last executing test programs: 7.900502931s ago: executing program 2 (id=7036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x3}, 0x1c) pselect6(0x40, &(0x7f0000000000)={0x8, 0x4, 0xf84, 0x6, 0xfffffffffffffbff, 0x4800000000005, 0x3b, 0xd4}, 0x0, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r4, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r8, 0x28, 0x2, 0x0, &(0x7f0000000280)) 7.760291773s ago: executing program 2 (id=7037): syz_open_dev$vim2m(0x0, 0x8, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000340), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES64=r6], 0x44}}, 0x40800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffe, 0x2, &(0x7f0000006680)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x1030, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1004, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0xff4, 0x5, "263170b5cd05e6fc471e6a6d47c441262cc5a6bea4536de48f876bb3e18f2770592169ec48ed1eb2ab7f45d3d09f256c9df523648002907bd759f9b49046b49bbf690528ee245a9984bfb6b549cbc0cc10c70b8822c02fdbdb97b1eac5040be1d4810de8d03036886825e1707f605ad694187e989b1028fe859e75495455b24efcb7edecd7ec594b754487807288227b9f8d4d50cefb31adfc2cbf174b21cbd848f97bb3938b8634f2d009f49a1b7c21c834007aba0ae45a160b137906d131353ff1c29b4a2e25bd592a32dd283d538bbaafcb2f39cfc886ee844e580c527b6e251428c7f49b0f8aa2787c9a664db867c35b5443e512f6cec18cfb353b47e0e040488f44d5e628feb3cc3f19d8ad4039e092abdc46e7013c6b84260c014c82f25f9a8bae6daf139eb3b415876f78a86746b45763ee3f9f805a92b2e2089630b1ecefc435a089df8e7062595f2278ed8d2f88e761281eef63081cedd34a3b6c9a70f3cf21e12822aa96b868829dcaea9bbc9741d06ca535984fc0795c6d5b1e6bd529d993b8e6f758ba1816d8a8dd8bb723d1e082832c23c122ed608d8f047957ec5158b253c9807649609a19042ac21bed5d6b06604cb4fe91160345fd8afdc2855e82be5165164fb58344d5df35b88b44ed301430604d842124bda146cf109c7d2a00443ea3cc8482c52bd81f20a11a1bce3a74a2ff26d1982717f1ee8d9e6c8c927b80901440041bc53e8ab6b832787d7c9ff002ba1671936365e75aa54fde03d25d8c55ecf2b7cf651542933085ca86da84b46a6559154486ac5f087b7b54f3f24fd2ff3c8f08b7bcb23aa06f73ca6257bec8b06e0f91131845a026c10414be9f3db4660f1b3682738a35978b62986017b273754f0db231026b4912c53b44bd268389bd8b58e017959349fc93c7ba61f88d5a964862cfb1b3cda61e5c784b2028f9cfa7ddc5a781d9a2a9594fd1891ff7da7b7382a55b0dfa4b5f1e0f0c979dfa463c3696d51c23728683a5586191da03f61dce79639cee2bcd982a9183b44231da08018aacc3c9a8a52f29684ab029ca7bcf406f51c8b042dc77faeaf8e9139682cd00283319a1a21cb20d6aae66a18c0c358b756f57102e3f455be7ed71694018e91e28786f9bc6418e25ad300a8dce02975c1e73e03b1ebd21950e9fabdeafa2785079f0fc8ec12013acc0e23faf473634e4f50a5095b3f2ed81814fb313f29b94afd96cc35d52311d4e66fbe5a66a7c849c674b86bba8808c821a7ec133ecc61f2389eec0664689dbc1ba2c81f9148972c95d0cb272c9779be02c44b4aa252e2ee375d6d2310a12ef1e0ce9a7d4088922ee9640cec46facece5c5ea427dee19bca3952c3c13767de82909abc92edecab3e16c2f24dd9dcef4dec3c336bab497ae04c6d11db505037575b649a68622b45d35244bceb129363434a3bf3602827dce99c0e59b294a5ce1a2bc06e5467e9de31ab426c42fa5e7193d0a2d33c5234a5e9ba2c425db54041e7a1472315f9a5449496cad9a945967875d3549ad348e12403b28a3f6a666f7dc423629ba7a18244477764b8923a6b30fa04a2d6ed22ac8c64924fa2616d43da8a5b3f9cc30b2e29e4fc64b0027c33a8bc39d45feb704f7d2708f1f1bebd0eb13bd08e4049cb7a130847d9e334613a591563d0e207448e689ae5866c36f2503180b53f7a70b68eede9df307e9eb77aa39b12320a84711bdf03109cdc2414fa44478475e4b5a2f628e0cb0475e3e7ebf8fad644d69efb268883e394c46b971e6ca87a67e242f480f2ef7679583d182ab21d2ee026acf80f25b3afacccda853d38f84052cdf2edcfdf0513e1cf39574aa7af1ae53a3e08dbad47aefd14a37b6288c719e9c0737bb4119d7fe3eb350a8ec2fb0fec9b4633aa256d3f52f76423a8891f0a7e67378af5d53af8cf1543883def1c73a1f3c51fde6246dab90ec2b3f59c07a4eb1cefbdf60533cb97c0a555519998f9325630d489b00c6c736e6c768515f38f3a7d3cdb99c54f0e46f5a3aa9f280225cb3c3b33e2ff2aa757a2df467265252397dbd68aa7dca7fb9a8fb77611385995a070a99a7fc9db80ab7653c1c94f9a0ad09c713c39559587d8f886bc2db265ef6099138204e8517fa71aea4c75a8149dae6467d792431e54aecbf0f300dc7f6cc5a28495d77f3a4cd39c78de472ca2ebc95d67258a2e0f27bc9903c5540b9546f47aacd4898a0857e7b2f69125dd4839d788181aa409c40a914afe805aa075035d557bcce6a45e0a81cf3b8541e62e6f9a54fd71797d87b1fc4e0a0786fbd34b0dee8f5f57ef71495271b9f946480adcd2066bbefe000d99470bf92125996cba78276f1463dfbf501de575e597394ad02c484fe6291e56d7362ca402ff0af9582a1dc61dffad77d94da15c1328634b64b172edcd782a769f5fe9dd3a777c69d80a84fe83071c6ef7ae0becfb509b938932738bc7c454b63030ade2877a85897e5abc0cb0a9606e877987b5856d5992f43fba549d950d302b62db8c14a59b0bf58fb5a8f6402d3894c0e5be41348181aee736590383b14e7abb7253e381d24ee4e64dde82f48d3e9bf3e0be0e099b800b3bba1d92fd6a451cddcb9ae29a20b39d1066834e9337ed58defcd20cfd032adce59049fcbfc62ac762bed756475f150e86374cfc973d2d247ec6c347308f4c2618f0dc5f3e5cf363088bd90490f552f017000f376c35af0aadfa776ba9eca3567afb932325f14fa34b42f004b88249276b727bea1b865db9deaa405c9c1e1567cf6198cbf33aa646fe81398a0234d6fd687682bc2fcf052f9e129dd2d68f1154e4ea32e4984ad806b843513e94e994c5df73580587c0c1399ead2477ad7e04c3eb8787a685f86eb58d2d3254bd7f7f5e206aee379cbfa497ce32120e79cacea3c1663050c2f818d324786bcf799e27322f80d0c8cd6f41e9e10f441d331bea07e89a1507947aacdbc07f8af0944f3c228b5ee9ec27b808108aaebe61f1884e1581b19c9c14cfffe2e96c7fe07f6a36116bea130e63db9d1e82fa4ade6bfd6cc72a9654d9bd829c1752d5d640a0b5d555d936b4eb160f2cfee1d92f3a783f2ab33120404045ac7ad20c2ee000abe6b889d7840bd16276d831fae6e1e37c68e3f567934859f7e8a1d7486f6923565ec0f0bb6473f8b8a87a8fd20d11b903c42570bc2d584c2b8743c36c3339998c53fe96b457aae5ec3e38f877dfc9c11e2f597123eea7f75642a0138296c63ed1b1a58753fdc1bc56e9405ab808d420c11e286662034ef471ab7c997ae392c928cff9476d31ffb6df1173bc6b0d1769b5bb58952d839f7297d396bea2bc8a37db8e18236857218e9f5a000a255363baaae8ecd13fcb7a5cb7a3dcadbb96a44e17aa7e8e42ca565d81c31134746b1b5726d86db9d2ba54ce70c7cf2ee0c1df212c3a705154693248ca6b80a5b2d2d101face58c2c01e5382a6b0f1b71f95764f910b7dcdeb2e791f3d17a967d536fbc590f5d3785ff25b6e9039dd1f910fe5782ac9658b2284b7b720cb2fe2569485721422adff4daec78c8491bd1b7534fd38c9030b91b66b280636a2e2edb01f99a4851f77249803fae628dc42f17ab10735338a196507819876a196af3c31a80e95907a8d98c1fa34c03d9073429f9ef63ca753ca48256722ed171f8e43189c4887b35ba481823538b80a304008960fc2f6dd0db0d065eebd3e1fbc4b342cb78075cf5334ae2bd70cbebbc1aecd89a4b1941599207990d453488ed9a246788a3a75a447fb41865b9d8ad5ed928ac29bad4ad7f7a13b29149445cdc4e5024acdd15088a64268fb7960c6c3674741153dd3755126e0d411aa0a7b4abed17c65ddf767c7df110f8f77ba9def3d0a82c445177b3fd7074f6262f0cf4a2d585019dbee516587808021776e7539bce272b82cd53637e9887725f289ed9bb1909ef4a46f7567f3c64cb1f6ab6da2a174ff0c9010358b4da94ea893d55d5d011e3dd86c94839e278f80f84feb905f437df79b9acb64e4516b390d45f2fd68a810554fa147fa00dcc486758da35e645ae2ea865225c4dbb1e268e93d2b24e64328c7e86fc0e126267ee4bf0de60380cfdfddcaf2e6523764ea889bfd836397fc2c56c65dd572a24dff827cefd8d4f40b732d3a1b5353359d8f587376127c9c499a0d97e9f552f6208cceceb8972c19547387bec505acdea0c9bab01cf80020d3717ca488e87e6e3df810af9bf6c22f176c8d130a1c0f12466d53c9d5d54c50f0717efdefac3e53ad90e9f9c7217187195c3911f90d0a8be5e8e4f953b038e0ca529555992ecff480bc4895798530ae8d68a0246ae40070d5c1a16b2b15e8855c195a260865b13b6eb5f941040265973a20af4dcdd4cf4d03a2a215bff70c5b8f25c48c211cdf978240b8e7d4c2778f15c3858a4cda110d1c6e8ae19d83ea015748930a1ff6bae442d67a6cd41354012944a388ff95046b4f8b7676577487aa200c0175d99886dcb50dbc72c0bdc0f41b4ebbf5bc9a8cd67c9624f9afccfff4725e9bb9729306beda2f119dbc2e2cacec52300d6ae0d250b700e2bd7bf6b6d86498a03f3f4ad500134ef581ccdbb3d1cf90fb11562d0e078eb788f4f2e485abd15dd5175d7fc0570d87f3bf6750ab29f37b441aab2a7435f4d8ba0e9e0cff366c1b9706e34985a0ce4ed46e5a2a8390381b77d3391e7fe6e564ddf2aff4cfef7009de8e2bd2bbdf91e5412925b8f5258feeedaf4d73a59842be186c31c34c92ef8a3a7b2c1f4a46dd93c419843530c94e01ede1516744c9100976bb61b25e391fa4b829f9c24204c35910819d0b369b765655332a5582088d918f1e323170551f672d002d73332beac073c651e7d3cb1817a7ac313e7cd847ee0af275ce267914609e6d3db6ab59aaf30ba2ad0e214ad76cd4edef476eb89133084eb8e1147fd5a44a9fde4c06f8df9bcfe0938f8776b83263a315918249fa9beae3153073bffe265758f6d8cf4c07112468ddc7e8911efe97e06aa0a55de6560b69d1d3fce4c3f1132e1ffe10a4b2c3a77295ba1653b9e3da6c1c9028367a890ef1666a4b5701a4b000cbb77cbdef060469f96213d75c0d1cd8aa3ae5024ce5af26fe6219f5970eeccd4b8bc743292cb7df8db34a65ef289c237836ab202fc28d27d9bd260b2bd3678710216bd575689ef030a260eb91cfd9131dfa3327c674b44b97859082a4c07c5da8eb80e0be86e28310a7d8ba75beb4eae4ecc046ce9ce633cd6e3352f0ec93c8b910c60f2900c5efc4ed5d4c3c99faeb475eb3b7c825e4a926870f88936a76e4e4aa2bb19f1bafdc620ce24dc4792d3a34d2b75684560217651b39a782c9b83d3bac7e3747a71ebb90d6348efeba1c13f373af4bd22c0ad425cdcc5aefbaa80a83616f8f7cf7e3c7980e80d947040e7e1ee24ec7a5a58123795c927afc6a2319b6e1903b85601adbdd1a3c1ae80cc6162dc9cf0b65780b075e8f0de53521146a586a81e29a30a50677999c1d70eb1987f7bfb1cc2bd33b45ec8ce9b671863f8f7d0de7796f0420e7525d5d5e16a3b690959008414a535b3ee50091d0e5605e04f5d9d9d50d079dea049cab2071827fc9d14e73c3aed6e314566d4ab834b029e10a3f239dda92a66a690e378154eeddf53ffde9e608afbc37a223266cf0e4c3e4ad89538700d8a781b45d1285eef89da14a66a2b9531e29d21de251f1a4e1895aad67fe9216f81c63ff48e651cf2a65e97bb884b62552a98479b74f48ff9d1759ca9edd4a3eedceb7e25"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1030}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x30, 0x3}}}}}]}, 0x3c}}, 0x0) r10 = syz_open_dev$video(&(0x7f0000000040), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f0000000180)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_CROP(r10, 0x4014563c, &(0x7f0000000100)={0x9, {0x9, 0x9, 0x8, 0xb}}) 6.141449149s ago: executing program 2 (id=7041): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000000)) bind$netrom(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, &(0x7f0000000500)) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000f165f9a4f8573edc51743b3fe6de488aef95682261001907c36dd3d680e712c1473ff8e9d773180e9cd920a091bede5e43479cb2f6da50b1fa233fc5b098a210c54d66865a6f0afefd87178917f4a434dfc92e06f04570047953dbf3ecf3548f25cbe2090940f7409d5b7233fac074a2dd21b6070ca40245cb0d"], 0x0) syz_emit_ethernet(0x3a, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa18c45d9979c908004600002c0000000000069078ac1e0800ac1414aa9404000000004e22efc6be3cf8dae476cf62f76e413d2daf22dd3dcb8f3e9861956cb939fbbecc4da189852bf9b3e942480bf1b903ad3a5bdc7c7e260131ed1f2dc91d924ee28bd0016fcc330000000000000007f5cd1a2e4ed7f4ae8202c58305914db8242e1009fdf34a9dcf1f6a7fff46ca8b7d956aaf5292416598a7e5", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02fffe90788000"], 0x0) mmap$IORING_OFF_SQES(&(0x7f00006c1000/0x1000)=nil, 0x1000, 0x200000d, 0x4971, 0xffffffffffffffff, 0x10000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x41}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000003bc0)=""/4085, 0xff5}, {&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000040)=""/126, 0x7e}, {&(0x7f00000000c0)=""/44, 0x2c}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x4, 0x2120, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 5.072223091s ago: executing program 2 (id=7043): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000940)={0x8, 0x89}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f00000001c0), 0x5005) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r5 = dup(0xffffffffffffffff) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000014001b5729bd7000fedbdf251014"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010900000040ffdbdf25021820fc000000080000000208000100ac141400"], 0x24}, 0x1, 0x0, 0x0, 0xc009}, 0x40000) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x10, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 3.781410556s ago: executing program 0 (id=7050): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000), 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 3.661499609s ago: executing program 0 (id=7051): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000000)) bind$netrom(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0xfffffffe, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x5, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x4, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0xf, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x2, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0xffffffff, 0x0, 0x401, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, &(0x7f0000000500)) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000f165f9a4f8573edc51743b3fe6de488aef95682261001907c36dd3d680e712c1473ff8e9d773180e9cd920a091bede5e43479cb2f6da50b1fa233fc5b098a210c54d66865a6f0afefd87178917f4a434dfc92e06f04570047953dbf3ecf3548f25cbe2090940f7409d5b7233fac074a2dd21b6070ca40245cb0d"], 0x0) syz_emit_ethernet(0x3a, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa18c45d9979c908004600002c0000000000069078ac1e0800ac1414aa9404000000004e22efc6be3cf8dae476cf62f76e413d2daf22dd3dcb8f3e9861956cb939fbbecc4da189852bf9b3e942480bf1b903ad3a5bdc7c7e260131ed1f2dc91d924ee28bd0016fcc330000000000000007f5cd1a2e4ed7f4ae8202c58305914db8242e1009fdf34a9dcf1f6a7fff46ca8b7d956aaf5292416598a7e5", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02fffe90788000"], 0x0) mmap$IORING_OFF_SQES(&(0x7f00006c1000/0x1000)=nil, 0x1000, 0x200000d, 0x4971, 0xffffffffffffffff, 0x10000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x41}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000003bc0)=""/4085, 0xff5}, {&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000040)=""/126, 0x7e}, {&(0x7f00000000c0)=""/44, 0x2c}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x4, 0x2120, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 3.436349874s ago: executing program 2 (id=7052): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x8}, 0x8) r3 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)}, 0x4048043) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_merged\x00', 0x275a, 0x0) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000700, 0x0, &(0x7f0000000080)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="dc00000010005fba00100000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008000d000200000008002800679b0000a40034801400350076657468315f746f5f626f6e6400000014003500726f73653000000000000000000000001400350073797a6b616c6c6572310000000000001400350076657468305f766c616e000000000000140035007465616d3000000000060000000000001400350076657468305f766972745f77696669001400350068737230000000000000000000000000140035007665746800"/196], 0xdc}}, 0x4804) 2.602237045s ago: executing program 0 (id=7056): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendto(r1, 0x0, 0x0, 0x51, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) getsockopt$packet_int(r2, 0x107, 0x17, 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000200)={0x0, 0x73}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)={0x3c, 0x2e, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x1c, 0x0, 0x0, 0x1, [@typed={0x15, 0x1, 0x0, 0x0, @binary="653c4601c0c87889732f29aa0008000000"}]}]}, 0x3c}], 0x1}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x5, &(0x7f00000003c0)=[{0x64, 0x10, 0xff, 0x7}, {0xc8e3, 0xa, 0x9, 0x9}, {0x800, 0x6, 0x9, 0xe}, {0x7, 0x1, 0x7, 0x2}, {0x676, 0x0, 0x2, 0x2}]}) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000440)={0x0, r0, 0x8, 0x2, 0x19a, 0xdee641c}) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x2) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) r11 = fanotify_init(0xf00, 0x0) fanotify_mark(r11, 0x451, 0x8001008, r10, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0xa}]}}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000feffc37cf81890255ad8c3f8a48c34ac44030000711000000000f28bdb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1446}, @TCA_FLOW_XOR={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 2.516594961s ago: executing program 0 (id=7057): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x3c}}, 0x8000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 2.461555253s ago: executing program 2 (id=7058): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000000)=""/90) 1.986982092s ago: executing program 1 (id=7060): socket$inet(0x2, 0x2000000080002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x80000) r6 = fcntl$dupfd(r4, 0x0, r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000005c0)={0x90000010}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x10000014}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) close_range(r7, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="ff01ff8d00"}) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) r9 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x40240) ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000080)=0x12) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000000)={"dfa674ff", 0xb54, 0xe, 0x4, 0x4, 0x8, "0000000000000000052a000c00", "45374ccf", "de6d11ed", "6fe9f2e2", ["2feab25bb22d96238f06c1be", "1fc6190000000c8c4a9d2700", "00000300"]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r10 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$unix(r10, &(0x7f0000001840)=[{{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x5}}, {{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x2, 0x4000) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x11, 0x67, &(0x7f0000003100)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x200000000000, 0x200000000030, 0x200000000060, 0xffffffff, 0x1], 0x0, 0x0, 0x0}, 0x108) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) 1.921236355s ago: executing program 1 (id=7062): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x481, 0x0, 0xf, 0xfffffffffffffffd, 0xff, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xa, 0x148, 0x130, 0x60, 0x208, 0x2a8, 0x2a8, 0x208, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x7, 0x7, 0x1, 0x0, "c7eb9ff0e77b0a443227e7e1ab06317d8ab75dd5f6b861437caa59c05cb9a3bbdcf05c7fbb93dacac074315fa39c5fe75b6d6843afeab19b8c99438a0c0b8243"}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x2, 0x1, 0xd8cb, 'netbios-ns\x00', 'syz1\x00', {0xa000000000000000}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2b0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@loopback={0xffffffffffffffa4}, 0x800, 0x0, 0x1, 0x1, 0x8}, 0x20) r3 = fsopen(&(0x7f0000000340)='f2fs\x00', 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000a80)='t+\xdb\xaaU\x8e\xd6\x9b\xaa\xe0\xc0\x00r\xa1\xf7\x12\xfb\xed\r\f:\xef\xff\xa7x mT\x14\xafZ\xfa\xb5\xe5\x04\x03\'7\xa9\xf8\xb1O0\x05\xee\xc5\x81\xfd\xa5\xa3\xfe\x81\x06\x00>\xcdF8\xd2x\xb4\x05\x10\x0e\xc2\x85\xfe\xd8b=\xf8q\xa96{\xf49\x88\xb1\xcb\x8cn\n.\xd0;7\xeb\xc5\xd8\x13\xfe\x13\x1a\x01\xa3nK3\xc2p\xb5\n\x0fU6\xc9\xc4\x1f`\x8a\xd6\xf1*~\fD\x8e\"\x1c\xa4\x19J3\xac5.E\xe8\x97K\x82Y\n\x0f\x15\xd7\xb0\xaf-\x89\xcc\xdb>\xd4\xa9F=\x7f\xd5`|MG\xf6FfJ\xcc\xa9(\xea\xb8\x82tXW\xeb\xbd\f/\xbd\x95\x01a\x86G\xbf$\xe3\xd7\x15\x8b\x84\xc4\xc0\xe4;\xcc\xda\xd0+\xc3\x1e\xc7\x12\x14\x95\xcf\x1d\x1a\xa0st\xd9^\x95\xbd\x14\x1e\xa5\xb7+\xa2\xd1\x7f\xae=\x96F\xb8\x94\xfd\xd5\xfdQ\xca\x17\n\x96\t\x1e\x8b%\x82)$\xb6\xca\xbe\x03\xd8\xc5\xde\x05\x81 \xcc\xa5\xb0Z\xfb\xae\xa5\x9b.\x88\x97\xbf\x0e\xa1\x86\x8a\xbb\xd2\x7f\xc5p\xc0vI\x80\f\x871C\xda .\xdc\xf7\xef\x1a\xdc\x97Y-\x04\xc0\xc7\xd3\xa8\xf6yy)\x15FK\xaa\xc4\xd5B\x90\xfe\xd6\xf0\xd6<\a\x91\x10\xf4\x8cl:\x90\x8fHt\x9e\xbb\x91!\x1a\xe7\x8ck\x8dE\xe9\xdcH\x16jK\xb57\x88\xebsvJ\xf1o\x9eC\xd9\x95E\x9aX%\x8a\xe1W\x7f\x1c\x0e\x86f\x93\aN\x02\"//\x14@8lYL\xc09\xc0Gu\xe7\x02\x9b]\xac\xa6!\x96\x91+>Z', 0x0) readv(r3, &(0x7f0000000480)=[{&(0x7f0000002800)=""/4104, 0x1008}], 0x1) syz_genetlink_get_family_id$fou(0x0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) 1.859613168s ago: executing program 1 (id=7063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000001}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2000}) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0xfd97}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737955d7000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc00c64b5, &(0x7f0000000140)={&(0x7f0000000080)=[0x0], 0x1}) fcntl$lock(r4, 0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r6, 0x0, 0x100000000000000}, 0x38) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r5, 0x4) 1.631215549s ago: executing program 1 (id=7064): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x2, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r2, r2) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) 1.6306284s ago: executing program 1 (id=7065): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = socket(0x15, 0x5, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) r8 = openat$binfmt(0xffffffffffffff9c, r6, 0x2, 0x0) close(r8) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) recvfrom$l2tp(r0, &(0x7f00000010c0)=""/242, 0xf2, 0x2, &(0x7f00000011c0)={0x2, 0x0, @remote}, 0x10) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1014c0, 0x0) r10 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r10, &(0x7f00000000c0)=""/4096, 0x1000) 1.161995078s ago: executing program 0 (id=7066): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mlock(&(0x7f0000f47000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$thread_pidfd(0xffffff9c, &(0x7f0000000ac0), 0x200e00, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000b00)={'\x00', 0x48a, 0x2, 0xe2c, 0x8, 0x8, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000001080)=[{{&(0x7f0000000100)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000380)="a98ed2403e58d6349e56d0e9aba194f7eda477fc0e2b06e2e42138fc903fb12d76e643fdc2c26226d876d3cf8f89e6f8df4193f7e2a9fb6f550c6ff59c0e8bbeb626aa5ae37557a2acb86d4cc7d33887f39e92ad8bf9b1e2ee392feec2332d4fcea8386aa303f577d611a21cedb048917f360169b0fb6169f047898fa4ea147309d8f3b95fc3e08af8be545e6746e4d2281ea897e28d10993da8c561cdb534ed5609a925bd29e64a3a647f7f8c111fadaf5a7ba0e36d8667af93e16daa6632", 0xbf}, {&(0x7f0000000440)="b8c4628be97f696d6b836bc52590468204fa32f98d36a5e9ddf6fd2544543e3877cbbde5f090749479b4abda9fff03af0f147dc90014f0a3a3e39f3420998f0b683269f62cb96af034947b231871ff774cf08080749ab528d80914a517f2674a952f89491831bc7ac71c5d1d579d3fa5b39b47ca", 0x74}, {&(0x7f00000004c0)="24881b7a08335a3e5f849f0405b9039d98fd44456d0cac70daa5be134848dec892da8c9d6da159ecd49f9b3f39802429235f830784d71a1de74e6ef2a4281dd58504e015ec443d0461a86f4f8a358d4a1f4daac86e9f3ceb5e346fb5d049d7f5cd797079dbb0dceb89aefcf0dc5c946f3b9a7342e5c8a394e6bbae214ccc9529b7f27d85800cebf7ad3fe95d1dc08dede640ee436f583aa1a951e1d91681b11242f3e434b904d050273a9b37aa89505f8175cae64872ec72a300591feb942721d46031670d95651e99aaa35f19945897d43851bd7a5971f664eb6b2154b55290dce7445ee14c187f871902f0", 0xec}, {&(0x7f00000005c0)="b686d3cf6477741cc0b2337eb63c7377051742cb063064348adc6eba5307968702d8d2518549502976dc7a08c76788d4da635a3d8bce2cb63b431ae317e97ce735997c852e32658ffd64d1aec7461b6546611fefc3b9b14d0161e5103154ca0193a9559469fbe5237f97598b194afa8a9aba14eab8532c566295b818e40d73f690621a4044b162a37a7d363af5a2be4bcd9f295da7", 0x95}, {&(0x7f0000000680)="4ccd515fb217c4a2a6cbd3e02dce128b22f817efe5be86b0d57776e5d958e362129462b0a5baa17a6f66a05b2a198c2deef9be1c284743c7f825e343801b35c9f51cc9be830636ce8ba053ed4386bb45bf9a398d10e68143eb7942e2b8efb42de5ae294ef70ad31ebffc5f52098472939b83814bfc7ec0727e937cd1f4a9cbb354377df063a6cce80c7ecbeda5a52f67e49af0eb84541b", 0x97}, {&(0x7f0000000740)="bb7186a6e2e035de0fe3fff421f2c40ef7d561a4402b2d87339b648b8432100da2902b4525ccda92935af8df77d8df0e7e7d0d1b56f1f3b4fc2cdbc0b6b7251bc5cf9c9d55238204365d90d24e972297fe5a57c4009d300753cc602deb3c896aefb8aee50b4f781a19757476c7e86e2c2330e17f8b527f9b3c4303da349a28ababe9cc710c16edcb67667a1a4bd1cf23213e537895cec047031881ee919648e9d71a37dbf5", 0xa5}, {&(0x7f0000000800)="f6aff985dcb3029398262848bfcab0b1cbeb0b4f9b5f867e1dd86e5071b2f3ff8397aad0746e2a2c678652112a55d6378f026578bbe660b3e0940c0d54c2bad51fb9f585ce20f3f45e631967953e5755919ddcf7cdeebc6db032fb3b0a4e018e3d500518acb35b63f779ecdf17d944214a3037b446b1cfac5256b7aebcc0b3468a242531203ab8e4dd0708a061e57f0d1149976c577cef22d984ad714f", 0x9d}, {&(0x7f00000008c0)="6f50347248b890f86d4a19edc6cc00fd0dfdc518a728fb7dd58929847b3ce04beb6ab6dd1521d505f01dea137509b349c8e0bb8fdb0e498e1ce6e993cc8cb464ab6d98cedbc7437d4015e4b1958bad475680b174a4e68be40dd9927fcff7647960", 0x61}, {&(0x7f0000000940)="e522f963291bcc9a7e6ff5ecd7eb52b8d1a9522cf140965de00b9701107d02d0f2422b595e4ba680dc94aa0aee6855318049e6a11140df35733de939e734bd07f32b4c010e0bad983a43bc79f24801394dc745d738de7e4f308a5a211414a312c6598e0f5af4b9b680cae83b1c4d36865c982c9d46af68a00dfd876d6f413a0bd306ad2ffe5cda0a425743359286a3e5a39fce35b6d2b0d353b61dfcfd74f0635464fbbb0f7f2addd9347bbe4df4a450f9735e4c6af3f1fccdfcab0fe00cf2e60b6b36f253362d69b0a8c314e64ff63a0f252e78961b6210e04f9b47a4c0c03368bb1cc80c29014084bf41b191872e4e8501e308", 0xf4}], 0x9, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000000100000081000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="180000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="140000000100000001000000", @ANYRES32=r0, @ANYRES32=r2], 0xdc, 0x4000091}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpgid(0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r6, 0x800000000000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000bdd000/0x2000)=nil) sched_setattr(r5, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000180)={0x0, 0xafd6, 0x1, 0x0, 0x100000}, &(0x7f0000000340)=0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r8, 0x0, 0x0, &(0x7f0000000000)) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r9, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x8) r11 = syz_open_dev$dri(0x0, 0x1, 0x0) fsetxattr$security_evm(r11, &(0x7f00000000c0), 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r12 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r12, 0x29, 0x16, &(0x7f0000fcb000), 0x4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r10, 0x4020aed2, 0x0) unshare(0x6a040000) 532.388198ms ago: executing program 3 (id=7067): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) getuid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) setuid(0xee01) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x35) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000480)={'pcl730\x00', [0xcf7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c953398, 0x8, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x7, 0x0, 0x40400, 0x8, 0x48f3, 0x200, 0x80000089, 0xb, 0x1400000, 0x20001e54, 0xffffeadb, 0x4c9, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x2) 451.199634ms ago: executing program 3 (id=7068): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x34, r3, 0xf03, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000000), 0x4) 372.277729ms ago: executing program 3 (id=7069): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x60}, 0x1, 0x0, 0x0, 0x2004844}, 0x4000000) socket$kcm(0xa, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVINFO(r4, 0x80b06401, &(0x7f0000000800)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@ipv6_newaddr={0x40, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r1}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004051}, 0x4) unshare(0x50010400) 262.487831ms ago: executing program 3 (id=7070): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000de80)={0x0, 0x0, &(0x7f000000de40)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x8c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x9, 0x6, 0x1, 0x0, "b665b88e11"}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8, 0x6, 0x1, 0x0, "66af62fa"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x10c}, 0x1, 0x0, 0x0, 0x8040}, 0x894) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xd7) 162.525248ms ago: executing program 0 (id=7071): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, &(0x7f0000000840)={0x18, &(0x7f0000000140)={0x0, 0x22, 0xc7, {0xc7, 0x21, "24b147793a55502c0da2f682a7fe080e29ca73ae4c78c14c5cf09c6407e66ddad6ad7940c8cb945e500e253e18ff6fedc9f84c32beaae630cafe30dafc64613236b996f1891a2697885bb030a850cb5ea5ea9a85904553efbb8cdbb2247b10e821404a76e95efe5f5d72bd186b1ff67ebf4423f172965d932c06e79da88239159c15bc3caa00ce3cf7c3b49acd15f65affcd9e42f4a6d318bc4c2773d0e5520850dc8f7dc92cb491baf43b3c1503946cd0a469b5b0f0d92631677ab2980259298115ee56c2"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}, &(0x7f00000005c0)={0x0, 0xf, 0x1cd, {0x5, 0xf, 0x1cd, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6a6d2e01baaca6c0, 0x7f, 0xa9, 0x3}, @generic={0xa4, 0x10, 0x3, "5dd7d5892885be37206eb0448dec36cdf3617c7959541554dee9788d9158470ab7bcf088cf8ad93254a06acf04f5f9b63f639dd9491c509401c1f396aa9e26332e528065387bb6e73ee279c11af82c205ee5288d599f1e24607ab87a5772f022d44443eee3cf7403daffe9b090f355a31541a51152cd4255997d3eeb11ea6a286f576eaf11c03af8db9f1003f03ea929fb273443dfca66e0298e7f7ace480c055a"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x6, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x25, 0x3}, @generic={0xe6, 0x10, 0x2, "087edbe7cfa113e370162d31fd4d447d0867aa411d0056c56d00725e8580d47e34058d09f454c2e6842d22b5ea142ce404d5a53bc821ee812819e2cc8806d7316ccfca170e9cc80d08b09f787f38b0789b7b7c28d98ab287ce57dd6c4dea7096e32797343f8f0e5bbed5f2716521ac6d3a270769740dd1a7403907e7095996a26a4d7f993f0fdd16f95da6e7b99f1d1f17c48e1ed29f2a32f2fd842459ebc018a2af1f39436f10481e19b70f73dd07a2752ee5de290f946410038be3db017fc69b4b534ace79f240a4464be0b2ddbd2402786745a6bad23589ee08990876702cd2864b"}, @generic={0x23, 0x10, 0x1, "d1f484878091c34e7b1e4d406a0165a8a0d5c44d09c58f5f4713d7b434c31baa"}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x2, 0x6, 0x0, "200d8531", "bb4b01aa"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x18, 0xf, 0x3f, 0x1, 0xfff8, 0x9}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000880)={0x20, 0x18, 0xcc, "c943a0aec5df4b8894cf2829cb5a1a5ad10777a0ce6eb9b1bfbafdc62fc96f19805d9cef9fcfb7a161bd8961af90b9c6994050644e5f5ad64f23194231b6642cabddb2555c83b59ed73b23332bf3e5942fc37f1fef6a231557b5fa574f2b97dad208a0fe65879ebb3f7d4734f5dfc97de255cc24530adf3a371a427ccc3f8df6dbd40881d365a889ba13e80f6cb2c8da1983739fe08340355dc85b8fa8574e5c6c0f9eae83a7c6062e45852e69f981df76e9e2c9a7d3f53741b1f7ccc9d753022a697f3a1d824e9e3c986395"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x140, 0x20}}, &(0x7f0000000a80)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000b00)={0x40, 0xb, 0x2, "22ce"}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0x7537}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "78df"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0x3}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x90, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}]}], {0x14, 0x10}}, 0x118}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="40a3000000000000240012800b0001006d616373656300001400028005000b0000000b1296040a000000000008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 162.2506ms ago: executing program 3 (id=7072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000001}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2000}) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0xfd97}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737955d7000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc00c64b5, &(0x7f0000000140)={&(0x7f0000000080)=[0x0], 0x1}) fcntl$lock(r4, 0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r6, 0x0, 0x100000000000000}, 0x38) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r5, 0x4) 102.242793ms ago: executing program 3 (id=7073): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r4], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) ioctl$BLKPG(r5, 0x40084d0c, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0}) r6 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x20941, 0xe3) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108) close(r8) r9 = socket(0x80000000000000a, 0x2, 0x0) getpid() setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_ERR_DATA_REPORTING={{0xff}, 0x6}}}, 0x7) 0s ago: executing program 1 (id=7074): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x6c, &(0x7f00000023c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000}]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r7 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000002500)={'comedi_bond\x00', [0x3, 0x5, 0x7fffffff, 0x84e1, 0x2f, 0x2006, 0x6, 0x8, 0x80ffa, 0x0, 0x0, 0x8500, 0x1003, 0x1000004, 0x40f, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x8efd, 0x0, 0x4, 0x800, 0xbc, 0x1, 0x67, 0x401, r6}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r10}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r10, 0x4, 0x100000000000000}, 0x38) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000000c0)=0x1, 0x4) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x582420}, 0xc, &(0x7f0000000300)={&(0x7f0000002440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000fcdbdf250a000000080001007063690011000200303030303a30303a31302e300000000008000300010000006d048961ce275b8284e7707c3cfbe075309c2902560f094da9de3032f8611ae3cec6fe2b3eb22ec667c995bc132fbb9fa3028a4e1880d25f5589c9089ad30bd9f19b200ea35d9d2d99058a906f8aa0f5b2441aa49b514cc6d7dc510c1fc39e808ef3de49542f5d39cdae41629e5c2dbb8047724e"], 0x38}, 0x1, 0x0, 0x0, 0x60000801}, 0x48081) ptrace$pokeuser(0x6, r11, 0xfc, 0x6000003f) kernel console output (not intermixed with test programs): 152.525318][ T40] audit: type=1326 audit(2000000432.329:30407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31131 comm="syz.2.6570" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7115cab code=0x7ffc0000 [ 2152.716143][ T40] audit: type=1326 audit(2000000432.529:30408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31131 comm="syz.2.6570" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 2152.717915][T24483] usb 7-1: USB disconnect, device number 25 [ 2152.724317][ T40] audit: type=1326 audit(2000000432.529:30409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31131 comm="syz.2.6570" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 2154.718953][T31178] netlink: 'syz.2.6585': attribute type 8 has an invalid length. [ 2154.872024][T31186] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6587'. [ 2154.902588][T31188] 9pnet_virtio: no channels available for device syz [ 2155.042067][T31194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6586'. [ 2155.265535][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2155.273233][T15115] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input163 [ 2155.290014][T15115] imon:send_packet: packet tx failed (-71) [ 2155.321681][T15115] imon 5-1:0.0: panel buttons/knobs setup failed [ 2155.421658][T15115] rc_core: IR keymap rc-imon-pad not found [ 2155.423774][T15115] Registered IR keymap rc-empty [ 2155.425437][T15115] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2155.431616][T15115] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2155.779812][T15115] imon:send_packet: packet tx failed (-71) [ 2155.801599][T15115] imon 5-1:0.0: remote input dev register failed [ 2155.803840][T15115] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 2155.809969][T15115] imon 5-1:0.0: unable to initialize intf0, err 0 [ 2155.812337][T15115] imon:imon_probe: failed to initialize context! [ 2155.814364][T15115] imon 5-1:0.0: unable to register, err -19 [ 2155.818104][T15115] usb 5-1: USB disconnect, device number 30 [ 2156.018099][T31219] netlink: 'syz.2.6595': attribute type 1 has an invalid length. [ 2156.166546][T31220] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2156.190196][T31218] syz.3.6596 (31218): drop_caches: 2 [ 2156.268457][T31230] 9pnet_virtio: no channels available for device syz [ 2156.271763][T31218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6596'. [ 2156.409984][T31237] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2156.551106][T31244] /dev/nullb0: Can't open blockdev [ 2156.559931][T31244] netlink: 'syz.3.6603': attribute type 1 has an invalid length. [ 2156.672324][T31244] bond0: entered promiscuous mode [ 2156.674782][T31244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2156.807252][T31248] overlayfs: invalid origin (0000) [ 2156.841018][T31250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6605'. [ 2157.130748][T31256] 9pnet_virtio: no channels available for device syz [ 2158.714747][T31275] netlink: 'syz.3.6612': attribute type 1 has an invalid length. [ 2158.759679][T31276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6613'. [ 2159.135451][T31285] program syz.0.6615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2160.054484][ T40] audit: type=1326 audit(2000000439.869:30410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31302 comm="syz.1.6621" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bef88 code=0x7ffc0000 [ 2160.061200][ T40] audit: type=1326 audit(2000000439.869:30411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31302 comm="syz.1.6621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 2160.081940][ T40] audit: type=1326 audit(2000000439.869:30412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31302 comm="syz.1.6621" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bef88 code=0x7ffc0000 [ 2160.088528][ T40] audit: type=1326 audit(2000000439.869:30413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31302 comm="syz.1.6621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 2160.111635][ T40] audit: type=1326 audit(2000000439.869:30414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31302 comm="syz.1.6621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 2160.121635][ T40] audit: type=1326 audit(2000000439.869:30415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31302 comm="syz.1.6621" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bef88 code=0x7ffc0000 [ 2160.128370][ T40] audit: type=1326 audit(2000000439.869:30416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31302 comm="syz.1.6621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 2160.135574][ T40] audit: type=1326 audit(2000000439.869:30417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31302 comm="syz.1.6621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 2160.142729][ T40] audit: type=1326 audit(2000000439.869:30418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31302 comm="syz.1.6621" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bef88 code=0x7ffc0000 [ 2160.149647][ T40] audit: type=1326 audit(2000000439.869:30419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31302 comm="syz.1.6621" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bef88 code=0x7ffc0000 [ 2160.254273][T31305] 9pnet_virtio: no channels available for device syz [ 2160.288814][T31307] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6623'. [ 2160.356467][T31310] netlink: 177040 bytes leftover after parsing attributes in process `syz.2.6624'. [ 2160.395339][T31310] af_packet: tpacket_rcv: packet too big, clamped from 16 to 4294967272. macoff=96 [ 2160.661785][ T6043] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 2160.813011][ T6043] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2160.815581][ T6043] usb 6-1: config 0 has no interface number 0 [ 2160.817701][ T6043] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2160.821003][ T6043] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 2160.825575][ T6043] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2160.829539][ T6043] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2160.833763][ T6043] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 2160.837063][ T6043] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2160.841334][ T6043] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2160.844741][ T6043] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2160.851785][ T6043] usb 6-1: config 0 descriptor?? [ 2160.854063][T31307] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2160.856858][T31307] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2160.864523][ T6043] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2161.061838][T31307] ldusb 6-1:0.55: Write buffer overflow, 1 bytes dropped [ 2161.071008][T19408] usb 6-1: USB disconnect, device number 33 [ 2161.074919][T19408] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 2161.214176][T31308] delete_channel: no stack [ 2161.313602][T31318] netlink: 'syz.2.6625': attribute type 1 has an invalid length. [ 2161.370719][T31325] FAULT_INJECTION: forcing a failure. [ 2161.370719][T31325] name failslab, interval 1, probability 0, space 0, times 0 [ 2161.377800][T31325] CPU: 0 UID: 0 PID: 31325 Comm: syz.3.6629 Tainted: G L syzkaller #0 PREEMPT(full) [ 2161.377821][T31325] Tainted: [L]=SOFTLOCKUP [ 2161.377825][T31325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2161.377832][T31325] Call Trace: [ 2161.377836][T31325] [ 2161.377841][T31325] dump_stack_lvl+0x100/0x190 [ 2161.377863][T31325] should_fail_ex.cold+0x5/0xa [ 2161.377878][T31325] should_failslab+0xc2/0x120 [ 2161.377892][T31325] __kmalloc_node_noprof+0xe6/0x850 [ 2161.377909][T31325] ? get_callchain_buffers+0x1e5/0x380 [ 2161.377928][T31325] get_callchain_buffers+0x1e5/0x380 [ 2161.377942][T31325] ? security_capable+0x80/0x260 [ 2161.377956][T31325] stack_map_alloc+0x316/0x610 [ 2161.377970][T31325] ? __pfx_stack_map_mem_usage+0x10/0x10 [ 2161.377984][T31325] map_create+0x84e/0x2ba0 [ 2161.378012][T31325] ? __pfx_map_create+0x10/0x10 [ 2161.378026][T31325] ? __might_fault+0xc5/0x140 [ 2161.378043][T31325] ? __might_fault+0xc5/0x140 [ 2161.378071][T31325] __sys_bpf+0x2091/0x4b90 [ 2161.378086][T31325] ? __pfx___sys_bpf+0x10/0x10 [ 2161.378100][T31325] ? proc_fail_nth_write+0x9f/0x220 [ 2161.378116][T31325] ? find_held_lock+0x2b/0x80 [ 2161.378131][T31325] ? find_held_lock+0x2b/0x80 [ 2161.378143][T31325] ? ksys_write+0x190/0x250 [ 2161.378157][T31325] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2161.378178][T31325] ? fput+0x79/0x100 [ 2161.378192][T31325] ? ksys_write+0x1ac/0x250 [ 2161.378206][T31325] __ia32_sys_bpf+0x79/0xf0 [ 2161.378219][T31325] ? lockdep_hardirqs_on+0x78/0x100 [ 2161.378231][T31325] __do_fast_syscall_32+0xe3/0x8c0 [ 2161.378246][T31325] do_fast_syscall_32+0x32/0x70 [ 2161.378258][T31325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2161.378273][T31325] RIP: 0023:0xf6ffef6c [ 2161.378284][T31325] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2161.378295][T31325] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 2161.378307][T31325] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 2161.378314][T31325] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 2161.378321][T31325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2161.378327][T31325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2161.378334][T31325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2161.378348][T31325] [ 2161.775903][T31335] 9pnet_virtio: no channels available for device syz [ 2162.129655][T31347] can0: slcan on ttyS3. [ 2162.866500][T31370] 9pnet_virtio: no channels available for device syz [ 2162.902380][T31352] can0 (unregistered): slcan off ttyS3. [ 2163.041916][T31390] FAULT_INJECTION: forcing a failure. [ 2163.041916][T31390] name failslab, interval 1, probability 0, space 0, times 0 [ 2163.045863][T31390] CPU: 2 UID: 0 PID: 31390 Comm: syz.1.6646 Tainted: G L syzkaller #0 PREEMPT(full) [ 2163.045881][T31390] Tainted: [L]=SOFTLOCKUP [ 2163.045885][T31390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2163.045892][T31390] Call Trace: [ 2163.045897][T31390] [ 2163.045901][T31390] dump_stack_lvl+0x100/0x190 [ 2163.045922][T31390] should_fail_ex.cold+0x5/0xa [ 2163.045937][T31390] should_failslab+0xc2/0x120 [ 2163.045950][T31390] __kmalloc_cache_noprof+0x7a/0x6f0 [ 2163.045967][T31390] ? nf_tables_commit+0x78c/0x8ae0 [ 2163.045982][T31390] nf_tables_commit+0x78c/0x8ae0 [ 2163.045994][T31390] ? nf_tables_newchain+0xebf/0x2d10 [ 2163.046014][T31390] ? __pfx_nf_tables_newchain+0x10/0x10 [ 2163.046026][T31390] ? __pfx_nf_tables_commit+0x10/0x10 [ 2163.046044][T31390] ? __nla_parse+0x40/0x60 [ 2163.046057][T31390] nfnetlink_rcv_batch+0x1a57/0x2880 [ 2163.046081][T31390] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 2163.046097][T31390] ? find_held_lock+0x2b/0x80 [ 2163.046110][T31390] ? __local_bh_enable_ip+0x9e/0x120 [ 2163.046127][T31390] ? lockdep_hardirqs_on+0x78/0x100 [ 2163.046139][T31390] ? __dev_queue_xmit+0x8a0/0x4800 [ 2163.046172][T31390] ? __nla_parse+0x40/0x60 [ 2163.046185][T31390] nfnetlink_rcv+0x3bd/0x440 [ 2163.046200][T31390] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2163.046232][T31390] netlink_unicast+0x5aa/0x870 [ 2163.046247][T31390] ? __pfx_netlink_unicast+0x10/0x10 [ 2163.046265][T31390] netlink_sendmsg+0x8b0/0xda0 [ 2163.046279][T31390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2163.046294][T31390] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2163.046309][T31390] ____sys_sendmsg+0x9e1/0xb70 [ 2163.046322][T31390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2163.046336][T31390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2163.046356][T31390] ___sys_sendmsg+0x190/0x1e0 [ 2163.046372][T31390] ? __pfx____sys_sendmsg+0x10/0x10 [ 2163.046405][T31390] __sys_sendmsg+0x170/0x220 [ 2163.046416][T31390] ? __pfx___sys_sendmsg+0x10/0x10 [ 2163.046440][T31390] ? __pfx_ksys_write+0x10/0x10 [ 2163.046459][T31390] __do_fast_syscall_32+0xe3/0x8c0 [ 2163.046478][T31390] do_fast_syscall_32+0x32/0x70 [ 2163.046494][T31390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2163.046514][T31390] RIP: 0023:0xf70bef6c [ 2163.046528][T31390] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2163.046542][T31390] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2163.046553][T31390] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008000c2c0 [ 2163.046560][T31390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2163.046567][T31390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2163.046573][T31390] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2163.046579][T31390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2163.046594][T31390] [ 2163.146564][T31392] netlink: 'syz.3.6645': attribute type 1 has an invalid length. [ 2163.415699][T31402] program syz.1.6648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2163.431956][T28098] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2163.593068][T28098] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 2163.598104][T28098] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.603379][T28098] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.608172][T28098] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2163.615583][T28098] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.619733][T28098] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.624678][T28098] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2163.629101][T28098] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.633383][T28098] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.638198][T28098] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2163.642882][T28098] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.646888][T28098] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.652175][T28098] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2163.656448][T28098] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.660398][T28098] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.665550][T28098] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2163.669906][T28098] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.674015][ T24] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 2163.677808][T28098] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.683440][T28098] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2163.687639][T28098] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.691426][T28098] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.696716][T28098] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2163.700851][T28098] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.704938][T28098] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.709486][T28098] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2163.713575][T28098] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2163.716467][T28098] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2163.719131][T28098] usb 5-1: Product: syz [ 2163.720696][T28098] usb 5-1: Manufacturer: syz [ 2163.722301][T28098] usb 5-1: SerialNumber: syz [ 2163.729733][T28098] usb 5-1: config 0 descriptor?? [ 2163.741751][T28098] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 2163.832528][ T24] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 2163.836639][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.839597][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.843183][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2163.846618][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.849575][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.853556][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2163.857008][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.859870][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.863416][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2163.867568][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.870431][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.874033][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2163.878765][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.883073][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.886500][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2163.895035][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.897900][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.901723][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2163.905078][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.907932][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.911864][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2163.915182][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2163.918232][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2163.921761][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2163.926066][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2163.928979][ T24] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2163.931729][ T24] usb 7-1: Product: syz [ 2163.933153][ T24] usb 7-1: Manufacturer: syz [ 2163.934787][ T24] usb 7-1: SerialNumber: syz [ 2163.941962][ T24] usb 7-1: config 0 descriptor?? [ 2163.953698][ T24] yurex 7-1:0.0: USB YUREX device now attached to Yurex #1 [ 2165.172645][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.342165][T15115] usb 7-1: USB disconnect, device number 26 [ 2166.352075][T15115] yurex 7-1:0.0: USB YUREX #1 now disconnected [ 2166.459707][T31427] wg2 speed is unknown, defaulting to 1000 [ 2167.397116][T31438] netlink: 'syz.2.6660': attribute type 1 has an invalid length. [ 2167.467456][T25764] usb 5-1: USB disconnect, device number 31 [ 2167.471175][T25764] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 2167.548422][T31441] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 2167.618808][T31444] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2167.622370][T31444] @0: renamed from bond_slave_1 (while UP) [ 2167.667112][T31444] openvswitch: netlink: IPv4 tunnel dst address is zero [ 2167.670022][T31444] netlink: ct family unspecified [ 2167.672182][T31444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2168.198729][T31451] Invalid argument reading file caps for ./file0 [ 2168.596771][T31458] overlayfs: missing 'lowerdir' [ 2168.743425][T31462] 9pnet_virtio: no channels available for device syz [ 2169.017891][T31464] FAULT_INJECTION: forcing a failure. [ 2169.017891][T31464] name failslab, interval 1, probability 0, space 0, times 0 [ 2169.023418][T31464] CPU: 0 UID: 0 PID: 31464 Comm: syz.1.6669 Tainted: G L syzkaller #0 PREEMPT(full) [ 2169.023439][T31464] Tainted: [L]=SOFTLOCKUP [ 2169.023443][T31464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2169.023450][T31464] Call Trace: [ 2169.023455][T31464] [ 2169.023460][T31464] dump_stack_lvl+0x100/0x190 [ 2169.023484][T31464] should_fail_ex.cold+0x5/0xa [ 2169.023499][T31464] should_failslab+0xc2/0x120 [ 2169.023513][T31464] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 2169.023531][T31464] ? skb_clone+0x190/0x400 [ 2169.023545][T31464] skb_clone+0x190/0x400 [ 2169.023557][T31464] netlink_deliver_tap+0xaed/0xcc0 [ 2169.023572][T31464] netlink_unicast+0x650/0x870 [ 2169.023586][T31464] ? __pfx_netlink_unicast+0x10/0x10 [ 2169.023604][T31464] netlink_sendmsg+0x8b0/0xda0 [ 2169.023619][T31464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2169.023634][T31464] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2169.023649][T31464] ____sys_sendmsg+0x9e1/0xb70 [ 2169.023663][T31464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2169.023676][T31464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2169.023697][T31464] ___sys_sendmsg+0x190/0x1e0 [ 2169.023713][T31464] ? __pfx____sys_sendmsg+0x10/0x10 [ 2169.023746][T31464] __sys_sendmsg+0x170/0x220 [ 2169.023757][T31464] ? __pfx___sys_sendmsg+0x10/0x10 [ 2169.023781][T31464] ? __pfx_ksys_write+0x10/0x10 [ 2169.023796][T31464] __do_fast_syscall_32+0xe3/0x8c0 [ 2169.023811][T31464] do_fast_syscall_32+0x32/0x70 [ 2169.023824][T31464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2169.023840][T31464] RIP: 0023:0xf70bef6c [ 2169.023854][T31464] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2169.023869][T31464] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2169.023885][T31464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 2169.023895][T31464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2169.023904][T31464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2169.023913][T31464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2169.023923][T31464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2169.023946][T31464] [ 2169.123947][T31469] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6671'. [ 2169.126866][T31469] netlink: 'syz.1.6671': attribute type 2 has an invalid length. [ 2169.225024][T31473] netlink: 'syz.1.6672': attribute type 1 has an invalid length. [ 2169.268035][T31470] wg2 speed is unknown, defaulting to 1000 [ 2169.539240][T31481] wg2 speed is unknown, defaulting to 1000 [ 2172.260168][T31507] syz.2.6683 (31507): drop_caches: 2 [ 2172.765422][T31516] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2172.771092][T31516] overlayfs: failed to set xattr on upper [ 2172.776091][T31516] overlayfs: ...falling back to redirect_dir=nofollow. [ 2172.780888][T31516] overlayfs: ...falling back to index=off. [ 2172.874760][T31516] overlayfs: ...falling back to uuid=null. [ 2173.276976][T31517] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 2173.637486][T31524] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 2173.639593][T31524] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2173.749470][T31524] vhci_hcd vhci_hcd.0: Device attached [ 2174.283224][T15115] usb 44-1: SetAddress Request (11) to port 0 [ 2174.285359][T15115] usb 44-1: new SuperSpeed USB device number 11 using vhci_hcd [ 2174.437261][T31526] vhci_hcd: connection reset by peer [ 2174.440077][T15225] vhci_hcd vhci_hcd.3: stop threads [ 2174.441989][T15225] vhci_hcd vhci_hcd.3: release socket [ 2174.444957][T15225] vhci_hcd vhci_hcd.3: disconnect device [ 2174.850152][T31542] syz.0.6692 (31542): drop_caches: 2 [ 2174.899348][T31546] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2175.149245][T31554] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2175.432915][T31553] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 2175.434957][T31553] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2175.439666][T31553] vhci_hcd vhci_hcd.0: Device attached [ 2175.722515][T31561] vhci_hcd: connection closed [ 2175.723048][T22274] vhci_hcd vhci_hcd.2: stop threads [ 2175.727594][T22274] vhci_hcd vhci_hcd.2: release socket [ 2175.730179][T22274] vhci_hcd vhci_hcd.2: disconnect device [ 2175.741778][ T24] usb 42-1: enqueue for inactive port 0 [ 2175.771893][T31569] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6697'. [ 2175.859412][T31569] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 2175.862231][T31569] UDF-fs: Scanning with blocksize 2048 failed [ 2175.869854][T31569] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 2175.872844][T31569] UDF-fs: Scanning with blocksize 4096 failed [ 2176.309172][T31581] syz.2.6701 (31581): drop_caches: 2 [ 2176.362172][ T24] usb usb42-port1: attempt power cycle [ 2176.933513][ T24] usb usb42-port1: unable to enumerate USB device [ 2177.553652][T31605] lo speed is unknown, defaulting to 1000 [ 2177.556627][T31605] lo speed is unknown, defaulting to 1000 [ 2177.558874][T31605] lo speed is unknown, defaulting to 1000 [ 2177.695682][T31605] infiniband syU: set active [ 2177.697530][T25205] lo speed is unknown, defaulting to 1000 [ 2177.700532][T31605] infiniband syU: added lo [ 2177.702240][T31608] syz.3.6710 (31608): drop_caches: 2 [ 2177.720954][T31605] RDS/IB: syU: added [ 2177.722645][T31605] smc: adding ib device syU with port count 1 [ 2177.725087][T31605] smc: ib device syU port 1 has no pnetid [ 2177.727324][T25205] lo speed is unknown, defaulting to 1000 [ 2177.729760][T31605] lo speed is unknown, defaulting to 1000 [ 2177.782236][T31613] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2177.857969][T31605] lo speed is unknown, defaulting to 1000 [ 2177.990925][T31605] lo speed is unknown, defaulting to 1000 [ 2178.306077][T31605] lo speed is unknown, defaulting to 1000 [ 2178.731794][ T6043] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2178.882365][ T6043] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 2178.886913][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.890519][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2178.895050][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2178.898787][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.902701][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2178.907174][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2178.911014][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.915175][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2178.919553][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2178.923784][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.927385][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2178.932251][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2178.936163][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.939826][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2178.945031][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2178.948766][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.951996][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2178.955474][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2178.958811][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.962963][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2178.967569][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2178.971114][ T6043] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.975235][ T6043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2178.979796][ T6043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2178.985155][ T6043] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2178.988923][ T6043] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2178.992808][ T6043] usb 5-1: Product: syz [ 2178.994742][ T6043] usb 5-1: Manufacturer: syz [ 2178.996668][ T6043] usb 5-1: SerialNumber: syz [ 2179.001317][ T6043] usb 5-1: config 0 descriptor?? [ 2179.016143][ T6043] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 2179.331687][T15115] usb 44-1: device descriptor read/8, error -110 [ 2179.474079][ T6043] usb 5-1: USB disconnect, device number 32 [ 2179.513503][ T6043] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 2179.529607][T31638] program syz.2.6718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2179.792148][T15115] usb usb44-port1: attempt power cycle [ 2180.111989][T31647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6720'. [ 2180.325160][T31649] netlink: 'syz.1.6721': attribute type 4 has an invalid length. [ 2180.327805][T31649] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6721'. [ 2180.369272][T15115] usb usb44-port1: unable to enumerate USB device [ 2181.180212][T31672] syz.0.6727 (31672): drop_caches: 2 [ 2181.597677][T31682] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2181.621316][T31682] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 2181.624664][T31682] overlayfs: failed to look up (tracing) for ino (-66) [ 2182.740983][T31685] pim6reg1: entered promiscuous mode [ 2182.743716][T31685] pim6reg1: entered allmulticast mode [ 2183.733226][T31697] program syz.1.6732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2184.605668][T31712] Cannot find add_set index 3 as target [ 2184.731688][ T6016] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 2184.881885][ T6016] usb 7-1: Using ep0 maxpacket: 8 [ 2184.884945][ T6016] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 2184.887537][ T6016] usb 7-1: config 0 has no interface number 0 [ 2184.889709][ T6016] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2184.894161][ T6016] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2184.898143][ T6016] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2184.903892][ T6016] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2184.908118][ T6016] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2184.911229][ T6016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2184.919336][ T6016] usb 7-1: config 0 descriptor?? [ 2184.934651][ T6016] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2185.211897][T31706] input: syz1 as /devices/virtual/input/input166 [ 2185.344473][T31720] netlink: 'syz.1.6738': attribute type 1 has an invalid length. [ 2185.582122][ T6016] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2185.743307][ T6016] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2185.747237][ T6016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2185.751095][ T6016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2185.761725][ T6016] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2185.778161][ T6016] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2185.781282][ T6016] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2185.784264][ T6016] usb 5-1: Manufacturer: syz [ 2185.788192][ T6016] usb 5-1: config 0 descriptor?? [ 2186.206255][ T6016] appleir 0003:05AC:8243.0107: unknown main item tag 0x0 [ 2186.217840][ T6016] appleir 0003:05AC:8243.0107: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 2187.333228][ T6016] usb 7-1: USB disconnect, device number 27 [ 2187.340121][ T6016] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 2187.392413][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2187.547779][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 2187.552744][ T24] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 2187.556945][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.569383][ T24] usb 6-1: config 0 descriptor?? [ 2187.573468][T31742] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2187.791678][T31742] binder: 31739:31742 ioctl c0286687 800003c0 returned -22 [ 2187.887788][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 2187.890783][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2187.895255][ T24] usb 6-1: USB disconnect, device number 34 [ 2188.049069][T31749] program syz.2.6747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2188.328098][ T6016] usb 5-1: USB disconnect, device number 33 [ 2188.370095][T31751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6748'. [ 2188.376430][T31751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2188.388767][T31751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2188.405416][T31750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2188.756136][T31755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6749'. [ 2188.975049][T31764] FAULT_INJECTION: forcing a failure. [ 2188.975049][T31764] name failslab, interval 1, probability 0, space 0, times 0 [ 2188.979553][T31764] CPU: 3 UID: 0 PID: 31764 Comm: syz.0.6753 Tainted: G L syzkaller #0 PREEMPT(full) [ 2188.979573][T31764] Tainted: [L]=SOFTLOCKUP [ 2188.979577][T31764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2188.979584][T31764] Call Trace: [ 2188.979589][T31764] [ 2188.979595][T31764] dump_stack_lvl+0x100/0x190 [ 2188.979619][T31764] should_fail_ex.cold+0x5/0xa [ 2188.979639][T31764] should_failslab+0xc2/0x120 [ 2188.979662][T31764] __kvmalloc_node_noprof+0xfa/0xa00 [ 2188.979681][T31764] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 2188.979714][T31764] __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 2188.979741][T31764] ? find_held_lock+0x2b/0x80 [ 2188.979760][T31764] mmu_topup_memory_caches+0x25/0x170 [ 2188.979780][T31764] kvm_mmu_load+0xd6/0x23e0 [ 2188.979810][T31764] ? kvm_deliver_exception_payload+0x129/0x210 [ 2188.979836][T31764] ? __pfx_kvm_mmu_load+0x10/0x10 [ 2188.979859][T31764] ? vmx_inject_exception+0x220/0x470 [ 2188.979882][T31764] ? kvm_check_and_inject_events+0x961/0x10c0 [ 2188.979906][T31764] vcpu_run+0x39f4/0x5ca0 [ 2188.979926][T31764] ? __lock_acquire+0x4a5/0x2630 [ 2188.979956][T31764] ? __pfx_vcpu_run+0x10/0x10 [ 2188.979981][T31764] ? rcu_is_watching+0x12/0xc0 [ 2188.980008][T31764] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 2188.980024][T31764] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 2188.980049][T31764] kvm_vcpu_ioctl+0x730/0x1730 [ 2188.980074][T31764] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2188.980097][T31764] ? tomoyo_path_number_perm+0x188/0x580 [ 2188.980121][T31764] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2188.980150][T31764] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2188.980170][T31764] ? do_vfs_ioctl+0x226/0x13e0 [ 2188.980202][T31764] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2188.980240][T31764] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 2188.980266][T31764] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 2188.980292][T31764] ? __fget_files+0x21f/0x3d0 [ 2188.980313][T31764] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 2188.980331][T31764] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 2188.980350][T31764] __do_fast_syscall_32+0xe3/0x8c0 [ 2188.980365][T31764] do_fast_syscall_32+0x32/0x70 [ 2188.980378][T31764] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2188.980392][T31764] RIP: 0023:0xf708ef6c [ 2188.980403][T31764] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2188.980414][T31764] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2188.980425][T31764] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 2188.980432][T31764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2188.980438][T31764] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2188.980444][T31764] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2188.980451][T31764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2188.980464][T31764] [ 2189.325540][T31770] netlink: 'syz.2.6754': attribute type 9 has an invalid length. [ 2189.328192][T31770] netlink: 'syz.2.6754': attribute type 11 has an invalid length. [ 2189.330834][T31770] netlink: 'syz.2.6754': attribute type 12 has an invalid length. [ 2189.337906][T31770] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.6754'. [ 2189.341164][T31770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6754'. [ 2189.789071][T31792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6763'. [ 2189.795426][T31792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6763'. [ 2189.879933][T31796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2190.311452][T31801] rdma_rxe: rxe_newlink: failed to add lo [ 2190.430264][T31806] rdma_rxe: rxe_newlink: failed to add lo [ 2190.476055][T25764] libceph: connect (1)[c::]:6789 error -101 [ 2190.478615][T25764] libceph: mon0 (1)[c::]:6789 connect error [ 2190.559113][T31808] ceph: No mds server is up or the cluster is laggy [ 2190.718285][T31825] binder: binder_mmap: 31824 80a76000-80a7a000 bad vm_flags failed -1 [ 2190.821296][T31833] syzkaller0: entered promiscuous mode [ 2190.823683][T31833] syzkaller0: entered allmulticast mode [ 2190.854473][T31833] FAULT_INJECTION: forcing a failure. [ 2190.854473][T31833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2190.859955][T31833] CPU: 0 UID: 0 PID: 31833 Comm: syz.2.6776 Tainted: G L syzkaller #0 PREEMPT(full) [ 2190.859984][T31833] Tainted: [L]=SOFTLOCKUP [ 2190.859990][T31833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2190.860000][T31833] Call Trace: [ 2190.860007][T31833] [ 2190.860015][T31833] dump_stack_lvl+0x100/0x190 [ 2190.860045][T31833] should_fail_ex.cold+0x5/0xa [ 2190.860067][T31833] _copy_from_iter+0x1f4/0x1690 [ 2190.860093][T31833] ? _copy_from_iter+0x270/0x1690 [ 2190.860115][T31833] ? __pfx__copy_from_iter+0x10/0x10 [ 2190.860139][T31833] ? __pfx__copy_from_iter+0x10/0x10 [ 2190.860159][T31833] ? _copy_from_iter+0x270/0x1690 [ 2190.860185][T31833] copy_page_from_iter+0xde/0x180 [ 2190.860210][T31833] skb_copy_datagram_from_iter+0x399/0x720 [ 2190.860249][T31833] packet_sendmsg+0x2476/0x53c0 [ 2190.860281][T31833] ? __pfx___might_resched+0x10/0x10 [ 2190.860312][T31833] ? aa_sk_perm+0x309/0xaa0 [ 2190.860335][T31833] ? __pfx_packet_sendmsg+0x10/0x10 [ 2190.860355][T31833] ? __pfx_aa_sk_perm+0x10/0x10 [ 2190.860373][T31833] ? __might_fault+0xc5/0x140 [ 2190.860404][T31833] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2190.860425][T31833] __sys_sendto+0x468/0x4b0 [ 2190.860448][T31833] ? __pfx_packet_sendmsg+0x10/0x10 [ 2190.860469][T31833] ? __pfx___sys_sendto+0x10/0x10 [ 2190.860500][T31833] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2190.860528][T31833] ? fput+0x79/0x100 [ 2190.860548][T31833] ? ksys_write+0x1ac/0x250 [ 2190.860568][T31833] __ia32_sys_sendto+0xdd/0x1b0 [ 2190.860614][T31833] ? __do_fast_syscall_32+0x94/0x8c0 [ 2190.860632][T31833] ? lockdep_hardirqs_on+0x78/0x100 [ 2190.860649][T31833] __do_fast_syscall_32+0xe3/0x8c0 [ 2190.860670][T31833] do_fast_syscall_32+0x32/0x70 [ 2190.860688][T31833] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2190.860710][T31833] RIP: 0023:0xf7f14f6c [ 2190.860725][T31833] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2190.860741][T31833] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 2190.860758][T31833] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 2190.860769][T31833] RDX: 000000000000fce0 RSI: 0000000000000004 RDI: 0000000080000140 [ 2190.860780][T31833] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 2190.860790][T31833] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2190.860799][T31833] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2190.860822][T31833] [ 2191.047105][T31836] rdma_rxe: rxe_newlink: failed to add lo [ 2191.145610][T31831] syzkaller0: entered promiscuous mode [ 2191.148127][T31831] syzkaller0: entered allmulticast mode [ 2191.327744][T31846] rdma_rxe: rxe_newlink: failed to add lo [ 2191.383260][T31848] FAULT_INJECTION: forcing a failure. [ 2191.383260][T31848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2191.389385][T31848] CPU: 3 UID: 0 PID: 31848 Comm: syz.0.6781 Tainted: G L syzkaller #0 PREEMPT(full) [ 2191.389416][T31848] Tainted: [L]=SOFTLOCKUP [ 2191.389422][T31848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2191.389434][T31848] Call Trace: [ 2191.389443][T31848] [ 2191.389452][T31848] dump_stack_lvl+0x100/0x190 [ 2191.389486][T31848] should_fail_ex.cold+0x5/0xa [ 2191.389508][T31848] __kvm_read_guest_page+0x186/0x250 [ 2191.389534][T31848] kvm_fetch_guest_virt+0x128/0x1a0 [ 2191.389563][T31848] __do_insn_fetch_bytes+0x5ef/0x7c0 [ 2191.389587][T31848] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 2191.389608][T31848] ? __pfx_folio_mark_accessed+0x10/0x10 [ 2191.389635][T31848] x86_decode_insn+0x3ca/0x6d80 [ 2191.389672][T31848] ? __pfx_x86_decode_insn+0x10/0x10 [ 2191.389696][T31848] ? vmx_cache_reg+0x54f/0x7b0 [ 2191.389722][T31848] ? init_decode_cache+0xd/0x2a0 [ 2191.389745][T31848] ? init_emulate_ctxt+0x415/0x6d0 [ 2191.389768][T31848] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 2191.389795][T31848] ? kvm_multiple_exception+0x5fb/0x760 [ 2191.389822][T31848] x86_emulate_instruction+0x1dcc/0x1f80 [ 2191.389844][T31848] ? __kvm_get_msr+0x12e/0x470 [ 2191.389868][T31848] ? __pfx___kvm_get_msr+0x10/0x10 [ 2191.389890][T31848] ? kvm_msr_allowed+0x2d0/0x450 [ 2191.389912][T31848] handle_ud+0x103/0x5a0 [ 2191.389931][T31848] ? __pfx_handle_ud+0x10/0x10 [ 2191.389951][T31848] ? vmx_vcpu_enter_exit+0x136/0x1e0 [ 2191.389973][T31848] ? rcu_is_watching+0x12/0xc0 [ 2191.390003][T31848] ? __vmx_complete_interrupts+0x129/0x570 [ 2191.390024][T31848] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2191.390050][T31848] handle_exception_nmi+0xd0c/0x1bb0 [ 2191.390075][T31848] ? __pfx_handle_exception_nmi+0x10/0x10 [ 2191.390095][T31848] vmx_handle_exit+0x84d/0x1f40 [ 2191.390119][T31848] vcpu_run+0x34cf/0x5ca0 [ 2191.390143][T31848] ? __lock_acquire+0x4a5/0x2630 [ 2191.390173][T31848] ? __pfx_vcpu_run+0x10/0x10 [ 2191.390210][T31848] ? rcu_is_watching+0x12/0xc0 [ 2191.390243][T31848] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 2191.390264][T31848] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 2191.390292][T31848] kvm_vcpu_ioctl+0x730/0x1730 [ 2191.390320][T31848] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2191.390347][T31848] ? tomoyo_path_number_perm+0x188/0x580 [ 2191.390374][T31848] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2191.390409][T31848] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2191.390429][T31848] ? do_vfs_ioctl+0x226/0x13e0 [ 2191.390456][T31848] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2191.390495][T31848] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 2191.390521][T31848] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 2191.390548][T31848] ? __fget_files+0x21f/0x3d0 [ 2191.390572][T31848] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 2191.390598][T31848] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 2191.390629][T31848] __do_fast_syscall_32+0xe3/0x8c0 [ 2191.390652][T31848] do_fast_syscall_32+0x32/0x70 [ 2191.390673][T31848] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2191.390697][T31848] RIP: 0023:0xf708ef6c [ 2191.390713][T31848] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2191.390731][T31848] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2191.390751][T31848] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 2191.390763][T31848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2191.390773][T31848] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2191.390784][T31848] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2191.390795][T31848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2191.390820][T31848] [ 2191.800400][T31868] rdma_rxe: rxe_newlink: failed to add lo [ 2191.836386][T31870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6784'. [ 2191.929506][T31873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6787'. [ 2192.005165][T31873] bond3: Unable to set down delay as MII monitoring is disabled [ 2192.020436][T31873] bond3 (unregistering): Released all slaves [ 2192.161659][T21679] lo speed is unknown, defaulting to 1000 [ 2192.329823][T31876] wg2 speed is unknown, defaulting to 1000 [ 2192.935981][T31876] lo speed is unknown, defaulting to 1000 [ 2192.988068][T31886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6791'. [ 2193.055356][T31881] rdma_rxe: rxe_newlink: failed to add lo [ 2193.200676][T31891] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6793'. [ 2193.223633][T31891] FAULT_INJECTION: forcing a failure. [ 2193.223633][T31891] name failslab, interval 1, probability 0, space 0, times 0 [ 2193.229042][T31891] CPU: 1 UID: 0 PID: 31891 Comm: syz.3.6793 Tainted: G L syzkaller #0 PREEMPT(full) [ 2193.229070][T31891] Tainted: [L]=SOFTLOCKUP [ 2193.229077][T31891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2193.229088][T31891] Call Trace: [ 2193.229096][T31891] [ 2193.229104][T31891] dump_stack_lvl+0x100/0x190 [ 2193.229136][T31891] should_fail_ex.cold+0x5/0xa [ 2193.229159][T31891] should_failslab+0xc2/0x120 [ 2193.229181][T31891] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 2193.229209][T31891] ? skb_clone+0x190/0x400 [ 2193.229231][T31891] skb_clone+0x190/0x400 [ 2193.229250][T31891] netlink_deliver_tap+0xaed/0xcc0 [ 2193.229275][T31891] netlink_unicast+0x70c/0x870 [ 2193.229298][T31891] ? __pfx_netlink_unicast+0x10/0x10 [ 2193.229316][T31891] ? __alloc_skb+0x5b7/0x710 [ 2193.229352][T31891] netlink_ack+0x655/0xb80 [ 2193.229378][T31891] netlink_rcv_skb+0x333/0x420 [ 2193.229398][T31891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2193.229418][T31891] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2193.229447][T31891] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2193.229470][T31891] netlink_unicast+0x5aa/0x870 [ 2193.229492][T31891] ? __pfx_netlink_unicast+0x10/0x10 [ 2193.229511][T31891] ? __pfx___might_resched+0x10/0x10 [ 2193.229547][T31891] netlink_sendmsg+0x8b0/0xda0 [ 2193.229570][T31891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2193.229593][T31891] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2193.229618][T31891] __sys_sendto+0x468/0x4b0 [ 2193.229642][T31891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2193.229661][T31891] ? __pfx___sys_sendto+0x10/0x10 [ 2193.229685][T31891] ? __lock_acquire+0x4a5/0x2630 [ 2193.229736][T31891] __ia32_compat_sys_socketcall+0x59a/0x770 [ 2193.229766][T31891] ? __fget_files+0x21f/0x3d0 [ 2193.229784][T31891] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 2193.229817][T31891] ? fput+0x79/0x100 [ 2193.229850][T31891] do_int80_emulation+0x141/0x6b0 [ 2193.229873][T31891] asm_int80_emulation+0x1a/0x20 [ 2193.229897][T31891] RIP: 0023:0xf7135cab [ 2193.229914][T31891] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2193.229930][T31891] RSP: 002b:00000000f53ec34c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 2193.229948][T31891] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f53ec3f4 [ 2193.229959][T31891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2193.229970][T31891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2193.229979][T31891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2193.229989][T31891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2193.230013][T31891] [ 2193.240526][ T5945] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 2193.493375][ T5945] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2193.496433][ T5945] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2193.500071][ T5945] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2193.514482][ T5945] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2193.519580][ T5945] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2193.524476][ T5945] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2193.530745][ T5945] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2193.534403][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2193.537106][ T5945] usb 7-1: Product: syz [ 2193.538614][ T5945] usb 7-1: Manufacturer: syz [ 2193.542741][T31886] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2193.546238][ T5945] cdc_wdm 7-1:1.0: skipping garbage [ 2193.547927][ T5945] cdc_wdm 7-1:1.0: skipping garbage [ 2193.550746][ T5945] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2193.552825][ T5945] cdc_wdm 7-1:1.0: Unknown control protocol [ 2193.753863][ T5945] usb 7-1: USB disconnect, device number 28 [ 2193.949690][T31900] FAULT_INJECTION: forcing a failure. [ 2193.949690][T31900] name failslab, interval 1, probability 0, space 0, times 0 [ 2193.959896][T31900] CPU: 2 UID: 0 PID: 31900 Comm: syz.1.6796 Tainted: G L syzkaller #0 PREEMPT(full) [ 2193.959928][T31900] Tainted: [L]=SOFTLOCKUP [ 2193.959934][T31900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2193.959945][T31900] Call Trace: [ 2193.959956][T31900] [ 2193.959963][T31900] dump_stack_lvl+0x100/0x190 [ 2193.959998][T31900] should_fail_ex.cold+0x5/0xa [ 2193.960021][T31900] should_failslab+0xc2/0x120 [ 2193.960042][T31900] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 2193.960069][T31900] ? skb_clone+0x190/0x400 [ 2193.960091][T31900] skb_clone+0x190/0x400 [ 2193.960109][T31900] netlink_deliver_tap+0xaed/0xcc0 [ 2193.960134][T31900] netlink_unicast+0x70c/0x870 [ 2193.960157][T31900] ? __pfx_netlink_unicast+0x10/0x10 [ 2193.960175][T31900] ? __alloc_skb+0x5b7/0x710 [ 2193.960220][T31900] ? genl_rcv_msg+0x4be/0x800 [ 2193.960249][T31900] netlink_ack+0x655/0xb80 [ 2193.960276][T31900] netlink_rcv_skb+0x333/0x420 [ 2193.960295][T31900] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2193.960318][T31900] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2193.960348][T31900] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2193.960370][T31900] genl_rcv+0x28/0x40 [ 2193.960389][T31900] netlink_unicast+0x5aa/0x870 [ 2193.960411][T31900] ? __pfx_netlink_unicast+0x10/0x10 [ 2193.960441][T31900] netlink_sendmsg+0x8b0/0xda0 [ 2193.960464][T31900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2193.960486][T31900] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2193.960510][T31900] ____sys_sendmsg+0x9e1/0xb70 [ 2193.960530][T31900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2193.960551][T31900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2193.960610][T31900] ___sys_sendmsg+0x190/0x1e0 [ 2193.960635][T31900] ? __pfx____sys_sendmsg+0x10/0x10 [ 2193.960691][T31900] __sys_sendmsg+0x170/0x220 [ 2193.960709][T31900] ? __pfx___sys_sendmsg+0x10/0x10 [ 2193.960746][T31900] ? __pfx_ksys_write+0x10/0x10 [ 2193.960769][T31900] __do_fast_syscall_32+0xe3/0x8c0 [ 2193.960791][T31900] do_fast_syscall_32+0x32/0x70 [ 2193.960810][T31900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2193.960832][T31900] RIP: 0023:0xf70bef6c [ 2193.960847][T31900] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2193.960877][T31900] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2193.960894][T31900] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 2193.960905][T31900] RDX: 0000000000048814 RSI: 0000000000000000 RDI: 0000000000000000 [ 2193.960915][T31900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2193.960925][T31900] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2193.960935][T31900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2193.960959][T31900] [ 2194.092945][T31904] syzkaller0: entered promiscuous mode [ 2194.094767][T31904] syzkaller0: entered allmulticast mode [ 2194.180992][T31905] program syz.0.6797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2194.353727][T31917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6803'. [ 2194.515080][T31924] fuse: Bad value for 'group_id' [ 2194.517125][T31924] fuse: Bad value for 'group_id' [ 2194.793793][T31940] 9pnet_virtio: no channels available for device syz [ 2194.807350][T31940] overlay: Unknown parameter 'subj_role' [ 2194.839812][T31942] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6814'. [ 2194.951655][T21679] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2194.990052][T31944] wg2 speed is unknown, defaulting to 1000 [ 2195.070814][T31944] lo speed is unknown, defaulting to 1000 [ 2195.101649][T21679] usb 6-1: Using ep0 maxpacket: 16 [ 2195.106031][T21679] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2195.109602][T21679] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2195.113875][T21679] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2195.119978][T21679] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2195.124604][T21679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2195.128009][T21679] usb 6-1: Product: syz [ 2195.129690][T21679] usb 6-1: Manufacturer: syz [ 2195.131837][T21679] usb 6-1: SerialNumber: syz [ 2195.766277][T31961] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 2195.768417][T31961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2195.789796][T31961] vhci_hcd vhci_hcd.0: Device attached [ 2196.031629][ T5945] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 2196.382837][T31978] FAULT_INJECTION: forcing a failure. [ 2196.382837][T31978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2196.387068][T31978] CPU: 1 UID: 0 PID: 31978 Comm: syz.2.6824 Tainted: G L syzkaller #0 PREEMPT(full) [ 2196.387088][T31978] Tainted: [L]=SOFTLOCKUP [ 2196.387093][T31978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2196.387113][T31978] Call Trace: [ 2196.387119][T31978] [ 2196.387125][T31978] dump_stack_lvl+0x100/0x190 [ 2196.387148][T31978] should_fail_ex.cold+0x5/0xa [ 2196.387163][T31978] _copy_from_user+0x2e/0xd0 [ 2196.387181][T31978] kstrtouint_from_user+0xd6/0x1d0 [ 2196.387201][T31978] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2196.387219][T31978] ? __lock_acquire+0x4a5/0x2630 [ 2196.387241][T31978] ? lock_acquire+0x1cf/0x380 [ 2196.387260][T31978] proc_fail_nth_write+0x83/0x220 [ 2196.387276][T31978] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2196.387296][T31978] vfs_write+0x2aa/0x1070 [ 2196.387308][T31978] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2196.387325][T31978] ? __pfx_vfs_write+0x10/0x10 [ 2196.387336][T31978] ? find_held_lock+0x2b/0x80 [ 2196.387348][T31978] ? __fget_files+0x215/0x3d0 [ 2196.387363][T31978] ? __fget_files+0x21f/0x3d0 [ 2196.387378][T31978] ksys_write+0x12a/0x250 [ 2196.387390][T31978] ? __pfx_ksys_write+0x10/0x10 [ 2196.387406][T31978] do_int80_emulation+0x141/0x6b0 [ 2196.387423][T31978] asm_int80_emulation+0x1a/0x20 [ 2196.387436][T31978] RIP: 0023:0xf7115cab [ 2196.387446][T31978] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2196.387458][T31978] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2196.387469][T31978] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53d65d0 [ 2196.387477][T31978] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2196.387483][T31978] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2196.387490][T31978] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2196.387497][T31978] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2196.387512][T31978] [ 2197.009620][T31985] program syz.2.6825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2197.755490][T31992] syU: rxe_newlink: already configured on lo [ 2197.766627][T31962] vhci_hcd: connection reset by peer [ 2197.778949][T22274] vhci_hcd vhci_hcd.1: stop threads [ 2197.780701][T22274] vhci_hcd vhci_hcd.1: release socket [ 2197.786109][T22274] vhci_hcd vhci_hcd.1: disconnect device [ 2197.786957][T21679] usb 6-1: 0:2 : does not exist [ 2197.835606][T21679] usb 6-1: USB disconnect, device number 35 [ 2197.865843][T31709] udevd[31709]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2198.311659][T21679] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2198.471790][T21679] usb 5-1: Using ep0 maxpacket: 8 [ 2198.476399][T21679] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2198.479403][T21679] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2198.484468][T21679] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2198.487756][T21679] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2198.491003][T21679] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2198.496235][T21679] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2198.499995][T32008] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2198.521594][T21679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2198.543550][T32010] syzkaller0: entered promiscuous mode [ 2198.545377][T32010] syzkaller0: entered allmulticast mode [ 2198.731869][T21679] usb 5-1: usb_control_msg returned -32 [ 2198.733789][T21679] usbtmc 5-1:16.0: can't read capabilities [ 2198.848932][T32014] rdma_rxe: rxe_newlink: failed to add lo [ 2198.901701][ T6043] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 2198.993156][T32000] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 2198.993763][T21679] usb 5-1: USB disconnect, device number 34 [ 2199.053162][ T6043] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2199.056285][ T6043] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2199.060442][ T6043] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2199.064070][ T6043] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2199.292177][ T6043] usb 7-1: usb_control_msg returned -32 [ 2199.294177][ T6043] usbtmc 7-1:16.0: can't read capabilities [ 2199.411705][T32032] x_tables: duplicate underflow at hook 1 [ 2199.414782][T32032] hub 8-0:1.0: USB hub found [ 2199.417292][T32032] hub 8-0:1.0: 1 port detected [ 2199.506375][T32033] program syz.3.6842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2199.650226][T32034] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_IN returned 88 [ 2199.665072][T32034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2199.668728][T32034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2199.948398][ T6043] usb 7-1: USB disconnect, device number 29 [ 2200.165748][T32048] rdma_rxe: rxe_newlink: failed to add lo [ 2200.197826][T32050] fuse: Unknown parameter '' [ 2200.241692][T25694] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2200.260222][T32052] netlink: 'syz.1.6850': attribute type 13 has an invalid length. [ 2200.264761][T32052] gretap0: refused to change device tx_queue_len [ 2200.267168][T32052] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2200.391637][T25694] usb 5-1: Using ep0 maxpacket: 32 [ 2200.397817][T25694] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2200.401211][T25694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2200.404321][T25694] usb 5-1: Product: syz [ 2200.405687][T25694] usb 5-1: Manufacturer: syz [ 2200.407279][T25694] usb 5-1: SerialNumber: syz [ 2200.410218][T25694] usb 5-1: config 0 descriptor?? [ 2200.415188][T25694] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2200.417929][T25694] dvb-usb: bulk message failed: -22 (4/0) [ 2200.419738][T25694] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2200.423125][T25694] dvb-usb: bulk message failed: -22 (5/0) [ 2200.425002][T25694] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2200.430105][T25694] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2200.433730][T25694] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2200.438400][T25694] usb 5-1: media controller created [ 2200.445127][T25694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2200.457116][T25694] usb 5-1: selecting invalid altsetting 3 [ 2200.459024][T25694] ttusb2: set interface to alts=3 failed [ 2200.479631][T25694] DVB: Unable to find symbol tda10086_attach() [ 2200.483519][T25694] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2200.487638][T25694] dvb-usb: bulk message failed: -22 (4/0) [ 2200.489643][T25694] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2200.496853][T25694] dvb-usb: bulk message failed: -22 (5/0) [ 2200.499690][T25694] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2200.505115][T25694] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2200.618690][T32046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2200.623080][T32046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2200.629880][T28098] usb 5-1: USB disconnect, device number 35 [ 2200.653052][T28098] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2200.799073][T32066] FAULT_INJECTION: forcing a failure. [ 2200.799073][T32066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2200.804752][T32066] CPU: 1 UID: 0 PID: 32066 Comm: syz.2.6855 Tainted: G L syzkaller #0 PREEMPT(full) [ 2200.804771][T32066] Tainted: [L]=SOFTLOCKUP [ 2200.804775][T32066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2200.804782][T32066] Call Trace: [ 2200.804787][T32066] [ 2200.804792][T32066] dump_stack_lvl+0x100/0x190 [ 2200.804815][T32066] should_fail_ex.cold+0x5/0xa [ 2200.804829][T32066] _copy_to_user+0x32/0xd0 [ 2200.804850][T32066] simple_read_from_buffer+0xcb/0x170 [ 2200.804870][T32066] proc_fail_nth_read+0x1af/0x230 [ 2200.804886][T32066] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2200.804902][T32066] ? rw_verify_area+0xce/0x6d0 [ 2200.804919][T32066] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2200.804934][T32066] vfs_read+0x1e4/0xb30 [ 2200.804947][T32066] ? __pfx_vfs_read+0x10/0x10 [ 2200.804956][T32066] ? find_held_lock+0x2b/0x80 [ 2200.804968][T32066] ? __fget_files+0x215/0x3d0 [ 2200.804982][T32066] ? __fget_files+0x21f/0x3d0 [ 2200.804997][T32066] ksys_read+0x12a/0x250 [ 2200.805008][T32066] ? __pfx_ksys_read+0x10/0x10 [ 2200.805023][T32066] do_int80_emulation+0x141/0x6b0 [ 2200.805038][T32066] asm_int80_emulation+0x1a/0x20 [ 2200.805050][T32066] RIP: 0023:0xf7115cab [ 2200.805061][T32066] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2200.805072][T32066] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2200.805083][T32066] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0 [ 2200.805090][T32066] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2200.805098][T32066] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2200.805105][T32066] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2200.805111][T32066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2200.805125][T32066] [ 2200.903421][T32073] rdma_rxe: rxe_newlink: failed to add lo [ 2201.014883][T32079] syz_tun: entered allmulticast mode [ 2201.182227][ T5945] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 2201.193409][T32078] syz_tun: left allmulticast mode [ 2201.201864][T28098] e1000 0000:00:06.0 eth0: Reset adapter [ 2201.248118][T32093] syU: rxe_newlink: already configured on lo [ 2201.255169][T32095] netlink: 'syz.2.6865': attribute type 4 has an invalid length. [ 2201.257715][T32095] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6865'. [ 2201.318780][T32100] FAULT_INJECTION: forcing a failure. [ 2201.318780][T32100] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2201.323417][T32100] CPU: 1 UID: 0 PID: 32100 Comm: syz.0.6867 Tainted: G L syzkaller #0 PREEMPT(full) [ 2201.323438][T32100] Tainted: [L]=SOFTLOCKUP [ 2201.323442][T32100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2201.323448][T32100] Call Trace: [ 2201.323453][T32100] [ 2201.323458][T32100] dump_stack_lvl+0x100/0x190 [ 2201.323480][T32100] should_fail_ex.cold+0x5/0xa [ 2201.323493][T32100] ? prepare_alloc_pages+0x16d/0x5f0 [ 2201.323508][T32100] should_fail_alloc_page+0xeb/0x140 [ 2201.323522][T32100] prepare_alloc_pages+0x1f0/0x5f0 [ 2201.323539][T32100] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 2201.323559][T32100] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 2201.323573][T32100] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 2201.323591][T32100] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2201.323609][T32100] ? rcu_read_unlock+0x2d/0xb0 [ 2201.323630][T32100] ? __asan_memcpy+0x3c/0x60 [ 2201.323649][T32100] ? __pfx_interleave_nid+0x10/0x10 [ 2201.323673][T32100] ? policy_nodemask+0xed/0x4f0 [ 2201.323686][T32100] alloc_pages_mpol+0x1fb/0x550 [ 2201.323700][T32100] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2201.323718][T32100] folio_alloc_mpol_noprof+0x36/0x340 [ 2201.323736][T32100] shmem_alloc_folio+0x135/0x160 [ 2201.323754][T32100] shmem_alloc_and_add_folio+0x371/0xd40 [ 2201.323778][T32100] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2201.323799][T32100] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 2201.323819][T32100] ? __bpf_trace_sched_exit_tp+0x90/0xc0 [ 2201.323841][T32100] shmem_get_folio_gfp+0x6ab/0x1900 [ 2201.323865][T32100] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 2201.323887][T32100] ? fault_in_readable+0x118/0x190 [ 2201.323906][T32100] shmem_write_begin+0x1a4/0x420 [ 2201.323928][T32100] ? __pfx_shmem_write_begin+0x10/0x10 [ 2201.323949][T32100] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 2201.323968][T32100] generic_perform_write+0x292/0xa40 [ 2201.323992][T32100] ? __pfx_generic_perform_write+0x10/0x10 [ 2201.324014][T32100] ? file_update_time_flags+0x373/0x500 [ 2201.324032][T32100] shmem_file_write_iter+0x10e/0x140 [ 2201.324048][T32100] vfs_write+0x6ac/0x1070 [ 2201.324061][T32100] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 2201.324077][T32100] ? __pfx_vfs_write+0x10/0x10 [ 2201.324099][T32100] ksys_write+0x12a/0x250 [ 2201.324111][T32100] ? __pfx_ksys_write+0x10/0x10 [ 2201.324124][T32100] ? __pfx_ksys_write+0x10/0x10 [ 2201.324139][T32100] __do_fast_syscall_32+0xe3/0x8c0 [ 2201.324156][T32100] do_fast_syscall_32+0x32/0x70 [ 2201.324170][T32100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2201.324185][T32100] RIP: 0023:0xf708ef6c [ 2201.324197][T32100] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2201.324208][T32100] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 2201.324221][T32100] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 2201.324228][T32100] RDX: 000000000208e24b RSI: 0000000000000000 RDI: 0000000000000000 [ 2201.324235][T32100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2201.324246][T32100] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2201.324253][T32100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2201.324268][T32100] [ 2201.492436][T21679] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 2201.651697][T21679] usb 8-1: Using ep0 maxpacket: 32 [ 2201.655344][T21679] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2201.658169][T21679] usb 8-1: config 0 has no interface number 0 [ 2201.660671][T21679] usb 8-1: config 0 interface 1 has no altsetting 0 [ 2201.665573][T21679] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2201.669105][T21679] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.672851][T21679] usb 8-1: Product: syz [ 2201.674594][T21679] usb 8-1: Manufacturer: syz [ 2201.676479][T21679] usb 8-1: SerialNumber: syz [ 2201.680604][T21679] usb 8-1: config 0 descriptor?? [ 2201.686027][T21679] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2201.689239][T21679] usb 8-1: selecting invalid altsetting 1 [ 2201.691658][T21679] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2201.697008][T21679] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2201.701273][T21679] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2201.704739][T21679] usb 8-1: media controller created [ 2201.713716][T21679] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2201.891381][T32082] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 2201.895855][T21679] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 2201.898076][T21679] zl10353_read_register: readreg error (reg=127, ret==-32) [ 2201.900354][T21679] usb 8-1: selecting invalid altsetting 0 [ 2201.902277][T21679] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2202.150725][T32082] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2202.155980][T21679] usb 8-1: USB disconnect, device number 64 [ 2203.333831][T28098] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 2211.776278][T32139] wg2 speed is unknown, defaulting to 1000 [ 2211.831317][T32142] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6871'. [ 2212.012456][T32139] lo speed is unknown, defaulting to 1000 [ 2212.881973][T32162] syU: rxe_newlink: already configured on lo [ 2212.883289][T32160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6875'. [ 2213.197476][T32178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6881'. [ 2213.264406][T32182] 9p: Bad value for 'rfdno' [ 2213.461699][T28098] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 2213.535004][T32196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6887'. [ 2213.611770][T28098] usb 8-1: Using ep0 maxpacket: 16 [ 2213.615121][T28098] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 2213.617932][T28098] usb 8-1: config 234 contains an unexpected descriptor of type 0x1, skipping [ 2213.621025][T28098] usb 8-1: config 234 has an invalid descriptor of length 140, skipping remainder of the config [ 2213.625147][T28098] usb 8-1: config 234 has no interfaces? [ 2213.628675][T28098] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 2213.632270][T28098] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2213.634859][T28098] usb 8-1: Product: syz [ 2213.636234][T28098] usb 8-1: Manufacturer: syz [ 2213.637724][T28098] usb 8-1: SerialNumber: syz [ 2214.053720][T32180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2214.056959][T32180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2214.068822][T32180] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6883'. [ 2214.072604][T32180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6883'. [ 2214.091075][T32180] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6883'. [ 2214.471761][T15115] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2214.477586][T32206] FAULT_INJECTION: forcing a failure. [ 2214.477586][T32206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2214.485297][T32206] CPU: 1 UID: 0 PID: 32206 Comm: syz.1.6889 Tainted: G L syzkaller #0 PREEMPT(full) [ 2214.485328][T32206] Tainted: [L]=SOFTLOCKUP [ 2214.485334][T32206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2214.485346][T32206] Call Trace: [ 2214.485353][T32206] [ 2214.485360][T32206] dump_stack_lvl+0x100/0x190 [ 2214.485394][T32206] should_fail_ex.cold+0x5/0xa [ 2214.485417][T32206] _copy_from_iter+0x1f4/0x1690 [ 2214.485447][T32206] ? __asan_memset+0x23/0x50 [ 2214.485475][T32206] ? __pfx__copy_from_iter+0x10/0x10 [ 2214.485498][T32206] ? __pfx___alloc_skb+0x10/0x10 [ 2214.485538][T32206] netlink_sendmsg+0x808/0xda0 [ 2214.485566][T32206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2214.485589][T32206] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2214.485615][T32206] ____sys_sendmsg+0x9e1/0xb70 [ 2214.485637][T32206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2214.485658][T32206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2214.485694][T32206] ___sys_sendmsg+0x190/0x1e0 [ 2214.485720][T32206] ? __pfx____sys_sendmsg+0x10/0x10 [ 2214.485774][T32206] __sys_sendmsg+0x170/0x220 [ 2214.485792][T32206] ? __pfx___sys_sendmsg+0x10/0x10 [ 2214.485830][T32206] ? __pfx_ksys_write+0x10/0x10 [ 2214.485856][T32206] __do_fast_syscall_32+0xe3/0x8c0 [ 2214.485880][T32206] do_fast_syscall_32+0x32/0x70 [ 2214.485902][T32206] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2214.485923][T32206] RIP: 0023:0xf70bef6c [ 2214.485939][T32206] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2214.485956][T32206] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2214.485975][T32206] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 2214.485987][T32206] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 2214.485998][T32206] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2214.486010][T32206] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2214.486021][T32206] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2214.486046][T32206] [ 2214.663247][T15115] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2214.668120][T15115] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2214.673110][T15115] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2214.677209][T15115] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2214.684282][T15115] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2214.688300][T15115] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2214.692486][T15115] usb 5-1: Manufacturer: syz [ 2214.698012][T15115] usb 5-1: config 0 descriptor?? [ 2215.116240][T15115] appleir 0003:05AC:8243.0108: unknown main item tag 0x0 [ 2215.125094][T15115] appleir 0003:05AC:8243.0108: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 2215.375830][T15115] usb 5-1: USB disconnect, device number 36 [ 2215.934447][T32214] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 2216.213016][T28098] usb 8-1: USB disconnect, device number 65 [ 2216.520606][T32231] comedi comedi0: Minor 3 could not be opened [ 2216.603419][T32229] sch_tbf: peakrate 4582672237978134068 is lower than or equals to rate 15615280932789253693 ! syzkaller syzkaller login: [ 2217.407463][ T40] kauditd_printk_skb: 262 callbacks suppressed [ 2217.407480][ T40] audit: type=1326 audit(2000000753.174:30682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32244 comm="syz.0.6898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2217.418725][ T40] audit: type=1326 audit(2000000753.174:30683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32244 comm="syz.0.6898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2217.427797][ T40] audit: type=1326 audit(2000000753.194:30684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32244 comm="syz.0.6898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2217.439927][ T40] audit: type=1326 audit(2000000753.194:30685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32244 comm="syz.0.6898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2217.452838][ T40] audit: type=1326 audit(2000000753.194:30686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32244 comm="syz.0.6898" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2217.452890][ T40] audit: type=1326 audit(2000000753.204:30687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32244 comm="syz.0.6898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2217.470027][ T40] audit: type=1326 audit(2000000753.204:30688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32244 comm="syz.0.6898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2217.478887][ T40] audit: type=1326 audit(2000000753.214:30689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32244 comm="syz.0.6898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2217.487379][ T40] audit: type=1326 audit(2000000753.214:30690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32244 comm="syz.0.6898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2217.496384][ T40] audit: type=1326 audit(2000000753.214:30691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32244 comm="syz.0.6898" exe="/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 2218.303471][T32268] syz.1.6904 (32268): drop_caches: 2 [ 2218.842103][ T6043] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 2218.857426][T32273] FAULT_INJECTION: forcing a failure. [ 2218.857426][T32273] name failslab, interval 1, probability 0, space 0, times 0 [ 2218.862717][T32273] CPU: 1 UID: 0 PID: 32273 Comm: syz.0.6906 Tainted: G L syzkaller #0 PREEMPT(full) [ 2218.862747][T32273] Tainted: [L]=SOFTLOCKUP [ 2218.862754][T32273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2218.862764][T32273] Call Trace: [ 2218.862771][T32273] [ 2218.862778][T32273] dump_stack_lvl+0x100/0x190 [ 2218.862811][T32273] should_fail_ex.cold+0x5/0xa [ 2218.862834][T32273] should_failslab+0xc2/0x120 [ 2218.862853][T32273] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 2218.862879][T32273] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 2218.862906][T32273] kmemdup_nul+0x49/0xd0 [ 2218.862926][T32273] vfs_parse_fs_qstr+0x112/0x1c0 [ 2218.862948][T32273] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 2218.862969][T32273] ? rcu_is_watching+0x12/0xc0 [ 2218.862999][T32273] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 2218.863017][T32273] ? v9fs_init_fs_context+0x133/0x590 [ 2218.863067][T32273] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 2218.863080][T32273] vfs_parse_monolithic_sep+0x195/0x210 [ 2218.863096][T32273] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 2218.863111][T32273] ? v9fs_init_fs_context+0x43d/0x590 [ 2218.863123][T32273] ? alloc_fs_context+0x65a/0xf40 [ 2218.863139][T32273] path_mount+0x77f/0x23d0 [ 2218.863157][T32273] ? __pfx_path_mount+0x10/0x10 [ 2218.863169][T32273] ? lockdep_hardirqs_on+0x78/0x100 [ 2218.863183][T32273] ? putname+0xb1/0x110 [ 2218.863195][T32273] ? kmem_cache_free+0x124/0x6a0 [ 2218.863216][T32273] ? __ia32_sys_mount+0x292/0x310 [ 2218.863229][T32273] __ia32_sys_mount+0x292/0x310 [ 2218.863244][T32273] ? __pfx___ia32_sys_mount+0x10/0x10 [ 2218.863262][T32273] __do_fast_syscall_32+0xe3/0x8c0 [ 2218.863277][T32273] do_fast_syscall_32+0x32/0x70 [ 2218.863290][T32273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2218.863305][T32273] RIP: 0023:0xf708ef6c [ 2218.863315][T32273] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2218.863327][T32273] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 2218.863338][T32273] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 2218.863345][T32273] RDX: 0000000080004500 RSI: 0000000000000000 RDI: 0000000080000100 [ 2218.863351][T32273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2218.863358][T32273] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2218.863364][T32273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2218.863379][T32273] [ 2219.111654][ T6043] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2219.114693][ T6043] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.117258][ T6043] usb 7-1: Product: syz [ 2219.118610][ T6043] usb 7-1: Manufacturer: syz [ 2219.120183][ T6043] usb 7-1: SerialNumber: syz [ 2219.130009][T32280] FAULT_INJECTION: forcing a failure. [ 2219.130009][T32280] name failslab, interval 1, probability 0, space 0, times 0 [ 2219.134609][T32280] CPU: 2 UID: 0 PID: 32280 Comm: syz.0.6908 Tainted: G L syzkaller #0 PREEMPT(full) [ 2219.134629][T32280] Tainted: [L]=SOFTLOCKUP [ 2219.134633][T32280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2219.134640][T32280] Call Trace: [ 2219.134644][T32280] [ 2219.134649][T32280] dump_stack_lvl+0x100/0x190 [ 2219.134672][T32280] should_fail_ex.cold+0x5/0xa [ 2219.134686][T32280] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2219.134704][T32280] should_failslab+0xc2/0x120 [ 2219.134719][T32280] __kmalloc_noprof+0xe0/0x850 [ 2219.134739][T32280] tomoyo_realpath_from_path+0xb6/0x690 [ 2219.134759][T32280] tomoyo_path_number_perm+0x23c/0x580 [ 2219.134779][T32280] ? tomoyo_path_number_perm+0x22e/0x580 [ 2219.134794][T32280] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2219.134822][T32280] ? find_held_lock+0x2b/0x80 [ 2219.134833][T32280] ? hook_file_ioctl_common+0x146/0x410 [ 2219.134848][T32280] ? __fget_files+0x215/0x3d0 [ 2219.134862][T32280] ? __fget_files+0x21f/0x3d0 [ 2219.134875][T32280] security_file_ioctl_compat+0xd3/0x230 [ 2219.134892][T32280] __ia32_compat_sys_ioctl+0xc2/0x360 [ 2219.134911][T32280] __do_fast_syscall_32+0xe3/0x8c0 [ 2219.134927][T32280] do_fast_syscall_32+0x32/0x70 [ 2219.134939][T32280] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2219.134956][T32280] RIP: 0023:0xf708ef6c [ 2219.134966][T32280] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2219.134977][T32280] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2219.134989][T32280] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040044160 [ 2219.134996][T32280] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 2219.135003][T32280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2219.135009][T32280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2219.135016][T32280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2219.135030][T32280] [ 2219.135034][T32280] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2219.332886][T32286] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6911'. [ 2219.366060][T25764] IPVS: starting estimator thread 0... [ 2219.451777][T32288] IPVS: using max 26 ests per chain, 62400 per kthread [ 2219.547069][ T6043] rtl8150 7-1:1.0: couldn't reset the device [ 2219.549499][ T6043] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 2219.559738][ T6043] usb 7-1: USB disconnect, device number 30 [ 2220.441625][ T9] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 2220.452425][T32301] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6915'. [ 2220.485309][T32301] netlink: 'syz.0.6915': attribute type 89 has an invalid length. [ 2220.488329][T32301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6915'. [ 2220.585250][ T9] usb 6-1: device descriptor read/64, error -71 [ 2220.821623][ T9] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 2220.901591][ T5945] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2220.951622][ T9] usb 6-1: device descriptor read/64, error -71 [ 2221.062388][ T9] usb usb6-port1: attempt power cycle [ 2221.101611][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 2221.104767][ T5945] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 2221.107556][ T5945] usb 5-1: config 0 has no interface number 0 [ 2221.111597][ T5945] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2221.114626][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2221.117248][ T5945] usb 5-1: Product: syz [ 2221.118681][ T5945] usb 5-1: Manufacturer: syz [ 2221.130696][ T5945] usb 5-1: SerialNumber: syz [ 2221.140229][ T5945] usb 5-1: config 0 descriptor?? [ 2221.145258][ T5945] hub 5-1:0.132: bad descriptor, ignoring hub [ 2221.147316][ T5945] hub 5-1:0.132: probe with driver hub failed with error -5 [ 2221.159441][ T5945] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.132/input/input169 [ 2221.401683][ T9] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 2221.422032][ T9] usb 6-1: device descriptor read/8, error -71 [ 2221.671615][ T9] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 2221.692079][ T9] usb 6-1: device descriptor read/8, error -71 [ 2221.801911][ T9] usb usb6-port1: unable to enumerate USB device [ 2222.219943][T32316] FAULT_INJECTION: forcing a failure. [ 2222.219943][T32316] name failslab, interval 1, probability 0, space 0, times 0 [ 2222.224260][T32316] CPU: 3 UID: 0 PID: 32316 Comm: syz.0.6919 Tainted: G L syzkaller #0 PREEMPT(full) [ 2222.224279][T32316] Tainted: [L]=SOFTLOCKUP [ 2222.224283][T32316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2222.224291][T32316] Call Trace: [ 2222.224296][T32316] [ 2222.224302][T32316] dump_stack_lvl+0x100/0x190 [ 2222.224325][T32316] should_fail_ex.cold+0x5/0xa [ 2222.224340][T32316] should_failslab+0xc2/0x120 [ 2222.224353][T32316] __kmalloc_cache_noprof+0x7a/0x6f0 [ 2222.224370][T32316] ? sctp_add_bind_addr+0xae/0x3e0 [ 2222.224391][T32316] sctp_add_bind_addr+0xae/0x3e0 [ 2222.224411][T32316] sctp_copy_local_addr_list+0x349/0x550 [ 2222.224425][T32316] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2222.224459][T32316] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 2222.224472][T32316] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2222.224486][T32316] sctp_bind_addr_copy+0xe0/0x530 [ 2222.224508][T32316] sctp_connect_new_asoc+0x1c9/0x770 [ 2222.224524][T32316] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2222.224540][T32316] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2222.224555][T32316] __sctp_connect+0x3e7/0xc70 [ 2222.224572][T32316] ? __pfx___sctp_connect+0x10/0x10 [ 2222.224592][T32316] __sctp_setsockopt_connectx+0x100/0x190 [ 2222.224609][T32316] sctp_getsockopt+0x3e86/0x7080 [ 2222.224625][T32316] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2222.224641][T32316] ? __pfx__kstrtoull+0x10/0x10 [ 2222.224661][T32316] ? __pfx_sctp_getsockopt+0x10/0x10 [ 2222.224678][T32316] ? __lock_acquire+0x4a5/0x2630 [ 2222.224698][T32316] ? __pfx___might_resched+0x10/0x10 [ 2222.224719][T32316] ? aa_sk_perm+0x309/0xaa0 [ 2222.224735][T32316] ? __pfx_aa_sk_perm+0x10/0x10 [ 2222.224750][T32316] ? __lock_acquire+0x4a5/0x2630 [ 2222.224764][T32316] ? find_held_lock+0x2b/0x80 [ 2222.224777][T32316] ? aa_sock_opt_perm+0xfe/0x1b0 [ 2222.224798][T32316] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2222.224812][T32316] do_sock_getsockopt+0x259/0x3d0 [ 2222.224826][T32316] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2222.224847][T32316] __sys_getsockopt+0x133/0x1d0 [ 2222.224870][T32316] ? ksys_write+0x1ac/0x250 [ 2222.224884][T32316] ? __ia32_sys_getsockopt+0xbc/0x160 [ 2222.224901][T32316] __ia32_sys_getsockopt+0xbc/0x160 [ 2222.224919][T32316] ? __do_fast_syscall_32+0x94/0x8c0 [ 2222.224931][T32316] ? lockdep_hardirqs_on+0x78/0x100 [ 2222.224943][T32316] __do_fast_syscall_32+0xe3/0x8c0 [ 2222.224957][T32316] do_fast_syscall_32+0x32/0x70 [ 2222.224970][T32316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2222.224985][T32316] RIP: 0023:0xf708ef6c [ 2222.224995][T32316] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2222.225006][T32316] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 2222.225017][T32316] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 2222.225024][T32316] RDX: 000000000000006f RSI: 0000000080000200 RDI: 0000000080000140 [ 2222.225031][T32316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2222.225037][T32316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2222.225044][T32316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2222.225058][T32316] [ 2222.415061][T32318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6920'. [ 2222.418946][T32318] openvswitch: netlink: IP tunnel dst address not specified [ 2222.624118][ T5334] usb 5-1: reset high-speed USB device number 37 using dummy_hcd [ 2222.639817][ T5334] usb 5-1: device reset changed ep0 maxpacket size! [ 2222.645713][T15115] usb 5-1: USB disconnect, device number 37 [ 2222.812008][T15115] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2222.946576][T32326] comedi comedi0: Minor 3 could not be opened [ 2222.971601][T15115] usb 5-1: Using ep0 maxpacket: 8 [ 2222.975874][T15115] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2222.983439][T15115] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2222.996829][T15115] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2223.001668][T15115] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2223.006567][T15115] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2223.010463][T15115] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2223.287037][T15115] usb 5-1: GET_CAPABILITIES returned 0 [ 2223.289666][T15115] usbtmc 5-1:16.0: can't read capabilities [ 2223.464797][T32320] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6921'. [ 2223.467596][T32320] openvswitch: netlink: Tunnel attr 0 has unexpected len 65 expected 8 [ 2223.475151][ T24] usb 5-1: USB disconnect, device number 38 [ 2223.839955][T32331] ALSA: mixer_oss: invalid OSS volume '' [ 2224.298673][T32360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6933'. [ 2224.404190][T32364] FAULT_INJECTION: forcing a failure. [ 2224.404190][T32364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2224.408668][T32364] CPU: 0 UID: 0 PID: 32364 Comm: syz.1.6934 Tainted: G L syzkaller #0 PREEMPT(full) [ 2224.408688][T32364] Tainted: [L]=SOFTLOCKUP [ 2224.408692][T32364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2224.408699][T32364] Call Trace: [ 2224.408704][T32364] [ 2224.408709][T32364] dump_stack_lvl+0x100/0x190 [ 2224.408731][T32364] should_fail_ex.cold+0x5/0xa [ 2224.408746][T32364] strncpy_from_user+0x3b/0x2d0 [ 2224.408764][T32364] path_removexattrat+0xc8/0x5f0 [ 2224.408778][T32364] ? __pfx_path_removexattrat+0x10/0x10 [ 2224.408800][T32364] ? fput+0x79/0x100 [ 2224.408815][T32364] ? ksys_write+0x1ac/0x250 [ 2224.408826][T32364] ? __pfx_ksys_write+0x10/0x10 [ 2224.408839][T32364] __ia32_sys_removexattr+0x59/0x80 [ 2224.408855][T32364] __do_fast_syscall_32+0xe3/0x8c0 [ 2224.408870][T32364] do_fast_syscall_32+0x32/0x70 [ 2224.408883][T32364] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2224.408901][T32364] RIP: 0023:0xf70bef6c [ 2224.408912][T32364] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2224.408923][T32364] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 00000000000000eb [ 2224.408934][T32364] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000140 [ 2224.408941][T32364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2224.408947][T32364] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2224.408953][T32364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2224.408960][T32364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2224.408974][T32364] [ 2224.899992][T32374] 9pnet_virtio: no channels available for device syz [ 2224.921012][T32374] overlayfs: failed to resolve './file0:/': -2 [ 2225.190711][ T40] kauditd_printk_skb: 81 callbacks suppressed [ 2225.190734][ T40] audit: type=1400 audit(2000000760.994:30773): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A56450A50302D302D343A2050434D20506C61796261636B20302D302D34203A20534C4156450A50302D302D353A2050434D204361707475726520302D302D35203A20534C4156450A50302D302D363A2050434D20506C61796261636B20302D302D36203A20534C4156450A50302D302D373A2050434D204361707475726520302D302D37203A20534C4156450A50302D302D383A2050434D20506C61796261636B20302D302D38203A20534C4156450A50302D302D393A2050434D204361707475726520302D302D39203A20534C4156450A50302D302D31303A2050434D20506C61796261636B20302D302D3130 pid=32375 comm="syz.0.6938" [ 2225.318574][T32379] sp0: Synchronizing with TNC [ 2225.347776][T32383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6941'. [ 2225.571614][T25764] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 2225.721663][T25764] usb 7-1: Using ep0 maxpacket: 16 [ 2225.728645][T25764] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 2225.732752][T25764] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.736237][T25764] usb 7-1: Product: syz [ 2225.738099][T25764] usb 7-1: Manufacturer: syz [ 2225.740038][T25764] usb 7-1: SerialNumber: syz [ 2225.976369][T25764] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 2225.994872][T25764] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2226.004844][T25764] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 2226.013231][T25764] usb 7-1: media controller created [ 2226.032489][T25764] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2226.048118][T25764] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2226.071787][T25764] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 2226.077008][T25764] usb 7-1: USB disconnect, device number 31 [ 2226.146279][T32378] [U] `` [ 2226.343662][T32406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6946'. [ 2226.454884][T32411] netlink: 'syz.3.6950': attribute type 10 has an invalid length. [ 2226.458834][T32411] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6950'. [ 2226.555424][T32416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6951'. [ 2226.632147][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.703329][T32431] program syz.2.6954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2228.379329][T32448] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.741059][T32448] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.228390][T32448] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.320894][T32448] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.488890][T22274] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.547588][T22274] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.563444][T22274] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.597173][T22274] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2229.704298][T32480] syz.1.6969 (32480): drop_caches: 2 [ 2229.722818][T32474] netlink: 'syz.3.6968': attribute type 10 has an invalid length. [ 2229.725425][T32474] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6968'. [ 2229.780169][T32482] netlink: 'syz.3.6968': attribute type 2 has an invalid length. [ 2229.854966][T32490] policy can only be matched on NF_INET_PRE_ROUTING [ 2229.854982][T32490] unable to load match [ 2230.372380][T32494] overlayfs: failed to resolve 'fsuuid=ab54e504-4aVc-7661-c753-2R': -2 [ 2230.405270][T32497] block device autoloading is deprecated and will be removed. [ 2232.107705][T32524] comedi comedi0: Minor 5 could not be opened [ 2233.469050][T32532] rdma_rxe: rxe_newlink: failed to add lo [ 2233.742099][ T24] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 2233.891940][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 2233.895293][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2233.899008][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2233.902745][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2233.905973][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 2233.909830][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2233.914529][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2233.917488][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.928679][ T24] usbtmc 8-1:16.0: probe with driver usbtmc failed with error -22 [ 2234.062352][T32540] mac80211_hwsim hwsim32 .: renamed from wlan1 [ 2234.836220][T32553] fuse: Bad value for 'fd' [ 2235.333524][T32561] comedi comedi0: Minor 5 could not be opened [ 2236.523890][ T6043] usb 8-1: USB disconnect, device number 66 [ 2236.812474][T32584] netlink: 'syz.2.6997': attribute type 1 has an invalid length. [ 2236.931604][ T6043] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 2237.091637][ T6043] usb 8-1: Using ep0 maxpacket: 16 [ 2237.097396][ T6043] usb 8-1: config 9 has an invalid interface number: 185 but max is 1 [ 2237.100193][ T6043] usb 8-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 2237.103873][ T6043] usb 8-1: config 9 has an invalid interface number: 29 but max is 1 [ 2237.106822][ T6043] usb 8-1: config 9 has no interface number 0 [ 2237.108968][ T6043] usb 8-1: config 9 has no interface number 1 [ 2237.111123][ T6043] usb 8-1: config 9 interface 185 altsetting 5 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 2237.115355][ T6043] usb 8-1: config 9 interface 185 altsetting 5 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 2237.119104][ T6043] usb 8-1: config 9 interface 185 has no altsetting 0 [ 2237.121919][ T6043] usb 8-1: config 9 interface 29 has no altsetting 0 [ 2237.127047][ T6043] usb 8-1: Dual-Role OTG device on HNP port [ 2237.129693][ T6043] usb 8-1: New USB device found, idVendor=0499, idProduct=100f, bcdDevice=f5.1e [ 2237.133375][ T6043] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2237.136107][ T6043] usb 8-1: Product: 䟽 [ 2237.137570][ T6043] usb 8-1: Manufacturer: 堾꾿᫏妖뇡㔝锥籊㮠ᜢ㋙链⏡孇蹜ᦕ媚칉쏬瘪ꘇᦔ㾖觮쀙嘺ቖ䤆栒Ⓞ [ 2237.142012][ T6043] usb 8-1: SerialNumber: 朼Ԓ䵚魌ⵄ씜⌅웣Ⓠ⎧﷖Պꐵっ몍􇸅놷珸蟚鰋₮⮼阂쒦ꦬ쇿麩⥑슫隸濆뮡慚㒃ࢅʮﻄ䀍퓃鑃⛎밌䫍팓읲狫咍⳩琸⋋ﺤ뉲蛫퍙Ȯ䢫鈹Ⲣ㨌傐㬐㳞潃懵ꇬኜ [ 2237.561050][T32589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6995'. [ 2237.881616][T28098] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 2238.033479][T28098] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 2238.037067][T28098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2238.042620][T28098] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2238.046582][T28098] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2238.050342][T28098] usb 7-1: Manufacturer: syz [ 2238.054833][T28098] usb 7-1: config 0 descriptor?? [ 2238.121592][T28098] rc_core: IR keymap rc-hauppauge not found [ 2238.124307][T28098] Registered IR keymap rc-empty [ 2238.128143][T28098] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 2238.134328][T28098] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input170 [ 2238.210482][T32578] syzkaller1: entered promiscuous mode [ 2238.213307][T32578] syzkaller1: entered allmulticast mode [ 2238.269655][T25694] usb 7-1: USB disconnect, device number 32 [ 2238.330350][ T6043] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 2238.335767][ T6043] snd-usb-audio 8-1:9.185: probe with driver snd-usb-audio failed with error -2 [ 2238.343053][ T6043] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 2238.361064][ T6043] snd-usb-audio 8-1:9.29: probe with driver snd-usb-audio failed with error -2 [ 2238.368121][ T6043] usb 8-1: USB disconnect, device number 67 [ 2238.394243][T32143] udevd[32143]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:9.29/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2238.969525][T32608] netlink: 'syz.2.7003': attribute type 8 has an invalid length. [ 2239.098148][T32614] comedi comedi0: Minor 5 could not be opened [ 2239.255500][T32616] 9pnet_virtio: no channels available for device syz [ 2240.013347][ T40] audit: type=1326 audit(2000001031.832:30774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.2.7006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 2240.020784][ T40] audit: type=1326 audit(2000001031.832:30775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.2.7006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 2240.231654][ T40] audit: type=1326 audit(2000001031.982:30776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.2.7006" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 2240.240376][ T40] audit: type=1326 audit(2000001031.982:30777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.2.7006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 2240.247687][ T40] audit: type=1326 audit(2000001031.982:30778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.2.7006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 2240.256302][ T40] audit: type=1326 audit(2000001032.022:30779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.2.7006" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7115cab code=0x7ffc0000 [ 2240.267747][ T40] audit: type=1326 audit(2000001032.022:30780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.2.7006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 2240.278725][ T40] audit: type=1326 audit(2000001032.022:30781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.2.7006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 2240.286429][ T40] audit: type=1326 audit(2000001032.022:30782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.2.7006" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 2240.299520][ T40] audit: type=1326 audit(2000001032.022:30783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32618 comm="syz.2.7006" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 2241.087996][T32626] wg2 speed is unknown, defaulting to 1000 [ 2241.522666][T32638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7011'. [ 2241.716962][T32632] x_tables: duplicate underflow at hook 1 [ 2241.946743][T32652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2241.951671][T32626] lo speed is unknown, defaulting to 1000 [ 2242.100711][T32659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7019'. [ 2242.103868][T32659] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7019'. [ 2243.219585][T15072] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2243.230245][T15072] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2243.234057][T15072] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2243.237980][T15072] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2243.240680][T15072] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2243.261249][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2243.263942][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2243.266979][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2243.270573][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2243.288867][T32670] bridge2: entered promiscuous mode [ 2243.290720][T32670] bridge2: entered allmulticast mode [ 2243.294049][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2243.301069][T32670] team0: Port device bridge2 added [ 2243.328039][T32669] bridge0: port 1(team0) entered blocking state [ 2243.331189][T32669] bridge0: port 1(team0) entered disabled state [ 2243.355257][T32669] team0: entered allmulticast mode [ 2243.379121][T32669] team0: entered promiscuous mode [ 2243.437354][T32671] wg2 speed is unknown, defaulting to 1000 [ 2243.793680][T29652] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2243.873466][T32671] lo speed is unknown, defaulting to 1000 [ 2243.909510][T29652] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2243.993113][T29652] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2244.000233][T32695] netlink: 'syz.2.7028': attribute type 1 has an invalid length. [ 2244.073939][T29652] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2244.239054][T32671] chnl_net:caif_netlink_parms(): no params data found [ 2244.882245][T29652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2244.890044][T29652] bond0 (unregistering): (slave c@0): Releasing backup interface [ 2244.895517][T29652] bond0 (unregistering): Released all slaves [ 2244.915743][T29652] bond1 (unregistering): (slave veth11): Releasing active interface [ 2244.924054][T29652] bond1 (unregistering): Released all slaves [ 2244.946636][T29652] bond2 (unregistering): Released all slaves [ 2245.075978][T29652] tipc: Left network mode [ 2245.260474][T32724] 9pnet_virtio: no channels available for device syz [ 2245.332025][T15072] Bluetooth: hci3: command tx timeout [ 2245.488732][T32671] bridge0: port 1(bridge_slave_0) entered blocking state [ 2245.492527][T32671] bridge0: port 1(bridge_slave_0) entered disabled state [ 2245.495801][T32671] bridge_slave_0: entered allmulticast mode [ 2245.499822][T32671] bridge_slave_0: entered promiscuous mode [ 2245.534219][T32671] bridge0: port 2(bridge_slave_1) entered blocking state [ 2245.544007][T32671] bridge0: port 2(bridge_slave_1) entered disabled state [ 2245.547226][T32671] bridge_slave_1: entered allmulticast mode [ 2245.560161][T32671] bridge_slave_1: entered promiscuous mode [ 2245.727513][T32671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2245.744396][T32671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2245.782473][T32671] team0: Port device team_slave_0 added [ 2245.785727][T32671] team0: Port device team_slave_1 added [ 2245.800873][T32671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2245.804100][T32671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2245.813283][T32671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2245.818451][T32671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2245.821110][T32671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2245.830140][T32671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2245.855416][T32671] hsr_slave_0: entered promiscuous mode [ 2245.857890][T32671] hsr_slave_1: entered promiscuous mode [ 2245.860367][T32671] debugfs: 'hsr0' already exists in 'hsr' [ 2245.864844][T32671] Cannot create hsr debugfs directory [ 2246.156712][T32760] 9pnet_virtio: no channels available for device syz [ 2246.286106][T29652] hsr_slave_0: left promiscuous mode [ 2246.288402][T29652] hsr_slave_1: left promiscuous mode [ 2246.290639][T29652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2246.293663][T29652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2246.296838][T29652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2246.299257][T29652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2246.306943][T29652] veth1_macvtap: left promiscuous mode [ 2246.309089][T29652] veth0_macvtap: left promiscuous mode [ 2246.311157][T29652] veth1_vlan: left promiscuous mode [ 2246.322713][T29652] veth0_vlan: left promiscuous mode [ 2246.560917][T29652] team0 (unregistering): Port device team_slave_1 removed [ 2246.575009][T29652] team0 (unregistering): Port device team_slave_0 removed [ 2246.650664][T28098] lo speed is unknown, defaulting to 1000 [ 2246.655376][T28098] syU: Port: 1 Link DOWN [ 2246.666315][T28098] lo speed is unknown, defaulting to 1000 [ 2246.681437][T15225] smc: removing ib device syU [ 2247.421703][T15072] Bluetooth: hci3: command tx timeout [ 2247.557463][T32671] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2247.612832][T32671] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2247.625524][T32671] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2247.636182][T29652] IPVS: stop unused estimator thread 0... [ 2247.643547][T32671] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2247.718568][T32671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2247.729299][T32671] 8021q: adding VLAN 0 to HW filter on device team0 [ 2247.735033][T22274] bridge0: port 1(bridge_slave_0) entered blocking state [ 2247.737446][T22274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2247.756530][T15225] bridge0: port 2(bridge_slave_1) entered blocking state [ 2247.758953][T15225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2247.895014][T32671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2247.916210][T32671] veth0_vlan: entered promiscuous mode [ 2247.921350][T32671] veth1_vlan: entered promiscuous mode [ 2247.935916][T32671] veth0_macvtap: entered promiscuous mode [ 2247.940014][T32671] veth1_macvtap: entered promiscuous mode [ 2247.950582][T32671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2247.957319][T32671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2247.963651][T29652] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2247.966703][T22274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2247.969501][T22274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2247.974444][T22274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2248.014796][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2248.017373][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2248.028934][T22274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2248.033156][T22274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2248.136707][ T337] syz.0.7022 (337): drop_caches: 2 [ 2248.625680][ T349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7045'. [ 2248.629184][ T349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7045'. [ 2248.631676][ T345] FAULT_INJECTION: forcing a failure. [ 2248.631676][ T345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2248.637549][ T345] CPU: 2 UID: 0 PID: 345 Comm: syz.1.7044 Tainted: G L syzkaller #0 PREEMPT(full) [ 2248.637568][ T345] Tainted: [L]=SOFTLOCKUP [ 2248.637572][ T345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2248.637579][ T345] Call Trace: [ 2248.637583][ T345] [ 2248.637588][ T345] dump_stack_lvl+0x100/0x190 [ 2248.637624][ T345] should_fail_ex.cold+0x5/0xa [ 2248.637639][ T345] _copy_from_user+0x2e/0xd0 [ 2248.637655][ T345] snd_pcm_oss_write2+0x1c2/0x400 [ 2248.637677][ T345] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 2248.637692][ T345] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 2248.637714][ T345] snd_pcm_oss_write+0x729/0xa30 [ 2248.637731][ T345] ? security_file_permission+0x76/0x210 [ 2248.637750][ T345] vfs_write+0x2aa/0x1070 [ 2248.637762][ T345] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 2248.637780][ T345] ? __pfx_vfs_write+0x10/0x10 [ 2248.637790][ T345] ? find_held_lock+0x2b/0x80 [ 2248.637802][ T345] ? __fget_files+0x215/0x3d0 [ 2248.637813][ T345] ? __fget_files+0x215/0x3d0 [ 2248.637827][ T345] ? __fget_files+0x21f/0x3d0 [ 2248.637842][ T345] ksys_write+0x12a/0x250 [ 2248.637853][ T345] ? __pfx_ksys_write+0x10/0x10 [ 2248.637864][ T345] ? __pfx_ksys_write+0x10/0x10 [ 2248.637879][ T345] __do_fast_syscall_32+0xe3/0x8c0 [ 2248.637894][ T345] do_fast_syscall_32+0x32/0x70 [ 2248.637907][ T345] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2248.637922][ T345] RIP: 0023:0xf70bef6c [ 2248.637932][ T345] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2248.637943][ T345] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 2248.637954][ T345] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800012c0 [ 2248.637961][ T345] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2248.637967][ T345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2248.637973][ T345] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2248.637980][ T345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2248.637994][ T345] [ 2248.638781][ T350] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2248.706523][ T354] xt_TCPMSS: Only works on TCP SYN packets [ 2248.707732][ T350] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2248.817446][ T350] vhci_hcd vhci_hcd.0: Device attached [ 2248.943748][ T350] rdma_rxe: rxe_newlink: failed to add wg2 [ 2249.157197][ T9] usb 42-1: SetAddress Request (36) to port 0 [ 2249.159317][ T9] usb 42-1: new SuperSpeed USB device number 36 using vhci_hcd [ 2249.301191][ T351] vhci_hcd: connection reset by peer [ 2249.311780][ T59] vhci_hcd vhci_hcd.2: stop threads [ 2249.314131][ T59] vhci_hcd vhci_hcd.2: release socket [ 2249.321798][ T59] vhci_hcd vhci_hcd.2: disconnect device [ 2249.494232][T15072] Bluetooth: hci3: command tx timeout [ 2249.589505][ T367] syz.0.7050 (367): drop_caches: 2 [ 2250.089719][ T378] FAULT_INJECTION: forcing a failure. [ 2250.089719][ T378] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.094768][ T378] CPU: 1 UID: 0 PID: 378 Comm: syz.3.7053 Tainted: G L syzkaller #0 PREEMPT(full) [ 2250.094789][ T378] Tainted: [L]=SOFTLOCKUP [ 2250.094793][ T378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2250.094800][ T378] Call Trace: [ 2250.094806][ T378] [ 2250.094811][ T378] dump_stack_lvl+0x100/0x190 [ 2250.094834][ T378] should_fail_ex.cold+0x5/0xa [ 2250.094848][ T378] should_failslab+0xc2/0x120 [ 2250.094862][ T378] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2250.094881][ T378] ? __alloc_skb+0x140/0x710 [ 2250.094901][ T378] __alloc_skb+0x140/0x710 [ 2250.094917][ T378] ? __alloc_skb+0x5b7/0x710 [ 2250.094934][ T378] ? __pfx___alloc_skb+0x10/0x10 [ 2250.094956][ T378] netlink_alloc_large_skb+0x69/0x150 [ 2250.094969][ T378] netlink_sendmsg+0x680/0xda0 [ 2250.094984][ T378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2250.094997][ T378] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2250.095012][ T378] ____sys_sendmsg+0x9e1/0xb70 [ 2250.095026][ T378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2250.095039][ T378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2250.095058][ T378] ___sys_sendmsg+0x190/0x1e0 [ 2250.095074][ T378] ? __pfx____sys_sendmsg+0x10/0x10 [ 2250.095105][ T378] __sys_sendmsg+0x170/0x220 [ 2250.095116][ T378] ? __pfx___sys_sendmsg+0x10/0x10 [ 2250.095139][ T378] ? __pfx_ksys_write+0x10/0x10 [ 2250.095153][ T378] __do_fast_syscall_32+0xe3/0x8c0 [ 2250.095168][ T378] do_fast_syscall_32+0x32/0x70 [ 2250.095181][ T378] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2250.095196][ T378] RIP: 0023:0xf6ffef6c [ 2250.095207][ T378] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2250.095218][ T378] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2250.095230][ T378] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 2250.095238][ T378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2250.095245][ T378] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2250.095251][ T378] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2250.095258][ T378] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2250.095272][ T378] [ 2250.298800][ T383] lo speed is unknown, defaulting to 1000 [ 2250.303655][ T383] lo speed is unknown, defaulting to 1000 [ 2250.306809][ T383] lo speed is unknown, defaulting to 1000 [ 2250.413131][ T383] infiniband syU: set active [ 2250.415328][T25764] lo speed is unknown, defaulting to 1000 [ 2250.418117][ T383] infiniband syU: added lo [ 2250.518084][ T383] RDS/IB: syU: added [ 2250.520225][ T383] smc: adding ib device syU with port count 1 [ 2250.522750][ T383] smc: ib device syU port 1 has no pnetid [ 2250.524991][T28098] lo speed is unknown, defaulting to 1000 [ 2250.527516][ T383] lo speed is unknown, defaulting to 1000 [ 2250.632672][ T383] lo speed is unknown, defaulting to 1000 [ 2250.727358][ T383] lo speed is unknown, defaulting to 1000 [ 2250.833787][ T383] lo speed is unknown, defaulting to 1000 [ 2251.071624][T25764] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2251.131674][T28098] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 2251.221652][T25764] usb 5-1: Using ep0 maxpacket: 8 [ 2251.225542][T25764] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2251.230213][T25764] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2251.234957][T25764] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2251.238226][T25764] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2251.242719][T25764] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2251.246656][T25764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.293793][T28098] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2251.297737][T28098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2251.301320][T28098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2251.304896][T28098] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2251.310092][T28098] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2251.313667][T28098] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2251.316320][T28098] usb 7-1: Manufacturer: syz [ 2251.319326][T28098] usb 7-1: config 0 descriptor?? [ 2251.420637][ T401] netlink: 'syz.1.7062': attribute type 1 has an invalid length. [ 2251.466172][T25764] usb 5-1: usb_control_msg returned -32 [ 2251.468142][T25764] usbtmc 5-1:16.0: can't read capabilities [ 2251.478519][T25764] usb 5-1: USB disconnect, device number 39 [ 2251.571645][T15072] Bluetooth: hci3: command tx timeout [ 2251.582072][T15115] lo speed is unknown, defaulting to 1000 [ 2251.747656][T28098] appleir 0003:05AC:8243.0109: unknown main item tag 0x0 [ 2251.754486][T28098] appleir 0003:05AC:8243.0109: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 2252.777456][ T420] wg2 speed is unknown, defaulting to 1000 [ 2252.860933][ T420] lo speed is unknown, defaulting to 1000 [ 2253.391639][ T5945] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2253.392854][ T438] [ 2253.396057][ T438] ====================================================== [ 2253.398763][ T438] WARNING: possible circular locking dependency detected [ 2253.401679][ T438] syzkaller #0 Tainted: G L [ 2253.404312][ T438] ------------------------------------------------------ [ 2253.407219][ T438] syz.3.7073/438 is trying to acquire lock: [ 2253.409711][ T438] ffff88801caf4220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 2253.414047][ T438] [ 2253.414047][ T438] but task is already holding lock: [ 2253.417155][ T438] ffff888027200060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 2253.422047][ T438] [ 2253.422047][ T438] which lock already depends on the new lock. [ 2253.422047][ T438] [ 2253.426240][ T438] [ 2253.426240][ T438] the existing dependency chain (in reverse order) is: [ 2253.429970][ T438] [ 2253.429970][ T438] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 2253.433704][ T438] blk_alloc_queue+0x610/0x790 [ 2253.436046][ T438] blk_mq_alloc_queue+0x174/0x290 [ 2253.438428][ T438] __blk_mq_alloc_disk+0x29/0x120 [ 2253.440812][ T438] loop_add+0x498/0xb60 [ 2253.442869][ T438] loop_init+0x1d3/0x200 [ 2253.444953][ T438] do_one_initcall+0x11d/0x760 [ 2253.447241][ T438] kernel_init_freeable+0x6e5/0x7a0 [ 2253.450142][ T438] kernel_init+0x1f/0x1e0 [ 2253.452497][ T438] ret_from_fork+0x754/0xd80 [ 2253.454673][ T438] ret_from_fork_asm+0x1a/0x30 [ 2253.456900][ T438] [ 2253.456900][ T438] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 2253.459910][ T438] fs_reclaim_acquire+0xc4/0x100 [ 2253.462236][ T438] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 2253.464744][ T438] __kernfs_iattrs+0x126/0x400 [ 2253.467035][ T438] __kernfs_setattr+0x4d/0x3c0 [ 2253.469361][ T438] kernfs_iop_setattr+0xda/0x130 [ 2253.471784][ T438] notify_change+0xb25/0x1330 [ 2253.474066][ T438] do_truncate+0x1df/0x240 [ 2253.476182][ T438] path_openat+0x2a55/0x31a0 [ 2253.478057][ T438] do_file_open+0x20e/0x430 [ 2253.480145][ T438] do_sys_openat2+0x10d/0x1e0 [ 2253.482389][ T438] __x64_sys_openat+0x12d/0x210 [ 2253.484680][ T438] do_syscall_64+0x106/0xf80 [ 2253.486944][ T438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2253.489767][ T438] [ 2253.489767][ T438] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 2253.493416][ T438] __lock_acquire+0x14b8/0x2630 [ 2253.495695][ T438] lock_acquire+0x1cf/0x380 [ 2253.497871][ T438] down_read+0x99/0x460 [ 2253.499858][ T438] kernfs_iop_getattr+0x9c/0xf0 [ 2253.502212][ T438] vfs_getattr_nosec+0x2d4/0x430 [ 2253.504543][ T438] vfs_getattr+0x4a/0x60 [ 2253.506617][ T438] loop_query_min_dio_size.isra.0+0x117/0x250 [ 2253.509444][ T438] lo_ioctl+0x13aa/0x1bc0 [ 2253.511604][ T438] lo_compat_ioctl+0xf3/0x160 [ 2253.513752][ T438] compat_blkdev_ioctl+0x682/0x7b0 [ 2253.516127][ T438] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 2253.518686][ T438] __do_fast_syscall_32+0xe3/0x8c0 [ 2253.521113][ T438] do_fast_syscall_32+0x32/0x70 [ 2253.523428][ T438] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2253.526506][ T438] [ 2253.526506][ T438] other info that might help us debug this: [ 2253.526506][ T438] [ 2253.530794][ T438] Chain exists of: [ 2253.530794][ T438] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 2253.530794][ T438] [ 2253.535753][ T438] Possible unsafe locking scenario: [ 2253.535753][ T438] [ 2253.538153][ T438] CPU0 CPU1 [ 2253.539879][ T438] ---- ---- [ 2253.541634][ T438] lock(&q->q_usage_counter(io)#23); [ 2253.543511][ T438] lock(fs_reclaim); [ 2253.545578][ T438] lock(&q->q_usage_counter(io)#23); [ 2253.548065][ T438] rlock(&root->kernfs_iattr_rwsem); [ 2253.549873][ T438] [ 2253.549873][ T438] *** DEADLOCK *** [ 2253.549873][ T438] [ 2253.553421][ T438] 3 locks held by syz.3.7073/438: [ 2253.555551][ T438] #0: ffff88802735e448 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 2253.559905][ T438] #1: ffff888027200060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 2253.564992][ T438] #2: ffff888027200098 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 2253.569912][ T438] [ 2253.569912][ T438] stack backtrace: [ 2253.572418][ T438] CPU: 2 UID: 0 PID: 438 Comm: syz.3.7073 Tainted: G L syzkaller #0 PREEMPT(full) [ 2253.572448][ T438] Tainted: [L]=SOFTLOCKUP [ 2253.572455][ T438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2253.572468][ T438] Call Trace: [ 2253.572495][ T438] [ 2253.572506][ T438] dump_stack_lvl+0x100/0x190 [ 2253.572534][ T438] print_circular_bug.cold+0x178/0x1c7 [ 2253.572561][ T438] check_noncircular+0x146/0x160 [ 2253.572584][ T438] __lock_acquire+0x14b8/0x2630 [ 2253.572611][ T438] lock_acquire+0x1cf/0x380 [ 2253.572630][ T438] ? kernfs_iop_getattr+0x9c/0xf0 [ 2253.572652][ T438] ? __pfx___might_resched+0x10/0x10 [ 2253.572682][ T438] down_read+0x99/0x460 [ 2253.572703][ T438] ? kernfs_iop_getattr+0x9c/0xf0 [ 2253.572725][ T438] ? find_held_lock+0x2b/0x80 [ 2253.572743][ T438] ? __pfx_down_read+0x10/0x10 [ 2253.572761][ T438] ? kernfs_root+0xee/0x2a0 [ 2253.572785][ T438] kernfs_iop_getattr+0x9c/0xf0 [ 2253.572808][ T438] vfs_getattr_nosec+0x2d4/0x430 [ 2253.572830][ T438] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 2253.572856][ T438] vfs_getattr+0x4a/0x60 [ 2253.572877][ T438] loop_query_min_dio_size.isra.0+0x117/0x250 [ 2253.572905][ T438] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 2253.572936][ T438] lo_ioctl+0x13aa/0x1bc0 [ 2253.572969][ T438] ? __pfx_lo_ioctl+0x10/0x10 [ 2253.572997][ T438] ? tomoyo_path_number_perm+0x46d/0x580 [ 2253.573021][ T438] ? kasan_quarantine_put+0x104/0x240 [ 2253.573046][ T438] ? blk_get_meta_cap+0xd4/0x6c0 [ 2253.573129][ T438] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 2253.573151][ T438] ? find_held_lock+0x2b/0x80 [ 2253.573167][ T438] ? tomoyo_path_number_perm+0x28f/0x580 [ 2253.573189][ T438] ? blkdev_common_ioctl+0x515/0x2ba0 [ 2253.573214][ T438] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 2253.573239][ T438] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2253.573255][ T438] ? do_vfs_ioctl+0x226/0x13e0 [ 2253.573276][ T438] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2253.573301][ T438] lo_compat_ioctl+0xf3/0x160 [ 2253.573326][ T438] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 2253.573350][ T438] compat_blkdev_ioctl+0x682/0x7b0 [ 2253.573381][ T438] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 2253.573409][ T438] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 2253.573434][ T438] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 2253.573462][ T438] __do_fast_syscall_32+0xe3/0x8c0 [ 2253.573487][ T438] do_fast_syscall_32+0x32/0x70 [ 2253.573511][ T438] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2253.573536][ T438] RIP: 0023:0xf6ffef6c [ 2253.573554][ T438] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2253.573574][ T438] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2253.573597][ T438] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004c06 [ 2253.573611][ T438] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 2253.573625][ T438] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2253.573638][ T438] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2253.573652][ T438] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2253.573669][ T438] [ 2253.703294][ T443] comedi comedi0: Minor 5 could not be opened SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2253.922018][T28098] usb 7-1: USB disconnect, device number 33 [ 2254.071246][ T5945] usb 5-1: device descriptor read/all, error -71 [ 2254.211706][ T9] usb 42-1: device descriptor read/8, error -110 [ 2254.310559][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2254.374012][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2254.454736][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2254.535416][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2254.602132][ T9] usb usb42-port1: attempt power cycle [ 2254.649801][ T59] bridge_slave_1: left allmulticast mode [ 2254.655111][ T59] bridge_slave_1: left promiscuous mode [ 2254.657141][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 2254.660650][ T59] bridge_slave_0: left allmulticast mode [ 2254.662713][ T59] bridge_slave_0: left promiscuous mode [ 2254.664596][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 2254.804249][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2254.808007][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2254.811264][ T59] bond0 (unregistering): Released all slaves [ 2255.128582][ T59] hsr_slave_0: left promiscuous mode [ 2255.131336][ T59] hsr_slave_1: left promiscuous mode [ 2255.142150][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2255.144538][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2255.147468][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2255.150081][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2255.157329][ T59] veth1_macvtap: left promiscuous mode [ 2255.159134][ T59] veth0_macvtap: left promiscuous mode [ 2255.160996][ T59] veth1_vlan: left promiscuous mode [ 2255.163152][ T9] usb usb42-port1: unable to enumerate USB device [ 2255.165287][ T59] veth0_vlan: left promiscuous mode [ 2255.223656][ T59] team0 (unregistering): Port device team_slave_1 removed [ 2255.228062][ T59] team0 (unregistering): Port device team_slave_0 removed [ 2255.733167][ T59] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2255.795570][ T59] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2255.855268][ T59] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2255.914076][ T59] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2255.982207][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.054469][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.140751][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.152475][T15115] wg2 speed is unknown, defaulting to 1000 [ 2256.154710][T15115] syz2: Port: 1 Link DOWN [ 2256.156315][T15115] wg2 speed is unknown, defaulting to 1000 [ 2256.223206][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.326022][ T59] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.413301][ T59] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.482616][ T59] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.562340][ T59] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.675501][ T59] bridge_slave_1: left allmulticast mode [ 2256.677952][ T59] bridge_slave_1: left promiscuous mode [ 2256.680446][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 2256.686816][ T59] bridge_slave_0: left allmulticast mode [ 2256.689158][ T59] bridge_slave_0: left promiscuous mode [ 2256.691707][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 2256.697477][ T59] team0: left allmulticast mode [ 2256.699597][ T59] team0: left promiscuous mode [ 2256.702258][ T59] bridge0: port 1(team0) entered disabled state [ 2256.933763][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2256.938921][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2256.945101][ T59] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2256.949086][ T59] bond0 (unregistering): Released all slaves [ 2256.956140][ T59] bond1 (unregistering): Released all slaves [ 2256.962039][ T59] bond2 (unregistering): (slave bond3): Releasing backup interface [ 2256.965012][ T59] bond2 (unregistering): Released all slaves [ 2256.969521][ T59] bond3 (unregistering): Released all slaves [ 2256.974800][ T59] bond4 (unregistering): (slave veth5): Releasing active interface [ 2256.978536][ T59] bond4 (unregistering): Released all slaves [ 2256.983180][ T59] bond5 (unregistering): Released all slaves [ 2256.987099][ T59] bond6 (unregistering): Released all slaves [ 2257.173385][ T59] team0: Port device bridge2 removed [ 2257.213520][ T59] bond0 (unregistering): Released all slaves [ 2257.216910][ T59] bond1 (unregistering): Released all slaves [ 2257.221775][ T59] bond2 (unregistering): (slave veth15): Releasing active interface [ 2257.225204][ T59] bond2 (unregistering): Released all slaves [ 2257.279532][ T59] bond1 (unregistering): (slave bridge0): Releasing active interface [ 2257.283421][ T59] bridge0 (unregistering): left promiscuous mode [ 2257.285453][ T59] bridge0 (unregistering): left allmulticast mode [ 2257.368038][ T59] bond1 (unregistering): Released all slaves [ 2257.372130][ T59] bond0 (unregistering): Released all slaves [ 2257.376151][ T59] bond2 (unregistering): Released all slaves [ 2257.475789][ T59] tipc: Disabling bearer [ 2257.477665][ T59] tipc: Left network mode [ 2257.506777][ T59] tipc: Disabling bearer [ 2257.508585][ T59] tipc: Left network mode [ 2258.373234][ T59] hsr_slave_0: left promiscuous mode [ 2258.375622][ T59] hsr_slave_1: left promiscuous mode [ 2258.377789][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2258.380169][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2258.383070][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2258.385435][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2258.389873][ T59] hsr_slave_0: left promiscuous mode [ 2258.392141][ T59] hsr_slave_1: left promiscuous mode [ 2258.395981][ T59] hsr_slave_0: left promiscuous mode [ 2258.398100][ T59] hsr_slave_1: left promiscuous mode [ 2258.412400][ T59] veth1_macvtap: left promiscuous mode [ 2258.414261][ T59] veth1_vlan: left promiscuous mode [ 2258.415937][ T59] veth0_vlan: left promiscuous mode [ 2258.418813][ T59] veth1_macvtap: left promiscuous mode [ 2258.420728][ T59] veth0_macvtap: left promiscuous mode [ 2258.423094][ T59] veth1_vlan: left promiscuous mode [ 2258.424776][ T59] veth0_vlan: left promiscuous mode [ 2258.427576][ T59] veth1_macvtap: left promiscuous mode [ 2258.429532][ T59] veth0_macvtap: left promiscuous mode [ 2258.432414][ T59] veth1_vlan: left promiscuous mode [ 2258.434036][ T59] veth0_vlan: left promiscuous mode [ 2258.548113][ T59] team0 (unregistering): Port device team_slave_1 removed [ 2258.553546][ T59] team0 (unregistering): Port device team_slave_0 removed [ 2258.574305][T29652] smc: removing ib device syz2 [ 2258.826962][ T1148] smc: removing ib device syU [ 2258.830545][T21679] lo speed is unknown, defaulting to 1000 [ 2258.835282][T21679] syU: Port: 1 Link DOWN [ 2260.052118][ T59] IPVS: stop unused estimator thread 0...