last executing test programs: 5.26700757s ago: executing program 2 (id=3683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="f2", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000400)="b9", 0x1}], 0x1}}], 0x2, 0x4048000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000640)=0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'aio_iiro_16\x00', [0x8001, 0x2, 0x4, 0x0, 0xd, 0xcc7, 0x10001, 0x800004, 0xa, 0xff, 0x2, 0x1, 0x8, 0x1100004, 0x6, 0xa, 0x8, 0x1a449, 0x43, 0x40000003, 0xc, 0x2, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x4, 0xc]}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x40000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000280)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7021a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x16]}}) socket$nl_generic(0x10, 0x3, 0x10) msgget$private(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x15, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x800019e, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) 4.808090394s ago: executing program 0 (id=3685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x30}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x300, r7, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="95", 0x1}], 0x1}, 0x0) 4.147494856s ago: executing program 2 (id=3687): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x68}}, 0x4000000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'ni_daq_700\x00', [0x4f27, 0x0, 0x1, 0x0, 0x63, 0xffff, 0x8, 0x7, 0xa, 0x4, 0x5, 0x1, 0x8, 0x1, 0x0, 0x101, 0xfffffffd, 0x1a449, 0x0, 0x40000006, 0x89, 0xfffffffe, 0xf27, 0x20001e58, 0x8, 0xe69, 0x8, 0x8, 0x6, 0xfffffdfe, 0xfffffff8, 0x3]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="03000000d1000000000000000000000000000000ca902ed456b9606a8bc570a8f676c5a6f139396374a6c94008a6ce3f2a12b59f4274a520d9692de0d828d600ef91a47678cf424d271476f729dd80dcd2d666c0e947ccdd8b701edd269cadc9d3cfa3ced7b56ec9e74efa6ed9fa670be56028d6f18c83e147955f5d70afc2d2469de95a68c94438f13ace5a345d9034ac2ca7526cb8c95a8a80a26f787577e13c726808a06ca0a0fdb736cac0397f1e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) r3 = dup2(r0, r0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r7 = syz_open_dev$sg(&(0x7f00000001c0), 0xfffffffb, 0x5) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000040)) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xb3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r9, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r9, 0x0, 0x0) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x4010, r1}, 0x14) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000000000000000000000000000000000000000000095d63b185a8a59de2995b101182832ae42a468c859d667f28279404aa8052cf944664ad7d3058ba0e80ecf1b7ac8e450388eb31c57d145e968141bf439490d4679273ef5d1e4cdc3786d28ff537f32c2900ba712606a7a5cecbfc972ab2067c349de97ffb4d"], 0x50) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x700, 0x12) r12 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r13 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x0, r1}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="00000000000000008520000001000000852000000300000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xd16, 0x66, &(0x7f0000000340)=""/102, 0x40f00, 0x9, '\x00', r8, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r9, 0x4, &(0x7f0000000580)=[0xffffffffffffffff, r10, r11, 0xffffffffffffffff, r12, r13, r14], &(0x7f00000005c0)=[{0x2, 0x5, 0x5, 0xf}, {0x5, 0x4, 0x6, 0x1}, {0x4, 0x2, 0x2, 0xa}, {0x3, 0x2, 0x0, 0x3}], 0x10, 0x1}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004503005c00000000002f907800a8000000000080000d10000800000086dd080088be00000000100000000100000000000000080022eb00000000200800000200000000000000000000000800655800000000"], 0x0) 4.146548475s ago: executing program 0 (id=3689): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20040800) 4.144058929s ago: executing program 0 (id=3690): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x0, 0x7}, 0x14}}, 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5605, &(0x7f0000000300)={0x6, @win={{0x9, 0x0, 0x31324d4e}, 0x7, 0x1, 0x0, 0xfffffffc, 0x0, 0xf4}}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) io_setup(0x400e, &(0x7f0000000600)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000d40)=0x1, 0xb9a) r4 = syz_usb_connect$cdc_ncm(0x6, 0x19e, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18c, 0x2, 0x1, 0x10, 0x30, 0x2e, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "42f8e5"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x101, 0xb005, 0x5, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x1b}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x9, 0x7f}, @network_terminal={0x7, 0x24, 0xa, 0xf1, 0xe, 0x1}, @mdlm_detail={0xed, 0x24, 0x13, 0x9, "357c2204ebfabed2d19061299ec38e5459f471fed597a0f9945b910a7e1ee358cfa5cdab2effa5ae4e9093b377ed9ef5a5fed09e2898a9e06c30d6681f70fc26206b2f13151dc55b01327016e660e5b391735ca7b7e1b04b2b96b11406229602376321e18fd11058d6384a2d3ae56caef0a7f7011ab608ab9d49eb090b6d444cfbaa4c4b72db0c0f233ce4ac2a89d26ebb3608d1229d5f2b34e1f00ee93bece1a0e74c594b4c80b2656794a4ec2ffb3936121cc283e2dcae533d416b493c40691f35b832be505458c8eaf6420763e7f5cfd6f822f7be1ac6f29e30fca072952fcf59348afc1af3a664"}, @network_terminal={0x7, 0x24, 0xa, 0xe7, 0x3, 0xe, 0xf2}, @mdlm={0x15}, @mdlm={0x15, 0x24, 0x12, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x10, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x36, 0x81, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x86, 0x9}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x3, 0xfe, 0x3, 0x10, 0x3}, 0x3c, &(0x7f0000000200)={0x5, 0xf, 0x3c, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x5, 0xf00f, 0x43f1, [0xff0000, 0xc0, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x46, 0xff, 0xfff9, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0x5f, "3d22a8cf0b49d679d4462dd72f38d4bc"}]}, 0x1, [{0x67, &(0x7f0000000240)=@string={0x67, 0x3, "61052b590c68d2af7c3362b7705cd0cbc3c41f6518a517e5edb9643e981ab87e489fec1c9c7caa41af20c6f8060d2f02796f7a5ae273fc43a57994c766db6f23a20cb1280d53e43e853570e7dfad750571196cf4b37586094662e707bbf39b993cacce7c3e"}}]}) syz_usb_control_io(r4, &(0x7f0000000840)={0x18, &(0x7f00000005c0)={0x20, 0x2d, 0x29, {0x29, 0x23, "0d1ef1740e414bedf466bfc3f2bce30323ec3b877e4aa83efa2bcd8b143f35dbe987379f03e1a3"}}, &(0x7f0000000640)={0x0, 0x3, 0xc5, @string={0xc5, 0x3, "ef9ec323d3b5cc90643ae7c821ed777a469b4b8f8349f1b49057157098e772436908c1ee6b6ec53f9b90c553edf0a5102b1cc65c862978916f5a770a1bc1b5d68d267a0654fa941c44350a4ffff9cd9700f1c617e9ebd14ee7cb4159c11dfcfde5c71f0401bcfabffe567734679ac7ca68b87cda8602ba88090c5154ae699104798fe3fd50366661654a30da95f301c03f876696d70f95373b818141dde15879dcd42b412e413f7544d2af3a0530faa10b0eeaa20f9c2fa89c14b7a974820446d0a112"}}, &(0x7f0000000740)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0xf, 0x81, 0x101}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "fb194f313948439150a09ce8279e37c4"}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd0, 0x0, 0x4, 0x0, "d4eb4b08", "24869eeb"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x80, 0x3, 0x9, 0x3, 0xd, 0x2}}}, &(0x7f0000000c80)={0x44, &(0x7f0000000880)={0x20, 0xe, 0x1f, "e34971ffab3d8fafae40e4c9f43c4cde6009e70679f200358299f9f42e2d86"}, &(0x7f00000008c0)={0x0, 0xa, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xd0}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0xdd5}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "dfa4"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "d7af"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0xfa}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0xc}}) syz_clone3(&(0x7f0000000080)={0xa1800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000040)={0x9, 0x1, 0xb, 0x4, @vifc_lcl_addr=@multicast2, @private=0xa010101}, 0x10) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0105b08, &(0x7f0000000040)) 3.95992991s ago: executing program 1 (id=3691): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 3.958489851s ago: executing program 1 (id=3692): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, 0x0, 0x20000081) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_open_pts(0xffffffffffffffff, 0x40100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./bus\x00', 0x80242, 0x100) chdir(&(0x7f0000000400)='./file1\x00') write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) r4 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004700)=""/4083, 0xff3}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000000780)=""/4137, 0x1029}, {0x0}, {&(0x7f00000001c0)=""/189, 0xbd}], 0x5}, 0x120) r5 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r5, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r4, 0x40000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 3.820050668s ago: executing program 2 (id=3694): r0 = socket(0x1e, 0x4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000002100)={0x0, 0x4, 0x0, 0xfffffffe, 0x4}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) shutdown(r4, 0x1) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.17943986s ago: executing program 2 (id=3697): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7ff}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x11, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) 2.177287291s ago: executing program 3 (id=3698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x30}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x300, r7, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="95", 0x1}], 0x1}, 0x0) 1.966877229s ago: executing program 2 (id=3699): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @ib_path={0x0, r3}}, 0x20) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005f00)=@newtfilter={0x33e8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @filter_kind_options=@f_cgroup={{0xb}, {0x339c, 0x2, [@TCA_CGROUP_ACT={0x26ec, 0x1, [@m_bpf={0x2c, 0x18, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x14c, 0x2, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xfff1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xc}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}]}, {0xff, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x130, 0x11, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xb3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xffffffff, 0x40000000, 0x20000000, 0x50bd, 0xdba8}, 0x3}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x19}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6726, 0xa, 0x20000000, 0x2, 0x7}, 0x4}}]}, {0xa9, 0x6, "8e386b6304234a903ffeb04ae04398b4a7bec77b9f9106f530ff80f067b94e633783204bc1d10217c88bf96db3e8ea762f290f47190824b9011b633f7a9ad14c8440e71d90a8575030e648b600d024992207f470fcaa62e62691eef4b869ab776a11c0a238c2c45e480a86bc32d140cf668adc961257842cfcf8d6853742af3cf26274e65cda3df3ed8074205d9ad221e6479fa1d46496b46cd4bd8c35f25bc6915dca5c13"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x1e8, 0x5, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff8, 0x2, 0x20000000, 0xd, 0x4}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0xfb8e, 0xffffffffffffffff, 0x7fffffff, 0x3}, 0x7f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffb, 0xa, 0xffffffffffffffff, 0x8, 0xf}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0x2, 0x5, 0x1}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x6, 0x8, 0xfffffffb}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xcb97, 0x8, 0x4, 0x6, 0x5}, 0x47}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x10000000, 0x7d, 0xde3}, 0x35}}]}, {0xf5, 0x6, "598da91f982a8ed145ba7bbe9f8283b5e86781e9d4683fca1e82c381970b457dcc5c06066980ed83686a7e161ffcfe258dbd5a69233e30336efc3b873beb47c111c1a1783da86d277ed88ff48620bfa663ef0357d0a4568236da91a9e5e1beb9c47e0ce29ad05352da3b4326bdff1cdd9311a60380ef4575e8154a3b709d6cd31cb26db6425cf9ab973c3e3fbc241732461fad33f3a8b22ad0b970a43bba0ae9a30abe654d763fa38b0ab4b2f7edfb13382932173cebbe51914070fc270b0d9471d024e2fd072e4d62bab51cfa8691e5cfafed0a3bf228d7d37bfc4e8e939a8f815c03eece0856cf91bb2ad769fd3af0ce"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x1058, 0x1b, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x10000000, 0x3477}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8, 0x4, 0x3, 0x1}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x2, 0x5}, 0x4b}}]}, {0xfd8, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0xe8, 0x11, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x200, 0x1, 0x7, 0x1}}]}, {0xa3, 0x6, "1f693c2969f86437847be77e46ceab65e9f599609a15f5490787f874fb517416a6562d8cada525eddd12ec8d2f5e71f62f3b99376cc3d38bdcd71cad980237579fc437741676c21de277a90db649ed5cb6494478bbf597700081b7ecf7b2157f1f5df47a33539b8ae41c2d30ae4727063f3194987662f39b74537dfd48646afe3802268f4c13426e77a6c5abf3f19ae7fa878b35aa9a7e03b3d39ce6f88143"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x10e4, 0x1d, 0x0, 0x0, {{0x7}, {0x1050, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xa1}, @TCA_IPT_TARG={0x1020, 0x6, {0x6, 'nat\x00', 0xa, 0x3, "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"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x6e, 0x6, "cbf1845b98f44da5b8ec7f83d464700297d34816dbed0e642e8994d2fe8b02af519aa5cf1e6610f666a3859d3a82274fb1249ad3d209687a0adb4b728ece9f5db262832b387d5778d42c96115d671e0d244726cc06b53b1fa882526406aeff213dcecbf9aaeec5165e2d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x34, 0x19, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_ACT={0x344, 0x1, [@m_mpls={0xf4, 0x15, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0xf}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x86, 0x6, "aa00d1b0a995a04a3c2bac52810b78c1d805cdd4a2fb06c880fbf35a2453d64b2b361de230c4286de815ac542efb4efce179caf754cd66c6eea191a96db57da8ebfcf3831f4eb614dc30d0b3d76208f4975e8b054d2e6261b125561ff42b4fb0ebae60add05d16a551d68936de25046ee463072d9f0925f6910f9c0086d97498a17f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x10c, 0xe, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0xbd, 0xffffffffffffffff, 0x2, 0xe}}}, @TCA_IFE_METALST={0x34, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x5}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}]}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}]}, {0x54, 0x6, "9f2f7c1e000eb942aeddbac6d2b45f3e82ab53b27374f952b15541799aea6f039c4d7ded1401de7d8f94573461075a85858eeb2d7d2b3427aba10672784594ac85bc8b78b6f4ac35610e2fd8f0533caa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_gact={0xd0, 0x15, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d55, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xaf87, 0xffffffffffffffff, 0x2, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1ea2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1f5, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26c9, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x490, 0xa44, 0x8, 0x6, 0x1c000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x59, 0x8000, 0x0, 0xe50, 0x9}}]}, {0x2b, 0x6, "5bc97f86688b87db53afbd6f61b55e9f04df3429bf092d0cbfa7a7f55dab12aa6de1435c210f6e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x70, 0x5, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xc, 0x7, 0x7, 0x4, 0x10001}, 0x30}}]}, {0x28, 0x6, "b6dab8bd7932b6f294aa7d305b9fe72bae82e1c11cc58e1a76a8bf25f57cc2405bb6adb4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_CGROUP_POLICE={0x49c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x3, 0xe9f3, 0x9, 0xf, 0x2, 0x8, 0xd7, 0x0, 0x1000, 0x2, 0x81, 0x1d, 0x7, 0xfffffffa, 0x80, 0x8, 0x4, 0x5, 0x6, 0x9, 0x5, 0xa7a6, 0x1, 0xfff, 0x1, 0x9, 0x0, 0x4, 0x3ff, 0x8001, 0xf, 0x4, 0x2, 0x7, 0x6, 0x8, 0x2, 0x3, 0x10001, 0x0, 0x2, 0x77, 0x8, 0xe8, 0x80, 0x7, 0xec, 0x100, 0x0, 0xc63f, 0x10, 0x5, 0x40, 0x7, 0x40, 0xfffffff1, 0x40, 0x180, 0x8, 0x7, 0x9, 0x8, 0x80000001, 0x10001, 0x8, 0x7fffffff, 0x1, 0xacd5, 0x40, 0x1, 0x9, 0x7, 0x8, 0x9, 0x401, 0xfffffffd, 0x5, 0x1, 0xc, 0x1, 0x6, 0x0, 0x0, 0x1, 0x200, 0x3, 0x7, 0x7, 0x5e, 0x2, 0x2, 0x40400, 0xfffffffa, 0xb, 0x9, 0x1000, 0x4, 0x9, 0xffff6b4f, 0x5, 0x7, 0x0, 0x80, 0x9f6c, 0x0, 0x4, 0x5, 0xc46, 0x6, 0x0, 0x3, 0x0, 0x5, 0x7, 0x3, 0x6fb, 0x7, 0x5, 0x4, 0x9, 0x1, 0x1000, 0x5, 0x8e, 0x5, 0x101, 0x81, 0xe2, 0x40, 0x300000, 0xd9, 0x8528000, 0x6, 0xe03, 0x400, 0x3ea, 0x4, 0xc6, 0x40, 0x1, 0x4, 0x0, 0x0, 0x34000000, 0x40, 0x8ab, 0xfffffb09, 0xfffffffc, 0xfffffffa, 0x9, 0x7ff, 0x1, 0x7, 0x662a, 0x1e00, 0x1, 0x2, 0x8, 0xffff, 0x4, 0x2, 0x5, 0x1, 0xc, 0x9, 0x0, 0x7fff, 0x1ff, 0x2, 0x8, 0x80000000, 0xfffffff9, 0x5, 0x7, 0x9, 0x8, 0x3, 0x9, 0x0, 0x6, 0xf, 0xfffffffa, 0x6, 0x3, 0xfffffffb, 0x800, 0x80000001, 0x6, 0xd, 0x1, 0x4, 0x1, 0xf8, 0x10001, 0x0, 0x5, 0x9, 0x0, 0x0, 0x0, 0xa, 0xff, 0x9, 0x8001, 0xfffffffa, 0x0, 0x7ff, 0x8, 0xfffffff0, 0x4, 0x9, 0xfffffffa, 0x3, 0x8b, 0xffff, 0xb7b, 0x3, 0xb857, 0x5, 0x5, 0x0, 0xffffff00, 0x5, 0xfffffff0, 0x0, 0x38e5, 0x9, 0x7fff, 0x76, 0x2, 0x8, 0x3ff, 0x8, 0x2, 0xd, 0x7fffffff, 0x6, 0x10001, 0x1, 0x0, 0x7, 0x8001, 0x6, 0x0, 0x0, 0x5, 0x4, 0x80000000, 0x8000, 0x653, 0x8, 0xffff0000, 0x7, 0xb, 0x100]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1800000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x800, 0x3, 0x0, {0x9, 0x2, 0x0, 0x7, 0x3, 0x7}, {0x6, 0x1, 0x7, 0x9, 0x2, 0x3}, 0x3ff, 0x10}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe63, 0x3, 0x401, 0xdd8, 0x1, {0x9, 0x2, 0x6, 0x1000, 0xfff, 0x1000}, {0x1, 0x0, 0xffff, 0x2, 0x9, 0x8}, 0x8001, 0xffff0001, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_CGROUP_ACT={0x2e8, 0x1, [@m_bpf={0x104, 0x7, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xc, 0x8, 0xec, 0x2}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}]}, {0xa5, 0x6, "1128dec8dd602d8090e1c208af4ba0c9222c444afd5a25d6b3c63d39467c5ce298d8077c3649232910386c322cc82576881d313393dc8a7dbf8f3ee1c7a6ff6321fd759a00e6a5002b458314c2cdc2600c1e3538ede328881c52c0c1c59098beefd31cd548742e7becbbe228aa374db3f73aa9fc5a63c73ccf1e0bcb500d5261d391aea1b8f31382263bec83dd11502f374b8c53d7987e87bb2f325d575d7b0476"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x168, 0x2, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0xe9, 0x6, "db12ac6ceae65c65537832c83d749133ba6c801755cd70f1bc8a41b3603b038c8f494cd98b282c88a0b03b6b653430ed71d2e0a383403af16bca62bf1c211f90b117d1895718340ba106dee0e77369a8aa9bef3e3ebb5170a28d8b622f36e5f649630237cfa134b69670d1437805289f02c80a4815610f5175623c5c06548b65e7c8ab65a2ebdafb298ae195a305452b55f89ce1eb6fc781178d1341346b78de51cd4fb7a07e7a3d474468b3adbbce5997a6ea3758e7ff8efed98b862eef5900dda0e7e7d7df274661f63c7840951ebfaeb870ade32cf5d59357eb90db9a3dadacdc5228bc"}, {0xc}, {0xc, 0x8, {0x6, 0x2}}}}, @m_bpf={0x78, 0x14, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}]}, {0x45, 0x6, "d103d01cb4737aad60e6444cd5fb142caf2dcbfa49da4d5b3dca0b41af26d1386168cc8addd5b95488a5be03287cf6dec24c60c3f478387843dc2726149dc8f0ee"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x60, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x7, 0x1, 0xcd1f, 0x9, {0x7e, 0x0, 0x1, 0x5, 0x200}, {0x8, 0x0, 0xff7f, 0x200, 0xa, 0x2}, 0x2, 0x5, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}]}, @TCA_CGROUP_ACT={0x184, 0x1, [@m_tunnel_key={0x180, 0x1d, 0x0, 0x0, {{0xf}, {0x98, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x87f2, 0x3fa1, 0xffffffffffffffff, 0x7}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x7, 0x5, 0x100, 0xa}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}]}, {0xbb, 0x6, "debdf161c20e6e38961a6c405ac5e05955f19e3a7061b09885d98e6f0c9ac9bfb5b106c2701ba5a71e28f3c18086fd62d2cee0843113cac0e1b9383674338a44f1b217b185efe14f145169e52ff99a2f49468eea8eff8dee0a439a4b3aaf785e6ea50f2e4ed99fd29cebdb15d07e81c848b796e31ae2cd80182f70d50998dbe22e007e455a33ca5d251b578dfa395f104b95f6aaf64bf183fa997c394b3dcca6b0759c03668bf5105ed6c01b025a47a54220ecfd1fecbd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x33e8}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 1.891038002s ago: executing program 1 (id=3700): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20040800) 1.757486649s ago: executing program 1 (id=3701): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.75717516s ago: executing program 3 (id=3702): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="68000000020605000000000000000000030000100500150001d70c68e900078005000700000000b64e64000800064000001000060004404e2200000c000780080013000000000312000300686173683a6e65742c706f7274000000050005005dd8a773b670e2ed00000000b4a9d8db3853b42b4e5c42ceb19fa574e4aaa4d69c1851413420be6ee29a296f2a5b0e554bb61661c8f54ba61da65c15745026cabce1e383e844ad1c1bd0c7452e55f8c5ebd9baf73d302df42f1b515d880bc44ad237bd21ab21dd3c69b4bda143905f3fee7bdf4498776433764973521628606b18ae06757c554c9473c1fc9f5311dd8f3e4541e6d27cd7baa63a7f6eda24716f02a38f7158e4a41a84de7f2a8205c2087e63aa6177779a972e294a7beafa812ab04eafd1c73e6c2f65239412c1dcb093591d821d3de808390f2d0af3158ef2d85ee0cde89ae64ef9274e193be7e764298c37f457680819be733b519ac5b61e6e58"], 0x68}}, 0x4000000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'ni_daq_700\x00', [0x4f27, 0x0, 0x1, 0x0, 0x63, 0xffff, 0x8, 0x7, 0xa, 0x4, 0x5, 0x1, 0x8, 0x1, 0x0, 0x101, 0xfffffffd, 0x1a449, 0x0, 0x40000006, 0x89, 0xfffffffe, 0xf27, 0x20001e58, 0x8, 0xe69, 0x8, 0x8, 0x6, 0xfffffdfe, 0xfffffff8, 0x3]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="03000000d1000000000000000000000000000000ca902ed456b9606a8bc570a8f676c5a6f139396374a6c94008a6ce3f2a12b59f4274a520d9692de0d828d600ef91a47678cf424d271476f729dd80dcd2d666c0e947ccdd8b701edd269cadc9d3cfa3ced7b56ec9e74efa6ed9fa670be56028d6f18c83e147955f5d70afc2d2469de95a68c94438f13ace5a345d9034ac2ca7526cb8c95a8a80a26f787577e13c726808a06ca0a0fdb736cac0397f1e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) r3 = dup2(r0, r0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r7 = syz_open_dev$sg(&(0x7f00000001c0), 0xfffffffb, 0x5) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000040)) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xb3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r9, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r9, 0x0, 0x0) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x4010, r1}, 0x14) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000000000000000000000000000000000000000000095d63b185a8a59de2995b101182832ae42a468c859d667f28279404aa8052cf944664ad7d3058ba0e80ecf1b7ac8e450388eb31c57d145e968141bf439490d4679273ef5d1e4cdc3786d28ff537f32c2900ba712606a7a5cecbfc972ab2067c349de97ffb4d"], 0x50) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x700, 0x12) r12 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r13 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x0, r1}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000070000000000000006000000186200300700000000000000ffffffff1834000001000000000000000000000085660100010000001840000005000000000000000000000018180000e2774cd1c40009a0c16445fbe57f592992808060eb48acf69a432eb23c7054189e4af609dec1e6727e38d2570ffcf1c6fdeaa3d555567263431501bdc5ec8faeb1bd8b538d8011fd3e03eefd145b2ae6f8a2f8ebf3355823500491c0dd32235e25aa5c848b61bad3afafb1d966eb8ed08db2aa13feb461351557927ea57ac459d2a1dbbb3fe1f4288ce90c03f18d72d5767c14f577799cfa633b00ade78a38566aacc21edac074a9f18ff870ec17db776e1c0ca1e4566c67e6f008dc11ff5541d889d9a809cfdb715261c4ed2b0bf20ee1358a186852ba643935e725dc7a49e596655e4ce781", @ANYRES32=r2, @ANYBLOB="00000000000000008520000001000000852000000300000018160000", @ANYRES32=r3, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xd16, 0x66, &(0x7f0000000340)=""/102, 0x40f00, 0x9, '\x00', r8, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r9, 0x4, &(0x7f0000000580)=[0xffffffffffffffff, r10, r11, 0xffffffffffffffff, r12, r13, r14], &(0x7f00000005c0)=[{0x2, 0x5, 0x5, 0xf}, {0x5, 0x4, 0x6, 0x1}, {0x4, 0x2, 0x2, 0xa}, {0x3, 0x2, 0x0, 0x3}], 0x10, 0x1}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004503005c00000000002f907800a8000000000080000d10000800000086dd080088be00000000100000000100000000000000080022eb00000000200800000200000000000000000000000800655800000000"], 0x0) 1.756839976s ago: executing program 1 (id=3703): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000005c0)={0xfc2, 0x8}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2b423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180200008677000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c0000008500000006000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f00000004c0)="0000000000000081d5c7f80c857d", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@fallback=r10, 0x35, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0b000000000000006f1d6928988cfc05157a3c06069d2efa87a269e7402d0ecba7ebceacb9dee0ba823eaeab1fb09d6b07c45d23b12d614d49bd7b6cf34663c75bd1339fe8be5259c24d615a9aaaef88446095716ca8179e9e6ac3bf42e50c9baafae4ef69e823dca4e8f9dc07eb274545994ce1140f1c1511ec61", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1900edff01000000e11b8c67d5bebe589b6308aa0b2fea00000000", @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYBLOB="0d00000018231d00", @ANYBLOB="84f2f6772866a8106b934ffd020062deb0f7", @ANYRESOCT=r0, @ANYBLOB, @ANYRES64=r11], 0x20) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./bus\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r12, @ANYRES32, @ANYRES8, @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@netkit={@void, @value, @void, @void, r11}}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x58, &(0x7f0000000400)}, 0x10) 1.509524972s ago: executing program 3 (id=3704): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c0050014260360ab1208000f0000000401a80016001100014003000300036010faccfdeb1d40696d936980b925b35381df6486338260de280e900094007134cf6ee08000a0e408e858ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpriority(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r1, &(0x7f0000001e80), 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRESHEX], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="f572c10000a88c43c226f0a6380778c72739a0", @ANYRESHEX, @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x6a040000) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r3, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) ioctl$BLKRRPART(r3, 0x125f, 0x1f) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125094f12fb288371740000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x9d2}, 0x40) 929.987108ms ago: executing program 0 (id=3705): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000007c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c050}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x3000, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) 928.966014ms ago: executing program 2 (id=3706): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000500)={'mangle\x00', 0x0, [0x5, 0x8, 0x20000004, 0x3, 0x4]}, &(0x7f0000000040)=0x54) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) 819.942586ms ago: executing program 1 (id=3707): openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0xffff7ffffffffffe, 0xfffffffc, 0x8}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000005c0), 0x1, 0x509480) syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c1, 0x0, 0x100000, 0x63}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}}, 0x810) connect$caif(0xffffffffffffffff, &(0x7f0000000340)=@dbg={0x25, 0x3, 0x1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xfbb4, 0x2000, 0x1, 0x4, 0x0, r8}, &(0x7f0000000300), 0x0) r9 = syz_open_dev$dri(0x0, 0x6a1, 0x4f2302) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, r10}) 479.847796ms ago: executing program 3 (id=3708): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff6a0af0fff8ffffff61a4f0ff0000000066040200000000001d400200000000004704000001ed00006203000000ffffffcf440000000000007a0a00ff00ffffffc30300ffa0000000b4000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa0f040000c72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204ab3949006c3172171652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c247afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0e3adde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b39578052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r2, 0x7c81, 0x0) 299.952837ms ago: executing program 3 (id=3709): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20040800) 238.571464ms ago: executing program 3 (id=3710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x30}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x300, r7, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="95", 0x1}], 0x1}, 0x0) 50.061823ms ago: executing program 0 (id=3711): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 0s ago: executing program 0 (id=3712): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) (fail_nth: 4) kernel console output (not intermixed with test programs): 1][T16215] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 533.162607][T16215] ? __fget_files+0x21f/0x3d0 [ 533.162622][T16215] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 533.162636][T16215] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 533.162656][T16215] __do_fast_syscall_32+0xde/0x660 [ 533.162672][T16215] do_fast_syscall_32+0x32/0x70 [ 533.162687][T16215] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.162700][T16215] RIP: 0023:0xf73ed579 [ 533.162709][T16215] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 533.162720][T16215] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 533.162731][T16215] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 533.162738][T16215] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.162745][T16215] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.162751][T16215] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 533.162758][T16215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.162771][T16215] [ 533.269691][T16215] tipc: Resetting bearer [ 533.272890][T16214] tipc: Resetting bearer [ 533.281275][T16214] tipc: Disabling bearer [ 533.705253][T16227] FAULT_INJECTION: forcing a failure. [ 533.705253][T16227] name failslab, interval 1, probability 0, space 0, times 0 [ 533.709415][T16227] CPU: 2 UID: 0 PID: 16227 Comm: syz.0.3078 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.709434][T16227] Tainted: [L]=SOFTLOCKUP [ 533.709438][T16227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 533.709445][T16227] Call Trace: [ 533.709449][T16227] [ 533.709454][T16227] dump_stack_lvl+0x100/0x190 [ 533.709472][T16227] should_fail_ex.cold+0x5/0xa [ 533.709489][T16227] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 533.709501][T16227] should_failslab+0xc2/0x120 [ 533.709518][T16227] kmem_cache_alloc_noprof+0x83/0x780 [ 533.709533][T16227] ? skb_clone+0x190/0x400 [ 533.709553][T16227] ? skb_clone+0x190/0x400 [ 533.709568][T16227] skb_clone+0x190/0x400 [ 533.709585][T16227] netlink_deliver_tap+0xaed/0xcc0 [ 533.709606][T16227] netlink_unicast+0x650/0x870 [ 533.709626][T16227] ? __pfx_netlink_unicast+0x10/0x10 [ 533.709649][T16227] netlink_sendmsg+0x8b0/0xda0 [ 533.709669][T16227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.709688][T16227] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 533.709705][T16227] ____sys_sendmsg+0xa54/0xc30 [ 533.709719][T16227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.709738][T16227] ___sys_sendmsg+0x190/0x1e0 [ 533.709752][T16227] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.709781][T16227] __sys_sendmsg+0x170/0x220 [ 533.709798][T16227] ? __pfx___sys_sendmsg+0x10/0x10 [ 533.709820][T16227] ? __pfx_ksys_write+0x10/0x10 [ 533.709836][T16227] __do_fast_syscall_32+0xde/0x660 [ 533.709852][T16227] do_fast_syscall_32+0x32/0x70 [ 533.709866][T16227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.709881][T16227] RIP: 0023:0xf7f93579 [ 533.709890][T16227] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 533.709901][T16227] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 533.709912][T16227] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 533.709919][T16227] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.709926][T16227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.709932][T16227] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 533.709939][T16227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.709966][T16227] [ 534.396473][T16242] tipc: Enabled bearer , priority 0 [ 534.399328][T16242] syzkaller0: entered promiscuous mode [ 534.401074][T16242] syzkaller0: entered allmulticast mode [ 534.418459][T16241] tipc: Resetting bearer [ 534.429582][T16241] tipc: Disabling bearer [ 535.386763][ T10] IPVS: starting estimator thread 0... [ 535.484729][T16273] IPVS: using max 27 ests per chain, 64800 per kthread [ 535.969757][T16282] tmpfs: Unknown parameter 'hash' [ 536.243313][T16289] syz.2.3094 (16289): /proc/16283/oom_adj is deprecated, please use /proc/16283/oom_score_adj instead. [ 536.704495][ T951] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 536.855122][T16300] FAULT_INJECTION: forcing a failure. [ 536.855122][T16300] name failslab, interval 1, probability 0, space 0, times 0 [ 536.859432][T16300] CPU: 0 UID: 0 PID: 16300 Comm: syz.3.3098 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.859451][T16300] Tainted: [L]=SOFTLOCKUP [ 536.859455][T16300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 536.859462][T16300] Call Trace: [ 536.859466][T16300] [ 536.859471][T16300] dump_stack_lvl+0x100/0x190 [ 536.859501][T16300] should_fail_ex.cold+0x5/0xa [ 536.859520][T16300] should_failslab+0xc2/0x120 [ 536.859537][T16300] ? sock_kmalloc+0x111/0x170 [ 536.859548][T16300] __kmalloc_noprof+0xf6/0x9c0 [ 536.859560][T16300] ? do_raw_spin_lock+0x128/0x260 [ 536.859580][T16300] ? sock_kmalloc+0x111/0x170 [ 536.859591][T16300] sock_kmalloc+0x111/0x170 [ 536.859603][T16300] hash_alloc_result+0xd7/0x150 [ 536.859620][T16300] hash_recvmsg+0x196/0x930 [ 536.859639][T16300] ____sys_recvmsg+0x5f7/0x6b0 [ 536.859654][T16300] ? __pfx_____sys_recvmsg+0x10/0x10 [ 536.859672][T16300] ? __lock_acquire+0x4a5/0x2630 [ 536.859689][T16300] ___sys_recvmsg+0x16a/0x1a0 [ 536.859703][T16300] ? __pfx____sys_recvmsg+0x10/0x10 [ 536.859718][T16300] ? find_held_lock+0x2b/0x80 [ 536.859733][T16300] ? __pfx___might_resched+0x10/0x10 [ 536.859754][T16300] do_recvmmsg+0x563/0x760 [ 536.859770][T16300] ? __pfx_do_recvmmsg+0x10/0x10 [ 536.859785][T16300] ? ksys_write+0x190/0x250 [ 536.859797][T16300] ? ksys_write+0x190/0x250 [ 536.859814][T16300] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 536.859833][T16300] __sys_recvmmsg+0x21f/0x270 [ 536.859851][T16300] ? __pfx___sys_recvmmsg+0x10/0x10 [ 536.859869][T16300] ? ksys_write+0x1ac/0x250 [ 536.859883][T16300] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 536.859901][T16300] ? __do_fast_syscall_32+0x97/0x660 [ 536.859915][T16300] ? lockdep_hardirqs_on+0x78/0x100 [ 536.859929][T16300] __do_fast_syscall_32+0xde/0x660 [ 536.859945][T16300] do_fast_syscall_32+0x32/0x70 [ 536.859959][T16300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.859973][T16300] RIP: 0023:0xf7f91579 [ 536.859983][T16300] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 536.859994][T16300] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 536.860005][T16300] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080003700 [ 536.860013][T16300] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.860019][T16300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.860026][T16300] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 536.860032][T16300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.860047][T16300] [ 536.995135][ T951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.004634][ T951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.014701][ T951] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 537.034426][ T951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.056406][ T951] usb 5-1: config 0 descriptor?? [ 537.246098][ T10] IPVS: starting estimator thread 0... [ 537.334494][T16309] IPVS: using max 43 ests per chain, 103200 per kthread [ 537.482191][ T951] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 537.492068][ T951] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 537.499343][ T951] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.0006/input/input35 [ 537.527047][ T951] cm6533_jd 0003:0D8C:0022.0006: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 537.682485][ T10] usb 5-1: USB disconnect, device number 36 [ 538.360723][ T40] audit: type=1326 audit(1769804371.959:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.0.3104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 538.367578][ T40] audit: type=1326 audit(1769804371.959:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.0.3104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 538.374984][ T40] audit: type=1326 audit(1769804371.959:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.0.3104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 538.381726][ T40] audit: type=1326 audit(1769804371.959:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.0.3104" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 538.389059][ T40] audit: type=1326 audit(1769804371.959:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.0.3104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 538.397414][ T40] audit: type=1326 audit(1769804371.959:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.0.3104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 538.403931][ T40] audit: type=1326 audit(1769804371.959:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.0.3104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 538.410565][ T40] audit: type=1326 audit(1769804371.959:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.0.3104" exe="/syz-executor" sig=0 arch=40000003 syscall=94 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 538.417142][ T40] audit: type=1326 audit(1769804371.959:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.0.3104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 538.423696][ T40] audit: type=1326 audit(1769804371.959:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16321 comm="syz.0.3104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 538.461288][T16331] tmpfs: Unknown parameter 'hash' [ 538.773278][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3111'. [ 538.821321][T16345] FAULT_INJECTION: forcing a failure. [ 538.821321][T16345] name failslab, interval 1, probability 0, space 0, times 0 [ 538.826743][T16345] CPU: 1 UID: 0 PID: 16345 Comm: syz.1.3112 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.826771][T16345] Tainted: [L]=SOFTLOCKUP [ 538.826776][T16345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 538.826785][T16345] Call Trace: [ 538.826790][T16345] [ 538.826796][T16345] dump_stack_lvl+0x100/0x190 [ 538.826819][T16345] should_fail_ex.cold+0x5/0xa [ 538.826843][T16345] should_failslab+0xc2/0x120 [ 538.826863][T16345] ? tomoyo_realpath_from_path+0xb6/0x690 [ 538.826878][T16345] __kmalloc_noprof+0xf6/0x9c0 [ 538.826902][T16345] ? tomoyo_realpath_from_path+0xb6/0x690 [ 538.826919][T16345] tomoyo_realpath_from_path+0xb6/0x690 [ 538.826943][T16345] tomoyo_path_number_perm+0x23c/0x580 [ 538.826967][T16345] ? tomoyo_path_number_perm+0x22e/0x580 [ 538.826994][T16345] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 538.827044][T16345] ? find_held_lock+0x2b/0x80 [ 538.827061][T16345] ? hook_file_ioctl_common+0x146/0x410 [ 538.827085][T16345] ? __fget_files+0x215/0x3d0 [ 538.827104][T16345] ? __fget_files+0x21f/0x3d0 [ 538.827123][T16345] security_file_ioctl_compat+0xd3/0x230 [ 538.827146][T16345] __ia32_compat_sys_ioctl+0xc2/0x360 [ 538.827171][T16345] __do_fast_syscall_32+0xde/0x660 [ 538.827192][T16345] do_fast_syscall_32+0x32/0x70 [ 538.827210][T16345] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 538.827228][T16345] RIP: 0023:0xf73ed579 [ 538.827240][T16345] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 538.827254][T16345] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 538.827269][T16345] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 538.827280][T16345] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 538.827290][T16345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 538.827300][T16345] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 538.827310][T16345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 538.827335][T16345] [ 538.827343][T16345] ERROR: Out of memory at tomoyo_realpath_from_path. [ 539.214439][ T6138] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 539.367676][ T6138] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.374712][ T6138] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.378645][ T6138] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 539.382309][ T6138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.397510][ T6138] usb 6-1: config 0 descriptor?? [ 539.816662][ T6138] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 539.821734][ T6138] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 539.830321][ T6138] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.0007/input/input36 [ 539.853241][ T6138] cm6533_jd 0003:0D8C:0022.0007: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 540.017283][ T61] usb 6-1: USB disconnect, device number 37 [ 540.113263][T16361] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.183432][T16361] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.252299][T16361] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.321179][T16361] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.376157][T16365] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 540.379115][T16365] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 540.382011][T16365] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 540.385323][T16365] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 540.393235][ T1191] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.405513][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.418914][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.429668][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.604210][T16375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.613403][T16375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.629587][T16375] binder_alloc: 16374: binder_alloc_buf, no vma [ 540.728858][T16382] FAULT_INJECTION: forcing a failure. [ 540.728858][T16382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.733207][T16382] CPU: 0 UID: 0 PID: 16382 Comm: syz.1.3123 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.733226][T16382] Tainted: [L]=SOFTLOCKUP [ 540.733230][T16382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 540.733236][T16382] Call Trace: [ 540.733241][T16382] [ 540.733246][T16382] dump_stack_lvl+0x100/0x190 [ 540.733263][T16382] should_fail_ex.cold+0x5/0xa [ 540.733281][T16382] _copy_from_user+0x2e/0xd0 [ 540.733299][T16382] cmsghdr_from_user_compat_to_kern+0x354/0x7d0 [ 540.733320][T16382] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 540.733343][T16382] ? __import_iovec+0x1d2/0x640 [ 540.733378][T16382] ____sys_sendmsg+0x607/0xc30 [ 540.733392][T16382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.733403][T16382] ? _parse_integer_limit+0x17f/0x1d0 [ 540.733424][T16382] ? _kstrtoull+0x13c/0x1f0 [ 540.733435][T16382] ? __pfx__kstrtoull+0x10/0x10 [ 540.733449][T16382] ___sys_sendmsg+0x190/0x1e0 [ 540.733464][T16382] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.733476][T16382] ? __lock_acquire+0x4a5/0x2630 [ 540.733497][T16382] ? find_held_lock+0x2b/0x80 [ 540.733516][T16382] __sys_sendmmsg+0x2ff/0x430 [ 540.733535][T16382] ? __pfx___sys_sendmmsg+0x10/0x10 [ 540.733557][T16382] ? __fget_files+0x215/0x3d0 [ 540.733575][T16382] ? fput+0x79/0x100 [ 540.733590][T16382] ? ksys_write+0x1ac/0x250 [ 540.733602][T16382] ? __pfx_ksys_write+0x10/0x10 [ 540.733616][T16382] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 540.733637][T16382] ? lockdep_hardirqs_on+0x78/0x100 [ 540.733652][T16382] __do_fast_syscall_32+0xde/0x660 [ 540.733667][T16382] do_fast_syscall_32+0x32/0x70 [ 540.733682][T16382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 540.733696][T16382] RIP: 0023:0xf73ed579 [ 540.733705][T16382] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 540.733716][T16382] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 540.733728][T16382] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002700 [ 540.733735][T16382] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 540.733741][T16382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.733747][T16382] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 540.733754][T16382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.733767][T16382] [ 540.898566][T16386] FAULT_INJECTION: forcing a failure. [ 540.898566][T16386] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 540.903392][T16386] CPU: 1 UID: 0 PID: 16386 Comm: syz.1.3125 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.903410][T16386] Tainted: [L]=SOFTLOCKUP [ 540.903414][T16386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 540.903421][T16386] Call Trace: [ 540.903427][T16386] [ 540.903432][T16386] dump_stack_lvl+0x100/0x190 [ 540.903450][T16386] should_fail_ex.cold+0x5/0xa [ 540.903467][T16386] ? prepare_alloc_pages+0x16d/0x5f0 [ 540.903485][T16386] should_fail_alloc_page+0xeb/0x140 [ 540.903503][T16386] prepare_alloc_pages+0x1f0/0x5f0 [ 540.903523][T16386] __alloc_frozen_pages_noprof+0x193/0x2410 [ 540.903542][T16386] ? lock_acquire+0x17c/0x330 [ 540.903558][T16386] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 540.903578][T16386] ? lock_acquire+0x17c/0x330 [ 540.903594][T16386] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 540.903609][T16386] ? policy_nodemask+0xed/0x4f0 [ 540.903626][T16386] alloc_pages_mpol+0x1fb/0x550 [ 540.903642][T16386] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 540.903662][T16386] folio_alloc_mpol_noprof+0x36/0x340 [ 540.903682][T16386] vma_alloc_folio_noprof+0xed/0x1d0 [ 540.903700][T16386] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 540.903722][T16386] do_anonymous_page+0xb10/0x1f40 [ 540.903740][T16386] __handle_mm_fault+0x1d3a/0x2b50 [ 540.903756][T16386] ? __pfx___handle_mm_fault+0x10/0x10 [ 540.903770][T16386] ? __pte_offset_map_lock+0x174/0x320 [ 540.903786][T16386] ? find_held_lock+0x2b/0x80 [ 540.903801][T16386] ? follow_page_pte+0x5b4/0x1410 [ 540.903821][T16386] handle_mm_fault+0x36d/0xa20 [ 540.903836][T16386] __get_user_pages+0xf9c/0x34d0 [ 540.903857][T16386] ? down_read_killable+0x30e/0x4c0 [ 540.903874][T16386] ? __pfx___get_user_pages+0x10/0x10 [ 540.903891][T16386] ? __pfx_gup_fast_fallback+0x10/0x10 [ 540.903908][T16386] ? is_bpf_text_address+0x8a/0x1a0 [ 540.903928][T16386] get_user_pages_unlocked+0x1cb/0x7d0 [ 540.903948][T16386] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 540.903966][T16386] ? get_user_pages_fast_only+0xae/0xf0 [ 540.903983][T16386] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 540.904001][T16386] ? __pfx___might_resched+0x10/0x10 [ 540.904021][T16386] hva_to_pfn+0x871/0xe60 [ 540.904037][T16386] ? __pfx_hva_to_pfn+0x10/0x10 [ 540.904054][T16386] ? do_raw_write_lock+0x11e/0x260 [ 540.904074][T16386] ? mark_held_locks+0x40/0x70 [ 540.904092][T16386] __kvm_gpc_refresh+0xdbe/0x24a0 [ 540.904111][T16386] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 540.904130][T16386] ? mark_held_locks+0x40/0x70 [ 540.904146][T16386] __kvm_gpc_activate+0x2ab/0x4b0 [ 540.904162][T16386] kvm_gpc_activate+0x60/0xa0 [ 540.904176][T16386] kvm_xen_vcpu_set_attr+0x84d/0x1350 [ 540.904192][T16386] kvm_arch_vcpu_ioctl+0xf97/0x53e0 [ 540.904208][T16386] ? kernel_text_address+0x8d/0x100 [ 540.904226][T16386] ? __kernel_text_address+0xd/0x30 [ 540.904243][T16386] ? unwind_get_return_address+0x59/0xa0 [ 540.904259][T16386] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 540.904289][T16386] ? __lock_acquire+0x4a5/0x2630 [ 540.904311][T16386] ? __lock_acquire+0x4a5/0x2630 [ 540.904362][T16386] ? lock_acquire+0x17c/0x330 [ 540.904407][T16386] ? trace_contention_end+0xd6/0x110 [ 540.904433][T16386] ? __mutex_lock+0x26a/0x1b90 [ 540.904449][T16386] ? kvm_vcpu_ioctl+0x322/0x16d0 [ 540.904462][T16386] ? __pfx___mutex_lock+0x10/0x10 [ 540.904482][T16386] ? kasan_quarantine_put+0x104/0x240 [ 540.904495][T16386] ? lockdep_hardirqs_on+0x78/0x100 [ 540.904511][T16386] ? kvm_vcpu_ioctl+0x8a0/0x16d0 [ 540.904520][T16386] kvm_vcpu_ioctl+0x8a0/0x16d0 [ 540.904533][T16386] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 540.904543][T16386] ? tomoyo_path_number_perm+0x188/0x580 [ 540.904562][T16386] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 540.904584][T16386] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 540.904597][T16386] ? do_vfs_ioctl+0x226/0x13e0 [ 540.904615][T16386] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 540.904640][T16386] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 540.904651][T16386] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 540.904663][T16386] ? __fget_files+0x21f/0x3d0 [ 540.904678][T16386] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 540.904690][T16386] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 540.904710][T16386] __do_fast_syscall_32+0xde/0x660 [ 540.904727][T16386] do_fast_syscall_32+0x32/0x70 [ 540.904742][T16386] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 540.904757][T16386] RIP: 0023:0xf73ed579 [ 540.904767][T16386] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 540.904777][T16386] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 540.904789][T16386] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000004048aecb [ 540.904796][T16386] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 540.904803][T16386] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.904809][T16386] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 540.904815][T16386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.904830][T16386] [ 541.243859][T16391] FAULT_INJECTION: forcing a failure. [ 541.243859][T16391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.248451][T16391] CPU: 3 UID: 0 PID: 16391 Comm: syz.3.3127 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.248470][T16391] Tainted: [L]=SOFTLOCKUP [ 541.248474][T16391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 541.248480][T16391] Call Trace: [ 541.248485][T16391] [ 541.248489][T16391] dump_stack_lvl+0x100/0x190 [ 541.248507][T16391] should_fail_ex.cold+0x5/0xa [ 541.248526][T16391] _copy_from_iter+0x1f4/0x1690 [ 541.248545][T16391] ? __alloc_skb+0x220/0x410 [ 541.248560][T16391] ? __alloc_skb+0x35d/0x410 [ 541.248575][T16391] ? __pfx__copy_from_iter+0x10/0x10 [ 541.248592][T16391] ? netlink_autobind.isra.0+0x110/0x370 [ 541.248615][T16391] netlink_sendmsg+0x808/0xda0 [ 541.248635][T16391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.248654][T16391] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 541.248670][T16391] ____sys_sendmsg+0xa54/0xc30 [ 541.248684][T16391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.248708][T16391] ___sys_sendmsg+0x190/0x1e0 [ 541.248727][T16391] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.248770][T16391] __sys_sendmsg+0x170/0x220 [ 541.248797][T16391] ? __pfx___sys_sendmsg+0x10/0x10 [ 541.248821][T16391] ? __pfx_ksys_write+0x10/0x10 [ 541.248834][T16391] ? fput+0x79/0x100 [ 541.248851][T16391] __do_fast_syscall_32+0xde/0x660 [ 541.248868][T16391] do_fast_syscall_32+0x32/0x70 [ 541.248882][T16391] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 541.248897][T16391] RIP: 0023:0xf7f91579 [ 541.248906][T16391] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 541.248917][T16391] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 541.248928][T16391] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 541.248935][T16391] RDX: 0000000000040880 RSI: 0000000000000000 RDI: 0000000000000000 [ 541.248941][T16391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 541.248948][T16391] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 541.248954][T16391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 541.248967][T16391] [ 541.403997][T16397] ªªªªªª: entered allmulticast mode [ 541.714442][ T7629] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 541.888156][ T7629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.892992][ T7629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.896890][ T7629] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 541.900424][ T7629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.915646][ T7629] usb 5-1: config 0 descriptor?? [ 542.328069][ T7629] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 542.332776][ T7629] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 542.338064][ T7629] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.0008/input/input38 [ 542.356895][ T7629] cm6533_jd 0003:0D8C:0022.0008: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 542.444575][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 542.444594][T15519] Bluetooth: hci0: command 0x0c20 tx timeout [ 542.447515][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 542.449252][T15519] Bluetooth: hci4: command 0x0c1a tx timeout [ 542.529716][ T5993] usb 5-1: USB disconnect, device number 37 [ 543.223794][T16424] FAULT_INJECTION: forcing a failure. [ 543.223794][T16424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.228419][T16424] CPU: 0 UID: 0 PID: 16424 Comm: syz.0.3138 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.228438][T16424] Tainted: [L]=SOFTLOCKUP [ 543.228442][T16424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 543.228449][T16424] Call Trace: [ 543.228453][T16424] [ 543.228458][T16424] dump_stack_lvl+0x100/0x190 [ 543.228475][T16424] should_fail_ex.cold+0x5/0xa [ 543.228493][T16424] _copy_from_user+0x2e/0xd0 [ 543.228510][T16424] binder_thread_write+0xeeb/0x4d70 [ 543.228526][T16424] ? security_file_ioctl_compat+0xd3/0x230 [ 543.228546][T16424] ? __lock_acquire+0x4a5/0x2630 [ 543.228560][T16424] ? __pfx_binder_thread_write+0x10/0x10 [ 543.228574][T16424] ? binder_debug+0xe0/0x190 [ 543.228591][T16424] ? __pfx_binder_debug+0x10/0x10 [ 543.228613][T16424] ? __might_fault+0xc5/0x140 [ 543.228630][T16424] ? __pfx_binder_ioctl+0x10/0x10 [ 543.228642][T16424] binder_ioctl+0x28b8/0x7450 [ 543.228656][T16424] ? tomoyo_path_number_perm+0x28f/0x580 [ 543.228673][T16424] ? tomoyo_path_number_perm+0x28f/0x580 [ 543.228691][T16424] ? tomoyo_path_number_perm+0x188/0x580 [ 543.228708][T16424] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 543.228725][T16424] ? __pfx_binder_ioctl+0x10/0x10 [ 543.228740][T16424] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 543.228754][T16424] ? do_vfs_ioctl+0x226/0x13e0 [ 543.228772][T16424] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 543.228793][T16424] ? find_held_lock+0x2b/0x80 [ 543.228803][T16424] ? hook_file_ioctl_common+0x146/0x410 [ 543.228823][T16424] ? __fget_files+0x21f/0x3d0 [ 543.228836][T16424] ? __pfx_binder_ioctl+0x10/0x10 [ 543.228848][T16424] compat_ptr_ioctl+0x6e/0xa0 [ 543.228865][T16424] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 543.228882][T16424] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 543.228902][T16424] __do_fast_syscall_32+0xde/0x660 [ 543.228918][T16424] do_fast_syscall_32+0x32/0x70 [ 543.228932][T16424] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 543.228947][T16424] RIP: 0023:0xf7f93579 [ 543.228956][T16424] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 543.228966][T16424] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 543.228978][T16424] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0306201 [ 543.228985][T16424] RDX: 0000000080004a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.228991][T16424] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 543.228997][T16424] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 543.229003][T16424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 543.229017][T16424] [ 543.229023][T16424] binder: 16423:16424 ioctl c0306201 80004a40 returned -14 [ 544.239409][T16442] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3143'. [ 544.242861][T16442] comedi comedi3: comedi_config --init_data is deprecated [ 544.247289][T16442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3143'. [ 544.716058][T16465] ªªªªªª speed is unknown, defaulting to 1000 [ 544.784852][ T61] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 544.946332][ T61] usb 7-1: config 0 has no interfaces? [ 544.949720][ T61] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 544.952592][ T61] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 544.956212][T16465] ªªªªªª speed is unknown, defaulting to 1000 [ 544.964396][ T61] usb 7-1: Product: syz [ 544.965858][ T61] usb 7-1: Manufacturer: syz [ 544.968577][ T61] usb 7-1: config 0 descriptor?? [ 545.179220][ T61] usb 7-1: USB disconnect, device number 54 [ 545.224781][T16478] netlink: 'syz.1.3152': attribute type 7 has an invalid length. [ 545.227961][T16478] netlink: 'syz.1.3152': attribute type 8 has an invalid length. [ 545.380206][T16458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3147'. [ 546.190163][T16493] FAULT_INJECTION: forcing a failure. [ 546.190163][T16493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.195514][T16493] CPU: 3 UID: 0 PID: 16493 Comm: syz.1.3157 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.195540][T16493] Tainted: [L]=SOFTLOCKUP [ 546.195546][T16493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 546.195555][T16493] Call Trace: [ 546.195560][T16493] [ 546.195565][T16493] dump_stack_lvl+0x100/0x190 [ 546.195588][T16493] should_fail_ex.cold+0x5/0xa [ 546.195611][T16493] _copy_from_iter+0x1f4/0x1690 [ 546.195634][T16493] ? __alloc_skb+0x220/0x410 [ 546.195653][T16493] ? __alloc_skb+0x35d/0x410 [ 546.195672][T16493] ? __pfx__copy_from_iter+0x10/0x10 [ 546.195694][T16493] ? __pfx___might_resched+0x10/0x10 [ 546.195722][T16493] netlink_sendmsg+0x808/0xda0 [ 546.195748][T16493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.195773][T16493] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 546.195794][T16493] ____sys_sendmsg+0xa54/0xc30 [ 546.195812][T16493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.195837][T16493] ___sys_sendmsg+0x190/0x1e0 [ 546.195855][T16493] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.195894][T16493] __sys_sendmsg+0x170/0x220 [ 546.195915][T16493] ? __pfx___sys_sendmsg+0x10/0x10 [ 546.195942][T16493] ? __pfx_ksys_write+0x10/0x10 [ 546.195964][T16493] __do_fast_syscall_32+0xde/0x660 [ 546.195993][T16493] do_fast_syscall_32+0x32/0x70 [ 546.196011][T16493] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 546.196031][T16493] RIP: 0023:0xf73ed579 [ 546.196042][T16493] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 546.196057][T16493] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 546.196072][T16493] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 546.196082][T16493] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.196090][T16493] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 546.196099][T16493] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 546.196108][T16493] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 546.196127][T16493] [ 546.382841][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 546.382861][ T40] audit: type=1804 audit(1769804379.979:196): pid=16495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3158" name="/newroot/182/file1" dev="tmpfs" ino=964 res=1 errno=0 [ 546.652137][T16506] IPv6: Can't replace route, no match found [ 546.662398][T16508] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3163'. [ 547.437890][T16520] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3166'. [ 547.444000][T16520] comedi comedi3: comedi_config --init_data is deprecated [ 547.449603][T16520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3166'. [ 547.558084][T16531] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 547.562598][T16526] FAULT_INJECTION: forcing a failure. [ 547.562598][T16526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.569503][T16526] CPU: 0 UID: 0 PID: 16526 Comm: syz.1.3168 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.569533][T16526] Tainted: [L]=SOFTLOCKUP [ 547.569538][T16526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 547.569546][T16526] Call Trace: [ 547.569550][T16526] [ 547.569555][T16526] dump_stack_lvl+0x100/0x190 [ 547.569572][T16526] should_fail_ex.cold+0x5/0xa [ 547.569604][T16526] _copy_to_user+0x32/0xd0 [ 547.569623][T16526] simple_read_from_buffer+0xcb/0x170 [ 547.569636][T16526] proc_fail_nth_read+0x1af/0x230 [ 547.569651][T16526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 547.569665][T16526] ? rw_verify_area+0xce/0x6d0 [ 547.569676][T16526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 547.569689][T16526] vfs_read+0x1e4/0xb30 [ 547.569703][T16526] ? __pfx_vfs_read+0x10/0x10 [ 547.569714][T16526] ? find_held_lock+0x2b/0x80 [ 547.569726][T16526] ? __fget_files+0x215/0x3d0 [ 547.569740][T16526] ? __fget_files+0x21f/0x3d0 [ 547.569756][T16526] ksys_read+0x12a/0x250 [ 547.569769][T16526] ? __pfx_ksys_read+0x10/0x10 [ 547.569780][T16526] ? fput+0x79/0x100 [ 547.569798][T16526] do_int80_emulation+0x101/0x470 [ 547.569815][T16526] asm_int80_emulation+0x1a/0x20 [ 547.569843][T16526] RIP: 0023:0xf715572b [ 547.569852][T16526] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 547.569864][T16526] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 547.569875][T16526] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54165d0 [ 547.569882][T16526] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 547.569888][T16526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 547.569894][T16526] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 547.569901][T16526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 547.569915][T16526] [ 547.771595][T16537] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3172'. [ 548.067505][T16547] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 549.052151][T16410] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 549.162865][T16554] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3178'. [ 549.175240][T16554] comedi comedi3: comedi_config --init_data is deprecated [ 549.191895][T16554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3178'. [ 549.810531][T16562] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 549.812579][T16562] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 549.815473][T16562] vhci_hcd vhci_hcd.0: Device attached [ 549.870751][T16562] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3180'. [ 550.099404][ T6138] usb 38-1: SetAddress Request (54) to port 0 [ 550.102091][ T6138] usb 38-1: new SuperSpeed USB device number 54 using vhci_hcd [ 550.556688][T16563] vhci_hcd: connection reset by peer [ 550.563194][ T1191] vhci_hcd vhci_hcd.0: stop threads [ 550.566113][ T1191] vhci_hcd vhci_hcd.0: release socket [ 550.570981][ T1191] vhci_hcd vhci_hcd.0: disconnect device [ 551.584488][ T5979] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 551.735692][ T5979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.739503][ T5979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.742841][ T5979] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 551.746217][ T5979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.751461][ T5979] usb 5-1: config 0 descriptor?? [ 552.172294][ T5979] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 552.177591][ T5979] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 552.184796][ T5979] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.0009/input/input40 [ 552.332800][ T5979] cm6533_jd 0003:0D8C:0022.0009: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 552.336773][T16596] syz_tun: entered allmulticast mode [ 552.342597][T16596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3190'. [ 552.355889][T16596] syz_tun (unregistering): left allmulticast mode [ 552.371744][ T5979] usb 5-1: USB disconnect, device number 38 [ 552.432101][T16598] fido_id[16598]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/report_descriptor': No such file or directory [ 553.888096][T16623] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3196'. [ 553.892385][T16623] comedi comedi3: comedi_config --init_data is deprecated [ 553.899281][T16623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3196'. [ 553.994562][T16625] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3197'. [ 553.997432][T16625] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 554.000543][T16625] 0ªî{X¹¦: entered allmulticast mode [ 554.002598][T16625] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 555.164768][ T6138] usb 38-1: device descriptor read/8, error -110 [ 555.415561][T16648] netlink: 'syz.1.3203': attribute type 10 has an invalid length. [ 555.421173][T16648] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.425472][T16648] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.555151][ T6138] usb usb38-port1: attempt power cycle [ 556.125603][ T6138] usb usb38-port1: unable to enumerate USB device [ 558.611764][T16718] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 558.613907][T16718] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 558.627615][T16718] vhci_hcd vhci_hcd.0: Device attached [ 558.906178][T16718] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3217'. [ 558.934652][ T7629] usb 44-1: SetAddress Request (38) to port 0 [ 558.937499][ T7629] usb 44-1: new SuperSpeed USB device number 38 using vhci_hcd [ 559.002397][T16725] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 559.016323][T16716] netlink: 'syz.1.3220': attribute type 25 has an invalid length. [ 559.434106][T16716] Process accounting paused [ 559.592941][T16731] binder: 16730:16731 ioctl c0306215 80004a40 returned -22 [ 559.688070][T16735] IPv6: Can't replace route, no match found [ 559.730785][T16719] vhci_hcd: connection reset by peer [ 559.735264][ T1146] vhci_hcd vhci_hcd.3: stop threads [ 559.737568][ T1146] vhci_hcd vhci_hcd.3: release socket [ 559.739942][ T1146] vhci_hcd vhci_hcd.3: disconnect device [ 559.864055][T16737] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 559.866905][T16737] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 559.872813][T16737] vhci_hcd vhci_hcd.0: Device attached [ 560.134450][ T951] usb 40-1: SetAddress Request (46) to port 0 [ 560.136520][ T951] usb 40-1: new SuperSpeed USB device number 46 using vhci_hcd [ 560.478976][T16738] vhci_hcd: connection reset by peer [ 560.544809][ T1146] vhci_hcd vhci_hcd.1: stop threads [ 560.547658][ T1146] vhci_hcd vhci_hcd.1: release socket [ 560.550245][ T1146] vhci_hcd vhci_hcd.1: disconnect device [ 560.999425][ T40] audit: type=1326 audit(1769804394.599:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 561.007043][ T40] audit: type=1326 audit(1769804394.599:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3229" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 561.013881][ T40] audit: type=1326 audit(1769804394.599:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 561.023463][T13449] libceph: connect (1)[c::]:6789 error -101 [ 561.025510][ T40] audit: type=1326 audit(1769804394.599:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 561.025537][ T40] audit: type=1326 audit(1769804394.599:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 561.039884][ T40] audit: type=1326 audit(1769804394.599:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3229" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 561.046678][ T40] audit: type=1326 audit(1769804394.599:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 561.053534][ T40] audit: type=1326 audit(1769804394.599:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 561.060289][ T40] audit: type=1326 audit(1769804394.599:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 561.060389][T13449] libceph: mon0 (1)[c::]:6789 connect error [ 561.067056][ T40] audit: type=1326 audit(1769804394.599:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16756 comm="syz.2.3229" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 561.355868][T13449] libceph: connect (1)[c::]:6789 error -101 [ 561.358327][T13449] libceph: mon0 (1)[c::]:6789 connect error [ 561.366220][T16771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.371410][T16771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.640194][T16773] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 561.642976][T16773] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 561.646691][T16773] vhci_hcd vhci_hcd.0: Device attached [ 561.822906][T16762] ceph: No mds server is up or the cluster is laggy [ 562.363030][T16774] vhci_hcd: connection closed [ 562.363429][ T1144] vhci_hcd vhci_hcd.1: stop threads [ 562.372801][ T1144] vhci_hcd vhci_hcd.1: release socket [ 562.376417][ T1144] vhci_hcd vhci_hcd.1: disconnect device [ 563.174503][ T6138] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 563.347571][ T6138] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.352208][ T6138] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.358937][ T6138] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 563.365330][ T6138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.383422][T16820] syz.0.3244 (16820): drop_caches: 2 [ 563.385585][ T6138] usb 6-1: config 0 descriptor?? [ 563.813137][ T6138] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 563.815860][ T6138] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 563.821929][ T6138] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.000A/input/input44 [ 563.836593][ T6138] cm6533_jd 0003:0D8C:0022.000A: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 563.880703][T16822] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 563.883311][T16822] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 563.915962][T16822] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 563.918182][T16822] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 563.955583][T16822] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 563.958299][T16822] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 563.979376][T16822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 563.981941][T16822] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 564.021325][ T1802] usb 6-1: USB disconnect, device number 38 [ 564.044460][ T7629] usb 44-1: device descriptor read/8, error -110 [ 564.445375][ T7629] usb usb44-port1: attempt power cycle [ 565.024086][ T7629] usb usb44-port1: unable to enumerate USB device [ 565.174430][ T951] usb 40-1: device descriptor read/8, error -110 [ 565.584946][ T951] usb usb40-port1: attempt power cycle [ 565.694471][ T61] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 566.281674][T16877] syz_tun: entered allmulticast mode [ 566.285722][T16877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'. [ 566.301123][T16877] syz_tun (unregistering): left allmulticast mode [ 567.417998][ T951] usb usb40-port1: unable to enumerate USB device [ 567.487265][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.489330][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.705898][T16908] tmpfs: Unknown parameter 'hash' [ 568.582307][T16918] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3268'. [ 568.585477][T16917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3269'. [ 568.590803][T16918] comedi comedi3: comedi_config --init_data is deprecated [ 568.597442][T16918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3268'. [ 568.890558][T16923] binder: 16914:16923 ioctl 0 80000040 returned -22 [ 569.064674][ T59] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 569.353641][ T59] usb 7-1: config 0 has no interfaces? [ 569.381305][ T59] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 569.388077][ T59] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 569.393930][ T59] usb 7-1: Product: syz [ 569.398905][ T59] usb 7-1: Manufacturer: syz [ 569.419226][ T59] usb 7-1: config 0 descriptor?? [ 569.652221][ T951] usb 7-1: USB disconnect, device number 55 [ 569.774186][T16945] tmpfs: Unknown parameter 'hash' [ 570.708548][T16966] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3280'. [ 570.712876][T16966] comedi comedi3: comedi_config --init_data is deprecated [ 570.718445][T16966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3280'. [ 571.158356][T16976] IPv6: Can't replace route, no match found [ 571.949119][T16992] fuse: Bad value for 'fd' [ 572.914489][ T61] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 573.075662][ T61] usb 6-1: config 0 has no interfaces? [ 573.078571][ T61] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 573.081489][ T61] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 573.084022][ T61] usb 6-1: Product: syz [ 573.085657][ T61] usb 6-1: Manufacturer: syz [ 573.092313][ T61] usb 6-1: config 0 descriptor?? [ 573.318127][ T59] usb 6-1: USB disconnect, device number 39 [ 574.280716][T17031] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 574.444562][ T61] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 574.596410][ T61] usb 5-1: config 0 has no interfaces? [ 574.600473][ T61] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 574.604663][ T61] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 574.608115][ T61] usb 5-1: Product: syz [ 574.609937][ T61] usb 5-1: Manufacturer: syz [ 574.614286][ T61] usb 5-1: config 0 descriptor?? [ 574.881183][ T6125] usb 5-1: USB disconnect, device number 39 [ 575.008645][T17034] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3297'. [ 575.013841][T17034] comedi comedi3: comedi_config --init_data is deprecated [ 575.019492][T17034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3297'. [ 575.409523][T17043] tmpfs: Unknown parameter 'hash' [ 577.856495][T17070] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3306'. [ 577.857073][T17070] comedi comedi3: comedi_config --init_data is deprecated [ 577.865664][T17070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3306'. [ 577.973978][T17072] syzkaller0: entered promiscuous mode [ 577.975924][T17072] syzkaller0: entered allmulticast mode [ 578.198421][T17080] syz.3.3311 (17080): drop_caches: 2 [ 578.202692][T17080] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3311'. [ 578.217579][T17080] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 578.304462][T13449] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 578.465729][T13449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.469202][T13449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.472323][T13449] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 578.476187][T13449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.480408][T13449] usb 5-1: config 0 descriptor?? [ 578.897937][T13449] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 578.901246][T13449] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 578.921094][T13449] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.000B/input/input46 [ 578.940842][T13449] cm6533_jd 0003:0D8C:0022.000B: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 579.034928][T17088] tmpfs: Unknown parameter 'hash' [ 579.097766][ T10] usb 5-1: USB disconnect, device number 40 [ 580.404693][T17101] netlink: 'syz.0.3315': attribute type 4 has an invalid length. [ 590.975041][T17071] Process accounting resumed [ 591.005202][T17111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3318'. [ 591.050137][T17113] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3319'. [ 591.054172][T17113] comedi comedi3: comedi_config --init_data is deprecated [ 591.058759][T17113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3319'. [ 592.577132][T17147] tmpfs: Unknown parameter 'hash' [ 592.943944][T17152] tmpfs: Unknown parameter 'hash' [ 593.816345][T17166] ªªªªªª speed is unknown, defaulting to 1000 [ 593.890377][T17166] ªªªªªª speed is unknown, defaulting to 1000 [ 594.420704][T17175] tmpfs: Unknown parameter 'hash' [ 596.118656][T17200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.121503][T17200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.424466][ T61] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 597.575649][ T61] usb 6-1: config 0 has no interfaces? [ 597.579377][ T61] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 597.583101][ T61] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 597.586062][ T61] usb 6-1: Product: syz [ 597.589116][ T61] usb 6-1: Manufacturer: syz [ 597.592202][ T61] usb 6-1: config 0 descriptor?? [ 597.788736][T17225] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3347'. [ 597.796025][T17225] comedi comedi3: comedi_config --init_data is deprecated [ 597.806719][T17225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3347'. [ 597.852644][ T59] usb 6-1: USB disconnect, device number 40 [ 598.534653][T17241] tmpfs: Unknown parameter 'hash' [ 598.615226][ T6370] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 598.789161][ T6370] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 598.792430][ T6370] usb 7-1: config 0 interface 0 has no altsetting 0 [ 598.805395][ T6370] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 598.808880][ T6370] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 598.813578][ T6370] usb 7-1: Product: syz [ 598.818395][ T6370] usb 7-1: Manufacturer: syz [ 598.820454][ T6370] usb 7-1: SerialNumber: syz [ 598.872787][ T6370] usb 7-1: config 0 descriptor?? [ 598.900894][ T6370] usb 7-1: selecting invalid altsetting 0 [ 599.208428][ T59] usb 7-1: USB disconnect, device number 56 [ 599.352792][T17249] udevd[17249]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.802519][T17254] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3353'. [ 599.818897][T17254] comedi comedi3: comedi_config --init_data is deprecated [ 599.837455][T17254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3353'. [ 600.258337][T17264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3356'. [ 600.264545][T17264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3356'. [ 600.318499][T17265] fuse: Bad value for 'group_id' [ 600.320637][T17265] fuse: Bad value for 'group_id' [ 600.534899][T17267] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3357'. [ 600.539178][T17267] comedi comedi3: comedi_config --init_data is deprecated [ 600.544752][T17267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3357'. [ 600.878261][T17285] tmpfs: Unknown parameter 'hash' [ 602.160171][T17305] syz.2.3367 (17305): drop_caches: 2 [ 602.945348][T17319] netlink: 'syz.1.3368': attribute type 4 has an invalid length. [ 602.952368][ T10] ªªªªªª speed is unknown, defaulting to 1000 [ 602.965409][T17320] syz.3.3369 (17320): drop_caches: 2 [ 602.980668][ T10] syz2: Port: 1 Link DOWN [ 603.004539][ T40] kauditd_printk_skb: 421 callbacks suppressed [ 603.004556][ T40] audit: type=1326 audit(1769804436.599:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17314 comm="syz.3.3369" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x0 [ 603.138747][T17323] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3370'. [ 603.146255][T17323] comedi comedi3: comedi_config --init_data is deprecated [ 603.186480][T17323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3370'. [ 604.191702][T17343] syzkaller0: entered promiscuous mode [ 604.193504][T17343] syzkaller0: entered allmulticast mode [ 605.856413][T17353] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3381'. [ 605.859833][T17353] comedi comedi3: comedi_config --init_data is deprecated [ 605.864200][T17353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3381'. [ 617.684459][ T6138] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 617.846250][ T6138] usb 7-1: config 0 has no interfaces? [ 617.849122][ T6138] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 617.851986][ T6138] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 617.854561][T17375] netlink: 'syz.3.3382': attribute type 4 has an invalid length. [ 617.855383][ T6138] usb 7-1: Product: syz [ 617.858747][ T6138] usb 7-1: Manufacturer: syz [ 617.861787][ T6138] usb 7-1: config 0 descriptor?? [ 618.097292][ T61] usb 7-1: USB disconnect, device number 57 [ 619.229990][T17399] tmpfs: Unknown parameter 'hash' [ 621.661092][T17410] tmpfs: Unknown parameter 'hash' [ 621.735810][T17415] tmpfs: Unknown parameter 'hash' [ 621.965500][T17408] Process accounting paused [ 623.345482][T17435] 0xfffffffffffffffd-0x000000020000 : "" [ 623.349469][T17435] mtd: partition "" is out of reach -- disabled [ 623.374254][T17435] ftl_cs: FTL header not found. [ 623.573726][T17442] tmpfs: Unknown parameter 'hash' [ 623.604591][ T59] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 623.761874][ T59] usb 6-1: config 0 has no interfaces? [ 623.823344][ T59] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 623.829472][ T59] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 623.835394][ T59] usb 6-1: Product: syz [ 623.838794][ T59] usb 6-1: Manufacturer: syz [ 623.860810][ T59] usb 6-1: config 0 descriptor?? [ 625.264649][T13449] usb 6-1: USB disconnect, device number 41 [ 625.290583][T17458] tmpfs: Unknown parameter 'hash' [ 627.174092][T17474] tmpfs: Unknown parameter 'hash' [ 628.158186][T17486] tmpfs: Unknown parameter 'hash' [ 628.938296][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.940548][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.048205][T17501] FAULT_INJECTION: forcing a failure. [ 629.048205][T17501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.053525][T17501] CPU: 3 UID: 0 PID: 17501 Comm: syz.3.3421 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.053552][T17501] Tainted: [L]=SOFTLOCKUP [ 629.053558][T17501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 629.053567][T17501] Call Trace: [ 629.053574][T17501] [ 629.053581][T17501] dump_stack_lvl+0x100/0x190 [ 629.053608][T17501] should_fail_ex.cold+0x5/0xa [ 629.053634][T17501] _copy_to_user+0x32/0xd0 [ 629.053660][T17501] simple_read_from_buffer+0xcb/0x170 [ 629.053678][T17501] proc_fail_nth_read+0x1af/0x230 [ 629.053699][T17501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.053719][T17501] ? rw_verify_area+0xce/0x6d0 [ 629.053734][T17501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.053752][T17501] vfs_read+0x1e4/0xb30 [ 629.053772][T17501] ? __pfx_vfs_read+0x10/0x10 [ 629.053787][T17501] ? find_held_lock+0x2b/0x80 [ 629.053803][T17501] ? __fget_files+0x215/0x3d0 [ 629.053825][T17501] ? __fget_files+0x21f/0x3d0 [ 629.053847][T17501] ksys_read+0x12a/0x250 [ 629.053865][T17501] ? __pfx_ksys_read+0x10/0x10 [ 629.053880][T17501] ? fput+0x79/0x100 [ 629.053906][T17501] do_int80_emulation+0x101/0x470 [ 629.053930][T17501] asm_int80_emulation+0x1a/0x20 [ 629.053946][T17501] RIP: 0023:0xf719572b [ 629.053960][T17501] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 629.053975][T17501] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 629.053991][T17501] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54565d0 [ 629.054001][T17501] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 629.054011][T17501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 629.054019][T17501] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 629.054029][T17501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 629.054050][T17501] [ 629.800550][T17515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.804820][T17515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.215396][T17525] tmpfs: Unknown parameter 'hash' [ 631.616586][T17545] FAULT_INJECTION: forcing a failure. [ 631.616586][T17545] name failslab, interval 1, probability 0, space 0, times 0 [ 631.632820][T17545] CPU: 0 UID: 0 PID: 17545 Comm: syz.0.3434 Tainted: G L syzkaller #0 PREEMPT(full) [ 631.632846][T17545] Tainted: [L]=SOFTLOCKUP [ 631.632852][T17545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 631.632861][T17545] Call Trace: [ 631.632867][T17545] [ 631.632874][T17545] dump_stack_lvl+0x100/0x190 [ 631.632898][T17545] should_fail_ex.cold+0x5/0xa [ 631.632921][T17545] should_failslab+0xc2/0x120 [ 631.632942][T17545] ? tomoyo_encode2+0xfb/0x3c0 [ 631.632955][T17545] __kmalloc_noprof+0xf6/0x9c0 [ 631.632977][T17545] ? tomoyo_encode2+0xfb/0x3c0 [ 631.632989][T17545] tomoyo_encode2+0xfb/0x3c0 [ 631.633006][T17545] tomoyo_encode+0x29/0x50 [ 631.633019][T17545] tomoyo_realpath_from_path+0x18c/0x690 [ 631.633038][T17545] tomoyo_path_number_perm+0x23c/0x580 [ 631.633058][T17545] ? tomoyo_path_number_perm+0x22e/0x580 [ 631.633082][T17545] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 631.633123][T17545] ? find_held_lock+0x2b/0x80 [ 631.633137][T17545] ? hook_file_ioctl_common+0x146/0x410 [ 631.633157][T17545] ? __fget_files+0x215/0x3d0 [ 631.633177][T17545] ? __fget_files+0x21f/0x3d0 [ 631.633195][T17545] security_file_ioctl_compat+0xd3/0x230 [ 631.633246][T17545] __ia32_compat_sys_ioctl+0xc2/0x360 [ 631.633273][T17545] __do_fast_syscall_32+0xde/0x660 [ 631.633294][T17545] do_fast_syscall_32+0x32/0x70 [ 631.633312][T17545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 631.633330][T17545] RIP: 0023:0xf7f93579 [ 631.633343][T17545] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 631.633357][T17545] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 631.633372][T17545] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c050561a [ 631.633382][T17545] RDX: 0000000080000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 631.633390][T17545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 631.633399][T17545] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 631.633410][T17545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 631.633430][T17545] [ 631.633447][T17545] ERROR: Out of memory at tomoyo_realpath_from_path. [ 632.270861][T17565] block device autoloading is deprecated and will be removed. [ 632.372666][T17566] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3442'. [ 634.067271][T17595] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3452'. [ 634.070659][T17595] comedi comedi3: comedi_config --init_data is deprecated [ 634.075777][T17595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3452'. [ 634.187010][T17600] comedi comedi3: comedi_config --init_data is deprecated [ 634.382159][T17601] FAULT_INJECTION: forcing a failure. [ 634.382159][T17601] name failslab, interval 1, probability 0, space 0, times 0 [ 634.387859][T17601] CPU: 0 UID: 0 PID: 17601 Comm: syz.2.3453 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.387889][T17601] Tainted: [L]=SOFTLOCKUP [ 634.387895][T17601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 634.387907][T17601] Call Trace: [ 634.387914][T17601] [ 634.387920][T17601] dump_stack_lvl+0x100/0x190 [ 634.387948][T17601] should_fail_ex.cold+0x5/0xa [ 634.387974][T17601] should_failslab+0xc2/0x120 [ 634.387992][T17601] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 634.388008][T17601] ? __d_lookup+0x25c/0x4a0 [ 634.388018][T17601] ? __d_alloc+0x34/0xa80 [ 634.388034][T17601] ? __d_alloc+0x34/0xa80 [ 634.388047][T17601] __d_alloc+0x34/0xa80 [ 634.388063][T17601] d_alloc+0x4a/0x1e0 [ 634.388077][T17601] lookup_one_qstr_excl+0x175/0x250 [ 634.388096][T17601] start_dirop+0x59/0xb0 [ 634.388109][T17601] simple_start_creating+0xf9/0x110 [ 634.388121][T17601] ? __pfx_simple_start_creating+0x10/0x10 [ 634.388133][T17601] ? mntput+0x70/0xa0 [ 634.388144][T17601] ? simple_pin_fs+0xa3/0x190 [ 634.388155][T17601] debugfs_start_creating.part.0+0x82/0x170 [ 634.388170][T17601] debugfs_create_dir+0x72/0x440 [ 634.388185][T17601] nbd_start_device+0x3d2/0xbd0 [ 634.388204][T17601] nbd_genl_connect+0xff2/0x1a40 [ 634.388231][T17601] ? __pfx_nbd_genl_connect+0x10/0x10 [ 634.388258][T17601] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 634.388281][T17601] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 634.388301][T17601] genl_family_rcv_msg_doit+0x214/0x300 [ 634.388315][T17601] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 634.388327][T17601] ? genl_get_cmd+0x3ef/0x720 [ 634.388342][T17601] ? __sys_sendmsg+0x170/0x220 [ 634.388358][T17601] ? __do_fast_syscall_32+0xde/0x660 [ 634.388372][T17601] ? __radix_tree_lookup+0x217/0x2b0 [ 634.388386][T17601] genl_rcv_msg+0x560/0x800 [ 634.388400][T17601] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.388412][T17601] ? __pfx_nbd_genl_connect+0x10/0x10 [ 634.388428][T17601] ? __lock_acquire+0x4a5/0x2630 [ 634.388445][T17601] netlink_rcv_skb+0x159/0x420 [ 634.388464][T17601] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.388477][T17601] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.388501][T17601] ? netlink_deliver_tap+0x1ae/0xcc0 [ 634.388520][T17601] genl_rcv+0x28/0x40 [ 634.388530][T17601] netlink_unicast+0x5aa/0x870 [ 634.388550][T17601] ? __pfx_netlink_unicast+0x10/0x10 [ 634.388573][T17601] netlink_sendmsg+0x8b0/0xda0 [ 634.388593][T17601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.388613][T17601] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 634.388631][T17601] ____sys_sendmsg+0xa54/0xc30 [ 634.388644][T17601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.388663][T17601] ___sys_sendmsg+0x190/0x1e0 [ 634.388678][T17601] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.388708][T17601] __sys_sendmsg+0x170/0x220 [ 634.388725][T17601] ? __pfx___sys_sendmsg+0x10/0x10 [ 634.388747][T17601] ? __pfx_ksys_write+0x10/0x10 [ 634.388763][T17601] __do_fast_syscall_32+0xde/0x660 [ 634.388779][T17601] do_fast_syscall_32+0x32/0x70 [ 634.388793][T17601] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 634.388808][T17601] RIP: 0023:0xf7fe5579 [ 634.388817][T17601] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 634.388828][T17601] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 634.388839][T17601] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 634.388846][T17601] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 634.388852][T17601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 634.388859][T17601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.388865][T17601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 634.388879][T17601] [ 634.388975][T17601] block nbd0: Failed to create debugfs dir for 'nbd0' [ 634.775564][T17601] nbd0: detected capacity change from 0 to 8589934655 [ 634.932413][T16410] block nbd0: Receive control failed (result -104) [ 635.115204][T17621] tipc: Can't bind to reserved service type 0 [ 636.411339][T17640] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3465'. [ 636.432932][T17640] comedi comedi3: comedi_config --init_data is deprecated [ 636.486076][T17640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3465'. [ 636.906490][T17653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3467'. [ 637.054817][T17653] nbd1: detected capacity change from 0 to 703137685962879 [ 637.060929][T16410] block nbd1: Receive control failed (result -104) [ 638.244312][T17683] tmpfs: Unknown parameter 'hash' [ 639.276973][T17700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3481'. [ 639.701318][T17717] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3488'. [ 639.705124][T17717] comedi comedi3: comedi_config --init_data is deprecated [ 639.709095][T17717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3488'. [ 640.392517][T17728] netlink: 'syz.3.3492': attribute type 5 has an invalid length. [ 643.431759][T17789] syzkaller0: entered promiscuous mode [ 643.433895][T17789] syzkaller0: entered allmulticast mode [ 644.104790][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3511'. [ 644.334495][ T6125] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 644.496065][ T6125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.500223][ T6125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.504251][ T6125] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 644.508091][ T6125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.513180][ T6125] usb 5-1: config 0 descriptor?? [ 644.921945][ T6125] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 644.924214][ T6125] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 644.926922][ T6125] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 644.929260][ T6125] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 644.931494][ T6125] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 644.947929][ T6125] cm6533_jd 0003:0D8C:0022.000C: hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 645.122844][T17797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.126465][T17797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.133672][ T10] usb 5-1: USB disconnect, device number 41 [ 645.862166][T17804] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3513'. [ 645.867163][T17804] comedi comedi3: comedi_config --init_data is deprecated [ 645.872763][T17804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3513'. [ 656.448744][T17792] syzkaller1: entered promiscuous mode [ 656.450809][T17792] syzkaller1: entered allmulticast mode [ 656.454202][T17799] FAULT_INJECTION: forcing a failure. [ 656.454202][T17799] name failslab, interval 1, probability 0, space 0, times 0 [ 656.459699][T17799] CPU: 2 UID: 0 PID: 17799 Comm: syz.1.3511 Tainted: G L syzkaller #0 PREEMPT(full) [ 656.459719][T17799] Tainted: [L]=SOFTLOCKUP [ 656.459723][T17799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 656.459729][T17799] Call Trace: [ 656.459733][T17799] [ 656.459738][T17799] dump_stack_lvl+0x100/0x190 [ 656.459755][T17799] should_fail_ex.cold+0x5/0xa [ 656.459774][T17799] should_failslab+0xc2/0x120 [ 656.459790][T17799] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 656.459805][T17799] ? __d_lookup+0x25c/0x4a0 [ 656.459815][T17799] ? __d_alloc+0x34/0xa80 [ 656.459832][T17799] ? __d_alloc+0x34/0xa80 [ 656.459845][T17799] __d_alloc+0x34/0xa80 [ 656.459860][T17799] d_alloc+0x4a/0x1e0 [ 656.459875][T17799] lookup_one_qstr_excl+0x175/0x250 [ 656.459893][T17799] start_dirop+0x59/0xb0 [ 656.459905][T17799] simple_start_creating+0xf9/0x110 [ 656.459918][T17799] ? __pfx_simple_start_creating+0x10/0x10 [ 656.459930][T17799] ? mntput+0x70/0xa0 [ 656.459940][T17799] ? simple_pin_fs+0xa3/0x190 [ 656.459951][T17799] debugfs_start_creating.part.0+0x82/0x170 [ 656.459966][T17799] __debugfs_create_file+0xb3/0x4f0 [ 656.459984][T17799] debugfs_create_file_full+0x41/0x60 [ 656.460010][T17799] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 656.460035][T17799] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 656.460080][T17799] ? alloc_netdev_mqs+0xd7/0x14f0 [ 656.460105][T17799] ? __mutex_lock+0x1/0x1b90 [ 656.460125][T17799] ? lockdep_init_map_type+0x5c/0x250 [ 656.460148][T17799] ? __pfx_geneve_setup+0x10/0x10 [ 656.460170][T17799] alloc_netdev_mqs+0x314/0x14f0 [ 656.460198][T17799] rtnl_create_link+0xc13/0xf80 [ 656.460229][T17799] rtnl_newlink+0x13b8/0x2380 [ 656.460263][T17799] ? __pfx_rtnl_newlink+0x10/0x10 [ 656.460287][T17799] ? kasan_quarantine_put+0x104/0x240 [ 656.460301][T17799] ? lockdep_hardirqs_on+0x78/0x100 [ 656.460316][T17799] ? kmem_cache_free+0x143/0x720 [ 656.460327][T17799] ? sk_tx_queue_get+0x119/0x270 [ 656.460346][T17799] ? find_held_lock+0x2b/0x80 [ 656.460361][T17799] ? find_held_lock+0x2b/0x80 [ 656.460372][T17799] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 656.460389][T17799] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 656.460407][T17799] ? __pfx_rtnl_newlink+0x10/0x10 [ 656.460425][T17799] rtnetlink_rcv_msg+0x95e/0xe90 [ 656.460443][T17799] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 656.460465][T17799] ? ref_tracker_free+0x37e/0x6c0 [ 656.460477][T17799] netlink_rcv_skb+0x159/0x420 [ 656.460495][T17799] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 656.460513][T17799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 656.460536][T17799] ? netlink_deliver_tap+0x1ae/0xcc0 [ 656.460555][T17799] netlink_unicast+0x5aa/0x870 [ 656.460575][T17799] ? __pfx_netlink_unicast+0x10/0x10 [ 656.460598][T17799] netlink_sendmsg+0x8b0/0xda0 [ 656.460618][T17799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.460637][T17799] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 656.460655][T17799] ____sys_sendmsg+0xa54/0xc30 [ 656.460669][T17799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.460687][T17799] ___sys_sendmsg+0x190/0x1e0 [ 656.460701][T17799] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.460732][T17799] __sys_sendmsg+0x170/0x220 [ 656.460749][T17799] ? __pfx___sys_sendmsg+0x10/0x10 [ 656.460770][T17799] ? __pfx_ksys_write+0x10/0x10 [ 656.460787][T17799] __do_fast_syscall_32+0xde/0x660 [ 656.460803][T17799] do_fast_syscall_32+0x32/0x70 [ 656.460817][T17799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 656.460832][T17799] RIP: 0023:0xf73ed579 [ 656.460842][T17799] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 656.460854][T17799] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 656.460865][T17799] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 656.460872][T17799] RDX: 0000000004001000 RSI: 0000000000000000 RDI: 0000000000000000 [ 656.460879][T17799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 656.460885][T17799] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 656.460892][T17799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 656.460905][T17799] [ 656.605972][T17799] Process accounting resumed [ 656.653385][T17812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3516'. [ 656.661362][T17812] vlan2: entered allmulticast mode [ 656.663082][T17812] hsr0: entered allmulticast mode [ 656.664789][T17812] hsr_slave_0: entered allmulticast mode [ 656.666608][T17812] hsr_slave_1: entered allmulticast mode [ 657.911968][T17840] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 657.914517][T17840] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 657.918282][T17840] vhci_hcd vhci_hcd.0: Device attached [ 658.194533][ T6138] usb 44-1: SetAddress Request (42) to port 0 [ 658.197076][ T6138] usb 44-1: new SuperSpeed USB device number 42 using vhci_hcd [ 658.453063][T17843] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3521'. [ 658.457042][T17843] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3521'. [ 658.512048][T17843] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3521'. [ 658.515142][T17843] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3521'. [ 658.589973][T17843] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3521'. [ 658.593003][T17843] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3521'. [ 658.947066][T17841] vhci_hcd: connection reset by peer [ 658.949563][ T13] vhci_hcd vhci_hcd.3: stop threads [ 658.951596][ T13] vhci_hcd vhci_hcd.3: release socket [ 658.955989][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 659.259366][T17853] Process accounting resumed [ 660.724424][ T59] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 660.880904][ T59] usb 7-1: config 0 has no interfaces? [ 660.884129][ T59] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 660.886986][ T59] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 660.889514][ T59] usb 7-1: Product: syz [ 660.891324][ T59] usb 7-1: Manufacturer: syz [ 660.899958][ T59] usb 7-1: config 0 descriptor?? [ 661.207063][ T6125] usb 7-1: USB disconnect, device number 58 [ 663.254580][ T6138] usb 44-1: device descriptor read/8, error -110 [ 663.564951][T17912] binder: BINDER_SET_CONTEXT_MGR already set [ 663.567485][T17912] binder: 17909:17912 ioctl 4018620d 80000100 returned -16 [ 663.570380][T17912] binder: BINDER_SET_CONTEXT_MGR already set [ 663.572766][T17912] binder: 17909:17912 ioctl 4018620d 80000100 returned -16 [ 663.573138][T17911] autofs: Bad value for 'fd' [ 663.575516][T17912] binder: BINDER_SET_CONTEXT_MGR already set [ 663.579725][T17912] binder: 17909:17912 ioctl 4018620d 80000100 returned -16 [ 663.582681][T17912] binder: BINDER_SET_CONTEXT_MGR already set [ 663.594187][T17910] binder_alloc: binder_alloc_mmap_handler: 17909 80ffd000-81000000 already mapped failed -16 [ 663.594465][T17912] binder: 17909:17912 ioctl 4018620d 80000100 returned -16 [ 663.597958][T17911] binder: BINDER_SET_CONTEXT_MGR already set [ 663.603663][T17911] binder: 17909:17911 ioctl 4018620d 80004a80 returned -16 [ 663.607679][T17910] binder_alloc: binder_alloc_mmap_handler: 17909 80ffd000-81000000 already mapped failed -16 [ 663.645211][ T6138] usb usb44-port1: attempt power cycle [ 664.225289][ T6138] usb usb44-port1: unable to enumerate USB device [ 664.668816][T17940] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3538'. [ 664.673135][T17940] comedi comedi3: comedi_config --init_data is deprecated [ 664.681051][T17940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3538'. [ 665.454577][ T68] block nbd0: Possible stuck request ffff888026bf8000: control (read@0,1024B). Runtime 30 seconds [ 665.460294][ T68] block nbd0: Possible stuck request ffff888026bf8200: control (read@1024,1024B). Runtime 30 seconds [ 665.465617][ T68] block nbd0: Possible stuck request ffff888026bf8400: control (read@2048,1024B). Runtime 30 seconds [ 665.469665][ T68] block nbd0: Possible stuck request ffff888026bf8600: control (read@3072,1024B). Runtime 30 seconds [ 666.476841][T17958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3542'. [ 666.480087][T17958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3542'. [ 666.589049][T17958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3542'. [ 666.607027][T17958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3542'. [ 666.761351][T17958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3542'. [ 666.764189][T17958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3542'. [ 667.333611][T17964] syz.1.3545 (17964): drop_caches: 1 [ 667.364542][ T35] block nbd1: Possible stuck request ffff888027050000: control (read@0,1024B). Runtime 30 seconds [ 667.368283][ T35] block nbd1: Possible stuck request ffff888027050200: control (read@1024,1024B). Runtime 30 seconds [ 667.369609][T17955] Process accounting resumed [ 667.371756][ T35] block nbd1: Possible stuck request ffff888027050400: control (read@2048,1024B). Runtime 30 seconds [ 667.377366][ T35] block nbd1: Possible stuck request ffff888027050600: control (read@3072,1024B). Runtime 30 seconds [ 667.394429][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 667.437202][T17964] syz.1.3545 (17964): drop_caches: 1 [ 667.553685][ T9] usb 5-1: config 0 has no interfaces? [ 667.557038][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 667.559964][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 667.562670][ T9] usb 5-1: Product: syz [ 667.564034][ T9] usb 5-1: Manufacturer: syz [ 667.567599][ T9] usb 5-1: config 0 descriptor?? [ 667.587982][T17977] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3549'. [ 667.597624][T17977] comedi comedi3: comedi_config --init_data is deprecated [ 667.601739][T17977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3549'. [ 667.855712][ T6138] usb 5-1: USB disconnect, device number 42 [ 668.021224][T17888] udevd[17888]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 669.061277][T13449] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 669.464491][T13449] usb 7-1: Using ep0 maxpacket: 32 [ 669.468764][T13449] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 669.475225][T13449] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 669.478257][T13449] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 669.480997][T13449] usb 7-1: Product: syz [ 669.482521][T13449] usb 7-1: Manufacturer: syz [ 669.484140][T13449] usb 7-1: SerialNumber: syz [ 669.493808][T13449] usb 7-1: config 0 descriptor?? [ 669.496745][T18011] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 669.505347][T13449] hub 7-1:0.0: bad descriptor, ignoring hub [ 669.507434][T13449] hub 7-1:0.0: probe with driver hub failed with error -5 [ 670.466454][T18035] __nla_validate_parse: 1 callbacks suppressed [ 670.466466][T18035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3556'. [ 670.472823][T18035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3556'. [ 670.544050][T18035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3556'. [ 670.547040][T18035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3556'. [ 670.584694][ T61] usb 7-1: USB disconnect, device number 59 [ 670.649911][T18035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3556'. [ 670.653884][T18035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3556'. [ 670.696255][ T951] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 670.854464][ T951] usb 5-1: Using ep0 maxpacket: 32 [ 670.858162][ T951] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 670.863896][ T951] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 670.867736][ T951] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 670.871049][ T951] usb 5-1: Product: syz [ 670.872459][ T951] usb 5-1: Manufacturer: syz [ 670.874500][ T951] usb 5-1: SerialNumber: syz [ 670.878572][ T951] usb 5-1: config 0 descriptor?? [ 670.883856][T18034] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 670.887817][ T951] hub 5-1:0.0: bad descriptor, ignoring hub [ 670.890384][ T951] hub 5-1:0.0: probe with driver hub failed with error -5 [ 671.169039][T18022] Process accounting resumed [ 671.241928][T18041] syzkaller0: entered promiscuous mode [ 671.244046][T18041] syzkaller0: entered allmulticast mode [ 671.494444][ T61] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 671.644444][ T61] usb 7-1: Using ep0 maxpacket: 32 [ 671.648061][ T61] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 671.651531][ T61] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 671.655472][ T61] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 671.659494][ T61] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 671.664434][ T61] usb 7-1: config 0 interface 0 has no altsetting 0 [ 671.668678][ T61] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 671.671897][ T61] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 671.674824][ T61] usb 7-1: Product: syz [ 671.676226][ T61] usb 7-1: Manufacturer: syz [ 671.677751][ T61] usb 7-1: SerialNumber: syz [ 671.681005][ T61] usb 7-1: config 0 descriptor?? [ 671.684272][ T61] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 671.688627][ T61] ldusb 7-1:0.0: LD USB Device #2 now attached to major 180 minor 2 [ 671.944741][ T951] usb 5-1: USB disconnect, device number 43 [ 673.766736][T18066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3564'. [ 673.902853][T18066] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.905214][T18066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.909130][T18066] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.911492][T18066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.934543][T18066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 673.936501][T13449] ªªªªªª speed is unknown, defaulting to 1000 [ 673.949101][T13449] syz2: Port: 1 Link ACTIVE [ 674.027288][T18074] netlink: 'syz.0.3568': attribute type 21 has an invalid length. [ 674.202291][T18078] trusted_key: encrypted_key: insufficient parameters specified [ 674.321896][ T6138] usb 7-1: USB disconnect, device number 60 [ 674.334936][ T6138] ldusb 7-1:0.0: LD USB Device #2 now disconnected [ 676.932313][T18100] ubi: mtd0 is already attached to ubi31 [ 677.739736][T18120] ubi: mtd0 is already attached to ubi31 [ 678.200356][T18128] ubi: mtd0 is already attached to ubi31 [ 678.209965][T18128] FAULT_INJECTION: forcing a failure. [ 678.209965][T18128] name failslab, interval 1, probability 0, space 0, times 0 [ 678.214147][T18128] CPU: 1 UID: 0 PID: 18128 Comm: syz.2.3584 Tainted: G L syzkaller #0 PREEMPT(full) [ 678.214165][T18128] Tainted: [L]=SOFTLOCKUP [ 678.214170][T18128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 678.214180][T18128] Call Trace: [ 678.214186][T18128] [ 678.214193][T18128] dump_stack_lvl+0x100/0x190 [ 678.214219][T18128] should_fail_ex.cold+0x5/0xa [ 678.214249][T18128] should_failslab+0xc2/0x120 [ 678.214275][T18128] __kvmalloc_node_noprof+0x101/0xac0 [ 678.214296][T18128] ? __might_fault+0xc5/0x140 [ 678.214310][T18128] ? __might_fault+0xc5/0x140 [ 678.214335][T18128] ? xt_alloc_table_info+0x44/0xa0 [ 678.214351][T18128] ? xt_alloc_table_info+0x44/0xa0 [ 678.214361][T18128] ? _copy_from_user+0x59/0xd0 [ 678.214377][T18128] xt_alloc_table_info+0x44/0xa0 [ 678.214389][T18128] compat_do_replace+0x19b/0x500 [ 678.214403][T18128] ? register_lock_class+0x40/0x560 [ 678.214419][T18128] ? __pfx_compat_do_replace+0x10/0x10 [ 678.214435][T18128] ? lock_acquire+0x17c/0x330 [ 678.214453][T18128] ? bpf_lsm_capable+0x9/0x10 [ 678.214462][T18128] ? security_capable+0x80/0x260 [ 678.214478][T18128] do_ipt_set_ctl+0x562/0xaf0 [ 678.214490][T18128] ? nf_sockopt_find.isra.0+0x222/0x290 [ 678.214505][T18128] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 678.214517][T18128] ? sockopt_release_sock+0x57/0x70 [ 678.214534][T18128] ? __local_bh_enable_ip+0x9e/0x120 [ 678.214548][T18128] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 678.214569][T18128] ? nf_sockopt_find.isra.0+0x222/0x290 [ 678.214582][T18128] nf_setsockopt+0x8d/0xf0 [ 678.214594][T18128] ip_setsockopt+0xcb/0xf0 [ 678.214609][T18128] udp_setsockopt+0x7d/0xd0 [ 678.214619][T18128] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 678.214632][T18128] do_sock_setsockopt+0xf3/0x1d0 [ 678.214645][T18128] __sys_setsockopt+0x119/0x190 [ 678.214663][T18128] __ia32_sys_setsockopt+0xbc/0x160 [ 678.214679][T18128] ? __do_fast_syscall_32+0x97/0x660 [ 678.214693][T18128] ? lockdep_hardirqs_on+0x78/0x100 [ 678.214706][T18128] __do_fast_syscall_32+0xde/0x660 [ 678.214721][T18128] do_fast_syscall_32+0x32/0x70 [ 678.214736][T18128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 678.214750][T18128] RIP: 0023:0xf7fe5579 [ 678.214759][T18128] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 678.214769][T18128] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 678.214780][T18128] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 678.214787][T18128] RDX: 0000000000000040 RSI: 0000000080000500 RDI: 0000000000000270 [ 678.214793][T18128] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 678.214800][T18128] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 678.214806][T18128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 678.214819][T18128] [ 678.629237][T18151] FAULT_INJECTION: forcing a failure. [ 678.629237][T18151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.633584][T18151] CPU: 3 UID: 0 PID: 18151 Comm: syz.3.3590 Tainted: G L syzkaller #0 PREEMPT(full) [ 678.633611][T18151] Tainted: [L]=SOFTLOCKUP [ 678.633618][T18151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 678.633629][T18151] Call Trace: [ 678.633638][T18151] [ 678.633646][T18151] dump_stack_lvl+0x100/0x190 [ 678.633671][T18151] should_fail_ex.cold+0x5/0xa [ 678.633695][T18151] _copy_from_user+0x2e/0xd0 [ 678.633726][T18151] move_addr_to_kernel+0x65/0x170 [ 678.633742][T18151] __sys_sendto+0x1c9/0x520 [ 678.633758][T18151] ? __pfx___sys_sendto+0x10/0x10 [ 678.633778][T18151] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 678.633799][T18151] ? fput+0x79/0x100 [ 678.633814][T18151] ? ksys_write+0x1ac/0x250 [ 678.633828][T18151] __ia32_sys_sendto+0xdd/0x1b0 [ 678.633843][T18151] ? __do_fast_syscall_32+0x97/0x660 [ 678.633858][T18151] ? lockdep_hardirqs_on+0x78/0x100 [ 678.633872][T18151] __do_fast_syscall_32+0xde/0x660 [ 678.633888][T18151] do_fast_syscall_32+0x32/0x70 [ 678.633902][T18151] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 678.633918][T18151] RIP: 0023:0xf7f91579 [ 678.633927][T18151] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 678.633937][T18151] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 678.633948][T18151] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000000 [ 678.633955][T18151] RDX: 0000000000000000 RSI: 0000000004008000 RDI: 0000000080000040 [ 678.633961][T18151] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 678.633968][T18151] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 678.633974][T18151] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 678.633988][T18151] [ 679.377436][T18153] overlayfs: failed to resolve './file1': -2 [ 679.600568][T18159] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3592'. [ 679.603530][T18159] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3592'. [ 680.672114][T18179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3598'. [ 681.144453][ T951] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 681.376474][T18200] 9p: Bad value for 'wfdno' [ 681.408709][ T951] usb 7-1: config 0 has no interfaces? [ 681.412872][ T951] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 681.415909][ T951] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 681.418416][ T951] usb 7-1: Product: syz [ 681.419750][ T951] usb 7-1: Manufacturer: syz [ 681.422728][ T951] usb 7-1: config 0 descriptor?? [ 681.672122][ T951] usb 7-1: USB disconnect, device number 61 [ 682.956927][T18220] syzkaller0: entered promiscuous mode [ 682.959507][T18220] syzkaller0: entered allmulticast mode [ 683.085144][T18220] tipc: Enabled bearer , priority 0 [ 683.154698][T18219] tipc: Resetting bearer [ 683.295471][T18219] tipc: Disabling bearer [ 683.632779][T18225] syzkaller0: entered promiscuous mode [ 683.636187][T18225] syzkaller0: entered allmulticast mode [ 683.704558][T18231] FAULT_INJECTION: forcing a failure. [ 683.704558][T18231] name failslab, interval 1, probability 0, space 0, times 0 [ 683.714606][T18231] CPU: 0 UID: 0 PID: 18231 Comm: syz.3.3609 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.714627][T18231] Tainted: [L]=SOFTLOCKUP [ 683.714631][T18231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 683.714638][T18231] Call Trace: [ 683.714642][T18231] [ 683.714647][T18231] dump_stack_lvl+0x100/0x190 [ 683.714664][T18231] should_fail_ex.cold+0x5/0xa [ 683.714681][T18231] ? sk_filter_trim_cap+0x571/0xde0 [ 683.714694][T18231] should_failslab+0xc2/0x120 [ 683.714710][T18231] kmem_cache_alloc_noprof+0x83/0x780 [ 683.714725][T18231] ? skb_clone+0x190/0x400 [ 683.714745][T18231] ? skb_clone+0x190/0x400 [ 683.714760][T18231] skb_clone+0x190/0x400 [ 683.714800][T18231] netlink_deliver_tap+0xaed/0xcc0 [ 683.714821][T18231] netlink_dump+0x8ca/0xd30 [ 683.714839][T18231] ? __pfx_netlink_dump+0x10/0x10 [ 683.714855][T18231] ? __pfx___mutex_lock+0x10/0x10 [ 683.714869][T18231] ? __netlink_lookup+0x65c/0x900 [ 683.714894][T18231] __netlink_dump_start+0x6d6/0x990 [ 683.714913][T18231] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 683.714931][T18231] rtnetlink_rcv_msg+0xb3e/0xe90 [ 683.714949][T18231] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 683.714967][T18231] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 683.714984][T18231] ? __pfx_rtnl_dumpit+0x10/0x10 [ 683.714997][T18231] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 683.715017][T18231] ? ref_tracker_free+0x37e/0x6c0 [ 683.715030][T18231] netlink_rcv_skb+0x159/0x420 [ 683.715047][T18231] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 683.715066][T18231] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 683.715089][T18231] ? netlink_deliver_tap+0x1ae/0xcc0 [ 683.715108][T18231] netlink_unicast+0x5aa/0x870 [ 683.715128][T18231] ? __pfx_netlink_unicast+0x10/0x10 [ 683.715150][T18231] netlink_sendmsg+0x8b0/0xda0 [ 683.715171][T18231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.715190][T18231] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 683.715210][T18231] ____sys_sendmsg+0xa54/0xc30 [ 683.715224][T18231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.715243][T18231] ___sys_sendmsg+0x190/0x1e0 [ 683.715257][T18231] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.715287][T18231] __sys_sendmsg+0x170/0x220 [ 683.715304][T18231] ? __pfx___sys_sendmsg+0x10/0x10 [ 683.715325][T18231] ? __pfx_ksys_write+0x10/0x10 [ 683.715341][T18231] __do_fast_syscall_32+0xde/0x660 [ 683.715357][T18231] do_fast_syscall_32+0x32/0x70 [ 683.715372][T18231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 683.715386][T18231] RIP: 0023:0xf7f91579 [ 683.715396][T18231] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 683.715407][T18231] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 683.715418][T18231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 683.715425][T18231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 683.715431][T18231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 683.715438][T18231] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 683.715444][T18231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 683.715459][T18231] [ 683.826735][T18223] FAULT_INJECTION: forcing a failure. [ 683.826735][T18223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.830965][T18223] CPU: 2 UID: 0 PID: 18223 Comm: syz.1.3607 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.830984][T18223] Tainted: [L]=SOFTLOCKUP [ 683.830988][T18223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 683.830994][T18223] Call Trace: [ 683.830999][T18223] [ 683.831003][T18223] dump_stack_lvl+0x100/0x190 [ 683.831020][T18223] should_fail_ex.cold+0x5/0xa [ 683.831039][T18223] _copy_from_iter+0x1f4/0x1690 [ 683.831058][T18223] ? __alloc_skb+0x220/0x410 [ 683.831073][T18223] ? __alloc_skb+0x35d/0x410 [ 683.831088][T18223] ? __pfx__copy_from_iter+0x10/0x10 [ 683.831105][T18223] ? __pfx___might_resched+0x10/0x10 [ 683.831127][T18223] netlink_sendmsg+0x808/0xda0 [ 683.831147][T18223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.831167][T18223] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 683.831183][T18223] ____sys_sendmsg+0xa54/0xc30 [ 683.831197][T18223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.831215][T18223] ___sys_sendmsg+0x190/0x1e0 [ 683.831229][T18223] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.831258][T18223] __sys_sendmsg+0x170/0x220 [ 683.831275][T18223] ? __pfx___sys_sendmsg+0x10/0x10 [ 683.831296][T18223] ? __pfx_ksys_write+0x10/0x10 [ 683.831312][T18223] __do_fast_syscall_32+0xde/0x660 [ 683.831329][T18223] do_fast_syscall_32+0x32/0x70 [ 683.831343][T18223] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 683.831358][T18223] RIP: 0023:0xf73ed579 [ 683.831367][T18223] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 683.831378][T18223] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 683.831389][T18223] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800002c0 [ 683.831396][T18223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 683.831402][T18223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 683.831409][T18223] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 683.831415][T18223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 683.831429][T18223] [ 683.902106][T18236] qrtr: Invalid version 0 [ 685.025452][T18254] syzkaller0: entered promiscuous mode [ 685.028042][T18254] syzkaller0: entered allmulticast mode [ 685.974485][ T10] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 686.594500][ T10] usb 7-1: config 0 has no interfaces? [ 686.598712][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 686.603158][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 686.607384][ T10] usb 7-1: Product: syz [ 686.608852][ T10] usb 7-1: Manufacturer: syz [ 686.615339][ T10] usb 7-1: config 0 descriptor?? [ 686.734491][ T61] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 686.749395][T18289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.754141][T18289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.830575][ T6128] usb 7-1: USB disconnect, device number 62 [ 686.896369][ T61] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.899787][ T61] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 686.904109][ T61] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 686.908751][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.910232][T18292] syzkaller0: entered promiscuous mode [ 686.914492][T18292] syzkaller0: entered allmulticast mode [ 686.915705][ T61] usb 5-1: config 0 descriptor?? [ 686.921487][ T61] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 688.771829][T18312] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3633'. [ 688.777102][T18312] comedi comedi3: comedi_config --init_data is deprecated [ 688.783190][T18312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3633'. [ 688.870455][T18315] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3634'. [ 688.875079][T18315] comedi comedi3: comedi_config --init_data is deprecated [ 688.880671][T18315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3634'. [ 689.495245][ T6138] usb 5-1: USB disconnect, device number 44 [ 690.214537][T18329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 690.368344][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.370676][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.662821][T18335] netlink: 'syz.1.3641': attribute type 1 has an invalid length. [ 690.681760][T18335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 691.922588][T18358] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3643'. [ 691.926283][T18358] comedi comedi3: comedi_config --init_data is deprecated [ 691.929894][T18358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3643'. [ 693.418344][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3645'. [ 693.421270][T18366] netlink: 'syz.0.3645': attribute type 30 has an invalid length. [ 693.471419][T18368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3645'. [ 693.474523][T18368] netlink: 'syz.0.3645': attribute type 30 has an invalid length. [ 693.506989][ T1142] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.819980][T17309] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.824642][T17309] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.839260][T17309] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.244453][ T6128] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 694.274312][T18384] syzkaller0: entered promiscuous mode [ 694.276299][T18384] syzkaller0: entered allmulticast mode [ 694.394469][ T6128] usb 7-1: Using ep0 maxpacket: 16 [ 694.397661][ T6128] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.401380][ T6128] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.404595][ T6128] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 694.408733][ T6128] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 694.411774][ T6128] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.416223][ T6128] usb 7-1: config 0 descriptor?? [ 694.456564][T18390] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3652'. [ 694.459876][T18390] comedi comedi3: comedi_config --init_data is deprecated [ 694.464200][T18390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3652'. [ 694.689248][T18396] MTD: Couldn't look up 'mountinfo': -2 [ 694.743190][T18398] FAULT_INJECTION: forcing a failure. [ 694.743190][T18398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.749210][T18398] CPU: 2 UID: 0 PID: 18398 Comm: syz.3.3655 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.749240][T18398] Tainted: [L]=SOFTLOCKUP [ 694.749247][T18398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 694.749257][T18398] Call Trace: [ 694.749264][T18398] [ 694.749271][T18398] dump_stack_lvl+0x100/0x190 [ 694.749298][T18398] should_fail_ex.cold+0x5/0xa [ 694.749328][T18398] _copy_from_user+0x2e/0xd0 [ 694.749356][T18398] __sys_bpf+0x243/0x5050 [ 694.749381][T18398] ? __pfx___sys_bpf+0x10/0x10 [ 694.749402][T18398] ? proc_fail_nth_write+0x9f/0x220 [ 694.749423][T18398] ? find_held_lock+0x2b/0x80 [ 694.749446][T18398] ? find_held_lock+0x2b/0x80 [ 694.749463][T18398] ? ksys_write+0x190/0x250 [ 694.749488][T18398] ? __mutex_unlock_slowpath+0x15c/0x790 [ 694.749525][T18398] ? fput+0x79/0x100 [ 694.749547][T18398] ? ksys_write+0x1ac/0x250 [ 694.749570][T18398] __ia32_sys_bpf+0x79/0xf0 [ 694.749590][T18398] ? lockdep_hardirqs_on+0x78/0x100 [ 694.749610][T18398] __do_fast_syscall_32+0xde/0x660 [ 694.749634][T18398] do_fast_syscall_32+0x32/0x70 [ 694.749656][T18398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 694.749677][T18398] RIP: 0023:0xf7f91579 [ 694.749692][T18398] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 694.749709][T18398] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 694.749727][T18398] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00000000800003c0 [ 694.749738][T18398] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 694.749749][T18398] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 694.749759][T18398] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 694.749770][T18398] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 694.749793][T18398] [ 694.965648][T18408] FAULT_INJECTION: forcing a failure. [ 694.965648][T18408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.969734][T18408] CPU: 2 UID: 0 PID: 18408 Comm: syz.0.3656 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.969759][T18408] Tainted: [L]=SOFTLOCKUP [ 694.969765][T18408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 694.969775][T18408] Call Trace: [ 694.969781][T18408] [ 694.969786][T18408] dump_stack_lvl+0x100/0x190 [ 694.969809][T18408] should_fail_ex.cold+0x5/0xa [ 694.969832][T18408] strncpy_from_user+0x3b/0x2d0 [ 694.969850][T18408] getname_flags.part.0+0x8f/0x540 [ 694.969867][T18408] ? ksys_write+0x190/0x250 [ 694.969880][T18408] getname_flags+0x93/0xf0 [ 694.969892][T18408] do_sys_openat2+0xc5/0x220 [ 694.969909][T18408] ? __pfx_do_sys_openat2+0x10/0x10 [ 694.969925][T18408] ? __fget_files+0x215/0x3d0 [ 694.969939][T18408] ? __fget_files+0x21f/0x3d0 [ 694.969953][T18408] __ia32_compat_sys_openat+0x12d/0x210 [ 694.969971][T18408] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 694.969997][T18408] ? __pfx_ksys_write+0x10/0x10 [ 694.970018][T18408] __do_fast_syscall_32+0xde/0x660 [ 694.970041][T18408] do_fast_syscall_32+0x32/0x70 [ 694.970064][T18408] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 694.970083][T18408] RIP: 0023:0xf7f93579 [ 694.970097][T18408] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 694.970112][T18408] RSP: 002b:00000000f541450c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 694.970129][T18408] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800013c0 [ 694.970139][T18408] RDX: 0000000000060841 RSI: 00000000d7a15f29 RDI: 0000000000000000 [ 694.970149][T18408] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 694.970158][T18408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.970166][T18408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 694.970187][T18408] [ 695.913929][ T68] block nbd0: Possible stuck request ffff888026bf8000: control (read@0,1024B). Runtime 60 seconds [ 695.917576][ T68] block nbd0: Possible stuck request ffff888026bf8200: control (read@1024,1024B). Runtime 60 seconds [ 695.920929][ T68] block nbd0: Possible stuck request ffff888026bf8400: control (read@2048,1024B). Runtime 60 seconds [ 695.924277][ T68] block nbd0: Possible stuck request ffff888026bf8600: control (read@3072,1024B). Runtime 60 seconds [ 696.529410][T18424] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3661'. [ 696.680283][T18428] syzkaller0: entered promiscuous mode [ 696.682799][T18428] syzkaller0: entered allmulticast mode [ 696.962472][T18430] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3664'. [ 696.966835][T18430] comedi comedi3: comedi_config --init_data is deprecated [ 696.971237][T18430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3664'. [ 697.013107][ T6128] usbhid 7-1:0.0: can't add hid device: -71 [ 697.015199][ T6128] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 697.023387][ T6128] usb 7-1: USB disconnect, device number 63 [ 697.109718][T18435] FAULT_INJECTION: forcing a failure. [ 697.109718][T18435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.115382][T18435] CPU: 2 UID: 0 PID: 18435 Comm: syz.1.3666 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.115409][T18435] Tainted: [L]=SOFTLOCKUP [ 697.115416][T18435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 697.115427][T18435] Call Trace: [ 697.115433][T18435] [ 697.115440][T18435] dump_stack_lvl+0x100/0x190 [ 697.115468][T18435] should_fail_ex.cold+0x5/0xa [ 697.115496][T18435] _copy_to_user+0x32/0xd0 [ 697.115525][T18435] simple_read_from_buffer+0xcb/0x170 [ 697.115546][T18435] proc_fail_nth_read+0x1af/0x230 [ 697.115568][T18435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 697.115591][T18435] ? rw_verify_area+0xce/0x6d0 [ 697.115609][T18435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 697.115630][T18435] vfs_read+0x1e4/0xb30 [ 697.115652][T18435] ? __pfx_vfs_read+0x10/0x10 [ 697.115669][T18435] ? find_held_lock+0x2b/0x80 [ 697.115687][T18435] ? __fget_files+0x215/0x3d0 [ 697.115711][T18435] ? __fget_files+0x21f/0x3d0 [ 697.115738][T18435] ksys_read+0x12a/0x250 [ 697.115757][T18435] ? __pfx_ksys_read+0x10/0x10 [ 697.115775][T18435] ? fput+0x79/0x100 [ 697.115805][T18435] do_int80_emulation+0x101/0x470 [ 697.115831][T18435] asm_int80_emulation+0x1a/0x20 [ 697.115848][T18435] RIP: 0023:0xf715572b [ 697.115861][T18435] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 697.115878][T18435] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 697.115895][T18435] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54165d0 [ 697.115907][T18435] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 697.115917][T18435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 697.115927][T18435] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 697.115946][T18435] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 697.115971][T18435] [ 697.448453][T18439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 697.454567][ T35] block nbd1: Possible stuck request ffff888027050000: control (read@0,1024B). Runtime 60 seconds [ 697.459068][ T35] block nbd1: Possible stuck request ffff888027050200: control (read@1024,1024B). Runtime 60 seconds [ 697.463359][ T35] block nbd1: Possible stuck request ffff888027050400: control (read@2048,1024B). Runtime 60 seconds [ 697.472195][ T35] block nbd1: Possible stuck request ffff888027050600: control (read@3072,1024B). Runtime 60 seconds [ 697.561535][ T951] ªªªªªª speed is unknown, defaulting to 1000 [ 698.212701][T18461] syzkaller0: entered promiscuous mode [ 698.214993][T18461] syzkaller0: entered allmulticast mode [ 698.346805][T18465] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3676'. [ 698.351733][T18465] comedi comedi3: comedi_config --init_data is deprecated [ 698.360275][T18465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3676'. [ 698.682486][T18471] FAULT_INJECTION: forcing a failure. [ 698.682486][T18471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.687003][T18471] CPU: 0 UID: 0 PID: 18471 Comm: syz.3.3677 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.687041][T18471] Tainted: [L]=SOFTLOCKUP [ 698.687047][T18471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 698.687054][T18471] Call Trace: [ 698.687058][T18471] [ 698.687063][T18471] dump_stack_lvl+0x100/0x190 [ 698.687080][T18471] should_fail_ex.cold+0x5/0xa [ 698.687099][T18471] _copy_from_user+0x2e/0xd0 [ 698.687117][T18471] __ia32_sys_epoll_ctl+0x130/0x1e0 [ 698.687132][T18471] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 698.687150][T18471] __do_fast_syscall_32+0xde/0x660 [ 698.687167][T18471] do_fast_syscall_32+0x32/0x70 [ 698.687181][T18471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 698.687195][T18471] RIP: 0023:0xf7f91579 [ 698.687205][T18471] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 698.687215][T18471] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 698.687227][T18471] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 698.687234][T18471] RDX: 0000000000000003 RSI: 0000000080000040 RDI: 0000000000000000 [ 698.687240][T18471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 698.687246][T18471] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 698.687253][T18471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 698.687266][T18471] [ 699.812961][T18494] syzkaller0: entered promiscuous mode [ 699.815420][T18494] syzkaller0: entered allmulticast mode [ 699.927809][T18496] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3686'. [ 700.218471][T18499] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3687'. [ 700.237202][T18499] comedi comedi3: comedi_config --init_data is deprecated [ 700.242481][T18499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3687'. [ 700.535015][ T951] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 700.721864][ T40] audit: type=1804 audit(1769804534.319:629): pid=18517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3692" name="/newroot/339/bus/bus" dev="overlay" ino=1795 res=1 errno=0 [ 700.745843][ T40] audit: type=1804 audit(1769804534.349:630): pid=18517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3692" name="/newroot/339/bus/bus" dev="overlay" ino=1795 res=1 errno=0 [ 700.759407][ T40] audit: type=1800 audit(1769804534.359:631): pid=18517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3692" name="bus" dev="overlay" ino=1795 res=0 errno=0 [ 700.798113][ T951] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 700.801384][ T951] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.806637][ T951] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 700.809615][ T951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.860366][T18522] ªªªªªª speed is unknown, defaulting to 1000 [ 700.949956][T18522] ªªªªªª speed is unknown, defaulting to 1000 [ 701.250575][ T951] usb 5-1: usb_control_msg returned -32 [ 701.252674][ T951] usbtmc 5-1:16.0: can't read capabilities [ 701.419700][T18527] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 701.448034][T18527] dvmrp9: entered allmulticast mode [ 701.944742][T18531] FAULT_INJECTION: forcing a failure. [ 701.944742][T18531] name failslab, interval 1, probability 0, space 0, times 0 [ 701.952154][T18531] CPU: 1 UID: 0 PID: 18531 Comm: syz.3.3696 Tainted: G L syzkaller #0 PREEMPT(full) [ 701.952174][T18531] Tainted: [L]=SOFTLOCKUP [ 701.952179][T18531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 701.952185][T18531] Call Trace: [ 701.952190][T18531] [ 701.952195][T18531] dump_stack_lvl+0x100/0x190 [ 701.952212][T18531] should_fail_ex.cold+0x5/0xa [ 701.952231][T18531] should_failslab+0xc2/0x120 [ 701.952247][T18531] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 701.952263][T18531] ? __alloc_skb+0x156/0x410 [ 701.952281][T18531] ? __alloc_skb+0x156/0x410 [ 701.952295][T18531] __alloc_skb+0x156/0x410 [ 701.952309][T18531] ? __alloc_skb+0x35d/0x410 [ 701.952324][T18531] ? __pfx___alloc_skb+0x10/0x10 [ 701.952340][T18531] ? find_held_lock+0x2b/0x80 [ 701.952351][T18531] ? net_generic+0xea/0x2a0 [ 701.952369][T18531] ovs_ct_limit_cmd_reply_start+0x55/0x1f0 [ 701.952389][T18531] ovs_ct_limit_cmd_del+0x16b/0x780 [ 701.952407][T18531] ? __pfx_ovs_ct_limit_cmd_del+0x10/0x10 [ 701.952425][T18531] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 701.952438][T18531] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 701.952453][T18531] genl_family_rcv_msg_doit+0x214/0x300 [ 701.952467][T18531] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 701.952479][T18531] ? genl_get_cmd+0x3ef/0x720 [ 701.952492][T18531] ? bpf_lsm_capable+0x9/0x10 [ 701.952514][T18531] ? security_capable+0x80/0x260 [ 701.952529][T18531] ? ns_capable+0xd2/0xf0 [ 701.952543][T18531] genl_rcv_msg+0x560/0x800 [ 701.952556][T18531] ? __pfx_genl_rcv_msg+0x10/0x10 [ 701.952569][T18531] ? __pfx_ovs_ct_limit_cmd_del+0x10/0x10 [ 701.952608][T18531] netlink_rcv_skb+0x159/0x420 [ 701.952626][T18531] ? __pfx_genl_rcv_msg+0x10/0x10 [ 701.952638][T18531] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 701.952665][T18531] ? netlink_deliver_tap+0x1ae/0xcc0 [ 701.952685][T18531] genl_rcv+0x28/0x40 [ 701.952694][T18531] netlink_unicast+0x5aa/0x870 [ 701.952714][T18531] ? __pfx_netlink_unicast+0x10/0x10 [ 701.952731][T18531] ? __asan_memset+0x23/0x50 [ 701.952743][T18531] ? __build_skb_around+0x278/0x390 [ 701.952757][T18531] ? is_vmalloc_addr+0x86/0xa0 [ 701.952771][T18531] netlink_sendmsg+0x8b0/0xda0 [ 701.952792][T18531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.952811][T18531] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 701.952829][T18531] ____sys_sendmsg+0xa54/0xc30 [ 701.952843][T18531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 701.952861][T18531] ___sys_sendmsg+0x190/0x1e0 [ 701.952876][T18531] ? __pfx____sys_sendmsg+0x10/0x10 [ 701.952906][T18531] __sys_sendmsg+0x170/0x220 [ 701.952923][T18531] ? __pfx___sys_sendmsg+0x10/0x10 [ 701.952949][T18531] __do_fast_syscall_32+0xde/0x660 [ 701.952965][T18531] do_fast_syscall_32+0x32/0x70 [ 701.952980][T18531] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 701.952994][T18531] RIP: 0023:0xf7f91579 [ 701.953004][T18531] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 701.953015][T18531] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 701.953026][T18531] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 701.953033][T18531] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 701.953040][T18531] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 701.953046][T18531] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 701.953053][T18531] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 701.953067][T18531] [ 702.638129][T18554] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3702'. [ 702.642856][T18554] comedi comedi3: comedi_config --init_data is deprecated [ 702.648450][T18554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3702'. [ 702.851519][T18559] netlink: 'syz.3.3704': attribute type 21 has an invalid length. [ 702.855314][T18559] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3704'. [ 702.971656][T18560] ªªªªªª speed is unknown, defaulting to 1000 [ 703.075317][T18560] ªªªªªª speed is unknown, defaulting to 1000 [ 703.406162][ T10] usb 5-1: USB disconnect, device number 45 [ 703.884605][ T1023] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 703.977677][T18574] ªªªªªª speed is unknown, defaulting to 1000 [ 704.056235][ T1023] usb 6-1: config 0 has no interfaces? [ 704.060207][ T1023] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 704.064011][ T1023] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 704.067681][ T1023] usb 6-1: Product: syz [ 704.069550][ T1023] usb 6-1: Manufacturer: syz [ 704.073743][ T1023] usb 6-1: config 0 descriptor?? [ 704.311226][ T1023] usb 6-1: USB disconnect, device number 42 [ 704.362144][T18586] FAULT_INJECTION: forcing a failure. [ 704.362144][T18586] name failslab, interval 1, probability 0, space 0, times 0 [ 704.367663][T18586] CPU: 2 UID: 0 PID: 18586 Comm: syz.0.3712 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.367682][T18586] Tainted: [L]=SOFTLOCKUP [ 704.367686][T18586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 704.367693][T18586] Call Trace: [ 704.367697][T18586] [ 704.367702][T18586] dump_stack_lvl+0x100/0x190 [ 704.367720][T18586] should_fail_ex.cold+0x5/0xa [ 704.367752][T18586] should_failslab+0xc2/0x120 [ 704.367769][T18586] __kmalloc_cache_noprof+0x80/0x810 [ 704.367781][T18586] ? _drm_do_get_edid+0x14f/0x9f0 [ 704.367795][T18586] ? _drm_do_get_edid+0x14f/0x9f0 [ 704.367804][T18586] _drm_do_get_edid+0x14f/0x9f0 [ 704.367814][T18586] ? __drm_dev_dbg+0x149/0x1a0 [ 704.367834][T18586] ? __pfx_bochs_get_edid_block+0x10/0x10 [ 704.367848][T18586] ? __pfx___drm_dev_dbg+0x10/0x10 [ 704.367867][T18586] ? __pfx_bochs_get_edid_block+0x10/0x10 [ 704.367880][T18586] drm_edid_read_custom+0x86/0x2c0 [ 704.367891][T18586] ? __pfx_drm_edid_read_custom+0x10/0x10 [ 704.367903][T18586] ? bochs_connector_helper_get_modes+0x145/0x2f0 [ 704.367919][T18586] bochs_connector_helper_get_modes+0x1d8/0x2f0 [ 704.367934][T18586] ? __pfx_bochs_connector_helper_get_modes+0x10/0x10 [ 704.367949][T18586] ? modeset_lock+0x114/0x6d0 [ 704.367964][T18586] drm_helper_probe_single_connector_modes+0x576/0x16a0 [ 704.367984][T18586] ? __pfx___might_resched+0x10/0x10 [ 704.368007][T18586] ? __pfx_drm_helper_probe_single_connector_modes+0x10/0x10 [ 704.368026][T18586] ? drm_master_put+0x7c/0xd0 [ 704.368049][T18586] ? drm_is_current_master+0x2c/0x40 [ 704.368066][T18586] ? __pfx_drm_helper_probe_single_connector_modes+0x10/0x10 [ 704.368087][T18586] drm_mode_getconnector+0x753/0x1560 [ 704.368102][T18586] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 704.368117][T18586] ? drm_dev_exit+0x41/0x60 [ 704.368130][T18586] ? drm_dev_exit+0x41/0x60 [ 704.368146][T18586] drm_ioctl_kernel+0x1f3/0x3e0 [ 704.368158][T18586] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 704.368170][T18586] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 704.368187][T18586] drm_ioctl+0x5e6/0xc60 [ 704.368202][T18586] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 704.368214][T18586] ? __pfx_drm_ioctl+0x10/0x10 [ 704.368238][T18586] drm_compat_ioctl+0x376/0x4b0 [ 704.368256][T18586] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 704.368272][T18586] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 704.368292][T18586] __do_fast_syscall_32+0xde/0x660 [ 704.368308][T18586] do_fast_syscall_32+0x32/0x70 [ 704.368323][T18586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 704.368337][T18586] RIP: 0023:0xf7f93579 [ 704.368346][T18586] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 704.368356][T18586] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 704.368367][T18586] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c05064a7 [ 704.368374][T18586] RDX: 0000000080000740 RSI: 0000000000000000 RDI: 0000000000000000 [ 704.368381][T18586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 704.368387][T18586] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 704.368394][T18586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 704.368423][T18586] [ 704.369510][T18587] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 704.473462][T18587] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 704.474667][T18585] ------------[ cut here ]------------ [ 704.478839][T18585] [CRTC:35:crtc-0] vblank wait timed out [ 704.480717][T18585] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1920 at drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0, CPU#3: syz.0.3712/18585 [ 704.485772][T18585] Modules linked in: [ 704.487262][T18585] CPU: 3 UID: 0 PID: 18585 Comm: syz.0.3712 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.490791][T18585] Tainted: [L]=SOFTLOCKUP [ 704.492268][T18585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 704.495795][T18585] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 704.498273][T18585] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d 08 f9 31 0b 8b b3 d8 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 93 ca 75 fc e9 7c fe ff ff e8 b9 [ 704.505640][T18585] RSP: 0018:ffffc9000e76f798 EFLAGS: 00010246 [ 704.507599][T18585] RAX: 0000000000000000 RBX: ffff888043691318 RCX: 1ffff110086d227e [ 704.510140][T18585] RDX: ffff888024503680 RSI: 0000000000000023 RDI: ffffffff90c278e0 [ 704.511213][T18571] random: crng reseeded on system resumption [ 704.512687][T18585] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 704.517565][T18585] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 704.519356][T18587] vhci_hcd vhci_hcd.0: Device attached [ 704.520065][T18585] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880550acf00 [ 704.524590][T18585] FS: 0000000000000000(0000) GS:ffff8880976e3000(0063) knlGS:000000005787f480 [ 704.527490][T18585] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 704.529619][T18585] CR2: 000000002f863fff CR3: 0000000074884000 CR4: 0000000000352ef0 [ 704.532139][T18585] Call Trace: [ 704.533261][T18585] [ 704.534910][T18585] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 704.537932][T18585] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 704.540301][T18585] ? lockdep_hardirqs_on+0x78/0x100 [ 704.542391][T18585] ? __pfx_autoremove_wake_function+0x10/0x10 [ 704.545185][T18585] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 704.547864][T18585] drm_atomic_helper_commit_tail+0xff/0x130 [ 704.550240][T18585] commit_tail+0x338/0x430 [ 704.552032][T18585] drm_atomic_helper_commit+0x303/0x380 [ 704.554257][T18585] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 704.557056][T18585] drm_atomic_commit+0x230/0x300 [ 704.559025][T18585] ? __pfx_drm_atomic_commit+0x10/0x10 [ 704.561224][T18585] ? __pfx___drm_printfn_info+0x10/0x10 [ 704.563428][T18585] ? drm_client_rotation+0x451/0x6a0 [ 704.565622][T18585] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 704.567718][T18585] ? __mutex_lock+0x26a/0x1b90 [ 704.569469][T18585] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 704.572455][T18585] ? trace_contention_end+0xd6/0x110 [ 704.574858][T18585] ? drm_master_internal_acquire+0x21/0x80 [ 704.577230][T18585] drm_client_modeset_commit_locked+0x14d/0x580 [ 704.579712][T18585] drm_client_modeset_commit+0x4f/0x80 [ 704.581866][T18585] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 704.585204][T18585] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 704.588393][T18585] drm_fbdev_client_restore+0x1b/0x30 [ 704.590754][T18585] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 704.593379][T18585] drm_client_dev_restore+0x205/0x2a0 [ 704.595767][T18585] drm_release+0x2c6/0x360 [ 704.597552][T18585] ? __pfx_drm_release+0x10/0x10 [ 704.599443][T18585] __fput+0x3ff/0xb40 [ 704.601024][T18585] task_work_run+0x150/0x240 [ 704.602836][T18585] ? __pfx_task_work_run+0x10/0x10 [ 704.605239][T18585] exit_to_user_mode_loop+0x100/0x4b0 [ 704.607864][T18585] ? rcu_is_watching+0x12/0xc0 [ 704.610046][T18577] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 704.612470][T18585] __do_fast_syscall_32+0x4b6/0x660 [ 704.614458][T18585] do_fast_syscall_32+0x32/0x70 [ 704.617612][T18585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 704.619566][T18585] RIP: 0023:0xf7f93579 [ 704.620847][T18585] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 704.627193][T18585] RSP: 002b:00000000ffbd5abc EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 704.629764][T18585] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 704.632454][T18585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 704.635257][T18585] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 704.638105][T18585] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 704.640744][T18585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 704.643360][T18585] [ 704.644582][T18585] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 704.647469][T18585] CPU: 3 UID: 0 PID: 18585 Comm: syz.0.3712 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.651847][T18585] Tainted: [L]=SOFTLOCKUP [ 704.653676][T18585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 704.657290][T18585] Call Trace: [ 704.658393][T18585] [ 704.659404][T18585] dump_stack_lvl+0x100/0x190 [ 704.660996][T18585] vpanic+0x20d/0x630 [ 704.662306][T18585] panic+0xd1/0xd1 [ 704.663545][T18585] ? __pfx_panic+0x10/0x10 [ 704.665096][T18585] ? check_panic_on_warn+0x1f/0x90 [ 704.666809][T18585] check_panic_on_warn.cold+0x19/0x34 [ 704.668587][T18585] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 704.671474][T18585] __warn.cold+0x191/0x2f8 [ 704.673318][T18585] __report_bug+0x296/0x3d0 [ 704.675199][T18585] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 704.678238][T18585] ? __pfx___report_bug+0x10/0x10 [ 704.680374][T18585] ? lockdep_hardirqs_on+0x78/0x100 [ 704.682531][T18585] report_bug_entry+0xe1/0x290 [ 704.684506][T18585] ? drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 704.687446][T18585] handle_bug+0x1c9/0x2a0 [ 704.689294][T18585] exc_invalid_op+0x17/0x50 [ 704.691268][T18585] asm_exc_invalid_op+0x1a/0x20 [ 704.693346][T18585] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 704.696618][T18585] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d 08 f9 31 0b 8b b3 d8 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 93 ca 75 fc e9 7c fe ff ff e8 b9 [ 704.704591][T18585] RSP: 0018:ffffc9000e76f798 EFLAGS: 00010246 [ 704.707170][T18585] RAX: 0000000000000000 RBX: ffff888043691318 RCX: 1ffff110086d227e [ 704.710548][T18585] RDX: ffff888024503680 RSI: 0000000000000023 RDI: ffffffff90c278e0 [ 704.713729][T18585] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 704.716929][T18585] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 704.719806][T18585] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880550acf00 [ 704.722748][T18585] ? drm_atomic_helper_wait_for_vblanks.part.0+0x6e6/0x8a0 [ 704.725138][T18585] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 704.727545][T18585] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 704.729566][T18585] ? lockdep_hardirqs_on+0x78/0x100 [ 704.731495][T18585] ? __pfx_autoremove_wake_function+0x10/0x10 [ 704.733583][T18585] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 704.735657][T18585] drm_atomic_helper_commit_tail+0xff/0x130 [ 704.737683][T18585] commit_tail+0x338/0x430 [ 704.739132][T18585] drm_atomic_helper_commit+0x303/0x380 [ 704.740887][T18585] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 704.742789][T18585] drm_atomic_commit+0x230/0x300 [ 704.744384][T18585] ? __pfx_drm_atomic_commit+0x10/0x10 [ 704.746163][T18585] ? __pfx___drm_printfn_info+0x10/0x10 [ 704.747921][T18585] ? drm_client_rotation+0x451/0x6a0 [ 704.749627][T18585] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 704.751597][T18585] ? __mutex_lock+0x26a/0x1b90 [ 704.753128][T18585] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 704.755239][T18585] ? trace_contention_end+0xd6/0x110 [ 704.756993][T18585] ? drm_master_internal_acquire+0x21/0x80 [ 704.759079][T18585] drm_client_modeset_commit_locked+0x14d/0x580 [ 704.761069][T18585] drm_client_modeset_commit+0x4f/0x80 [ 704.762793][T18585] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 704.765240][T18585] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 704.767406][T18585] drm_fbdev_client_restore+0x1b/0x30 [ 704.769136][T18585] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 704.771055][T18585] drm_client_dev_restore+0x205/0x2a0 [ 704.772910][T18585] drm_release+0x2c6/0x360 [ 704.774354][T18585] ? __pfx_drm_release+0x10/0x10 [ 704.775969][T18585] __fput+0x3ff/0xb40 [ 704.777290][T18585] task_work_run+0x150/0x240 [ 704.778775][T18585] ? __pfx_task_work_run+0x10/0x10 [ 704.780418][T18585] exit_to_user_mode_loop+0x100/0x4b0 [ 704.782150][T18585] ? rcu_is_watching+0x12/0xc0 [ 704.783685][T18585] __do_fast_syscall_32+0x4b6/0x660 [ 704.785390][T18585] do_fast_syscall_32+0x32/0x70 [ 704.786956][T18585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 704.788984][T18585] RIP: 0023:0xf7f93579 [ 704.790291][T18585] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 704.796325][T18585] RSP: 002b:00000000ffbd5abc EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 704.798646][T18585] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 704.800978][T18585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 704.803467][T18585] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 704.805980][T18585] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 704.808789][T18585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 704.811920][T18585] [ 704.813917][T18585] Kernel Offset: disabled [ 704.815659][T18585] Rebooting in 86400 seconds..