last executing test programs: 1m11.426083105s ago: executing program 1 (id=3727): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = memfd_create(&(0x7f0000000dc0)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\xd5\xec\x10\xd7\x01M\x7f\xb7\x17@)\x8fG&\xcb\xe3\xc2\x80\xc3MD\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xe7\x9d\x9a\x8a\x86>\f\xa8b\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xb6\x1c+\xf7gT\x9a\x02\x99\xc2\x00\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84X\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1\x00\x00\x00\x00\x00\x00E\xfc', 0x4) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0xa43a6d, 0x1000000}) 1m11.16684372s ago: executing program 1 (id=3730): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002800038024000080080003400000000218000b8014100180090001006d6574610000000004000280140000001000010000000000000000000a84000a"], 0xd8}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x8, 0x1, 0x6, 0x3f, 0x1a, "3eccd25569e20900"}) 1m11.166352511s ago: executing program 1 (id=3731): r0 = open(&(0x7f0000000100)='./file0\x00', 0x115800, 0x127) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x207c, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x22000, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@measure}, {@uid_gt={'uid>', r6}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', r6}}]}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100050000000000040002000000000010000600000000002000020000000040ee25c1f6794f56ae7dfe81eb4d97798cb8ca8d546e23604a22e2c7c952cd92e541f5e125f36f71c68904656d2c06016f12b2812e50ea44967242f14068354eae70a9d4fe0fddce043ce4f6"], 0x24, 0x3) close(r4) fcntl$notify(r0, 0x402, 0x5) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, 0x0, 0x0) 1m9.567063276s ago: executing program 1 (id=3734): syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d0301000007ff009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507faff15300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m8.667829597s ago: executing program 1 (id=3735): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) mmap(&(0x7f0000836000/0x3000)=nil, 0x3000, 0x2000004, 0x10, 0xffffffffffffffff, 0xfb71d000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0xdc, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1ac, 0xffffffff, 0xffffffff, 0x1ac, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x5, 0x8, 0x6, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0x5, 0x1, 0x6, 0x3, 0x3], 0x1}, {0x3, [0x6, 0x6, 0x5, 0x1, 0x4, 0x2], 0x5, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x29c) clock_settime(0xfffffffb, 0x0) acct(&(0x7f0000000180)='./file0/file0\x00') socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x3c}}, 0x0) 1m6.588759252s ago: executing program 1 (id=3742): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x5, 0x884, 0xffffffffffffffff, 0x80000}, 0x50) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000040)=0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000000340)=ANY=[@ANYBLOB="14002cbd7000fddb601f6da9"], 0x14}}, 0x40054) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff0200007b010000000010001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 51.228400307s ago: executing program 32 (id=3742): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x5, 0x884, 0xffffffffffffffff, 0x80000}, 0x50) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000040)=0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000000340)=ANY=[@ANYBLOB="14002cbd7000fddb601f6da9"], 0x14}}, 0x40054) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff0200007b010000000010001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 11.230592203s ago: executing program 2 (id=4113): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000001c0)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x5}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xb9ff, 0x9}) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0xbfb3) r6 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x7fa, 0x13500, 0x0, 0x163}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, 0x0, 0x1) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)) syz_open_pts(r5, 0x101000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000040)="ffff53f2081e87f89b60160b08ff", 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x50) 10.010811761s ago: executing program 2 (id=4121): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x8, 0x1, 0x6, 0x3f, 0x1a, "3eccd25569e20900"}) 10.010400787s ago: executing program 2 (id=4122): getsockname$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x3d, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) dup3(r1, r2, 0x80000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={0x20, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0xc, 0x19, 0x0, 0x1, [@nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x28}]}]}]}, 0x20}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000040)=0x1, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0xaa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[], 0x0, 0xfc5f}, 0x28) 7.990809556s ago: executing program 2 (id=4132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x220880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfff7, 0x0, 0x2f, 0x0, @loopback, @remote}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, @any, 0xdd}, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x10001) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r8, 0xc0585611, &(0x7f0000000180)=@mmap={0x40000401, 0x2, 0x4, 0x10, 0x4, {0x77359400}, {0x3, 0x0, 0xf, 0x6, 0x3, 0x1, "a91b63d9"}, 0x3, 0x1, {}, 0x101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008b39500b7030000070000008500000006000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x94) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 5.140591974s ago: executing program 2 (id=4141): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x18, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x81}, 0x0, 0x0, &(0x7f00000003c0)={0x40, 0x5, 0x2, "1765"}}) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x203) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000240)=[{0xff00, 0xa210, 0x0, 0x0}], 0x1}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000780)=ANY=[@ANYBLOB="2003c0000000562922b93e93c2fbeea52bdb78c99be31b816a64ce24fa06a4917a5d000a8abb78c53b75aa899d00270d0bff8233b10f675a7ea74e32bef707a1ccceecd7a8c16fdf0a682508ce6855007a5c9e14c8327e7aee40c9c09bcf511626792e18b4e97dc27a66ef283a7ba1f3af91f612a6e8e8818cbc88fdc36d5b1d4fc764ee52325b599f25791859163a0ca6cb7fc7f091d020d1de94434453fa6a32565242c06e949dc8ef27323f11"], 0x0, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000940)={0x20, 0x0, 0x8, {0xe0, 0x40, [0xff0]}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0xca}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000a00)={0x40, 0xb, 0x2, 'i-'}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000a80)={0x40, 0x13, 0x6}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @random="6749008de13d"}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "49ba"}, 0x0, 0x0, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000c00)={0x40, 0x21, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0xa, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x21d) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) shutdown(r4, 0x1) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) 2.311063672s ago: executing program 3 (id=4156): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82002) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, 0x0, &(0x7f00000001c0)='[\x8b\xa4[\x13\x9b\x04\x00#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x95\xba\x9d\x01O\xc8\t\xd2\xceZ\x8a\x7f\xbc\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3b2m\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0x5, @buffer={0x0, 0x80, &(0x7f0000000200)=""/128}, &(0x7f0000000080)="159a83370501", 0x0, 0xf5ffffff, 0x0, 0x3, 0x0}) 2.310527058s ago: executing program 3 (id=4157): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000003f00611824000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.309971482s ago: executing program 3 (id=4158): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x320) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$inet6(r3, &(0x7f0000000080)='%[', 0x2, 0x800, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) socket$inet(0x2, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0xff, 0x9, 0x5}, {0x12, 0x2, 0x200, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 2.009309736s ago: executing program 0 (id=4161): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_off}]}) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x30, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x4, 0x2, 0x0, 0xe7, {[@exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x8c, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0xa}, {0x6}, {0xe, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_ACT={0x5c, 0x1, [@m_xt={0x58, 0x11, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x815, 'nat\x00', 0x87, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}}, 0x40) 1.690333913s ago: executing program 0 (id=4162): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.530895803s ago: executing program 0 (id=4163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xdddd0000, 0x0, 0x9e, 0x3, 0x1, 0xf, 0x0, 0x0, 0xf9, 0x0, 0x7f}, {0xd000, 0x8080000, 0x3, 0x5, 0xc2, 0xc0, 0x6, 0x66, 0xc5, 0x7, 0x30, 0x40}, {0x2, 0xdddd1000, 0xf, 0x7, 0xb, 0x34, 0xe, 0x6, 0x3, 0xc, 0x2, 0xff}, {0x8000000, 0x80a0000, 0xc, 0x58, 0x7f, 0x76, 0x2, 0xc, 0x7f, 0xfc, 0x9, 0xe}, {0x1000, 0x1000, 0xa, 0x8f, 0x80, 0x2, 0x9, 0x3, 0x1, 0x4, 0x4, 0x6}, {0x2000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0xf8, 0xd}, {0xf7f71000, 0x100000, 0x10, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0xeeee0000, 0x5000, 0x9, 0x6, 0xff, 0x0, 0x9, 0x80, 0x9, 0x8f, 0xdb, 0x8}, {0x4000, 0x59}, {0x4, 0x6}, 0x10000, 0x0, 0x1, 0x151, 0x6, 0x1000, 0xdddd1000, [0xc3f, 0x2, 0x3, 0x3]}) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, 0x0) 1.529226955s ago: executing program 3 (id=4165): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc00c9207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0xff}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='vegas', 0x5) shutdown(r1, 0x1) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0245628, &(0x7f00000012c0)={0x0, 0x5, 0x8a, '\x00', &(0x7f0000001280)=0x7}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x44000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)=ANY=[@ANYBLOB="a8be0c6744f90db0d80034000002", @ANYRES16=r6, @ANYBLOB="01002cbd7001fedbdf251200000018000180140002006272696467655f736c6176655f3100000800070000000000"], 0x34}, 0x1, 0x0, 0x0, 0x86}, 0x40040) 1.527132032s ago: executing program 0 (id=4166): prctl$PR_MCE_KILL(0x21, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000056f000/0x2000)=nil, 0x2000, &(0x7f0000000780)='\x00\x8bf\x95\x8c\x1cv\x06\xd0\a<\xc8>\xddj\x12\xfb\xbb1\x10\xd9\x97SS\xe3\xd4>\xcd`\xa4\xaa\x9d8\xea`\xa6\xa2q<\x18\xa2\x9d}\x9b\x81\x19T+Y\xef{-\x1e\x04Me$\xc5\xa2\x18X\x15\xe2\x86\xfd>Q\xd1\x1fkh\xe5\x9dKq\x9e\xa8G\xed\xca\xbd\xde|\x9c|@=g\xa4\xda\xb4U\xafD\xe9\a\xfa\x182\x16\xb4\x98\xaa\xcaz_[\xa7\x91B\xab\xcf\xc3C?$\f\x11\xdb\x9e\xfd9\xb8F\x1f\r\xcc\x80') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x64}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x7ff, 0x5, 0x0, 0x7}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) userfaultfd(0x1) 1.289417628s ago: executing program 4 (id=4169): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_names\x00') preadv(r1, &(0x7f0000001640)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x86, 0x451) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0xfffffffc) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESHEX], 0x74}, 0x1, 0x0, 0x0, 0x24048051}, 0x850) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, 0xffffffffffffffff, 0xbd5e4000) 749.544486ms ago: executing program 2 (id=4170): syz_open_dev$usbmon(0x0, 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r2, 0x80044df9, 0x0) 670.154827ms ago: executing program 3 (id=4171): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 559.607912ms ago: executing program 0 (id=4172): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x4) umount2(0x0, 0xa) 558.902089ms ago: executing program 3 (id=4173): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xb9ff, 0x9}) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)) r4 = syz_open_pts(r3, 0x101000) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000040)="ffff53f2081e87f89b60160b08ff", 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x50) 200.217003ms ago: executing program 4 (id=4174): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf4, 0x16, 0x1, 0x0, 0x0, {{{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0xa0}, {@in6=@mcast1, 0x4d6, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x8000, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x795}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf4}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 80.863737ms ago: executing program 4 (id=4175): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82002) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, 0x0, &(0x7f00000001c0)='[\x8b\xa4[\x13\x9b\x04\x00#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x95\xba\x9d\x01O\xc8\t\xd2\xceZ\x8a\x7f\xbc\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3b2m\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0x5, @buffer={0x0, 0x80, &(0x7f0000000200)=""/128}, &(0x7f0000000080)="159a83370501", 0x0, 0xf6ffffff, 0x0, 0x3, 0x0}) 80.644283ms ago: executing program 4 (id=4176): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x20}, 0x10) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x20004, 0x4) r3 = openat$uinput(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x400, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, &(0x7f0000000040)={0x0, 0x4}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000040000000400"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r6}, 0x38) r7 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x600040) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r7, 0x402c5342, &(0x7f0000000100)={0x24, 0x7fff, 0x0, {0xd81, 0xa0}, 0x0, 0xd}) sendto(r0, 0x0, 0x0, 0x4, 0x0, 0x0) 515.213µs ago: executing program 4 (id=4177): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000006000611824000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 207.763µs ago: executing program 0 (id=4178): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x18, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x81}, 0x0, 0x0, &(0x7f00000003c0)={0x40, 0x5, 0x2, "1765"}}) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x203) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000240)=[{0xff00, 0xa210, 0x0, 0x0}], 0x1}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000780)=ANY=[@ANYBLOB="2003c0000000562922b93e93c2fbeea52bdb78c99be31b816a64ce24fa06a4917a5d000a8abb78c53b75aa899d00270d0bff8233b10f675a7ea74e32bef707a1ccceecd7a8c16fdf0a682508ce6855007a5c9e14c8327e7aee40c9c09bcf511626792e18b4e97dc27a66ef283a7ba1f3af91f612a6e8e8818cbc88fdc36d5b1d4fc764ee52325b599f25791859163a0ca6cb7fc7f091d020d1de94434453fa6a32565242c06e949dc8ef27323f11"], 0x0, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000940)={0x20, 0x0, 0x8, {0xe0, 0x40, [0xff0]}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0xca}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000a00)={0x40, 0xb, 0x2, 'i-'}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000a80)={0x40, 0x13, 0x6}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @random="6749008de13d"}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "49ba"}, 0x0, 0x0, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000c00)={0x40, 0x21, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0xa, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x21d) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) shutdown(r4, 0x1) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) 0s ago: executing program 4 (id=4179): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) brk(0xfffffffe) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x10000}) fsopen(&(0x7f00000000c0)='romfs\x00', 0x0) 0s ago: executing program 3 (id=4180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a54000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc080001"], 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200000d4) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000200)={0x40, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000b060108000000000000000002b333f65493cf64000202"], 0x14}, 0x1, 0x0, 0x0, 0x48}, 0x4800) kernel console output (not intermixed with test programs): eg 1 prio class 2 [ 707.934101][T17562] hub 8-0:1.0: 1 port detected [ 707.937483][T17563] Buffer I/O error on dev nbd0, logical block 0, async page read [ 707.940996][T17563] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 707.945853][T17563] Buffer I/O error on dev nbd0, logical block 0, async page read [ 707.949635][T17563] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 707.952785][T17563] Buffer I/O error on dev nbd0, logical block 0, async page read [ 707.955274][T17563] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 707.958365][T17563] Buffer I/O error on dev nbd0, logical block 0, async page read [ 707.961484][T17563] ldm_validate_partition_table(): Disk read failed. [ 707.964897][T17563] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 707.968715][T17563] Buffer I/O error on dev nbd0, logical block 0, async page read [ 707.972087][T17563] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 707.975974][T17563] Buffer I/O error on dev nbd0, logical block 0, async page read [ 707.979313][T17563] Dev nbd0: unable to read RDB block 0 [ 707.981989][T17563] nbd0: unable to read partition table [ 707.985720][T17564] ldm_validate_partition_table(): Disk read failed. [ 707.988079][T17564] Dev nbd0: unable to read RDB block 0 [ 707.991429][T17564] nbd0: unable to read partition table [ 707.996017][ T5350] ldm_validate_partition_table(): Disk read failed. [ 707.998582][ T5350] Dev nbd0: unable to read RDB block 0 [ 708.000531][ T5350] nbd0: unable to read partition table [ 708.003371][ T5350] ldm_validate_partition_table(): Disk read failed. [ 708.006366][ T5350] Dev nbd0: unable to read RDB block 0 [ 708.008927][ T5350] nbd0: unable to read partition table [ 708.026321][T17477] ldm_validate_partition_table(): Disk read failed. [ 708.029320][T17477] Dev nbd0: unable to read RDB block 0 [ 708.031832][T17477] nbd0: unable to read partition table [ 708.066199][T17571] qnx6: Unknown parameter 'no×°Ð:ÿ+®' [ 708.166432][T17477] ldm_validate_partition_table(): Disk read failed. [ 708.451859][T17477] Dev nbd0: unable to read RDB block 0 [ 708.492255][T17477] nbd0: unable to read partition table [ 708.978300][T17586] loop2: detected capacity change from 0 to 7 [ 708.981638][T17586] Dev loop2: unable to read RDB block 7 [ 708.984084][T17586] loop2: unable to read partition table [ 708.986111][T17586] loop2: partition table beyond EOD, truncated [ 708.988243][T17586] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 709.758872][T17616] netlink: 'syz.1.3282': attribute type 10 has an invalid length. [ 709.779220][T17616] team0: Port device netdevsim0 added [ 709.940451][T17619] overlayfs: overlapping lowerdir path [ 711.007191][T17622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3288'. [ 711.093778][T17625] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3289'. [ 711.280775][T17630] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3290'. [ 711.284312][T17630] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3290'. [ 711.287266][T17630] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3290'. [ 711.469756][T17639] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.619742][T17639] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.708524][T17646] hub 8-0:1.0: USB hub found [ 711.715613][T17639] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.719142][T17646] hub 8-0:1.0: 1 port detected [ 711.821135][T17639] team0: Port device netdevsim0 removed [ 711.827974][T17639] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.977886][T14868] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.986997][T14865] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.995169][T14865] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.003720][T14865] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.042393][T17650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3297'. [ 712.109307][T17654] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3299'. [ 712.113492][T17654] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3299'. [ 712.117265][T17654] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3299'. [ 713.835460][T17679] overlayfs: overlapping lowerdir path [ 714.635580][T17687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3306'. [ 715.028701][ T8831] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 715.178898][ T8831] usb 7-1: Using ep0 maxpacket: 8 [ 715.182250][ T8831] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 715.185554][ T8831] usb 7-1: config 0 has no interface number 0 [ 715.187901][ T8831] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 715.192451][ T8831] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 715.196680][ T8831] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 715.199601][T17699] loop2: detected capacity change from 0 to 7 [ 715.200897][ T8831] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 715.203858][T17477] Dev loop2: unable to read RDB block 7 [ 715.207498][ T8831] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 715.207519][ T8831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.209384][T17477] loop2: unable to read partition table [ 715.217765][T17477] loop2: partition table beyond EOD, truncated [ 715.223090][ T8831] usb 7-1: config 0 descriptor?? [ 715.233443][ T8831] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 715.445652][T17699] Dev loop2: unable to read RDB block 7 [ 715.452812][T17683] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 715.456329][T17683] netlink: 'syz.0.3305': attribute type 5 has an invalid length. [ 715.463527][T17683] geneve2: entered promiscuous mode [ 715.465230][T17683] geneve2: entered allmulticast mode [ 715.467766][ T76] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 715.481079][ T76] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 715.484362][ T76] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 715.487635][ T76] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 715.489383][T17699] loop2: unable to read partition table [ 715.500520][T17699] loop2: partition table beyond EOD, truncated [ 715.503191][T17699] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 715.597033][ T8831] usb 7-1: USB disconnect, device number 35 [ 715.604527][ T8831] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 716.255956][T17723] __nla_validate_parse: 5 callbacks suppressed [ 716.255968][T17723] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3319'. [ 716.262192][T17723] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3319'. [ 716.265055][T17723] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3319'. [ 716.422945][T17721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3317'. [ 716.427085][T17721] lo: entered promiscuous mode [ 716.431011][T17721] lo: entered allmulticast mode [ 716.927174][T17721] tunl0: entered promiscuous mode [ 716.929829][T17721] tunl0: entered allmulticast mode [ 716.934217][T17721] gre0: entered promiscuous mode [ 716.936647][T17721] gre0: entered allmulticast mode [ 716.942928][T17721] gretap0: entered promiscuous mode [ 716.945320][T17721] gretap0: entered allmulticast mode [ 716.953708][T17721] erspan0: entered promiscuous mode [ 716.956082][T17721] erspan0: entered allmulticast mode [ 716.966626][T17721] ip_vti0: entered promiscuous mode [ 717.012460][T17721] ip_vti0: entered allmulticast mode [ 717.033819][T17721] ip6_vti0: entered promiscuous mode [ 717.036202][T17721] ip6_vti0: entered allmulticast mode [ 717.042233][T17721] sit0: entered promiscuous mode [ 717.044985][T17721] sit0: entered allmulticast mode [ 717.049368][T17721] ip6tnl0: entered promiscuous mode [ 717.052202][T17721] ip6tnl0: entered allmulticast mode [ 717.067464][T17721] ip6gre0: entered promiscuous mode [ 717.071462][T17721] ip6gre0: entered allmulticast mode [ 717.077315][T17721] syz_tun: entered promiscuous mode [ 717.079846][T17721] syz_tun: entered allmulticast mode [ 717.083078][T17721] ip6gretap0: entered promiscuous mode [ 717.088260][T17721] ip6gretap0: entered allmulticast mode [ 717.094866][T17721] bridge0: entered promiscuous mode [ 717.097231][T17721] bridge0: entered allmulticast mode [ 717.113465][T17721] vcan0: entered promiscuous mode [ 717.115734][T17721] vcan0: entered allmulticast mode [ 717.121950][T17721] bond0: entered promiscuous mode [ 717.124148][T17721] bond0: entered allmulticast mode [ 717.130652][T17721] team0: entered promiscuous mode [ 717.133589][T17721] team0: entered allmulticast mode [ 717.146544][T17721] dummy0: entered promiscuous mode [ 717.153995][T17721] dummy0: entered allmulticast mode [ 717.188545][T17721] nlmon0: entered promiscuous mode [ 717.190584][T17721] nlmon0: entered allmulticast mode [ 717.387673][T17721] caif0: entered promiscuous mode [ 717.389838][T17721] caif0: entered allmulticast mode [ 717.392161][T17721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 717.491103][T17739] loop2: detected capacity change from 0 to 7 [ 717.494496][T17477] Dev loop2: unable to read RDB block 7 [ 717.496772][T17477] loop2: unable to read partition table [ 717.498998][T17477] loop2: partition table beyond EOD, truncated [ 717.502200][T17739] Dev loop2: unable to read RDB block 7 [ 717.504329][T17739] loop2: unable to read partition table [ 717.510978][T17739] loop2: partition table beyond EOD, truncated [ 717.517398][T17739] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 717.912847][T17753] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3329'. [ 717.915873][T17753] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3329'. [ 717.919634][T17753] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3329'. [ 718.582893][T17760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3330'. [ 718.672900][T17760] lo: left promiscuous mode [ 718.674714][T17760] lo: left allmulticast mode [ 718.681151][T17760] tunl0: left promiscuous mode [ 718.682786][T17760] tunl0: left allmulticast mode [ 718.685765][T17760] gre0: left promiscuous mode [ 718.688494][T17760] gre0: left allmulticast mode [ 718.697792][T17760] gretap0: left promiscuous mode [ 718.699547][T17760] gretap0: left allmulticast mode [ 718.703764][T17760] erspan0: left promiscuous mode [ 718.705402][T17760] erspan0: left allmulticast mode [ 718.713252][T17760] ip_vti0: left promiscuous mode [ 718.714983][T17760] ip_vti0: left allmulticast mode [ 718.718523][T17760] ip6_vti0: left promiscuous mode [ 718.720247][T17760] ip6_vti0: left allmulticast mode [ 718.723882][T17760] sit0: left promiscuous mode [ 718.725521][T17760] sit0: left allmulticast mode [ 718.730356][T17760] ip6tnl0: left promiscuous mode [ 718.732067][T17760] ip6tnl0: left allmulticast mode [ 718.737610][T17760] ip6gre0: left promiscuous mode [ 718.743310][T17760] ip6gre0: left allmulticast mode [ 718.758628][T17760] syz_tun: left promiscuous mode [ 718.760340][T17760] syz_tun: left allmulticast mode [ 718.765045][T17760] ip6gretap0: left promiscuous mode [ 718.767148][T17760] ip6gretap0: left allmulticast mode [ 718.770869][T17760] bridge0: left promiscuous mode [ 718.772476][T17760] bridge0: left allmulticast mode [ 718.775662][T17760] vcan0: left promiscuous mode [ 718.777683][T17760] vcan0: left allmulticast mode [ 718.780551][T17760] bond0: left promiscuous mode [ 718.782658][T17760] bond0: left allmulticast mode [ 718.787400][T17760] team0: left promiscuous mode [ 718.789391][T17760] team0: left allmulticast mode [ 718.794073][T17760] dummy0: left promiscuous mode [ 718.795762][T17760] dummy0: left allmulticast mode [ 718.800679][T17760] nlmon0: left promiscuous mode [ 718.802446][T17760] nlmon0: left allmulticast mode [ 718.804915][T17760] caif0: left promiscuous mode [ 718.806495][T17760] caif0: left allmulticast mode [ 718.913896][T17760] geneve2: left promiscuous mode [ 718.915365][T17760] geneve2: left allmulticast mode [ 718.920471][T14867] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.923370][T14867] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 718.928238][T14867] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.930992][T14867] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 718.933702][T14867] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.935359][T17762] netlink: 'syz.3.3322': attribute type 2 has an invalid length. [ 718.936334][T14867] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 718.936356][T14867] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.950084][T14867] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 719.106413][T17771] overlay: ./file0 is not a directory [ 719.255368][T17778] loop2: detected capacity change from 0 to 7 [ 719.259054][T17778] Dev loop2: unable to read RDB block 7 [ 719.261405][T17778] loop2: unable to read partition table [ 719.263798][T17778] loop2: partition table beyond EOD, truncated [ 719.272066][T17778] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 719.303356][T17769] netlink: 'syz.1.3327': attribute type 3 has an invalid length. [ 719.647944][T17769] hub 8-0:1.0: USB hub found [ 719.746742][T17769] hub 8-0:1.0: 1 port detected [ 720.627670][T17792] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3339'. [ 720.631681][T17792] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3339'. [ 720.768306][T17798] comedi comedi3: bad chanlist[0]=0x00000002 chan=2 range length=1 [ 720.816636][T17800] loop2: detected capacity change from 0 to 7 [ 720.819910][T17800] Dev loop2: unable to read RDB block 7 [ 720.822342][T17800] loop2: unable to read partition table [ 720.825009][T17800] loop2: partition table beyond EOD, truncated [ 720.829507][T17800] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 721.099778][T17806] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 721.913068][T17813] hub 8-0:1.0: USB hub found [ 721.919296][T17813] hub 8-0:1.0: 1 port detected [ 722.047249][T17817] __nla_validate_parse: 1 callbacks suppressed [ 722.047266][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3349'. [ 722.178344][T17825] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3352'. [ 722.185083][T17825] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3352'. [ 722.189236][T17825] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3352'. [ 722.557707][T17839] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 725.224464][T13997] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 725.307361][T17861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3362'. [ 725.373501][T13997] usb 5-1: Using ep0 maxpacket: 16 [ 725.395699][T13997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 725.410845][T13997] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 725.416155][T13997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.419453][T13997] usb 5-1: Product: syz [ 725.421184][T13997] usb 5-1: Manufacturer: syz [ 725.423081][T13997] usb 5-1: SerialNumber: syz [ 725.429979][T13997] usb 5-1: config 0 descriptor?? [ 725.435139][T13997] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 725.438888][T13997] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 725.443994][T17862] netlink: 'syz.3.3357': attribute type 3 has an invalid length. [ 725.459657][T17862] hub 8-0:1.0: USB hub found [ 725.470970][T17862] hub 8-0:1.0: 1 port detected [ 725.813905][T17877] hub 8-0:1.0: USB hub found [ 725.816556][T17877] hub 8-0:1.0: 1 port detected [ 726.079845][T13997] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 726.754439][T13997] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 726.757458][T13997] em28xx 5-1:0.0: board has no eeprom [ 726.849833][T17888] overlay: ./file0 is not a directory [ 727.852189][T13997] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 727.855063][T13997] em28xx 5-1:0.0: dvb set to bulk mode. [ 727.865236][T13997] usb 5-1: USB disconnect, device number 21 [ 727.867816][T13997] em28xx 5-1:0.0: Disconnecting em28xx [ 727.882984][ T6047] em28xx 5-1:0.0: Binding DVB extension [ 728.131123][ T6047] em28xx 5-1:0.0: Registering input extension [ 728.133866][T13997] em28xx 5-1:0.0: Closing input extension [ 728.140850][T13997] em28xx 5-1:0.0: Freeing device [ 728.662925][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3374'. [ 730.426653][T17914] hub 8-0:1.0: USB hub found [ 730.428281][T17914] hub 8-0:1.0: 1 port detected [ 731.462988][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3372'. [ 731.732304][T17941] No control pipe specified [ 731.781376][T17941] fuse: Bad value for 'fd' [ 731.791869][T17941] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 731.799698][T17942] overlay: ./file0 is not a directory [ 731.817743][T17915] bond_slave_0: left promiscuous mode [ 731.821513][T17915] bond_slave_1: left promiscuous mode [ 732.031688][T17915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.037290][T17915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.096240][T17915] geneve2: left promiscuous mode [ 732.098099][T17915] geneve2: left allmulticast mode [ 732.162496][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.166107][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 732.181265][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.184422][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 732.187276][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.190437][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 732.193252][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.196041][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 733.513412][T17975] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3386'. [ 733.516435][T17975] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3386'. [ 733.520046][T17975] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3386'. [ 734.447464][T17991] loop2: detected capacity change from 0 to 7 [ 734.451606][T17477] Dev loop2: unable to read RDB block 7 [ 734.453382][T17477] loop2: unable to read partition table [ 734.455211][T17477] loop2: partition table beyond EOD, truncated [ 734.457932][T17991] Dev loop2: unable to read RDB block 7 [ 734.460721][T17991] loop2: unable to read partition table [ 734.463459][T17991] loop2: partition table beyond EOD, truncated [ 734.466388][T17991] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 734.872634][T17999] overlay: ./file0 is not a directory [ 736.501561][T18028] SQUASHFS error: Failed to read block 0x0: -5 [ 736.823177][T18030] bond3 (unregistering): Released all slaves [ 737.041479][T18034] netlink: 'syz.1.3404': attribute type 21 has an invalid length. [ 737.044600][T18034] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3404'. [ 737.050399][T18034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3404'. [ 737.059328][T18034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.115916][T18034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.203358][T18034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.224619][T18072] bond1 (unregistering): Released all slaves [ 740.005127][T18117] syzkaller0: entered promiscuous mode [ 740.007482][T18117] syzkaller0: entered allmulticast mode [ 740.982125][T18127] loop2: detected capacity change from 0 to 7 [ 740.985770][T18127] Dev loop2: unable to read RDB block 7 [ 740.991547][T18127] loop2: unable to read partition table [ 740.993478][T18127] loop2: partition table beyond EOD, truncated [ 741.003666][T18127] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 741.407835][T18132] overlay: ./file0 is not a directory [ 741.609395][T18138] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3426'. [ 742.539129][T18123] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 743.970882][T18177] hub 8-0:1.0: USB hub found [ 743.973721][T18177] hub 8-0:1.0: 1 port detected [ 744.301747][T18180] loop2: detected capacity change from 0 to 7 [ 744.307230][T18180] Dev loop2: unable to read RDB block 7 [ 744.309195][T18180] loop2: unable to read partition table [ 744.311657][T18180] loop2: partition table beyond EOD, truncated [ 744.321168][T18180] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 744.653523][T18191] bridge_slave_0: left allmulticast mode [ 744.655652][T18191] bridge_slave_0: left promiscuous mode [ 744.657925][T18191] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.800216][T18191] bridge_slave_1: left allmulticast mode [ 744.802469][T18191] bridge_slave_1: left promiscuous mode [ 744.807069][T18191] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.276086][T18191] bond0: (slave bond_slave_0): Releasing backup interface [ 745.352510][T18191] bond0: (slave bond_slave_1): Releasing backup interface [ 745.422287][T18191] team0: Port device team_slave_0 removed [ 745.451324][T18191] team0: Port device team_slave_1 removed [ 745.465484][T18191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.476439][T18191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.497973][T18191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.564122][T18191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.622630][T18191] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 745.962609][T18213] hub 8-0:1.0: USB hub found [ 745.965225][T18213] hub 8-0:1.0: 1 port detected [ 746.138102][T18215] loop2: detected capacity change from 0 to 7 [ 746.141126][T17477] Dev loop2: unable to read RDB block 7 [ 746.143193][T17477] loop2: unable to read partition table [ 746.145077][T17477] loop2: partition table beyond EOD, truncated [ 746.269616][T18215] Dev loop2: unable to read RDB block 7 [ 746.271435][T18215] loop2: unable to read partition table [ 746.274365][T18215] loop2: partition table beyond EOD, truncated [ 746.279205][T18215] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 746.845129][T18229] hub 8-0:1.0: USB hub found [ 746.848472][T18229] hub 8-0:1.0: 1 port detected [ 747.629880][T18224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3453'. [ 747.736332][T18236] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 747.738433][T18236] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 748.095824][T18245] netlink: 'syz.3.3456': attribute type 4 has an invalid length. [ 748.100913][T18245] netlink: 'syz.3.3456': attribute type 4 has an invalid length. [ 748.364505][T18236] vhci_hcd vhci_hcd.0: Device attached [ 748.368334][T18254] bond0: (slave syz_tun): Releasing backup interface [ 748.394993][T18254] bridge_slave_0: left allmulticast mode [ 748.402042][T18254] bridge_slave_0: left promiscuous mode [ 748.415584][T18254] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.463443][T18254] bridge_slave_1: left allmulticast mode [ 748.471829][T18254] bridge_slave_1: left promiscuous mode [ 748.474789][T18254] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.488502][T18254] bond0: (slave bond_slave_0): Releasing backup interface [ 748.496532][T18254] bond0: (slave bond_slave_1): Releasing backup interface [ 748.508890][T18254] team0: Port device team_slave_0 removed [ 748.517458][T18254] team0: Port device team_slave_1 removed [ 748.519995][T18254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.528025][T18239] vhci_hcd: connection closed [ 748.528261][ T13] vhci_hcd vhci_hcd.1: stop threads [ 748.533134][ T13] vhci_hcd vhci_hcd.1: release socket [ 748.535535][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 748.561478][T18254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.566093][T18254] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 749.861728][T18275] hub 8-0:1.0: USB hub found [ 749.865268][T18275] hub 8-0:1.0: 1 port detected [ 750.229951][T18291] hub 8-0:1.0: USB hub found [ 750.237416][T18291] hub 8-0:1.0: 1 port detected [ 750.782911][T18304] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3475'. [ 750.786659][T18304] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3475'. [ 750.789531][T18304] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3475'. [ 750.932355][T18310] tipc: Started in network mode [ 750.935689][T18310] tipc: Node identity 466e6d4a10ec, cluster identity 4711 [ 750.939029][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3478'. [ 750.942398][T18310] tipc: Enabled bearer , priority 0 [ 750.945270][T18310] syzkaller0: entered promiscuous mode [ 750.947033][T18310] syzkaller0: entered allmulticast mode [ 750.967489][T18310] tipc: Resetting bearer [ 751.074564][T18309] tipc: Resetting bearer [ 751.090125][T18309] tipc: Disabling bearer [ 752.213099][T18333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3486'. [ 752.216462][T18333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3486'. [ 752.407710][T18337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3476'. [ 752.724122][T18338] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 752.726284][T18338] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 752.733172][T18338] vhci_hcd vhci_hcd.0: Device attached [ 753.009923][ T8831] usb 38-1: SetAddress Request (38) to port 0 [ 753.012709][ T8831] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd [ 753.206936][T18356] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3493'. [ 753.222194][T18356] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3493'. [ 753.236154][T18356] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3493'. [ 753.793273][T18339] vhci_hcd: connection reset by peer [ 753.802600][ T1146] vhci_hcd vhci_hcd.0: stop threads [ 753.807528][ T1146] vhci_hcd vhci_hcd.0: release socket [ 753.809677][ T1146] vhci_hcd vhci_hcd.0: disconnect device [ 753.850525][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 754.286682][T18370] hub 8-0:1.0: USB hub found [ 754.290042][T18370] hub 8-0:1.0: 1 port detected [ 758.507386][ T8831] usb 38-1: device descriptor read/8, error -110 [ 758.779391][T18435] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3514'. [ 758.782685][T18435] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3514'. [ 758.786454][T18435] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3514'. [ 758.898082][ T8831] usb usb38-port1: attempt power cycle [ 759.390467][T18450] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 759.392646][T18450] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 759.396348][T18450] vhci_hcd vhci_hcd.0: Device attached [ 759.496765][ T8831] usb usb38-port1: unable to enumerate USB device [ 759.686466][ T6047] usb 44-1: SetAddress Request (50) to port 0 [ 759.688649][ T6047] usb 44-1: new SuperSpeed USB device number 50 using vhci_hcd [ 760.268378][T18451] vhci_hcd: connection reset by peer [ 760.270197][ T1146] vhci_hcd vhci_hcd.3: stop threads [ 760.271853][ T1146] vhci_hcd vhci_hcd.3: release socket [ 760.273599][ T1146] vhci_hcd vhci_hcd.3: disconnect device [ 761.183288][T18482] overlayfs: failed to resolve './bus': -2 [ 761.385598][ T8831] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 761.535493][ T8831] usb 5-1: Using ep0 maxpacket: 16 [ 761.538603][ T8831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 761.543325][ T8831] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 761.546483][ T8831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.549020][ T8831] usb 5-1: Product: syz [ 761.550387][ T8831] usb 5-1: Manufacturer: syz [ 761.551883][ T8831] usb 5-1: SerialNumber: syz [ 761.559498][ T8831] usb 5-1: config 0 descriptor?? [ 761.564558][ T8831] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 761.568293][ T8831] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 762.206344][ T8831] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 762.506146][T18500] hub 8-0:1.0: USB hub found [ 762.511930][T18500] hub 8-0:1.0: 1 port detected [ 762.772796][T18511] loop2: detected capacity change from 0 to 7 [ 762.777768][T18511] Dev loop2: unable to read RDB block 7 [ 762.780002][T18511] loop2: unable to read partition table [ 762.782249][T18511] loop2: partition table beyond EOD, truncated [ 762.784604][T18511] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 762.821560][ T8831] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 762.827560][ T8831] em28xx 5-1:0.0: board has no eeprom [ 763.025744][T18527] syzkaller0: entered promiscuous mode [ 763.027532][T18527] syzkaller0: entered allmulticast mode [ 763.134050][T18529] overlay: ./file0 is not a directory [ 763.974470][ T8831] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 763.977000][ T8831] em28xx 5-1:0.0: dvb set to bulk mode. [ 763.979708][ T54] em28xx 5-1:0.0: Binding DVB extension [ 764.039625][ T54] em28xx 5-1:0.0: Registering input extension [ 764.152552][T11423] usb 5-1: USB disconnect, device number 22 [ 764.155073][T11423] em28xx 5-1:0.0: Disconnecting em28xx [ 764.156874][T11423] em28xx 5-1:0.0: Closing input extension [ 764.174853][T11423] em28xx 5-1:0.0: Freeing device [ 764.560555][T18544] overlay: ./file0 is not a directory [ 765.657390][T18560] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3548'. [ 765.661602][T18560] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3548'. [ 765.667018][T18560] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3548'. [ 765.714271][T18562] loop2: detected capacity change from 0 to 7 [ 765.718164][T17477] Dev loop2: unable to read RDB block 7 [ 765.720182][T17477] loop2: unable to read partition table [ 765.722592][T17477] loop2: partition table beyond EOD, truncated [ 766.110313][ T6047] usb 44-1: device descriptor read/8, error -110 [ 766.110927][T18562] Dev loop2: unable to read RDB block 7 [ 766.123351][T18562] loop2: unable to read partition table [ 766.125492][T18562] loop2: partition table beyond EOD, truncated [ 766.127961][T18562] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 766.209131][T18566] x_tables: duplicate underflow at hook 2 [ 766.483705][ T8831] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 766.504046][ T6047] usb usb44-port1: attempt power cycle [ 766.539540][T18577] bridge0: port 1(erspan0) entered blocking state [ 766.545842][T18577] bridge0: port 1(erspan0) entered disabled state [ 766.550709][T18577] erspan0: entered allmulticast mode [ 766.557692][T18577] erspan0: entered promiscuous mode [ 766.564406][T18580] syzkaller0: entered promiscuous mode [ 766.566145][T18580] syzkaller0: entered allmulticast mode [ 766.569006][T18577] erspan0: left allmulticast mode [ 766.570795][T18577] erspan0: left promiscuous mode [ 766.574090][T18577] bridge0: port 1(erspan0) entered disabled state [ 766.634139][ T8831] usb 6-1: Using ep0 maxpacket: 32 [ 766.645057][ T8831] usb 6-1: config 2 has an invalid interface number: 211 but max is 2 [ 766.647823][ T8831] usb 6-1: config 2 has an invalid interface number: 56 but max is 2 [ 766.650876][ T8831] usb 6-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 766.663884][ T8831] usb 6-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 766.666560][ T8831] usb 6-1: config 2 has an invalid interface number: 5 but max is 2 [ 766.669022][ T8831] usb 6-1: config 2 has an invalid descriptor of length 244, skipping remainder of the config [ 766.672093][ T8831] usb 6-1: config 2 has no interface number 0 [ 766.683209][ T8831] usb 6-1: config 2 has no interface number 1 [ 766.685316][ T8831] usb 6-1: config 2 has no interface number 2 [ 766.687265][ T8831] usb 6-1: config 2 interface 211 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 766.690594][ T8831] usb 6-1: config 2 interface 211 altsetting 9 endpoint 0x8 has an invalid bInterval 189, changing to 11 [ 766.703050][ T8831] usb 6-1: config 2 interface 211 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 766.713234][ T8831] usb 6-1: config 2 interface 56 altsetting 7 bulk endpoint 0xA has invalid maxpacket 64 [ 766.716323][ T8831] usb 6-1: config 2 interface 56 altsetting 7 endpoint 0x4 has invalid maxpacket 471, setting to 64 [ 766.720050][ T8831] usb 6-1: config 2 interface 56 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 766.729884][ T8831] usb 6-1: config 2 interface 56 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 766.740015][ T8831] usb 6-1: config 2 interface 56 altsetting 7 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 766.743691][ T8831] usb 6-1: config 2 interface 56 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 766.746983][ T8831] usb 6-1: config 2 interface 56 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 766.754759][ T8831] usb 6-1: config 2 interface 5 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 766.758792][ T8831] usb 6-1: config 2 interface 211 has no altsetting 0 [ 766.771410][ T8831] usb 6-1: config 2 interface 56 has no altsetting 0 [ 766.773918][ T8831] usb 6-1: config 2 interface 5 has no altsetting 0 [ 766.777662][ T8831] usb 6-1: New USB device found, idVendor=07af, idProduct=0004, bcdDevice= 1.20 [ 766.780513][ T8831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.786184][ T8831] usb 6-1: Product: syz [ 766.787526][ T8831] usb 6-1: Manufacturer: syz [ 766.789037][ T8831] usb 6-1: SerialNumber: syz [ 767.016262][ T8831] usb-storage 6-1:2.211: USB Mass Storage device detected [ 767.023672][ T8831] usb-storage 6-1:2.211: Quirks match for vid 07af pid 0004: 4 [ 767.072047][T18590] hub 8-0:1.0: USB hub found [ 767.074108][T18590] hub 8-0:1.0: 1 port detected [ 767.083853][ T6047] usb usb44-port1: unable to enumerate USB device [ 767.088103][ T8831] usb-storage 6-1:2.56: USB Mass Storage device detected [ 767.092943][ T8831] usb-storage 6-1:2.56: Quirks match for vid 07af pid 0004: 4 [ 767.232937][ T8831] usb-storage 6-1:2.5: USB Mass Storage device detected [ 767.244843][ T8831] usb-storage 6-1:2.5: Quirks match for vid 07af pid 0004: 4 [ 767.396402][ T8831] usb 6-1: USB disconnect, device number 34 [ 769.071012][T18622] syzkaller0: entered promiscuous mode [ 769.077398][T18622] syzkaller0: entered allmulticast mode [ 769.186967][T18626] x_tables: duplicate underflow at hook 2 [ 769.340707][ T40] audit: type=1326 audit(2000000499.844:7039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.0.3570" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 769.348979][ T40] audit: type=1326 audit(2000000499.844:7040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.0.3570" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 769.356023][ T40] audit: type=1326 audit(2000000499.854:7041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.0.3570" exe="/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 769.363159][ T40] audit: type=1326 audit(2000000499.854:7042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.0.3570" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 769.369850][ T40] audit: type=1326 audit(2000000499.854:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.0.3570" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 769.376977][ T40] audit: type=1326 audit(2000000499.854:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.0.3570" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 769.384307][ T40] audit: type=1326 audit(2000000499.864:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.0.3570" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 769.391011][ T40] audit: type=1326 audit(2000000499.864:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.0.3570" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 769.398269][ T40] audit: type=1326 audit(2000000499.864:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.0.3570" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 769.405216][ T40] audit: type=1326 audit(2000000499.864:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18633 comm="syz.0.3570" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 769.441732][ T5313] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 769.711636][ T5313] usb 7-1: Using ep0 maxpacket: 32 [ 769.761994][ T5313] usb 7-1: config 2 has an invalid interface number: 211 but max is 2 [ 769.764709][ T5313] usb 7-1: config 2 has an invalid interface number: 56 but max is 2 [ 769.767280][ T5313] usb 7-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 769.770104][ T5313] usb 7-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 769.772964][ T5313] usb 7-1: config 2 has an invalid interface number: 5 but max is 2 [ 769.775535][ T5313] usb 7-1: config 2 has an invalid descriptor of length 244, skipping remainder of the config [ 769.778877][ T5313] usb 7-1: config 2 has no interface number 0 [ 769.780872][ T5313] usb 7-1: config 2 has no interface number 1 [ 769.796950][ T5313] usb 7-1: config 2 has no interface number 2 [ 769.799066][ T5313] usb 7-1: config 2 interface 211 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 769.802617][ T5313] usb 7-1: config 2 interface 211 altsetting 9 endpoint 0x8 has an invalid bInterval 189, changing to 11 [ 769.806249][ T5313] usb 7-1: config 2 interface 211 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 769.809878][ T5313] usb 7-1: config 2 interface 56 altsetting 7 bulk endpoint 0xA has invalid maxpacket 64 [ 769.813161][ T5313] usb 7-1: config 2 interface 56 altsetting 7 endpoint 0x4 has invalid maxpacket 471, setting to 64 [ 769.816655][ T5313] usb 7-1: config 2 interface 56 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 769.820090][ T5313] usb 7-1: config 2 interface 56 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 769.823620][ T5313] usb 7-1: config 2 interface 56 altsetting 7 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 769.827136][ T5313] usb 7-1: config 2 interface 56 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 769.830607][ T5313] usb 7-1: config 2 interface 56 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 769.834157][ T5313] usb 7-1: config 2 interface 5 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 769.838297][ T5313] usb 7-1: config 2 interface 211 has no altsetting 0 [ 769.840491][ T5313] usb 7-1: config 2 interface 56 has no altsetting 0 [ 769.842688][ T5313] usb 7-1: config 2 interface 5 has no altsetting 0 [ 769.846623][ T5313] usb 7-1: New USB device found, idVendor=07af, idProduct=0004, bcdDevice= 1.20 [ 769.849652][ T5313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.852294][ T5313] usb 7-1: Product: syz [ 769.853658][ T5313] usb 7-1: Manufacturer: syz [ 769.855160][ T5313] usb 7-1: SerialNumber: syz [ 770.075288][ T5313] usb-storage 7-1:2.211: USB Mass Storage device detected [ 770.080352][ T5313] usb-storage 7-1:2.211: Quirks match for vid 07af pid 0004: 4 [ 770.146089][ T5313] usb-storage 7-1:2.56: USB Mass Storage device detected [ 770.162763][ T5313] usb-storage 7-1:2.56: Quirks match for vid 07af pid 0004: 4 [ 770.266736][ T5313] usb-storage 7-1:2.5: USB Mass Storage device detected [ 770.276063][ T5313] usb-storage 7-1:2.5: Quirks match for vid 07af pid 0004: 4 [ 770.386441][ T5313] usb 7-1: USB disconnect, device number 36 [ 771.231413][T18656] hub 8-0:1.0: USB hub found [ 771.243874][T18656] hub 8-0:1.0: 1 port detected [ 771.501482][T18669] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3577'. [ 771.505389][T18669] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3577'. [ 771.540748][T18669] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3577'. [ 772.657085][T18685] netlink: 'syz.3.3582': attribute type 1 has an invalid length. [ 772.667165][T18685] bond3: entered promiscuous mode [ 772.668868][T18685] bond3: entered allmulticast mode [ 772.670910][T18685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 772.695307][T18685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3582'. [ 772.724726][T18689] netlink: 'syz.3.3582': attribute type 1 has an invalid length. [ 772.725729][T18685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3582'. [ 772.838968][T18694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3584'. [ 773.663272][T18710] syzkaller0: entered promiscuous mode [ 773.665159][T18710] syzkaller0: entered allmulticast mode [ 775.066116][T18722] syzkaller0: entered promiscuous mode [ 775.068068][T18722] syzkaller0: entered allmulticast mode [ 776.046895][T18739] hub 8-0:1.0: USB hub found [ 776.049230][T18739] hub 8-0:1.0: 1 port detected [ 776.891433][T18761] FAULT_INJECTION: forcing a failure. [ 776.891433][T18761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.896549][T18761] CPU: 0 UID: 0 PID: 18761 Comm: syz.1.3598 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.896576][T18761] Tainted: [L]=SOFTLOCKUP [ 776.896582][T18761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 776.896592][T18761] Call Trace: [ 776.896598][T18761] [ 776.896605][T18761] dump_stack_lvl+0x100/0x190 [ 776.896629][T18761] should_fail_ex.cold+0x5/0xa [ 776.896655][T18761] _copy_to_user+0x32/0xd0 [ 776.896679][T18761] simple_read_from_buffer+0xcb/0x170 [ 776.896698][T18761] proc_fail_nth_read+0x1af/0x230 [ 776.896732][T18761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 776.896753][T18761] ? rw_verify_area+0xce/0x6d0 [ 776.896768][T18761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 776.896787][T18761] vfs_read+0x1e4/0xb30 [ 776.896804][T18761] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 776.896823][T18761] ? __pfx_vfs_read+0x10/0x10 [ 776.896842][T18761] ? do_compat_pselect+0x1cf/0x2b0 [ 776.896861][T18761] ? __pfx_do_compat_pselect+0x10/0x10 [ 776.896876][T18761] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 776.896904][T18761] ksys_read+0x12a/0x250 [ 776.896921][T18761] ? __pfx_ksys_read+0x10/0x10 [ 776.896943][T18761] do_int80_emulation+0x101/0x470 [ 776.896965][T18761] asm_int80_emulation+0x1a/0x20 [ 776.896981][T18761] RIP: 0023:0xf712572b [ 776.896993][T18761] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 776.897008][T18761] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 776.897024][T18761] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53e65d0 [ 776.897034][T18761] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 776.897044][T18761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 776.897053][T18761] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 776.897062][T18761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 776.897083][T18761] [ 776.920084][T18759] overlay: ./file0 is not a directory [ 777.199198][T18770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3601'. [ 777.202955][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3601'. [ 777.206688][T18770] netlink: 'syz.2.3601': attribute type 12 has an invalid length. [ 777.738092][ T6455] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 777.887829][ T6455] usb 8-1: Using ep0 maxpacket: 16 [ 777.890955][ T6455] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 777.896156][ T6455] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 777.900111][ T6455] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.902677][ T6455] usb 8-1: Product: syz [ 777.904023][ T6455] usb 8-1: Manufacturer: syz [ 777.905463][ T6455] usb 8-1: SerialNumber: syz [ 777.908431][ T6455] usb 8-1: config 0 descriptor?? [ 777.912059][ T6455] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 777.914995][ T6455] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 778.524755][ T6455] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 778.930193][ T6455] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 778.932840][ T6455] em28xx 8-1:0.0: board has no eeprom [ 779.563146][T18790] trusted_key: encrypted_key: master key parameter '\íº†Æ?gõ;dî¶n¹MünÅvx}ÿsØ”ÕÎÿ¤ì2È‚˜Sº./±÷ø·Ï–ŠØ“àý.>ghÈcÙ¨É[ÕøUsœ' is invalid [ 780.066824][ T6455] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 780.070299][ T6455] em28xx 8-1:0.0: dvb set to bulk mode. [ 780.081371][ T6455] em28xx 8-1:0.0: Binding DVB extension [ 780.148775][ T6455] em28xx 8-1:0.0: Registering input extension [ 780.164547][T18802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3611'. [ 780.503872][ T6455] usb 8-1: USB disconnect, device number 30 [ 780.506350][ T6455] em28xx 8-1:0.0: Disconnecting em28xx [ 780.508826][ T6455] em28xx 8-1:0.0: Closing input extension [ 780.517090][ T6455] em28xx 8-1:0.0: Freeing device [ 781.220994][T18828] FAULT_INJECTION: forcing a failure. [ 781.220994][T18828] name failslab, interval 1, probability 0, space 0, times 0 [ 781.224979][T18828] CPU: 2 UID: 0 PID: 18828 Comm: syz.0.3617 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.224996][T18828] Tainted: [L]=SOFTLOCKUP [ 781.225000][T18828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 781.225019][T18828] Call Trace: [ 781.225024][T18828] [ 781.225028][T18828] dump_stack_lvl+0x100/0x190 [ 781.225044][T18828] should_fail_ex.cold+0x5/0xa [ 781.225063][T18828] should_failslab+0xc2/0x120 [ 781.225077][T18828] ? blk_rq_map_user_iov+0x2a5/0x14c0 [ 781.225089][T18828] ? blk_rq_map_user_iov+0x2a5/0x14c0 [ 781.225099][T18828] __kmalloc_noprof+0xf6/0x9c0 [ 781.225115][T18828] ? blk_rq_map_user_iov+0x2a5/0x14c0 [ 781.225126][T18828] blk_rq_map_user_iov+0x2a5/0x14c0 [ 781.225141][T18828] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 781.225153][T18828] ? __pfx___might_resched+0x10/0x10 [ 781.225170][T18828] ? trace_contention_end+0xd6/0x110 [ 781.225186][T18828] ? __mutex_lock+0x26a/0x1b90 [ 781.225200][T18828] ? find_held_lock+0x2b/0x80 [ 781.225210][T18828] ? sg_common_write.isra.0+0xe26/0x1b90 [ 781.225221][T18828] ? sg_common_write.isra.0+0xe26/0x1b90 [ 781.225231][T18828] ? import_ubuf+0x1b6/0x220 [ 781.225247][T18828] blk_rq_map_user_io+0x1ff/0x230 [ 781.225260][T18828] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 781.225284][T18828] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 781.225304][T18828] sg_common_write.isra.0+0xf74/0x1b90 [ 781.225321][T18828] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 781.225337][T18828] sg_new_write.isra.0+0x5b9/0xb10 [ 781.225353][T18828] ? __pfx_sg_new_write.isra.0+0x10/0x10 [ 781.225379][T18828] sg_ioctl+0x357/0x2730 [ 781.225391][T18828] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 781.225409][T18828] ? __pfx_sg_ioctl+0x10/0x10 [ 781.225421][T18828] ? find_held_lock+0x2b/0x80 [ 781.225431][T18828] ? hook_file_ioctl_common+0x146/0x410 [ 781.225450][T18828] ? __fget_files+0x21f/0x3d0 [ 781.225464][T18828] ? __pfx_sg_ioctl+0x10/0x10 [ 781.225473][T18828] compat_ptr_ioctl+0x6e/0xa0 [ 781.225489][T18828] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 781.225505][T18828] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 781.225517][T18828] __do_fast_syscall_32+0xde/0x660 [ 781.225533][T18828] do_fast_syscall_32+0x32/0x70 [ 781.225547][T18828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 781.225560][T18828] RIP: 0023:0xf7f93579 [ 781.225570][T18828] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 781.225580][T18828] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 781.225591][T18828] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002285 [ 781.225598][T18828] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 781.225604][T18828] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 781.225610][T18828] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 781.225617][T18828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 781.225630][T18828] [ 781.226764][T18824] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 781.321435][T18824] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 781.324029][T18824] vhci_hcd vhci_hcd.0: Device attached [ 781.556206][ T6455] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 781.707862][T18837] 9pnet_virtio: no channels available for device syz [ 781.799430][T18829] vhci_hcd: connection reset by peer [ 781.801894][ T1146] vhci_hcd vhci_hcd.2: stop threads [ 781.803982][ T1146] vhci_hcd vhci_hcd.2: release socket [ 781.805789][ T1146] vhci_hcd vhci_hcd.2: disconnect device [ 781.968096][T18846] FAULT_INJECTION: forcing a failure. [ 781.968096][T18846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.972329][T18846] CPU: 3 UID: 0 PID: 18846 Comm: syz.1.3621 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.972347][T18846] Tainted: [L]=SOFTLOCKUP [ 781.972351][T18846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 781.972359][T18846] Call Trace: [ 781.972364][T18846] [ 781.972368][T18846] dump_stack_lvl+0x100/0x190 [ 781.972385][T18846] should_fail_ex.cold+0x5/0xa [ 781.972403][T18846] copy_fpstate_to_sigframe+0x7fe/0xaa0 [ 781.972421][T18846] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 781.972440][T18846] ? x86_task_fpu+0x5f/0x90 [ 781.972454][T18846] get_sigframe+0x3fb/0x940 [ 781.972470][T18846] ? __pfx_get_sigframe+0x10/0x10 [ 781.972486][T18846] ? _raw_spin_unlock_irq+0x29/0x50 [ 781.972497][T18846] ? siginfo_layout+0x156/0x290 [ 781.972511][T18846] ia32_setup_rt_frame+0xed/0xb00 [ 781.972527][T18846] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 781.972538][T18846] ? __mutex_unlock_slowpath+0x15c/0x790 [ 781.972554][T18846] arch_do_signal_or_restart+0x43f/0x770 [ 781.972570][T18846] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 781.972589][T18846] ? ksys_write+0x1ac/0x250 [ 781.972604][T18846] exit_to_user_mode_loop+0x86/0x4b0 [ 781.972619][T18846] ? rcu_is_watching+0x12/0xc0 [ 781.972630][T18846] do_int80_emulation+0x39b/0x470 [ 781.972646][T18846] asm_int80_emulation+0x1a/0x20 [ 781.972657][T18846] RIP: 0023:0xf712572b [ 781.972666][T18846] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 781.972676][T18846] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 781.972687][T18846] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 00000000f53e65c0 [ 781.972694][T18846] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 781.972700][T18846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 781.972706][T18846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.972712][T18846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 781.972725][T18846] [ 782.046022][ T54] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 782.195795][ T54] usb 8-1: Using ep0 maxpacket: 16 [ 782.199331][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 782.204477][ T54] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 782.208254][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.211778][ T54] usb 8-1: Product: syz [ 782.215459][ T54] usb 8-1: Manufacturer: syz [ 782.218174][ T54] usb 8-1: SerialNumber: syz [ 782.227469][ T54] usb 8-1: config 0 descriptor?? [ 782.237559][ T54] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 782.241340][ T54] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 782.242719][T18859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3626'. [ 782.835175][ T54] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 783.252065][ T54] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 783.254948][ T54] em28xx 8-1:0.0: board has no eeprom [ 783.655323][ T8831] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 783.825154][ T8831] usb 6-1: Using ep0 maxpacket: 8 [ 783.829107][ T8831] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 783.832347][ T8831] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 783.836674][ T8831] usb 6-1: config 1 interface 0 has no altsetting 0 [ 783.840754][ T8831] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 783.843748][ T8831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.846387][ T8831] usb 6-1: Product: ඒè·é›—âžå§œìšî«·å±—∕觽厀욮έ䎮ݱ掞橷㜭뻖芨蘣鋗æ‹ïŽ»è§·í›“é˜å‹€êˆ‹éž£è¶¥î†µì¿‰ç‡ä‡žä»¸à¶·ãŸºè˜ªL줊䀨䟉譾鎢ω뾻çµê¿¼áµ†ä—ŠÐ…䨼ì‘ì˜‹î¯ [ 783.852310][ T8831] usb 6-1: SerialNumber: 苬勋쪾ç˜ê¹²ç«­ä¤¢à®…ìŽå…ªí›…憢ꈖ涩ᅮȔಔ瘭堉욑샙帲㞡ᩚᮢï¬Ã“눔湲ꒊï”츶䞯輵ዽ᯦쾮㱶푕픔îŸè¨Šæ¡ŠÊžì¢Ÿä°¨â˜©è­í‡°ç©ƒäŠ†ä¼ìœ¡é´¼è­šë¬‘Ḧ᜘臣考呤ࢵꯟ [ 783.865940][T18884] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 783.868338][T18884] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 784.374859][ T54] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 784.377484][ T54] em28xx 8-1:0.0: dvb set to bulk mode. [ 784.379501][ T24] em28xx 8-1:0.0: Binding DVB extension [ 784.403601][ T24] em28xx 8-1:0.0: Registering input extension [ 784.692228][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3635'. [ 784.756616][T18895] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3636'. [ 784.760815][T18895] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3636'. [ 784.764809][T18895] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3636'. [ 784.828893][T11423] usb 8-1: USB disconnect, device number 31 [ 784.831766][T11423] em28xx 8-1:0.0: Disconnecting em28xx [ 784.834027][T11423] em28xx 8-1:0.0: Closing input extension [ 784.838908][T11423] em28xx 8-1:0.0: Freeing device [ 784.936895][T18902] FAULT_INJECTION: forcing a failure. [ 784.936895][T18902] name failslab, interval 1, probability 0, space 0, times 0 [ 784.941670][T18902] CPU: 2 UID: 0 PID: 18902 Comm: syz.0.3639 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.941689][T18902] Tainted: [L]=SOFTLOCKUP [ 784.941693][T18902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 784.941700][T18902] Call Trace: [ 784.941705][T18902] [ 784.941709][T18902] dump_stack_lvl+0x100/0x190 [ 784.941727][T18902] should_fail_ex.cold+0x5/0xa [ 784.941746][T18902] should_failslab+0xc2/0x120 [ 784.941775][T18902] ? blk_rq_map_user_iov+0x2a5/0x14c0 [ 784.941787][T18902] ? blk_rq_map_user_iov+0x2a5/0x14c0 [ 784.941799][T18902] __kmalloc_noprof+0xf6/0x9c0 [ 784.941814][T18902] ? blk_rq_map_user_iov+0x2a5/0x14c0 [ 784.941826][T18902] blk_rq_map_user_iov+0x2a5/0x14c0 [ 784.941843][T18902] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 784.941854][T18902] ? __pfx___might_resched+0x10/0x10 [ 784.941874][T18902] ? trace_contention_end+0xd6/0x110 [ 784.941889][T18902] ? __mutex_lock+0x26a/0x1b90 [ 784.941904][T18902] ? find_held_lock+0x2b/0x80 [ 784.941916][T18902] ? sg_common_write.isra.0+0xe26/0x1b90 [ 784.941927][T18902] ? sg_common_write.isra.0+0xe26/0x1b90 [ 784.941938][T18902] ? import_ubuf+0x1b6/0x220 [ 784.941955][T18902] blk_rq_map_user_io+0x1ff/0x230 [ 784.941969][T18902] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 784.941981][T18902] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 784.942001][T18902] sg_common_write.isra.0+0xf74/0x1b90 [ 784.942019][T18902] ? __pfx_sg_common_write.isra.0+0x10/0x10 [ 784.942036][T18902] sg_new_write.isra.0+0x5b9/0xb10 [ 784.942049][T18902] ? __pfx_sg_new_write.isra.0+0x10/0x10 [ 784.942077][T18902] sg_ioctl+0x357/0x2730 [ 784.942089][T18902] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 784.942108][T18902] ? __pfx_sg_ioctl+0x10/0x10 [ 784.942120][T18902] ? find_held_lock+0x2b/0x80 [ 784.942131][T18902] ? hook_file_ioctl_common+0x146/0x410 [ 784.942151][T18902] ? __fget_files+0x21f/0x3d0 [ 784.942165][T18902] ? __pfx_sg_ioctl+0x10/0x10 [ 784.942175][T18902] compat_ptr_ioctl+0x6e/0xa0 [ 784.942192][T18902] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 784.942209][T18902] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 784.942221][T18902] __do_fast_syscall_32+0xde/0x660 [ 784.942237][T18902] do_fast_syscall_32+0x32/0x70 [ 784.942257][T18902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 784.942272][T18902] RIP: 0023:0xf7f93579 [ 784.942281][T18902] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 784.942292][T18902] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 784.942304][T18902] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002285 [ 784.942311][T18902] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 784.942317][T18902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 784.942323][T18902] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 784.942330][T18902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 784.942343][T18902] [ 785.457155][T18915] overlay: ./file0 is not a directory [ 786.750488][T18916] overlay: ./file0 is not a directory [ 787.187563][ T8831] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 787.191970][ T8831] usb 6-1: USB disconnect, device number 35 [ 787.195376][ T8831] usblp0: removed [ 787.253660][ T6455] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 787.393861][T18922] syzkaller0: entered promiscuous mode [ 787.573409][T11423] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 787.671970][T18922] syzkaller0: entered allmulticast mode [ 787.733318][T11423] usb 5-1: Using ep0 maxpacket: 16 [ 787.736665][T11423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 787.742539][T11423] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 787.746906][T11423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.750379][T11423] usb 5-1: Product: syz [ 787.753141][T11423] usb 5-1: Manufacturer: syz [ 787.759809][T11423] usb 5-1: SerialNumber: syz [ 787.768871][T11423] usb 5-1: config 0 descriptor?? [ 787.779600][T11423] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 787.783691][T11423] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 788.385406][T11423] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 788.797005][T11423] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 788.799605][T11423] em28xx 5-1:0.0: board has no eeprom [ 789.708201][T18958] loop2: detected capacity change from 0 to 7 [ 789.711233][T17396] Dev loop2: unable to read RDB block 7 [ 789.713449][T17396] loop2: unable to read partition table [ 789.715362][T17396] loop2: partition table beyond EOD, truncated [ 789.719988][T18958] Dev loop2: unable to read RDB block 7 [ 789.721817][T18958] loop2: unable to read partition table [ 789.724259][T18958] loop2: partition table beyond EOD, truncated [ 789.727828][T18958] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 789.892355][T11423] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 789.895668][T11423] em28xx 5-1:0.0: dvb set to bulk mode. [ 789.898074][ T6455] em28xx 5-1:0.0: Binding DVB extension [ 789.923705][ T6455] em28xx 5-1:0.0: Registering input extension [ 790.043006][T18964] overlay: ./file0 is not a directory [ 790.319051][ T6455] usb 5-1: USB disconnect, device number 23 [ 790.328484][ T6455] em28xx 5-1:0.0: Disconnecting em28xx [ 790.332991][ T6455] em28xx 5-1:0.0: Closing input extension [ 790.344595][ T6455] em28xx 5-1:0.0: Freeing device [ 790.365187][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3658'. [ 791.021273][T18975] overlay: ./file0 is not a directory [ 792.991136][T19005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3667'. [ 793.000952][ T6047] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 793.160905][ T6047] usb 6-1: Using ep0 maxpacket: 16 [ 793.170717][ T6047] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 793.177181][ T6047] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 793.181070][ T6047] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.184399][ T6047] usb 6-1: Product: syz [ 793.186274][ T6047] usb 6-1: Manufacturer: syz [ 793.188250][ T6047] usb 6-1: SerialNumber: syz [ 793.192576][ T6047] usb 6-1: config 0 descriptor?? [ 793.203701][ T6047] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 793.207712][ T6047] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 793.825807][ T6047] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 794.017215][T19031] loop2: detected capacity change from 0 to 7 [ 794.020085][T17396] Dev loop2: unable to read RDB block 7 [ 794.022148][T17396] loop2: unable to read partition table [ 794.024154][T17396] loop2: partition table beyond EOD, truncated [ 794.026882][T19031] Dev loop2: unable to read RDB block 7 [ 794.029204][T19031] loop2: unable to read partition table [ 794.033560][T19031] loop2: partition table beyond EOD, truncated [ 794.036046][T19031] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 794.185598][T19040] input: syz0 as /devices/virtual/input/input58 [ 794.320812][ T6047] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 794.329769][ T6047] em28xx 6-1:0.0: board has no eeprom [ 794.523142][T19049] syzkaller0: entered promiscuous mode [ 794.524954][T19049] syzkaller0: entered allmulticast mode [ 795.506383][T19066] overlay: ./file0 is not a directory [ 795.512891][T19067] overlay: ./file0 is not a directory [ 796.239468][ T6047] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 796.241961][ T6047] em28xx 6-1:0.0: dvb set to bulk mode. [ 796.243718][T13998] em28xx 6-1:0.0: Binding DVB extension [ 796.249565][ T6047] usb 6-1: USB disconnect, device number 36 [ 796.252008][ T6047] em28xx 6-1:0.0: Disconnecting em28xx [ 796.269327][T13998] em28xx 6-1:0.0: Registering input extension [ 796.271409][ T6047] em28xx 6-1:0.0: Closing input extension [ 796.280362][ T6047] em28xx 6-1:0.0: Freeing device [ 796.849411][T19083] netlink: 'syz.1.3687': attribute type 10 has an invalid length. [ 797.076728][T19091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.370610][T19083] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 797.545424][T19095] overlayfs: failed to resolve './file1': -2 [ 798.015490][T19102] loop2: detected capacity change from 0 to 7 [ 798.020044][T17477] Dev loop2: unable to read RDB block 7 [ 798.022439][T17477] loop2: unable to read partition table [ 798.025020][T17477] loop2: partition table beyond EOD, truncated [ 798.238744][T19102] Dev loop2: unable to read RDB block 7 [ 798.248620][T19102] loop2: unable to read partition table [ 798.250960][T19102] loop2: partition table beyond EOD, truncated [ 798.252941][T19102] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 798.411642][T19112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3696'. [ 798.467061][T19116] FAULT_INJECTION: forcing a failure. [ 798.467061][T19116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.471542][T19116] CPU: 2 UID: 0 PID: 19116 Comm: syz.0.3698 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.471560][T19116] Tainted: [L]=SOFTLOCKUP [ 798.471564][T19116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 798.471571][T19116] Call Trace: [ 798.471575][T19116] [ 798.471580][T19116] dump_stack_lvl+0x100/0x190 [ 798.471597][T19116] should_fail_ex.cold+0x5/0xa [ 798.471615][T19116] _copy_from_user+0x2e/0xd0 [ 798.471632][T19116] get_compat_msghdr+0xb3/0x4b0 [ 798.471649][T19116] ? __pfx_get_compat_msghdr+0x10/0x10 [ 798.471669][T19116] ___sys_sendmsg+0x1b6/0x1e0 [ 798.471683][T19116] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.471711][T19116] __sys_sendmsg+0x170/0x220 [ 798.471727][T19116] ? __pfx___sys_sendmsg+0x10/0x10 [ 798.471747][T19116] ? __pfx_ksys_write+0x10/0x10 [ 798.471762][T19116] __do_fast_syscall_32+0xde/0x660 [ 798.471778][T19116] do_fast_syscall_32+0x32/0x70 [ 798.471792][T19116] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 798.471805][T19116] RIP: 0023:0xf7f93579 [ 798.471813][T19116] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 798.471824][T19116] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 798.471835][T19116] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 798.471842][T19116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 798.471848][T19116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 798.471854][T19116] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 798.471861][T19116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 798.471874][T19116] [ 798.637653][T19119] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 799.231830][T19133] fuse: Unknown parameter '000000000000000000050x0000000000000006' [ 799.237658][T19133] overlay: ./file0 is not a directory [ 799.363600][T19135] overlayfs: failed to resolve './file2': -2 [ 799.462308][T19142] syzkaller0: entered promiscuous mode [ 799.464111][T19142] syzkaller0: entered allmulticast mode [ 799.466809][T19145] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3708'. [ 799.473468][T19145] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3708'. [ 799.476408][T19145] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3708'. [ 800.751715][T19165] loop2: detected capacity change from 0 to 7 [ 800.754791][T17477] Dev loop2: unable to read RDB block 7 [ 800.756620][T17477] loop2: unable to read partition table [ 800.758599][T17477] loop2: partition table beyond EOD, truncated [ 800.762428][T19165] Dev loop2: unable to read RDB block 7 [ 800.764272][T19165] loop2: unable to read partition table [ 800.766122][T19165] loop2: partition table beyond EOD, truncated [ 800.768368][T19165] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 800.926726][T19170] fuse: Bad value for 'group_id' [ 800.928497][T19170] fuse: Bad value for 'group_id' [ 801.248480][T19176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3716'. [ 801.540060][T19192] comedi: valid board names for 8255 driver are: [ 801.542689][T19192] 8255 [ 801.543840][T19192] comedi: valid board names for vmk80xx driver are: [ 801.546483][T19192] vmk80xx [ 801.548079][T19192] comedi: valid board names for usbduxsigma driver are: [ 801.550429][T19192] usbduxsigma [ 801.551826][T19192] comedi: valid board names for usbduxfast driver are: [ 801.554609][T19192] usbduxfast [ 801.556076][T19192] comedi: valid board names for usbdux driver are: [ 801.558861][T19192] usbdux [ 801.560191][T19192] comedi: valid board names for ni6501 driver are: [ 801.562854][T19192] ni6501 [ 801.564157][T19192] comedi: valid board names for dt9812 driver are: [ 801.566827][T19192] dt9812 [ 801.568646][T19192] comedi: valid board names for ni_labpc_cs driver are: [ 801.571512][T19192] ni_labpc_cs [ 801.572991][T19192] comedi: valid board names for ni_daq_700 driver are: [ 801.575779][T19192] ni_daq_700 [ 801.577304][T19192] comedi: valid board names for labpc_pci driver are: [ 801.580078][T19192] labpc_pci [ 801.581491][T19192] comedi: valid board names for adl_pci9118 driver are: [ 801.584358][T19192] pci9118dg [ 801.585771][T19192] pci9118hg [ 801.587270][T19192] pci9118hr [ 801.588750][T19192] comedi: valid board names for 8255_pci driver are: [ 801.591508][T19192] 8255_pci [ 801.593336][T19192] comedi: valid board names for s526 driver are: [ 801.596018][T19192] s526 [ 801.597342][T19192] comedi: valid board names for multiq3 driver are: [ 801.600067][T19192] multiq3 [ 801.601458][T19192] comedi: valid board names for pcmuio driver are: [ 801.604156][T19192] pcmuio48 [ 801.605534][T19192] pcmuio96 [ 801.606945][T19192] comedi: valid board names for pcmmio driver are: [ 801.609655][T19192] pcmmio [ 801.610938][T19192] comedi: valid board names for pcmda12 driver are: [ 801.613670][T19192] pcmda12 [ 801.615013][T19192] comedi: valid board names for pcmad driver are: [ 801.617750][T19192] pcmad12 [ 801.619085][T19192] pcmad16 [ 801.620106][T19192] comedi: valid board names for ni_labpc driver are: [ 801.622310][T19192] lab-pc-1200 [ 801.623511][T19192] lab-pc-1200ai [ 801.624763][T19192] lab-pc+ [ 801.625784][T19192] comedi: valid board names for atmio16 driver are: [ 801.628055][T19192] atmio16 [ 801.629166][T19192] atmio16d [ 801.630294][T19192] comedi: valid board names for ni_at_ao driver are: [ 801.632522][T19192] at-ao-6 [ 801.633544][T19192] at-ao-10 [ 801.634648][T19192] comedi: valid board names for ni_at_a2150 driver are: [ 801.636916][T19192] ni_at_a2150 [ 801.638204][T19192] comedi: valid board names for adq12b driver are: [ 801.640354][T19192] adq12b [ 801.641786][T19192] comedi: valid board names for mpc624 driver are: [ 801.643937][T19192] mpc624 [ 801.644935][T19192] comedi: valid board names for c6xdigio driver are: [ 801.647108][T19192] c6xdigio [ 801.648159][T19192] comedi: valid board names for aio_iiro_16 driver are: [ 801.650450][T19192] aio_iiro_16 [ 801.651568][T19192] comedi: valid board names for aio_aio12_8 driver are: [ 801.653760][T19192] aio_aio12_8 [ 801.654870][T19192] aio_ai12_8 [ 801.655948][T19192] aio_ao12_4 [ 801.657142][T19192] comedi: valid board names for fl512 driver are: [ 801.659495][T19192] fl512 [ 801.660574][T19192] comedi: valid board names for dmm32at driver are: [ 801.662986][T19192] dmm32at [ 801.664014][T19192] comedi: valid board names for dt282x driver are: [ 801.666365][T19192] dt2821 [ 801.667905][T19192] dt2821-f [ 801.669284][T19192] dt2821-g [ 801.670554][T19192] dt2823 [ 801.671868][T19192] dt2824-pgh [ 801.673470][T19192] dt2824-pgl [ 801.675035][T19192] dt2825 [ 801.676144][T19192] dt2827 [ 801.677385][T19192] dt2828 [ 801.678359][T19192] dt2829 [ 801.679326][T19192] dt21-ez [ 801.680357][T19192] dt23-ez [ 801.681365][T19192] dt24-ez [ 801.682361][T19192] dt24-ez-pgl [ 801.683513][T19192] comedi: valid board names for dt2817 driver are: [ 801.685589][T19192] dt2817 [ 801.686548][T19192] comedi: valid board names for dt2815 driver are: [ 801.688763][T19192] dt2815 [ 801.689734][T19192] comedi: valid board names for dt2814 driver are: [ 801.691785][T19192] dt2814 [ 801.692751][T19192] comedi: valid board names for dt2811 driver are: [ 801.694821][T19192] dt2811-pgh [ 801.695898][T19192] dt2811-pgl [ 801.697058][T19192] comedi: valid board names for dt2801 driver are: [ 801.699241][T19192] dt2801 [ 801.700211][T19192] comedi: valid board names for das6402 driver are: [ 801.702330][T19192] das6402-12 [ 801.703411][T19192] das6402-16 [ 801.704511][T19192] comedi: valid board names for das1800 driver are: [ 801.706579][T19192] das-1701st [ 801.707744][T19192] das-1701st-da [ 801.708917][T19192] das-1702st [ 801.710085][T19192] das-1702st-da [ 801.711243][T19192] das-1702hr [ 801.712330][T19192] das-1702hr-da [ 801.713490][T19192] das-1701ao [ 801.714571][T19192] das-1702ao [ 801.715647][T19192] das-1801st [ 801.716742][T19192] das-1801st-da [ 801.717982][T19192] das-1802st [ 801.719063][T19192] das-1802st-da [ 801.720317][T19192] das-1802hr [ 801.721462][T19192] das-1802hr-da [ 801.722910][T19192] das-1801hc [ 801.724006][T19192] das-1802hc [ 801.725360][T19192] das-1801ao [ 801.726713][T19192] das-1802ao [ 801.728157][T19192] comedi: valid board names for das800 driver are: [ 801.730890][T19192] das-800 [ 801.732175][T19192] cio-das800 [ 801.733549][T19192] das-801 [ 801.734816][T19192] cio-das801 [ 801.736185][T19192] das-802 [ 801.737546][T19192] cio-das802 [ 801.738922][T19192] cio-das802/16 [ 801.740374][T19192] comedi: valid board names for isa-das08 driver are: [ 801.743430][T19192] isa-das08 [ 801.743809][T19199] tipc: Enabled bearer , priority 10 [ 801.744807][T19192] das08-pgm [ 801.744814][T19192] das08-pgh [ 801.749650][T19192] das08-pgl [ 801.750962][T19192] das08-aoh [ 801.752286][T19192] das08-aol [ 801.753744][T19192] das08-aom [ 801.755097][T19192] das08/jr-ao [ 801.756526][T19192] das08jr-16-ao [ 801.758082][T19192] pc104-das08 [ 801.759513][T19192] das08jr/16 [ 801.760885][T19192] comedi: valid board names for das16m1 driver are: [ 801.763520][T19192] das16m1 [ 801.766743][T19192] comedi: valid board names for dac02 driver are: [ 801.768971][T19192] dac02 [ 801.769920][T19192] comedi: valid board names for rti802 driver are: [ 801.772217][T19192] rti802 [ 801.773175][T19192] comedi: valid board names for rti800 driver are: [ 801.775791][T19192] rti800 [ 801.777153][T19192] rti815 [ 801.778384][T19192] comedi: valid board names for pcm3724 driver are: [ 801.781019][T19192] pcm3724 [ 801.782305][T19192] comedi: valid board names for pcl818 driver are: [ 801.784921][T19192] pcl818l [ 801.786189][T19192] pcl818h [ 801.787560][T19192] pcl818hd [ 801.788891][T19192] pcl818hg [ 801.790193][T19192] pcl818 [ 801.791406][T19192] pcl718 [ 801.792622][T19192] pcm3718 [ 801.793878][T19192] comedi: valid board names for pcl816 driver are: [ 801.796474][T19192] pcl816 [ 801.797789][T19192] pcl814b [ 801.799059][T19192] comedi: valid board names for pcl812 driver are: [ 801.801694][T19192] pcl812 [ 801.802893][T19192] pcl812pg [ 801.804199][T19192] acl8112pg [ 801.805517][T19192] acl8112dg [ 801.806857][T19192] acl8112hg [ 801.808322][T19192] a821pgl [ 801.809397][T19192] a821pglnda [ 801.810519][T19192] a821pgh [ 801.811558][T19192] a822pgl [ 801.812624][T19192] a822pgh [ 801.813632][T19192] a823pgl [ 801.814653][T19192] a823pgh [ 801.815669][T19192] pcl813 [ 801.816656][T19192] pcl813b [ 801.817761][T19192] acl8113 [ 801.818797][T19192] iso813 [ 801.819762][T19192] acl8216 [ 801.820788][T19192] a826pg [ 801.821760][T19192] comedi: valid board names for pcl730 driver are: [ 801.823813][T19192] pcl730 [ 801.824801][T19192] iso730 [ 801.825764][T19192] acl7130 [ 801.826799][T19192] pcm3730 [ 801.827909][T19192] pcl725 [ 801.829083][T19192] p8r8dio [ 801.830133][T19192] acl7225b [ 801.831154][T19192] p16r16dio [ 801.832214][T19192] pcl733 [ 801.833223][T19192] pcl734 [ 801.834206][T19192] opmm-1616-xt [ 801.835328][T19192] pearl-mm-p [ 801.836426][T19192] ir104-pbf [ 801.837569][T19192] comedi: valid board names for pcl726 driver are: [ 801.839653][T19192] pcl726 [ 801.840645][T19192] pcl727 [ 801.841620][T19192] pcl728 [ 801.842572][T19192] acl6126 [ 801.843569][T19192] acl6128 [ 801.844592][T19192] comedi: valid board names for pcl724 driver are: [ 801.846999][T19192] pcl724 [ 801.847986][T19192] pcl722 [ 801.848947][T19192] pcl731 [ 801.849900][T19192] acl7122 [ 801.850899][T19192] acl7124 [ 801.851895][T19192] pet48dio [ 801.852921][T19192] pcmio48 [ 801.853916][T19192] onyx-mm-dio [ 801.855013][T19192] comedi: valid board names for pcl711 driver are: [ 801.857142][T19192] pcl711 [ 801.858101][T19192] pcl711b [ 801.859103][T19192] acl8112hg [ 801.860164][T19192] acl8112dg [ 801.861218][T19192] comedi: valid board names for amplc_pc263 driver are: [ 801.863387][T19192] pc263 [ 801.864345][T19192] comedi: valid board names for amplc_pc236 driver are: [ 801.866522][T19192] pc36at [ 801.867576][T19192] comedi: valid board names for amplc_dio200 driver are: [ 801.869794][T19192] pc212e [ 801.870753][T19192] pc214e [ 801.871709][T19192] pc215e [ 801.872677][T19192] pc218e [ 801.873636][T19192] pc272e [ 801.874593][T19192] comedi: valid board names for comedi_parport driver are: [ 801.876867][T19192] comedi_parport [ 801.878146][T19192] comedi: valid board names for comedi_test driver are: [ 801.880333][T19192] comedi_test [ 801.881443][T19192] comedi: valid board names for comedi_bond driver are: [ 801.883607][T19192] comedi_bond [ 801.931817][T19206] netlink: 'syz.0.3728': attribute type 21 has an invalid length. [ 801.934313][T19206] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3728'. [ 801.937489][T19206] netlink: 'syz.0.3728': attribute type 4 has an invalid length. [ 801.939946][T19206] netlink: 'syz.0.3728': attribute type 3 has an invalid length. [ 801.942466][T19206] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3728'. [ 802.877193][ T6047] tipc: Node number set to 1451388234 [ 803.246580][T19233] overlayfs: overlapping lowerdir path [ 804.665790][T19245] loop2: detected capacity change from 0 to 7 [ 804.669669][T17477] Dev loop2: unable to read RDB block 7 [ 804.671733][T17477] loop2: unable to read partition table [ 804.673656][T17477] loop2: partition table beyond EOD, truncated [ 804.698205][T19245] Dev loop2: unable to read RDB block 7 [ 804.700030][T19245] loop2: unable to read partition table [ 804.701933][T19245] loop2: partition table beyond EOD, truncated [ 804.705399][T19245] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 805.155562][ T8831] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 805.315944][ T8831] usb 8-1: Using ep0 maxpacket: 8 [ 805.319880][ T8831] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 805.323541][ T8831] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 805.328590][ T8831] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 805.332768][ T8831] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 805.337584][ T8831] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 805.343038][ T8831] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 805.347253][ T8831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.554689][T19253] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 805.556790][T19253] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 805.621721][ T8831] usb 8-1: GET_CAPABILITIES returned 0 [ 805.624105][ T8831] usbtmc 8-1:16.0: can't read capabilities [ 805.655359][T19253] vhci_hcd vhci_hcd.0: Device attached [ 805.717669][T19239] x_tables: duplicate underflow at hook 3 [ 805.830485][T19254] vhci_hcd: connection closed [ 805.830689][T14867] vhci_hcd vhci_hcd.1: stop threads [ 805.834213][T14867] vhci_hcd vhci_hcd.1: release socket [ 805.836509][T14867] vhci_hcd vhci_hcd.1: disconnect device [ 806.717820][T19268] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3743'. [ 806.720995][T19268] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3743'. [ 806.724027][T19268] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3743'. [ 806.832974][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3746'. [ 807.054755][ T6047] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 807.204620][ T6047] usb 5-1: Using ep0 maxpacket: 8 [ 807.207531][ T6047] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 807.211181][ T6047] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 807.214399][ T6047] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 807.217656][ T6047] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 807.221720][ T6047] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 807.227329][ T6047] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.436420][ T6047] usb 5-1: GET_CAPABILITIES returned 0 [ 807.438271][ T6047] usbtmc 5-1:16.0: can't read capabilities [ 807.640113][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 807.640128][ T40] audit: type=1326 audit(2000000538.162:7064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19270 comm="syz.0.3745" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x0 [ 807.742323][T19287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.747566][T19287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.759826][ T6455] usb 8-1: USB disconnect, device number 32 [ 808.813695][T19294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3751'. [ 809.805676][ T6455] usb 5-1: USB disconnect, device number 24 [ 809.863555][T19295] comedi comedi2: reset error (fatal) [ 811.172954][ T6455] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 811.322845][ T6455] usb 8-1: Using ep0 maxpacket: 16 [ 811.333131][ T6455] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 811.338795][ T6455] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 811.352545][ T6455] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.355821][ T6455] usb 8-1: Product: syz [ 811.357468][ T6455] usb 8-1: Manufacturer: syz [ 811.359337][ T6455] usb 8-1: SerialNumber: syz [ 811.362484][ T6455] usb 8-1: config 0 descriptor?? [ 811.367661][ T6455] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 811.371223][ T6455] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 811.440554][T19346] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 811.443134][T19346] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 811.446216][T19346] vhci_hcd vhci_hcd.0: Device attached [ 811.541477][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3768'. [ 811.975808][ T8831] usb 38-1: SetAddress Request (42) to port 0 [ 811.977808][ T8831] usb 38-1: new SuperSpeed USB device number 42 using vhci_hcd [ 811.985318][ T6455] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 812.057837][T19347] vhci_hcd: connection reset by peer [ 812.060981][ T1196] vhci_hcd vhci_hcd.0: stop threads [ 812.063907][ T1196] vhci_hcd vhci_hcd.0: release socket [ 812.066337][ T1196] vhci_hcd vhci_hcd.0: disconnect device [ 812.484293][T19358] loop2: detected capacity change from 0 to 7 [ 812.486683][T19358] Dev loop2: unable to read RDB block 7 [ 812.488749][T19358] loop2: unable to read partition table [ 812.491423][T19358] loop2: partition table beyond EOD, truncated [ 812.504841][T19358] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 812.594398][ T6455] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 812.597279][ T6455] em28xx 8-1:0.0: board has no eeprom [ 813.721786][ T6455] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 813.724736][ T6455] em28xx 8-1:0.0: dvb set to bulk mode. [ 813.729482][ T6455] em28xx 8-1:0.0: Binding DVB extension [ 813.801904][ T6455] em28xx 8-1:0.0: Registering input extension [ 813.945406][ T24] usb 8-1: USB disconnect, device number 33 [ 813.947863][ T24] em28xx 8-1:0.0: Disconnecting em28xx [ 813.949625][ T24] em28xx 8-1:0.0: Closing input extension [ 813.979903][ T24] em28xx 8-1:0.0: Freeing device [ 814.164969][T19387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3779'. [ 814.292878][T19392] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 815.062932][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3784'. [ 815.181309][ T13] wlan0: Trigger new scan to find an IBSS to join [ 815.206795][T19411] loop2: detected capacity change from 0 to 7 [ 815.210156][T17477] Dev loop2: unable to read RDB block 7 [ 815.212030][T17477] loop2: unable to read partition table [ 815.213899][T17477] loop2: partition table beyond EOD, truncated [ 815.216576][T19411] Dev loop2: unable to read RDB block 7 [ 815.219203][T19411] loop2: unable to read partition table [ 815.221611][T19411] loop2: partition table beyond EOD, truncated [ 815.223708][T19411] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 816.142191][T19436] overlay: ./file0 is not a directory [ 817.020586][ T8831] usb 38-1: device descriptor read/8, error -110 [ 817.160418][T13998] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 817.310245][T13998] usb 7-1: Using ep0 maxpacket: 16 [ 817.314192][T13998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 817.319406][T13998] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 817.330355][T13998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.340253][T13998] usb 7-1: Product: syz [ 817.350328][T13998] usb 7-1: Manufacturer: syz [ 817.360286][T13998] usb 7-1: SerialNumber: syz [ 817.366020][T13998] usb 7-1: config 0 descriptor?? [ 817.369460][T13998] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 817.373024][T13998] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 817.416736][ T8831] usb usb38-port1: attempt power cycle [ 817.728496][T19471] overlay: ./file0 is not a directory [ 817.983360][ T8831] usb usb38-port1: unable to enumerate USB device [ 818.139996][T14867] wlan0: Trigger new scan to find an IBSS to join [ 818.383852][T19468] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 818.385825][T19468] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 818.387749][T19468] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 818.610533][T13998] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 819.070473][T19480] loop2: detected capacity change from 0 to 7 [ 819.073401][T19446] Dev loop2: unable to read RDB block 7 [ 819.075249][T19446] loop2: unable to read partition table [ 819.077183][T19446] loop2: partition table beyond EOD, truncated [ 819.080726][T19480] Dev loop2: unable to read RDB block 7 [ 819.082541][T19480] loop2: unable to read partition table [ 819.084504][T19480] loop2: partition table beyond EOD, truncated [ 819.086521][T19480] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 819.371064][T13998] em28xx 7-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 819.379382][T13998] em28xx 7-1:0.0: board has no eeprom [ 819.575731][T19486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3808'. [ 819.819235][T19472] Bluetooth: hci3: command 0x0406 tx timeout [ 820.170864][T19494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3810'. [ 820.235675][T19495] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 820.236246][T19494] syzkaller0: entered promiscuous mode [ 820.241027][T19494] syzkaller0: entered allmulticast mode [ 820.468898][T19472] Bluetooth: hci2: command 0x0c1a tx timeout [ 820.470401][T19450] em28xx 7-1:0.0: reading from i2c device at 0xfe00 failed (error=-5) [ 820.471463][T19472] Bluetooth: hci4: command 0x0c1a tx timeout [ 820.539064][T13998] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 820.549843][T13998] em28xx 7-1:0.0: dvb set to bulk mode. [ 820.641529][T13998] em28xx 7-1:0.0: Binding DVB extension [ 820.806209][ T6455] usb 7-1: USB disconnect, device number 37 [ 820.809808][ T6455] em28xx 7-1:0.0: Disconnecting em28xx [ 820.934353][T13998] em28xx 7-1:0.0: Registering input extension [ 820.937017][ T6455] em28xx 7-1:0.0: Closing input extension [ 820.950315][ T6455] em28xx 7-1:0.0: Freeing device [ 821.098686][ T1196] wlan0: Trigger new scan to find an IBSS to join [ 821.394213][T19507] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 821.396903][T19507] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 821.400587][T19507] vhci_hcd vhci_hcd.0: Device attached [ 821.461154][T19510] random: crng reseeded on system resumption [ 821.698507][ T8831] usb 42-1: SetAddress Request (52) to port 0 [ 821.701111][ T8831] usb 42-1: new SuperSpeed USB device number 52 using vhci_hcd [ 821.935037][T19508] vhci_hcd: connection reset by peer [ 821.936861][ T76] vhci_hcd vhci_hcd.2: stop threads [ 821.938586][ T76] vhci_hcd vhci_hcd.2: release socket [ 821.940548][ T76] vhci_hcd vhci_hcd.2: disconnect device [ 822.110157][ T5301] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 822.115395][ T5301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 822.141742][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.141786][ T5301] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 822.153097][ T5301] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 822.157025][ T5301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 822.872684][T19515] chnl_net:caif_netlink_parms(): no params data found [ 822.922728][ T61] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.988222][ T61] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.097680][T19515] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.101078][T19515] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.103405][T19515] bridge_slave_0: entered allmulticast mode [ 823.106057][T19515] bridge_slave_0: entered promiscuous mode [ 823.110470][T19515] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.112907][T19515] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.115168][T19515] bridge_slave_1: entered allmulticast mode [ 823.117902][T19515] bridge_slave_1: entered promiscuous mode [ 823.131501][T19515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.136088][T19515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.150660][T19515] team0: Port device team_slave_0 added [ 823.153652][T19515] team0: Port device team_slave_1 added [ 823.167455][T19515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.172148][T19515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.180175][T19515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.199216][ T61] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.205453][T19515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.208314][T19515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.216313][T19515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.239034][T19515] hsr_slave_0: entered promiscuous mode [ 823.241333][T19515] hsr_slave_1: entered promiscuous mode [ 823.243421][T19515] debugfs: 'hsr0' already exists in 'hsr' [ 823.245259][T19515] Cannot create hsr debugfs directory [ 823.254120][ T61] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.391737][T19515] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 823.400205][T19515] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 823.406191][T19515] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 823.424282][T19515] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 823.473698][T19540] overlay: ./file0 is not a directory [ 824.130788][ T61] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 824.136415][ T61] bond0 (unregistering): Released all slaves [ 824.163348][T19515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.180849][T19515] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.185355][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.187699][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.208358][ T1196] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.210665][ T1196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.214526][ T61] tipc: Disabling bearer [ 824.217819][ T61] tipc: Left network mode [ 824.226506][ T5301] Bluetooth: hci1: command tx timeout [ 824.266816][T19515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 824.278795][T19515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 824.413716][T19515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.587956][ T61] hsr_slave_0: left promiscuous mode [ 824.590040][ T61] hsr_slave_1: left promiscuous mode [ 824.604404][ T61] veth1_macvtap: left promiscuous mode [ 824.606187][ T61] veth0_macvtap: left promiscuous mode [ 824.608440][ T61] veth1_vlan: left promiscuous mode [ 824.610140][ T61] veth0_vlan: left promiscuous mode [ 825.022077][T11423] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 825.179044][T11423] usb 8-1: Using ep0 maxpacket: 16 [ 825.187733][T11423] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 825.193092][T11423] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 825.195924][T11423] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.198706][T11423] usb 8-1: Product: syz [ 825.200055][T11423] usb 8-1: Manufacturer: syz [ 825.201647][T11423] usb 8-1: SerialNumber: syz [ 825.204760][T11423] usb 8-1: config 0 descriptor?? [ 825.208404][T11423] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 825.211316][T11423] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 825.232655][T19586] overlay: ./file0 is not a directory [ 825.812696][T11423] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 826.356500][ T5301] Bluetooth: hci1: command tx timeout [ 826.414917][T19515] veth0_vlan: entered promiscuous mode [ 826.435917][T19515] veth1_vlan: entered promiscuous mode [ 826.438055][T11423] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 826.451359][T11423] em28xx 8-1:0.0: board has no eeprom [ 826.473129][T19515] veth0_macvtap: entered promiscuous mode [ 826.477783][T19515] veth1_macvtap: entered promiscuous mode [ 826.552823][T19515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.560873][T19515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.568461][T14865] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.571264][T14865] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.575818][T14865] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.578831][T14865] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.636936][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.639431][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.660119][T14867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.663188][T14867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.777264][ T8831] usb 42-1: device descriptor read/8, error -110 [ 827.016217][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 827.166594][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 827.171343][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 827.178022][ T8831] usb usb42-port1: attempt power cycle [ 827.183397][ T24] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 827.188318][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.191794][ T24] usb 9-1: Product: syz [ 827.193606][ T24] usb 9-1: Manufacturer: syz [ 827.195557][ T24] usb 9-1: SerialNumber: syz [ 827.206836][ T24] usb 9-1: config 0 descriptor?? [ 827.211826][ T24] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 827.218512][ T24] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 827.555969][T11423] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 827.558539][T11423] em28xx 8-1:0.0: dvb set to bulk mode. [ 827.560722][ T6455] em28xx 8-1:0.0: Binding DVB extension [ 827.588899][ T6455] em28xx 8-1:0.0: Registering input extension [ 827.879975][ T6455] usb 8-1: USB disconnect, device number 34 [ 827.882469][ T6455] em28xx 8-1:0.0: Disconnecting em28xx [ 827.884240][ T6455] em28xx 8-1:0.0: Closing input extension [ 827.907131][ T6455] em28xx 8-1:0.0: Freeing device [ 828.375552][ T5301] Bluetooth: hci1: command tx timeout [ 828.719997][ T24] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 828.722636][ T8831] usb usb42-port1: unable to enumerate USB device [ 829.087433][T19651] loop2: detected capacity change from 0 to 7 [ 829.090259][T17477] Dev loop2: unable to read RDB block 7 [ 829.092530][T17477] loop2: unable to read partition table [ 829.094403][T17477] loop2: partition table beyond EOD, truncated [ 829.176422][ T24] em28xx 9-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 829.178873][T19651] Dev loop2: unable to read RDB block 7 [ 829.180284][ T24] em28xx 9-1:0.0: board has no eeprom [ 829.181727][T19651] loop2: unable to read partition table [ 829.188479][T19651] loop2: partition table beyond EOD, truncated [ 829.190469][T19651] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 829.305219][T11423] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 829.385342][T19659] nbd1: detected capacity change from 0 to 127 [ 830.044870][ T5301] block nbd1: Receive control failed (result -104) [ 830.060413][T19664] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3842'. [ 830.063594][T19664] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3842'. [ 830.066878][T19664] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3842'. [ 830.184849][ T24] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 830.194529][ T24] em28xx 9-1:0.0: dvb set to bulk mode. [ 830.197418][ T54] em28xx 9-1:0.0: Binding DVB extension [ 830.204681][ T24] usb 9-1: USB disconnect, device number 2 [ 830.211555][ T24] em28xx 9-1:0.0: Disconnecting em28xx [ 830.225486][ T54] em28xx 9-1:0.0: Registering input extension [ 830.231266][ T24] em28xx 9-1:0.0: Closing input extension [ 830.241347][ T24] em28xx 9-1:0.0: Freeing device [ 830.454779][ T5301] Bluetooth: hci1: command tx timeout [ 830.464395][T19674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.484689][T11423] usb 8-1: Using ep0 maxpacket: 16 [ 830.487586][T11423] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 830.492089][T11423] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 830.495150][T11423] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.497677][T11423] usb 8-1: Product: syz [ 830.499006][T11423] usb 8-1: Manufacturer: syz [ 830.500493][T11423] usb 8-1: SerialNumber: syz [ 830.503398][T11423] usb 8-1: config 0 descriptor?? [ 830.509488][T11423] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 830.512388][T11423] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 831.120170][T11423] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 831.742962][T11423] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 831.746733][T11423] em28xx 8-1:0.0: board has no eeprom [ 832.357647][T19703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3850'. [ 832.785041][ T118] block nbd1: Connection timed out, retrying (0/1 alive) [ 832.788922][ T118] block nbd1: Connection timed out, retrying (0/1 alive) [ 832.791236][ T118] block nbd1: Connection timed out, retrying (0/1 alive) [ 832.793531][ T118] block nbd1: Connection timed out, retrying (0/1 alive) [ 832.795914][ T118] block nbd1: Dead connection, failed to find a fallback [ 832.798961][ T118] block nbd1: shutting down sockets [ 832.801315][ T118] blk_print_req_error: 88 callbacks suppressed [ 832.801325][ T118] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 832.806413][ T118] buffer_io_error: 87 callbacks suppressed [ 832.806422][ T118] Buffer I/O error on dev nbd1, logical block 3, async page read [ 832.810827][ T118] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 832.813935][ T118] Buffer I/O error on dev nbd1, logical block 2, async page read [ 832.816479][ T118] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 832.819549][ T118] Buffer I/O error on dev nbd1, logical block 1, async page read [ 832.822001][ T118] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 832.825139][ T118] Buffer I/O error on dev nbd1, logical block 0, async page read [ 832.827710][T17477] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 832.830710][T17477] Buffer I/O error on dev nbd1, logical block 0, async page read [ 832.833726][T11423] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 832.835220][T17477] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 832.837072][T11423] em28xx 8-1:0.0: dvb set to bulk mode. [ 832.840016][T17477] Buffer I/O error on dev nbd1, logical block 1, async page read [ 832.840050][T17477] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 832.843406][ T6455] em28xx 8-1:0.0: Binding DVB extension [ 832.845836][T17477] Buffer I/O error on dev nbd1, logical block 2, async page read [ 832.849182][ C3] raw-gadget.0 gadget.3: ignoring, device is not running [ 832.851233][T17477] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 832.877619][T11423] usb 8-1: USB disconnect, device number 35 [ 832.880196][T11423] em28xx 8-1:0.0: Disconnecting em28xx [ 832.895271][ T6455] em28xx 8-1:0.0: Registering input extension [ 832.897448][T11423] em28xx 8-1:0.0: Closing input extension [ 832.904430][T11423] em28xx 8-1:0.0: Freeing device [ 832.977165][T17477] Buffer I/O error on dev nbd1, logical block 3, async page read [ 832.979883][T17477] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 832.982863][T17477] Buffer I/O error on dev nbd1, logical block 0, async page read [ 832.993779][T17477] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 832.998549][T17477] Buffer I/O error on dev nbd1, logical block 1, async page read [ 833.001363][T17477] ldm_validate_partition_table(): Disk read failed. [ 833.004134][T17477] Dev nbd1: unable to read RDB block 0 [ 833.006190][T17477] nbd1: unable to read partition table [ 833.010871][T17477] ldm_validate_partition_table(): Disk read failed. [ 833.013977][T17477] Dev nbd1: unable to read RDB block 0 [ 833.016829][T17477] nbd1: unable to read partition table [ 834.219748][T19744] loop2: detected capacity change from 0 to 7 [ 834.222377][T19744] Dev loop2: unable to read RDB block 7 [ 834.225259][T19744] loop2: unable to read partition table [ 834.227150][T19744] loop2: partition table beyond EOD, truncated [ 834.229229][T19744] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 834.533233][ T54] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 834.705149][ T54] usb 9-1: Using ep0 maxpacket: 16 [ 834.723369][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 834.729132][ T54] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 834.731969][ T54] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.743054][ T54] usb 9-1: Product: syz [ 834.744434][ T54] usb 9-1: Manufacturer: syz [ 834.745972][ T54] usb 9-1: SerialNumber: syz [ 834.762732][ T54] usb 9-1: config 0 descriptor?? [ 834.769333][ T54] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 834.772223][ T54] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 835.371990][ T54] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 835.807450][T19778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3872'. [ 835.977809][ T54] em28xx 9-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 835.981544][ T54] em28xx 9-1:0.0: board has no eeprom [ 837.072172][ T54] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 837.074719][ T54] em28xx 9-1:0.0: dvb set to bulk mode. [ 837.088901][ T24] em28xx 9-1:0.0: Binding DVB extension [ 837.117260][ T24] em28xx 9-1:0.0: Registering input extension [ 837.503462][T13997] usb 9-1: USB disconnect, device number 3 [ 837.505873][T13997] em28xx 9-1:0.0: Disconnecting em28xx [ 837.507610][T13997] em28xx 9-1:0.0: Closing input extension [ 837.522921][T13997] em28xx 9-1:0.0: Freeing device [ 837.975366][T19822] tmpfs: Bad value for 'mpol' [ 838.142809][T19835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3888'. [ 838.383827][T19841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3891'. [ 838.662585][T19867] openvswitch: netlink: IP tunnel dst address not specified [ 838.664966][T19862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3897'. [ 838.671291][T19862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3897'. [ 838.680477][T19862] netlink: 'syz.3.3897': attribute type 18 has an invalid length. [ 838.683820][T19862] netlink: 'syz.3.3897': attribute type 15 has an invalid length. [ 839.123589][T19888] binder: 19883:19888 ioctl c0306201 80000640 returned -22 [ 839.352024][T19894] overlay: ./file0 is not a directory [ 839.544696][T19901] bridge_slave_0: left allmulticast mode [ 839.549816][T19901] bridge_slave_0: left promiscuous mode [ 839.563066][T19901] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.740612][T19901] bridge_slave_1: left allmulticast mode [ 839.811081][T19901] bridge_slave_1: left promiscuous mode [ 839.813377][T19901] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.822896][T19901] bond0: (slave bond_slave_0): Releasing backup interface [ 839.833278][T19901] bond0: (slave bond_slave_1): Releasing backup interface [ 839.852986][T19901] team0: Port device team_slave_0 removed [ 839.928244][T19901] team0: Port device team_slave_1 removed [ 839.932927][T19901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 839.935652][T19901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.944912][T19901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.947523][T19901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.965663][T19901] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 840.189140][T19910] loop2: detected capacity change from 0 to 7 [ 840.201493][T19910] Dev loop2: unable to read RDB block 7 [ 840.203318][T19910] loop2: unable to read partition table [ 840.205188][T19910] loop2: partition table beyond EOD, truncated [ 840.207178][T19910] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 840.211812][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 840.428194][T19917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3912'. [ 840.431541][T19917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3912'. [ 840.448598][ T61] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.456753][ T61] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.462260][ T61] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.468883][ T61] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.483219][T19917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3912'. [ 840.500537][T19917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3912'. [ 840.541007][T19917] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 840.844968][T19930] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 841.381754][T19936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3919'. [ 841.870902][T19945] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3923'. [ 842.980005][T19974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3933'. [ 844.168687][T20004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3944'. [ 844.351408][T20009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3945'. [ 845.122650][T20023] syzkaller0: entered promiscuous mode [ 845.124533][T20023] syzkaller0: entered allmulticast mode [ 846.420815][T20048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3957'. [ 846.641800][ T40] audit: type=1107 audit(2000000577.188:7065): pid=20047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ŒÁ©‡£Ô¢·çJ' [ 847.112230][T20061] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3961'. [ 847.116145][T20061] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3961'. [ 847.120423][T20061] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3961'. [ 847.218047][T20073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3967'. [ 848.712925][T20109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3980'. [ 848.821947][ T40] audit: type=1326 audit(2000000579.359:7066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.0.3982" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 848.831780][ T40] audit: type=1326 audit(2000000579.359:7067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.0.3982" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 848.841194][ T40] audit: type=1326 audit(2000000579.359:7068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.0.3982" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 848.854400][ T40] audit: type=1326 audit(2000000579.359:7069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.0.3982" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 848.855948][T20128] 9pnet_fd: Insufficient options for proto=fd [ 848.877165][ T40] audit: type=1326 audit(2000000579.359:7070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.0.3982" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 848.892989][ T40] audit: type=1326 audit(2000000579.359:7071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.0.3982" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 848.899905][ T5301] Bluetooth: hci2: unexpected event 0x33 length: 96 > 10 [ 848.903470][ T40] audit: type=1326 audit(2000000579.359:7072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.0.3982" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 848.912983][ T40] audit: type=1326 audit(2000000579.359:7073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.0.3982" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 848.920253][ T40] audit: type=1326 audit(2000000579.359:7074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.0.3982" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 848.979046][T20139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3988'. [ 848.983621][T20137] ALSA: mixer_oss: invalid OSS volume 'IGAMN' [ 849.056468][T20147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3992'. [ 849.406091][T20161] syzkaller0: entered promiscuous mode [ 849.408026][T20161] syzkaller0: entered allmulticast mode [ 849.414112][T20161] tmpfs: Unknown parameter 'ÿol' [ 850.296588][T11423] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 850.446591][T11423] usb 7-1: Using ep0 maxpacket: 16 [ 850.449540][T11423] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 850.454197][T11423] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 850.457401][T11423] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.460521][T11423] usb 7-1: Product: syz [ 850.462016][T11423] usb 7-1: Manufacturer: syz [ 850.463628][T11423] usb 7-1: SerialNumber: syz [ 850.470387][T11423] usb 7-1: config 0 descriptor?? [ 850.474621][T11423] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 850.477863][T11423] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 851.079421][T11423] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 851.347021][T20205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4015'. [ 851.743459][T11423] em28xx 7-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 851.748280][T11423] em28xx 7-1:0.0: board has no eeprom [ 852.284758][T20237] netlink: 'syz.0.4024': attribute type 4 has an invalid length. [ 852.341268][T20240] netlink: 'syz.0.4024': attribute type 21 has an invalid length. [ 852.343798][T20240] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4024'. [ 852.346882][T20240] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4024'. [ 852.778268][T20173] em28xx 7-1:0.0: reading from i2c device at 0xfe00 failed (error=-5) [ 852.835580][T11423] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 852.842063][T11423] em28xx 7-1:0.0: dvb set to bulk mode. [ 852.851954][T11423] em28xx 7-1:0.0: Binding DVB extension [ 852.863770][T20251] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4027'. [ 852.867053][T20251] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4027'. [ 852.870155][T20251] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4027'. [ 852.879375][T11423] em28xx 7-1:0.0: Registering input extension [ 853.890839][T20273] fuse: Bad value for 'fd' [ 853.929699][T20273] overlay: ./file0 is not a directory [ 853.947544][T13997] usb 7-1: USB disconnect, device number 38 [ 853.949976][T13997] em28xx 7-1:0.0: Disconnecting em28xx [ 853.951800][T13997] em28xx 7-1:0.0: Closing input extension [ 853.960785][T13997] em28xx 7-1:0.0: Freeing device [ 854.685271][T14865] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 854.957823][T20305] netlink: 'syz.0.4045': attribute type 3 has an invalid length. [ 854.960180][T20305] netlink: 'syz.0.4045': attribute type 3 has an invalid length. [ 855.094317][T20307] syzkaller0: entered promiscuous mode [ 855.096447][T20307] syzkaller0: entered allmulticast mode [ 855.916518][T20325] dlm: non-version read from control device 36 [ 856.909267][T20348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4060'. [ 856.912725][T20348] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4060'. [ 856.957345][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4061'. [ 856.960743][T20350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4061'. [ 856.964548][T20350] netlink: 'syz.3.4061': attribute type 19 has an invalid length. [ 856.967246][T20350] netlink: 'syz.3.4061': attribute type 20 has an invalid length. [ 856.972568][T20350] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4061'. [ 856.980503][T20350] No source specified [ 857.265727][T20364] can0: slcan on ttyS3. [ 857.335415][T20364] can0 (unregistered): slcan off ttyS3. [ 858.233625][T20403] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.4080'. [ 858.288676][T20408] Trying to write to read-only block-device nullb0 [ 858.338647][T20413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4083'. [ 858.535640][T20419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4084'. [ 858.752586][T20422] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4085'. [ 858.755838][T20422] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4085'. [ 858.759116][T20422] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4085'. [ 858.891711][T20431] loop2: detected capacity change from 0 to 7 [ 858.896516][T17477] Dev loop2: unable to read RDB block 7 [ 858.898864][T17477] loop2: unable to read partition table [ 858.900965][T17477] loop2: partition table beyond EOD, truncated [ 859.030207][T20431] Dev loop2: unable to read RDB block 7 [ 859.031983][T20431] loop2: unable to read partition table [ 859.034306][T20431] loop2: partition table beyond EOD, truncated [ 859.036379][T20431] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 859.251770][ T5301] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 859.367724][T20439] syzkaller0: entered promiscuous mode [ 859.373743][T20439] syzkaller0: entered allmulticast mode [ 860.050634][T20463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4100'. [ 860.054358][T20463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4100'. [ 860.125798][T20467] input: syz0 as /devices/virtual/input/input67 [ 861.264405][T20492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4110'. [ 861.277970][T20494] syzkaller0: entered promiscuous mode [ 861.280066][T20494] syzkaller0: entered allmulticast mode [ 863.249316][T20533] sp0: Synchronizing with TNC [ 863.254538][T20533] [U] è [ 863.311629][T20533] syzkaller0: entered promiscuous mode [ 863.313489][T20533] syzkaller0: entered allmulticast mode [ 863.326244][T20535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4123'. [ 863.403249][T20537] overlay: filesystem on ./bus is read-only [ 865.016548][T20556] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4129'. [ 865.020626][T20556] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4129'. [ 865.026642][T20556] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4129'. [ 865.078747][T20558] loop2: detected capacity change from 0 to 7 [ 865.082591][T20558] Dev loop2: unable to read RDB block 7 [ 865.085042][T20558] loop2: unable to read partition table [ 865.087618][T20558] loop2: partition table beyond EOD, truncated [ 865.089932][T20558] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 865.928603][T20569] netlink: 'syz.2.4132': attribute type 4 has an invalid length. [ 865.942826][T20569] netlink: 'syz.2.4132': attribute type 4 has an invalid length. [ 867.256253][T20587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4137'. [ 868.300653][T20604] syzkaller0: entered promiscuous mode [ 868.303109][T20604] syzkaller0: entered allmulticast mode [ 868.352482][T13997] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 868.514340][T13997] usb 7-1: Using ep0 maxpacket: 16 [ 868.518268][T13997] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 868.524791][T13997] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 868.528911][T13997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.532722][T13997] usb 7-1: Product: syz [ 868.534535][T13997] usb 7-1: Manufacturer: syz [ 868.536531][T13997] usb 7-1: SerialNumber: syz [ 868.542437][T13997] usb 7-1: config 0 descriptor?? [ 868.549196][T13997] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 868.553579][T13997] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 869.242195][T13997] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 869.922013][T13997] em28xx 7-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 869.925088][T13997] em28xx 7-1:0.0: board has no eeprom [ 871.012915][T20597] em28xx 7-1:0.0: reading from i2c device at 0xfe00 failed (error=-5) [ 871.093122][T13997] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 871.095676][T13997] em28xx 7-1:0.0: dvb set to bulk mode. [ 871.102938][T13998] em28xx 7-1:0.0: Binding DVB extension [ 871.229482][T13998] em28xx 7-1:0.0: Registering input extension [ 871.330640][T20666] overlayfs: failed to clone upperpath [ 871.359606][T20666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4161'. [ 871.751109][T20675] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4164'. [ 871.756307][T20675] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4164'. [ 871.760158][T20675] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4164'. [ 871.816648][T20679] loop2: detected capacity change from 0 to 7 [ 871.819647][T17477] Dev loop2: unable to read RDB block 7 [ 871.822130][T17477] loop2: unable to read partition table [ 871.824821][T17477] loop2: partition table beyond EOD, truncated [ 871.893148][T20679] Dev loop2: unable to read RDB block 7 [ 871.895096][T20679] loop2: unable to read partition table [ 871.897087][T20679] loop2: partition table beyond EOD, truncated [ 871.899283][T20679] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 872.047280][T20687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4169'. [ 872.051220][T20687] netlink: 'syz.4.4169': attribute type 30 has an invalid length. [ 872.370649][T13998] usb 7-1: USB disconnect, device number 39 [ 872.373187][T13998] em28xx 7-1:0.0: Disconnecting em28xx [ 872.374976][T13998] em28xx 7-1:0.0: Closing input extension [ 872.385780][T13998] em28xx 7-1:0.0: Freeing device [ 873.096099][T20705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4174'. [ 873.512489][ T8831] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 873.677849][T20719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4180'. [ 873.678510][ T8831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.684659][T20719] ------------[ cut here ]------------ [ 873.685766][ T8831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.687287][T20719] !chanctx_conf [ 873.691097][ T8831] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 873.691115][ T8831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.693002][ T8831] usb 9-1: config 0 descriptor?? [ 873.695302][T20719] WARNING: net/mac80211/rate.c:53 at rate_control_rate_init+0x5c5/0x730, CPU#3: syz.3.4180/20719 [ 873.702227][T20719] Modules linked in: [ 873.704026][T20719] CPU: 3 UID: 0 PID: 20719 Comm: syz.3.4180 Tainted: G L syzkaller #0 PREEMPT(full) [ 873.707817][T20719] Tainted: [L]=SOFTLOCKUP [ 873.709238][T20719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 873.712522][T20719] RIP: 0010:rate_control_rate_init+0x5c5/0x730 [ 873.715344][T20719] Code: 48 8d 35 00 00 00 00 e8 99 b3 f6 f6 e8 14 2d 00 f7 e9 20 fe ff ff e8 7a 76 1a f7 90 0f 0b 90 e9 12 fe ff ff e8 6c 76 1a f7 90 <0f> 0b 90 eb b1 e8 61 76 1a f7 e8 dc 33 ff f6 31 ff 89 c3 89 c6 e8 [ 873.721463][T20719] RSP: 0018:ffffc90002be71f0 EFLAGS: 00010283 [ 873.723700][T20719] RAX: 00000000000006ce RBX: ffff8880255dc000 RCX: ffffc90003e9a000 [ 873.726237][T20719] RDX: 0000000000080000 RSI: ffffffff8aebd7f4 RDI: ffff8880126024c0 [ 873.728916][T20719] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 873.731460][T20719] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807501a760 [ 873.734221][T20719] R13: ffff888075630e80 R14: ffff888029b5c000 R15: 0000000000000000 [ 873.736768][T20719] FS: 0000000000000000(0000) GS:ffff8880976e2000(0063) knlGS:00000000f53e6b40 [ 873.739646][T20719] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 873.741944][T20719] CR2: 00000000800003c0 CR3: 0000000050991000 CR4: 0000000000352ef0 [ 873.744749][T20719] Call Trace: [ 873.745855][T20719] [ 873.746822][T20719] rate_control_rate_init_all_links+0x76/0x1f0 [ 873.748826][T20719] sta_apply_auth_flags.isra.0+0x4aa/0x500 [ 873.750705][T20719] sta_apply_parameters+0xcb3/0x1950 [ 873.752517][T20719] ieee80211_add_station+0x3fe/0x6d0 [ 873.754244][T20719] nl80211_new_station+0x1357/0x1c30 [ 873.756050][T20719] ? __pfx_nl80211_new_station+0x10/0x10 [ 873.757917][T20719] ? nl80211_pre_doit+0x19a/0xae0 [ 873.759592][T20719] genl_family_rcv_msg_doit+0x214/0x300 [ 873.761369][T20719] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 873.763411][T20719] ? genl_get_cmd+0x3ef/0x720 [ 873.764956][T20719] ? bpf_lsm_capable+0x9/0x10 [ 873.766478][T20719] ? security_capable+0x80/0x260 [ 873.768144][T20719] ? ns_capable+0xd2/0xf0 [ 873.769553][T20719] genl_rcv_msg+0x560/0x800 [ 873.771030][T20719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 873.772756][T20719] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 873.774489][T20719] ? __pfx_nl80211_new_station+0x10/0x10 [ 873.776762][T20719] ? __pfx_nl80211_post_doit+0x10/0x10 [ 873.778518][T20719] netlink_rcv_skb+0x159/0x420 [ 873.780048][T20719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 873.781907][T20719] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 873.783880][T20719] ? netlink_deliver_tap+0x1ae/0xcc0 [ 873.785815][T20719] genl_rcv+0x28/0x40 [ 873.787077][T20719] netlink_unicast+0x5aa/0x870 [ 873.788632][T20719] ? __pfx_netlink_unicast+0x10/0x10 [ 873.790306][T20719] netlink_sendmsg+0x8b0/0xda0 [ 873.791869][T20719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.793683][T20719] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 873.795603][T20719] ____sys_sendmsg+0xa54/0xc30 [ 873.797125][T20719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 873.799250][T20719] ? __pfx_futex_wake_mark+0x10/0x10 [ 873.801482][T20719] ___sys_sendmsg+0x190/0x1e0 [ 873.803464][T20719] ? __pfx____sys_sendmsg+0x10/0x10 [ 873.805806][T20719] __sys_sendmsg+0x170/0x220 [ 873.807765][T20719] ? __pfx___sys_sendmsg+0x10/0x10 [ 873.810062][T20719] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 873.812622][T20719] __do_fast_syscall_32+0xde/0x660 [ 873.814821][T20719] do_fast_syscall_32+0x32/0x70 [ 873.816914][T20719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 873.819589][T20719] RIP: 0023:0xf73bd579 [ 873.821331][T20719] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 873.829433][T20719] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 873.833042][T20719] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001080 [ 873.836408][T20719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 873.839707][T20719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 873.843099][T20719] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 873.846443][T20719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 873.849880][T20719] [ 873.851217][T20719] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 873.854267][T20719] CPU: 3 UID: 0 PID: 20719 Comm: syz.3.4180 Tainted: G L syzkaller #0 PREEMPT(full) [ 873.858788][T20719] Tainted: [L]=SOFTLOCKUP [ 873.860618][T20719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 873.864788][T20719] Call Trace: [ 873.866207][T20719] [ 873.867501][T20719] dump_stack_lvl+0x100/0x190 [ 873.869463][T20719] vpanic+0x20d/0x630 [ 873.871123][T20719] panic+0xd1/0xd1 [ 873.872701][T20719] ? __pfx_panic+0x10/0x10 [ 873.874474][T20719] check_panic_on_warn.cold+0x19/0x34 [ 873.876172][T20719] ? rate_control_rate_init+0x5c5/0x730 [ 873.877922][T20719] __warn.cold+0x191/0x2f8 [ 873.879336][T20719] __report_bug+0x296/0x3d0 [ 873.880791][T20719] ? rate_control_rate_init+0x5c5/0x730 [ 873.882525][T20719] ? __pfx___report_bug+0x10/0x10 [ 873.884348][T20719] ? netlink_rcv_skb+0x159/0x420 [ 873.885981][T20719] ? genl_rcv+0x28/0x40 [ 873.887324][T20719] ? netlink_unicast+0x5aa/0x870 [ 873.888904][T20719] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 873.890883][T20719] ? __sys_sendmsg+0x170/0x220 [ 873.892412][T20719] ? do_fast_syscall_32+0x32/0x70 [ 873.894053][T20719] ? rate_control_rate_init+0x5c5/0x730 [ 873.896015][T20719] report_bug+0xb2/0x220 [ 873.897384][T20719] ? rate_control_rate_init+0x5c5/0x730 [ 873.899125][T20719] handle_bug+0x166/0x2a0 [ 873.900511][T20719] exc_invalid_op+0x17/0x50 [ 873.901956][T20719] asm_exc_invalid_op+0x1a/0x20 [ 873.903515][T20719] RIP: 0010:rate_control_rate_init+0x5c5/0x730 [ 873.905654][T20719] Code: 48 8d 35 00 00 00 00 e8 99 b3 f6 f6 e8 14 2d 00 f7 e9 20 fe ff ff e8 7a 76 1a f7 90 0f 0b 90 e9 12 fe ff ff e8 6c 76 1a f7 90 <0f> 0b 90 eb b1 e8 61 76 1a f7 e8 dc 33 ff f6 31 ff 89 c3 89 c6 e8 [ 873.911617][T20719] RSP: 0018:ffffc90002be71f0 EFLAGS: 00010283 [ 873.913506][T20719] RAX: 00000000000006ce RBX: ffff8880255dc000 RCX: ffffc90003e9a000 [ 873.916036][T20719] RDX: 0000000000080000 RSI: ffffffff8aebd7f4 RDI: ffff8880126024c0 [ 873.918499][T20719] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 873.920972][T20719] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807501a760 [ 873.923447][T20719] R13: ffff888075630e80 R14: ffff888029b5c000 R15: 0000000000000000 [ 873.926569][T20719] ? rate_control_rate_init+0x5c4/0x730 [ 873.928770][T20719] rate_control_rate_init_all_links+0x76/0x1f0 [ 873.931295][T20719] sta_apply_auth_flags.isra.0+0x4aa/0x500 [ 873.933709][T20719] sta_apply_parameters+0xcb3/0x1950 [ 873.935929][T20719] ieee80211_add_station+0x3fe/0x6d0 [ 873.937765][T20719] nl80211_new_station+0x1357/0x1c30 [ 873.939427][T20719] ? __pfx_nl80211_new_station+0x10/0x10 [ 873.941208][T20719] ? nl80211_pre_doit+0x19a/0xae0 [ 873.942792][T20719] genl_family_rcv_msg_doit+0x214/0x300 [ 873.944788][T20719] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 873.947286][T20719] ? genl_get_cmd+0x3ef/0x720 [ 873.949011][T20719] ? bpf_lsm_capable+0x9/0x10 [ 873.950493][T20719] ? security_capable+0x80/0x260 [ 873.952069][T20719] ? ns_capable+0xd2/0xf0 [ 873.953434][T20719] genl_rcv_msg+0x560/0x800 [ 873.954898][T20719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 873.956480][T20719] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 873.958155][T20719] ? __pfx_nl80211_new_station+0x10/0x10 [ 873.959917][T20719] ? __pfx_nl80211_post_doit+0x10/0x10 [ 873.961628][T20719] netlink_rcv_skb+0x159/0x420 [ 873.963133][T20719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 873.964784][T20719] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 873.966443][T20719] ? netlink_deliver_tap+0x1ae/0xcc0 [ 873.968116][T20719] genl_rcv+0x28/0x40 [ 873.969380][T20719] netlink_unicast+0x5aa/0x870 [ 873.970896][T20719] ? __pfx_netlink_unicast+0x10/0x10 [ 873.972611][T20719] netlink_sendmsg+0x8b0/0xda0 [ 873.974270][T20719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.976502][T20719] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 873.978860][T20719] ____sys_sendmsg+0xa54/0xc30 [ 873.980886][T20719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 873.983103][T20719] ? __pfx_futex_wake_mark+0x10/0x10 [ 873.985356][T20719] ___sys_sendmsg+0x190/0x1e0 [ 873.987349][T20719] ? __pfx____sys_sendmsg+0x10/0x10 [ 873.989569][T20719] __sys_sendmsg+0x170/0x220 [ 873.991422][T20719] ? __pfx___sys_sendmsg+0x10/0x10 [ 873.993567][T20719] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 873.995954][T20719] __do_fast_syscall_32+0xde/0x660 [ 873.998135][T20719] do_fast_syscall_32+0x32/0x70 [ 874.000198][T20719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 874.002825][T20719] RIP: 0023:0xf73bd579 [ 874.004543][T20719] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 874.011260][T20719] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 874.013859][T20719] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001080 [ 874.016328][T20719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 874.018809][T20719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 874.021276][T20719] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 874.023673][T20719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 874.026390][T20719] [ 874.028362][T20719] Kernel Offset: disabled [ 874.030114][T20719] Rebooting in 86400 seconds..