0: left promiscuous mode [ 288.879475][T10097] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.886751][T10097] bridge_slave_1: left allmulticast mode [ 288.888706][T10097] bridge_slave_1: left promiscuous mode [ 288.890576][T10097] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.946293][T10097] bond0: (slave bond_slave_0): Releasing backup interface [ 289.058337][T10097] team0: Port device team_slave_0 removed [ 289.064556][T10097] team0: Port device team_slave_1 removed [ 289.068221][T10097] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 290.668785][T10145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1162'. [ 291.796728][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1172'. [ 291.964083][T10177] fuse: Bad value for 'fd' [ 292.021401][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1175'. [ 292.745213][ T5987] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 292.898580][ T5987] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 292.901415][ T5987] usb 8-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 292.906306][ T5987] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 292.909189][ T5987] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 292.912699][ T5987] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 292.918620][ T5987] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 292.921499][ T5987] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 292.924109][ T5987] usb 8-1: Product: syz [ 292.926100][ T5987] usb 8-1: Manufacturer: syz [ 292.937144][ T5987] cdc_wdm 8-1:1.0: skipping garbage [ 292.939323][ T5987] cdc_wdm 8-1:1.0: skipping garbage [ 292.941113][ T5987] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 293.148796][ T5987] usb 8-1: USB disconnect, device number 14 [ 294.293093][T10226] fuse: Bad value for 'fd' [ 294.655105][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1189'. [ 295.446737][T10249] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 295.449521][T10249] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 295.452795][T10249] vhci_hcd vhci_hcd.0: Device attached [ 295.655352][ T7229] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 295.715036][ T7229] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 295.715096][ T60] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 295.876327][ T60] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 295.880666][ T60] usb 8-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 295.886126][ T60] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 295.889125][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.900766][ T60] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 295.927548][ T60] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 296.106661][T10249] Bluetooth: MGMT ver 1.23 [ 296.163476][ T60] usb 8-1: USB disconnect, device number 15 [ 297.906774][T10279] fuse: Bad value for 'fd' [ 298.105046][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 298.269147][T10284] IPv6: NLM_F_REPLACE set, but no existing node found! [ 298.485951][ T6022] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 298.634930][ T6022] usb 6-1: device descriptor read/64, error -71 [ 298.765174][T10250] vhci_hcd: connection reset by peer [ 298.767568][ T84] vhci_hcd vhci_hcd.3: stop threads [ 298.773950][ T84] vhci_hcd vhci_hcd.3: release socket [ 298.776054][ T84] vhci_hcd vhci_hcd.3: disconnect device [ 298.904847][ T6022] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 299.058153][ T6022] usb 6-1: device descriptor read/64, error -71 [ 299.165087][ T6022] usb usb6-port1: attempt power cycle [ 299.514836][ T6022] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 299.545391][ T6022] usb 6-1: device descriptor read/8, error -71 [ 299.785177][ T6022] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 299.805505][ T6022] usb 6-1: device descriptor read/8, error -71 [ 299.915713][ T6022] usb usb6-port1: unable to enumerate USB device [ 300.281614][T10313] fuse: Bad value for 'fd' [ 300.345803][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1208'. [ 300.503971][T10317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1209'. [ 300.517732][T10319] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 300.520489][T10319] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 300.527016][T10319] vhci_hcd vhci_hcd.0: Device attached [ 300.704957][ T6022] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 300.815068][ T7229] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 301.666649][ T6022] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 301.725804][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 302.161616][T10338] FAULT_INJECTION: forcing a failure. [ 302.161616][T10338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.166425][T10338] CPU: 1 UID: 0 PID: 10338 Comm: syz.2.1215 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.166443][T10338] Tainted: [L]=SOFTLOCKUP [ 302.166447][T10338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 302.166454][T10338] Call Trace: [ 302.166458][T10338] [ 302.166462][T10338] dump_stack_lvl+0x100/0x190 [ 302.166501][T10338] should_fail_ex.cold+0x5/0xa [ 302.166519][T10338] _copy_from_user+0x2e/0xd0 [ 302.166544][T10338] v4l2_compat_get_array_args+0x1a5/0x760 [ 302.166559][T10338] ? __pfx_v4l2_compat_get_array_args+0x10/0x10 [ 302.166569][T10338] ? rcu_is_watching+0x12/0xc0 [ 302.166580][T10338] ? trace_kmalloc+0x83/0xb0 [ 302.166594][T10338] ? __kvmalloc_node_noprof+0x36a/0xac0 [ 302.166607][T10338] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 302.166624][T10338] ? video_usercopy+0x706/0x1400 [ 302.166639][T10338] video_usercopy+0xc21/0x1400 [ 302.166652][T10338] ? __pfx___video_do_ioctl+0x10/0x10 [ 302.166666][T10338] ? __pfx_video_usercopy+0x10/0x10 [ 302.166682][T10338] ? hook_file_ioctl_common+0x146/0x410 [ 302.166701][T10338] v4l2_ioctl+0x1bd/0x250 [ 302.166716][T10338] v4l2_compat_ioctl32+0x20f/0x2d0 [ 302.166726][T10338] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 302.166736][T10338] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 302.166749][T10338] __do_fast_syscall_32+0xde/0x660 [ 302.166771][T10338] do_fast_syscall_32+0x32/0x70 [ 302.166785][T10338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.166802][T10338] RIP: 0023:0xf742d579 [ 302.166810][T10338] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 302.166820][T10338] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 302.166831][T10338] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0185648 [ 302.166837][T10338] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.166843][T10338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.166849][T10338] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 302.166855][T10338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.166868][T10338] [ 302.216087][ T10] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 302.247481][ T10] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 302.247506][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 302.247518][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.251098][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 302.276194][ T10] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 302.277262][ T7714] udevd[7714]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.535035][ T10] usb 5-1: USB disconnect, device number 15 [ 302.989347][T10348] netfs: Couldn't get user pages (rc=-14) [ 303.558033][T10355] fuse: Bad value for 'fd' [ 303.615832][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'. [ 303.895599][T10320] vhci_hcd: connection reset by peer [ 303.898588][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 303.901162][ T1142] vhci_hcd vhci_hcd.0: release socket [ 303.903896][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 304.186212][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 304.314889][ T9] usb 5-1: device descriptor read/64, error -71 [ 304.625031][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 304.754991][ T9] usb 5-1: device descriptor read/64, error -71 [ 304.875264][ T9] usb usb5-port1: attempt power cycle [ 305.215120][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 305.237403][ T9] usb 5-1: device descriptor read/8, error -71 [ 305.494841][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 305.536766][ T9] usb 5-1: device descriptor read/8, error -71 [ 305.716217][ T9] usb usb5-port1: unable to enumerate USB device [ 305.866328][T10390] FAULT_INJECTION: forcing a failure. [ 305.866328][T10390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.870727][T10390] CPU: 1 UID: 0 PID: 10390 Comm: syz.2.1228 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.870745][T10390] Tainted: [L]=SOFTLOCKUP [ 305.870748][T10390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 305.870755][T10390] Call Trace: [ 305.870764][T10390] [ 305.870769][T10390] dump_stack_lvl+0x100/0x190 [ 305.870786][T10390] should_fail_ex.cold+0x5/0xa [ 305.870803][T10390] _copy_from_user+0x2e/0xd0 [ 305.870820][T10390] get_compat_insn+0x97/0x230 [ 305.870835][T10390] ? __pfx_get_compat_insn+0x10/0x10 [ 305.870846][T10390] ? __kmalloc_noprof+0x365/0x9c0 [ 305.870862][T10390] comedi_compat_ioctl+0x3d3/0xe20 [ 305.870877][T10390] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 305.870893][T10390] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 305.870905][T10390] ? do_vfs_ioctl+0x226/0x13e0 [ 305.870922][T10390] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 305.870942][T10390] ? find_held_lock+0x2b/0x80 [ 305.870953][T10390] ? hook_file_ioctl_common+0x146/0x410 [ 305.870971][T10390] ? __fget_files+0x21f/0x3d0 [ 305.870986][T10390] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 305.871001][T10390] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 305.871014][T10390] __do_fast_syscall_32+0xde/0x660 [ 305.871031][T10390] do_fast_syscall_32+0x32/0x70 [ 305.871044][T10390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.871057][T10390] RIP: 0023:0xf742d579 [ 305.871066][T10390] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 305.871076][T10390] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 305.871086][T10390] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008008640b [ 305.871093][T10390] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.871099][T10390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.871105][T10390] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 305.871111][T10390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.871124][T10390] [ 306.032609][T10392] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 306.065158][T10393] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 306.067241][T10393] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 306.070270][T10393] vhci_hcd vhci_hcd.0: Device attached [ 306.535168][ T34] usb 40-1: SetAddress Request (10) to port 0 [ 306.537736][ T34] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 306.539417][T10400] ubi31: detaching mtd0 [ 306.567726][T10400] ubi31: mtd0 is detached [ 306.835797][ T6022] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 307.144076][T10394] vhci_hcd: connection reset by peer [ 307.146244][ T1169] vhci_hcd vhci_hcd.1: stop threads [ 307.148029][ T1169] vhci_hcd vhci_hcd.1: release socket [ 307.149903][ T1169] vhci_hcd vhci_hcd.1: disconnect device [ 307.438718][T10410] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 307.784964][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 307.798253][T10414] fuse: Bad value for 'fd' [ 307.853513][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'. [ 307.934817][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 307.942128][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 307.949575][ T10] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 307.953368][ T10] usb 5-1: config 179 has no interface number 0 [ 307.957526][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 307.961896][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 307.966413][ T10] usb 5-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 307.971313][ T10] usb 5-1: config 179 interface 65 has no altsetting 0 [ 307.974142][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 307.979114][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.062857][T10417] 9pnet_virtio: no channels available for device syz [ 308.948098][T10422] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1237'. [ 308.950942][T10422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1237'. [ 309.314893][ T6340] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 309.454863][ T6340] usb 8-1: device descriptor read/64, error -71 [ 309.694892][ T6340] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 309.834876][ T6340] usb 8-1: device descriptor read/64, error -71 [ 309.945199][ T6340] usb usb8-port1: attempt power cycle [ 310.222924][T10437] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1240'. [ 310.265863][T10439] veth1_macvtap: left promiscuous mode [ 310.267723][T10439] macsec0: entered promiscuous mode [ 310.275214][T10439] veth1_macvtap: entered promiscuous mode [ 310.277310][T10439] macsec0: left promiscuous mode [ 310.284867][ T6340] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 310.306042][ T6340] usb 8-1: device descriptor read/8, error -71 [ 310.545124][ T6340] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 310.565612][ T6340] usb 8-1: device descriptor read/8, error -71 [ 310.675162][ T6340] usb usb8-port1: unable to enumerate USB device [ 310.989915][ T53] usb 5-1: USB disconnect, device number 20 [ 311.021045][T10442] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 311.023162][T10442] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 311.027256][T10442] vhci_hcd vhci_hcd.0: Device attached [ 311.181681][T10446] vhci_hcd: connection closed [ 311.182016][ T84] vhci_hcd vhci_hcd.2: stop threads [ 311.186567][ T84] vhci_hcd vhci_hcd.2: release socket [ 311.189166][ T84] vhci_hcd vhci_hcd.2: disconnect device [ 311.225374][T10449] netfs: Couldn't get user pages (rc=-14) [ 311.624885][ T34] usb 40-1: device descriptor read/8, error -110 [ 311.865504][T10465] netlink: 107460 bytes leftover after parsing attributes in process `syz.2.1250'. [ 311.880269][T10465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1250'. [ 311.887081][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1250'. [ 311.890178][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'. [ 312.040807][ T34] usb usb40-port1: attempt power cycle [ 312.487339][T10475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1253'. [ 312.643939][ T34] usb usb40-port1: unable to enumerate USB device [ 313.224856][ T6001] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 313.227995][ T34] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 313.233485][T10514] netlink: 'syz.1.1265': attribute type 1 has an invalid length. [ 313.263001][T10514] 8021q: adding VLAN 0 to HW filter on device bond3 [ 313.265777][T10516] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 313.268636][T10516] bond3: (slave wlan0): Opening slave failed [ 313.374880][ T6001] usb 5-1: device descriptor read/64, error -71 [ 313.377164][ T34] usb 7-1: device descriptor read/64, error -71 [ 313.614944][ T6001] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 313.618362][ T34] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 313.765161][ T6001] usb 5-1: device descriptor read/64, error -71 [ 313.768165][ T34] usb 7-1: device descriptor read/64, error -71 [ 313.875422][ T34] usb usb7-port1: attempt power cycle [ 313.878270][ T6001] usb usb5-port1: attempt power cycle [ 314.235259][ T6001] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 314.238019][ T34] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 314.255817][ T6001] usb 5-1: device descriptor read/8, error -71 [ 314.259007][ T34] usb 7-1: device descriptor read/8, error -71 [ 314.390152][T10533] tmpfs: Unknown parameter 'grpputa_block_hardlimit' [ 314.469035][T10533] gtp0: entered promiscuous mode [ 314.473367][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'. [ 314.515027][ T34] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 314.517879][ T6001] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 314.547216][ T34] usb 7-1: device descriptor read/8, error -71 [ 314.555235][ T6001] usb 5-1: device descriptor read/8, error -71 [ 314.655290][ T34] usb usb7-port1: unable to enumerate USB device [ 314.665048][ T6001] usb usb5-port1: unable to enumerate USB device [ 314.892007][T10543] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 315.149535][T10521] netfs: Couldn't get user pages (rc=-14) [ 316.260947][T10562] fuse: Bad value for 'fd' [ 316.552980][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1284'. [ 316.757045][T10586] fuse: Bad value for 'fd' [ 316.859086][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1287'. [ 317.507769][T10591] tmpfs: Cannot retroactively limit inodes [ 320.549892][T10632] netlink: 107460 bytes leftover after parsing attributes in process `syz.0.1302'. [ 320.587389][T10632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1302'. [ 320.598063][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1302'. [ 320.601837][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 320.779058][T10643] fuse: Bad value for 'fd' [ 320.835881][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1305'. [ 321.518395][T10650] FAULT_INJECTION: forcing a failure. [ 321.518395][T10650] name failslab, interval 1, probability 0, space 0, times 0 [ 321.525349][T10650] CPU: 1 UID: 0 PID: 10650 Comm: syz.0.1308 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.525379][T10650] Tainted: [L]=SOFTLOCKUP [ 321.525383][T10650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 321.525389][T10650] Call Trace: [ 321.525394][T10650] [ 321.525398][T10650] dump_stack_lvl+0x100/0x190 [ 321.525415][T10650] should_fail_ex.cold+0x5/0xa [ 321.525434][T10650] should_failslab+0xc2/0x120 [ 321.525449][T10650] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 321.525463][T10650] ? start_dirop+0x79/0xb0 [ 321.525474][T10650] ? alloc_inode+0x68/0x250 [ 321.525491][T10650] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 321.525504][T10650] ? alloc_inode+0x68/0x250 [ 321.525518][T10650] alloc_inode+0x68/0x250 [ 321.525533][T10650] new_inode+0x22/0x1c0 [ 321.525549][T10650] __debugfs_create_file+0x105/0x4f0 [ 321.525584][T10650] debugfs_create_file_full+0x41/0x60 [ 321.525598][T10650] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 321.525615][T10650] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 321.525644][T10650] ? alloc_netdev_mqs+0xd7/0x14f0 [ 321.525660][T10650] ? ww_mutex_lock+0xe1/0x160 [ 321.525672][T10650] ? lockdep_init_map_type+0x5c/0x250 [ 321.525689][T10650] ? __pfx_xfrmi_dev_setup+0x10/0x10 [ 321.525703][T10650] alloc_netdev_mqs+0x314/0x14f0 [ 321.525722][T10650] rtnl_create_link+0xc13/0xf80 [ 321.525742][T10650] rtnl_newlink+0x13b8/0x2380 [ 321.525763][T10650] ? __pfx_rtnl_newlink+0x10/0x10 [ 321.525779][T10650] ? kasan_quarantine_put+0x104/0x240 [ 321.525791][T10650] ? lockdep_hardirqs_on+0x78/0x100 [ 321.525805][T10650] ? kmem_cache_free+0x143/0x720 [ 321.525816][T10650] ? dev_queue_xmit_nit+0x72c/0xa60 [ 321.525838][T10650] ? find_held_lock+0x2b/0x80 [ 321.525853][T10650] ? find_held_lock+0x2b/0x80 [ 321.525862][T10650] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 321.525883][T10650] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 321.525900][T10650] ? __pfx_rtnl_newlink+0x10/0x10 [ 321.525916][T10650] rtnetlink_rcv_msg+0x95e/0xe90 [ 321.525934][T10650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 321.525954][T10650] ? ref_tracker_free+0x37e/0x6c0 [ 321.525965][T10650] netlink_rcv_skb+0x159/0x420 [ 321.525975][T10650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 321.525992][T10650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.526007][T10650] ? netlink_deliver_tap+0x1ae/0xcc0 [ 321.526025][T10650] netlink_unicast+0x5aa/0x870 [ 321.526044][T10650] ? __pfx_netlink_unicast+0x10/0x10 [ 321.526060][T10650] ? __pfx___might_resched+0x10/0x10 [ 321.526081][T10650] netlink_sendmsg+0x8b0/0xda0 [ 321.526100][T10650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.526118][T10650] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 321.526134][T10650] ____sys_sendmsg+0xa54/0xc30 [ 321.526147][T10650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.526166][T10650] ___sys_sendmsg+0x190/0x1e0 [ 321.526179][T10650] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.526209][T10650] __sys_sendmsg+0x170/0x220 [ 321.526226][T10650] ? __pfx___sys_sendmsg+0x10/0x10 [ 321.526246][T10650] ? __pfx_ksys_write+0x10/0x10 [ 321.526262][T10650] __do_fast_syscall_32+0xde/0x660 [ 321.526277][T10650] do_fast_syscall_32+0x32/0x70 [ 321.526291][T10650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.526304][T10650] RIP: 0023:0xf73ed579 [ 321.526313][T10650] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 321.526323][T10650] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 321.526334][T10650] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 321.526340][T10650] RDX: 00000000000440b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.526346][T10650] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.526352][T10650] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 321.526359][T10650] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.526373][T10650] [ 321.528460][T10650] debugfs: out of free dentries, can not create file 'netdev@ffff888069da2618' [ 321.716360][T10660] fuse: Invalid rootmode [ 321.789576][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.519978][T10684] netlink: 107460 bytes leftover after parsing attributes in process `syz.1.1317'. [ 322.532865][T10684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1317'. [ 322.538320][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1317'. [ 322.541257][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 322.875521][T10689] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 322.877618][T10689] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 322.880189][T10689] vhci_hcd vhci_hcd.0: Device attached [ 322.886914][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 322.886925][ T40] audit: type=1800 audit(1770674029.612:1160): pid=10689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1319" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 322.991285][T10698] Invalid logical block size (989855744) [ 323.027228][T10701] fuse: Bad value for 'fd' [ 323.041234][T10691] vhci_hcd: connection closed [ 323.041461][ T1169] vhci_hcd vhci_hcd.2: stop threads [ 323.045625][ T1169] vhci_hcd vhci_hcd.2: release socket [ 323.049452][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1324'. [ 323.055138][ T1169] vhci_hcd vhci_hcd.2: disconnect device [ 323.816250][T10723] netlink: 'syz.2.1328': attribute type 3 has an invalid length. [ 324.187639][T10736] fuse: Bad value for 'rootmode' [ 324.195598][T10732] lo: entered allmulticast mode [ 326.210114][T10772] fuse: Bad value for 'rootmode' [ 326.386381][T10788] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.407083][T10788] __nla_validate_parse: 1 callbacks suppressed [ 326.407132][T10788] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1347'. [ 326.493393][T10795] 9pnet_virtio: no channels available for device qY3aK [ 326.725182][ T40] audit: type=1326 audit(1770674033.452:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.0.1350" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7fc00000 [ 327.349678][ T40] audit: type=1326 audit(1770674034.072:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.0.1350" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf73ed579 code=0x7fc00000 [ 327.602963][T10828] fuse: Unknown parameter 'use00000000000000000000' [ 327.605114][T10829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1364'. [ 327.608809][T10829] 8021q: VLANs not supported on tunl0 [ 327.689851][T10840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1368'. [ 327.693475][T10840] xfrm0: entered promiscuous mode [ 327.695441][T10840] xfrm0: entered allmulticast mode [ 327.724311][T10840] overlayfs: missing 'lowerdir' [ 327.824997][ T5987] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 327.952362][T10863] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1377'. [ 327.960915][T10863] vlan2: entered promiscuous mode [ 327.962666][T10863] bond0: entered promiscuous mode [ 327.964369][T10863] bond_slave_0: entered promiscuous mode [ 327.967339][T10863] bond_slave_1: entered promiscuous mode [ 327.984889][ T5987] usb 7-1: Using ep0 maxpacket: 8 [ 327.991445][ T5987] usb 7-1: config 0 interface 0 has no altsetting 0 [ 327.993834][ T5987] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 328.000748][ T5987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.004504][ T5987] usb 7-1: config 0 descriptor?? [ 328.179861][T10872] CIFS mount error: No usable UNC path provided in device string! [ 328.179861][T10872] [ 328.183481][T10872] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 328.314826][ T6340] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 328.425050][ T5987] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 328.467217][ T6340] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 328.469856][ T6340] usb 8-1: config 0 has no interface number 0 [ 328.471822][ T6340] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 328.484803][ T6340] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 328.488211][ T6340] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 328.491852][ T6340] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 328.495718][ T6340] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 328.499123][ T6340] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 328.503208][ T6340] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 328.506480][ T6340] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.514915][ T6340] usb 8-1: config 0 descriptor?? [ 328.517074][T10870] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 328.519466][T10870] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 328.524706][ T6340] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 328.616692][ T7229] usb 7-1: USB disconnect, device number 25 [ 328.725879][T10870] ldusb 8-1:0.55: Write buffer overflow, 138595949 bytes dropped [ 328.813015][ T5987] usb 8-1: USB disconnect, device number 20 [ 328.815513][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.815676][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.824548][ T5987] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 329.748218][T10908] fuse: Bad value for 'fd' [ 329.870423][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 330.341204][T10915] fuse: Unknown parameter 'use00000000000000000000' [ 330.365174][T10916] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 330.367310][T10916] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 330.370373][T10916] vhci_hcd vhci_hcd.0: Device attached [ 330.599455][T10917] vhci_hcd: connection closed [ 330.601486][ T12] vhci_hcd vhci_hcd.3: stop threads [ 330.605137][ T12] vhci_hcd vhci_hcd.3: release socket [ 330.605313][ T5987] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 330.607091][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 330.718056][T10923] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.732086][T10923] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1393'. [ 330.738633][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.741635][ T1169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.744438][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.747360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.912308][T10927] infiniband syz1: set active [ 330.914238][T10927] infiniband syz1: added team_slave_0 [ 330.959886][T10927] RDS/IB: syz1: added [ 330.962402][T10927] smc: adding ib device syz1 with port count 1 [ 330.976507][T10927] smc: ib device syz1 port 1 has no pnetid [ 331.244469][T10938] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 331.380693][T10943] CIFS mount error: No usable UNC path provided in device string! [ 331.380693][T10943] [ 331.383886][T10943] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 331.865262][ T1333] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 332.016244][ T1333] usb 7-1: Using ep0 maxpacket: 8 [ 332.019298][ T1333] usb 7-1: config 0 interface 0 has no altsetting 0 [ 332.021454][ T1333] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 332.024322][ T1333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.028504][ T1333] usb 7-1: config 0 descriptor?? [ 332.435186][ T1333] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 332.644326][T10953] FAULT_INJECTION: forcing a failure. [ 332.644326][T10953] name failslab, interval 1, probability 0, space 0, times 0 [ 332.654288][T10953] CPU: 2 UID: 0 PID: 10953 Comm: syz.2.1404 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.654307][T10953] Tainted: [L]=SOFTLOCKUP [ 332.654311][T10953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 332.654317][T10953] Call Trace: [ 332.654321][T10953] [ 332.654326][T10953] dump_stack_lvl+0x100/0x190 [ 332.654342][T10953] should_fail_ex.cold+0x5/0xa [ 332.654360][T10953] should_failslab+0xc2/0x120 [ 332.654375][T10953] ? tomoyo_encode2+0xfb/0x3c0 [ 332.654384][T10953] __kmalloc_noprof+0xf6/0x9c0 [ 332.654411][T10953] ? tomoyo_encode2+0xfb/0x3c0 [ 332.654421][T10953] tomoyo_encode2+0xfb/0x3c0 [ 332.654433][T10953] tomoyo_encode+0x29/0x50 [ 332.654443][T10953] tomoyo_realpath_from_path+0x18c/0x690 [ 332.654457][T10953] tomoyo_path_number_perm+0x23c/0x580 [ 332.654471][T10953] ? tomoyo_path_number_perm+0x22e/0x580 [ 332.654488][T10953] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 332.654523][T10953] ? find_held_lock+0x2b/0x80 [ 332.654534][T10953] ? hook_file_ioctl_common+0x146/0x410 [ 332.654553][T10953] ? __fget_files+0x215/0x3d0 [ 332.654567][T10953] ? __fget_files+0x21f/0x3d0 [ 332.654581][T10953] security_file_ioctl_compat+0xd3/0x230 [ 332.654598][T10953] __ia32_compat_sys_ioctl+0xc2/0x360 [ 332.654610][T10953] __do_fast_syscall_32+0xde/0x660 [ 332.654625][T10953] do_fast_syscall_32+0x32/0x70 [ 332.654638][T10953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.654652][T10953] RIP: 0023:0xf742d579 [ 332.654661][T10953] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 332.654671][T10953] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 332.654682][T10953] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 332.654689][T10953] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.654695][T10953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.654701][T10953] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 332.654706][T10953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 332.654721][T10953] [ 332.774986][T10953] ERROR: Out of memory at tomoyo_realpath_from_path. [ 332.778054][T10953] i2c i2c-2: unsupported multi-msg i2c transaction [ 332.782602][ T34] usb 7-1: USB disconnect, device number 26 [ 332.975191][ T6001] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 333.124882][ T1333] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 333.124983][ T6001] usb 8-1: Using ep0 maxpacket: 8 [ 333.131495][ T6001] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 333.134049][ T6001] usb 8-1: config 0 has no interface number 0 [ 333.136344][ T6001] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 333.140364][ T6001] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 333.144255][ T6001] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 333.148339][ T6001] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 333.153535][ T6001] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 333.157619][ T6001] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.163412][ T6001] usb 8-1: config 0 descriptor?? [ 333.168959][ T6001] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 333.274848][ T1333] usb 6-1: Using ep0 maxpacket: 32 [ 333.349350][ T1333] usb 6-1: unable to get BOS descriptor or descriptor too short [ 333.355926][ T1333] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 333.359250][ T1333] usb 6-1: can't read configurations, error -71 [ 333.869540][T10982] tunl0: entered promiscuous mode [ 333.872458][T10982] netlink: '۳1>pn': attribute type 4 has an invalid length. [ 333.875299][T10982] netlink: 9 bytes leftover after parsing attributes in process `۳1>pn'. [ 333.985197][T10995] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.988025][T10995] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1413'. [ 334.575928][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.578888][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.140043][T11025] netlink: 'syz.1.1423': attribute type 17 has an invalid length. [ 335.145887][T11025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.149246][T11025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.387751][ T7229] usb 8-1: USB disconnect, device number 21 [ 335.393051][ T7229] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 335.515447][T11029] ata3.00: invalid multi_count 16 ignored [ 335.685014][ T5987] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 335.776327][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.781514][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.847222][T11041] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1425'. [ 335.850526][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1425'. [ 336.517740][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.520480][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.027774][T11072] comedi comedi0: comedi_config --init_data is deprecated [ 337.197108][T11075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.202236][T11075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.205378][T11075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.637146][T11084] lo speed is unknown, defaulting to 1000 [ 337.766938][T11087] lo speed is unknown, defaulting to 1000 [ 338.586613][T11122] fuse: Bad value for 'fd' [ 339.433480][T11146] binder: 11145:11146 ioctl c0306201 800001c0 returned -14 [ 339.532780][T11151] fuse: Bad value for 'fd' [ 339.743227][T11157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1467'. [ 340.133148][T11165] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1471'. [ 340.230874][T11174] fuse: Bad value for 'fd' [ 340.282266][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 340.286951][T11184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1477'. [ 340.352290][ T1142] net_ratelimit: 8 callbacks suppressed [ 340.352303][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.357919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.414902][ T34] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 340.544891][ T34] usb 6-1: device descriptor read/64, error -71 [ 340.785177][ T34] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 340.915131][ T34] usb 6-1: device descriptor read/64, error -71 [ 341.025830][ T34] usb usb6-port1: attempt power cycle [ 341.091130][T11209] fuse: Unknown parameter '0x0000000000000003' [ 341.414314][ T34] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 341.453195][T11233] siw: device registration error -23 [ 341.496773][ T34] usb 6-1: device descriptor read/8, error -71 [ 341.745212][ T34] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 341.766517][ T34] usb 6-1: device descriptor read/8, error -71 [ 341.876649][ T34] usb usb6-port1: unable to enumerate USB device [ 342.167632][ T40] audit: type=1326 audit(1770674048.892:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11236 comm="syz.0.1495" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73ed579 code=0x0 [ 342.175872][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.178507][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.181225][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.184602][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.446973][T11245] fuse: Unknown parameter '0x0000000000000003' [ 342.588442][T11247] 9p: Bad value for 'version' [ 343.066118][T11265] input: syz0 as /devices/virtual/input/input13 [ 344.731179][T11312] binder: 11311:11312 ioctl c0306201 800001c0 returned -14 [ 345.026236][T11319] sctp: [Deprecated]: syz.1.1519 (pid 11319) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.026236][T11319] Use struct sctp_sack_info instead [ 345.483147][T11333] ip6t_REJECT: ECHOREPLY is not supported [ 345.676485][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1527'. [ 345.700589][T11339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.747224][T11339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.757244][T11338] lo speed is unknown, defaulting to 1000 [ 345.858627][T11339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.869729][T11339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.879570][T11339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.885052][T11343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.888402][T11343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.891596][T11343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.096292][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.101073][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.403935][T11347] fuse: Unknown parameter '0x0000000000000003' [ 347.101487][T11376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1539'. [ 348.097059][T11397] 9p: Bad value for 'wfdno' [ 348.194862][ T34] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 348.354868][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 348.367051][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 348.370436][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 348.373548][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 348.376709][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.380754][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 348.383604][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.600386][ T34] usb 6-1: GET_CAPABILITIES returned 0 [ 348.602242][ T34] usbtmc 6-1:16.0: can't read capabilities [ 348.754797][ T1333] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 348.842623][ T6340] usb 6-1: USB disconnect, device number 24 [ 348.885468][ T1333] usb 5-1: device descriptor read/64, error -71 [ 348.943041][T11427] 9p: Bad value for 'wfdno' [ 348.955028][ T24] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 349.116943][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 349.124439][ T24] usb 7-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 349.127907][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 349.134915][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 349.139096][ T1333] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 349.148104][ T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 349.151057][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 349.153605][ T24] usb 7-1: Product: syz [ 349.155434][ T24] usb 7-1: Manufacturer: syz [ 349.163408][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 349.166754][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 349.168540][ T24] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 349.185410][ T10] libceph: connect (1)[c::]:6789 error -101 [ 349.188338][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 349.275457][ T1333] usb 5-1: device descriptor read/64, error -71 [ 349.330808][T11433] ceph: No mds server is up or the cluster is laggy [ 349.394930][ T1333] usb usb5-port1: attempt power cycle [ 349.395607][ T7229] usb 7-1: USB disconnect, device number 27 [ 349.756977][ T1333] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 349.775540][ T1333] usb 5-1: device descriptor read/8, error -71 [ 349.986867][T11452] FAULT_INJECTION: forcing a failure. [ 349.986867][T11452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.991188][T11452] CPU: 0 UID: 0 PID: 11452 Comm: syz.2.1564 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.991206][T11452] Tainted: [L]=SOFTLOCKUP [ 349.991209][T11452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 349.991216][T11452] Call Trace: [ 349.991221][T11452] [ 349.991226][T11452] dump_stack_lvl+0x100/0x190 [ 349.991244][T11452] should_fail_ex.cold+0x5/0xa [ 349.991261][T11452] _copy_to_user+0x32/0xd0 [ 349.991279][T11452] simple_read_from_buffer+0xcb/0x170 [ 349.991291][T11452] proc_fail_nth_read+0x1af/0x230 [ 349.991305][T11452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 349.991318][T11452] ? rw_verify_area+0xce/0x6d0 [ 349.991329][T11452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 349.991341][T11452] vfs_read+0x1e4/0xb30 [ 349.991354][T11452] ? __pfx_vfs_read+0x10/0x10 [ 349.991365][T11452] ? find_held_lock+0x2b/0x80 [ 349.991380][T11452] ? __fget_files+0x215/0x3d0 [ 349.991394][T11452] ? __fget_files+0x21f/0x3d0 [ 349.991410][T11452] ksys_read+0x12a/0x250 [ 349.991421][T11452] ? __pfx_ksys_read+0x10/0x10 [ 349.991436][T11452] do_int80_emulation+0x101/0x470 [ 349.991452][T11452] asm_int80_emulation+0x1a/0x20 [ 349.991463][T11452] RIP: 0023:0xf719572b [ 349.991471][T11452] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 349.991481][T11452] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 349.991492][T11452] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54565d0 [ 349.991498][T11452] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 349.991504][T11452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.991510][T11452] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 349.991516][T11452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.991530][T11452] [ 350.053800][ T1333] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 350.114831][ T1333] usb 5-1: device descriptor read/8, error -71 [ 350.225208][ T1333] usb usb5-port1: unable to enumerate USB device [ 350.330202][T11460] FAULT_INJECTION: forcing a failure. [ 350.330202][T11460] name failslab, interval 1, probability 0, space 0, times 0 [ 350.334248][T11460] CPU: 0 UID: 0 PID: 11460 Comm: syz.2.1566 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.334266][T11460] Tainted: [L]=SOFTLOCKUP [ 350.334269][T11460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.334281][T11460] Call Trace: [ 350.334285][T11460] [ 350.334289][T11460] dump_stack_lvl+0x100/0x190 [ 350.334306][T11460] should_fail_ex.cold+0x5/0xa [ 350.334324][T11460] should_failslab+0xc2/0x120 [ 350.334339][T11460] kmem_cache_alloc_noprof+0x83/0x780 [ 350.334354][T11460] ? skb_clone+0x190/0x400 [ 350.334371][T11460] ? skb_clone+0x190/0x400 [ 350.334385][T11460] skb_clone+0x190/0x400 [ 350.334401][T11460] netlink_trim+0x1f1/0x2f0 [ 350.334416][T11460] netlink_broadcast_filtered+0xd7/0xf50 [ 350.334432][T11460] ? __alloc_skb+0x35d/0x410 [ 350.334446][T11460] ? __pfx___alloc_skb+0x10/0x10 [ 350.334463][T11460] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 350.334480][T11460] ? tfilter_notify_prep+0x1b4/0x200 [ 350.334497][T11460] nlmsg_notify+0x1b0/0x290 [ 350.334509][T11460] tfilter_notify+0x23b/0x2d0 [ 350.334526][T11460] tc_new_tfilter+0x15a6/0x23b0 [ 350.334546][T11460] ? __pfx_tc_new_tfilter+0x10/0x10 [ 350.334555][T11460] ? kmem_cache_free+0x143/0x720 [ 350.334567][T11460] ? kfree_skbmem+0x19a/0x210 [ 350.334581][T11460] ? __lock_acquire+0x4a5/0x2630 [ 350.334602][T11460] ? find_held_lock+0x2b/0x80 [ 350.334612][T11460] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 350.334629][T11460] ? __pfx_tc_new_tfilter+0x10/0x10 [ 350.334639][T11460] rtnetlink_rcv_msg+0x95e/0xe90 [ 350.334657][T11460] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.334677][T11460] ? ref_tracker_free+0x37e/0x6c0 [ 350.334689][T11460] netlink_rcv_skb+0x159/0x420 [ 350.334698][T11460] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.334715][T11460] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.334741][T11460] ? netlink_deliver_tap+0x1ae/0xcc0 [ 350.334761][T11460] netlink_unicast+0x5aa/0x870 [ 350.334779][T11460] ? __pfx_netlink_unicast+0x10/0x10 [ 350.334801][T11460] netlink_sendmsg+0x8b0/0xda0 [ 350.334820][T11460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.334838][T11460] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 350.334854][T11460] ____sys_sendmsg+0xa54/0xc30 [ 350.334867][T11460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.334886][T11460] ___sys_sendmsg+0x190/0x1e0 [ 350.334899][T11460] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.334929][T11460] __sys_sendmsg+0x170/0x220 [ 350.334944][T11460] ? __pfx___sys_sendmsg+0x10/0x10 [ 350.334965][T11460] ? __pfx_ksys_write+0x10/0x10 [ 350.334976][T11460] ? fput+0x79/0x100 [ 350.334992][T11460] __do_fast_syscall_32+0xde/0x660 [ 350.335009][T11460] do_fast_syscall_32+0x32/0x70 [ 350.335022][T11460] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.335036][T11460] RIP: 0023:0xf742d579 [ 350.335044][T11460] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 350.335054][T11460] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 350.335065][T11460] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800001c0 [ 350.335072][T11460] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 350.335078][T11460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.335083][T11460] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 350.335089][T11460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.335103][T11460] [ 350.968010][T11479] CIFS mount error: No usable UNC path provided in device string! [ 350.968010][T11479] [ 350.971296][T11479] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 351.120953][T11489] fuse: Bad value for 'fd' [ 351.176405][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'. [ 351.215718][ T1142] net_ratelimit: 4 callbacks suppressed [ 351.215737][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.221650][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.718169][T11522] netlink: 'syz.2.1587': attribute type 1 has an invalid length. [ 352.730320][T11522] bond3: entered promiscuous mode [ 352.732427][T11522] 8021q: adding VLAN 0 to HW filter on device bond3 [ 352.744013][T11522] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 352.748001][T11522] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 352.751316][T11522] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 353.156058][T11534] lo speed is unknown, defaulting to 1000 [ 353.236190][ T6001] kernel read not supported for file 1273/task/1277/cmdline (pid: 6001 comm: kworker/3:4) [ 353.775198][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.778773][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.782234][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.785070][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.208743][T11584] 9p: Bad value for 'rfdno' [ 356.297670][T11588] fuse: Bad value for 'fd' [ 356.325176][T11582] evm: overlay not supported [ 356.336919][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.341111][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.358194][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1606'. [ 356.415748][T11582] block device autoloading is deprecated and will be removed. [ 356.438420][T11582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.441347][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.332927][T11598] netlink: 'syz.2.1608': attribute type 1 has an invalid length. [ 357.775214][ T1333] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 357.924942][ T1333] usb 7-1: Using ep0 maxpacket: 8 [ 357.928033][ T1333] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 357.932223][ T1333] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 357.936411][ T1333] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 357.939896][ T1333] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.945326][ T1333] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 357.949152][ T1333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.166069][ T1333] usb 7-1: GET_CAPABILITIES returned 0 [ 358.167964][ T1333] usbtmc 7-1:16.0: can't read capabilities [ 358.435295][ T1333] usb 7-1: USB disconnect, device number 28 [ 358.681909][T11614] lo speed is unknown, defaulting to 1000 [ 358.895376][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.898172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.343381][T11631] fuse: Bad value for 'fd' [ 359.388601][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1614'. [ 359.394278][T11629] tunl0: left promiscuous mode [ 359.408712][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 359.475278][T11629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.535143][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.538948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.429699][T11644] lo: Caught tx_queue_len zero misconfig [ 360.431510][T11644] netem: change failed [ 360.600544][T11652] FAULT_INJECTION: forcing a failure. [ 360.600544][T11652] name failslab, interval 1, probability 0, space 0, times 0 [ 360.606293][T11652] CPU: 2 UID: 0 PID: 11652 Comm: syz.1.1620 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.606335][T11652] Tainted: [L]=SOFTLOCKUP [ 360.606342][T11652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 360.606352][T11652] Call Trace: [ 360.606359][T11652] [ 360.606366][T11652] dump_stack_lvl+0x100/0x190 [ 360.606392][T11652] should_fail_ex.cold+0x5/0xa [ 360.606422][T11652] should_failslab+0xc2/0x120 [ 360.606447][T11652] ? tomoyo_encode2+0xfb/0x3c0 [ 360.606465][T11652] __kmalloc_noprof+0xf6/0x9c0 [ 360.606491][T11652] ? tomoyo_encode2+0xfb/0x3c0 [ 360.606506][T11652] tomoyo_encode2+0xfb/0x3c0 [ 360.606527][T11652] tomoyo_encode+0x29/0x50 [ 360.606550][T11652] tomoyo_realpath_from_path+0x18c/0x690 [ 360.606574][T11652] tomoyo_path_number_perm+0x23c/0x580 [ 360.606598][T11652] ? tomoyo_path_number_perm+0x22e/0x580 [ 360.606625][T11652] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 360.606677][T11652] ? find_held_lock+0x2b/0x80 [ 360.606695][T11652] ? hook_file_ioctl_common+0x146/0x410 [ 360.606720][T11652] ? __fget_files+0x215/0x3d0 [ 360.606744][T11652] ? __fget_files+0x21f/0x3d0 [ 360.606768][T11652] security_file_ioctl_compat+0xd3/0x230 [ 360.606796][T11652] __ia32_compat_sys_ioctl+0xc2/0x360 [ 360.606816][T11652] __do_fast_syscall_32+0xde/0x660 [ 360.606841][T11652] do_fast_syscall_32+0x32/0x70 [ 360.606863][T11652] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 360.606885][T11652] RIP: 0023:0xf744d579 [ 360.606899][T11652] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 360.606916][T11652] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 360.606934][T11652] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c020aa04 [ 360.606945][T11652] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.606956][T11652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 360.606966][T11652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.606976][T11652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 360.607000][T11652] [ 360.607069][T11652] ERROR: Out of memory at tomoyo_realpath_from_path. [ 361.429968][T11660] syzkaller1: entered promiscuous mode [ 361.432286][T11660] syzkaller1: entered allmulticast mode [ 361.527865][T11664] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 361.530680][T11664] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 361.534203][T11664] vhci_hcd vhci_hcd.0: Device attached [ 361.815053][ T1333] usb 42-1: SetAddress Request (12) to port 0 [ 361.817613][ T1333] usb 42-1: new SuperSpeed USB device number 12 using vhci_hcd [ 361.878014][T11676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.914923][T11676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.965813][T11676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.973167][T11676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.983240][T11676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.116652][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.120327][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.255322][T11665] vhci_hcd: connection reset by peer [ 362.258898][ T42] vhci_hcd vhci_hcd.2: stop threads [ 362.261143][ T42] vhci_hcd vhci_hcd.2: release socket [ 362.263536][ T42] vhci_hcd vhci_hcd.2: disconnect device [ 362.359933][T11675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.602389][T11669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.701124][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1629'. [ 364.035833][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.575243][ T34] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 364.724840][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 364.727806][ T34] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 364.730627][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.733771][ T34] usb 5-1: config 0 has no interface number 0 [ 364.744794][ T34] usb 5-1: config 0 interface 255 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 364.748952][ T34] usb 5-1: config 0 interface 255 has no altsetting 0 [ 364.755081][ T34] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 364.757969][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.771923][ T34] usb 5-1: config 0 descriptor?? [ 365.227601][ T34] usb 5-1: string descriptor 0 read error: -71 [ 365.236980][ T34] usb 5-1: USB disconnect, device number 29 [ 366.255145][ T6340] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 366.406446][ T6340] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 366.409525][ T6340] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 366.413559][ T6340] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 366.417385][ T6340] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 366.421484][ T6340] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 366.425895][ T6340] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 366.432294][ T6340] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 366.436298][ T6340] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 366.439135][ T6340] usb 5-1: Product: syz [ 366.440702][ T6340] usb 5-1: Manufacturer: syz [ 366.450657][ T6340] cdc_wdm 5-1:1.0: skipping garbage [ 366.452493][ T6340] cdc_wdm 5-1:1.0: skipping garbage [ 366.454484][ T6340] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 366.662482][ T6340] usb 5-1: USB disconnect, device number 30 [ 366.894935][ T1333] usb 42-1: device descriptor read/8, error -110 [ 367.135517][ T61] net_ratelimit: 3 callbacks suppressed [ 367.135533][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.141590][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.154969][ T24] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 367.297041][ T1333] usb usb42-port1: attempt power cycle [ 367.345100][T11738] FAULT_INJECTION: forcing a failure. [ 367.345100][T11738] name failslab, interval 1, probability 0, space 0, times 0 [ 367.350238][T11738] CPU: 2 UID: 0 PID: 11738 Comm: syz.0.1650 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.350256][T11738] Tainted: [L]=SOFTLOCKUP [ 367.350259][T11738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 367.350266][T11738] Call Trace: [ 367.350270][T11738] [ 367.350275][T11738] dump_stack_lvl+0x100/0x190 [ 367.350293][T11738] should_fail_ex.cold+0x5/0xa [ 367.350309][T11738] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 367.350321][T11738] should_failslab+0xc2/0x120 [ 367.350336][T11738] kmem_cache_alloc_noprof+0x83/0x780 [ 367.350351][T11738] ? skb_clone+0x190/0x400 [ 367.350369][T11738] ? skb_clone+0x190/0x400 [ 367.350389][T11738] skb_clone+0x190/0x400 [ 367.350405][T11738] netlink_deliver_tap+0xaed/0xcc0 [ 367.350425][T11738] netlink_unicast+0x650/0x870 [ 367.350443][T11738] ? __pfx_netlink_unicast+0x10/0x10 [ 367.350465][T11738] netlink_sendmsg+0x8b0/0xda0 [ 367.350484][T11738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.350502][T11738] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 367.350519][T11738] ____sys_sendmsg+0xa54/0xc30 [ 367.350532][T11738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.350550][T11738] ___sys_sendmsg+0x190/0x1e0 [ 367.350563][T11738] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.350592][T11738] __sys_sendmsg+0x170/0x220 [ 367.350608][T11738] ? __pfx___sys_sendmsg+0x10/0x10 [ 367.350628][T11738] ? __pfx_ksys_write+0x10/0x10 [ 367.350644][T11738] __do_fast_syscall_32+0xde/0x660 [ 367.350660][T11738] do_fast_syscall_32+0x32/0x70 [ 367.350674][T11738] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 367.350687][T11738] RIP: 0023:0xf73ed579 [ 367.350696][T11738] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 367.350706][T11738] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 367.350717][T11738] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080006040 [ 367.350723][T11738] RDX: 0000000004041080 RSI: 0000000000000000 RDI: 0000000000000000 [ 367.350730][T11738] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 367.350735][T11738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.350741][T11738] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.350755][T11738] [ 367.458058][ T24] usb 6-1: Invalid ep0 maxpacket: 64 [ 367.516589][T11745] openvswitch: netlink: Missing key (keys=40, expected=80) [ 367.595447][ T24] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 367.631676][T11754] 9pnet_fd: Insufficient options for proto=fd [ 367.765597][ T24] usb 6-1: Invalid ep0 maxpacket: 64 [ 367.770900][ T24] usb usb6-port1: attempt power cycle [ 367.941866][ T1333] usb usb42-port1: unable to enumerate USB device [ 367.974930][ T7229] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 368.125091][ T24] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 368.126378][ T7229] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 368.130757][ T7229] usb 7-1: config 0 has no interface number 0 [ 368.132994][ T7229] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 368.134341][T11762] : renamed from hsr0 (while UP) [ 368.138005][ T7229] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 368.142389][ T7229] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 368.151460][ T7229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.173649][ T7229] usb 7-1: config 0 descriptor?? [ 368.205798][T11758] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 368.225082][ T7229] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 368.235382][ T24] usb 6-1: Invalid ep0 maxpacket: 64 [ 368.375282][ T24] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 368.405826][ T24] usb 6-1: Invalid ep0 maxpacket: 64 [ 368.408361][ T24] usb usb6-port1: unable to enumerate USB device [ 369.775212][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.778325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.462021][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.465673][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.984716][T11794] binder: 11793:11794 ioctl c0306201 80000080 returned -14 [ 371.061672][T11805] 9pnet_fd: Insufficient options for proto=fd [ 371.207245][T11815] fuse: Bad value for 'fd' [ 371.209691][T11813] fuse: Bad value for 'fd' [ 371.275864][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 371.312001][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1676'. [ 371.810077][ T4596] usb 7-1: USB disconnect, device number 29 [ 372.056580][T11829] FAULT_INJECTION: forcing a failure. [ 372.056580][T11829] name failslab, interval 1, probability 0, space 0, times 0 [ 372.062049][T11829] CPU: 1 UID: 0 PID: 11829 Comm: syz.2.1680 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.062077][T11829] Tainted: [L]=SOFTLOCKUP [ 372.062083][T11829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 372.062093][T11829] Call Trace: [ 372.062100][T11829] [ 372.062107][T11829] dump_stack_lvl+0x100/0x190 [ 372.062132][T11829] should_fail_ex.cold+0x5/0xa [ 372.062161][T11829] should_failslab+0xc2/0x120 [ 372.062186][T11829] __kmalloc_cache_noprof+0x80/0x810 [ 372.062206][T11829] ? ovl_encode_real_fh+0xca/0x410 [ 372.062235][T11829] ? ovl_encode_real_fh+0xca/0x410 [ 372.062257][T11829] ovl_encode_real_fh+0xca/0x410 [ 372.062281][T11829] ? __pfx_ovl_encode_real_fh+0x10/0x10 [ 372.062311][T11829] ovl_lookup_index+0xe0/0x660 [ 372.062341][T11829] ? __pfx_ovl_lookup_index+0x10/0x10 [ 372.062381][T11829] ovl_lookup_layers+0x60b/0x2ac0 [ 372.062418][T11829] ? lockdep_unlock+0x5a/0xc0 [ 372.062440][T11829] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 372.062476][T11829] ? find_held_lock+0x2b/0x80 [ 372.062494][T11829] ? d_alloc_parallel+0xb4e/0x14e0 [ 372.062515][T11829] ovl_lookup+0x4a8/0x6b0 [ 372.062540][T11829] ? d_alloc_parallel+0x864/0x14e0 [ 372.062557][T11829] ? __pfx_ovl_lookup+0x10/0x10 [ 372.062589][T11829] ? __d_lookup+0x25c/0x4a0 [ 372.062610][T11829] ? __d_lookup+0x266/0x4a0 [ 372.062631][T11829] ? __pfx_ovl_lookup+0x10/0x10 [ 372.062656][T11829] lookup_open.isra.0+0x486/0x1890 [ 372.062678][T11829] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 372.062710][T11829] ? mnt_get_write_access+0x1e9/0x2f0 [ 372.062741][T11829] path_openat+0xa9b/0x3120 [ 372.062770][T11829] ? __pfx_path_openat+0x10/0x10 [ 372.062802][T11829] do_filp_open+0x1f7/0x420 [ 372.062824][T11829] ? __pfx_do_filp_open+0x10/0x10 [ 372.062864][T11829] ? alloc_fd+0x476/0x790 [ 372.062891][T11829] do_sys_openat2+0x12e/0x220 [ 372.062917][T11829] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.062941][T11829] ? __fget_files+0x215/0x3d0 [ 372.062965][T11829] ? __fget_files+0x21f/0x3d0 [ 372.062986][T11829] __ia32_compat_sys_openat+0x12d/0x210 [ 372.063002][T11829] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 372.063032][T11829] ? __pfx_ksys_write+0x10/0x10 [ 372.063059][T11829] __do_fast_syscall_32+0xde/0x660 [ 372.063085][T11829] do_fast_syscall_32+0x32/0x70 [ 372.063106][T11829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 372.063127][T11829] RIP: 0023:0xf742d579 [ 372.063140][T11829] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 372.063157][T11829] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 372.063174][T11829] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 372.063184][T11829] RDX: 0000000000000601 RSI: 0000000000000000 RDI: 0000000000000000 [ 372.063195][T11829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 372.063206][T11829] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 372.063216][T11829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 372.063239][T11829] [ 372.292545][T11831] loop6: detected capacity change from 0 to 8 [ 372.345514][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.348730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.734871][ T4596] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 372.981208][ T4596] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 372.984984][ T4596] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 372.989028][ T4596] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 372.992578][ T4596] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 372.996928][ T4596] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 373.002824][ T4596] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.006771][ T4596] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 373.009896][ T4596] usb 7-1: Product: syz [ 373.011711][ T4596] usb 7-1: Manufacturer: syz [ 373.023455][ T4596] cdc_wdm 7-1:1.0: skipping garbage [ 373.028639][ T4596] cdc_wdm 7-1:1.0: skipping garbage [ 373.039259][ T4596] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 373.041883][ T4596] cdc_wdm 7-1:1.0: Unknown control protocol [ 373.065255][T11859] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 373.147048][T11862] cifs: Unknown parameter '' [ 373.149178][T11862] CIFS mount error: No usable UNC path provided in device string! [ 373.149178][T11862] [ 373.153790][T11862] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 373.253420][ T4596] usb 7-1: USB disconnect, device number 30 [ 373.308259][T11869] xt_hashlimit: invalid rate [ 373.314406][ T40] audit: type=1326 audit(1770674080.032:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.3.1696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 373.327885][ T40] audit: type=1326 audit(1770674080.032:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.3.1696" exe="/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 373.336254][ T40] audit: type=1326 audit(1770674080.032:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.3.1696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 373.343361][ T40] audit: type=1326 audit(1770674080.032:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.3.1696" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 373.352765][ T40] audit: type=1326 audit(1770674080.032:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.3.1696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 373.371481][ T40] audit: type=1326 audit(1770674080.032:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.3.1696" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 373.386824][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1697'. [ 373.390949][ T40] audit: type=1326 audit(1770674080.032:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.3.1696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 373.399722][ T40] audit: type=1326 audit(1770674080.032:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.3.1696" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 373.409224][ T40] audit: type=1326 audit(1770674080.032:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.3.1696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 373.418565][ T40] audit: type=1326 audit(1770674080.032:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.3.1696" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 373.464504][T11879] 9p: Bad value for 'rfdno' [ 374.056082][T11896] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 375.535465][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.538865][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.683193][T11908] 9p: Bad value for 'rfdno' [ 375.739554][T11909] QAT: failed to copy from user cfg_data. [ 375.746185][T11909] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.175290][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.178851][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.960684][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.997035][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.265189][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.387437][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.465211][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.535735][ T4596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.645425][ T5987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.735623][ T5987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.011509][ T5987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.055045][ T5987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.085885][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1719'. [ 378.105208][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.108875][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.305462][ T5987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.842130][T11978] netlink: 'syz.3.1725': attribute type 11 has an invalid length. [ 378.847155][T11978] netlink: 448 bytes leftover after parsing attributes in process `syz.3.1725'. [ 378.891438][T11978] overlayfs: failed to clone upperpath [ 378.893678][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1724'. [ 380.143064][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1729'. [ 380.295334][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 380.295345][ T40] audit: type=1326 audit(1770674087.022:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73ed598 code=0x7ffc0000 [ 380.308543][ T40] audit: type=1326 audit(1770674087.032:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73ed598 code=0x7ffc0000 [ 380.321635][ T40] audit: type=1326 audit(1770674087.042:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73ed598 code=0x7ffc0000 [ 380.352018][ T40] audit: type=1326 audit(1770674087.042:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73ed598 code=0x7ffc0000 [ 380.367136][ T40] audit: type=1326 audit(1770674087.042:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73ed598 code=0x7ffc0000 [ 380.495234][ T40] audit: type=1326 audit(1770674087.042:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73ed598 code=0x7ffc0000 [ 380.505942][ T40] audit: type=1326 audit(1770674087.042:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73ed598 code=0x7ffc0000 [ 380.536974][ T40] audit: type=1326 audit(1770674087.042:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73ed598 code=0x7ffc0000 [ 380.556147][ T40] audit: type=1326 audit(1770674087.042:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73ed598 code=0x7ffc0000 [ 380.563155][ T40] audit: type=1326 audit(1770674087.042:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1731" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73ed598 code=0x7ffc0000 [ 380.920333][T12025] 9p: Bad value for 'wfdno' [ 380.923469][T12027] 9p: Bad value for 'wfdno' [ 381.097392][T12036] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1748'. [ 381.101289][T12036] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1748'. [ 381.247579][T12043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1742'. [ 382.188569][T12047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1743'. [ 383.168829][T12056] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1744'. [ 383.296204][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.855243][ T61] net_ratelimit: 4 callbacks suppressed [ 383.855262][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.859850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.869726][ T6022] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 385.386477][ T6022] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 385.389979][ T6022] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 385.393320][ T6022] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 385.396454][ T6022] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 385.399909][ T6022] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 385.405747][ T6022] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 385.409418][ T6022] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 385.412324][ T6022] usb 6-1: Product: syz [ 385.413880][ T6022] usb 6-1: Manufacturer: syz [ 385.436405][ T6022] cdc_wdm 6-1:1.0: skipping garbage [ 385.438144][ T6022] cdc_wdm 6-1:1.0: skipping garbage [ 385.443284][ T6022] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 385.446958][ T6022] cdc_wdm 6-1:1.0: Unknown control protocol [ 385.456062][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1758'. [ 385.541416][T12094] overlayfs: failed to clone upperpath [ 385.635299][ T6022] usb 6-1: USB disconnect, device number 29 [ 385.695865][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.699549][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.249465][T12100] lo speed is unknown, defaulting to 1000 [ 386.577616][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1767'. [ 386.828322][T12127] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1770'. [ 387.000709][T12140] 9p: Could not find request transport: fd00000000000000000003 [ 387.063402][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1776'. [ 387.152536][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.155828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.121040][T12162] lo speed is unknown, defaulting to 1000 [ 388.287580][T12162] x_tables: duplicate underflow at hook 1 [ 388.302825][T12168] netlink: 'syz.3.1781': attribute type 2 has an invalid length. [ 388.318901][T12168] #{6c: entered promiscuous mode [ 388.324150][T12168] netlink: 'syz.3.1781': attribute type 2 has an invalid length. [ 388.328123][T12168] #{6c: left promiscuous mode [ 388.891609][T12182] 9p: Could not find request transport: fd00000000000000000003 [ 389.494495][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1790'. [ 389.662753][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.665478][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.448426][T12216] FAULT_INJECTION: forcing a failure. [ 391.448426][T12216] name failslab, interval 1, probability 0, space 0, times 0 [ 391.452585][T12216] CPU: 0 UID: 0 PID: 12216 Comm: syz.0.1796 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.452613][T12216] Tainted: [L]=SOFTLOCKUP [ 391.452619][T12216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 391.452628][T12216] Call Trace: [ 391.452634][T12216] [ 391.452639][T12216] dump_stack_lvl+0x100/0x190 [ 391.452656][T12216] should_fail_ex.cold+0x5/0xa [ 391.452674][T12216] should_failslab+0xc2/0x120 [ 391.452689][T12216] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 391.452703][T12216] ? __alloc_skb+0x156/0x410 [ 391.452720][T12216] ? __alloc_skb+0x156/0x410 [ 391.452733][T12216] __alloc_skb+0x156/0x410 [ 391.452746][T12216] ? __alloc_skb+0x35d/0x410 [ 391.452760][T12216] ? __pfx___alloc_skb+0x10/0x10 [ 391.452773][T12216] ? __pfx_tc_new_tfilter+0x10/0x10 [ 391.452788][T12216] netlink_ack+0x117/0xb80 [ 391.452801][T12216] netlink_rcv_skb+0x333/0x420 [ 391.452811][T12216] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 391.452828][T12216] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.452842][T12216] ? netlink_deliver_tap+0x1ae/0xcc0 [ 391.452861][T12216] netlink_unicast+0x5aa/0x870 [ 391.452879][T12216] ? __pfx_netlink_unicast+0x10/0x10 [ 391.452895][T12216] ? __pfx___might_resched+0x10/0x10 [ 391.452942][T12216] netlink_sendmsg+0x8b0/0xda0 [ 391.452966][T12216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.452984][T12216] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 391.453001][T12216] ____sys_sendmsg+0xa54/0xc30 [ 391.453014][T12216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.453032][T12216] ___sys_sendmsg+0x190/0x1e0 [ 391.453044][T12216] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.453073][T12216] __sys_sendmsg+0x170/0x220 [ 391.453091][T12216] ? __pfx___sys_sendmsg+0x10/0x10 [ 391.453121][T12216] ? __pfx_ksys_write+0x10/0x10 [ 391.453145][T12216] __do_fast_syscall_32+0xde/0x660 [ 391.453169][T12216] do_fast_syscall_32+0x32/0x70 [ 391.453191][T12216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 391.453212][T12216] RIP: 0023:0xf73ed579 [ 391.453226][T12216] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 391.453242][T12216] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 391.453254][T12216] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000580 [ 391.453260][T12216] RDX: 0000000024000850 RSI: 0000000000000000 RDI: 0000000000000000 [ 391.453266][T12216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 391.453272][T12216] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 391.453278][T12216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 391.453292][T12216] [ 391.548824][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.552433][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.591598][T12221] netlink: 'syz.0.1798': attribute type 1 has an invalid length. [ 391.594209][T12221] netlink: 'syz.0.1798': attribute type 1 has an invalid length. [ 392.077230][T12235] FAULT_INJECTION: forcing a failure. [ 392.077230][T12235] name failslab, interval 1, probability 0, space 0, times 0 [ 392.082860][T12235] CPU: 3 UID: 0 PID: 12235 Comm: syz.2.1801 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.082888][T12235] Tainted: [L]=SOFTLOCKUP [ 392.082892][T12235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 392.082901][T12235] Call Trace: [ 392.082906][T12235] [ 392.082911][T12235] dump_stack_lvl+0x100/0x190 [ 392.082934][T12235] should_fail_ex.cold+0x5/0xa [ 392.082969][T12235] should_failslab+0xc2/0x120 [ 392.082991][T12235] kmem_cache_alloc_noprof+0x83/0x780 [ 392.083013][T12235] ? vm_area_alloc+0x1f/0x160 [ 392.083034][T12235] ? vm_area_alloc+0x1f/0x160 [ 392.083049][T12235] vm_area_alloc+0x1f/0x160 [ 392.083066][T12235] create_init_stack_vma+0x7e/0x700 [ 392.083090][T12235] alloc_bprm+0x405/0x710 [ 392.083110][T12235] do_execveat_common.isra.0+0x1d0/0x5b0 [ 392.083133][T12235] __ia32_compat_sys_execveat+0xe0/0x120 [ 392.083154][T12235] __do_fast_syscall_32+0xde/0x660 [ 392.083177][T12235] do_fast_syscall_32+0x32/0x70 [ 392.083198][T12235] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 392.083217][T12235] RIP: 0023:0xf742d579 [ 392.083229][T12235] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 392.083243][T12235] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000166 [ 392.083260][T12235] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080001400 [ 392.083271][T12235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.083280][T12235] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 392.083290][T12235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.083299][T12235] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 392.083320][T12235] [ 392.815635][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.819395][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.573129][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'. [ 393.581673][T12241] vivid-003: disconnect [ 393.586896][T12241] netlink: 'syz.1.1803': attribute type 9 has an invalid length. [ 393.590157][T12241] netlink: 'syz.1.1803': attribute type 11 has an invalid length. [ 393.591123][T12239] Bluetooth: MGMT ver 1.23 [ 393.593420][T12241] netlink: 'syz.1.1803': attribute type 12 has an invalid length. [ 393.599418][T12241] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1803'. [ 393.603619][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'. [ 393.815986][T12245] vivid-003: reconnect [ 394.573719][T12263] overlayfs: failed to clone upperpath [ 394.719047][T12268] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1810'. [ 394.722237][T12268] openvswitch: netlink: Missing key (keys=40, expected=100) [ 394.733469][T12268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1810'. [ 394.737087][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1810'. [ 394.740215][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'. [ 394.823178][ T4596] libceph: connect (1)[c::]:6789 error -101 [ 394.825510][ T4596] libceph: mon0 (1)[c::]:6789 connect error [ 394.854798][T12269] ceph: No mds server is up or the cluster is laggy [ 394.927019][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'. [ 395.086834][ T4596] libceph: connect (1)[c::]:6789 error -101 [ 395.089017][ T4596] libceph: mon0 (1)[c::]:6789 connect error [ 395.385130][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.387929][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.523040][ T40] kauditd_printk_skb: 723 callbacks suppressed [ 395.523056][ T40] audit: type=1800 audit(1770674102.242:1953): pid=12278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1813" name="SYSV00000000" dev="tmpfs" ino=11 res=0 errno=0 [ 395.888963][T12286] ptrace attach of "/syz-executor exec"[5943] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5c [ 396.220408][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1817'. [ 396.575559][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.578486][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.625718][T12295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1818'. [ 396.760515][T12302] netlink: 'syz.3.1815': attribute type 4 has an invalid length. [ 397.921324][T12326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.924681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.968157][T12326] syz.1.1825: attempt to access beyond end of device [ 397.968157][T12326] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 397.974083][T12326] gfs2: error -5 reading superblock [ 398.225039][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 398.386909][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.390628][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.393830][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 398.398439][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 398.401475][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.405869][ T9] usb 5-1: config 0 descriptor?? [ 398.585588][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.588415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.820600][ T9] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 400.038750][ C0] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -1 [ 400.418782][T12339] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 400.450111][T12346] fuse: Unknown parameter '017777777777777777777770x0000000000000004' [ 400.584647][T12339] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 400.794446][T12339] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 400.850685][ T10] usb 5-1: USB disconnect, device number 31 [ 400.872077][T12339] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 401.006741][ T42] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 401.016114][ T1169] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 401.024104][ T1169] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 401.033882][ T1169] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 401.135992][ T1169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.138740][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.615255][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.618127][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.705149][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.708625][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.089514][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1854'. [ 405.665196][ T40] audit: type=1326 audit(1770674112.372:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1862" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 405.682691][ T40] audit: type=1326 audit(1770674112.372:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1862" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 405.697856][ T40] audit: type=1326 audit(1770674112.372:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1862" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 405.724952][ T40] audit: type=1326 audit(1770674112.372:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1862" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 405.732697][ T40] audit: type=1326 audit(1770674112.372:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1862" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 405.758212][ T40] audit: type=1326 audit(1770674112.372:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1862" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 405.774913][ T40] audit: type=1326 audit(1770674112.372:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1862" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 405.781957][ T40] audit: type=1326 audit(1770674112.372:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1862" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 405.805406][ T40] audit: type=1326 audit(1770674112.372:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1862" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 405.812142][ T40] audit: type=1326 audit(1770674112.372:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12442 comm="syz.2.1862" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 405.909400][T12443] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 405.912022][T12443] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 405.915735][T12443] vhci_hcd vhci_hcd.0: Device attached [ 405.922728][T12452] vhci_hcd: connection closed [ 405.924320][ T84] vhci_hcd vhci_hcd.2: stop threads [ 405.927965][ T84] vhci_hcd vhci_hcd.2: release socket [ 405.929838][ T84] vhci_hcd vhci_hcd.2: disconnect device [ 406.906818][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.909900][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.325378][ T830] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 407.342550][T12515] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 407.474893][ T830] usb 7-1: Using ep0 maxpacket: 8 [ 407.477969][ T830] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 407.481082][ T830] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 407.484084][ T830] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 407.487799][ T830] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.492316][ T830] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 407.496549][ T830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.748795][ T830] usb 7-1: GET_CAPABILITIES returned 0 [ 407.750613][ T830] usbtmc 7-1:16.0: can't read capabilities [ 407.951084][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 407.956535][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 407.960406][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 407.964227][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 407.968026][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 407.995117][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 407.999014][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.002825][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.006499][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.011835][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.015308][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.018595][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.022064][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.025863][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.056558][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.059463][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 408.067904][ T830] usb 7-1: USB disconnect, device number 31 [ 408.735089][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.738091][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.874861][ T34] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 409.015620][ T34] usb 7-1: device descriptor read/64, error -71 [ 409.265096][ T34] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 409.414948][ T34] usb 7-1: device descriptor read/64, error -71 [ 409.488856][T12557] netlink: 'syz.3.1897': attribute type 10 has an invalid length. [ 409.525282][ T34] usb usb7-port1: attempt power cycle [ 409.864950][ T34] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 409.895526][ T34] usb 7-1: device descriptor read/8, error -71 [ 410.134820][ T34] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 410.155574][ T34] usb 7-1: device descriptor read/8, error -71 [ 410.266204][ T34] usb usb7-port1: unable to enumerate USB device [ 410.823316][T12591] loop5: detected capacity change from 0 to 2640 [ 410.831348][T12527] buffer_io_error: 40 callbacks suppressed [ 410.831363][T12527] Buffer I/O error on dev loop5, logical block 0, async page read [ 410.843713][T12591] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 410.848769][T12591] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 410.852306][T12591] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 410.855955][T12591] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 410.859494][T12591] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 410.863113][T12591] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 410.867094][T12591] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 410.870323][T12591] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 410.873824][T12591] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 412.030227][T12619] overlayfs: missing 'lowerdir' [ 412.655636][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.658414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.375609][T12632] fuse: Unknown parameter '0x000000000000000e' [ 413.775285][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.778316][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.973734][T12639] syz_tun: entered allmulticast mode [ 413.978434][T12638] syz_tun: left allmulticast mode [ 414.030931][T12647] syz_tun: entered allmulticast mode [ 414.037595][T12646] syz_tun: left allmulticast mode [ 414.255761][T12657] [ 414.256579][T12657] ====================================================== [ 414.259536][T12657] WARNING: possible circular locking dependency detected [ 414.262567][T12657] syzkaller #0 Tainted: G L [ 414.265411][T12657] ------------------------------------------------------ [ 414.268362][T12657] syz.0.1927/12657 is trying to acquire lock: [ 414.270964][T12657] ffff88807726ec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 414.274912][T12657] [ 414.274912][T12657] but task is already holding lock: [ 414.278071][T12657] ffff888023851868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 414.281695][T12657] [ 414.281695][T12657] which lock already depends on the new lock. [ 414.281695][T12657] [ 414.286064][T12657] [ 414.286064][T12657] the existing dependency chain (in reverse order) is: [ 414.289857][T12657] [ 414.289857][T12657] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 414.293072][T12657] __mutex_lock+0x1a2/0x1b90 [ 414.295282][T12657] pipe_lock+0x69/0x80 [ 414.297351][T12657] iter_file_splice_write+0x1f8/0x10a0 [ 414.299926][T12657] do_splice+0x109c/0x1fd0 [ 414.302251][T12657] __do_splice+0x33b/0x370 [ 414.304390][T12657] __ia32_sys_splice+0x189/0x250 [ 414.306745][T12657] __do_fast_syscall_32+0xde/0x660 [ 414.309172][T12657] do_fast_syscall_32+0x32/0x70 [ 414.311442][T12657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 414.314350][T12657] [ 414.314350][T12657] -> #2 (sb_writers#5){.+.+}-{0:0}: [ 414.317424][T12657] mnt_want_write+0x6f/0x450 [ 414.319053][T12657] ovl_xattr_set+0x137/0x5a0 [ 414.320686][T12657] ovl_own_xattr_set+0x86/0xd0 [ 414.322392][T12657] __vfs_setxattr+0x175/0x1e0 [ 414.324028][T12657] __vfs_setxattr_noperm+0x127/0x660 [ 414.325877][T12657] __vfs_setxattr_locked+0x17d/0x250 [ 414.327734][T12657] vfs_setxattr+0x140/0x330 [ 414.329347][T12657] do_setxattr+0x145/0x180 [ 414.330932][T12657] filename_setxattr+0x16e/0x1d0 [ 414.332612][T12657] path_setxattrat+0x1ff/0x3a0 [ 414.334261][T12657] __ia32_sys_setxattr+0xc4/0x140 [ 414.335971][T12657] __do_fast_syscall_32+0xde/0x660 [ 414.337780][T12657] do_fast_syscall_32+0x32/0x70 [ 414.339446][T12657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 414.341586][T12657] [ 414.341586][T12657] -> #1 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}: [ 414.344751][T12657] down_read+0x99/0x460 [ 414.346557][T12657] lookup_slow+0x42/0x70 [ 414.348092][T12657] path_lookupat+0x5e8/0xc40 [ 414.349718][T12657] filename_lookup+0x202/0x590 [ 414.351395][T12657] kern_path+0x35/0x50 [ 414.352903][T12657] lookup_bdev+0xd8/0x280 [ 414.354444][T12657] resume_store+0x1d6/0x460 [ 414.356041][T12657] kobj_attr_store+0x58/0x80 [ 414.357698][T12657] sysfs_kf_write+0xf2/0x150 [ 414.359320][T12657] kernfs_fop_write_iter+0x3e0/0x5f0 [ 414.361191][T12657] vfs_write+0x6ac/0x1070 [ 414.362764][T12657] ksys_write+0x12a/0x250 [ 414.364311][T12657] __do_fast_syscall_32+0xde/0x660 [ 414.366099][T12657] do_fast_syscall_32+0x32/0x70 [ 414.367798][T12657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 414.369958][T12657] [ 414.369958][T12657] -> #0 (&of->mutex){+.+.}-{4:4}: [ 414.372222][T12657] __lock_acquire+0x14b8/0x2630 [ 414.373923][T12657] lock_acquire+0x17c/0x330 [ 414.375529][T12657] __mutex_lock+0x1a2/0x1b90 [ 414.377158][T12657] kernfs_fop_write_iter+0x2c2/0x5f0 [ 414.379000][T12657] iter_file_splice_write+0x82b/0x10a0 [ 414.380915][T12657] do_splice+0x109c/0x1fd0 [ 414.382485][T12657] __do_splice+0x33b/0x370 [ 414.384056][T12657] __ia32_sys_splice+0x189/0x250 [ 414.385784][T12657] __do_fast_syscall_32+0xde/0x660 [ 414.387578][T12657] do_fast_syscall_32+0x32/0x70 [ 414.389290][T12657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 414.391434][T12657] [ 414.391434][T12657] other info that might help us debug this: [ 414.391434][T12657] [ 414.394604][T12657] Chain exists of: [ 414.394604][T12657] &of->mutex --> sb_writers#5 --> &pipe->mutex [ 414.394604][T12657] [ 414.398342][T12657] Possible unsafe locking scenario: [ 414.398342][T12657] [ 414.400674][T12657] CPU0 CPU1 [ 414.402369][T12657] ---- ---- [ 414.404053][T12657] lock(&pipe->mutex); [ 414.405384][T12657] lock(sb_writers#5); [ 414.407496][T12657] lock(&pipe->mutex); [ 414.409593][T12657] lock(&of->mutex); [ 414.410871][T12657] [ 414.410871][T12657] *** DEADLOCK *** [ 414.410871][T12657] [ 414.413412][T12657] 2 locks held by syz.0.1927/12657: [ 414.415052][T12657] #0: ffff88802a636420 (sb_writers#10){.+.+}-{0:0}, at: __do_splice+0x33b/0x370 [ 414.417944][T12657] #1: ffff888023851868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 414.420673][T12657] [ 414.420673][T12657] stack backtrace: [ 414.422544][T12657] CPU: 0 UID: 0 PID: 12657 Comm: syz.0.1927 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.422560][T12657] Tainted: [L]=SOFTLOCKUP [ 414.422563][T12657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 414.422570][T12657] Call Trace: [ 414.422575][T12657] [ 414.422580][T12657] dump_stack_lvl+0x100/0x190 [ 414.422595][T12657] print_circular_bug.cold+0x178/0x1c7 [ 414.422612][T12657] check_noncircular+0x146/0x160 [ 414.422627][T12657] __lock_acquire+0x14b8/0x2630 [ 414.422643][T12657] ? do_fast_syscall_32+0x32/0x70 [ 414.422657][T12657] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 414.422672][T12657] lock_acquire+0x17c/0x330 [ 414.422685][T12657] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 414.422696][T12657] ? __pfx___might_resched+0x10/0x10 [ 414.422713][T12657] __mutex_lock+0x1a2/0x1b90 [ 414.422725][T12657] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 414.422737][T12657] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 414.422748][T12657] ? __asan_memcpy+0x3c/0x60 [ 414.422764][T12657] ? _copy_from_iter+0x270/0x1690 [ 414.422779][T12657] ? __pfx___mutex_lock+0x10/0x10 [ 414.422793][T12657] ? __pfx__copy_from_iter+0x10/0x10 [ 414.422809][T12657] ? __kmalloc_noprof+0x365/0x9c0 [ 414.422821][T12657] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 414.422831][T12657] kernfs_fop_write_iter+0x2c2/0x5f0 [ 414.422842][T12657] iter_file_splice_write+0x82b/0x10a0 [ 414.422859][T12657] ? __pfx_iter_file_splice_write+0x10/0x10 [ 414.422876][T12657] ? __pfx_iter_file_splice_write+0x10/0x10 [ 414.422889][T12657] do_splice+0x109c/0x1fd0 [ 414.422901][T12657] ? __lock_acquire+0x4a5/0x2630 [ 414.422916][T12657] ? __pfx_do_splice+0x10/0x10 [ 414.422928][T12657] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 414.422939][T12657] ? find_held_lock+0x2b/0x80 [ 414.422950][T12657] __do_splice+0x33b/0x370 [ 414.422962][T12657] ? __pfx___do_splice+0x10/0x10 [ 414.422976][T12657] __ia32_sys_splice+0x189/0x250 [ 414.422990][T12657] __do_fast_syscall_32+0xde/0x660 [ 414.423005][T12657] do_fast_syscall_32+0x32/0x70 [ 414.423018][T12657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 414.423031][T12657] RIP: 0023:0xf73ed579 [ 414.423040][T12657] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 414.423050][T12657] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000139 [ 414.423061][T12657] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 414.423067][T12657] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000011 [ 414.423073][T12657] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 414.423079][T12657] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 414.423085][T12657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 414.423095][T12657] [ 414.845301][ T1121] sr 2:0:0:0: [sr0] tag#10 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 414.848664][ T1121] sr 2:0:0:0: [sr0] tag#10 Sense Key : Illegal Request [current] [ 414.851133][ T1121] sr 2:0:0:0: [sr0] tag#10 Add. Sense: Invalid command operation code [ 414.853859][ T1121] sr 2:0:0:0: [sr0] tag#10 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 414.856762][ T1121] blk_print_req_error: 10 callbacks suppressed [ 414.856772][ T1121] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 2 prio class 2 [ 415.855058][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.858435][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.415034][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.418216][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.055327][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.058310][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.615375][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.618877][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog