last executing test programs: 6.053675483s ago: executing program 1 (id=4176): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x4020) msgsnd(0xffffffffffffffff, 0x0, 0x32, 0x800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000440)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000480)=0x6f) read$dsp(0xffffffffffffffff, &(0x7f0000000880)=""/4086, 0xff6) write$dsp(r4, &(0x7f0000001880)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, 0x0, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x74, 0x0, {0xffff, 0x7}, {0xf, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4048888) 5.633318074s ago: executing program 0 (id=4178): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000064d1921eaaf794959e3c000000bc3baad485eefc07a900000000ecffffff00"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) open_tree(0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=""/145, 0x91}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f0000000900)=""/64, 0x40}, {&(0x7f0000001840)=""/4098, 0x1002}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000004040)=""/4090, 0xffa}, {0x0}, {&(0x7f0000006040)=""/101, 0x65}, {0x0}, {&(0x7f00000061c0)=""/84, 0x54}], 0x5}, 0x900000}], 0x7, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.050544931s ago: executing program 1 (id=4180): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x189642, 0x0) ioctl$TIOCMIWAIT(r4, 0x5453, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000300)=0x20000004) ioctl$PPPIOCSMAXCID(r5, 0x40047451, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000380)=0x4) pwritev(r5, 0x0, 0x0, 0x0, 0x0) io_setup(0x202, 0x0) r6 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r6, 0x0, 0x0) 5.049947888s ago: executing program 3 (id=4181): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000064d1921eaaf794959e3c000000bc3baad485eefc07a900000000ecffffff000000"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) ioprio_get$pid(0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f0000000900)=""/64, 0x40}, {&(0x7f0000001840)=""/4098, 0x1002}], 0x3}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000004040)=""/4090, 0xffa}, {&(0x7f0000006240)=""/4099, 0x1003}, {&(0x7f0000006040)=""/101, 0x65}, {&(0x7f00000060c0)=""/203, 0xcb}, {0x0}], 0x5}, 0x900000}], 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.64993045s ago: executing program 2 (id=4182): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 4.522053874s ago: executing program 1 (id=4183): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x189642, 0x0) ioctl$TIOCMIWAIT(r4, 0x5453, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000300)=0x20000004) ioctl$PPPIOCSMAXCID(r5, 0x40047451, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000380)=0x4) pwritev(r5, 0x0, 0x0, 0x0, 0x0) io_setup(0x202, 0x0) r6 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r6, 0x0, 0x0) 4.453929224s ago: executing program 0 (id=4184): r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x1451c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/4096, 0x20001b80}, {&(0x7f0000001980)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=@filename='mtd0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') 4.179006111s ago: executing program 3 (id=4185): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000064d1921eaaf794959e3c000000bc3baad485eefc07a900000000ecffffff000000"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000380)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x9], [0x0, 0x0, 0x4]}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) ioprio_get$pid(0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=""/145, 0x91}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f0000000900)=""/64, 0x40}, {&(0x7f0000001840)=""/4098, 0x1002}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000004040)=""/4090, 0xffa}, {&(0x7f0000006240)=""/4099, 0x1003}, {&(0x7f00000060c0)=""/203, 0xcb}, {0x0}], 0x4}, 0x900000}], 0x7, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.360163879s ago: executing program 2 (id=4186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='27', 0x2) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420', 0x2b) 3.177389202s ago: executing program 3 (id=4187): close(0x3) r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000007c0)=0x7) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000800)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6) process_vm_writev(r1, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0200001"], 0x40}}, 0x0) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x3, 0x4, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.043955128s ago: executing program 2 (id=4188): mkdir(&(0x7f00000001c0)='./my_sys\x00', 0x1d7) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x11, 0x0, 0xbf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000040)=0x1001000, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x4c) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002880)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x40050, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(&(0x7f0000002900)='./file0/../file0/file0\x00', 0x0) r4 = open(&(0x7f0000002940)='./file0/../file0/file0\x00', 0x101001, 0xb) syz_fuse_handle_req(r2, &(0x7f0000002980)="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", 0x2000, &(0x7f0000004980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)={0x90, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x8000000000, 0x0, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1000000000005, 0x0, 0xfffffff1, 0x5, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000080)=0x86, &(0x7f00000000c0)=0x2) syz_emit_ethernet(0x17d, &(0x7f0000004c80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004100016f0064000000059078e00000027f000001441405030000000000000000ffffffff00000000890bceffffffffac141415070244240951ac14141300000200e000000100000007e0000001000000010000000000000063940686f9ef9e441c4e6300000000000000010000000000000006ac1414aa0000002d86060000000100000000000100", @ANYRES32=0x41424344, @ANYRES32=r4, @ANYRESDEC=r0], 0x0) capset(&(0x7f00000005c0)={0x20080522}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) r6 = openat$random(0xffffffffffffff9c, 0x0, 0x10900, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000400)) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000702, 0x0, &(0x7f0000000440)) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x579200, 0x4) utimensat(r7, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}, {0x77359400}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0xc0086c43, &(0x7f0000000500)=0x2000) ioctl$KVM_GET_XSAVE2(r8, 0x9000aecf, &(0x7f0000ffa000/0x3000)=nil) 2.973714689s ago: executing program 0 (id=4189): close(0x3) r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000007c0)=0x7) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000800)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6) process_vm_writev(r1, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0200001"], 0x40}}, 0x0) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x3, 0x4, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.908210919s ago: executing program 1 (id=4190): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x189642, 0x0) ioctl$TIOCMIWAIT(r4, 0x5453, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000300)=0x20000004) ioctl$PPPIOCSMAXCID(r5, 0x40047451, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000380)=0x4) pwritev(r5, 0x0, 0x0, 0x0, 0x0) io_setup(0x202, 0x0) r6 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r6, 0x0, 0x0) 2.529098765s ago: executing program 2 (id=4191): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x161) mount(0x0, 0x0, &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write(r0, &(0x7f0000000380)='100', 0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x400000009) 2.273206021s ago: executing program 3 (id=4192): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000064d1921eaaf794959e3c000000bc3baad485eefc07a900000000ecffffff00"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) open_tree(0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=""/145, 0x91}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f0000000900)=""/64, 0x40}, {&(0x7f0000001840)=""/4098, 0x1002}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000006240)=""/4099, 0x1003}, {&(0x7f0000006040)=""/101, 0x65}, {0x0}, {&(0x7f00000061c0)=""/84, 0x54}], 0x4}, 0x900000}], 0x7, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.008008918s ago: executing program 0 (id=4193): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000064d1921eaaf794959e3c000000bc3baad485eefc07a900000000ecffffff000000"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) ioprio_get$pid(0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f0000000900)=""/64, 0x40}, {&(0x7f0000001840)=""/4098, 0x1002}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000004040)=""/4090, 0xffa}, {&(0x7f0000006240)=""/4099, 0x1003}, {&(0x7f0000006040)=""/101, 0x65}, {&(0x7f00000060c0)=""/203, 0xcb}, {0x0}], 0x5}, 0x900000}], 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.589840565s ago: executing program 1 (id=4194): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x189642, 0x0) ioctl$TIOCMIWAIT(r4, 0x5453, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000300)=0x20000004) ioctl$PPPIOCSMAXCID(r5, 0x40047451, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000380)=0x4) pwritev(r5, 0x0, 0x0, 0x0, 0x0) io_setup(0x202, 0x0) r6 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r6, 0x0, 0x0) 1.032600671s ago: executing program 1 (id=4195): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000064d1921eaaf794959e3c000000bc3baad485eefc07a900000000ecffffff000000"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000380)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x9], [0x0, 0x0, 0x4]}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) ioprio_get$pid(0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=""/145, 0x91}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f0000000900)=""/64, 0x40}, {&(0x7f0000001840)=""/4098, 0x1002}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000004040)=""/4090, 0xffa}, {&(0x7f0000006240)=""/4099, 0x1003}, {&(0x7f00000060c0)=""/203, 0xcb}, {0x0}], 0x4}, 0x900000}], 0x7, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 933.335469ms ago: executing program 0 (id=4196): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000064d1921eaaf794959e3c000000bc3baad485eefc07a900000000ecffffff0000"], 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) ioprio_get$pid(0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f0000000900)=""/64, 0x40}, {&(0x7f0000001840)=""/4098, 0x1002}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000004040)=""/4090, 0xffa}, {&(0x7f0000006240)=""/4099, 0x1003}, {&(0x7f0000006040)=""/101, 0x65}, {&(0x7f00000060c0)=""/203, 0xcb}, {0x0}], 0x5}, 0x900000}], 0x7, 0x0, 0x0) 932.514768ms ago: executing program 3 (id=4197): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='27', 0x2) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nq', 0x2e) 816.86702ms ago: executing program 3 (id=4198): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netstat\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, &(0x7f0000000800)) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000840)={[{@nfs_export_on}, {@nfs_export_off}, {@verity_require}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x64, 0x34, 0x64, 0x30, 0x62, 0x36, 0x62], 0x2d, [0x31, 0x62, 0x36, 0x5b], 0x2d, [0x63, 0x35, 0x31, 0x53], 0x2d, [0x33, 0x34, 0x30, 0x64], 0x2d, [0x34, 0x32, 0x62, 0x62, 0x32, 0x37, 0x38, 0x38]}}}]}) setsockopt$inet6_int(r5, 0x29, 0x33, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$inet6_int(r5, 0x29, 0x42, 0x0, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0) lseek(r4, 0x2000, 0x1) sendmsg$nl_route(r0, 0x0, 0x0) 333.905075ms ago: executing program 2 (id=4199): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/sda1\x00', &(0x7f0000000340)='./mnt\x00', &(0x7f0000000380)='ext4\x00', 0x8410, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x64, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x1000, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x2001}, 0x18, 0x0) landlock_restrict_self(r1, 0x5) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000680)=@v2={0x2, @aes128, 0x8, '\x00', @b}) 500.014µs ago: executing program 2 (id=4200): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x4020) msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000fe95a9b943b4f06cf017b824573d000000000000006c6d1d020b4d1f5a3196a6911f4d00"/50], 0x32, 0x800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000440)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000480)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x8800, 0x0) read$dsp(r5, &(0x7f0000000880)=""/4086, 0xff6) write$dsp(r4, &(0x7f0000001880)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r5, &(0x7f00000018c0)=""/92, 0x5c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r6, 0x0, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x74, 0x0, {0xffff, 0x7}, {0xf, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4048888) 0s ago: executing program 0 (id=4201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000001300)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r3, &(0x7f0000001340)="080211000001080211000000080045", 0xf) kernel console output (not intermixed with test programs): ] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3525'. [ 1230.588773][T21077] syzkaller0: entered promiscuous mode [ 1230.588788][T21077] syzkaller0: entered allmulticast mode [ 1230.872621][T21085] nvme nvme0: failed to connect socket: -111 [ 1231.035776][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1231.078756][T21096] FAULT_INJECTION: forcing a failure. [ 1231.078756][T21096] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1231.078779][T21096] CPU: 2 UID: 0 PID: 21096 Comm: syz.0.3539 Not tainted syzkaller #0 PREEMPT(full) [ 1231.078805][T21096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1231.078812][T21096] Call Trace: [ 1231.078817][T21096] [ 1231.078822][T21096] dump_stack_lvl+0x100/0x190 [ 1231.078843][T21096] should_fail_ex.cold+0x5/0xa [ 1231.078860][T21096] should_fail_alloc_page+0xeb/0x140 [ 1231.078875][T21096] prepare_alloc_pages+0x1f0/0x5b0 [ 1231.078888][T21096] ? __lock_acquire+0x5c0/0x1f40 [ 1231.078900][T21096] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 1231.078916][T21096] ? stack_depot_save_flags+0x27/0xa10 [ 1231.078931][T21096] ? lock_acquire+0x1d1/0x380 [ 1231.078948][T21096] ? __lock_acquire+0x5c0/0x1f40 [ 1231.078962][T21096] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1231.078978][T21096] ? __lock_acquire+0x5c0/0x1f40 [ 1231.078991][T21096] ? do_raw_spin_lock+0x128/0x260 [ 1231.079006][T21096] ? do_raw_spin_lock+0x128/0x260 [ 1231.079023][T21096] ? mark_held_locks+0x40/0x70 [ 1231.079034][T21096] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1231.079048][T21096] ? lockdep_hardirqs_on+0x7d/0x110 [ 1231.079062][T21096] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1231.079074][T21096] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1231.079088][T21096] ? policy_nodemask+0xed/0x5e0 [ 1231.079103][T21096] alloc_pages_mpol+0x201/0x560 [ 1231.079116][T21096] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1231.079128][T21096] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 1231.079141][T21096] ? lockdep_init_map_type+0x5c/0x250 [ 1231.079154][T21096] ? lockdep_init_map_type+0x5c/0x250 [ 1231.079168][T21096] alloc_pages_noprof+0x1a/0x160 [ 1231.079184][T21096] nvme_init_ctrl+0x90c/0xe20 [ 1231.079199][T21096] nvme_tcp_create_ctrl+0xc6f/0x13d0 [ 1231.079216][T21096] nvmf_dev_write+0x4ee/0xb60 [ 1231.079231][T21096] vfs_write+0x2aa/0x1050 [ 1231.079243][T21096] ? __pfx_nvmf_dev_write+0x10/0x10 [ 1231.079254][T21096] ? lock_acquire+0x1d1/0x380 [ 1231.079264][T21096] ? __fget_files+0x34/0x3d0 [ 1231.079276][T21096] ? __pfx_vfs_write+0x10/0x10 [ 1231.079286][T21096] ? find_held_lock+0x2b/0x80 [ 1231.079301][T21096] ? __fget_files+0x215/0x3d0 [ 1231.079311][T21096] ? __fget_files+0x215/0x3d0 [ 1231.079325][T21096] ? __fget_files+0x21f/0x3d0 [ 1231.079340][T21096] ksys_write+0x12a/0x250 [ 1231.079350][T21096] ? __pfx_ksys_write+0x10/0x10 [ 1231.079365][T21096] __do_fast_syscall_32+0x14b/0x8c0 [ 1231.079381][T21096] do_fast_syscall_32+0x32/0x70 [ 1231.079395][T21096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1231.079409][T21096] RIP: 0023:0xf746efbc [ 1231.079418][T21096] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1231.079429][T21096] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1231.079440][T21096] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 1231.079447][T21096] RDX: 0000000000000031 RSI: 0000000000000000 RDI: 0000000000000000 [ 1231.079453][T21096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1231.079459][T21096] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1231.079466][T21096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1231.079479][T21096] [ 1231.187526][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1231.189997][ T24] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1231.192976][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1231.192993][ T24] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1231.193010][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1231.193022][ T24] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1231.193078][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1231.193092][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1231.193104][ T24] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1231.193116][ T24] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1231.193890][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1231.193905][ T24] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1231.193922][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1231.193934][ T24] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1231.193950][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1231.193962][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1231.193974][ T24] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1231.193986][ T24] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1231.194771][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1231.194787][ T24] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1231.194804][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1231.194816][ T24] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1231.194827][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1231.194839][ T24] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1231.194851][ T24] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1231.194863][ T24] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1231.200149][ T24] usb 7-1: string descriptor 0 read error: -22 [ 1231.200206][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.218399][ T24] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1231.410633][ T24] usb 7-1: USB disconnect, device number 8 [ 1231.413309][T21107] Invalid ELF header magic: != ELF [ 1231.964494][T21135] FAULT_INJECTION: forcing a failure. [ 1231.964494][T21135] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1231.964513][T21135] CPU: 3 UID: 0 PID: 21135 Comm: syz.3.3556 Not tainted syzkaller #0 PREEMPT(full) [ 1231.964525][T21135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1231.964531][T21135] Call Trace: [ 1231.964535][T21135] [ 1231.964541][T21135] dump_stack_lvl+0x100/0x190 [ 1231.964561][T21135] should_fail_ex.cold+0x5/0xa [ 1231.964577][T21135] get_futex_key+0x1c9/0x13e0 [ 1231.964594][T21135] ? __pfx_get_futex_key+0x10/0x10 [ 1231.964611][T21135] futex_wait_setup+0x91/0x540 [ 1231.964626][T21135] __futex_wait+0x19f/0x360 [ 1231.964638][T21135] ? __pfx___futex_wait+0x10/0x10 [ 1231.964648][T21135] ? __pfx_try_to_wake_up+0x10/0x10 [ 1231.964659][T21135] ? futex_hash+0x311/0x400 [ 1231.964673][T21135] ? __pfx_futex_wake_mark+0x10/0x10 [ 1231.964685][T21135] ? find_held_lock+0x2b/0x80 [ 1231.964699][T21135] ? futex_wake+0x4ea/0x5e0 [ 1231.964713][T21135] futex_wait+0xe6/0x370 [ 1231.964725][T21135] ? __pfx_futex_wait+0x10/0x10 [ 1231.964739][T21135] ? rcu_read_lock_any_held+0x6a/0x90 [ 1231.964754][T21135] ? find_held_lock+0x2b/0x80 [ 1231.964768][T21135] ? ksys_write+0x190/0x250 [ 1231.964778][T21135] ? ksys_write+0x190/0x250 [ 1231.964790][T21135] do_futex+0x265/0x440 [ 1231.964805][T21135] ? __pfx_do_futex+0x10/0x10 [ 1231.964820][T21135] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1231.964837][T21135] __ia32_sys_futex_time32+0x2f4/0x470 [ 1231.964856][T21135] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 1231.964872][T21135] ? __might_fault+0xc5/0x140 [ 1231.964888][T21135] __do_fast_syscall_32+0x14b/0x8c0 [ 1231.964904][T21135] do_fast_syscall_32+0x32/0x70 [ 1231.964918][T21135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1231.964932][T21135] RIP: 0023:0xf73eefbc [ 1231.964942][T21135] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1231.964953][T21135] RSP: 002b:00000000f54065bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1231.964963][T21135] RAX: ffffffffffffffda RBX: 00000000f7414f88 RCX: 0000000000000080 [ 1231.964970][T21135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7414f8c [ 1231.964976][T21135] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 1231.964983][T21135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1231.964989][T21135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1231.965002][T21135] [ 1232.028430][T21135] nvme nvme0: failed to connect socket: -111 [ 1232.097705][T21140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.098003][T21140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.098064][T21140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.125742][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1232.189462][T21149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.189682][T21149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.189781][T21149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.252369][T21156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.252639][T21156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.252692][T21156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.276462][ T24] usb 6-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 1232.277444][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.277466][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.280269][ T24] usb 6-1: config 0 descriptor?? [ 1232.311340][T21162] nvme nvme0: failed to connect socket: -111 [ 1232.380379][T21167] nvme nvme0: failed to connect socket: -111 [ 1232.388281][T21171] Invalid ELF header magic: != ELF [ 1232.499149][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 1232.499227][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1232.503381][T21180] nvme nvme0: failed to connect socket: -111 [ 1232.504189][ T24] usb 6-1: USB disconnect, device number 10 [ 1232.820433][T21199] Invalid ELF header magic: != ELF [ 1233.185620][T13648] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1233.185700][ T5880] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1233.355704][ T5880] usb 7-1: Using ep0 maxpacket: 8 [ 1233.356035][T13648] usb 6-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 1233.356463][ T5880] usb 7-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1233.357008][ T5880] usb 7-1: config 0 has no interfaces? [ 1233.357701][T13648] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1233.357732][T13648] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 1233.357753][T13648] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1233.360033][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.360045][ T5880] usb 7-1: Product: syz [ 1233.360053][ T5880] usb 7-1: Manufacturer: syz [ 1233.360060][ T5880] usb 7-1: SerialNumber: syz [ 1233.361336][T13648] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.361354][T13648] usb 6-1: Product: syz [ 1233.361361][T13648] usb 6-1: Manufacturer: syz [ 1233.361368][T13648] usb 6-1: SerialNumber: syz [ 1233.362743][ T5880] usb 7-1: config 0 descriptor?? [ 1233.535506][T21210] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1233.570133][ T24] usb 7-1: USB disconnect, device number 9 [ 1233.670141][T21220] nvme nvme0: failed to connect socket: -111 [ 1233.707874][T21210] usb 8-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00 [ 1233.710740][T21210] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.710753][T21210] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1233.710774][T21210] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.716252][T21210] usb 8-1: interface 1 not found [ 1233.772696][T21210] usb 6-1: USB disconnect, device number 11 [ 1233.933078][ T10] usb 8-1: USB disconnect, device number 8 [ 1234.001708][T21232] pim6reg: entered allmulticast mode [ 1234.017695][T21231] pim6reg: left allmulticast mode [ 1234.064612][T21231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3593'. [ 1234.903563][T21256] Invalid ELF header magic: != ELF [ 1235.265633][T21272] pim6reg: entered allmulticast mode [ 1235.289529][T21271] pim6reg: left allmulticast mode [ 1235.415633][T21271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3609'. [ 1235.490890][T13648] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1235.984336][T13648] usb 5-1: Using ep0 maxpacket: 16 [ 1235.984935][T13648] usb 5-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 1235.985726][T13648] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.985744][T13648] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1235.986538][T13648] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1235.986550][T13648] usb 5-1: Manufacturer: syz [ 1235.990652][T13648] usb 5-1: config 0 descriptor?? [ 1236.013111][T21274] pim6reg: entered allmulticast mode [ 1236.089469][T21269] pim6reg: left allmulticast mode [ 1236.137782][T21269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3604'. [ 1236.259666][T21286] Invalid ELF header magic: != ELF [ 1237.434049][T21309] Invalid ELF header magic: != ELF [ 1237.788473][T21314] pim6reg: entered allmulticast mode [ 1237.816389][T21313] pim6reg: left allmulticast mode [ 1237.872481][T21313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3621'. [ 1238.080979][ T10] usb 5-1: USB disconnect, device number 6 [ 1238.246563][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.246613][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.275680][T20959] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1238.426568][T20959] usb 8-1: Using ep0 maxpacket: 8 [ 1238.427408][T20959] usb 8-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1238.428036][T20959] usb 8-1: config 0 has no interfaces? [ 1238.431159][T20959] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.431178][T20959] usb 8-1: Product: syz [ 1238.431190][T20959] usb 8-1: Manufacturer: syz [ 1238.431203][T20959] usb 8-1: SerialNumber: syz [ 1238.433772][T20959] usb 8-1: config 0 descriptor?? [ 1238.465547][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1238.615932][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1238.618438][ T10] usb 5-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1238.618858][ T10] usb 5-1: config 0 has no interfaces? [ 1238.620475][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.620487][ T10] usb 5-1: Product: syz [ 1238.620494][ T10] usb 5-1: Manufacturer: syz [ 1238.620501][ T10] usb 5-1: SerialNumber: syz [ 1238.621726][ T10] usb 5-1: config 0 descriptor?? [ 1238.642774][ T10] usb 8-1: USB disconnect, device number 9 [ 1238.831025][T16118] usb 5-1: USB disconnect, device number 7 [ 1239.062012][T21333] Invalid ELF header magic: != ELF [ 1239.236020][T21335] nvme nvme0: failed to connect socket: -111 [ 1239.401837][T21345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3633'. [ 1239.452645][T16452] svc: failed to register nfsdv3 RPC service (errno 5). [ 1239.452663][T16452] failed to unregister tcp with rpcbind [ 1239.505696][T21349] nvme nvme0: failed to connect socket: -111 [ 1239.522282][T21352] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1239.522300][T21352] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1239.522315][T21352] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1239.568423][T21355] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3638'. [ 1239.656406][T21362] Invalid ELF header magic: != ELF [ 1239.704808][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 1239.704820][ T42] audit: type=1326 audit(1793679193.854:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21358 comm="syz.0.3639" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf746efbc code=0x0 [ 1240.376127][ T5880] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1240.463869][T21381] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1240.536435][ T5880] usb 7-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 1240.537224][ T5880] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.537247][ T5880] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.537258][ T5880] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1240.537269][ T5880] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1240.538788][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.538800][ T5880] usb 7-1: Product: syz [ 1240.538807][ T5880] usb 7-1: Manufacturer: syz [ 1240.538814][ T5880] usb 7-1: SerialNumber: syz [ 1240.747600][T11848] usb 7-1: USB disconnect, device number 10 [ 1240.755598][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1240.821148][T21385] nvme nvme0: failed to connect socket: -111 [ 1240.925605][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1240.926039][ T24] usb 5-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1240.927935][ T24] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1240.927953][ T24] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1240.927971][ T24] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1240.927985][ T24] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1240.928795][ T24] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1240.928810][ T24] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1240.928826][ T24] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1240.928842][ T24] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1240.930081][ T24] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1240.930098][ T24] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1240.930113][ T24] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1240.930126][ T24] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1240.932392][ T24] usb 5-1: string descriptor 0 read error: -22 [ 1240.932491][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.935322][ T24] adutux 5-1:168.0: interrupt endpoints not found [ 1241.155860][T16118] usb 5-1: USB disconnect, device number 8 [ 1241.315542][ T5880] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1241.465536][ T5880] usb 6-1: Using ep0 maxpacket: 8 [ 1241.466290][ T5880] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1241.467263][ T5880] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1241.467288][ T5880] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1241.467315][ T5880] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1241.467335][ T5880] usb 6-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 1241.467351][ T5880] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1241.467371][ T5880] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1241.468214][ T5880] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1241.468237][ T5880] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1241.468263][ T5880] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1241.468282][ T5880] usb 6-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 1241.468298][ T5880] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1241.468318][ T5880] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1241.469193][ T5880] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1241.469217][ T5880] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1241.469243][ T5880] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1241.469262][ T5880] usb 6-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 1241.469278][ T5880] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1241.469298][ T5880] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1241.472703][ T5880] usb 6-1: string descriptor 0 read error: -22 [ 1241.472812][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.482792][ T5880] adutux 6-1:168.0: interrupt endpoints not found [ 1241.585561][T21410] FAULT_INJECTION: forcing a failure. [ 1241.585561][T21410] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.585581][T21410] CPU: 3 UID: 0 PID: 21410 Comm: syz.3.3657 Not tainted syzkaller #0 PREEMPT(full) [ 1241.585595][T21410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1241.585602][T21410] Call Trace: [ 1241.585607][T21410] [ 1241.585612][T21410] dump_stack_lvl+0x100/0x190 [ 1241.585635][T21410] should_fail_ex.cold+0x5/0xa [ 1241.585652][T21410] should_failslab+0xc2/0x120 [ 1241.585666][T21410] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1241.585682][T21410] ? netlink_deliver_tap+0x103/0xb50 [ 1241.585698][T21410] ? skb_clone+0x187/0x3f0 [ 1241.585718][T21410] skb_clone+0x187/0x3f0 [ 1241.585734][T21410] netlink_deliver_tap+0x82f/0xb50 [ 1241.585751][T21410] netlink_unicast+0x784/0x950 [ 1241.585768][T21410] ? __pfx_netlink_unicast+0x10/0x10 [ 1241.585787][T21410] netlink_ack+0x660/0xba0 [ 1241.585805][T21410] netlink_rcv_skb+0x333/0x420 [ 1241.585820][T21410] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1241.585832][T21410] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1241.585852][T21410] ? netlink_deliver_tap+0x1ae/0xb50 [ 1241.585869][T21410] netlink_unicast+0x668/0x950 [ 1241.585886][T21410] ? __pfx_netlink_unicast+0x10/0x10 [ 1241.585905][T21410] netlink_sendmsg+0x9ac/0x10c0 [ 1241.585922][T21410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1241.585940][T21410] ? apparmor_socket_sendmsg+0x165/0x280 [ 1241.585956][T21410] ? ____sys_sendmsg+0xa99/0xc30 [ 1241.585966][T21410] ____sys_sendmsg+0xa99/0xc30 [ 1241.585976][T21410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1241.585992][T21410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1241.586010][T21410] ___sys_sendmsg+0x190/0x1e0 [ 1241.586022][T21410] ? __pfx____sys_sendmsg+0x10/0x10 [ 1241.586034][T21410] ? futex_wait+0x11e/0x370 [ 1241.586050][T21410] ? find_held_lock+0x2b/0x80 [ 1241.586075][T21410] __sys_sendmsg+0x160/0x210 [ 1241.586091][T21410] ? __pfx___sys_sendmsg+0x10/0x10 [ 1241.586113][T21410] __do_fast_syscall_32+0x14b/0x8c0 [ 1241.586129][T21410] do_fast_syscall_32+0x32/0x70 [ 1241.586143][T21410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1241.586156][T21410] RIP: 0023:0xf73eefbc [ 1241.586166][T21410] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1241.586176][T21410] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1241.586187][T21410] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 1241.586194][T21410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1241.586200][T21410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1241.586207][T21410] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1241.586220][T21410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1241.586236][T21410] [ 1241.664100][T21414] FAULT_INJECTION: forcing a failure. [ 1241.664100][T21414] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.664119][T21414] CPU: 0 UID: 0 PID: 21414 Comm: syz.3.3658 Not tainted syzkaller #0 PREEMPT(full) [ 1241.664133][T21414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1241.664140][T21414] Call Trace: [ 1241.664144][T21414] [ 1241.664149][T21414] dump_stack_lvl+0x100/0x190 [ 1241.664170][T21414] should_fail_ex.cold+0x5/0xa [ 1241.664187][T21414] should_failslab+0xc2/0x120 [ 1241.664217][T21414] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1241.664238][T21414] ? devm_kvasprintf+0xb2/0x120 [ 1241.664254][T21414] devm_kmalloc+0xa5/0x2b0 [ 1241.664267][T21414] devm_kvasprintf+0xb2/0x120 [ 1241.664280][T21414] ? __pfx_devm_kvasprintf+0x10/0x10 [ 1241.664299][T21414] devm_kasprintf+0xc7/0x100 [ 1241.664311][T21414] ? __pfx_devm_kasprintf+0x10/0x10 [ 1241.664329][T21414] ? mark_held_locks+0x40/0x70 [ 1241.664342][T21414] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1241.664355][T21414] ? lockdep_hardirqs_on+0x7d/0x110 [ 1241.664369][T21414] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1241.664384][T21414] hci_leds_init+0xd9/0x1e0 [ 1241.664401][T21414] hci_register_dev+0x34a/0xcc0 [ 1241.664415][T21414] hci_uart_tty_ioctl+0x8fd/0xcb0 [ 1241.664434][T21414] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 1241.664450][T21414] tty_compat_ioctl+0x24d/0x420 [ 1241.664464][T21414] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 1241.664477][T21414] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1241.664495][T21414] __do_fast_syscall_32+0x14b/0x8c0 [ 1241.664511][T21414] do_fast_syscall_32+0x32/0x70 [ 1241.664525][T21414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1241.664540][T21414] RIP: 0023:0xf73eefbc [ 1241.664549][T21414] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1241.664560][T21414] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1241.664570][T21414] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400455c8 [ 1241.664657][T21414] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 1241.664664][T21414] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1241.664671][T21414] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1241.664677][T21414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1241.664693][T21414] [ 1241.684321][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 1241.709898][ T10] usb 6-1: USB disconnect, device number 12 [ 1241.967790][T21416] NFSD: Failed to start, no listeners configured. [ 1242.212058][T21420] netlink: 'syz.2.3661': attribute type 1 has an invalid length. [ 1242.241066][T21420] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1242.289348][T21423] can0: slcan on ttyS3. [ 1242.306056][T21420] bond13: (slave dummy0): Enslaving as a backup interface with an up link [ 1242.357595][T18577] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1242.398183][T21423] can0 (unregistered): slcan off ttyS3. [ 1242.465898][T16647] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1242.535935][T21437] Invalid ELF header magic: != ELF [ 1242.741569][T21453] Invalid ELF header magic: != ELF [ 1242.934416][T21457] dummy0: left promiscuous mode [ 1243.295887][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1243.528837][T21465] pim6reg: entered allmulticast mode [ 1243.536510][T21467] netlink: 'syz.1.3673': attribute type 1 has an invalid length. [ 1243.559444][T21467] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1243.583216][T21467] bond10: (slave dummy0): Enslaving as a backup interface with an up link [ 1243.605648][T21465] pim6reg: left allmulticast mode [ 1243.639654][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1243.666200][T18577] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1243.677483][ T24] usb 5-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1243.684244][T21471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3671'. [ 1243.697255][T20994] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1243.785617][T14118] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1243.802044][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1243.802079][ T24] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1243.802110][ T24] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1243.802132][ T24] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 1243.802148][ T24] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1243.802169][ T24] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1243.848426][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1243.848462][ T24] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1243.888329][ T24] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1243.888361][ T24] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 1243.888378][ T24] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1243.888400][ T24] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1244.068352][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1244.068379][ T24] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1244.068398][ T24] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1244.068411][ T24] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 1244.068421][ T24] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1244.068433][ T24] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1244.165816][T15954] Bluetooth: hci1: sending frame failed (-49) [ 1244.166389][T20994] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 1244.217032][ T24] usb 5-1: string descriptor 0 read error: -22 [ 1244.217091][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.221046][ T24] adutux 5-1:168.0: interrupt endpoints not found [ 1244.317630][ T42] audit: type=1326 audit(1793679198.474:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21479 comm="syz.3.3677" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73eefbc code=0x0 [ 1244.351139][T16617] svc: failed to register nfsdv3 RPC service (errno 5). [ 1244.351160][T16617] failed to unregister tcp with rpcbind [ 1244.426344][T20959] usb 5-1: USB disconnect, device number 9 [ 1244.438114][T16118] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1244.476670][T21489] bond13: (slave dummy0): Removing an active aggregator [ 1244.478134][T21489] bond13: (slave dummy0): Releasing backup interface [ 1244.586410][T16118] usb 6-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=fd.fb [ 1244.587192][T16118] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.587206][T16118] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1244.587226][T16118] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1244.587237][T16118] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1244.588792][T16118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.588804][T16118] usb 6-1: Product: syz [ 1244.588811][T16118] usb 6-1: Manufacturer: syz [ 1244.588818][T16118] usb 6-1: SerialNumber: syz [ 1244.628696][T20994] Bluetooth: hci1: urb ffff88800029ad00 submission failed (90) [ 1245.437088][T21507] pim6reg: entered allmulticast mode [ 1245.556894][T21507] pim6reg: left allmulticast mode [ 1245.701525][T21507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3686'. [ 1245.838773][T21510] overlayfs: failed to resolve './file0': -2 [ 1246.092376][T21515] NFSD: Failed to start, no listeners configured. [ 1246.295525][T20959] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1246.316790][T21518] NFSD: Failed to start, no listeners configured. [ 1246.445607][T20959] usb 5-1: Using ep0 maxpacket: 8 [ 1246.446354][T20959] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1246.447327][T20959] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1246.447362][T20959] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1246.447380][T20959] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1246.447399][T20959] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1246.447418][T20959] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1246.447450][T20959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.655217][T21528] netlink: 'syz.3.3696': attribute type 1 has an invalid length. [ 1246.667141][T21528] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1246.678212][T20959] usb 5-1: usb_control_msg returned -32 [ 1246.678254][T20959] usbtmc 5-1:16.0: can't read capabilities [ 1246.683800][T21528] bond11: (slave dummy0): Enslaving as a backup interface with an up link [ 1246.698196][T20959] usb 6-1: USB disconnect, device number 13 [ 1246.760293][T21532] syzkaller0: entered promiscuous mode [ 1246.760311][T21532] syzkaller0: entered allmulticast mode [ 1246.768485][T18577] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1246.876232][T18577] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1247.052983][T21536] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0 [ 1247.087672][T21537] Invalid ELF header magic: != ELF [ 1247.269968][T11848] usb 5-1: USB disconnect, device number 10 [ 1247.520410][T21539] overlayfs: failed to resolve './file1': -2 [ 1247.865210][T21550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3703'. [ 1248.103573][T21560] overlayfs: failed to resolve './file1': -2 [ 1248.246548][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1248.396315][ T10] usb 7-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=fd.fb [ 1248.397475][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.397495][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1248.397530][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1248.397545][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1248.399672][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.399691][ T10] usb 7-1: Product: syz [ 1248.399704][ T10] usb 7-1: Manufacturer: syz [ 1248.399716][ T10] usb 7-1: SerialNumber: syz [ 1248.434105][T20994] Bluetooth: hci1: urb ffff8880299d9e00 submission failed (90) [ 1248.469894][T21572] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3713'. [ 1248.796898][T21576] pim6reg: entered allmulticast mode [ 1248.945971][T21581] pim6reg: left allmulticast mode [ 1248.962313][T21583] netlink: 'syz.3.3716': attribute type 1 has an invalid length. [ 1249.030396][T21584] bond11: (slave dummy0): Removing an active aggregator [ 1249.030958][T21584] bond11: (slave dummy0): Releasing backup interface [ 1249.139794][T21581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3715'. [ 1249.522981][T21590] overlayfs: failed to resolve './file1': -2 [ 1249.696477][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1249.837067][T21603] Invalid ELF header magic: != ELF [ 1249.847165][ T10] usb 8-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=fd.fb [ 1249.848812][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.848831][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1249.848867][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1249.848884][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1249.851854][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.851872][ T10] usb 8-1: Product: syz [ 1249.851883][ T10] usb 8-1: Manufacturer: syz [ 1249.851895][ T10] usb 8-1: SerialNumber: syz [ 1249.925247][T20994] Bluetooth: hci5: urb ffff888027d2e900 submission failed (90) [ 1249.994770][T21601] nvme nvme0: failed to connect socket: -111 [ 1250.083496][T21605] syzkaller0: entered promiscuous mode [ 1250.083517][T21605] syzkaller0: entered allmulticast mode [ 1250.413195][ T42] audit: type=1326 audit(1793679204.564:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21609 comm="syz.1.3726" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f78fbc code=0x0 [ 1250.601611][T18826] usb 7-1: USB disconnect, device number 11 [ 1250.790478][T21619] Invalid ELF header magic: != ELF [ 1250.945148][T21620] pim6reg: entered allmulticast mode [ 1251.022373][T21620] pim6reg: left allmulticast mode [ 1251.117626][T21620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3728'. [ 1251.320755][T21623] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3729'. [ 1251.460640][T21625] overlayfs: failed to resolve './file1': -2 [ 1251.562705][T21629] nvme nvme0: failed to connect socket: -111 [ 1251.621252][T21632] syzkaller0: entered promiscuous mode [ 1251.621268][T21632] syzkaller0: entered allmulticast mode [ 1251.692798][T21639] netlink: 'syz.1.3736': attribute type 1 has an invalid length. [ 1251.707941][T21639] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1251.766991][T21639] bond10: (slave dummy0): Removing an active aggregator [ 1251.767412][T21639] bond10: (slave dummy0): Releasing backup interface [ 1251.985079][T21655] overlayfs: failed to resolve './file1': -2 [ 1252.232508][ T10] usb 8-1: USB disconnect, device number 10 [ 1252.620431][T21667] netlink: 'syz.0.3748': attribute type 1 has an invalid length. [ 1252.638173][T21667] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1252.928165][T13197] IPVS: starting estimator thread 0... [ 1253.017479][T21681] IPVS: using max 27 ests per chain, 64800 per kthread [ 1253.077686][T21689] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3756'. [ 1253.118111][T21691] netlink: 'syz.0.3757': attribute type 1 has an invalid length. [ 1253.327306][T21693] pim6reg: entered allmulticast mode [ 1253.434444][T21688] pim6reg: left allmulticast mode [ 1253.576299][T21693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3754'. [ 1253.699767][T21703] Invalid ELF header magic: != ELF [ 1253.852600][T21709] Invalid ELF header magic: != ELF [ 1254.726540][T21722] syzkaller0: entered promiscuous mode [ 1254.726555][T21722] syzkaller0: entered allmulticast mode [ 1254.991405][ T1164] Bluetooth: hci1: Frame reassembly failed (-84) [ 1255.303477][T21730] nvme nvme0: failed to connect socket: -111 [ 1255.571635][T21739] Invalid ELF header magic: != ELF [ 1255.700352][T21742] pim6reg: entered allmulticast mode [ 1255.778061][T21738] pim6reg: left allmulticast mode [ 1255.930422][T21747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3772'. [ 1255.944628][T21748] Invalid ELF header magic: != ELF [ 1257.038134][T21763] syzkaller0: entered promiscuous mode [ 1257.038149][T21763] syzkaller0: entered allmulticast mode [ 1257.056058][T15954] Bluetooth: hci1: command 0xfc11 tx timeout [ 1257.059962][T20994] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1257.537555][T21780] Invalid ELF header magic: != ELF [ 1257.724771][T21783] Invalid ELF header magic: != ELF [ 1259.469489][T21818] overlayfs: failed to resolve './file0': -2 [ 1259.576839][T21821] Invalid ELF header magic: != ELF [ 1259.863740][T21830] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3805'. [ 1259.888559][T21829] pim6reg: entered allmulticast mode [ 1259.888630][T21826] pim6reg: left allmulticast mode [ 1259.960905][T21826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3803'. [ 1260.211891][T21836] pim6reg: entered allmulticast mode [ 1260.288537][T21836] pim6reg: left allmulticast mode [ 1260.412678][T21843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3806'. [ 1260.520733][T21850] netlink: 'syz.0.3812': attribute type 1 has an invalid length. [ 1260.552466][T21850] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1260.636245][T21850] bond7: (slave veth5): Enslaving as an active interface with an up link [ 1260.710638][T21850] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1261.121387][T21867] Invalid ELF header magic: != ELF [ 1261.563169][T21879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3821'. [ 1261.755680][T21884] Invalid ELF header magic: != ELF [ 1262.194167][T21890] netlink: 'syz.2.3825': attribute type 1 has an invalid length. [ 1262.211671][T21890] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1262.252526][T21890] bond14: (slave veth3): Enslaving as an active interface with an up link [ 1262.290206][T21890] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 1262.803897][T21901] pim6reg: entered allmulticast mode [ 1262.842513][T21903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3830'. [ 1262.901608][T21894] pim6reg: left allmulticast mode [ 1263.007869][T21894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3826'. [ 1263.015552][T20959] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1263.165946][T20959] usb 5-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 1263.166813][T20959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.166828][T20959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.166845][T20959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.168100][T20959] usb 5-1: config 0 descriptor?? [ 1263.390405][T20959] usbhid 5-1:0.0: can't add hid device: -71 [ 1263.390457][T20959] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1263.391968][T20959] usb 5-1: USB disconnect, device number 11 [ 1263.513348][T21922] FAULT_INJECTION: forcing a failure. [ 1263.513348][T21922] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1263.513368][T21922] CPU: 3 UID: 0 PID: 21922 Comm: syz.2.3837 Not tainted syzkaller #0 PREEMPT(full) [ 1263.513380][T21922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1263.513386][T21922] Call Trace: [ 1263.513391][T21922] [ 1263.513396][T21922] dump_stack_lvl+0x100/0x190 [ 1263.513416][T21922] should_fail_ex.cold+0x5/0xa [ 1263.513433][T21922] strncpy_from_user+0x3b/0x2d0 [ 1263.513448][T21922] do_getname+0x78/0x390 [ 1263.513464][T21922] __ia32_sys_mkdirat+0x77/0xc0 [ 1263.513478][T21922] __do_fast_syscall_32+0x14b/0x8c0 [ 1263.513496][T21922] do_fast_syscall_32+0x32/0x70 [ 1263.513510][T21922] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1263.513524][T21922] RIP: 0023:0xf7f83fbc [ 1263.513533][T21922] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1263.513544][T21922] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 1263.513555][T21922] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080002640 [ 1263.513563][T21922] RDX: 0000000000000031 RSI: 0000000000000000 RDI: 0000000000000000 [ 1263.513569][T21922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1263.513575][T21922] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1263.513582][T21922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1263.513595][T21922] [ 1263.655120][T20163] Bluetooth: hci1: Frame reassembly failed (-84) [ 1263.659749][T20163] Bluetooth: hci1: Frame reassembly failed (-84) [ 1263.659893][T20163] Bluetooth: hci1: Frame reassembly failed (-84) [ 1263.660406][ T1178] Bluetooth: hci1: Frame reassembly failed (-84) [ 1263.825529][T20959] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1263.979959][T20959] usb 5-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 1263.981389][T20959] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1263.981411][T20959] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 1263.981423][T20959] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1263.983630][T20959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.983643][T20959] usb 5-1: Product: syz [ 1263.983650][T20959] usb 5-1: Manufacturer: syz [ 1263.983657][T20959] usb 5-1: SerialNumber: syz [ 1264.245670][T13648] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1264.407318][T13648] usb 6-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 1264.408325][T13648] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.408347][T13648] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.411507][T13648] usb 6-1: config 0 descriptor?? [ 1264.638939][T13648] usbhid 6-1:0.0: can't add hid device: -71 [ 1264.639025][T13648] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1264.642174][T13648] usb 6-1: USB disconnect, device number 14 [ 1265.685503][T20994] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1265.803677][T21210] usb 5-1: USB disconnect, device number 12 [ 1265.881666][T21941] nvme nvme0: failed to connect socket: -111 [ 1266.266086][T21954] Invalid ELF header magic: != ELF [ 1266.586624][T21956] NFSD: Failed to start, no listeners configured. [ 1266.591152][T21960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3849'. [ 1266.687701][T21962] pim6reg: entered allmulticast mode [ 1266.688876][T21962] pim6reg: left allmulticast mode [ 1266.796318][T21964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3851'. [ 1267.092170][T21970] nvme nvme0: failed to connect socket: -111 [ 1267.361546][ T42] audit: type=1326 audit(1793679221.514:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.3.3859" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1267.361611][ T42] audit: type=1326 audit(1793679221.514:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.3.3859" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1267.361635][ T42] audit: type=1326 audit(1793679221.514:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.3.3859" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1267.361655][ T42] audit: type=1326 audit(1793679221.514:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.3.3859" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1267.361680][ T42] audit: type=1326 audit(1793679221.514:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.3.3859" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1267.361700][ T42] audit: type=1326 audit(1793679221.514:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.3.3859" exe="/syz-executor" sig=0 arch=40000003 syscall=217 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1267.363754][ T42] audit: type=1326 audit(1793679221.514:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.3.3859" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1267.363793][ T42] audit: type=1326 audit(1793679221.514:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.3.3859" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1267.620208][T21995] Invalid ELF header magic: != ELF [ 1269.128033][T15954] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1270.228392][T21979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1270.292999][T22017] FAULT_INJECTION: forcing a failure. [ 1270.292999][T22017] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.293042][T22017] CPU: 0 UID: 0 PID: 22017 Comm: syz.3.3869 Not tainted syzkaller #0 PREEMPT(full) [ 1270.293056][T22017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1270.293063][T22017] Call Trace: [ 1270.293067][T22017] [ 1270.293072][T22017] dump_stack_lvl+0x100/0x190 [ 1270.293093][T22017] should_fail_ex.cold+0x5/0xa [ 1270.293110][T22017] should_failslab+0xc2/0x120 [ 1270.293124][T22017] __kmalloc_cache_noprof+0x91/0x6d0 [ 1270.293138][T22017] ? kobject_uevent_env+0x263/0x18b0 [ 1270.293154][T22017] kobject_uevent_env+0x263/0x18b0 [ 1270.293169][T22017] ? bus_to_subsys+0x114/0x150 [ 1270.293184][T22017] device_add+0x1173/0x1970 [ 1270.293196][T22017] ? __pfx_device_add+0x10/0x10 [ 1270.293206][T22017] ? dput.part.0+0x4a/0x240 [ 1270.293236][T22017] ? dput+0x24/0x30 [ 1270.293251][T22017] ? end_dirop+0x82/0xa0 [ 1270.293266][T22017] hci_register_dev+0x328/0xcc0 [ 1270.293281][T22017] hci_uart_tty_ioctl+0x8fd/0xcb0 [ 1270.293301][T22017] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 1270.293317][T22017] tty_compat_ioctl+0x24d/0x420 [ 1270.293331][T22017] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 1270.293345][T22017] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1270.293363][T22017] __do_fast_syscall_32+0x14b/0x8c0 [ 1270.293380][T22017] do_fast_syscall_32+0x32/0x70 [ 1270.293396][T22017] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1270.293410][T22017] RIP: 0023:0xf73eefbc [ 1270.293420][T22017] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1270.293430][T22017] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1270.293441][T22017] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000400455c8 [ 1270.293447][T22017] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 1270.293454][T22017] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1270.293460][T22017] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1270.293466][T22017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1270.293480][T22017] [ 1270.299745][T22019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3870'. [ 1270.312920][T22019] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1270.319156][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 1270.344538][T22019] bond15: (slave veth5): Enslaving as an active interface with an up link [ 1270.368972][T22019] bond14: (slave dummy0): Releasing backup interface [ 1270.380365][T22019] bond15: (slave dummy0): Enslaving as an active interface with an up link [ 1270.618294][T22025] Invalid ELF header magic: != ELF [ 1271.011661][T22030] pim6reg: entered allmulticast mode [ 1271.069047][T22029] pim6reg: left allmulticast mode [ 1271.117285][T22029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3873'. [ 1272.044844][T22043] nvme nvme0: failed to connect socket: -111 [ 1272.327906][T20994] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1272.328002][ T5793] Bluetooth: hci1: command 0xfc11 tx timeout [ 1272.330001][T15954] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1272.474376][T22051] fuse: Bad value for 'fd' [ 1272.608858][T22055] NFSD: Failed to start, no listeners configured. [ 1273.003549][T22061] pim6reg: entered allmulticast mode [ 1273.068133][T22053] pim6reg: left allmulticast mode [ 1273.151217][T22053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3882'. [ 1273.655166][T22073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3886'. [ 1273.655183][T22073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3886'. [ 1275.925528][T15954] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1276.030450][T22088] pim6reg: entered allmulticast mode [ 1276.168342][T22094] pim6reg: left allmulticast mode [ 1276.586355][T22097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3889'. [ 1277.614190][ T42] audit: type=1326 audit(1793679231.764:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22100 comm="syz.0.3894" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf746efbc code=0x0 [ 1278.462037][T22113] FAULT_INJECTION: forcing a failure. [ 1278.462037][T22113] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.462068][T22113] CPU: 3 UID: 0 PID: 22113 Comm: syz.0.3896 Not tainted syzkaller #0 PREEMPT(full) [ 1278.462097][T22113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1278.462109][T22113] Call Trace: [ 1278.462117][T22113] [ 1278.462126][T22113] dump_stack_lvl+0x100/0x190 [ 1278.462161][T22113] should_fail_ex.cold+0x5/0xa [ 1278.462205][T22113] should_failslab+0xc2/0x120 [ 1278.462230][T22113] __kmalloc_noprof+0xfc/0x840 [ 1278.462262][T22113] ? kobject_get_path+0xcf/0x2c0 [ 1278.462296][T22113] kobject_get_path+0xcf/0x2c0 [ 1278.462330][T22113] kobject_uevent_env+0x287/0x18b0 [ 1278.462355][T22113] ? bus_to_subsys+0x114/0x150 [ 1278.462381][T22113] device_add+0x1173/0x1970 [ 1278.462403][T22113] ? __pfx_device_add+0x10/0x10 [ 1278.462424][T22113] ? dput.part.0+0x4a/0x240 [ 1278.462467][T22113] ? dput+0x24/0x30 [ 1278.462492][T22113] ? end_dirop+0x82/0xa0 [ 1278.462519][T22113] hci_register_dev+0x328/0xcc0 [ 1278.462546][T22113] hci_uart_tty_ioctl+0x8fd/0xcb0 [ 1278.462577][T22113] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 1278.462603][T22113] tty_compat_ioctl+0x24d/0x420 [ 1278.462627][T22113] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 1278.462652][T22113] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1278.462684][T22113] __do_fast_syscall_32+0x14b/0x8c0 [ 1278.462713][T22113] do_fast_syscall_32+0x32/0x70 [ 1278.462738][T22113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1278.462761][T22113] RIP: 0023:0xf746efbc [ 1278.462777][T22113] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1278.462795][T22113] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1278.462814][T22113] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000400455c8 [ 1278.462828][T22113] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 1278.462840][T22113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1278.462853][T22113] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1278.462866][T22113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1278.462892][T22113] [ 1278.530490][ T1164] Bluetooth: hci1: Frame reassembly failed (-84) [ 1278.539674][T22058] syz.0.3879 (22058) used greatest stack depth: 17560 bytes left [ 1279.906908][T22124] jffs2: notice: (22124) jffs2_build_xattr_subsystem: complete building xattr subsystem, 13 of xdatum (0 unchecked, 13 orphan) and 12 of xref (1 dead, 11 orphan) found. [ 1280.340334][T22129] Invalid ELF header magic: != ELF [ 1280.565861][T15954] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1280.813558][T22082] syz.0.3887 (22082) used greatest stack depth: 17336 bytes left [ 1280.891508][ T42] audit: type=1326 audit(1793679235.044:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22130 comm="syz.0.3900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 1280.892257][ T42] audit: type=1326 audit(1793679235.044:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22130 comm="syz.0.3900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 1280.893063][ T42] audit: type=1326 audit(1793679235.044:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22130 comm="syz.0.3900" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 1280.893516][ T42] audit: type=1326 audit(1793679235.044:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22130 comm="syz.0.3900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 1280.896575][ T42] audit: type=1326 audit(1793679235.054:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22130 comm="syz.0.3900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 1280.935893][ T42] audit: type=1326 audit(1793679235.094:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22130 comm="syz.0.3900" exe="/syz-executor" sig=0 arch=40000003 syscall=217 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 1280.935923][ T42] audit: type=1326 audit(1793679235.094:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22130 comm="syz.0.3900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 1280.935943][ T42] audit: type=1326 audit(1793679235.094:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22130 comm="syz.0.3900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x7ffc0000 [ 1281.113787][T22133] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1281.219350][T22135] NFSD: Failed to start, no listeners configured. [ 1281.261683][T22133] bond12: (slave veth5): Enslaving as an active interface with an up link [ 1281.265166][T22140] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 1281.283873][ T42] audit: type=1326 audit(1793679235.434:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22137 comm="syz.3.3903" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73eefbc code=0x0 [ 1281.486183][T22147] jffs2: notice: (22147) jffs2_build_xattr_subsystem: complete building xattr subsystem, 13 of xdatum (0 unchecked, 13 orphan) and 12 of xref (1 dead, 11 orphan) found. [ 1282.574708][T22166] syzkaller0: entered promiscuous mode [ 1282.574847][T22166] syzkaller0: entered allmulticast mode [ 1283.019087][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 1283.019136][ T42] audit: type=1326 audit(1793679237.174:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.1.3912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fbc code=0x7ffc0000 [ 1283.021851][ T42] audit: type=1326 audit(1793679237.174:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.1.3912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fbc code=0x7ffc0000 [ 1283.022555][ T42] audit: type=1326 audit(1793679237.174:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.1.3912" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f78fbc code=0x7ffc0000 [ 1283.025363][ T42] audit: type=1326 audit(1793679237.174:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.1.3912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fbc code=0x7ffc0000 [ 1283.057957][ T42] audit: type=1326 audit(1793679237.214:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.1.3912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fbc code=0x7ffc0000 [ 1283.090889][ T42] audit: type=1326 audit(1793679237.244:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.1.3912" exe="/syz-executor" sig=0 arch=40000003 syscall=217 compat=1 ip=0xf7f78fbc code=0x7ffc0000 [ 1283.090937][ T42] audit: type=1326 audit(1793679237.244:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.1.3912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fbc code=0x7ffc0000 [ 1283.090972][ T42] audit: type=1326 audit(1793679237.244:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22169 comm="syz.1.3912" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fbc code=0x7ffc0000 [ 1283.592603][T22179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3916'. [ 1283.773374][T22180] bond7: (slave dummy0): Releasing backup interface [ 1284.012420][T22188] jffs2: notice: (22188) jffs2_build_xattr_subsystem: complete building xattr subsystem, 13 of xdatum (0 unchecked, 13 orphan) and 12 of xref (1 dead, 11 orphan) found. [ 1284.139798][T22189] nvme nvme0: failed to connect socket: -111 [ 1284.564750][T22194] pim6reg: entered allmulticast mode [ 1284.649824][T22193] pim6reg: left allmulticast mode [ 1284.796333][T22195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3919'. [ 1284.824936][T22156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1285.400115][T22204] pim6reg: entered allmulticast mode [ 1285.503246][T22198] pim6reg: left allmulticast mode [ 1285.693195][T22198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3920'. [ 1285.721759][T22211] jffs2: notice: (22211) jffs2_build_xattr_subsystem: complete building xattr subsystem, 13 of xdatum (0 unchecked, 13 orphan) and 12 of xref (1 dead, 11 orphan) found. [ 1286.570503][T22230] jffs2: notice: (22230) jffs2_build_xattr_subsystem: complete building xattr subsystem, 13 of xdatum (0 unchecked, 13 orphan) and 12 of xref (1 dead, 11 orphan) found. [ 1286.692171][T22233] nvme nvme0: failed to connect socket: -111 [ 1286.776537][T10379] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1286.936660][T10379] usb 6-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 1286.937490][T10379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.937512][T10379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.938732][T10379] usb 6-1: config 0 descriptor?? [ 1287.156861][T10379] usbhid 6-1:0.0: can't add hid device: -71 [ 1287.156915][T10379] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1287.157979][T10379] usb 6-1: USB disconnect, device number 15 [ 1287.312672][T16617] svc: failed to register nfsdv3 RPC service (errno 5). [ 1287.312687][T16617] failed to unregister tcp with rpcbind [ 1287.687445][T10379] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1287.809787][T22248] pim6reg: entered allmulticast mode [ 1287.879673][T22248] pim6reg: left allmulticast mode [ 1287.958856][T10379] usb 6-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 1287.975656][T10379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.977534][T10379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.977546][T10379] usb 6-1: Product: syz [ 1287.977554][T10379] usb 6-1: Manufacturer: syz [ 1287.977560][T10379] usb 6-1: SerialNumber: syz [ 1288.018750][T22251] pim6reg: entered allmulticast mode [ 1288.033129][T22250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3934'. [ 1288.060235][T10379] usb 6-1: config 0 descriptor?? [ 1288.125820][T22252] pim6reg: left allmulticast mode [ 1288.360093][T22247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3935'. [ 1288.804166][T10379] usbhid 6-1:0.0: can't add hid device: -71 [ 1288.804222][T10379] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1288.805318][T10379] usb 6-1: USB disconnect, device number 16 [ 1288.839957][T22259] pim6reg: entered allmulticast mode [ 1288.858314][T22257] pim6reg: left allmulticast mode [ 1288.970390][T22257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3937'. [ 1289.170954][T22265] NFSD: Failed to start, no listeners configured. [ 1289.195624][T18826] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1289.292711][T22267] FAULT_INJECTION: forcing a failure. [ 1289.292711][T22267] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1289.292739][T22267] CPU: 3 UID: 0 PID: 22267 Comm: syz.1.3941 Not tainted syzkaller #0 PREEMPT(full) [ 1289.292755][T22267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1289.292764][T22267] Call Trace: [ 1289.292770][T22267] [ 1289.292776][T22267] dump_stack_lvl+0x100/0x190 [ 1289.292805][T22267] should_fail_ex.cold+0x5/0xa [ 1289.292829][T22267] get_futex_key+0x1c9/0x13e0 [ 1289.292854][T22267] ? __pfx_get_futex_key+0x10/0x10 [ 1289.292880][T22267] futex_wake+0xf4/0x5e0 [ 1289.292899][T22267] ? __pfx_futex_wake+0x10/0x10 [ 1289.292918][T22267] ? percpu_counter_add_batch+0xb9/0x230 [ 1289.292965][T22267] ? errseq_sample+0x51/0x70 [ 1289.292992][T22267] ? file_init_path+0x48e/0x670 [ 1289.293020][T22267] do_futex+0x2b2/0x440 [ 1289.293047][T22267] ? __pfx_do_futex+0x10/0x10 [ 1289.293074][T22267] ? fd_install+0x223/0x580 [ 1289.293098][T22267] __ia32_sys_futex_time32+0x2f4/0x470 [ 1289.293128][T22267] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 1289.293164][T22267] ? __might_fault+0xc5/0x140 [ 1289.293193][T22267] __do_fast_syscall_32+0x14b/0x8c0 [ 1289.293224][T22267] do_fast_syscall_32+0x32/0x70 [ 1289.293247][T22267] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1289.293270][T22267] RIP: 0023:0xf7f78fbc [ 1289.293284][T22267] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1289.293302][T22267] RSP: 002b:00000000f54265cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1289.293321][T22267] RAX: ffffffffffffffda RBX: 00000000f7434f8c RCX: 0000000000000081 [ 1289.293333][T22267] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 1289.293345][T22267] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 1289.293356][T22267] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1289.293367][T22267] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1289.293392][T22267] [ 1289.345524][T18826] usb 8-1: Using ep0 maxpacket: 8 [ 1289.346076][T18826] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1289.347044][T18826] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1289.347061][T18826] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1289.347083][T18826] usb 8-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1289.347096][T18826] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1289.347954][T18826] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1289.347970][T18826] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1289.347985][T18826] usb 8-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1289.347998][T18826] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1289.349062][T18826] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1289.349086][T18826] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1289.349112][T18826] usb 8-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1289.349132][T18826] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1289.353999][T18826] usb 8-1: string descriptor 0 read error: -22 [ 1289.354096][T18826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.359265][T15954] Bluetooth: hci1: sending frame failed (-49) [ 1289.361241][T20994] Bluetooth: hci1: Entering manufacturer mode failed (-49) [ 1289.362172][T18826] adutux 8-1:168.0: interrupt endpoints not found [ 1289.577127][T18826] usb 8-1: USB disconnect, device number 11 [ 1289.686883][T22276] jffs2: notice: (22276) jffs2_build_xattr_subsystem: complete building xattr subsystem, 13 of xdatum (0 unchecked, 13 orphan) and 12 of xref (1 dead, 11 orphan) found. [ 1289.879288][T16617] svc: failed to register nfsdv3 RPC service (errno 5). [ 1289.879302][T16617] failed to unregister tcp with rpcbind [ 1289.965867][ T42] audit: type=1326 audit(1793679244.124:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22283 comm="syz.2.3947" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f83fbc code=0x0 [ 1290.112532][T22288] overlayfs: missing 'workdir' [ 1290.389548][T22297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3952'. [ 1290.442951][T22298] bond12: (slave dummy0): Releasing backup interface [ 1290.535566][T22301] pim6reg: entered allmulticast mode [ 1290.553766][T22295] pim6reg: left allmulticast mode [ 1290.712070][T22301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3951'. [ 1291.251031][T15951] svc: failed to register nfsdv3 RPC service (errno 5). [ 1291.251046][T15951] failed to unregister tcp with rpcbind [ 1291.315721][T11848] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1291.526660][T11848] usb 5-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=fd.fb [ 1291.527559][T11848] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.527572][T11848] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1291.527593][T11848] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1291.527604][T11848] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1291.529416][T11848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.529428][T11848] usb 5-1: Product: syz [ 1291.529435][T11848] usb 5-1: Manufacturer: syz [ 1291.529442][T11848] usb 5-1: SerialNumber: syz [ 1291.548001][T15954] Bluetooth: hci1: urb ffff8880271d6100 submission failed (90) [ 1291.620940][T22320] Invalid ELF header magic: != ELF [ 1291.977748][T22323] overlayfs: missing 'workdir' [ 1292.175224][T22332] jffs2: notice: (22332) jffs2_build_xattr_subsystem: complete building xattr subsystem, 13 of xdatum (0 unchecked, 13 orphan) and 12 of xref (1 dead, 11 orphan) found. [ 1292.233711][T22335] jffs2: notice: (22335) jffs2_build_xattr_subsystem: complete building xattr subsystem, 13 of xdatum (0 unchecked, 13 orphan) and 12 of xref (1 dead, 11 orphan) found. [ 1292.579536][T22342] Invalid ELF header magic: != ELF [ 1293.739359][T22356] nvme nvme0: failed to connect socket: -111 [ 1293.815512][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1293.888294][T13648] usb 5-1: USB disconnect, device number 13 [ 1293.966536][ T10] usb 6-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=fd.fb [ 1293.967576][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.967647][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1293.967710][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1293.967727][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1293.969980][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.969992][ T10] usb 6-1: Product: syz [ 1293.969999][ T10] usb 6-1: Manufacturer: syz [ 1293.970007][ T10] usb 6-1: SerialNumber: syz [ 1294.020165][T15954] Bluetooth: hci1: urb ffff8880298ddf00 submission failed (90) [ 1294.302981][T22366] Invalid ELF header magic: != ELF [ 1295.945535][T18826] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1296.000244][T22392] FAULT_INJECTION: forcing a failure. [ 1296.000244][T22392] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1296.002620][T22392] CPU: 3 UID: 0 PID: 22392 Comm: syz.3.3980 Not tainted syzkaller #0 PREEMPT(full) [ 1296.002635][T22392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1296.002642][T22392] Call Trace: [ 1296.002648][T22392] [ 1296.002653][T22392] dump_stack_lvl+0x100/0x190 [ 1296.002674][T22392] should_fail_ex.cold+0x5/0xa [ 1296.002690][T22392] get_futex_key+0x1c9/0x13e0 [ 1296.002709][T22392] ? __pfx_get_futex_key+0x10/0x10 [ 1296.002725][T22392] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 1296.002742][T22392] futex_wait_setup+0x91/0x540 [ 1296.002758][T22392] __futex_wait+0x19f/0x360 [ 1296.002769][T22392] ? __pfx___futex_wait+0x10/0x10 [ 1296.002779][T22392] ? __pfx_try_to_wake_up+0x10/0x10 [ 1296.002790][T22392] ? futex_hash+0x311/0x400 [ 1296.002805][T22392] ? __pfx_futex_wake_mark+0x10/0x10 [ 1296.002818][T22392] ? find_held_lock+0x2b/0x80 [ 1296.002832][T22392] ? futex_wake+0x4ea/0x5e0 [ 1296.002846][T22392] futex_wait+0xe6/0x370 [ 1296.002857][T22392] ? __pfx_futex_wait+0x10/0x10 [ 1296.002870][T22392] ? rcu_read_lock_any_held+0x6a/0x90 [ 1296.002886][T22392] ? find_held_lock+0x2b/0x80 [ 1296.002900][T22392] ? ksys_write+0x190/0x250 [ 1296.002910][T22392] ? ksys_write+0x190/0x250 [ 1296.002921][T22392] do_futex+0x265/0x440 [ 1296.002936][T22392] ? __pfx_do_futex+0x10/0x10 [ 1296.002954][T22392] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1296.002971][T22392] __ia32_sys_futex_time32+0x2f4/0x470 [ 1296.002989][T22392] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 1296.003005][T22392] ? __might_fault+0xc5/0x140 [ 1296.003022][T22392] __do_fast_syscall_32+0x14b/0x8c0 [ 1296.003038][T22392] do_fast_syscall_32+0x32/0x70 [ 1296.003053][T22392] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1296.003067][T22392] RIP: 0023:0xf73eefbc [ 1296.003076][T22392] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1296.003086][T22392] RSP: 002b:00000000f54065bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1296.003097][T22392] RAX: ffffffffffffffda RBX: 00000000f7414f88 RCX: 0000000000000080 [ 1296.003104][T22392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7414f8c [ 1296.003110][T22392] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 1296.003116][T22392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1296.003122][T22392] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1296.003135][T22392] [ 1296.065627][T22392] nvme nvme0: failed to connect socket: -111 [ 1296.116987][T18826] usb 5-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=fd.fb [ 1296.121063][T18826] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.121077][T18826] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1296.121098][T18826] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1296.121257][T18826] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1296.127762][T18826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.127776][T18826] usb 5-1: Product: syz [ 1296.127783][T18826] usb 5-1: Manufacturer: syz [ 1296.127790][T18826] usb 5-1: SerialNumber: syz [ 1296.160615][T15954] Bluetooth: hci5: urb ffff888051465000 submission failed (90) [ 1296.364117][T10379] usb 6-1: USB disconnect, device number 17 [ 1296.520869][T22401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3983'. [ 1296.589514][T22405] netlink: 'syz.2.3984': attribute type 1 has an invalid length. [ 1296.610179][T22405] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1296.631502][T22405] bond15: (slave dummy0): Releasing backup interface [ 1296.636327][T22405] bond16: (slave dummy0): Enslaving as a backup interface with an up link [ 1296.716169][T14118] bond16: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1296.836147][T14118] bond16: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1297.239826][T22416] pim6reg: entered allmulticast mode [ 1297.263933][T22413] pim6reg: left allmulticast mode [ 1297.318931][T22416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3987'. [ 1297.380287][T22418] FAULT_INJECTION: forcing a failure. [ 1297.380287][T22418] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1297.380307][T22418] CPU: 0 UID: 0 PID: 22418 Comm: syz.3.3989 Not tainted syzkaller #0 PREEMPT(full) [ 1297.380320][T22418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1297.380326][T22418] Call Trace: [ 1297.380330][T22418] [ 1297.380335][T22418] dump_stack_lvl+0x100/0x190 [ 1297.380356][T22418] should_fail_ex.cold+0x5/0xa [ 1297.380373][T22418] get_futex_key+0x1c9/0x13e0 [ 1297.380391][T22418] ? __pfx_get_futex_key+0x10/0x10 [ 1297.380409][T22418] futex_wait_setup+0x91/0x540 [ 1297.380424][T22418] __futex_wait+0x19f/0x360 [ 1297.380435][T22418] ? __pfx___futex_wait+0x10/0x10 [ 1297.380445][T22418] ? __pfx_try_to_wake_up+0x10/0x10 [ 1297.380456][T22418] ? futex_hash+0x311/0x400 [ 1297.380471][T22418] ? __pfx_futex_wake_mark+0x10/0x10 [ 1297.380484][T22418] ? find_held_lock+0x2b/0x80 [ 1297.380498][T22418] ? futex_wake+0x4ea/0x5e0 [ 1297.380512][T22418] futex_wait+0xe6/0x370 [ 1297.380523][T22418] ? __pfx_futex_wait+0x10/0x10 [ 1297.380536][T22418] ? rcu_read_lock_any_held+0x6a/0x90 [ 1297.380551][T22418] ? find_held_lock+0x2b/0x80 [ 1297.380564][T22418] ? ksys_write+0x190/0x250 [ 1297.380575][T22418] ? ksys_write+0x190/0x250 [ 1297.380586][T22418] do_futex+0x265/0x440 [ 1297.380602][T22418] ? __pfx_do_futex+0x10/0x10 [ 1297.380616][T22418] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1297.380639][T22418] __ia32_sys_futex_time32+0x2f4/0x470 [ 1297.380660][T22418] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 1297.380678][T22418] ? __might_fault+0xc5/0x140 [ 1297.380696][T22418] __do_fast_syscall_32+0x14b/0x8c0 [ 1297.380713][T22418] do_fast_syscall_32+0x32/0x70 [ 1297.380728][T22418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1297.380743][T22418] RIP: 0023:0xf73eefbc [ 1297.380752][T22418] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1297.380762][T22418] RSP: 002b:00000000f54065bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1297.380773][T22418] RAX: ffffffffffffffda RBX: 00000000f7414f88 RCX: 0000000000000080 [ 1297.380780][T22418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7414f8c [ 1297.380787][T22418] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 1297.380793][T22418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1297.380799][T22418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1297.380813][T22418] [ 1297.435752][T18826] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1297.490332][T22418] nvme nvme0: failed to connect socket: -111 [ 1297.585505][T18826] usb 6-1: Using ep0 maxpacket: 8 [ 1297.586255][T18826] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1297.587323][T18826] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1297.587351][T18826] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1297.587380][T18826] usb 6-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1297.587401][T18826] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1297.589519][T18826] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1297.589547][T18826] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1297.589573][T18826] usb 6-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1297.589594][T18826] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1297.590659][T18826] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1297.590685][T18826] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1297.590713][T18826] usb 6-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 1297.590735][T18826] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1297.593432][T18826] usb 6-1: string descriptor 0 read error: -22 [ 1297.593528][T18826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.660485][T18826] adutux 6-1:168.0: interrupt endpoints not found [ 1297.850161][T18826] usb 6-1: USB disconnect, device number 18 [ 1298.032219][ T42] audit: type=1326 audit(1793679252.184:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22428 comm="syz.3.3993" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1298.032436][ T42] audit: type=1326 audit(1793679252.184:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22428 comm="syz.3.3993" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1298.033297][ T42] audit: type=1326 audit(1793679252.184:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22428 comm="syz.3.3993" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1298.034072][ T42] audit: type=1326 audit(1793679252.184:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22428 comm="syz.3.3993" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1298.034269][ T42] audit: type=1326 audit(1793679252.184:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22428 comm="syz.3.3993" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1298.034860][ T42] audit: type=1326 audit(1793679252.184:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22428 comm="syz.3.3993" exe="/syz-executor" sig=0 arch=40000003 syscall=217 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1298.035036][ T42] audit: type=1326 audit(1793679252.184:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22428 comm="syz.3.3993" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1298.035245][ T42] audit: type=1326 audit(1793679252.184:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22428 comm="syz.3.3993" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 1298.344695][T22433] Invalid ELF header magic: != ELF [ 1298.372231][ T1351] usb 5-1: USB disconnect, device number 14 [ 1298.761576][T22444] pim6reg: entered allmulticast mode [ 1298.782612][T22443] pim6reg: left allmulticast mode [ 1298.844173][T22444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3998'. [ 1298.996140][T22449] FAULT_INJECTION: forcing a failure. [ 1298.996140][T22449] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1298.996159][T22449] CPU: 3 UID: 0 PID: 22449 Comm: syz.1.3999 Not tainted syzkaller #0 PREEMPT(full) [ 1298.996171][T22449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1298.996177][T22449] Call Trace: [ 1298.996182][T22449] [ 1298.996186][T22449] dump_stack_lvl+0x100/0x190 [ 1298.996206][T22449] should_fail_ex.cold+0x5/0xa [ 1298.996223][T22449] get_futex_key+0x1c9/0x13e0 [ 1298.996239][T22449] ? __pfx_get_futex_key+0x10/0x10 [ 1298.996257][T22449] futex_wait_setup+0x91/0x540 [ 1298.996274][T22449] __futex_wait+0x19f/0x360 [ 1298.996286][T22449] ? __pfx___futex_wait+0x10/0x10 [ 1298.996296][T22449] ? __pfx_try_to_wake_up+0x10/0x10 [ 1298.996307][T22449] ? futex_hash+0x311/0x400 [ 1298.996322][T22449] ? __pfx_futex_wake_mark+0x10/0x10 [ 1298.996334][T22449] ? find_held_lock+0x2b/0x80 [ 1298.996349][T22449] ? futex_wake+0x4ea/0x5e0 [ 1298.996364][T22449] futex_wait+0xe6/0x370 [ 1298.996375][T22449] ? __pfx_futex_wait+0x10/0x10 [ 1298.996389][T22449] ? rcu_read_lock_any_held+0x6a/0x90 [ 1298.996419][T22449] ? find_held_lock+0x2b/0x80 [ 1298.996434][T22449] ? ksys_write+0x190/0x250 [ 1298.996445][T22449] ? ksys_write+0x190/0x250 [ 1298.996456][T22449] do_futex+0x265/0x440 [ 1298.996472][T22449] ? __pfx_do_futex+0x10/0x10 [ 1298.996489][T22449] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1298.996507][T22449] __ia32_sys_futex_time32+0x2f4/0x470 [ 1298.996525][T22449] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 1298.996542][T22449] ? __might_fault+0xc5/0x140 [ 1298.996558][T22449] __do_fast_syscall_32+0x14b/0x8c0 [ 1298.996573][T22449] do_fast_syscall_32+0x32/0x70 [ 1298.996593][T22449] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1298.996607][T22449] RIP: 0023:0xf7f78fbc [ 1298.996617][T22449] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1298.996627][T22449] RSP: 002b:00000000f54265bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1298.996639][T22449] RAX: ffffffffffffffda RBX: 00000000f7434f88 RCX: 0000000000000080 [ 1298.996646][T22449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7434f8c [ 1298.996653][T22449] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 1298.996660][T22449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1298.996667][T22449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1298.996682][T22449] [ 1299.025065][T22449] nvme nvme0: failed to connect socket: -111 [ 1299.625557][T10379] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1299.687343][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.687375][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.761785][T22468] pim6reg: entered allmulticast mode [ 1299.775655][T10379] usb 6-1: Using ep0 maxpacket: 8 [ 1299.782588][T10379] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1299.786891][T10379] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1299.786909][T10379] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1299.786927][T10379] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1299.786939][T10379] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1299.786952][T10379] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1299.787726][T10379] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1299.787742][T10379] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1299.787758][T10379] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1299.787770][T10379] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1299.787861][T10379] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1299.788649][T10379] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1299.788664][T10379] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1299.788681][T10379] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1299.788694][T10379] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1299.788706][T10379] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1299.791171][T10379] usb 6-1: string descriptor 0 read error: -22 [ 1299.791264][T10379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.797139][T10379] adutux 6-1:168.0: interrupt endpoints not found [ 1299.857111][T22466] pim6reg: left allmulticast mode [ 1300.011423][T22468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4003'. [ 1300.012169][T10379] usb 6-1: USB disconnect, device number 19 [ 1300.880045][T22483] pim6reg: entered allmulticast mode [ 1300.912130][T22482] pim6reg: left allmulticast mode [ 1300.999035][T22483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4007'. [ 1301.747886][T22501] Invalid ELF header magic: != ELF [ 1301.966937][T22502] Invalid ELF header magic: != ELF [ 1302.289202][T22506] netlink: 'syz.3.4015': attribute type 1 has an invalid length. [ 1302.313236][T22506] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1302.356122][T22506] bond12: (slave dummy0): Enslaving as a backup interface with an up link [ 1302.425581][T21273] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1302.575612][T21273] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1302.654997][T22512] netlink: 'syz.1.4017': attribute type 1 has an invalid length. [ 1302.726325][T22512] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1302.730589][T22515] bond13: (slave dummy0): Enslaving as a backup interface with an up link [ 1302.749132][T22516] Invalid ELF header magic: != ELF [ 1302.864921][T14118] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1302.889279][T22520] netlink: 'syz.1.4020': attribute type 1 has an invalid length. [ 1302.943379][T22522] bond13: (slave dummy0): Removing an active aggregator [ 1302.946333][T22522] bond13: (slave dummy0): Releasing backup interface [ 1303.115955][T22520] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1303.221484][T22521] pim6reg: entered allmulticast mode [ 1303.221801][T22508] pim6reg: left allmulticast mode [ 1303.250714][T22521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4014'. [ 1303.716987][T22535] netlink: 'syz.2.4023': attribute type 1 has an invalid length. [ 1303.753404][T22535] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1303.807692][T22535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4023'. [ 1303.807706][T22535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4023'. [ 1303.881802][T22538] bond16: (slave dummy0): Removing an active aggregator [ 1303.885293][T22538] bond16: (slave dummy0): Releasing backup interface [ 1303.923833][T22538] bond17: (slave dummy0): Enslaving as a backup interface with an up link [ 1303.965598][T21273] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1304.027749][T22541] netlink: 'syz.0.4024': attribute type 1 has an invalid length. [ 1304.049521][T22541] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1304.075824][ T12] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1304.080242][T22541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4024'. [ 1304.080255][T22541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4024'. [ 1304.140517][T22548] bond8: (slave dummy0): Enslaving as a backup interface with an up link [ 1304.209466][ T12] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1304.263631][T22550] Invalid ELF header magic: != ELF [ 1304.321514][T22552] netlink: 'syz.0.4027': attribute type 1 has an invalid length. [ 1304.336560][T20922] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1304.352041][T22552] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1304.373555][T22552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4027'. [ 1304.379919][T22552] bond8: (slave dummy0): Removing an active aggregator [ 1304.380234][T22552] bond8: (slave dummy0): Releasing backup interface [ 1304.388753][T22552] bond9: (slave dummy0): Enslaving as a backup interface with an up link [ 1304.455536][T20922] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1304.492544][T22557] netlink: 'syz.2.4029': attribute type 1 has an invalid length. [ 1304.521336][T22557] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1304.550800][T22557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4029'. [ 1304.550815][T22557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4029'. [ 1304.575673][T16647] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1304.829403][T22557] bond17: (slave dummy0): Removing an active aggregator [ 1304.829853][T22557] bond17: (slave dummy0): Releasing backup interface [ 1304.841916][T22557] bond18: (slave dummy0): Enslaving as a backup interface with an up link [ 1304.873609][T14118] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1305.008687][T22568] pim6reg: entered allmulticast mode [ 1305.011710][T22568] pim6reg: left allmulticast mode [ 1305.290401][T22568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4031'. [ 1305.901533][T22587] nvme_fabrics: missing parameter 'transport=%s' [ 1305.901550][T22587] nvme_fabrics: missing parameter 'nqn=%s' [ 1306.247272][T22594] pim6reg: entered allmulticast mode [ 1306.267104][T22596] fuse: Bad value for 'fd' [ 1306.345582][T22594] pim6reg: left allmulticast mode [ 1306.563436][T22593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4038'. [ 1306.693622][T22602] Invalid ELF header magic: != ELF [ 1307.605529][T20994] Bluetooth: hci1: command 0xfc11 tx timeout [ 1307.605596][T15954] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1307.821494][T22617] nvme_fabrics: missing parameter 'transport=%s' [ 1307.821506][T22617] nvme_fabrics: missing parameter 'nqn=%s' [ 1307.995383][T22620] netlink: 'syz.1.4049': attribute type 1 has an invalid length. [ 1308.024458][T22620] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1308.090101][T22623] Bluetooth: MGMT ver 1.23 [ 1308.441077][T22626] bond15: (slave dummy0): Enslaving as a backup interface with an up link [ 1308.456140][T21273] net_ratelimit: 1 callbacks suppressed [ 1308.456153][T21273] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1308.566066][T21273] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1308.841440][T22630] pim6reg: entered allmulticast mode [ 1308.841596][T22631] pim6reg: left allmulticast mode [ 1308.893524][T22630] __nla_validate_parse: 1 callbacks suppressed [ 1308.893617][T22630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4051'. [ 1309.239126][T13197] Bluetooth: hci1: Frame reassembly failed (-84) [ 1309.295071][T22642] Invalid ELF header magic: != ELF [ 1309.469972][T22646] jffs2: notice: (22646) jffs2_build_xattr_subsystem: complete building xattr subsystem, 13 of xdatum (0 unchecked, 13 orphan) and 12 of xref (1 dead, 11 orphan) found. [ 1309.511903][T22648] nvme_fabrics: missing parameter 'transport=%s' [ 1309.511914][T22648] nvme_fabrics: missing parameter 'nqn=%s' [ 1311.287023][T20994] Bluetooth: hci1: command 0xfc11 tx timeout [ 1311.288130][T15954] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1311.752115][T22681] pim6reg: entered allmulticast mode [ 1311.816696][T22677] pim6reg: left allmulticast mode [ 1311.885524][T13648] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1311.891027][T22687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4063'. [ 1311.933570][T22683] nvme_fabrics: missing parameter 'transport=%s' [ 1311.933582][T22683] nvme_fabrics: missing parameter 'nqn=%s' [ 1312.033262][T22689] Invalid ELF header magic: != ELF [ 1312.365716][T13648] usb 5-1: Using ep0 maxpacket: 8 [ 1312.366215][T13648] usb 5-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1312.367076][T13648] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1312.367094][T13648] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1312.367111][T13648] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1312.367124][T13648] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1312.367136][T13648] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1312.367935][T13648] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1312.367951][T13648] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1312.367972][T13648] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1312.367985][T13648] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1312.367997][T13648] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1312.368766][T13648] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1312.368783][T13648] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1312.368801][T13648] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1312.368814][T13648] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1312.368846][T13648] usb 5-1: config 168 interface 0 has noqemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x149000) altsetting 0 [ 1312.371335][T13648] usb 5-1: string descriptor 0 read error: -22 [ 1312.371390][T13648] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.374196][T13648] adutux 5-1:168.0: interrupt endpoints not found [ 1312.526149][ T1130] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 1312.526164][ T1130] ata1: failed to read log page 10h (errno=-5) [ 1312.526174][ T1130] ata1.00: exception Emask 0x1 SAct 0x40000040 SErr 0x0 action 0x0 [ 1312.526184][ T1130] ata1.00: irq_stat 0x41000000 [ 1312.526193][ T1130] ata1.00: failed command: WRITE FPDMA QUEUED [ 1312.526199][ T1130] ata1.00: cmd 61/18:30:f6:26:10/00:00:00:00:00/40 tag 6 ncq dma 12288 out [ 1312.526199][ T1130] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 1312.526226][ T1130] ata1.00: status: { DRDY } [ 1312.526236][ T1130] ata1.00: failed command: READ FPDMA QUEUED [ 1312.526241][ T1130] ata1.00: cmd 60/48:f0:6e:5b:01/0a:00:00:00:00/40 tag 30 ncq dma 1347584 in [ 1312.526241][ T1130] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 1312.526268][ T1130] ata1.00: status: { DRDY } [ 1312.530817][ T1130] ata1.00: configured for UDMA/100 [ 1312.531306][ T1130] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1312.531331][ T1130] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 1312.531355][ T1130] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 1312.532586][ T1130] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 01 5b 6e 00 0a 48 00 [ 1312.532770][ T1130] I/O error, dev sda, sector 88942 op 0x0:(READ) flags 0x80700 phys_seg 83 prio class 2 [ 1312.533715][ T1130] ata1: EH complete [ 1312.537033][T22693] fuse: Bad value for 'fd' [ 1312.614562][T13648] usb 5-1: USB disconnect, device number 15 [ 1313.367880][T22712] netlink: 'syz.2.4072': attribute type 1 has an invalid length. [ 1313.391488][T22712] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1313.425605][T22712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4072'. [ 1313.549949][T22712] bond18: (slave dummy0): Removing an active aggregator [ 1313.550839][T22712] bond18: (slave dummy0): Releasing backup interface [ 1313.562771][T22712] bond19: (slave dummy0): Enslaving as a backup interface with an up link [ 1313.605574][T21273] bond19: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1313.717637][T21273] bond19: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1313.832556][T22721] fuse: Bad value for 'fd' [ 1314.167000][T22724] Invalid ELF header magic: != ELF [ 1314.667333][T22735] pim6reg: entered allmulticast mode [ 1314.681002][T22734] pim6reg: left allmulticast mode [ 1314.735098][T22736] pim6reg: entered allmulticast mode [ 1314.738398][T22734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4077'. [ 1314.838882][T22730] pim6reg: left allmulticast mode [ 1314.946136][T22730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4076'. [ 1315.266397][ T42] audit: type=1326 audit(1793679269.414:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22737 comm="syz.1.4078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fbc code=0x7ffc0000 [ 1315.266430][ T42] audit: type=1326 audit(1793679269.414:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22737 comm="syz.1.4078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fbc code=0x7ffc0000 [ 1315.266452][ T42] audit: type=1326 audit(1793679269.414:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22737 comm="syz.1.4078" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f78fbc code=0x7ffc0000 [ 1315.266476][ T42] audit: type=1326 audit(1793679269.414:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22737 comm="syz.1.4078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fbc code=0x7ffc0000 [ 1315.266496][ T42] audit: type=1326 audit(1793679269.414:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22737 comm="syz.1.4078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fbc code=0x7ffc0000 [ 1315.301254][ T42] audit: type=1326 audit(1793679269.434:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22737 comm="syz.1.4078" exe="/syz-executor" sig=0 arch=40000003 syscall=217 compat=1 ip=0xf7f78fbc code=0x7ffc0000 [ 1315.301289][ T42] audit: type=1326 audit(1793679269.434:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22737 comm="syz.1.4078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fbc code=0x7ffc0000 [ 1315.301310][ T42] audit: type=1326 audit(1793679269.434:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22737 comm="syz.1.4078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fbc code=0x7ffc0000 [ 1315.401587][ T1164] Bluetooth: hci1: Frame reassembly failed (-84) [ 1315.701037][T22759] pim6reg: entered allmulticast mode [ 1315.702375][T22759] pim6reg: left allmulticast mode [ 1315.750834][T22759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4086'. [ 1315.832220][T22762] netlink: 'syz.0.4087': attribute type 1 has an invalid length. [ 1315.850223][T22762] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1315.869481][T22762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4087'. [ 1315.872670][T22762] bond9: (slave dummy0): Removing an active aggregator [ 1315.873111][T22762] bond9: (slave dummy0): Releasing backup interface [ 1315.881321][T22762] bond10: (slave dummy0): Enslaving as a backup interface with an up link [ 1315.957494][T14118] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1316.066991][ T12] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1316.116411][T22767] Invalid ELF header magic: != ELF [ 1316.424659][T22773] netlink: 'syz.3.4091': attribute type 1 has an invalid length. [ 1316.443992][T22773] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1316.458021][T22773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4091'. [ 1316.462135][T22773] bond12: (slave dummy0): Removing an active aggregator [ 1316.462539][T22773] bond12: (slave dummy0): Releasing backup interface [ 1316.467152][T22773] bond13: (slave dummy0): Enslaving as a backup interface with an up link [ 1316.520791][T22778] netlink: 'syz.3.4093': attribute type 1 has an invalid length. [ 1316.530017][T22778] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1316.544243][T22778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4093'. [ 1316.551259][T22778] bond13: (slave dummy0): Releasing backup interface [ 1316.558744][T22778] bond14: (slave dummy0): Enslaving as a backup interface with an up link [ 1316.647540][ T12] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1316.775863][ T12] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1316.891351][T22788] pim6reg: entered allmulticast mode [ 1316.894317][T22788] pim6reg: left allmulticast mode [ 1316.952438][T22788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4095'. [ 1317.445614][T20994] Bluetooth: hci1: command 0xfc11 tx timeout [ 1317.447263][T15954] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1317.515635][T20163] IPVS: starting estimator thread 0... [ 1317.615607][T22800] IPVS: using max 44 ests per chain, 105600 per kthread [ 1317.692674][T22808] fuse: Bad value for 'fd' [ 1318.279933][T22817] Invalid ELF header magic: != ELF [ 1318.331565][T22818] pim6reg: entered allmulticast mode [ 1318.353689][T22816] pim6reg: left allmulticast mode [ 1318.416237][T22816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4104'. [ 1318.739839][T22829] Invalid ELF header magic: != ELF [ 1319.225151][T22839] jffs2: notice: (22839) jffs2_build_xattr_subsystem: complete building xattr subsystem, 13 of xdatum (0 unchecked, 13 orphan) and 12 of xref (1 dead, 11 orphan) found. [ 1319.619367][T22844] pim6reg: entered allmulticast mode [ 1319.695654][T22843] pim6reg: left allmulticast mode [ 1320.140588][T22847] Invalid ELF header magic: != ELF [ 1320.184066][T22849] netlink: 'syz.1.4114': attribute type 1 has an invalid length. [ 1320.209369][T22849] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1320.248267][T22849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4114'. [ 1320.252973][T22849] bond15: (slave dummy0): Removing an active aggregator [ 1320.254029][T22849] bond15: (slave dummy0): Releasing backup interface [ 1320.262894][T22849] bond16: (slave dummy0): Enslaving as a backup interface with an up link [ 1320.285913][T22852] pim6reg: entered allmulticast mode [ 1320.294834][T22852] pim6reg: left allmulticast mode [ 1320.315556][T14118] bond16: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1320.369639][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4115'. [ 1320.437183][ T12] bond16: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1320.726506][T20994] Bluetooth: hci1: command 0xfc11 tx timeout [ 1320.727363][T15954] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1321.031648][T22871] nvme_fabrics: missing parameter 'nqn=%s' [ 1321.032020][T22871] FAULT_INJECTION: forcing a failure. [ 1321.032020][T22871] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1321.032037][T22871] CPU: 3 UID: 0 PID: 22871 Comm: syz.0.4120 Not tainted syzkaller #0 PREEMPT(full) [ 1321.032050][T22871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1321.032057][T22871] Call Trace: [ 1321.032061][T22871] [ 1321.032066][T22871] dump_stack_lvl+0x100/0x190 [ 1321.032087][T22871] should_fail_ex.cold+0x5/0xa [ 1321.032103][T22871] get_futex_key+0x28c/0x13e0 [ 1321.032120][T22871] ? __pfx_get_futex_key+0x10/0x10 [ 1321.032134][T22871] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1321.032151][T22871] futex_wake+0xf4/0x5e0 [ 1321.032164][T22871] ? __pfx_futex_wake+0x10/0x10 [ 1321.032177][T22871] ? detach_task_ctx_data+0x83/0x490 [ 1321.032191][T22871] do_futex+0x2b2/0x440 [ 1321.032207][T22871] ? __pfx_do_futex+0x10/0x10 [ 1321.032220][T22871] ? __might_fault+0xc5/0x140 [ 1321.032237][T22871] mm_exit_exec_release+0x256/0x2f0 [ 1321.032256][T22871] do_exit+0x6d8/0x2a00 [ 1321.032267][T22871] ? __pfx_futex_wake_mark+0x10/0x10 [ 1321.032280][T22871] ? __pfx_do_exit+0x10/0x10 [ 1321.032293][T22871] ? do_raw_spin_lock+0x128/0x260 [ 1321.032306][T22871] ? find_held_lock+0x2b/0x80 [ 1321.032320][T22871] ? get_signal+0xa28/0x22e0 [ 1321.032333][T22871] do_group_exit+0xd5/0x2a0 [ 1321.032346][T22871] get_signal+0x1f58/0x22e0 [ 1321.032356][T22871] ? __pfx_futex_wait+0x10/0x10 [ 1321.032371][T22871] ? vfs_write+0x15d/0x1050 [ 1321.032382][T22871] ? __pfx_get_signal+0x10/0x10 [ 1321.032394][T22871] ? do_futex+0x190/0x440 [ 1321.032410][T22871] arch_do_signal_or_restart+0x91/0x7a0 [ 1321.032427][T22871] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1321.032454][T22871] exit_to_user_mode_loop+0x139/0x700 [ 1321.032469][T22871] ? rcu_is_watching+0x13/0xc0 [ 1321.032485][T22871] __do_fast_syscall_32+0x5b0/0x8c0 [ 1321.032501][T22871] do_fast_syscall_32+0x32/0x70 [ 1321.032515][T22871] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1321.032528][T22871] RIP: 0023:0xf746efbc [ 1321.032538][T22871] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1321.032548][T22871] RSP: 002b:00000000f54865bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1321.032560][T22871] RAX: fffffffffffffe00 RBX: 00000000f7494f88 RCX: 0000000000000080 [ 1321.032567][T22871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7494f8c [ 1321.032573][T22871] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 1321.032580][T22871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1321.032586][T22871] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1321.032599][T22871] [ 1321.053864][T22873] Invalid ELF header magic: != ELF [ 1321.056534][T13648] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1321.257960][T13648] usb 8-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=fd.fb [ 1321.261758][T13648] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.262931][T13648] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1321.263130][T13648] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1321.263142][T13648] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1321.307506][T13648] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.307548][T13648] usb 8-1: Product: syz [ 1321.307582][T13648] usb 8-1: Manufacturer: syz [ 1321.307615][T13648] usb 8-1: SerialNumber: syz [ 1321.322474][T22882] Invalid ELF header magic: != ELF [ 1321.639222][T15954] Bluetooth: hci1: urb ffff888051cc3600 submission failed (90) [ 1321.675798][T22883] pim6reg: entered allmulticast mode [ 1321.783729][T22883] pim6reg: left allmulticast mode [ 1322.140203][T22888] fuse: Bad value for 'fd' [ 1322.209106][T22890] pim6reg: entered allmulticast mode [ 1322.210295][T22890] pim6reg: left allmulticast mode [ 1322.252277][T22890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4125'. [ 1322.478697][T22899] nvme_fabrics: missing parameter 'nqn=%s' [ 1322.479048][T22899] FAULT_INJECTION: forcing a failure. [ 1322.479048][T22899] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1322.479065][T22899] CPU: 0 UID: 0 PID: 22899 Comm: syz.1.4129 Not tainted syzkaller #0 PREEMPT(full) [ 1322.479078][T22899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1322.479084][T22899] Call Trace: [ 1322.479089][T22899] [ 1322.479093][T22899] dump_stack_lvl+0x100/0x190 [ 1322.479113][T22899] should_fail_ex.cold+0x5/0xa [ 1322.479129][T22899] get_futex_key+0xf5d/0x13e0 [ 1322.479145][T22899] ? __pfx_get_futex_key+0x10/0x10 [ 1322.479159][T22899] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1322.479176][T22899] futex_wake+0xf4/0x5e0 [ 1322.479189][T22899] ? __pfx_futex_wake+0x10/0x10 [ 1322.479202][T22899] ? detach_task_ctx_data+0x83/0x490 [ 1322.479216][T22899] do_futex+0x2b2/0x440 [ 1322.479231][T22899] ? __pfx_do_futex+0x10/0x10 [ 1322.479245][T22899] ? __might_fault+0xc5/0x140 [ 1322.479262][T22899] mm_exit_exec_release+0x256/0x2f0 [ 1322.479275][T22899] do_exit+0x6d8/0x2a00 [ 1322.479287][T22899] ? __pfx_futex_wake_mark+0x10/0x10 [ 1322.479299][T22899] ? __pfx_do_exit+0x10/0x10 [ 1322.479312][T22899] ? do_raw_spin_lock+0x128/0x260 [ 1322.479325][T22899] ? find_held_lock+0x2b/0x80 [ 1322.479339][T22899] ? get_signal+0xa28/0x22e0 [ 1322.479351][T22899] do_group_exit+0xd5/0x2a0 [ 1322.479365][T22899] get_signal+0x1f58/0x22e0 [ 1322.479380][T22899] ? __pfx_futex_wait+0x10/0x10 [ 1322.479395][T22899] ? vfs_write+0x15d/0x1050 [ 1322.479406][T22899] ? __pfx_get_signal+0x10/0x10 [ 1322.479418][T22899] ? do_futex+0x190/0x440 [ 1322.479434][T22899] arch_do_signal_or_restart+0x91/0x7a0 [ 1322.479451][T22899] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1322.479475][T22899] exit_to_user_mode_loop+0x139/0x700 [ 1322.479489][T22899] ? rcu_is_watching+0x13/0xc0 [ 1322.479504][T22899] __do_fast_syscall_32+0x5b0/0x8c0 [ 1322.479520][T22899] do_fast_syscall_32+0x32/0x70 [ 1322.479534][T22899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1322.479548][T22899] RIP: 0023:0xf7f78fbc [ 1322.479556][T22899] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1322.479567][T22899] RSP: 002b:00000000f54265bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 1322.479578][T22899] RAX: fffffffffffffe00 RBX: 00000000f7434f88 RCX: 0000000000000080 [ 1322.479585][T22899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7434f8c [ 1322.479591][T22899] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 1322.479598][T22899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1322.479604][T22899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1322.479608][T22897] Invalid ELF header magic: != ELF [ 1322.479617][T22899] [ 1322.529460][T22902] fuse: Bad value for 'fd' [ 1322.779359][T22906] netlink: 'syz.1.4132': attribute type 1 has an invalid length. [ 1322.789400][T22906] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1322.827628][T22906] bond17: (slave veth9): Enslaving as a backup interface with a down link [ 1322.877089][T14118] bond16: (slave dummy0): link status definitely down, disabling slave [ 1323.054050][T22911] pim6reg: entered allmulticast mode [ 1323.117768][T22911] pim6reg: left allmulticast mode [ 1323.543008][ T10] usb 8-1: USB disconnect, device number 12 [ 1323.890810][T22919] pim6reg: entered allmulticast mode [ 1323.891999][T22919] pim6reg: left allmulticast mode [ 1323.955120][T22919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4136'. [ 1323.970229][T22922] Invalid ELF header magic: != ELF [ 1323.983967][T22923] Invalid ELF header magic: != ELF [ 1324.294046][T22927] nvme_fabrics: unknown parameter or missing value 'trsvci' in ctrl creation request [ 1324.325597][T20994] Bluetooth: hci5: command 0xfc11 tx timeout [ 1324.325663][T15954] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1324.868552][T22943] Invalid ELF header magic: != ELF [ 1325.471278][T22951] pim6reg: entered allmulticast mode [ 1325.488332][T22950] pim6reg: left allmulticast mode [ 1325.633877][T22950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4145'. [ 1325.775289][T22960] nvme_fabrics: unknown parameter or missing value 'trsvci' in ctrl creation request [ 1326.030010][T22970] Invalid ELF header magic: != ELF [ 1326.070315][T22971] Invalid ELF header magic: != ELF [ 1326.404738][T22975] jffs2: notice: (22975) jffs2_build_xattr_subsystem: complete building xattr subsystem, 13 of xdatum (0 unchecked, 13 orphan) and 12 of xref (1 dead, 11 orphan) found. [ 1326.932582][T22986] Invalid ELF header magic: != ELF [ 1327.299889][T22990] pim6reg: entered allmulticast mode [ 1327.309975][T22989] pim6reg: left allmulticast mode [ 1327.363471][T22990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4156'. [ 1327.444488][T22992] fuse: Bad value for 'fd' [ 1327.574777][T22994] nvme_fabrics: unknown parameter or missing value 'trsvci' in ctrl creation request [ 1327.789700][T23006] jffs2: notice: (23006) jffs2_build_xattr_subsystem: complete building xattr subsystem, 13 of xdatum (0 unchecked, 13 orphan) and 12 of xref (1 dead, 11 orphan) found. [ 1327.890224][T23011] Invalid ELF header magic: != ELF [ 1328.682254][T23017] pim6reg: entered allmulticast mode [ 1328.684158][T23017] pim6reg: left allmulticast mode [ 1328.739667][T23025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4165'. [ 1328.779307][T23027] Invalid ELF header magic: != ELF [ 1328.831979][T23029] nvme_fabrics: missing parameter 'nqn=%s' [ 1328.865797][T13648] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1329.015521][T13648] usb 7-1: Using ep0 maxpacket: 8 [ 1329.016177][T13648] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1329.016950][T13648] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1329.016967][T13648] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1329.016985][T13648] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1329.016997][T13648] usb 7-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1329.017010][T13648] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1329.017748][T13648] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1329.017763][T13648] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1329.017779][T13648] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1329.017791][T13648] usb 7-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1329.017804][T13648] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1329.018521][T13648] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1329.018536][T13648] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1329.018583][T13648] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1329.018597][T13648] usb 7-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1329.018609][T13648] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1329.021238][T13648] usb 7-1: string descriptor 0 read error: -22 [ 1329.021295][T13648] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.027676][T13648] adutux 7-1:168.0: interrupt endpoints not found [ 1329.228302][T13648] usb 7-1: USB disconnect, device number 12 [ 1329.724603][T23042] Invalid ELF header magic: != ELF [ 1329.871135][T23044] pim6reg: entered allmulticast mode [ 1329.905916][T23041] pim6reg: left allmulticast mode [ 1330.013633][T23043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4172'. [ 1330.169260][T23050] Invalid ELF header magic: != ELF [ 1330.628236][T23055] pim6reg: entered allmulticast mode [ 1330.629846][T23055] pim6reg: left allmulticast mode [ 1330.737427][T23058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4176'. [ 1330.953307][T23060] nvme_fabrics: missing parameter 'nqn=%s' [ 1331.211858][T23065] Invalid ELF header magic: != ELF [ 1331.925616][T20994] Bluetooth: hci1: command 0xfc11 tx timeout [ 1331.925683][T15954] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1332.256534][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1332.426187][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1332.427109][ T10] usb 7-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1332.428159][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1332.428177][ T10] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1332.428195][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1332.428208][ T10] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1332.428219][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1332.428231][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1332.428243][ T10] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1332.428255][ T10] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1332.429373][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1332.429398][ T10] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1332.429432][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1332.429454][ T10] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1332.429472][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1332.429491][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1332.429509][ T10] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1332.429532][ T10] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1332.430861][ T10] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1332.430885][ T10] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1332.430912][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1332.430931][ T10] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1332.430949][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1332.430967][ T10] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1332.430985][ T10] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1332.431009][ T10] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1332.436339][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.436359][ T10] usb 7-1: Product: syz [ 1332.436371][ T10] usb 7-1: Manufacturer: syz [ 1332.436382][ T10] usb 7-1: SerialNumber: syz [ 1332.673689][T23092] Invalid ELF header magic: != ELF [ 1332.708103][ T10] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1332.722902][ T10] usb 7-1: USB disconnect, device number 13 [ 1333.531510][T23098] nvme_fabrics: missing parameter 'nqn=%s' [ 1333.636354][T23105] fuse: Bad value for 'fd' [ 1334.967671][T23127] Invalid ELF header magic: != ELF [ 1335.701108][T23138] nvme_fabrics: unknown parameter or missing value 'nq' in ctrl creation request [ 1335.804984][T23142] Invalid ELF header magic: != ELF [ 1335.885703][T23143] Invalid ELF header magic: != ELF [ 1336.245826][T15954] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1336.490827][T23149] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 1336.704680][T23151] ------------[ cut here ]------------ [ 1336.704696][T23151] sp->magic != HWSIM_STA_MAGIC [ 1336.704727][T23151] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 at mac80211_hwsim_tx+0x1f17/0x2a20, CPU#2: syz.0.4201/23151 [ 1336.714582][T23151] Modules linked in: [ 1336.716542][T23151] CPU: 2 UID: 0 PID: 23151 Comm: syz.0.4201 Not tainted syzkaller #0 PREEMPT(full) [ 1336.720617][T23151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1336.724806][T23151] RIP: 0010:mac80211_hwsim_tx+0x1f17/0x2a20 [ 1336.727361][T23151] Code: b6 58 1b 89 de e8 49 87 96 fa 84 db 0f 85 e5 ee ff ff e8 2c 8d 96 fa c7 44 24 38 0f 00 00 00 e9 0c ff ff ff e8 1a 8d 96 fa 90 <0f> 0b 90 e9 7c e5 ff ff 48 8b 44 24 10 48 05 88 04 00 00 48 89 44 [ 1336.735314][T23151] RSP: 0018:ffffc900074cef58 EFLAGS: 00010287 [ 1336.737932][T23151] RAX: 00000000000002d8 RBX: 0000000000000000 RCX: ffffc90028513000 [ 1336.741193][T23151] RDX: 0000000000080000 RSI: ffffffff877718e6 RDI: 0000000000000005 [ 1336.744458][T23151] RBP: ffff888057fb6d90 R08: 000000006d537749 R09: 0000000000000000 [ 1336.747084][T23151] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1336.749570][T23151] R13: ffffc900074cf110 R14: ffff88806b5632c0 R15: ffff888022b45540 [ 1336.752053][T23151] FS: 0000000000000000(0000) GS:ffff888095481000(0063) knlGS:00000000f5486b40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1336.754800][T23151] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1336.757055][T23151] CR2: 00000000f744b050 CR3: 0000000076de8000 CR4: 0000000000352ef0 [ 1336.759528][T23151] Call Trace: [ 1336.760584][T23151] [ 1336.761543][T23151] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 1336.763243][T23151] ? do_raw_spin_lock+0x128/0x260 [ 1336.764845][T23151] ? mark_held_locks+0x40/0x70 [ 1336.766401][T23151] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1336.768232][T23151] ieee80211_tx_frags+0x5c9/0xa70 [ 1336.769871][T23151] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 1336.771588][T23151] ? ieee80211_xmit_fast_finish+0x5b6/0xbe0 [ 1336.773436][T23151] __ieee80211_xmit_fast+0x834/0x2b70 [ 1336.775119][T23151] ? __siphash_unaligned+0x110/0x360 [ 1336.776833][T23151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1336.778793][T23151] ? cfg80211_classify8021d+0x1f5/0xa30 [ 1336.780661][T23151] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 1336.782491][T23151] ? cfg80211_netdev_notifier_call+0x890/0x1140 [ 1336.784479][T23151] ? mesh_path_refresh+0x14d/0x2e0 [ 1336.786146][T23151] ieee80211_mesh_xmit_fast+0xbc1/0x1260 [ 1336.788215][T23151] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 1336.790228][T23151] ? find_held_lock+0x2b/0x80 [ 1336.791697][T23151] ? __skb_flow_dissect+0x3cc/0x6d20 [ 1336.793349][T23151] __ieee80211_subif_start_xmit+0xb36/0x16a0 [ 1336.795270][T23151] ? vfs_write+0x6af/0x1050 [ 1336.796760][T23151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1336.798626][T23151] ? skb_network_protocol+0x2c5/0x3c0 [ 1336.800357][T23151] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1336.802345][T23151] ? __netif_skb_features+0x41c/0xde0 [ 1336.804009][T23151] ieee80211_subif_start_xmit+0xf8/0x7c0 [ 1336.805811][T23151] ? __lock_acquire+0x5c0/0x1f40 [ 1336.807367][T23151] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1336.809455][T23151] ? validate_xmit_skb+0xbd7/0x1f30 [ 1336.811075][T23151] ? rcu_lockdep_current_cpu_online+0x37/0x150 [ 1336.813022][T23151] dev_hard_start_xmit+0x121/0x760 [ 1336.814624][T23151] __dev_queue_xmit+0x1bef/0x48d0 [ 1336.816261][T23151] ? __might_fault+0xc5/0x140 [ 1336.817763][T23151] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1336.819410][T23151] ? _copy_from_iter+0x270/0x16c0 [ 1336.821013][T23151] ? __pfx__copy_from_iter+0x10/0x10 [ 1336.822834][T23151] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1336.824619][T23151] ? __pfx_packet_parse_headers+0x10/0x10 [ 1336.826480][T23151] packet_xmit+0x24b/0x320 [ 1336.827926][T23151] packet_sendmsg+0x3205/0x4f80 [ 1336.829479][T23151] ? aa_sk_perm+0x2eb/0xa90 [ 1336.830908][T23151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1336.832749][T23151] ? __pfx_aa_sk_perm+0x10/0x10 [ 1336.834269][T23151] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 1336.836308][T23151] ? __pfx_packet_sendmsg+0x10/0x10 [ 1336.837965][T23151] ? aa_sock_msg_perm+0x11e/0x200 [ 1336.839534][T23151] ? apparmor_socket_sendmsg+0x165/0x280 [ 1336.841294][T23151] sock_write_iter+0x560/0x5d0 [ 1336.842793][T23151] ? __pfx_packet_sendmsg+0x10/0x10 [ 1336.844437][T23151] ? __pfx_sock_write_iter+0x10/0x10 [ 1336.846174][T23151] ? bpf_lsm_file_permission+0x9/0x10 [ 1336.847855][T23151] ? security_file_permission+0x76/0x210 [ 1336.849607][T23151] ? rw_verify_area+0xce/0x6d0 [ 1336.851032][T23151] vfs_write+0x6af/0x1050 [ 1336.852363][T23151] ? __pfx_sock_write_iter+0x10/0x10 [ 1336.854012][T23151] ? __pfx_vfs_write+0x10/0x10 [ 1336.855545][T23151] ? find_held_lock+0x2b/0x80 [ 1336.857038][T23151] ksys_write+0x1f8/0x250 [ 1336.858382][T23151] ? __pfx_ksys_write+0x10/0x10 [ 1336.859895][T23151] __do_fast_syscall_32+0x14b/0x8c0 [ 1336.861512][T23151] ? lockdep_hardirqs_on+0x7d/0x110 [ 1336.863126][T23151] do_fast_syscall_32+0x32/0x70 [ 1336.864644][T23151] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1336.866659][T23151] RIP: 0023:0xf746efbc [ 1336.867958][T23151] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1336.874014][T23151] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1336.876740][T23151] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001340 [ 1336.879176][T23151] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1336.881614][T23151] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1336.884047][T23151] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1336.886571][T23151] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1336.889029][T23151] [ 1336.890003][T23151] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1336.892245][T23151] CPU: 2 UID: 0 PID: 23151 Comm: syz.0.4201 Not tainted syzkaller #0 PREEMPT(full) [ 1336.895127][T23151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1336.898769][T23151] Call Trace: [ 1336.899816][T23151] [ 1336.900903][T23151] dump_stack_lvl+0x100/0x190 [ 1336.902385][T23151] vpanic+0x2dc/0x6f8 [ 1336.903637][T23151] panic+0xd1/0xe0 [ 1336.904815][T23151] ? __pfx_panic+0x10/0x10 [ 1336.906207][T23151] check_panic_on_warn.cold+0x19/0x34 [ 1336.907889][T23151] ? mac80211_hwsim_tx+0x1f17/0x2a20 [ 1336.909538][T23151] __warn.cold+0x191/0x321 [ 1336.910929][T23151] __report_bug+0x30f/0x440 [ 1336.912342][T23151] ? mac80211_hwsim_tx+0x1f17/0x2a20 [ 1336.913983][T23151] ? __pfx___report_bug+0x10/0x10 [ 1336.915542][T23151] ? __bfs+0x150/0x2a0 [ 1336.916845][T23151] ? check_irq_usage+0x1a4/0x8b0 [ 1336.918404][T23151] ? ieee80211_encrypt_tx_skb+0x2df/0x430 [ 1336.920166][T23151] ? mac80211_hwsim_tx+0x1f17/0x2a20 [ 1336.921841][T23151] report_bug+0xb3/0x220 [ 1336.923168][T23151] ? mac80211_hwsim_tx+0x1f17/0x2a20 [ 1336.924739][T23151] handle_bug+0x16a/0x2a0 [ 1336.926176][T23151] exc_invalid_op+0x17/0x50 [ 1336.927632][T23151] asm_exc_invalid_op+0x1a/0x20 [ 1336.929165][T23151] RIP: 0010:mac80211_hwsim_tx+0x1f17/0x2a20 [ 1336.931009][T23151] Code: b6 58 1b 89 de e8 49 87 96 fa 84 db 0f 85 e5 ee ff ff e8 2c 8d 96 fa c7 44 24 38 0f 00 00 00 e9 0c ff ff ff e8 1a 8d 96 fa 90 <0f> 0b 90 e9 7c e5 ff ff 48 8b 44 24 10 48 05 88 04 00 00 48 89 44 [ 1336.936914][T23151] RSP: 0018:ffffc900074cef58 EFLAGS: 00010287 [ 1336.938834][T23151] RAX: 00000000000002d8 RBX: 0000000000000000 RCX: ffffc90028513000 [ 1336.941280][T23151] RDX: 0000000000080000 RSI: ffffffff877718e6 RDI: 0000000000000005 [ 1336.943715][T23151] RBP: ffff888057fb6d90 R08: 000000006d537749 R09: 0000000000000000 [ 1336.946160][T23151] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1336.948620][T23151] R13: ffffc900074cf110 R14: ffff88806b5632c0 R15: ffff888022b45540 [ 1336.951049][T23151] ? mac80211_hwsim_tx+0x1f16/0x2a20 [ 1336.952695][T23151] ? mac80211_hwsim_tx+0x1f16/0x2a20 [ 1336.954358][T23151] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 1336.956036][T23151] ? do_raw_spin_lock+0x128/0x260 [ 1336.957657][T23151] ? mark_held_locks+0x40/0x70 [ 1336.959148][T23151] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1336.960959][T23151] ieee80211_tx_frags+0x5c9/0xa70 [ 1336.962521][T23151] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 1336.964217][T23151] ? ieee80211_xmit_fast_finish+0x5b6/0xbe0 [ 1336.966062][T23151] __ieee80211_xmit_fast+0x834/0x2b70 [ 1336.967759][T23151] ? __siphash_unaligned+0x110/0x360 [ 1336.969413][T23151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1336.971248][T23151] ? cfg80211_classify8021d+0x1f5/0xa30 [ 1336.972865][T23151] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 1336.974685][T23151] ? cfg80211_netdev_notifier_call+0x890/0x1140 [ 1336.976633][T23151] ? mesh_path_refresh+0x14d/0x2e0 [ 1336.978270][T23151] ieee80211_mesh_xmit_fast+0xbc1/0x1260 [ 1336.980019][T23151] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 1336.981914][T23151] ? find_held_lock+0x2b/0x80 [ 1336.983402][T23151] ? __skb_flow_dissect+0x3cc/0x6d20 [ 1336.985056][T23151] __ieee80211_subif_start_xmit+0xb36/0x16a0 [ 1336.986934][T23151] ? vfs_write+0x6af/0x1050 [ 1336.988404][T23151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1336.990262][T23151] ? skb_network_protocol+0x2c5/0x3c0 [ 1336.991934][T23151] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1336.993927][T23151] ? __netif_skb_features+0x41c/0xde0 [ 1336.995610][T23151] ieee80211_subif_start_xmit+0xf8/0x7c0 [ 1336.997359][T23151] ? __lock_acquire+0x5c0/0x1f40 [ 1336.998916][T23151] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1337.000869][T23151] ? validate_xmit_skb+0xbd7/0x1f30 [ 1337.002495][T23151] ? rcu_lockdep_current_cpu_online+0x37/0x150 [ 1337.004412][T23151] dev_hard_start_xmit+0x121/0x760 [ 1337.006019][T23151] __dev_queue_xmit+0x1bef/0x48d0 [ 1337.007605][T23151] ? __might_fault+0xc5/0x140 [ 1337.009082][T23151] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1337.010771][T23151] ? _copy_from_iter+0x270/0x16c0 [ 1337.012350][T23151] ? __pfx__copy_from_iter+0x10/0x10 [ 1337.014011][T23151] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1337.015710][T23151] ? __pfx_packet_parse_headers+0x10/0x10 [ 1337.017515][T23151] packet_xmit+0x24b/0x320 [ 1337.019273][T23151] packet_sendmsg+0x3205/0x4f80 [ 1337.021210][T23151] ? aa_sk_perm+0x2eb/0xa90 [ 1337.022988][T23151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1337.025292][T23151] ? __pfx_aa_sk_perm+0x10/0x10 [ 1337.027194][T23151] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 1337.029703][T23151] ? __pfx_packet_sendmsg+0x10/0x10 [ 1337.031729][T23151] ? aa_sock_msg_perm+0x11e/0x200 [ 1337.033696][T23151] ? apparmor_socket_sendmsg+0x165/0x280 [ 1337.035878][T23151] sock_write_iter+0x560/0x5d0 [ 1337.037791][T23151] ? __pfx_packet_sendmsg+0x10/0x10 [ 1337.039814][T23151] ? __pfx_sock_write_iter+0x10/0x10 [ 1337.041904][T23151] ? bpf_lsm_file_permission+0x9/0x10 [ 1337.043986][T23151] ? security_file_permission+0x76/0x210 [ 1337.046170][T23151] ? rw_verify_area+0xce/0x6d0 [ 1337.048066][T23151] vfs_write+0x6af/0x1050 [ 1337.049767][T23151] ? __pfx_sock_write_iter+0x10/0x10 [ 1337.051822][T23151] ? __pfx_vfs_write+0x10/0x10 [ 1337.053691][T23151] ? find_held_lock+0x2b/0x80 [ 1337.055545][T23151] ksys_write+0x1f8/0x250 [ 1337.057239][T23151] ? __pfx_ksys_write+0x10/0x10 [ 1337.059141][T23151] __do_fast_syscall_32+0x14b/0x8c0 [ 1337.061177][T23151] ? lockdep_hardirqs_on+0x7d/0x110 [ 1337.063198][T23151] do_fast_syscall_32+0x32/0x70 [ 1337.065111][T23151] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1337.067562][T23151] RIP: 0023:0xf746efbc [ 1337.069171][T23151] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1337.076581][T23151] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1337.079814][T23151] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001340 [ 1337.082889][T23151] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1337.085940][T23151] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1337.088987][T23151] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1337.092027][T23151] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1337.095093][T23151] [ 1337.096921][T23151] Kernel Offset: disabled [ 1337.098598][T23151] Rebooting in 86400 seconds..