last executing test programs: 10m10.386144691s ago: executing program 0 (id=1380): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x46c800) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x68000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff35a1e107fa5c8d3cbb1fa61229a00ecd207d9e6f2a208bf148e6bc56955cb5330000000000"}) 10m9.361381673s ago: executing program 0 (id=1387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 10m8.911511408s ago: executing program 0 (id=1389): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a32000000002800048008000140000000010800"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 10m8.155044335s ago: executing program 0 (id=1392): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x9) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1098, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9000, &(0x7f0000001dc0)={0xf, 0x89, 0x40000, {r2}}, 0x20) 10m8.104349197s ago: executing program 0 (id=1393): openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/asound/seq/timer\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) 10m7.837067284s ago: executing program 0 (id=1395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, 0x0, 0x4) 10m7.576796955s ago: executing program 32 (id=1395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, 0x0, 0x4) 7.329205232s ago: executing program 3 (id=4325): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00003ee000/0x4000)=nil, 0x4000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil) munlockall() 7.100422123s ago: executing program 3 (id=4326): unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000039500"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffce) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000009c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000780)={{@my=0x1}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x8000}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x8, 0x1}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$tun(0xffffff9c, &(0x7f0000000300), 0x402040, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x8, 0x0) splice(r4, 0x0, r9, 0x0, 0x84, 0xd) ppoll(&(0x7f0000000440)=[{r9, 0x4410}], 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r7, &(0x7f0000000100)='F', 0x1) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x2002) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/40, 0xfffffffffffffc9a}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000100)=""/171, 0xab}, {&(0x7f00000001c0)=""/97, 0x61}, {&(0x7f0000000240)=""/90, 0x5a}], 0x5) 5.905774263s ago: executing program 3 (id=4334): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2b056e405b9c8b6b3489880000d692a3e79a04aceb8ef7101ac5d3e1807e193407fc2fdd525b4a69dc161e53bdc18a5b20d4f6fcc4bad8e4d5c7a74bfab286899697730c13c53b715038c6ccf2ef0c0692c5de05c736603b0853ec49654a19dc0ed0354623c46ec4860fa757707641989026d90af15bad6f262fc0e7f9215558604ead47a591e1164067730a80dfca2ca5d6501a79cc3456bef2e1e4f0f8ad4a0c116b00655625b54def95d21095a8048bdc141a2ca6af80d2b71a2d11483efca6473b492336d27888b4db39a633ec6d366a4f2fb39b148b42f9e347594c4ca678f2dd9f203cec62eca2dd829e9ca41f09cd29d59c41e8c30cbe71114d3d3c64722dcb9f02b700000000", @ANYRES16=r0, @ANYBLOB="010027bd7000fbdbdf250100000008000100ffffffff2c000480050003000100000005000300000000000500030002000000050003000100000004000300000000000800020002000000"], 0x50}, 0x1, 0x0, 0x0, 0x805}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x18}, 0x1, 0x0, 0x0, 0x48}, 0x20020800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000850000009a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0xffffffffffffffc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x34, r3, 0x431, 0x70bd27, 0xfffffffd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x0, 0x1) mount$9p_virtio(&(0x7f0000000280), &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x20028, 0x0) socket(0xb, 0xa, 0x1) lseek(0xffffffffffffffff, 0x101, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) 5.581618114s ago: executing program 2 (id=4336): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@loopback, 0x7fff, 0x0, 0x0, 0x9, 0x7}, 0x20) socket$inet_smc(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0xc, 0x0, 0x0, 0xb, 0x5}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x30, 0x30, 0x30, 0x61, 0x61]}}, &(0x7f0000000400)=""/31, 0x37, 0x1f, 0x0, 0x1000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="0100"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000e26ed0f96c09ed24eaea8730716c0000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f00000002c0)='cgroup.freeze\x00', 0x0, 0x0) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0xfefffffc}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r11, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f0000000240)=@req={0x401, 0x80, 0x6, 0x6}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r12 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r12, 0x7005, 0x0) readv(r12, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000200)) 5.474870437s ago: executing program 2 (id=4338): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffe, 0xfffffffe, &(0x7f0000006680)) openat$ocfs2_control(0xffffff9c, 0x0, 0x10001, 0x0) pause() r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000002800128009000100766c616e000000001800028006000100040000000c0002001c0000005000000008000500", @ANYRES32=r1], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="2482886e9c49ded3bcf7c4332749", 0xe, r3) r4 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc2c45512, &(0x7f0000000640)={{0x7, 0x2000000, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x7, 0xfffffffd, 0x80000001, 0x0, 0x0, 0x1, 0xfffffffc, 0xfffffffd, 0x4400006, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xfffffff5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x3, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7ffffbff, 0x4, 0x200, 0x0, 0x0, 0x0, 0x8000, 0xe73e, 0x0, 0x0, 0xffffffc7, 0x0, 0x4, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81, 0x3, 0x7fff, 0x3883, 0x800, 0x402, 0x0, 0x0, 0x4, 0x8, 0xce5b, 0x0, 0x0, 0x0, 0x8, 0x408, 0x0, 0x8, 0x9, 0x100, 0x0, 0x1, 0x0, 0x0, 0x10004000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4cb, 0x0, 0x0, 0x0, 0x7, 0x0, 0xa, 0x0, 0x0, 0x3, 0x1, 0x788, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 4.69788459s ago: executing program 3 (id=4342): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r1, 0x358, 0x800000000000) socket$igmp(0x2, 0x3, 0x2) sched_setaffinity(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r2, 0x3) r3 = accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB=' '], 0x16) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 4.508124522s ago: executing program 2 (id=4344): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r0, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x20000001) 4.507919553s ago: executing program 2 (id=4345): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) unlink(&(0x7f0000000300)='./file0\x00') mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0xb101e, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2817091, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00', 0x9}) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00') ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000200)={0x9, 0x6, 0x1, 'queue0\x00', 0x2}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x101) connect(r1, &(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0xffffffff}, 0x80) 4.457477479s ago: executing program 2 (id=4346): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040affffffff"], 0xd) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x10, 0x5, 0x3, 0x800, 0x0, "f759e100edc710000000d9fc6300", "00000004", "03000500", "e8cc1304", ["8bada11e03411000", "c2fed6e2ffffff6806528640", "000000ff0000000000000020", "0000000000000000009700"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000240)={0xffffffff, 0x4, 0x8, 0x3, 0x2db5, 0x1, "0e214d11dd0fce80ec390a5172a777a7", 0x22, 0xe, 0x0, 0xf, 0x8, 0x4, 0xe}) 4.278182086s ago: executing program 2 (id=4347): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x842c2, 0x121) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0xd53e, {0x1, 0x4, 0x1, 0x8004, 0x407, 0x52}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0xfffffffffffffeb1}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7, 0x7fffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x40, 0x0) close(0x3) open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000002000062320000000000000009ffff0000000000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) rseq(0x0, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000280)={0x6, @local, 0x0, 0x0, 'ovf\x00', 0x10, 0xfffffffd, 0x35}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) 4.178144201s ago: executing program 33 (id=4347): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x842c2, 0x121) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0xd53e, {0x1, 0x4, 0x1, 0x8004, 0x407, 0x52}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0xfffffffffffffeb1}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7, 0x7fffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x40, 0x0) close(0x3) open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000002000062320000000000000009ffff0000000000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) rseq(0x0, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000280)={0x6, @local, 0x0, 0x0, 'ovf\x00', 0x10, 0xfffffffd, 0x35}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) 3.864458113s ago: executing program 4 (id=4349): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x9f08, 0x3, 0x2}, 0x18, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) landlock_restrict_self(r1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$dsp(0xffffff9c, &(0x7f0000000880), 0xc00, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000005000000850000002d0000001801000020758fcb00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x5, 0x3, 0x0, 0x1, [@generic="ae"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) 3.807562973s ago: executing program 3 (id=4350): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=ANY=[@ANYBLOB="1b0000000000000000000000002000000000", @ANYRES32, @ANYBLOB="b231000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r1, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x0, &(0x7f0000001100)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3}, 0x8}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="10000000000000001c0012800900010c0002800500110001000000"], 0x3c}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x83) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) read$dsp(r3, &(0x7f00000001c0)=""/95, 0x5f) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x3, 0xe, 0x7588, 0x40, 0xfffffffc, 0x7}, &(0x7f0000000140)=0x9c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 3.788956076s ago: executing program 4 (id=4351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'wlan1\x00', 0x0}) 3.703382915s ago: executing program 4 (id=4352): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffe, 0xfffffffe, &(0x7f0000006680)) openat$ocfs2_control(0xffffff9c, 0x0, 0x10001, 0x0) pause() r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000002800128009000100766c616e000000001800028006000100040000000c0002001c0000005000000008000500", @ANYRES32=r1], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="2482886e9c49ded3bcf7c4332749", 0xe, r3) r4 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc2c45512, &(0x7f0000000640)={{0x7, 0x2000000, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x7, 0xfffffffd, 0x80000001, 0x0, 0x0, 0x1, 0xfffffffc, 0xfffffffd, 0x4400006, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xfffffff5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x3, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7ffffbff, 0x4, 0x200, 0x0, 0x0, 0x0, 0x8000, 0xe73e, 0x0, 0x0, 0xffffffc7, 0x0, 0x4, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81, 0x3, 0x7fff, 0x3883, 0x800, 0x402, 0x0, 0x0, 0x4, 0x8, 0xce5b, 0x0, 0x0, 0x0, 0x8, 0x408, 0x0, 0x8, 0x9, 0x100, 0x0, 0x1, 0x0, 0x0, 0x10004000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4cb, 0x0, 0x0, 0x0, 0x7, 0x0, 0xa, 0x0, 0x0, 0x3, 0x1, 0x788, 0xd4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 2.794634993s ago: executing program 4 (id=4353): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x4000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r4 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005ac0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000600)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ffffef7, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) sendmmsg$inet6(r4, &(0x7f0000005bc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7fffffff, @private2, 0x80}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="6aa3be62a802a9b6c5ec27474368c2ffe3173b52e328de90b09de0deff32bba536984e6c47e05c78298bb57d26b8a9d14dd17ab56dab077dda91cb5d16301e7348033f8574313300", 0x48}], 0x1, &(0x7f00000002c0)=[@rthdrdstopts={{0x3c, 0x29, 0x37, {0xc, 0x4, '\x00', [@ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x7fffffff}, @jumbo={0xc2, 0x4, 0x8e}, @hao={0xc9, 0x10, @empty}]}}}, @hopopts={{0x24, 0x29, 0x36, {0x21, 0x1, '\x00', [@ra={0x5, 0x2, 0xff}, @ra={0x5, 0x2, 0x7}, @pad1, @enc_lim={0x4, 0x1, 0x3c}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0xa}}, @dstopts={{0x64, 0x29, 0x37, {0x3c, 0x9, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x0, 0x6, 0x10, 0x3, [0x7, 0x6, 0x0]}}, @hao={0xc9, 0x10, @mcast2}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hopopts={{0x34, 0x29, 0x36, {0xff, 0x3, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x3, 0xa222, [0x4, 0x1ff]}}, @enc_lim]}}}, @hoplimit={{0x10}}, @dontfrag={{0x10, 0x29, 0x3e, 0x6}}, @tclass={{0x10, 0x29, 0x43, 0x1}}, @dstopts_2292={{0x44, 0x29, 0x4, {0xba, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @pad1, @calipso={0x7, 0x20, {0x1, 0x6, 0x0, 0x81, [0xffffffffffff8001, 0x3, 0x4]}}, @ra={0x5, 0x2, 0x1}]}}}, @rthdr={{0x24, 0x29, 0x39, {0x3a, 0x2, 0x1, 0x5, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x1a0}}, {{&(0x7f00000004c0)={0xa, 0x4e23, 0x200, @local, 0x3}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000500)="6dd2538c4bba81e17b4d1ba04c0a14304bb25eaa4513e9913e006b7fa6ac5abe2547039cbe224acbc816650b01d5ad071b4cb919d8443b4fd64ef0872e8d18a81d51f945edb227643b9f2983e860d2286cbcea199c10", 0x56}], 0x1, &(0x7f0000000900)=[@flowinfo={{0x10, 0x29, 0xb, 0x1}}, @tclass={{0x10, 0x29, 0x43, 0x8}}, @pktinfo={{0x20, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r5}}}, @hoplimit={{0x10, 0x29, 0x34, 0xfffff000}}, @hopopts_2292={{0x4c, 0x29, 0x36, {0x2f, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x28, {0x2, 0x8, 0x3, 0xf894, [0xf1, 0x800, 0x100, 0x2]}}, @jumbo={0xc2, 0x4, 0x3}]}}}], 0x9c}}, {{&(0x7f00000009c0)={0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000000a00)="2a4d18095d0c1e301844519737eadb554b51187eafe9a90f00f693480ebfe0f72ce8c4e5093d7976bdcc564331512c79b0aeaafaa17f16ab8f6b9d2f42b83bfceb2edf38f9d78e9698f627e58c897b6c584fba1c8647790b2112248147dfa0c2f3d6b28f21c85c", 0x67}, {&(0x7f0000000a80)="54e33ae041082bc7c6dd296f4a19031445ac8fc0ccff0d3251b0f62887259c42", 0x20}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="99a6e9acb4ffecf40a89867b337793d8c30f8bcb7eda437fc054fa3714916e325bf960f5002c3c85f377e04c7a98cfed2d5c2f3368b7e2f26a7aefc57385bad0f128b2d59ebedeb3ba987492cbc4a9bfedb4193426c7a93895dd9a7664c5c5a8f34e8d288e54fa60e312b78415f291fd2255ff89ae8da34a2b06a4990eb551c7062fadbb8fe7f1c46efb42251a4d17f63dbf0e3e88c1bc803bb82455169adc2a74a649253bbc9fe405e5fe8ba1a1c3b4d35b5944a3bc7a80bca736421c1d96598a58cc7e7ed6c3ec3353518d99c9ff201092ea4bf691dd5e17c2341f19d999521860a8061c6c83de0c8f6d6f83", 0xed}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000001c00)="0e8449c7c21fb7cb20d500622ef9983f03f4109a18fe3e0c3cef23e6c7c4b1e5b7942bf2d49496f9144d7e97dc5d2ea00767feb924c2a4a2f7ef037ec360b3ed6f690d3ce31d17697f2fb2b6f9de4db0da191fa570ac15a58003ef04932aaf51c32b6136762200e06c8edb4f8784bbee6d87dd2439fbfb445078b09f38b1bdc19324c24def92edb14e5af80949e2de20c4e17f760a9c730c65e9e1d3d0fdbd83de922c121c22596f0e6d844cce7aca3b4c14c72954adc95df6adac17f8a998", 0xbf}], 0x7, &(0x7f0000001d00)=[@dstopts_2292={{0x2c, 0x29, 0x4, {0x62, 0x2, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0xc0000000}}, @dstopts_2292={{0xac, 0x29, 0x4, {0x33, 0x12, '\x00', [@calipso={0x7, 0x58, {0x0, 0x14, 0x6, 0xfffd, [0x81, 0x2, 0x5, 0x663, 0x8000000000000001, 0x7, 0x8, 0xe7aa, 0x2, 0x4]}}, @generic={0x6, 0x24, "3b7c41e065810dd8b35644c4e95819a955d89d6c83cd6fd3e5c444f5f3f4d17f9e0af460"}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @jumbo={0xc2, 0x4, 0x7}, @ra, @ra={0x5, 0x2, 0x6}]}}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001e00)="8a7f3da46694b90d25af6366154764572d4510fe21fc10e165dd3d8627f7e0dd86df601b5ff186414569e7904eb210d2229f515bc9e78a7741c0aca01fcb", 0x3e}, {&(0x7f0000001e40)="ae7a73f9a2b5c36af94201da8aad8353c6c11f9efce632b0d053ac", 0x1b}], 0x2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="10000000290000000b000000000000072400000029000000360000000001000000000000c20400000004040108000000000000004400000029000000390000002e06000400000000fc020000000000faff00000000000001fc010000000000000000000000000000ff0100000000000000000000000000014400000029000000390000002b06010600000000fe8000000000000000000000000000bbfc010000000000000000000000000000fe800000000000000000000000000042"], 0xbc}}, {{&(0x7f0000001f80)={0xa, 0x4e22, 0xff, @loopback, 0x16}, 0x1c, &(0x7f0000003280)=[{&(0x7f0000003080)="90f47cdd7704e20523cfe87a4d9d58166dc667b1cf7ee662ce4756fd2a4536c4ceca03e51eb2a12fe01dbd4d6d9ae14d20202082a37cd334cdec296e97c6054e30225cfac0ace1ba455c7b62c6fb338b73b10689faca062782e07e16fa5ea0e7924e8ac9fec2256381500f7e65c6cb01ec0136e3062fe7edd5522022bada4f465dcc362403eb398df9236d6965fd0ad782b08d25da0a6caccb97fc7c7e83722ca69413c5f66e1668d2e83248b89991d9e02f97cc576f", 0xb6}, {&(0x7f0000001fc0)="bbcb33c94a91d616264fb75492122308aa35211ae827ba86c8fd046549745695996c95b082cc4694cfd0eb0cbeb9aa1459f491d925dcaac5cd096c262ed0922f41141c995e3a42c60debc4772e4ec23f94d80b93afef3e3bc0721e1e7b1ed335a24714", 0x63}, {&(0x7f0000003140)="efc780ac14a49bcecf34f1313e228e0a4b060471ff3372e10208441e15787b091c257845750f5571240c259f91f6bc02818f1188dd08995f38fe0945d37b6f510b28e035d3f9ceafcb6c77d372e879fdabdbf32276a80deb7700f9bd4731b94eac1d7a95179e3dbec7da54c60060445a8ceac461ef32289a9df30e6ad2", 0x7d}, {&(0x7f00000031c0)="1bd6a3ac9e073fe7a932f38edc5a0562d248058599073cd8fef8219b431ada38e235aa162143982fb6eb8286a2efe5f90c490fc9047bbf8b5524e334e3a46dafe9da24", 0x43}, {&(0x7f0000003240)="1619c70299674fcf2b6b9fc73504f112e2a3f08e021984d9d027eb7cafa5016cd51e7ff979298cdc72b8ddb3ec356bb978dd89e8f32a74", 0x37}], 0x5, &(0x7f00000032c0)=[@dstopts={{0x74, 0x29, 0x37, {0x3a, 0xb, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x38, {0x1, 0xc, 0x4, 0x8, [0x2, 0xfffffffffffffffc, 0x7fff, 0x5, 0x8, 0x7]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffffff8}, @hao={0xc9, 0x10, @mcast1}]}}}, @rthdr={{0x84, 0x29, 0x39, {0x33, 0xe, 0x0, 0x9, 0x0, [@remote, @mcast1, @loopback, @mcast2, @local, @remote, @remote]}}}, @rthdr_2292={{0xa4, 0x29, 0x39, {0xc, 0x12, 0x2, 0x4, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @remote, @empty, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @dontfrag={{0x10, 0x29, 0x3e, 0x7}}, @flowinfo={{0x10}}, @tclass={{0x10, 0x29, 0x43, 0xf}}], 0x1cc}}, {{&(0x7f00000034c0)={0xa, 0x4e20, 0xdf23, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f0000005a40)=[{&(0x7f0000003500)="af453199684a9eeda3c2e55eff16e6d341581133dafbfa5f294b75d9c14ad11e6aaa071a137bfc717620813ac5acf3d66e48ce0402a38afecc9be5331e14445d8c8ef244ec2ec4dbb21eddf4b5b35635b434d25b1d3c1824adef2c32d3a554c5a41881b04965a19a5556d59caa097aa2abdc34ed0380325a628d447d1e9bf62bd4e5ae52e82a0d7c00bed3244efbd3d4eec34d3f7ea436a020ae66704302978dc16a45d0e7de0bb30a4c4610b3d3bfa5eb2e2be811b30b8e05977eb15396b819c8e7229d3724c7bafa4ce1e94041eca020ff479701b0267518d9d4e15d22f201", 0xe0}, {&(0x7f0000003600)="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", 0x1000}, {&(0x7f0000004600)="80321008e085733f202ce1980722f648de99fdbef675093d12ba4f012e15ca72e90198e888988dfd4acf3c3116baeff8c477bf36776d939c0b9db3ec9b750777a25f168bb3cd0c0e424563dcdca93679df5a3c66176b2c4a9be193dfc3491d264c3251aac5091314d824518047f3879a79322e7f5e15c87c19183beeea25247682548a7443322f67c86c34547361a5b84560b75ba4a1dbdde910cd15", 0x9c}, {&(0x7f00000046c0)="a3d595b51aed1644ab6acdc9b9472e747d879c147b41c83ade35f6baabb8cc43185b45d6a420b039d4c1101f9724cc7b200632b80a0cb2e89d23a0cd94366c0eed7c90624de81352a0a27173590053aedd599cd15115cd1c2416d4193c917d401c5d49aa03fdeb99785e669348fe56d95b091c9ada0652a972a412f05c63ec62d6ff307c19acbf7809aef8777e8d9de6be4faed360fd1d044bd4208bc2bb02a19d63f04e7a1bfd5884b9c348fb377eedada19f20a351ee1a11e6abb53284ec399f01ffc9ce43fba8b9161bfcfabb786488891ec8c4811bb1", 0xd8}, {&(0x7f00000047c0)="f081121025661057737a4af2c3dd4667cf45464f55823a31e341c3adf57a81ee5ecf0c04f38794efc2ef04f47b8f7a64ae18db21884fe3dc1f5ef703f9fa6fafa3ab2225c83e273e772cc91a38ae2f27170f0ac13d2347d2", 0x58}, {&(0x7f0000004840)="2e2b4720b1b70ee6149c4092bc2a7f94fc09079f3f24ad83e9a67f683d0495a9fae5d8904ee88c2ef57e8db28224756ab037e371ad863a44841a2037b76d32f95c6de1217dd326d21e75655f271e2bc069a4", 0x52}, {&(0x7f00000048c0)="c79b9e60f6ddc1531434074db55539740d79e5b491438224f8c21c7a0957a25c5d", 0x21}, {&(0x7f0000004900)="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", 0x1000}, {&(0x7f0000005900)="9e2f8a9c69b185375a38df9ea5de6a7f4ca62daf5b9bb8de3bf4bf3cb96abd985a8012c4130b5c284606ff73d1e24e3db17799e431d64353ebb6dda8d9006915e57e9e93bd7abeadc00789b45a8a94b5cd6e767aac", 0x55}, {&(0x7f0000005980)="85ac0a7e6f4d95e6ad127124984eb0e9dc6310c3c26401dd185bc381297781e6e75937c2fdda8a0ed33e300adca032c9401c37034a44a252293d9c577d35fd4f88b678bc8e31346b5e4e643f405f0dd81d633159393631fe959b135fd17ba29b0d1d8f0040900822c05725ebf4ebfd7f76bb6748732f4f089c3df0806863ebc4fd47f3ae192702bc49331a74e18201b8ad3b86c661169ad9163fae67bbb35758ae57f7ef9c846bf32ae14b", 0xab}], 0xa, &(0x7f0000005c80)=ANY=[@ANYBLOB="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"], 0x100}}], 0x6, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x84) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0xc0089364, &(0x7f0000001240)) socket$unix(0x1, 0x5, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000ac0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000005b00)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @multicast1}, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0xff0d, 0x442c, 0xf55}) 2.59612326s ago: executing program 4 (id=4354): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000100) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x80047453, &(0x7f00000000c0)={0x18, 0x0, {0x1, @remote, 'veth0_to_team\x00'}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000180)={0xcf47, 0x1, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xff) sendfile(r1, r0, 0x0, 0x578410eb) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1.488954331s ago: executing program 4 (id=4356): socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r7) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r8, 0xc0804124, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) 1.206424932s ago: executing program 1 (id=4357): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x100a, 0xfffc, 0x0, 0x4}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0xffffffffffffffff) 1.163194929s ago: executing program 1 (id=4358): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x3d, 0x301, 0x270bd24, 0x25dfdbfa, {0x1, 0x0, 0xf000}}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x4}) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x401}}, './file0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x0, 0x4, 0xfd, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r3, 0x0, 0x2d7a909d}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x4000000, 0x2) syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000001380)={0x0, 0x183, 0x0, 'queue1\x00', 0x1}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, 0x9}) r7 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) r8 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_delete(r9) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000340)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x40000005}, @nfc={0x27, 0x0, 0x1, 0x3}, @nl=@unspec, 0xc, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)='bond_slave_1\x00', 0x500000, 0x100000a, 0x1}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0cba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34201113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed00083fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f61e00"}) r10 = openat$sysctl(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000780)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r10, 0xc0709411, &(0x7f0000000080)={{r11, 0x8, 0x1, 0x10000, 0x3, 0xc0000000, 0x7, 0xd268, 0x5, 0x9, 0x3, 0xffffffff, 0x1, 0x2, 0x3}, 0x8, [0x0]}) 994.350825ms ago: executing program 1 (id=4359): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x100a, 0xfffc, 0x0, 0x4}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0xffffffffffffffff) (fail_nth: 1) 916.056116ms ago: executing program 3 (id=4360): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=ANY=[@ANYBLOB="1b0000000000000000000000002000000000", @ANYRES32, @ANYBLOB="b231000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r1, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x0, &(0x7f0000001100)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3}, 0x8}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="10000000000000001c0012800900010c0002800500110001000000"], 0x3c}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x83) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) read$dsp(r3, &(0x7f00000001c0)=""/95, 0x5f) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x3, 0xe, 0x7588, 0x40, 0xfffffffc, 0x7}, &(0x7f0000000140)=0x9c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 845.766838ms ago: executing program 1 (id=4361): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, 0x0, 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0']) 736.04162ms ago: executing program 1 (id=4362): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{0xf4}, 0xad}}}, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd2b, 0x4000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6}}]}, 0x4c}}, 0x4040000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = memfd_secret(0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r4, 0x2e, 0x4608, @void}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r8, 0x400c330d, &(0x7f0000000000)={0x2, 0xf83}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x9, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x4, 0x21}}}, 0x40) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 0s ago: executing program 1 (id=4363): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{0xf4}, 0xad}}}, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd2b, 0x4000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6}}]}, 0x4c}}, 0x4040000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = memfd_secret(0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r4, 0x2e, 0x4608, @void}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r8, 0x400c330d, &(0x7f0000000000)={0x2, 0xf83}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x9, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x4, 0x21}}}, 0x40) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) kernel console output (not intermixed with test programs): 8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1025.107992][T20721] RSP: 002b:00000000f54b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1025.108003][T20721] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1025.108010][T20721] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1025.108016][T20721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1025.108022][T20721] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1025.108029][T20721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1025.108042][T20721] [ 1025.384775][T20718] vhci_hcd: connection reset by peer [ 1025.386843][T19500] vhci_hcd vhci_hcd.3: stop threads [ 1025.389264][T19500] vhci_hcd vhci_hcd.3: release socket [ 1025.391629][T19500] vhci_hcd vhci_hcd.3: disconnect device [ 1025.603877][T20736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3979'. [ 1025.962337][T20745] XFS (nullb0): Invalid superblock magic number [ 1026.404834][T20753] FAULT_INJECTION: forcing a failure. [ 1026.404834][T20753] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.410233][T20753] CPU: 0 UID: 0 PID: 20753 Comm: syz.3.3982 Tainted: G L syzkaller #0 PREEMPT(full) [ 1026.410260][T20753] Tainted: [L]=SOFTLOCKUP [ 1026.410266][T20753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1026.410277][T20753] Call Trace: [ 1026.410284][T20753] [ 1026.410292][T20753] dump_stack_lvl+0x16c/0x1f0 [ 1026.410323][T20753] should_fail_ex+0x512/0x640 [ 1026.410343][T20753] ? fs_reclaim_acquire+0xae/0x150 [ 1026.410370][T20753] should_failslab+0xc2/0x120 [ 1026.410397][T20753] __kmalloc_noprof+0xeb/0x910 [ 1026.410417][T20753] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1026.410445][T20753] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1026.410466][T20753] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1026.410491][T20753] ? tomoyo_profile+0x47/0x60 [ 1026.410518][T20753] tomoyo_path_number_perm+0x245/0x580 [ 1026.410536][T20753] ? tomoyo_path_number_perm+0x237/0x580 [ 1026.410557][T20753] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1026.410600][T20753] ? find_held_lock+0x2b/0x80 [ 1026.410620][T20753] ? hook_file_ioctl_common+0x144/0x410 [ 1026.410646][T20753] ? __fget_files+0x20e/0x3c0 [ 1026.410669][T20753] ? __fput_deferred+0x430/0x480 [ 1026.410690][T20753] security_file_ioctl_compat+0x9b/0x240 [ 1026.410713][T20753] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1026.410737][T20753] __do_fast_syscall_32+0xe8/0x680 [ 1026.410766][T20753] do_fast_syscall_32+0x32/0x80 [ 1026.410798][T20753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1026.410819][T20753] RIP: 0023:0xf7f21579 [ 1026.410834][T20753] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1026.410849][T20753] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1026.410867][T20753] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040047452 [ 1026.410879][T20753] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1026.410889][T20753] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1026.410899][T20753] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1026.410909][T20753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1026.410932][T20753] [ 1026.410939][T20753] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1026.580123][ T5950] Bluetooth: hci0: connection err: -111 [ 1026.734395][ T9862] usb 46-1: device descriptor read/8, error -110 [ 1027.072842][T20779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3991'. [ 1027.126000][ T9862] usb usb46-port1: attempt power cycle [ 1027.515604][T20783] netlink: 35 bytes leftover after parsing attributes in process `syz.4.3993'. [ 1027.641187][T20787] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1027.684375][T20787] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1027.688893][T20787] overlayfs: failed to look up (tracing) for ino (-66) [ 1027.705603][ T9862] usb usb46-port1: unable to enumerate USB device [ 1027.941148][T20790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3994'. [ 1029.021122][ T5950] Bluetooth: hci4: connection err: -111 [ 1029.041556][T20805] overlayfs: missing 'lowerdir' [ 1029.257102][ T5950] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1029.906413][T20819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4003'. [ 1029.982109][T20830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4004'. [ 1029.991227][ T40] kauditd_printk_skb: 105 callbacks suppressed [ 1029.991238][ T40] audit: type=1326 audit(1766970704.708:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20829 comm="syz.1.4006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1030.002781][ T40] audit: type=1326 audit(1766970704.718:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20829 comm="syz.1.4006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1030.108496][ T40] audit: type=1326 audit(1766970704.718:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20829 comm="syz.1.4006" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1030.121694][ T40] audit: type=1326 audit(1766970704.718:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20829 comm="syz.1.4006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1030.129065][ T40] audit: type=1326 audit(1766970704.718:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20829 comm="syz.1.4006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1030.136116][ T40] audit: type=1326 audit(1766970704.718:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20829 comm="syz.1.4006" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1030.143147][ T40] audit: type=1326 audit(1766970704.718:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20829 comm="syz.1.4006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1030.150306][ T40] audit: type=1326 audit(1766970704.718:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20829 comm="syz.1.4006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1030.166030][ T40] audit: type=1326 audit(1766970704.728:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20829 comm="syz.1.4006" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1030.169231][T20832] fuseblk: Bad value for 'max_read' [ 1030.173556][ T40] audit: type=1326 audit(1766970704.728:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20829 comm="syz.1.4006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1030.186039][ T77] usb 44-1: device descriptor read/8, error -110 [ 1030.222638][T20835] l2tp_ppp: sess 2/0: no socket in recv [ 1030.370391][T20838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4008'. [ 1030.657986][ T77] usb usb44-port1: attempt power cycle [ 1031.072123][T20843] overlayfs: missing 'lowerdir' [ 1031.118503][ T5942] Bluetooth: hci1: connection err: -111 [ 1031.238103][ T77] usb usb44-port1: unable to enumerate USB device [ 1031.441383][T20856] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1031.475841][T20856] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1031.480575][T20856] overlayfs: failed to look up (tracing) for ino (-66) [ 1032.195035][T20860] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1032.197954][T20860] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1032.204564][T20860] vhci_hcd vhci_hcd.0: Device attached [ 1032.219608][T20860] IPVS: set_ctl: invalid protocol: 16 2.0.0.98:12800 [ 1032.467235][ T9862] usb 44-1: SetAddress Request (62) to port 0 [ 1032.469540][ T9862] usb 44-1: new SuperSpeed USB device number 62 using vhci_hcd [ 1032.629868][T20870] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1032.656294][T20870] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1032.659980][T20870] overlayfs: failed to look up (tracing) for ino (-66) [ 1032.774020][T20861] vhci_hcd: connection reset by peer [ 1032.776177][ T46] vhci_hcd vhci_hcd.3: stop threads [ 1032.778462][ T46] vhci_hcd vhci_hcd.3: release socket [ 1032.780822][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 1033.668054][T20878] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1033.670647][T20878] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1033.682250][T20878] vhci_hcd vhci_hcd.0: Device attached [ 1033.731250][T20878] IPVS: set_ctl: invalid protocol: 16 2.0.0.98:12800 [ 1033.848569][T20885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4019'. [ 1033.858573][T20884] overlay: Unknown parameter '/' [ 1033.998314][T20889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4021'. [ 1034.664232][T20892] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4022'. [ 1034.747832][T20894] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1034.788401][T20894] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1034.791845][T20894] overlayfs: failed to look up (tracing) for ino (-66) [ 1035.423871][T20879] vhci_hcd: connection closed [ 1035.424431][ T73] vhci_hcd vhci_hcd.3: stop threads [ 1035.439651][ T73] vhci_hcd vhci_hcd.3: release socket [ 1035.441857][ T73] vhci_hcd vhci_hcd.3: disconnect device [ 1036.760126][T20913] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1036.762318][T20913] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1036.768278][T20913] vhci_hcd vhci_hcd.0: Device attached [ 1036.780541][T20909] IPVS: set_ctl: invalid protocol: 16 2.0.0.98:12800 [ 1036.900354][T20914] vhci_hcd: connection closed [ 1036.902011][T19502] vhci_hcd vhci_hcd.1: stop threads [ 1036.906956][T19502] vhci_hcd vhci_hcd.1: release socket [ 1036.926163][T20924] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1036.953011][T20925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4031'. [ 1036.975239][T20924] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1036.978715][T20924] overlayfs: failed to look up (tracing) for ino (-66) [ 1037.009499][T19502] vhci_hcd vhci_hcd.1: disconnect device [ 1037.029409][ T6481] usb 40-1: enqueue for inactive port 0 [ 1037.521619][ T6481] usb usb40-port1: attempt power cycle [ 1037.539902][ T9862] usb 44-1: device descriptor read/8, error -110 [ 1037.648353][T20927] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1037.665657][T20927] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1037.670775][T20927] overlayfs: failed to look up (tracing) for ino (-66) [ 1037.803244][T20932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4033'. [ 1037.938191][T20936] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4034'. [ 1037.940505][ T9862] usb usb44-port1: attempt power cycle [ 1038.080783][ T6481] usb usb40-port1: unable to enumerate USB device [ 1038.158397][T20938] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1038.184254][T20938] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1038.187723][T20938] overlayfs: failed to look up (tracing) for ino (-66) [ 1038.526764][ T9862] usb usb44-port1: unable to enumerate USB device [ 1038.719873][T20943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4044'. [ 1038.849643][T20948] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4038'. [ 1038.922214][T20949] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4036'. [ 1038.960202][T20951] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1038.988718][T20951] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1038.992271][T20951] overlayfs: failed to look up (tracing) for ino (-66) [ 1039.604772][T20954] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1039.618858][T20954] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1039.623045][T20954] overlayfs: failed to look up (tracing) for ino (-66) [ 1039.956888][T20960] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1039.973929][T20960] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1039.978290][T20960] overlayfs: failed to look up (tracing) for ino (-66) [ 1040.058907][T20949] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1040.079507][T20966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4043'. [ 1040.104013][T20949] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1040.107316][T20949] overlayfs: failed to look up (tracing) for ino (-66) [ 1040.696281][T20975] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1040.699336][T20975] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1040.721025][T20975] vhci_hcd vhci_hcd.0: Device attached [ 1040.812658][T20979] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4047'. [ 1040.816797][T20975] IPVS: set_ctl: invalid protocol: 16 2.0.0.98:12800 [ 1040.887072][T20982] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1040.913186][T20982] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1040.916579][T20982] overlayfs: failed to look up (tracing) for ino (-66) [ 1040.986178][ T9862] usb 42-1: SetAddress Request (66) to port 0 [ 1040.989070][ T9862] usb 42-1: new SuperSpeed USB device number 66 using vhci_hcd [ 1041.004255][T20985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4048'. [ 1041.440740][T20976] vhci_hcd: connection reset by peer [ 1041.456492][T19502] vhci_hcd vhci_hcd.2: stop threads [ 1041.460315][T19502] vhci_hcd vhci_hcd.2: release socket [ 1041.501141][T19502] vhci_hcd vhci_hcd.2: disconnect device [ 1042.113266][T20999] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1042.124898][T20999] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1042.128336][T20999] overlayfs: failed to look up (tracing) for ino (-66) [ 1042.187193][T21002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4051'. [ 1042.264029][T21004] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1042.274492][T21004] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1042.277735][T21004] overlayfs: failed to look up (tracing) for ino (-66) [ 1043.402924][T21015] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4057'. [ 1043.483532][T21017] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1043.509491][T21017] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1043.515700][T21017] overlayfs: failed to look up (tracing) for ino (-66) [ 1044.502191][T21031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4060'. [ 1045.588618][T21047] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4063'. [ 1045.629278][T21050] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1045.631489][T21050] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1045.648012][T21050] vhci_hcd vhci_hcd.0: Device attached [ 1045.706381][T21050] IPVS: set_ctl: invalid protocol: 16 2.0.0.98:12800 [ 1045.722740][T21055] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1045.750384][T21055] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1045.754272][T21055] overlayfs: failed to look up (tracing) for ino (-66) [ 1045.833680][T21056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4067'. [ 1046.104039][ T9862] usb 42-1: device descriptor read/8, error -110 [ 1046.248299][ T5766] usb 46-1: SetAddress Request (30) to port 0 [ 1046.250769][ T5766] usb 46-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1046.494848][ T9862] usb usb42-port1: attempt power cycle [ 1046.630412][T21051] vhci_hcd: connection reset by peer [ 1046.633010][ T6342] vhci_hcd vhci_hcd.4: stop threads [ 1046.638201][ T6342] vhci_hcd vhci_hcd.4: release socket [ 1046.640542][ T6342] vhci_hcd vhci_hcd.4: disconnect device [ 1047.022268][T21064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4069'. [ 1047.056885][ T9862] usb usb42-port1: unable to enumerate USB device [ 1047.192433][T21068] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1048.727431][T21088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4075'. [ 1049.987167][T21105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4081'. [ 1051.340554][ T5766] usb 46-1: device descriptor read/8, error -110 [ 1051.982061][ T5766] usb usb46-port1: attempt power cycle [ 1052.143028][T21128] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1052.195689][T21128] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1052.231043][T21128] overlayfs: failed to look up (tracing) for ino (-66) [ 1052.774365][ T5766] usb usb46-port1: unable to enumerate USB device [ 1052.967140][ T6027] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1052.999300][T21139] FAULT_INJECTION: forcing a failure. [ 1052.999300][T21139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.004898][T21139] CPU: 3 UID: 0 PID: 21139 Comm: syz.3.4090 Tainted: G L syzkaller #0 PREEMPT(full) [ 1053.004925][T21139] Tainted: [L]=SOFTLOCKUP [ 1053.004931][T21139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1053.004941][T21139] Call Trace: [ 1053.004948][T21139] [ 1053.004954][T21139] dump_stack_lvl+0x16c/0x1f0 [ 1053.004983][T21139] should_fail_ex+0x512/0x640 [ 1053.005006][T21139] _copy_from_iter+0x2a4/0x16c0 [ 1053.005027][T21139] ? rcu_is_watching+0x12/0xc0 [ 1053.005050][T21139] ? __pfx__copy_from_iter+0x10/0x10 [ 1053.005066][T21139] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 1053.005090][T21139] ? find_held_lock+0x2b/0x80 [ 1053.005116][T21139] tun_get_user+0x26d/0x3cc0 [ 1053.005136][T21139] ? __pfx_tun_get_user+0x10/0x10 [ 1053.005149][T21139] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1053.005166][T21139] ? find_held_lock+0x2b/0x80 [ 1053.005181][T21139] ? tun_get+0x191/0x370 [ 1053.005193][T21139] tun_chr_write_iter+0xdc/0x210 [ 1053.005206][T21139] do_iter_readv_writev+0x662/0x9e0 [ 1053.005223][T21139] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1053.005237][T21139] ? common_file_perm+0x1b1/0x500 [ 1053.005251][T21139] ? bpf_lsm_file_permission+0x9/0x10 [ 1053.005265][T21139] ? security_file_permission+0x71/0x210 [ 1053.005371][T21139] ? rw_verify_area+0xcf/0x6c0 [ 1053.005386][T21139] vfs_writev+0x35f/0xde0 [ 1053.005404][T21139] ? __pfx_vfs_writev+0x10/0x10 [ 1053.005419][T21139] ? find_held_lock+0x2b/0x80 [ 1053.005487][T21139] ? __fget_files+0x20e/0x3c0 [ 1053.005518][T21139] ? __fget_files+0x190/0x3c0 [ 1053.005545][T21139] ? do_writev+0x132/0x340 [ 1053.005565][T21139] do_writev+0x132/0x340 [ 1053.005582][T21139] ? __pfx_do_writev+0x10/0x10 [ 1053.005598][T21139] ? do_user_addr_fault+0x843/0x1370 [ 1053.005616][T21139] __do_fast_syscall_32+0xe8/0x680 [ 1053.005636][T21139] do_fast_syscall_32+0x32/0x80 [ 1053.005657][T21139] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1053.005673][T21139] RIP: 0023:0xf7f21579 [ 1053.005683][T21139] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1053.005694][T21139] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 1053.005705][T21139] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1053.005713][T21139] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1053.005720][T21139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1053.005726][T21139] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1053.005733][T21139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1053.005747][T21139] [ 1053.068885][T21140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4089'. [ 1053.117218][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 1053.122326][ T6027] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1053.124553][ T6027] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1053.128556][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.142878][ T6027] usb 6-1: config 0 descriptor?? [ 1053.562152][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 1053.562174][ T40] audit: type=1326 audit(1766970728.276:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.1.4088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1053.574893][ T40] audit: type=1326 audit(1766970728.276:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.1.4088" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1053.582843][ T40] audit: type=1326 audit(1766970728.276:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.1.4088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1053.590324][ T40] audit: type=1326 audit(1766970728.276:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.1.4088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1053.598033][ T40] audit: type=1326 audit(1766970728.276:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.1.4088" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1053.605336][ T40] audit: type=1326 audit(1766970728.276:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.1.4088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1053.612960][ T40] audit: type=1326 audit(1766970728.276:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.1.4088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1053.620131][ T40] audit: type=1326 audit(1766970728.276:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.1.4088" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1053.627791][ T40] audit: type=1326 audit(1766970728.276:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.1.4088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1053.635030][ T40] audit: type=1326 audit(1766970728.276:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21132 comm="syz.1.4088" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1053.667502][T21147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4091'. [ 1053.811140][ T6027] usbhid 6-1:0.0: can't add hid device: -71 [ 1053.813173][ T6027] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1053.826141][ T6027] usb 6-1: USB disconnect, device number 71 [ 1053.928924][T21151] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1053.931107][T21151] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1053.935270][T21151] vhci_hcd vhci_hcd.0: Device attached [ 1054.002378][T21155] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1054.217970][ T6027] usb 46-1: SetAddress Request (34) to port 0 [ 1054.226593][ T6027] usb 46-1: new SuperSpeed USB device number 34 using vhci_hcd [ 1055.593687][T21173] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4097'. [ 1055.731906][T21175] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1055.825416][T21175] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1055.834450][T21175] overlayfs: failed to look up (tracing) for ino (-66) [ 1056.313606][T21152] vhci_hcd: connection reset by peer [ 1056.315631][T11934] vhci_hcd vhci_hcd.4: stop threads [ 1056.317847][T11934] vhci_hcd vhci_hcd.4: release socket [ 1056.322062][T11934] vhci_hcd vhci_hcd.4: disconnect device [ 1056.631940][T21185] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4100'. [ 1056.738389][T21187] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1056.769831][T21187] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1056.773395][T21187] overlayfs: failed to look up (tracing) for ino (-66) [ 1057.439806][ T5942] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1057.701371][T21199] FAULT_INJECTION: forcing a failure. [ 1057.701371][T21199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.706432][T21199] CPU: 2 UID: 0 PID: 21199 Comm: syz.2.4104 Tainted: G L syzkaller #0 PREEMPT(full) [ 1057.706451][T21199] Tainted: [L]=SOFTLOCKUP [ 1057.706455][T21199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1057.706462][T21199] Call Trace: [ 1057.706467][T21199] [ 1057.706472][T21199] dump_stack_lvl+0x16c/0x1f0 [ 1057.706492][T21199] should_fail_ex+0x512/0x640 [ 1057.706507][T21199] _copy_from_user+0x2e/0xd0 [ 1057.706520][T21199] lowpan_control_write+0x101/0x950 [ 1057.706538][T21199] ? __pfx_lowpan_control_write+0x10/0x10 [ 1057.706558][T21199] ? __debugfs_file_get+0x1fe/0x840 [ 1057.706578][T21199] full_proxy_write+0x131/0x1a0 [ 1057.706594][T21199] ? __pfx_full_proxy_write+0x10/0x10 [ 1057.706608][T21199] vfs_write+0x2a0/0x11d0 [ 1057.706625][T21199] ? __pfx___mutex_lock+0x10/0x10 [ 1057.706645][T21199] ? __pfx_vfs_write+0x10/0x10 [ 1057.706659][T21199] ? find_held_lock+0x2b/0x80 [ 1057.706678][T21199] ? __fget_files+0x20e/0x3c0 [ 1057.706697][T21199] ksys_write+0x12a/0x250 [ 1057.706713][T21199] ? __pfx_ksys_write+0x10/0x10 [ 1057.706729][T21199] ? do_user_addr_fault+0x843/0x1370 [ 1057.706746][T21199] __do_fast_syscall_32+0xe8/0x680 [ 1057.706765][T21199] do_fast_syscall_32+0x32/0x80 [ 1057.706782][T21199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1057.706796][T21199] RIP: 0023:0xf700d579 [ 1057.706805][T21199] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1057.706816][T21199] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1057.706827][T21199] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1057.706833][T21199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1057.706840][T21199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1057.706846][T21199] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1057.706852][T21199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1057.706866][T21199] [ 1058.004499][T21205] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1058.006721][T21205] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1058.014050][T21205] vhci_hcd vhci_hcd.0: Device attached [ 1058.279730][ T6481] usb 40-1: SetAddress Request (80) to port 0 [ 1058.282618][ T6481] usb 40-1: new SuperSpeed USB device number 80 using vhci_hcd [ 1058.535866][T21214] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1058.869865][ T5942] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1059.125481][T21210] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1059.127704][T21210] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1059.130583][T21210] vhci_hcd vhci_hcd.0: Device attached [ 1059.144563][T21210] IPVS: set_ctl: invalid protocol: 28525 116.105.110.102:28416 [ 1059.191033][T21206] vhci_hcd: connection reset by peer [ 1059.193608][T11934] vhci_hcd vhci_hcd.1: stop threads [ 1059.195711][T11934] vhci_hcd vhci_hcd.1: release socket [ 1059.197714][T11934] vhci_hcd vhci_hcd.1: disconnect device [ 1059.312075][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.314252][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.441717][T21227] vhci_hcd: connection reset by peer [ 1060.448849][T19506] vhci_hcd vhci_hcd.4: stop threads [ 1060.453404][T19506] vhci_hcd vhci_hcd.4: release socket [ 1060.458367][ T6027] usb 46-1: device descriptor read/8, error -110 [ 1060.458611][T19506] vhci_hcd vhci_hcd.4: disconnect device [ 1060.851459][ T6027] usb usb46-port1: attempt power cycle [ 1060.890554][T21248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4115'. [ 1061.054769][T21250] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1061.057656][T21250] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1061.061761][T21250] vhci_hcd vhci_hcd.0: Device attached [ 1061.124620][T21250] IPVS: set_ctl: invalid protocol: 16 2.0.0.98:12800 [ 1061.422620][ T6027] usb usb46-port1: unable to enumerate USB device [ 1061.482076][T21254] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1062.221842][T21251] vhci_hcd: connection closed [ 1062.222163][ T73] vhci_hcd vhci_hcd.1: stop threads [ 1062.225698][ T73] vhci_hcd vhci_hcd.1: release socket [ 1062.227652][ T73] vhci_hcd vhci_hcd.1: disconnect device [ 1062.505853][T21265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4119'. [ 1062.791694][ T6027] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1062.941758][ T6027] usb 8-1: Using ep0 maxpacket: 8 [ 1062.944995][ T6027] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1062.947351][ T6027] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1062.950562][ T6027] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.954727][ T6027] usb 8-1: config 0 descriptor?? [ 1063.167985][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 1063.167998][ T40] audit: type=1326 audit(1766970737.872:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21271 comm="syz.1.4121" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f94579 code=0x0 [ 1063.232005][ T9020] usb 7-1: new low-speed USB device number 77 using dummy_hcd [ 1063.364698][ T40] audit: type=1326 audit(1766970738.072:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.4120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1063.373289][ T40] audit: type=1326 audit(1766970738.072:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.4120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1063.393011][ T6481] usb 40-1: device descriptor read/8, error -110 [ 1063.402040][ T40] audit: type=1326 audit(1766970738.072:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.4120" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1063.409152][ T40] audit: type=1326 audit(1766970738.072:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.4120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1063.416675][ T40] audit: type=1326 audit(1766970738.072:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.4120" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1063.423788][ T40] audit: type=1326 audit(1766970738.072:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.4120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1063.430815][ T40] audit: type=1326 audit(1766970738.072:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.4120" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1063.438051][ T40] audit: type=1326 audit(1766970738.072:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.4120" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1063.445147][ T40] audit: type=1326 audit(1766970738.072:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.3.4120" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1063.469077][ T9020] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1063.472432][ T9020] usb 7-1: config 0 has no interface number 0 [ 1063.475173][ T9020] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1063.480255][ T9020] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1063.485215][ T9020] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1063.490165][ T9020] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1063.495117][ T9020] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1063.499817][ T9020] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1063.506030][ T9020] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1063.510147][ T9020] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.515989][ T9020] usb 7-1: config 0 descriptor?? [ 1063.519973][T21275] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1063.522536][T21275] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1063.531391][ T9020] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1063.562134][ T53] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 1063.714043][ T53] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1063.717650][ T53] usb 9-1: config 0 has no interface number 0 [ 1063.720625][ T53] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1063.725476][ T53] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1063.730212][ T53] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1063.735437][ T53] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1063.740108][ T53] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1063.744797][ T53] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1063.750433][ T53] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1063.754528][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.759997][ T53] usb 9-1: config 0 descriptor?? [ 1063.766707][T21279] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1063.770284][T21279] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1063.776804][ T53] ldusb 9-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1063.780815][T21281] FAULT_INJECTION: forcing a failure. [ 1063.780815][T21281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.782928][ T6481] usb usb40-port1: attempt power cycle [ 1063.788929][T21281] CPU: 2 UID: 0 PID: 21281 Comm: syz.2.4122 Tainted: G L syzkaller #0 PREEMPT(full) [ 1063.788948][T21281] Tainted: [L]=SOFTLOCKUP [ 1063.788965][T21281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1063.788973][T21281] Call Trace: [ 1063.788977][T21281] [ 1063.788982][T21281] dump_stack_lvl+0x16c/0x1f0 [ 1063.789003][T21281] should_fail_ex+0x512/0x640 [ 1063.789019][T21281] _copy_to_user+0x32/0xd0 [ 1063.789032][T21281] simple_read_from_buffer+0xcb/0x170 [ 1063.789050][T21281] proc_fail_nth_read+0x197/0x240 [ 1063.789069][T21281] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1063.789088][T21281] ? rw_verify_area+0xcf/0x6c0 [ 1063.789103][T21281] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1063.789121][T21281] vfs_read+0x1e4/0xcf0 [ 1063.789137][T21281] ? __pfx___mutex_lock+0x10/0x10 [ 1063.789156][T21281] ? __pfx_vfs_read+0x10/0x10 [ 1063.789170][T21281] ? find_held_lock+0x2b/0x80 [ 1063.789190][T21281] ? __fget_files+0x20e/0x3c0 [ 1063.789210][T21281] ksys_read+0x12a/0x250 [ 1063.789226][T21281] ? __pfx_ksys_read+0x10/0x10 [ 1063.789247][T21281] __do_fast_syscall_32+0xe8/0x680 [ 1063.789266][T21281] do_fast_syscall_32+0x32/0x80 [ 1063.789284][T21281] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1063.789298][T21281] RIP: 0023:0xf700d579 [ 1063.789307][T21281] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1063.789318][T21281] RSP: 002b:00000000f53dc590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1063.789330][T21281] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f53dc620 [ 1063.789337][T21281] RDX: 000000000000000f RSI: 00000000f73a6ff4 RDI: 0000000000000000 [ 1063.789343][T21281] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1063.789349][T21281] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1063.789355][T21281] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1063.789369][T21281] [ 1063.881267][ T981] usb 7-1: USB disconnect, device number 77 [ 1063.885678][ T981] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1064.055824][ T9020] usb 9-1: USB disconnect, device number 23 [ 1064.061715][ T9020] ldusb 9-1:0.55: LD USB Device #1 now disconnected [ 1064.413927][ T6481] usb usb40-port1: unable to enumerate USB device [ 1064.668956][T21292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4126'. [ 1065.149017][T21298] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1065.151782][T21298] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1065.158359][T21298] vhci_hcd vhci_hcd.0: Device attached [ 1065.174523][T21298] IPVS: set_ctl: invalid protocol: 16 2.0.0.98:12800 [ 1065.229899][T21302] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1065.234702][T21302] overlayfs: overlapping lowerdir path [ 1065.503061][ T10] usb 42-1: SetAddress Request (70) to port 0 [ 1065.505539][ T10] usb 42-1: new SuperSpeed USB device number 70 using vhci_hcd [ 1065.721845][T21300] vhci_hcd: connection reset by peer [ 1065.725892][T11934] vhci_hcd vhci_hcd.2: stop threads [ 1065.727956][T11934] vhci_hcd vhci_hcd.2: release socket [ 1065.730438][T11934] vhci_hcd vhci_hcd.2: disconnect device [ 1065.908346][ T6027] usbhid 8-1:0.0: can't add hid device: -71 [ 1066.009285][ T6027] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1066.034050][ T6027] usb 8-1: USB disconnect, device number 79 [ 1066.145381][T21315] FAULT_INJECTION: forcing a failure. [ 1066.145381][T21315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1066.149886][T21315] CPU: 3 UID: 0 PID: 21315 Comm: syz.1.4134 Tainted: G L syzkaller #0 PREEMPT(full) [ 1066.149905][T21315] Tainted: [L]=SOFTLOCKUP [ 1066.149909][T21315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1066.149916][T21315] Call Trace: [ 1066.149921][T21315] [ 1066.149926][T21315] dump_stack_lvl+0x16c/0x1f0 [ 1066.149947][T21315] should_fail_ex+0x512/0x640 [ 1066.149964][T21315] _copy_to_user+0x32/0xd0 [ 1066.149984][T21315] simple_read_from_buffer+0xcb/0x170 [ 1066.150008][T21315] proc_fail_nth_read+0x197/0x240 [ 1066.150034][T21315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1066.150062][T21315] ? rw_verify_area+0xcf/0x6c0 [ 1066.150083][T21315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1066.150109][T21315] vfs_read+0x1e4/0xcf0 [ 1066.150130][T21315] ? __pfx___mutex_lock+0x10/0x10 [ 1066.150149][T21315] ? __pfx_vfs_read+0x10/0x10 [ 1066.150164][T21315] ? find_held_lock+0x2b/0x80 [ 1066.150189][T21315] ? __fget_files+0x20e/0x3c0 [ 1066.150218][T21315] ksys_read+0x12a/0x250 [ 1066.150234][T21315] ? __pfx_ksys_read+0x10/0x10 [ 1066.150250][T21315] ? do_user_addr_fault+0x843/0x1370 [ 1066.150266][T21315] __do_fast_syscall_32+0xe8/0x680 [ 1066.150288][T21315] do_fast_syscall_32+0x32/0x80 [ 1066.150306][T21315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1066.150320][T21315] RIP: 0023:0xf7f94579 [ 1066.150330][T21315] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1066.150341][T21315] RSP: 002b:00000000f5486590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1066.150353][T21315] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5486620 [ 1066.150360][T21315] RDX: 000000000000000f RSI: 00000000f7426ff4 RDI: 0000000000000000 [ 1066.150367][T21315] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1066.150373][T21315] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1066.150380][T21315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1066.150393][T21315] [ 1066.240751][T21317] bond0: entered promiscuous mode [ 1066.242485][T21317] bond_slave_0: entered promiscuous mode [ 1066.244525][T21317] bond_slave_1: entered promiscuous mode [ 1066.246566][T21317] bond0: entered allmulticast mode [ 1066.248476][T21317] bond_slave_0: entered allmulticast mode [ 1066.250353][T21317] bond_slave_1: entered allmulticast mode [ 1066.360299][T21325] FAULT_INJECTION: forcing a failure. [ 1066.360299][T21325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1066.367302][T21325] CPU: 2 UID: 0 PID: 21325 Comm: syz.3.4136 Tainted: G L syzkaller #0 PREEMPT(full) [ 1066.367331][T21325] Tainted: [L]=SOFTLOCKUP [ 1066.367338][T21325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1066.367349][T21325] Call Trace: [ 1066.367355][T21325] [ 1066.367362][T21325] dump_stack_lvl+0x16c/0x1f0 [ 1066.367388][T21325] should_fail_ex+0x512/0x640 [ 1066.367411][T21325] _copy_from_user+0x2e/0xd0 [ 1066.367430][T21325] get_compat_msghdr+0xa7/0x170 [ 1066.367451][T21325] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1066.367470][T21325] ___sys_sendmsg+0x1ae/0x1d0 [ 1066.367490][T21325] ? __pfx____sys_sendmsg+0x10/0x10 [ 1066.367598][T21325] ? find_held_lock+0x2b/0x80 [ 1066.367621][T21325] __sys_sendmsg+0x16d/0x220 [ 1066.367636][T21325] ? __pfx___sys_sendmsg+0x10/0x10 [ 1066.367655][T21325] ? do_user_addr_fault+0x843/0x1370 [ 1066.367671][T21325] __do_fast_syscall_32+0xe8/0x680 [ 1066.367691][T21325] do_fast_syscall_32+0x32/0x80 [ 1066.367708][T21325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1066.367722][T21325] RIP: 0023:0xf7f21579 [ 1066.367731][T21325] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1066.367742][T21325] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1066.367753][T21325] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1066.367760][T21325] RDX: 0000000024000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1066.367766][T21325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1066.367772][T21325] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1066.367779][T21325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1066.367792][T21325] [ 1066.464952][T21326] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1066.467882][T21326] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1066.484231][T21326] vhci_hcd vhci_hcd.0: Device attached [ 1066.508222][T21330] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4138'. [ 1066.648456][T21338] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1066.736218][T21338] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1066.740295][T21338] overlayfs: failed to look up (tracing) for ino (-66) [ 1066.763775][ T9020] usb 46-1: SetAddress Request (38) to port 0 [ 1066.766757][ T9020] usb 46-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1066.998977][T21327] vhci_hcd: connection reset by peer [ 1067.354621][T21345] fuse: Bad value for 'fd' [ 1067.392048][ T6342] vhci_hcd vhci_hcd.4: stop threads [ 1067.394100][ T6342] vhci_hcd vhci_hcd.4: release socket [ 1067.395898][ T6342] vhci_hcd vhci_hcd.4: disconnect device [ 1067.655885][T21348] FAULT_INJECTION: forcing a failure. [ 1067.655885][T21348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.660734][T21348] CPU: 2 UID: 0 PID: 21348 Comm: syz.3.4141 Tainted: G L syzkaller #0 PREEMPT(full) [ 1067.660763][T21348] Tainted: [L]=SOFTLOCKUP [ 1067.660769][T21348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1067.660780][T21348] Call Trace: [ 1067.660787][T21348] [ 1067.660794][T21348] dump_stack_lvl+0x16c/0x1f0 [ 1067.660826][T21348] should_fail_ex+0x512/0x640 [ 1067.660850][T21348] _copy_from_user+0x2e/0xd0 [ 1067.660870][T21348] do_sys_poll+0x1d5/0xdf0 [ 1067.660893][T21348] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1067.660921][T21348] ? is_bpf_text_address+0x94/0x1a0 [ 1067.660947][T21348] ? __kernel_text_address+0xd/0x40 [ 1067.660966][T21348] ? unwind_get_return_address+0x59/0xa0 [ 1067.660991][T21348] ? __pfx_do_sys_poll+0x10/0x10 [ 1067.661014][T21348] ? __lock_acquire+0x436/0x2890 [ 1067.661093][T21348] ? __mutex_unlock_slowpath+0x161/0x790 [ 1067.661125][T21348] ? set_compat_user_sigmask+0x213/0x2a0 [ 1067.661163][T21348] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 1067.661186][T21348] ? __fget_files+0x20e/0x3c0 [ 1067.661213][T21348] __ia32_compat_sys_ppoll_time32+0x248/0x2c0 [ 1067.661242][T21348] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 1067.661269][T21348] ? ksys_write+0x1ac/0x250 [ 1067.661293][T21348] ? __pfx_ksys_write+0x10/0x10 [ 1067.661325][T21348] __do_fast_syscall_32+0xe8/0x680 [ 1067.661355][T21348] do_fast_syscall_32+0x32/0x80 [ 1067.661382][T21348] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1067.661404][T21348] RIP: 0023:0xf7f21579 [ 1067.661418][T21348] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1067.661435][T21348] RSP: 002b:00000000f53f555c EFLAGS: 00000296 ORIG_RAX: 0000000000000135 [ 1067.661453][T21348] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000000000001 [ 1067.661464][T21348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1067.661475][T21348] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1067.661505][T21348] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1067.661515][T21348] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1067.661539][T21348] [ 1067.721692][T21350] netlink: 'syz.4.4143': attribute type 17 has an invalid length. [ 1067.772259][T21350] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4143'. [ 1067.784059][T21350] macvtap0: entered allmulticast mode [ 1067.786437][T21350] veth0_macvtap: entered allmulticast mode [ 1067.789253][T21350] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 1068.034347][T21362] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1068.037043][T21362] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1068.041380][T21362] vhci_hcd vhci_hcd.0: Device attached [ 1068.057392][T21362] IPVS: set_ctl: invalid protocol: 16 2.0.0.98:12800 [ 1068.626302][T21363] vhci_hcd: connection closed [ 1068.626572][ T46] vhci_hcd vhci_hcd.2: stop threads [ 1068.630943][ T46] vhci_hcd vhci_hcd.2: release socket [ 1068.633529][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 1068.690466][T21370] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1068.693287][T21370] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1068.697088][T21370] vhci_hcd vhci_hcd.0: Device attached [ 1068.884649][ T6027] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1068.944625][ T6027] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1069.014542][T21381] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1069.016897][T21381] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1069.020239][T21381] vhci_hcd vhci_hcd.0: Device attached [ 1069.055936][T21381] IPVS: set_ctl: invalid protocol: 28525 116.105.110.102:28416 [ 1069.284862][ T53] usb 40-1: SetAddress Request (84) to port 0 [ 1069.287219][ T53] usb 40-1: new SuperSpeed USB device number 84 using vhci_hcd [ 1069.516458][T21386] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4151'. [ 1069.519653][T21386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4151'. [ 1069.561475][T21371] vhci_hcd: connection reset by peer [ 1069.581089][ T73] vhci_hcd vhci_hcd.3: stop threads [ 1069.582958][ T73] vhci_hcd vhci_hcd.3: release socket [ 1069.588377][ T73] vhci_hcd vhci_hcd.3: disconnect device [ 1070.195274][ T5950] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1070.617548][ T10] usb 42-1: device descriptor read/8, error -110 [ 1071.633306][T21395] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1071.635570][T21395] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1071.639659][T21395] vhci_hcd vhci_hcd.0: Device attached [ 1071.877334][ T10] usb usb42-port1: attempt power cycle [ 1071.892344][T21396] vhci_hcd: connection reset by peer [ 1071.894858][T11934] vhci_hcd vhci_hcd.4: stop threads [ 1071.897289][T11934] vhci_hcd vhci_hcd.4: release socket [ 1071.899203][T11934] vhci_hcd vhci_hcd.4: disconnect device [ 1071.899209][ T9020] usb 46-1: device descriptor read/8, error -110 [ 1071.983116][T21382] vhci_hcd: connection reset by peer [ 1071.996179][ T46] vhci_hcd vhci_hcd.1: stop threads [ 1071.998117][ T46] vhci_hcd vhci_hcd.1: release socket [ 1072.000455][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 1072.063717][T21399] FAULT_INJECTION: forcing a failure. [ 1072.063717][T21399] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.069727][T21399] CPU: 2 UID: 0 PID: 21399 Comm: syz.2.4154 Tainted: G L syzkaller #0 PREEMPT(full) [ 1072.069754][T21399] Tainted: [L]=SOFTLOCKUP [ 1072.069760][T21399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1072.069772][T21399] Call Trace: [ 1072.069778][T21399] [ 1072.069786][T21399] dump_stack_lvl+0x16c/0x1f0 [ 1072.069818][T21399] should_fail_ex+0x512/0x640 [ 1072.069838][T21399] ? __kmalloc_noprof+0xca/0x910 [ 1072.069860][T21399] should_failslab+0xc2/0x120 [ 1072.069887][T21399] __kmalloc_noprof+0xeb/0x910 [ 1072.069906][T21399] ? mtd_kmalloc_up_to+0x152/0x190 [ 1072.069934][T21399] ? mtd_kmalloc_up_to+0x152/0x190 [ 1072.069955][T21399] mtd_kmalloc_up_to+0x152/0x190 [ 1072.069980][T21399] mtdchar_read+0x189/0x5b0 [ 1072.070004][T21399] ? __pfx_mtdchar_read+0x10/0x10 [ 1072.070031][T21399] ? common_file_perm+0x1b1/0x500 [ 1072.070055][T21399] ? bpf_lsm_file_permission+0x9/0x10 [ 1072.070076][T21399] ? security_file_permission+0x71/0x210 [ 1072.070100][T21399] ? rw_verify_area+0xcf/0x6c0 [ 1072.070122][T21399] ? __pfx_mtdchar_read+0x10/0x10 [ 1072.070141][T21399] vfs_read+0x1e4/0xcf0 [ 1072.070171][T21399] ? __pfx_vfs_read+0x10/0x10 [ 1072.070194][T21399] ? find_held_lock+0x2b/0x80 [ 1072.070218][T21399] ? __fget_files+0x204/0x3c0 [ 1072.070253][T21399] ? __fget_files+0x20e/0x3c0 [ 1072.070283][T21399] ksys_read+0x12a/0x250 [ 1072.070306][T21399] ? __pfx_ksys_read+0x10/0x10 [ 1072.070331][T21399] ? do_user_addr_fault+0x843/0x1370 [ 1072.070356][T21399] __do_fast_syscall_32+0xe8/0x680 [ 1072.070386][T21399] do_fast_syscall_32+0x32/0x80 [ 1072.070413][T21399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.070435][T21399] RIP: 0023:0xf700d579 [ 1072.070450][T21399] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1072.070468][T21399] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 1072.070485][T21399] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800004c0 [ 1072.070497][T21399] RDX: 000000000000004e RSI: 0000000000000000 RDI: 0000000000000000 [ 1072.070506][T21399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1072.070516][T21399] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1072.070525][T21399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1072.070546][T21399] [ 1072.286980][ T9020] usb usb46-port1: attempt power cycle [ 1072.350176][T21407] netlink: 'syz.3.4155': attribute type 4 has an invalid length. [ 1072.363964][T21407] netlink: 'syz.3.4155': attribute type 4 has an invalid length. [ 1072.446663][ T10] usb usb42-port1: unable to enumerate USB device [ 1072.540136][T21409] FAULT_INJECTION: forcing a failure. [ 1072.540136][T21409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1072.547001][T21409] CPU: 2 UID: 0 PID: 21409 Comm: syz.4.4157 Tainted: G L syzkaller #0 PREEMPT(full) [ 1072.547032][T21409] Tainted: [L]=SOFTLOCKUP [ 1072.547039][T21409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1072.547049][T21409] Call Trace: [ 1072.547057][T21409] [ 1072.547064][T21409] dump_stack_lvl+0x16c/0x1f0 [ 1072.547095][T21409] should_fail_ex+0x512/0x640 [ 1072.547117][T21409] _copy_from_iter+0x2a4/0x16c0 [ 1072.547143][T21409] ? __pfx__copy_from_iter+0x10/0x10 [ 1072.547165][T21409] ? find_held_lock+0x2b/0x80 [ 1072.547189][T21409] ? rawv6_sendmsg+0xb68/0x4860 [ 1072.547219][T21409] rawv6_sendmsg+0x238c/0x4860 [ 1072.547244][T21409] ? aa_label_sk_perm+0x194/0x5f0 [ 1072.547268][T21409] ? aa_profile_af_perm+0x310/0x390 [ 1072.547291][T21409] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1072.547349][T21409] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1072.547378][T21409] ? inet_sendmsg+0x11c/0x140 [ 1072.547398][T21409] inet_sendmsg+0x11c/0x140 [ 1072.547418][T21409] __sys_sendto+0x43c/0x520 [ 1072.547440][T21409] ? __pfx___sys_sendto+0x10/0x10 [ 1072.547478][T21409] ? ksys_write+0x1ac/0x250 [ 1072.547511][T21409] ? __pfx_ksys_write+0x10/0x10 [ 1072.547538][T21409] __ia32_sys_sendto+0xdd/0x1b0 [ 1072.547558][T21409] ? __do_fast_syscall_32+0x9a/0x680 [ 1072.547585][T21409] ? lockdep_hardirqs_on+0x7c/0x110 [ 1072.547609][T21409] __do_fast_syscall_32+0xe8/0x680 [ 1072.547638][T21409] do_fast_syscall_32+0x32/0x80 [ 1072.547664][T21409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.547686][T21409] RIP: 0023:0xf7fc6579 [ 1072.547701][T21409] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1072.547718][T21409] RSP: 002b:00000000f54b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 1072.547736][T21409] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 1072.547747][T21409] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 1072.547758][T21409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1072.547768][T21409] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1072.547778][T21409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1072.547800][T21409] [ 1072.939551][ T9020] usb usb46-port1: unable to enumerate USB device [ 1072.971458][T21416] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1072.973656][T21416] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1072.982044][T21417] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1072.984771][T21417] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1072.995391][T21416] vhci_hcd vhci_hcd.0: Device attached [ 1073.003237][T21417] vhci_hcd vhci_hcd.0: Device attached [ 1073.088557][T21417] IPVS: set_ctl: invalid protocol: 16 2.0.0.98:12800 [ 1073.105949][T21416] IPVS: set_ctl: invalid protocol: 28525 116.105.110.102:28416 [ 1073.256959][ T9862] usb 46-1: SetAddress Request (42) to port 0 [ 1073.259673][ T9862] usb 46-1: new SuperSpeed USB device number 42 using vhci_hcd [ 1073.318878][ T5942] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1073.555844][T21419] vhci_hcd: connection reset by peer [ 1073.561720][T11934] vhci_hcd vhci_hcd.4: stop threads [ 1073.564096][T11934] vhci_hcd vhci_hcd.4: release socket [ 1073.566326][T11934] vhci_hcd vhci_hcd.4: disconnect device [ 1073.615823][T21435] netlink: 'syz.3.4163': attribute type 12 has an invalid length. [ 1073.618639][T21435] netlink: 'syz.3.4163': attribute type 29 has an invalid length. [ 1073.621383][T21435] netlink: 'syz.3.4163': attribute type 1 has an invalid length. [ 1073.624342][T21435] netlink: 'syz.3.4163': attribute type 2 has an invalid length. [ 1073.627107][T21435] netlink: 'syz.3.4163': attribute type 1 has an invalid length. [ 1073.629885][T21435] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4163'. [ 1073.763013][T21418] vhci_hcd: connection closed [ 1073.764001][T11934] vhci_hcd vhci_hcd.1: stop threads [ 1073.771214][T11934] vhci_hcd vhci_hcd.1: release socket [ 1073.775107][T11934] vhci_hcd vhci_hcd.1: disconnect device [ 1073.840690][T21440] syzkaller0: entered promiscuous mode [ 1073.842649][T21440] syzkaller0: entered allmulticast mode [ 1074.026962][ T6027] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1074.330243][T21450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4166'. [ 1074.337957][T21450] syzkaller0: entered promiscuous mode [ 1074.340015][T21450] syzkaller0: entered allmulticast mode [ 1074.367265][ T53] usb 40-1: device descriptor read/8, error -110 [ 1074.537099][T20204] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1075.096246][ T53] usb usb40-port1: attempt power cycle [ 1075.457614][T20204] usb 9-1: Using ep0 maxpacket: 8 [ 1075.457772][T21469] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4173'. [ 1075.461517][T20204] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1075.468218][T20204] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1075.472217][T20204] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1075.475380][T20204] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1075.481140][T20204] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1075.484068][T20204] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.607332][T21473] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1075.649217][T21473] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1075.652735][T21473] overlayfs: failed to look up (tracing) for ino (-66) [ 1075.765417][T20204] usb 9-1: GET_CAPABILITIES returned 0 [ 1075.879808][T21483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4177'. [ 1075.942712][T21482] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1075.945001][T21482] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1075.969315][T21482] vhci_hcd vhci_hcd.0: Device attached [ 1076.027789][ T53] usb 40-1: SetAddress Request (87) to port 0 [ 1076.029966][ T53] usb 40-1: new SuperSpeed USB device number 87 using vhci_hcd [ 1076.349677][T20204] usbtmc 9-1:16.0: can't read capabilities [ 1076.355095][T20204] usb 9-1: USB disconnect, device number 24 [ 1076.515810][T21484] vhci_hcd: connection reset by peer [ 1076.519156][T19506] vhci_hcd vhci_hcd.1: stop threads [ 1076.521864][T19506] vhci_hcd vhci_hcd.1: release socket [ 1076.530637][T19506] vhci_hcd vhci_hcd.1: disconnect device [ 1077.441343][T21505] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4180'. [ 1077.806265][T21522] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4186'. [ 1078.048058][T21514] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1078.069504][T21524] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1078.107464][T21524] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1078.110941][T21514] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1078.112286][T21524] overlayfs: failed to look up (tracing) for ino (-66) [ 1078.116275][T21514] overlayfs: failed to look up (tracing) for ino (-66) [ 1078.359197][ T9862] usb 46-1: device descriptor read/8, error -110 [ 1079.027742][T21533] binder: 21528:21533 ioctl 0 80000040 returned -22 [ 1079.287093][T21541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4191'. [ 1079.652117][ T5950] Bluetooth: hci0: connection err: -111 [ 1079.665206][T21547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4193'. [ 1079.929545][ T9862] usb usb46-port1: attempt power cycle [ 1080.183312][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 1080.183324][ T40] audit: type=1326 audit(1766970754.884:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21550 comm="syz.1.4194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1080.192813][ T40] audit: type=1326 audit(1766970754.884:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21550 comm="syz.1.4194" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1080.201824][ T40] audit: type=1326 audit(1766970754.894:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21550 comm="syz.1.4194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1080.231521][ T40] audit: type=1326 audit(1766970754.894:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21552 comm="syz.1.4194" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1080.238848][ T40] audit: type=1326 audit(1766970754.904:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21550 comm="syz.1.4194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1080.250479][ T40] audit: type=1326 audit(1766970754.934:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21550 comm="syz.1.4194" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1080.343163][ T40] audit: type=1326 audit(1766970755.044:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21552 comm="syz.1.4194" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1080.356024][ T40] audit: type=1326 audit(1766970755.054:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21550 comm="syz.1.4194" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f94598 code=0x7ffc0000 [ 1080.366925][ T40] audit: type=1326 audit(1766970755.054:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21550 comm="syz.1.4194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1080.374813][ T40] audit: type=1326 audit(1766970755.054:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21550 comm="syz.1.4194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1080.711343][ T9862] usb usb46-port1: unable to enumerate USB device [ 1081.400252][ T53] usb 40-1: device descriptor read/8, error -110 [ 1081.520490][ T53] usb usb40-port1: unable to enumerate USB device [ 1081.688351][T21577] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1081.709426][T21577] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1081.712887][T21577] overlayfs: failed to look up (tracing) for ino (-66) [ 1082.536467][T21583] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1082.539192][T21583] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1082.542211][T21583] vhci_hcd vhci_hcd.0: Device attached [ 1082.821530][ T6027] usb 42-1: SetAddress Request (74) to port 0 [ 1082.827617][ T6027] usb 42-1: new SuperSpeed USB device number 74 using vhci_hcd [ 1082.922875][T21593] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1082.925352][T21593] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1082.935383][T21593] vhci_hcd vhci_hcd.0: Device attached [ 1083.070191][T21593] wg2 speed is unknown, defaulting to 1000 [ 1083.078948][T21593] wg2 speed is unknown, defaulting to 1000 [ 1083.083072][T21593] wg2 speed is unknown, defaulting to 1000 [ 1083.405582][ T9020] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 1083.432896][T21584] vhci_hcd: connection reset by peer [ 1083.435764][ T6342] vhci_hcd vhci_hcd.2: stop threads [ 1083.442956][ T6342] vhci_hcd vhci_hcd.2: release socket [ 1083.454790][ T6342] vhci_hcd vhci_hcd.2: disconnect device [ 1083.674294][T21604] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1083.705327][T21604] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1083.710122][T21604] overlayfs: failed to look up (tracing) for ino (-66) [ 1083.821359][ T9862] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1083.971369][ T9862] usb 9-1: Using ep0 maxpacket: 8 [ 1084.002489][ T9862] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1084.005377][ T9862] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1084.143597][ T5766] wg2 speed is unknown, defaulting to 1000 [ 1084.171643][T21593] infiniband syz2: set active [ 1084.173456][T21593] infiniband syz2: added wg2 [ 1084.282140][T21594] vhci_hcd: connection reset by peer [ 1084.287088][ T1175] vhci_hcd vhci_hcd.3: stop threads [ 1084.288898][ T1175] vhci_hcd vhci_hcd.3: release socket [ 1084.312095][ T1175] vhci_hcd vhci_hcd.3: disconnect device [ 1084.332511][T21593] RDS/IB: syz2: added [ 1084.339576][T21593] smc: adding ib device syz2 with port count 1 [ 1084.342577][T21593] smc: ib device syz2 port 1 has pnetid SYZ1 (user defined) [ 1084.353495][ T5766] wg2 speed is unknown, defaulting to 1000 [ 1084.356906][T21593] wg2 speed is unknown, defaulting to 1000 [ 1084.487576][T21593] wg2 speed is unknown, defaulting to 1000 [ 1084.567742][ T9862] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.581993][ T9862] usb 9-1: config 0 descriptor?? [ 1084.659573][T21593] wg2 speed is unknown, defaulting to 1000 [ 1084.903020][T21616] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1084.954019][T21616] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1084.957368][T21616] overlayfs: failed to look up (tracing) for ino (-66) [ 1084.990007][T21593] wg2 speed is unknown, defaulting to 1000 [ 1085.307826][ T40] audit: type=1326 audit(1766970760.002:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21599 comm="syz.4.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 1085.315317][ T40] audit: type=1326 audit(1766970760.002:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21599 comm="syz.4.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 1085.322624][ T40] audit: type=1326 audit(1766970760.002:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21599 comm="syz.4.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 1085.329715][ T40] audit: type=1326 audit(1766970760.002:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21599 comm="syz.4.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 1085.337115][ T40] audit: type=1326 audit(1766970760.002:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21599 comm="syz.4.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 1085.344344][ T40] audit: type=1326 audit(1766970760.002:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21599 comm="syz.4.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 1085.351626][ T40] audit: type=1326 audit(1766970760.002:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21599 comm="syz.4.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 1085.359028][ T40] audit: type=1326 audit(1766970760.002:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21599 comm="syz.4.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 1085.366126][ T40] audit: type=1326 audit(1766970760.002:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21599 comm="syz.4.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 1085.374590][ T40] audit: type=1326 audit(1766970760.002:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21599 comm="syz.4.4205" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 1085.634931][T21623] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1085.683567][T21623] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1085.686985][T21623] overlayfs: failed to look up (tracing) for ino (-66) [ 1086.576922][ T9862] usbhid 9-1:0.0: can't add hid device: -71 [ 1086.587153][ T9862] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1086.595370][ T9862] usb 9-1: USB disconnect, device number 25 [ 1086.660564][T21634] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4215'. [ 1086.762142][T21644] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1086.789694][T21644] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1086.793306][T21644] overlayfs: failed to look up (tracing) for ino (-66) [ 1086.928545][T21650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4217'. [ 1087.883173][ T6027] usb 42-1: device descriptor read/8, error -110 [ 1088.535234][ T9020] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1088.778270][ T5950] Bluetooth: hci4: connection err: -111 [ 1088.865932][ T6027] usb usb42-port1: attempt power cycle [ 1088.887176][T21679] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1088.931797][T21679] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1088.936893][T21679] overlayfs: failed to look up (tracing) for ino (-66) [ 1089.065144][ T5766] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1089.219251][ T5766] usb 8-1: Using ep0 maxpacket: 8 [ 1089.232753][ T5766] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1089.235400][ T5766] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1089.238615][ T5766] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.442432][ T6027] usb usb42-port1: unable to enumerate USB device [ 1089.927177][ T5766] usb 8-1: config 0 descriptor?? [ 1090.177116][T21696] FAULT_INJECTION: forcing a failure. [ 1090.177116][T21696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1090.182037][T21696] CPU: 3 UID: 0 PID: 21696 Comm: syz.1.4230 Tainted: G L syzkaller #0 PREEMPT(full) [ 1090.182056][T21696] Tainted: [L]=SOFTLOCKUP [ 1090.182060][T21696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1090.182067][T21696] Call Trace: [ 1090.182072][T21696] [ 1090.182076][T21696] dump_stack_lvl+0x16c/0x1f0 [ 1090.182097][T21696] should_fail_ex+0x512/0x640 [ 1090.182113][T21696] _copy_from_user+0x2e/0xd0 [ 1090.182125][T21696] get_compat_msghdr+0xa7/0x170 [ 1090.182140][T21696] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1090.182155][T21696] ? __pfx__kstrtoull+0x10/0x10 [ 1090.182172][T21696] ___sys_sendmsg+0x1ae/0x1d0 [ 1090.182188][T21696] ? __pfx____sys_sendmsg+0x10/0x10 [ 1090.182217][T21696] __sys_sendmmsg+0x2f9/0x420 [ 1090.182238][T21696] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1090.182257][T21696] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1090.182280][T21696] ? fput+0x70/0xf0 [ 1090.182291][T21696] ? ksys_write+0x1ac/0x250 [ 1090.182306][T21696] ? __pfx_ksys_write+0x10/0x10 [ 1090.182324][T21696] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1090.182338][T21696] ? lockdep_hardirqs_on+0x7c/0x110 [ 1090.182355][T21696] __do_fast_syscall_32+0xe8/0x680 [ 1090.182374][T21696] do_fast_syscall_32+0x32/0x80 [ 1090.182391][T21696] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1090.182405][T21696] RIP: 0023:0xf7f94579 [ 1090.182414][T21696] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1090.182425][T21696] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1090.182436][T21696] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001840 [ 1090.182443][T21696] RDX: 0000000000000001 RSI: 0000000000008000 RDI: 0000000000000000 [ 1090.182449][T21696] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1090.182456][T21696] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1090.182462][T21696] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1090.182475][T21696] [ 1090.556066][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 1090.556083][ T40] audit: type=1326 audit(1766970765.249:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21677 comm="syz.3.4226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1090.570111][ T40] audit: type=1326 audit(1766970765.259:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21677 comm="syz.3.4226" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1090.579533][ T40] audit: type=1326 audit(1766970765.259:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21677 comm="syz.3.4226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1090.588732][ T40] audit: type=1326 audit(1766970765.259:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21677 comm="syz.3.4226" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1090.597826][ T40] audit: type=1326 audit(1766970765.259:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21677 comm="syz.3.4226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1090.607186][ T40] audit: type=1326 audit(1766970765.259:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21677 comm="syz.3.4226" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1090.616520][ T40] audit: type=1326 audit(1766970765.259:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21677 comm="syz.3.4226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1090.625973][ T40] audit: type=1326 audit(1766970765.259:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21677 comm="syz.3.4226" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1090.635240][ T40] audit: type=1326 audit(1766970765.259:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21677 comm="syz.3.4226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1090.644840][ T40] audit: type=1326 audit(1766970765.259:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21677 comm="syz.3.4226" exe="/syz-executor" sig=0 arch=40000003 syscall=367 compat=1 ip=0xf7f21579 code=0x7ffc0000 [ 1091.014644][ T6022] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1091.144636][ T6022] usb 7-1: device descriptor read/64, error -71 [ 1091.364508][T21715] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1091.381916][T21715] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1091.384982][ T6022] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1091.385352][T21715] overlayfs: failed to look up (tracing) for ino (-66) [ 1091.514758][ T6022] usb 7-1: device descriptor read/64, error -71 [ 1091.632212][ T6022] usb usb7-port1: attempt power cycle [ 1091.879564][ T5766] usbhid 8-1:0.0: can't add hid device: -71 [ 1091.882446][ T5766] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1091.905811][ T5950] Bluetooth: hci0: unexpected event for opcode 0x0c24 [ 1091.933733][T21717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.940292][ T5766] usb 8-1: USB disconnect, device number 80 [ 1091.985349][ T6022] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1091.994924][T21717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1092.005310][T21717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1092.024117][ T6022] usb 7-1: device descriptor read/8, error -71 [ 1092.143994][T21716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1092.294615][ T6022] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1092.325530][ T6022] usb 7-1: device descriptor read/8, error -71 [ 1092.445483][ T6022] usb usb7-port1: unable to enumerate USB device [ 1092.725810][T21723] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4237'. [ 1092.735073][T21723] batadv1: entered allmulticast mode [ 1093.576995][ T5950] Bluetooth: hci4: connection err: -111 [ 1093.804150][T21736] mkiss: ax0: crc mode is auto. [ 1094.656627][T21746] vlan2: entered promiscuous mode [ 1094.659317][T21746] vlan2: entered allmulticast mode [ 1094.662311][T21746] hsr_slave_1: entered allmulticast mode [ 1094.726108][T21735] comedi comedi2: reset error (fatal) [ 1095.056398][ T6481] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1095.142733][T21755] FAULT_INJECTION: forcing a failure. [ 1095.142733][T21755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.148728][T21755] CPU: 3 UID: 0 PID: 21755 Comm: syz.4.4247 Tainted: G L syzkaller #0 PREEMPT(full) [ 1095.148760][T21755] Tainted: [L]=SOFTLOCKUP [ 1095.148767][T21755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1095.148778][T21755] Call Trace: [ 1095.148784][T21755] [ 1095.148790][T21755] dump_stack_lvl+0x16c/0x1f0 [ 1095.148821][T21755] should_fail_ex+0x512/0x640 [ 1095.148847][T21755] _copy_from_user+0x2e/0xd0 [ 1095.148868][T21755] get_compat_msghdr+0xa7/0x170 [ 1095.148891][T21755] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1095.148922][T21755] ___sys_sendmsg+0x1ae/0x1d0 [ 1095.148947][T21755] ? __pfx____sys_sendmsg+0x10/0x10 [ 1095.148983][T21755] ? find_held_lock+0x2b/0x80 [ 1095.149024][T21755] __sys_sendmsg+0x16d/0x220 [ 1095.149049][T21755] ? __pfx___sys_sendmsg+0x10/0x10 [ 1095.149081][T21755] ? fput+0x70/0xf0 [ 1095.149102][T21755] __do_fast_syscall_32+0xe8/0x680 [ 1095.149133][T21755] do_fast_syscall_32+0x32/0x80 [ 1095.149160][T21755] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1095.149189][T21755] RIP: 0023:0xf7fc6579 [ 1095.149205][T21755] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1095.149223][T21755] RSP: 002b:00000000f54b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1095.149242][T21755] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 1095.149253][T21755] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1095.149263][T21755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1095.149274][T21755] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1095.149285][T21755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1095.149307][T21755] [ 1095.150169][T21756] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1095.220587][T21756] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1095.226567][ T6481] usb 6-1: Using ep0 maxpacket: 8 [ 1095.244852][T21756] vhci_hcd vhci_hcd.0: Device attached [ 1095.251065][ T6481] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1095.261179][ T6481] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1095.265226][ T6481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.275722][T21762] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1095.311922][ T6481] usb 6-1: config 0 descriptor?? [ 1095.541555][T21762] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1095.545441][T21762] overlayfs: failed to look up (tracing) for ino (-66) [ 1095.546505][ T6022] usb 44-1: SetAddress Request (66) to port 0 [ 1095.550017][ T6022] usb 44-1: new SuperSpeed USB device number 66 using vhci_hcd [ 1095.620310][T21767] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1095.623309][T21767] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1095.627354][T21767] vhci_hcd vhci_hcd.0: Device attached [ 1095.649719][T21767] IPVS: set_ctl: invalid protocol: 16 2.0.0.98:12800 [ 1095.737381][T21757] vhci_hcd: connection reset by peer [ 1095.740927][ T1143] vhci_hcd vhci_hcd.3: stop threads [ 1095.743255][ T1143] vhci_hcd vhci_hcd.3: release socket [ 1095.745704][ T1143] vhci_hcd vhci_hcd.3: disconnect device [ 1095.897055][ T53] usb 46-1: SetAddress Request (46) to port 0 [ 1095.899287][ T53] usb 46-1: new SuperSpeed USB device number 46 using vhci_hcd [ 1096.029880][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 1096.029906][ T40] audit: type=1326 audit(1766970770.707:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.1.4244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1096.047916][ T40] audit: type=1326 audit(1766970770.707:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.1.4244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1096.055405][ T40] audit: type=1326 audit(1766970770.707:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.1.4244" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1096.062442][ T40] audit: type=1326 audit(1766970770.707:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.1.4244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1096.069388][ T40] audit: type=1326 audit(1766970770.717:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.1.4244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1096.167020][ T40] audit: type=1326 audit(1766970770.717:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.1.4244" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1096.178157][ T40] audit: type=1326 audit(1766970770.737:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.1.4244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1096.188507][ T40] audit: type=1326 audit(1766970770.737:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.1.4244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1096.198196][ T40] audit: type=1326 audit(1766970770.737:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.1.4244" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1096.207750][ T40] audit: type=1326 audit(1766970770.737:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.1.4244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1096.221585][T21768] vhci_hcd: connection reset by peer [ 1096.225582][T11934] vhci_hcd vhci_hcd.4: stop threads [ 1096.229018][T11934] vhci_hcd vhci_hcd.4: release socket [ 1096.231404][T11934] vhci_hcd vhci_hcd.4: disconnect device [ 1096.255292][T21772] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1096.268745][T21772] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1096.272130][T21772] overlayfs: failed to look up (tracing) for ino (-66) [ 1096.418682][T21777] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1096.466245][T21777] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1096.469685][T21777] overlayfs: failed to look up (tracing) for ino (-66) [ 1096.960227][T21783] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1096.988628][T21783] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1096.992462][T21783] overlayfs: failed to look up (tracing) for ino (-66) [ 1097.247230][ T5950] Bluetooth: hci1: command 0x0406 tx timeout [ 1097.836265][ T6481] usbhid 6-1:0.0: can't add hid device: -71 [ 1097.842529][ T6481] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1097.850666][ T6481] usb 6-1: USB disconnect, device number 72 [ 1098.078042][ T5942] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1098.087884][ T5942] CPU: 2 UID: 0 PID: 5942 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1098.087947][ T5942] Tainted: [L]=SOFTLOCKUP [ 1098.087955][ T5942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1098.087966][ T5942] Workqueue: hci1 hci_rx_work [ 1098.087986][ T5942] Call Trace: [ 1098.087991][ T5942] [ 1098.087998][ T5942] dump_stack_lvl+0x16c/0x1f0 [ 1098.088019][ T5942] sysfs_warn_dup+0x7f/0xa0 [ 1098.088039][ T5942] sysfs_create_dir_ns+0x24b/0x2b0 [ 1098.088055][ T5942] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1098.088069][ T5942] ? find_held_lock+0x2b/0x80 [ 1098.088089][ T5942] ? do_raw_spin_unlock+0x172/0x230 [ 1098.088118][ T5942] kobject_add_internal+0x2c4/0x9d0 [ 1098.088135][ T5942] kobject_add+0x16e/0x240 [ 1098.088149][ T5942] ? __pfx_kobject_add+0x10/0x10 [ 1098.088162][ T5942] ? kobject_put+0xaf/0x6f0 [ 1098.088180][ T5942] ? _raw_spin_unlock+0x28/0x50 [ 1098.088202][ T5942] device_add+0x288/0x1980 [ 1098.088220][ T5942] ? __pfx_dev_set_name+0x10/0x10 [ 1098.088238][ T5942] ? __pfx_device_add+0x10/0x10 [ 1098.088254][ T5942] ? mgmt_send_event_skb+0x2fb/0x460 [ 1098.088274][ T5942] hci_conn_add_sysfs+0x1a8/0x260 [ 1098.088293][ T5942] le_conn_complete_evt+0x11ed/0x1fa0 [ 1098.088312][ T5942] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1098.088333][ T5942] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1098.088354][ T5942] hci_le_meta_evt+0x357/0x610 [ 1098.088370][ T5942] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1098.088388][ T5942] hci_event_packet+0x685/0x1210 [ 1098.088403][ T5942] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1098.088421][ T5942] ? __pfx_hci_event_packet+0x10/0x10 [ 1098.088438][ T5942] ? kcov_remote_start+0x399/0x680 [ 1098.088456][ T5942] ? lockdep_hardirqs_on+0x7c/0x110 [ 1098.088477][ T5942] hci_rx_work+0x2c9/0x1020 [ 1098.088495][ T5942] process_one_work+0x9ba/0x1b20 [ 1098.088514][ T5942] ? __pfx_process_one_work+0x10/0x10 [ 1098.088532][ T5942] ? assign_work+0x1a0/0x250 [ 1098.088545][ T5942] worker_thread+0x6c8/0xf10 [ 1098.088565][ T5942] ? __pfx_worker_thread+0x10/0x10 [ 1098.088578][ T5942] kthread+0x3c5/0x780 [ 1098.088590][ T5942] ? __pfx_kthread+0x10/0x10 [ 1098.088603][ T5942] ? rcu_is_watching+0x12/0xc0 [ 1098.088619][ T5942] ? __pfx_kthread+0x10/0x10 [ 1098.088631][ T5942] ret_from_fork+0x983/0xb10 [ 1098.088644][ T5942] ? __pfx_ret_from_fork+0x10/0x10 [ 1098.088657][ T5942] ? __switch_to+0x7af/0x10d0 [ 1098.088673][ T5942] ? __pfx_kthread+0x10/0x10 [ 1098.088685][ T5942] ret_from_fork_asm+0x1a/0x30 [ 1098.088711][ T5942] [ 1098.200528][ T5942] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1098.206960][ T5942] Bluetooth: hci1: failed to register connection device [ 1098.284018][T21802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4259'. [ 1098.291024][T21802] bridge0: port 3(vlan2) entered blocking state [ 1098.294010][T21802] bridge0: port 3(vlan2) entered disabled state [ 1098.297125][T21802] vlan2: entered allmulticast mode [ 1098.318952][T21802] bridge0: entered allmulticast mode [ 1098.392078][T21802] vlan2: left allmulticast mode [ 1098.393704][T21802] bridge0: left allmulticast mode [ 1098.617467][ T5950] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1098.620683][ T5950] CPU: 3 UID: 0 PID: 5950 Comm: kworker/u33:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1098.620716][ T5950] Tainted: [L]=SOFTLOCKUP [ 1098.620723][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1098.620734][ T5950] Workqueue: hci4 hci_rx_work [ 1098.620753][ T5950] Call Trace: [ 1098.620758][ T5950] [ 1098.620762][ T5950] dump_stack_lvl+0x16c/0x1f0 [ 1098.620784][ T5950] sysfs_warn_dup+0x7f/0xa0 [ 1098.620797][ T5950] sysfs_create_dir_ns+0x24b/0x2b0 [ 1098.620810][ T5950] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1098.620823][ T5950] ? find_held_lock+0x2b/0x80 [ 1098.620841][ T5950] ? do_raw_spin_unlock+0x172/0x230 [ 1098.620854][ T5950] kobject_add_internal+0x2c4/0x9d0 [ 1098.620869][ T5950] kobject_add+0x16e/0x240 [ 1098.620879][ T5950] ? __pfx_kobject_add+0x10/0x10 [ 1098.620892][ T5950] ? kobject_put+0xaf/0x6f0 [ 1098.620910][ T5950] ? _raw_spin_unlock+0x28/0x50 [ 1098.620937][ T5950] device_add+0x288/0x1980 [ 1098.620954][ T5950] ? __pfx_dev_set_name+0x10/0x10 [ 1098.620973][ T5950] ? __pfx_device_add+0x10/0x10 [ 1098.620989][ T5950] ? mgmt_send_event_skb+0x2fb/0x460 [ 1098.621010][ T5950] hci_conn_add_sysfs+0x1a8/0x260 [ 1098.621029][ T5950] le_conn_complete_evt+0x11ed/0x1fa0 [ 1098.621047][ T5950] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1098.621067][ T5950] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1098.621085][ T5950] hci_le_meta_evt+0x357/0x610 [ 1098.621101][ T5950] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1098.621118][ T5950] hci_event_packet+0x685/0x1210 [ 1098.621135][ T5950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1098.621158][ T5950] ? __pfx_hci_event_packet+0x10/0x10 [ 1098.621184][ T5950] ? kcov_remote_start+0x399/0x680 [ 1098.621205][ T5950] ? lockdep_hardirqs_on+0x7c/0x110 [ 1098.621225][ T5950] hci_rx_work+0x2c9/0x1020 [ 1098.621242][ T5950] process_one_work+0x9ba/0x1b20 [ 1098.621260][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 1098.621276][ T5950] ? assign_work+0x1a0/0x250 [ 1098.621289][ T5950] worker_thread+0x6c8/0xf10 [ 1098.621309][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 1098.621327][ T5950] kthread+0x3c5/0x780 [ 1098.621348][ T5950] ? __pfx_kthread+0x10/0x10 [ 1098.621366][ T5950] ? rcu_is_watching+0x12/0xc0 [ 1098.621385][ T5950] ? __pfx_kthread+0x10/0x10 [ 1098.621397][ T5950] ret_from_fork+0x983/0xb10 [ 1098.621409][ T5950] ? __pfx_ret_from_fork+0x10/0x10 [ 1098.621422][ T5950] ? __switch_to+0x7af/0x10d0 [ 1098.621438][ T5950] ? __pfx_kthread+0x10/0x10 [ 1098.621456][ T5950] ret_from_fork_asm+0x1a/0x30 [ 1098.621496][ T5950] [ 1098.621518][ T5950] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1098.713633][ T5950] Bluetooth: hci4: failed to register connection device [ 1098.857942][ T5766] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1099.128005][ T5766] usb 8-1: Using ep0 maxpacket: 8 [ 1099.131230][ T5766] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1099.134385][ T5766] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1099.137542][ T5766] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1099.331213][ T5766] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1099.337820][ T5766] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1099.345443][T21821] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1099.348369][T21821] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1099.351281][ T5766] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.356171][T21821] vhci_hcd vhci_hcd.0: Device attached [ 1099.372864][T21821] IPVS: set_ctl: invalid protocol: 16 2.0.0.98:12800 [ 1099.595287][ T5766] usb 8-1: GET_CAPABILITIES returned 0 [ 1099.597179][ T5766] usbtmc 8-1:16.0: can't read capabilities [ 1099.711449][T21822] vhci_hcd: connection closed [ 1099.713893][T19506] vhci_hcd vhci_hcd.4: stop threads [ 1099.720536][T19506] vhci_hcd vhci_hcd.4: release socket [ 1099.724878][T19506] vhci_hcd vhci_hcd.4: disconnect device [ 1099.767868][T21828] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1099.770108][T21828] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1099.774393][T21828] vhci_hcd vhci_hcd.0: Device attached [ 1099.786013][ T981] usb 8-1: USB disconnect, device number 81 [ 1099.802434][T21828] IPVS: set_ctl: invalid protocol: 16 2.0.0.98:12800 [ 1100.048631][ T6481] usb 42-1: SetAddress Request (78) to port 0 [ 1100.051443][ T6481] usb 42-1: new SuperSpeed USB device number 78 using vhci_hcd [ 1100.168490][T20361] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1100.285290][T21834] netlink: 'syz.4.4266': attribute type 1 has an invalid length. [ 1100.289538][T14986] Bluetooth: hci1: command 0x0406 tx timeout [ 1100.321760][T20361] usb 6-1: Using ep0 maxpacket: 8 [ 1100.330811][T20361] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1100.331063][T21829] vhci_hcd: connection reset by peer [ 1100.333345][T20361] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1100.338405][T19506] vhci_hcd vhci_hcd.2: stop threads [ 1100.339135][T21834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1100.340645][T21837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4266'. [ 1100.345793][T21837] bond1: entered promiscuous mode [ 1100.345858][T19506] vhci_hcd vhci_hcd.2: release socket [ 1100.347724][T21837] bond1: entered allmulticast mode [ 1100.352021][T19506] vhci_hcd vhci_hcd.2: disconnect device [ 1100.354044][T20361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.360613][T20361] usb 6-1: config 0 descriptor?? [ 1100.365755][T21834] bond1: (slave dummy0): making interface the new active one [ 1100.368611][T21834] dummy0: entered promiscuous mode [ 1100.370538][T21834] dummy0: entered allmulticast mode [ 1100.374275][T21834] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1100.618719][ T6022] usb 44-1: device descriptor read/8, error -110 [ 1100.768838][ T5942] Bluetooth: hci4: command 0x0406 tx timeout [ 1100.938983][ T53] usb 46-1: device descriptor read/8, error -110 [ 1101.109412][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 1101.109430][ T40] audit: type=1326 audit(1766970775.805:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21831 comm="syz.1.4265" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1101.111770][ T6022] usb usb44-port1: attempt power cycle [ 1101.114674][ T40] audit: type=1326 audit(1766970775.805:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21831 comm="syz.1.4265" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1101.138353][ T40] audit: type=1326 audit(1766970775.825:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21831 comm="syz.1.4265" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1101.145924][ T40] audit: type=1326 audit(1766970775.825:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21831 comm="syz.1.4265" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1101.153166][ T40] audit: type=1326 audit(1766970775.825:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21831 comm="syz.1.4265" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1101.160349][ T40] audit: type=1326 audit(1766970775.825:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21831 comm="syz.1.4265" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 1101.339686][ T53] usb usb46-port1: attempt power cycle [ 1101.592178][T21862] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1101.691182][T21862] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1101.700176][T21862] overlayfs: failed to look up (tracing) for ino (-66) [ 1101.710074][ T6022] usb usb44-port1: unable to enumerate USB device [ 1102.272876][ T53] usb usb46-port1: unable to enumerate USB device [ 1102.372695][T14986] Bluetooth: hci1: command 0x0406 tx timeout [ 1102.405721][T21870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4275'. [ 1102.849790][ T5950] Bluetooth: hci4: command 0x0406 tx timeout [ 1102.893146][T21879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4276'. [ 1103.141939][T20361] usbhid 6-1:0.0: can't add hid device: -71 [ 1103.438298][T20361] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1103.441970][T20361] usb 6-1: USB disconnect, device number 73 [ 1103.601780][T21889] FAULT_INJECTION: forcing a failure. [ 1103.601780][T21889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1103.607024][T21889] CPU: 2 UID: 0 PID: 21889 Comm: syz.2.4280 Tainted: G L syzkaller #0 PREEMPT(full) [ 1103.607054][T21889] Tainted: [L]=SOFTLOCKUP [ 1103.607061][T21889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1103.607072][T21889] Call Trace: [ 1103.607078][T21889] [ 1103.607086][T21889] dump_stack_lvl+0x16c/0x1f0 [ 1103.607119][T21889] should_fail_ex+0x512/0x640 [ 1103.607142][T21889] _copy_from_iter+0x2a4/0x16c0 [ 1103.607165][T21889] ? __lock_acquire+0x436/0x2890 [ 1103.607183][T21889] ? __pfx___might_resched+0x10/0x10 [ 1103.607213][T21889] ? __pfx__copy_from_iter+0x10/0x10 [ 1103.607234][T21889] ? should_fail_alloc_page+0xee/0x130 [ 1103.607273][T21889] copy_page_from_iter+0xde/0x180 [ 1103.607297][T21889] tun_build_skb.constprop.0+0x2e8/0x1560 [ 1103.607327][T21889] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1103.607351][T21889] ? __lock_acquire+0x436/0x2890 [ 1103.607370][T21889] ? __lock_acquire+0x436/0x2890 [ 1103.607397][T21889] ? find_held_lock+0x2b/0x80 [ 1103.607423][T21889] tun_get_user+0x149c/0x3cc0 [ 1103.607454][T21889] ? __pfx_tun_get_user+0x10/0x10 [ 1103.607477][T21889] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1103.607506][T21889] ? find_held_lock+0x2b/0x80 [ 1103.607530][T21889] ? tun_get+0x191/0x370 [ 1103.607553][T21889] tun_chr_write_iter+0xdc/0x210 [ 1103.607576][T21889] vfs_write+0x7d3/0x11d0 [ 1103.607602][T21889] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1103.607625][T21889] ? __pfx_vfs_write+0x10/0x10 [ 1103.607648][T21889] ? find_held_lock+0x2b/0x80 [ 1103.607686][T21889] ksys_write+0x12a/0x250 [ 1103.607710][T21889] ? __pfx_ksys_write+0x10/0x10 [ 1103.607738][T21889] ? do_user_addr_fault+0x843/0x1370 [ 1103.607764][T21889] __do_fast_syscall_32+0xe8/0x680 [ 1103.607796][T21889] do_fast_syscall_32+0x32/0x80 [ 1103.607824][T21889] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1103.607849][T21889] RIP: 0023:0xf700d579 [ 1103.607888][T21889] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1103.607906][T21889] RSP: 002b:00000000f53fd520 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1103.607924][T21889] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000180 [ 1103.607934][T21889] RDX: 0000000000000083 RSI: 00000000f73a6ff4 RDI: 0000000000000000 [ 1103.607944][T21889] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1103.607955][T21889] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1103.607965][T21889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1103.607988][T21889] [ 1103.746467][ T5950] Bluetooth: hci4: unexpected event for opcode 0x0c24 [ 1103.756222][T21892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.793557][T21894] wg1 speed is unknown, defaulting to 1000 [ 1103.795653][T21894] wg1 speed is unknown, defaulting to 1000 [ 1103.797787][T21894] wg1 speed is unknown, defaulting to 1000 [ 1103.813510][T21892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.814711][T21892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.822193][T21894] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1103.822447][T21891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.837472][T21894] wg1 speed is unknown, defaulting to 1000 [ 1103.855341][T21894] wg1 speed is unknown, defaulting to 1000 [ 1103.859153][T21894] wg1 speed is unknown, defaulting to 1000 [ 1103.863822][T21894] wg1 speed is unknown, defaulting to 1000 [ 1104.046121][T21906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4286'. [ 1104.064867][ T5950] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1104.068257][ T5950] CPU: 1 UID: 0 PID: 5950 Comm: kworker/u33:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1104.068288][ T5950] Tainted: [L]=SOFTLOCKUP [ 1104.068293][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1104.068303][ T5950] Workqueue: hci3 hci_rx_work [ 1104.068321][ T5950] Call Trace: [ 1104.068327][ T5950] [ 1104.068332][ T5950] dump_stack_lvl+0x16c/0x1f0 [ 1104.068352][ T5950] sysfs_warn_dup+0x7f/0xa0 [ 1104.068366][ T5950] sysfs_create_dir_ns+0x24b/0x2b0 [ 1104.068379][ T5950] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1104.068392][ T5950] ? find_held_lock+0x2b/0x80 [ 1104.068410][ T5950] ? do_raw_spin_unlock+0x172/0x230 [ 1104.068425][ T5950] kobject_add_internal+0x2c4/0x9d0 [ 1104.068438][ T5950] kobject_add+0x16e/0x240 [ 1104.068450][ T5950] ? __pfx_kobject_add+0x10/0x10 [ 1104.068463][ T5950] ? kobject_put+0xaf/0x6f0 [ 1104.068480][ T5950] ? _raw_spin_unlock+0x28/0x50 [ 1104.068500][ T5950] device_add+0x288/0x1980 [ 1104.068516][ T5950] ? __pfx_dev_set_name+0x10/0x10 [ 1104.068533][ T5950] ? __pfx_device_add+0x10/0x10 [ 1104.068548][ T5950] ? mgmt_send_event_skb+0x2fb/0x460 [ 1104.068567][ T5950] hci_conn_add_sysfs+0x1a8/0x260 [ 1104.068585][ T5950] le_conn_complete_evt+0x11ed/0x1fa0 [ 1104.068603][ T5950] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1104.068623][ T5950] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1104.068642][ T5950] hci_le_meta_evt+0x357/0x610 [ 1104.068658][ T5950] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1104.068675][ T5950] hci_event_packet+0x685/0x1210 [ 1104.068689][ T5950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1104.068705][ T5950] ? __pfx_hci_event_packet+0x10/0x10 [ 1104.068722][ T5950] ? kcov_remote_start+0x399/0x680 [ 1104.068739][ T5950] ? lockdep_hardirqs_on+0x7c/0x110 [ 1104.068759][ T5950] hci_rx_work+0x2c9/0x1020 [ 1104.068775][ T5950] process_one_work+0x9ba/0x1b20 [ 1104.068794][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 1104.068810][ T5950] ? assign_work+0x1a0/0x250 [ 1104.068823][ T5950] worker_thread+0x6c8/0xf10 [ 1104.068841][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 1104.068853][ T5950] kthread+0x3c5/0x780 [ 1104.068866][ T5950] ? __pfx_kthread+0x10/0x10 [ 1104.068877][ T5950] ? rcu_is_watching+0x12/0xc0 [ 1104.068893][ T5950] ? __pfx_kthread+0x10/0x10 [ 1104.068904][ T5950] ret_from_fork+0x983/0xb10 [ 1104.068917][ T5950] ? __pfx_ret_from_fork+0x10/0x10 [ 1104.068929][ T5950] ? __switch_to+0x7af/0x10d0 [ 1104.068944][ T5950] ? __pfx_kthread+0x10/0x10 [ 1104.068955][ T5950] ret_from_fork_asm+0x1a/0x30 [ 1104.068979][ T5950] [ 1104.069070][ T5950] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1104.159145][ T5950] Bluetooth: hci3: failed to register connection device [ 1104.803223][T21915] siw: device registration error -23 [ 1104.995613][T21921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4291'. [ 1105.084278][ T5950] Bluetooth: hci0: unexpected event for opcode 0x0c24 [ 1105.090642][ T6481] usb 42-1: device descriptor read/8, error -110 [ 1105.100862][T21925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.128120][T21926] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1105.156401][T21925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.161333][T21925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.167003][T21924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.168278][T21926] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1105.175001][T21926] overlayfs: failed to look up (tracing) for ino (-66) [ 1105.697282][ T5950] Bluetooth: hci0: unexpected event for opcode 0x0c24 [ 1105.709424][T21930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.765623][T21930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.770274][T21930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.775367][T21929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.807710][ T5950] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 1105.838960][T21932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.896913][T21932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.905149][T21932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.918058][T21931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.251612][ T6481] usb usb42-port1: attempt power cycle [ 1106.885607][T21959] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4305'. [ 1107.290886][ T6481] usb usb42-port1: unable to enumerate USB device [ 1107.478336][T21964] FAULT_INJECTION: forcing a failure. [ 1107.478336][T21964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1107.484017][T21964] CPU: 1 UID: 0 PID: 21964 Comm: syz.3.4307 Tainted: G L syzkaller #0 PREEMPT(full) [ 1107.484048][T21964] Tainted: [L]=SOFTLOCKUP [ 1107.484054][T21964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1107.484066][T21964] Call Trace: [ 1107.484074][T21964] [ 1107.484082][T21964] dump_stack_lvl+0x16c/0x1f0 [ 1107.484114][T21964] should_fail_ex+0x512/0x640 [ 1107.484139][T21964] _copy_from_user+0x2e/0xd0 [ 1107.484160][T21964] get_compat_msghdr+0xa7/0x170 [ 1107.484184][T21964] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1107.484209][T21964] ? __pfx__kstrtoull+0x10/0x10 [ 1107.484238][T21964] ___sys_sendmsg+0x1ae/0x1d0 [ 1107.484265][T21964] ? __pfx____sys_sendmsg+0x10/0x10 [ 1107.484318][T21964] __sys_sendmmsg+0x2f9/0x420 [ 1107.484344][T21964] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1107.484375][T21964] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1107.484415][T21964] ? fput+0x70/0xf0 [ 1107.484433][T21964] ? ksys_write+0x1ac/0x250 [ 1107.484458][T21964] ? __pfx_ksys_write+0x10/0x10 [ 1107.484488][T21964] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1107.484512][T21964] ? lockdep_hardirqs_on+0x7c/0x110 [ 1107.484539][T21964] __do_fast_syscall_32+0xe8/0x680 [ 1107.484570][T21964] do_fast_syscall_32+0x32/0x80 [ 1107.484598][T21964] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1107.484621][T21964] RIP: 0023:0xf7f21579 [ 1107.484636][T21964] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1107.484654][T21964] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1107.484673][T21964] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003e40 [ 1107.484684][T21964] RDX: 00000000fffffe3d RSI: 00000000000000f5 RDI: 0000000000000000 [ 1107.484695][T21964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1107.484706][T21964] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1107.484717][T21964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1107.484741][T21964] [ 1107.642160][T21969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4308'. [ 1107.654701][ T5950] Bluetooth: hci0: unexpected event for opcode 0x0c24 [ 1107.686772][T21971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.743533][T21973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.748825][T21971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.754202][T21970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.902512][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880530fd000: rx timeout, send abort [ 1107.906344][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880530fd000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1108.291969][ T5950] Bluetooth: hci3: command 0x0419 tx timeout [ 1108.318444][T21982] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1108.321163][T21982] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1108.325023][T21982] vhci_hcd vhci_hcd.0: Device attached [ 1108.592376][ T6481] usb 46-1: SetAddress Request (50) to port 0 [ 1108.597628][ T6481] usb 46-1: new SuperSpeed USB device number 50 using vhci_hcd [ 1108.725043][T21985] vhci_hcd: connection reset by peer [ 1108.728203][T19500] vhci_hcd vhci_hcd.4: stop threads [ 1108.730496][T19500] vhci_hcd vhci_hcd.4: release socket [ 1108.734608][T19500] vhci_hcd vhci_hcd.4: disconnect device [ 1108.933620][T22003] FAULT_INJECTION: forcing a failure. [ 1108.933620][T22003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1108.939538][T22003] CPU: 3 UID: 0 PID: 22003 Comm: syz.1.4319 Tainted: G L syzkaller #0 PREEMPT(full) [ 1108.939568][T22003] Tainted: [L]=SOFTLOCKUP [ 1108.939575][T22003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1108.939588][T22003] Call Trace: [ 1108.939595][T22003] [ 1108.939602][T22003] dump_stack_lvl+0x16c/0x1f0 [ 1108.939636][T22003] should_fail_ex+0x512/0x640 [ 1108.939678][T22003] _copy_from_user+0x2e/0xd0 [ 1108.939701][T22003] get_compat_msghdr+0xa7/0x170 [ 1108.939724][T22003] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1108.939757][T22003] ___sys_sendmsg+0x1ae/0x1d0 [ 1108.939783][T22003] ? __pfx____sys_sendmsg+0x10/0x10 [ 1108.939839][T22003] ? find_held_lock+0x2b/0x80 [ 1108.939881][T22003] __sys_sendmsg+0x16d/0x220 [ 1108.939905][T22003] ? __pfx___sys_sendmsg+0x10/0x10 [ 1108.939937][T22003] ? do_user_addr_fault+0x843/0x1370 [ 1108.939965][T22003] __do_fast_syscall_32+0xe8/0x680 [ 1108.939997][T22003] do_fast_syscall_32+0x32/0x80 [ 1108.940026][T22003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1108.940049][T22003] RIP: 0023:0xf7f94579 [ 1108.940064][T22003] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1108.940088][T22003] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1108.940107][T22003] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1108.940120][T22003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1108.940131][T22003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1108.940141][T22003] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1108.940153][T22003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1108.940176][T22003] [ 1109.162439][T20361] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1109.212479][ T5950] Bluetooth: hci0: unexpected event for opcode 0x0c24 [ 1109.220296][T22012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.279308][T22012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.285150][T22012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.312444][T20361] usb 7-1: Using ep0 maxpacket: 8 [ 1109.316262][T20361] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1109.320671][T20361] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1109.325059][T20361] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1109.329362][T20361] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1109.335844][T20361] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1109.339836][T20361] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.556360][T20361] usb 7-1: GET_CAPABILITIES returned 0 [ 1109.558406][T20361] usbtmc 7-1:16.0: can't read capabilities [ 1109.760719][T20361] usb 7-1: USB disconnect, device number 82 [ 1110.044758][T22024] wg2 speed is unknown, defaulting to 1000 [ 1110.124460][T22024] wg1 speed is unknown, defaulting to 1000 [ 1110.497492][T22037] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1110.531187][T22039] netlink: 51 bytes leftover after parsing attributes in process `syz.1.4332'. [ 1110.624389][T22044] netlink: 51 bytes leftover after parsing attributes in process `syz.4.4333'. [ 1110.641721][T22045] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1110.681031][T22045] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1110.684708][T22045] overlayfs: failed to look up (tracing) for ino (-66) [ 1110.704045][T22047] trusted_key: encrypted_key: insufficient parameters specified [ 1110.957896][T22048] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1110.988432][T22048] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1110.992864][T22048] overlayfs: failed to look up (tracing) for ino (-66) [ 1111.865354][T22063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4338'. [ 1112.317368][T22068] FAULT_INJECTION: forcing a failure. [ 1112.317368][T22068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1112.321755][T22068] CPU: 1 UID: 0 PID: 22068 Comm: syz.4.4340 Tainted: G L syzkaller #0 PREEMPT(full) [ 1112.321773][T22068] Tainted: [L]=SOFTLOCKUP [ 1112.321777][T22068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1112.321784][T22068] Call Trace: [ 1112.321789][T22068] [ 1112.321794][T22068] dump_stack_lvl+0x16c/0x1f0 [ 1112.321825][T22068] should_fail_ex+0x512/0x640 [ 1112.321842][T22068] _copy_from_user+0x2e/0xd0 [ 1112.321855][T22068] get_compat_msghdr+0xa7/0x170 [ 1112.321870][T22068] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1112.321885][T22068] ? __pfx__kstrtoull+0x10/0x10 [ 1112.321903][T22068] ___sys_sendmsg+0x1ae/0x1d0 [ 1112.321920][T22068] ? __pfx____sys_sendmsg+0x10/0x10 [ 1112.321934][T22068] ? rcu_is_watching+0x12/0xc0 [ 1112.321964][T22068] __sys_sendmmsg+0x2f9/0x420 [ 1112.321980][T22068] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1112.321993][T22068] ? __schedule+0x10b9/0x6150 [ 1112.322019][T22068] ? fput+0x70/0xf0 [ 1112.322031][T22068] ? rcu_is_watching+0x12/0xc0 [ 1112.322048][T22068] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1112.322063][T22068] ? lockdep_hardirqs_on+0x7c/0x110 [ 1112.322079][T22068] __do_fast_syscall_32+0xe8/0x680 [ 1112.322101][T22068] do_fast_syscall_32+0x32/0x80 [ 1112.322118][T22068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1112.322133][T22068] RIP: 0023:0xf7fc6579 [ 1112.322142][T22068] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1112.322153][T22068] RSP: 002b:00000000f549555c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1112.322163][T22068] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 1112.322170][T22068] RDX: 00000000000001f2 RSI: 00000000000000fc RDI: 0000000000000000 [ 1112.322177][T22068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1112.322183][T22068] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1112.322190][T22068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1112.322203][T22068] [ 1112.494278][T22070] wireguard0: entered promiscuous mode [ 1112.496149][T22070] wireguard0: entered allmulticast mode [ 1113.085163][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1113.091329][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1113.094741][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1113.097730][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1113.100488][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1113.165897][T22087] wg2 speed is unknown, defaulting to 1000 [ 1113.276633][T19506] bridge_slave_1: left allmulticast mode [ 1113.284114][T19506] bridge_slave_1: left promiscuous mode [ 1113.290692][T19506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.306469][T19506] bridge_slave_0: left allmulticast mode [ 1113.308681][T19506] bridge_slave_0: left promiscuous mode [ 1113.310727][T19506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.458617][T22100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4350'. [ 1113.531332][T22105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4352'. [ 1113.654377][ T6481] usb 46-1: device descriptor read/8, error -110 [ 1113.697420][T19506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.703986][T19506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.709333][T19506] bond0 (unregistering): Released all slaves [ 1113.714355][T22087] wg1 speed is unknown, defaulting to 1000 [ 1113.990325][T22087] chnl_net:caif_netlink_parms(): no params data found [ 1114.063214][ T6481] usb usb46-port1: attempt power cycle [ 1114.168096][T22087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.170568][T22087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.173273][T22087] bridge_slave_0: entered allmulticast mode [ 1114.178014][T22087] bridge_slave_0: entered promiscuous mode [ 1114.181486][T22087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.183929][T22087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.186604][T22087] bridge_slave_1: entered allmulticast mode [ 1114.189465][T22087] bridge_slave_1: entered promiscuous mode [ 1114.209992][T22087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.236598][T22087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.252925][T19506] hsr_slave_0: left promiscuous mode [ 1114.256815][T19506] hsr_slave_1: left promiscuous mode [ 1114.258948][T19506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1114.261763][T19506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.655465][ T6481] usb usb46-port1: unable to enumerate USB device [ 1115.174986][ T5942] Bluetooth: hci2: command tx timeout [ 1115.242088][T19506] team0 (unregistering): Port device team_slave_1 removed [ 1115.482727][T19506] team0 (unregistering): Port device team_slave_0 removed [ 1115.962526][T22133] input: syz0 as /devices/virtual/input/input127 [ 1116.075674][T22087] team0: Port device team_slave_0 added [ 1116.081604][T22087] team0: Port device team_slave_1 added [ 1116.099303][T22087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.101701][T22087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.112092][T22087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.126795][T22087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.129768][T22087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.140113][T22087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.159903][T22138] input: syz0 as /devices/virtual/input/input128 [ 1116.166631][T22138] FAULT_INJECTION: forcing a failure. [ 1116.166631][T22138] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.172763][T22138] CPU: 1 UID: 0 PID: 22138 Comm: syz.1.4359 Tainted: G L syzkaller #0 PREEMPT(full) [ 1116.172793][T22138] Tainted: [L]=SOFTLOCKUP [ 1116.172797][T22138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1116.172805][T22138] Call Trace: [ 1116.172809][T22138] [ 1116.172814][T22138] dump_stack_lvl+0x16c/0x1f0 [ 1116.172834][T22138] should_fail_ex+0x512/0x640 [ 1116.172847][T22138] ? fs_reclaim_acquire+0xae/0x150 [ 1116.172866][T22138] should_failslab+0xc2/0x120 [ 1116.172883][T22138] __kmalloc_noprof+0xeb/0x910 [ 1116.172896][T22138] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1116.172914][T22138] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1116.172929][T22138] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1116.172945][T22138] ? tomoyo_profile+0x47/0x60 [ 1116.172963][T22138] tomoyo_path_number_perm+0x245/0x580 [ 1116.172975][T22138] ? tomoyo_path_number_perm+0x237/0x580 [ 1116.172989][T22138] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1116.173016][T22138] ? find_held_lock+0x2b/0x80 [ 1116.173030][T22138] ? hook_file_ioctl_common+0x144/0x410 [ 1116.173050][T22138] ? __fget_files+0x20e/0x3c0 [ 1116.173082][T22138] ? __fput_deferred+0x430/0x480 [ 1116.173096][T22138] security_file_ioctl_compat+0x9b/0x240 [ 1116.173111][T22138] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1116.173128][T22138] __do_fast_syscall_32+0xe8/0x680 [ 1116.173147][T22138] do_fast_syscall_32+0x32/0x80 [ 1116.173164][T22138] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1116.173178][T22138] RIP: 0023:0xf7f94579 [ 1116.173187][T22138] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1116.173198][T22138] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1116.173209][T22138] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008040552c [ 1116.173216][T22138] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 1116.173223][T22138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1116.173229][T22138] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1116.173235][T22138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1116.173249][T22138] [ 1116.203444][T22087] hsr_slave_0: entered promiscuous mode [ 1116.206026][T22138] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1116.215995][T22087] hsr_slave_1: entered promiscuous mode [ 1116.255644][T22087] debugfs: 'hsr0' already exists in 'hsr' [ 1116.258143][T22087] Cannot create hsr debugfs directory [ 1116.358216][T22087] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1116.382775][T22087] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1116.408725][T22087] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1116.417354][T22143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4360'. [ 1116.429919][T22087] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1116.446551][ T5942] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 1116.508705][T22149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.597649][T22149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.621785][T19506] IPVS: stop unused estimator thread 0... [ 1116.637628][T22087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.659474][T22087] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.674334][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.677431][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.699548][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.702251][ T5055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.895338][T22087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1117.140440][T22087] veth0_vlan: entered promiscuous mode [ 1117.170560][T22087] veth1_vlan: entered promiscuous mode [ 1117.186121][T21836] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN NOPTI [ 1117.190200][T21836] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 1117.193417][T21836] CPU: 0 UID: 0 PID: 21836 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1117.197026][T21836] Tainted: [L]=SOFTLOCKUP [ 1117.198776][T21836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1117.201194][T22087] veth0_macvtap: entered promiscuous mode [ 1117.202324][T21836] Workqueue: events l2cap_info_timeout [ 1117.206174][T21836] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 1117.208025][T22087] veth1_macvtap: entered promiscuous mode [ 1117.208139][T21836] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 1117.215305][T22087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1117.217147][T21836] RSP: 0000:ffffc900046f7978 EFLAGS: 00010282 [ 1117.217160][T21836] RAX: dffffc0000000000 RBX: 0000000000000260 RCX: 0000000000000000 [ 1117.217168][T21836] RDX: 0000000000000000 RSI: ffffffff893ada51 RDI: dffffc000000004c [ 1117.217175][T21836] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 1117.217181][T21836] R10: 00000000ffffff83 R11: ffff888023758b30 R12: ffffffff893ada51 [ 1117.217188][T21836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1117.217195][T21836] FS: 0000000000000000(0000) GS:ffff8880976fc000(0000) knlGS:0000000000000000 [ 1117.217217][T21836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1117.221491][T22087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1117.222130][T21836] CR2: 00000000f7f855c0 CR3: 0000000052ac1000 CR4: 0000000000352ef0 [ 1117.245733][T21836] Call Trace: [ 1117.246855][T21836] [ 1117.247880][T21836] __kasan_check_byte+0x13/0x50 [ 1117.249494][T21836] lock_acquire+0xfc/0x330 [ 1117.250959][T21836] lock_sock_nested+0x41/0xf0 [ 1117.252559][T21836] ? l2cap_sock_ready_cb+0x43/0x1a0 [ 1117.254284][T21836] l2cap_sock_ready_cb+0x43/0x1a0 [ 1117.255965][T21836] l2cap_conn_start+0x144/0xb60 [ 1117.257569][T21836] ? __pfx_l2cap_conn_start+0x10/0x10 [ 1117.259359][T21836] ? __pfx___mutex_lock+0x10/0x10 [ 1117.261041][T21836] ? debug_object_deactivate+0x1ec/0x3a0 [ 1117.262881][T21836] l2cap_info_timeout+0x81/0xa0 [ 1117.264511][T21836] process_one_work+0x9ba/0x1b20 [ 1117.266148][T21836] ? __pfx_mld_dad_work+0x10/0x10 [ 1117.267827][T21836] ? __pfx_process_one_work+0x10/0x10 [ 1117.269590][T21836] ? assign_work+0x1a0/0x250 [ 1117.271111][T21836] worker_thread+0x6c8/0xf10 [ 1117.272654][T21836] ? __kthread_parkme+0x19e/0x250 [ 1117.274322][T21836] ? __pfx_worker_thread+0x10/0x10 [ 1117.276037][T21836] kthread+0x3c5/0x780 [ 1117.277384][T21836] ? __pfx_kthread+0x10/0x10 [ 1117.278928][T21836] ? rcu_is_watching+0x12/0xc0 [ 1117.280540][T21836] ? __pfx_kthread+0x10/0x10 [ 1117.282106][T21836] ret_from_fork+0x983/0xb10 [ 1117.283629][T21836] ? __pfx_ret_from_fork+0x10/0x10 [ 1117.285525][T21836] ? __switch_to+0x7af/0x10d0 [ 1117.287088][T21836] ? __pfx_kthread+0x10/0x10 [ 1117.288679][T21836] ret_from_fork_asm+0x1a/0x30 [ 1117.290308][T21836] [ 1117.291590][T21836] Modules linked in: [ 1117.293201][T21836] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1117.328967][ T1175] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.332646][ T1175] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.337691][ T5942] Bluetooth: hci2: command tx timeout [ 1117.384282][ T1175] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.389423][ T1175] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.394245][T21836] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 1117.396581][T21836] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 1117.403970][T21836] RSP: 0000:ffffc900046f7978 EFLAGS: 00010282 [ 1117.406410][T21836] RAX: dffffc0000000000 RBX: 0000000000000260 RCX: 0000000000000000 [ 1117.409463][T21836] RDX: 0000000000000000 RSI: ffffffff893ada51 RDI: dffffc000000004c [ 1117.412443][T21836] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 1117.415358][T21836] R10: 00000000ffffff83 R11: ffff888023758b30 R12: ffffffff893ada51 [ 1117.418548][T21836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1117.421974][T21836] FS: 0000000000000000(0000) GS:ffff8880976fc000(0000) knlGS:0000000000000000 [ 1117.425048][T21836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1117.427342][T21836] CR2: 00000000f7f855c0 CR3: 0000000052ac1000 CR4: 0000000000352ef0 [ 1117.430144][T21836] Kernel panic - not syncing: Fatal exception [ 1117.432969][T21836] Kernel Offset: disabled [ 1117.434407][T21836] Rebooting in 86400 seconds..