last executing test programs: 7.740472728s ago: executing program 3 (id=2296): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000004000000110c00"/28, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1) socket$inet6(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socketpair(0x23, 0x2, 0x0, 0x0) pwrite64(r2, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000840)={0x2, &(0x7f0000000700)=[{@none}, {@fixed}]}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x8916, &(0x7f0000000200)={'syzkaller0\x00', @ifru_addrs=@generic={0x2, "0000c0a8000100"}}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_a, @random="603d6dbcba9a", {0x9, 0xf}, @value=@ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x841, 0x3c, @default, @val, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0x890}, 0x0) 6.967609554s ago: executing program 3 (id=2304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x6000, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000800)={0xa, 0x4e20, 0xc0, @local, 0xc58e}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000004000)=""/4099, 0x1003) 5.94727114s ago: executing program 1 (id=2310): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000f1ff0000000085000000160000001801000020646c87427b0500000000207ba100000000000000a100030000000007010000f8ffffffb702000008000000b7030000000000008500000017000000959c1762effac8f201fa55f4646f31d3fd32c96c159667a19ce7becc5c7d745e4b0bed74fef3599af5f9d4f1a0d270ff5f6a96"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) timer_create(0x0, 0x0, &(0x7f0000000b80)) timer_delete(0x0) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x9f) keyctl$chown(0x4, r1, 0x0, 0xee01) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0xfff2}, {0x2, 0xffff}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)=@dellinkprop={0x374, 0x6d, 0x8, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x2122, 0x11000}, [@IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x9}, @IFLA_VF_PORTS={0x108, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2c7ce8346c424c16ef009e19f107f317"}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a2e487623853a10a952289a30727e4b2"}, @IFLA_PORT_PROFILE={0x6, 0x2, '\xec\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "426f5e1323bbddc175623dae03ad367c"}, @IFLA_PORT_PROFILE={0x7, 0x2, '%-\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1923dcb810be75219adb1891c33dca89"}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '}\x00'}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xd4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xec}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8e87d8b0e471e16e0c7b8d64f726b01f"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0xb, 0x2, ':\xba\'[&(\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_PROFILE={0x7, 0x2, ')$\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xffffff80}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xd6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "471b59915e7c4df36808164c0b6c2b45"}]}]}, @IFLA_VF_PORTS={0x1f8, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fe1a26dbe156f4ba4062fdeb312401b9"}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xfb4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "3c7118f85fee3954f1317d99a111a6b6"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bd138ab702d5f9f5dbc70a41fb3fd33f"}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6d77ef178fe6dfa1bd2750fd577f0574"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "37528bfca1b64db559111f2d1a78ff86"}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '#\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_PROFILE={0xf, 0x2, '\':#-%.[:}#\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "54cd524f449ced1a2dde1ab141f06197"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d667fd13b1c0ea1cf87add086d350568"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "569d566220ec76f07d53ff5d66d4cfdd"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0xfd1}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x76}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0xffff}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf9}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "17dfc22b16e843423e10b83068835ff2"}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "719e0db41e10746923f785baae41a9be"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d3b030cefd5235ee329e79bd29ea779e"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "99cba6a1914e8b0145b43869ca20e9aa"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "62e773af1ae0a123cce493aeb86393ad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "99fb254bbef1da7e9f3c8d0d32b0b5c1"}]}]}, @IFLA_MTU={0x8, 0x4, 0x5fe6}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xffffffff}, @IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1ff}]}, 0x374}, 0x1, 0x0, 0x0, 0xc000}, 0x408c0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0xa, 0x16, 0xeb5, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.800159696s ago: executing program 1 (id=2311): syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x1, 0xfff3, "aec7c1", 0x2, 0x40}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0x8914, &(0x7f0000000040)='veth0:') mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_connect$uac2(0x0, 0x7b, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, 0x0, 0x22000015) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 5.087467225s ago: executing program 3 (id=2317): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r1, 0x5, 0x1, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0x40d4) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11022cbd7000fedbdf250800000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x48085}, 0x4) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={0x0}}, 0x20000000) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x11e, 0x1, 0x0, 0x0) r5 = getpgid(0x0) kcmp(r5, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 4.904254965s ago: executing program 3 (id=2320): syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x1}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000140)="1140679a", 0x4}], 0x1}, 0x40810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x0, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x0, @fd=r4, 0x5, 0x0, 0x0, 0x10, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r9 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb70259b40363cf91600", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r10, 0x0, 0x0, 0x80c0, 0x0, 0x0) ioctl$FE_SET_FRONTEND(r9, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x1, 0x13, 0x15, 0x4, 0x4, 0x2, 0x4}}) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000040)={0x6, 'wlan1\x00', {0x7fffffff}, 0x9}) 4.143728438s ago: executing program 0 (id=2330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x6000, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000800)={0xa, 0x4e20, 0xc0, @local, 0xc58e}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000004000)=""/4099, 0x1003) 3.879474864s ago: executing program 3 (id=2324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x6000, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000800)={0xa, 0x4e20, 0xc0, @local, 0xc58e}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000004000)=""/4099, 0x1003) 3.109291615s ago: executing program 1 (id=2326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x6000, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000800)={0xa, 0x4e20, 0xc0, @local, 0xc58e}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000004000)=""/4099, 0x1003) 2.29926269s ago: executing program 2 (id=2327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000004000000110c00"/28, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) readv(r2, &(0x7f0000000300)=[{0x0}], 0x1) socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0xc0000009, &(0x7f0000000500)="75c56dee97b1995cb5ef926d237501f323afb0e944f920f6c8329d9d00012acbb5f4d3cad5bbdd37e492310aca6b536b51c152dae2e36f4ea16265d686f6dc6cc781deef160b75befaa6cb4e2118dc0e971d6a92220e4ad8d6ca7abc00357a37418c63b80ed9ab6739146038e4156a9ecc645622e5ef7e2613b34d8eb66dcffb275f7ffd5bd0703fba94079a53147268c40a1b") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socketpair(0x23, 0x2, 0x0, 0x0) pwrite64(r2, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000180)={0x401, 0x7ff, 0x9, 0x58, 0x1, 0x9}) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000840)={0x2, &(0x7f0000000700)=[{@none}, {@fixed}]}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r8, 0x8916, &(0x7f0000000200)={'syzkaller0\x00', @ifru_addrs=@generic={0x2, "0000c0a8000100"}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x44, r10, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_a, @random="603d6dbcba9a", {0x9, 0xf}, @value=@ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x841, 0x3c, @default, @val, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0x890}, 0x0) 1.445876071s ago: executing program 2 (id=2328): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x100) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000640)={&(0x7f00000005c0)=[{0x6, 0x401, 0xf5, &(0x7f0000000040)="a0de8a2d04700c04334ea2a324c9271e10124295298d31a15c02ded3e1061af7a8242d41870341004997220aa0a82b9ef49913d0efe05d0516cce9e016c6ed961a84f72c9430eef8ff12a84bdd6644720dcc0178c27be4b357ea3f46f7103983937e49fc50542dafe374fc628659a739a6fd2f8a569fa31b89e31121e8b9a6b1a6e83395628e6c4579f93ccc74b53721b9d9f96dd67125425c08b748d85cd87718226bb74d49792bab3e2aa26f1385fea7005921d72081d5e8fab622421bac2d649b2bbd348fe601aac9a243f56d58e8e1b6a301deb8dfc60fbfa5bc9fe1a4eb1583288190418d270b42ed1d270fc73d97ba85afc6"}, {0x5, 0x600, 0x25, &(0x7f0000000140)="741fb7c88ce8b1d96e117fe9e3636bd1ec9f8b88720921ba20d446b108df55c87b12946b0a"}, {0x8, 0x200, 0x3, &(0x7f0000000180)="5feac6"}, {0x75, 0x6012, 0x8d, &(0x7f00000001c0)="9ca1394f3b7e5bad17e473b0730f64ad2f74356e34265e2a3aabd8aef90538d779fa552aef8a98dc91e54ade7350c10dd5d6dee64c7ac3217f92a4dfd0ffad785605600d11651d7d7def3a2f54918742d18c466e2caeb485be52e280156bc01437238454d1416a53fe873904f04684d2d2f59c7bae0e90b8fe0c15db06e05f5cb58c06dd7df9f9996b3206b14d"}, {0x7fff, 0x8600, 0x5f, &(0x7f0000000280)="75ba65cf48276532cfaf69e721d7b2651c2d03ecec01925e8f832930de50a9a19dcb41e653e98d8f39777857ed066487a7970267c24606bd126bfecdb43683ffd23d51584dfff239e989ebce449e4122b845e7e572be15031fac6c3b5655c3"}, {0x8, 0x400, 0xf1, &(0x7f0000000300)="7f39303fc503775a8f6eefac0e01e2146b668b02553b882bcf83587c32dbf0f94fd0f9849bfe558d7f32f062d42b3b78678df7b5eda4d3e2954718ac26d4cec8fec021a1e2c7518373ea7ef5b2b51408e97182178457a8af4132cfbba237adc44f35119aa9ddfb0ae7688288ded8a80ccf67e3f3de55225fb579eb946ea4474c5958988101bb149fb2d292d80878d68f11d2be5d1707e804b67c93c8a1d5d63f1ec82e6acf884063774881870af0303fcf1c8ed5a838d93051882d50931e6a2adaa8f2ed970a2429c70a8d8e6ef1563f66adac2127893bee7d456e884e54f925d8f724a027e2058ef00884a1ff680d1073"}, {0xda, 0x9001, 0xd7, &(0x7f0000000400)="27f388ac6c8058c5884d54ea0a1cdf518bea64b028108054b2ebf3c12f0714e9a79316fbee2b21b16ae88c3c898888fae81c9d3d393f69d1efab0482c73c5697fe886bae8947091320b8569a615bf11e45ad318bcff1a625c578b518e5b786b87e06da7cdda7699b3ce69bc93066c4996893e7794dcd6651286919a43dc1da2ad0e581350b90733fa3f5c5af5ef88e1221321c2fc2cd085c0a5dd2e35e05cb44b69c8975ce7649b741975356ebb3bea0caaab775d0ba8bfb37b411a1122b5156466ae95094432b9afec9878f34f9ca15041dc3333c933f"}, {0x1f0, 0x1010, 0x82, &(0x7f0000000500)="29a056995a8cb14db6563b5451694f2fe82568eece52152d0e45aba40fd728974d633a18031dbd7bdc153ba6f8d11c7653b872b2b3e1b94d306a6e3a7b7f21672177c001456542f5920834d8b50c80ae87cd5e41ce70e05bdab34058ecd50d4601c83fe69abc37f81c7df6cee77304a0f287d9275e6879d41b2038def2883a30df41"}], 0x8}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000680)={'ah\x00'}, &(0x7f00000006c0)=0x1e) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x2e0) open$dir(&(0x7f0000000700)='./file0\x00', 0x2000, 0x180) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000740), 0x80040, 0x0) r4 = open$dir(&(0x7f0000000780)='./file0\x00', 0x8a01, 0x8) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) r5 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) fcntl$setlease(r5, 0x400, 0x2) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @local}, 0x22, 0x0, 0x0, 0x0, 0x3, &(0x7f00000007c0)='pim6reg\x00', 0xffffffffffffffff, 0x4, 0x7}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) ppoll(&(0x7f0000000880)=[{r3, 0x10}, {r1, 0x1081}, {r4, 0x4000}, {r4, 0x14}, {r0, 0xc000}], 0x5, &(0x7f0000000900)={r6, r7+60000000}, &(0x7f0000000940)={[0x2, 0x1]}, 0x8) ioctl$SOUND_MIXER_READ_CAPS(r5, 0x80044dfc, &(0x7f0000000980)) r8 = syz_create_resource$binfmt(&(0x7f00000009c0)='./file0\x00') openat$binfmt(0xffffff9c, r8, 0x41, 0x1ff) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0186405, &(0x7f0000000a00)={0xd, 0xa0a8, {}, {0x0}, 0x7, 0x7}) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000602, r9, &(0x7f0000000a40)={0x8, 0x101}) fcntl$setstatus(r5, 0x4, 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000bc0)={'erspan0\x00', &(0x7f0000000ac0)={'ip_vti0\x00', 0x0, 0xa17dd18c1b2b4d41, 0x7, 0xf, 0x30, {{0x2f, 0x4, 0x3, 0x29, 0xbc, 0x68, 0x0, 0x5, 0x4, 0x0, @local, @multicast1, {[@rr={0x7, 0xf, 0xbd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x7, 0xb7, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x34, 0x42, 0x1, 0xb, [{@multicast1, 0x9}, {@local, 0xb07}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x7cb6}, {@multicast2, 0x33}, {@broadcast, 0xff}]}, @timestamp={0x44, 0x20, 0x45, 0x0, 0x9, [0x5, 0x98, 0x6, 0x29, 0xff, 0x101, 0x43]}, @lsrr={0x83, 0x7, 0x90, [@remote]}, @ssrr={0x89, 0xf, 0x91, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp_prespec={0x44, 0x14, 0x63, 0x3, 0x4, [{@multicast1, 0x1}, {@private=0xa010102, 0x10}]}, @end, @rr={0x7, 0x13, 0xc1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=@ipv6_newaddr={0x20, 0x14, 0x200, 0x70bd29, 0x25dfdbfc, {0xa, 0x1, 0x0, 0xfd, r10}, [@IFA_FLAGS={0x8, 0x8, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000dc0)={@cgroup=r5, 0xf, 0x1, 0xe7, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000d00)=[0x0, 0x0], &(0x7f0000000d40)=[0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000e40), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e00)={@fallback=r0, r5, 0x16, 0x2040, 0x0, @value=r12, @void, @void, @void, r11}, 0x20) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r13 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000f00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x544, 0x2cc, 0x204, 0x2cc, 0x394, 0x394, 0x47c, 0x47c, 0x47c, 0x47c, 0x47c, 0x6, &(0x7f0000000e80), {[{{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3d, 0x24, 0x8000}}}, {{@uncond, 0x0, 0xd8, 0x11c, 0x0, {}, [@common=@unspec=@devgroup={{0x34}, {0x6, 0x9, 0x7078, 0xfffffff8, 0x4}}]}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@loopback, 0x2d, 0xb, 0x5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0x1f}}}, {{@ipv6={@mcast1, @mcast1, [0xffffff00, 0xffffff00, 0xff000000, 0xffffff00], [0x0, 0xff, 0xffffff00, 0xffffffff], 'veth0_to_bridge\x00', 'lo\x00', {0xff}, {}, 0x2c, 0xcb, 0x4, 0xa}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@private=0xa010102, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x34, 0x3c, 0x63}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5a0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000001500)={0x3, 0x100}) 855.94056ms ago: executing program 0 (id=2329): r0 = eventfd(0xffff8e6c) close(r0) ioctl$OCFS2_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000001c40)={0x2, 0x2, 0xa, 0x7, 0x4, 0x69cdbab1}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, &(0x7f0000001c80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat$vhost_vsock(0xffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000001f00)=0x8000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002140)={{0x1, 0x1, 0x18, r1, {0x7f}}, './file0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000002180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xc0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x1}, {0xa, 0x4e23, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0xffffffffffffffff, 0xc0}}, 0x48) flistxattr(r0, &(0x7f00000023c0)=""/56, 0x38) 696.942173ms ago: executing program 3 (id=2331): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100535414fbcc65721005000000200001800d0001007564703a73797a320900"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000180)) r7 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0xff21}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}}, 0x20000000) io_submit(r8, 0x0, &(0x7f0000001300)) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002400010026060000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 695.494837ms ago: executing program 0 (id=2339): r0 = eventfd(0xffff8e6c) close(r0) ioctl$OCFS2_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000001c40)={0x2, 0x2, 0xa, 0x7, 0x4, 0x69cdbab1}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, &(0x7f0000001c80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat$vhost_vsock(0xffffff9c, &(0x7f0000001ec0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000001f00)=0x8000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002140)={{0x1, 0x1, 0x18, r1, {0x7f}}, './file0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000002180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xc0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x1}, {0xa, 0x4e23, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0xffffffffffffffff, 0xc0}}, 0x48) flistxattr(r0, &(0x7f00000023c0)=""/56, 0x38) 608.495694ms ago: executing program 0 (id=2332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000004000000110c00"/28, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1) socket$inet6(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socketpair(0x23, 0x2, 0x0, 0x0) pwrite64(r2, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000840)={0x2, &(0x7f0000000700)=[{@none}, {@fixed}]}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x8916, &(0x7f0000000200)={'syzkaller0\x00', @ifru_addrs=@generic={0x2, "0000c0a8000100"}}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_a, @random="603d6dbcba9a", {0x9, 0xf}, @value=@ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x841, 0x3c, @default, @val, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0x890}, 0x0) 518.797421ms ago: executing program 1 (id=2333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000004000000110c00"/28, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1) socket$inet6(0xa, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0xc0000009, &(0x7f0000000500)="75c56dee97b1995cb5ef926d237501f323afb0e944f920f6c8329d9d00012acbb5f4d3cad5bbdd37e492310aca6b536b51c152dae2e36f4ea16265d686f6dc6cc781deef160b75befaa6cb4e2118dc0e971d6a92220e4ad8d6ca7abc00357a37418c63b80ed9ab6739146038e4156a9ecc645622e5ef7e2613b34d8eb66dcffb275f7ffd5bd0703fba94079a53147268c40a1b") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socketpair(0x23, 0x2, 0x0, 0x0) pwrite64(r1, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000180)={0x401, 0x7ff, 0x9, 0x58, 0x1, 0x9}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000840)={0x2, &(0x7f0000000700)=[{@none}, {@fixed}]}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x8916, &(0x7f0000000200)={'syzkaller0\x00', @ifru_addrs=@generic={0x2, "0000c0a8000100"}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_a, @random="603d6dbcba9a", {0x9, 0xf}, @value=@ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x841, 0x3c, @default, @val, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0x890}, 0x0) 518.668237ms ago: executing program 2 (id=2334): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x60, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @mcast1, 0xbc}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) (fail_nth: 2) 366.785058ms ago: executing program 2 (id=2335): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1001f, 0x0, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x40000000, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x6], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x1b59, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 358.986014ms ago: executing program 1 (id=2336): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) read$midi(r0, &(0x7f0000000080)=""/102, 0x66) (fail_nth: 2) 300.244859ms ago: executing program 0 (id=2337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000004000000110c00"/28, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) readv(r2, &(0x7f0000000300)=[{0x0}], 0x1) socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0xc0000009, &(0x7f0000000500)="75c56dee97b1995cb5ef926d237501f323afb0e944f920f6c8329d9d00012acbb5f4d3cad5bbdd37e492310aca6b536b51c152dae2e36f4ea16265d686f6dc6cc781deef160b75befaa6cb4e2118dc0e971d6a92220e4ad8d6ca7abc00357a37418c63b80ed9ab6739146038e4156a9ecc645622e5ef7e2613b34d8eb66dcffb275f7ffd5bd0703fba94079a53147268c40a1b") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socketpair(0x23, 0x2, 0x0, 0x0) pwrite64(r2, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000180)={0x401, 0x7ff, 0x9, 0x58, 0x1, 0x9}) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000840)={0x2, &(0x7f0000000700)=[{@none}, {@fixed}]}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r8, 0x8916, &(0x7f0000000200)={'syzkaller0\x00', @ifru_addrs=@generic={0x2, "0000c0a8000100"}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x44, r10, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_a, @random="603d6dbcba9a", {0x9, 0xf}, @value=@ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x841, 0x3c, @default, @val, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0x890}, 0x0) 239.922293ms ago: executing program 1 (id=2338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000004000)=""/4099, 0x1003) 79.863748ms ago: executing program 0 (id=2340): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000b0c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x81) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0x0, r2, {0x7, 0x9, 0x1, 0x13400a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000009080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000100)=0x1) read$midi(r0, &(0x7f0000000080)=""/102, 0x66) fcntl$setstatus(r0, 0x4, 0x2400) 79.411897ms ago: executing program 2 (id=2341): r0 = eventfd(0xffff8e6c) close(r0) ioctl$OCFS2_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000001c40)={0x2, 0x2, 0xa, 0x7, 0x4, 0x69cdbab1}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, &(0x7f0000001c80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat$vhost_vsock(0xffffff9c, &(0x7f0000001ec0), 0x2, 0x0) close_range(r0, r1, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002140)={{0x1, 0x1, 0x18, r1, {0x7f}}, './file0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000002180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xc0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x1}, {0xa, 0x4e23, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0xffffffffffffffff, 0xc0}}, 0x48) flistxattr(r0, &(0x7f00000023c0)=""/56, 0x38) 0s ago: executing program 2 (id=2342): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0x400007f) modify_ldt$write(0x1, &(0x7f0000000500)={0x38, 0x0, 0x600}, 0x10) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r2, 0x4b70, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xc) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x0, 0x0) write(r5, &(0x7f00000002c0)='2', 0x1) symlinkat(&(0x7f0000000100)='myproc\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') socket$xdp(0x2c, 0x3, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x8000) mount(&(0x7f0000000580)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000002280)='f2fs\x00', 0x10000, &(0x7f0000002240)='norecovery') r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='1', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) kernel console output (not intermixed with test programs): syz.2.1532'. [ 344.225497][T10968] capability: warning: `syz.2.1534' uses deprecated v2 capabilities in a way that may be insecure [ 344.624228][T10971] Set syz1 is full, maxelem 65536 reached [ 345.410636][ T5845] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 345.488827][T10979] Set syz1 is full, maxelem 65536 reached [ 345.490321][ T5824] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 345.540245][ T5845] usb 7-1: device descriptor read/64, error -71 [ 345.651618][ T5824] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 345.656023][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 345.659922][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 345.665846][ T5824] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 345.668911][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.672611][ T5824] usb 5-1: Product: syz [ 345.674072][ T5824] usb 5-1: Manufacturer: syz [ 345.675703][ T5824] usb 5-1: SerialNumber: syz [ 345.678832][ T5824] usb 5-1: config 0 descriptor?? [ 345.686649][T10987] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 345.790177][ T5824] rc_core: IR keymap rc-streamzap not found [ 345.792144][ T5824] Registered IR keymap rc-empty [ 345.800332][ T5845] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 345.803569][ T5824] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 345.811805][ T5824] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 345.847772][T10992] Set syz1 is full, maxelem 65536 reached [ 345.940441][ T5845] usb 7-1: device descriptor read/64, error -71 [ 346.048753][T10998] netlink: 860 bytes leftover after parsing attributes in process `syz.3.1541'. [ 346.054326][ T5845] usb usb7-port1: attempt power cycle [ 346.382933][ T5095] Bluetooth: hci0: unexpected cc 0x1407 length: 11 > 9 [ 346.386473][ T5095] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 346.392340][ T34] usb 5-1: USB disconnect, device number 15 [ 346.412248][ T5845] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 346.431241][ T5845] usb 7-1: device descriptor read/8, error -71 [ 346.581247][T11009] Set syz1 is full, maxelem 65536 reached [ 346.693302][ T5845] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 346.711543][ T5845] usb 7-1: device descriptor read/8, error -71 [ 346.833441][ T5845] usb usb7-port1: unable to enumerate USB device [ 347.387090][T11024] CIFS: iocharset name too long [ 347.678158][T11029] Set syz1 is full, maxelem 65536 reached [ 347.934071][T11035] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 347.953973][T11035] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 347.958165][T11035] overlayfs: failed to look up (tracing) for ino (-66) [ 348.652728][T11041] 9pnet_virtio: no channels available for device syz [ 348.725322][T11043] netlink: 860 bytes leftover after parsing attributes in process `syz.3.1554'. [ 349.632374][T11055] CIFS: iocharset name too long [ 349.704470][T11059] FAULT_INJECTION: forcing a failure. [ 349.704470][T11059] name failslab, interval 1, probability 0, space 0, times 0 [ 349.714779][T11059] CPU: 3 UID: 0 PID: 11059 Comm: syz.2.1562 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.714813][T11059] Tainted: [L]=SOFTLOCKUP [ 349.714820][T11059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 349.714831][T11059] Call Trace: [ 349.714837][T11059] [ 349.714844][T11059] dump_stack_lvl+0x100/0x190 [ 349.714873][T11059] should_fail_ex.cold+0x5/0xa [ 349.714894][T11059] should_failslab+0xc2/0x120 [ 349.714920][T11059] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 349.714946][T11059] ? __get_vm_area_node+0x101/0x330 [ 349.714975][T11059] __get_vm_area_node+0x101/0x330 [ 349.715005][T11059] __vmalloc_node_range_noprof+0x228/0x1630 [ 349.715033][T11059] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 349.715059][T11059] ? find_held_lock+0x2b/0x80 [ 349.715081][T11059] ? process_measurement+0x4c8/0x2350 [ 349.715104][T11059] ? process_measurement+0x4c8/0x2350 [ 349.715128][T11059] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 349.715160][T11059] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 349.715189][T11059] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 349.715221][T11059] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 349.715244][T11059] __vmalloc_node_noprof+0xad/0xf0 [ 349.715270][T11059] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 349.715296][T11059] __vmalloc_noprof+0xa3/0x120 [ 349.715322][T11059] ? __pfx___vmalloc_noprof+0x10/0x10 [ 349.715350][T11059] ? rcu_is_watching+0x12/0xc0 [ 349.715371][T11059] ? apparmor_capable+0x1d7/0x4d0 [ 349.715395][T11059] bpf_prog_alloc_no_stats+0x58/0x640 [ 349.715418][T11059] ? security_capable+0x80/0x260 [ 349.715439][T11059] bpf_prog_alloc+0x3b/0x200 [ 349.715459][T11059] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 349.715485][T11059] bpf_prog_load+0x4a9/0x2fa0 [ 349.715510][T11059] ? __pfx_bpf_prog_load+0x10/0x10 [ 349.715528][T11059] ? __lock_acquire+0x49f/0x1a40 [ 349.715583][T11059] __sys_bpf+0x18dc/0x4e80 [ 349.715611][T11059] ? __pfx___sys_bpf+0x10/0x10 [ 349.715632][T11059] ? find_held_lock+0x2b/0x80 [ 349.715654][T11059] ? get_pid_task+0xfc/0x250 [ 349.715677][T11059] ? get_pid_task+0xfc/0x250 [ 349.715705][T11059] ? proc_fail_nth_write+0x9f/0x220 [ 349.715747][T11059] ? find_held_lock+0x2b/0x80 [ 349.715774][T11059] ? rcu_read_lock_any_held+0x6a/0xa0 [ 349.715796][T11059] ? find_held_lock+0x2b/0x80 [ 349.715817][T11059] ? ksys_write+0x190/0x250 [ 349.715833][T11059] ? ksys_write+0x190/0x250 [ 349.715867][T11059] ? fput+0x79/0x100 [ 349.715890][T11059] ? __ia32_sys_bpf+0xcc/0x170 [ 349.715908][T11059] __ia32_sys_bpf+0xcc/0x170 [ 349.715929][T11059] ? __do_fast_syscall_32+0x98/0x970 [ 349.715957][T11059] __do_fast_syscall_32+0xe7/0x970 [ 349.715981][T11059] ? lockdep_hardirqs_on+0x78/0x100 [ 349.716007][T11059] do_fast_syscall_32+0x32/0x70 [ 349.716032][T11059] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 349.716055][T11059] RIP: 0023:0xf708efec [ 349.716076][T11059] Code: Unable to access opcode bytes at 0xf708efc2. [ 349.716084][T11059] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 349.716102][T11059] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800004c0 [ 349.716114][T11059] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.716124][T11059] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.716134][T11059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.716145][T11059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.716169][T11059] [ 349.716409][T11059] syz.2.1562: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 349.846892][T11058] Set syz1 is full, maxelem 65536 reached [ 349.848132][T11059] ,cpuset=/,mems_allowed=0-1 [ 349.865204][T11059] CPU: 3 UID: 0 PID: 11059 Comm: syz.2.1562 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.865234][T11059] Tainted: [L]=SOFTLOCKUP [ 349.865240][T11059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 349.865251][T11059] Call Trace: [ 349.865258][T11059] [ 349.865286][T11059] dump_stack_lvl+0x100/0x190 [ 349.865316][T11059] warn_alloc.cold+0x94/0xa8 [ 349.865337][T11059] ? __pfx_warn_alloc+0x10/0x10 [ 349.865356][T11059] ? __kasan_kmalloc+0x8a/0xb0 [ 349.865388][T11059] ? __get_vm_area_node+0x208/0x330 [ 349.865418][T11059] __vmalloc_node_range_noprof+0xccd/0x1630 [ 349.865446][T11059] ? find_held_lock+0x2b/0x80 [ 349.865468][T11059] ? process_measurement+0x4c8/0x2350 [ 349.865489][T11059] ? process_measurement+0x4c8/0x2350 [ 349.865512][T11059] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 349.865543][T11059] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 349.865577][T11059] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 349.865609][T11059] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 349.865634][T11059] __vmalloc_node_noprof+0xad/0xf0 [ 349.865662][T11059] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 349.865689][T11059] __vmalloc_noprof+0xa3/0x120 [ 349.865715][T11059] ? __pfx___vmalloc_noprof+0x10/0x10 [ 349.865744][T11059] ? rcu_is_watching+0x12/0xc0 [ 349.865766][T11059] ? apparmor_capable+0x1d7/0x4d0 [ 349.865788][T11059] bpf_prog_alloc_no_stats+0x58/0x640 [ 349.865812][T11059] ? security_capable+0x80/0x260 [ 349.865834][T11059] bpf_prog_alloc+0x3b/0x200 [ 349.865855][T11059] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 349.865883][T11059] bpf_prog_load+0x4a9/0x2fa0 [ 349.865909][T11059] ? __pfx_bpf_prog_load+0x10/0x10 [ 349.865928][T11059] ? __lock_acquire+0x49f/0x1a40 [ 349.865977][T11059] __sys_bpf+0x18dc/0x4e80 [ 349.866004][T11059] ? __pfx___sys_bpf+0x10/0x10 [ 349.866025][T11059] ? find_held_lock+0x2b/0x80 [ 349.866046][T11059] ? get_pid_task+0xfc/0x250 [ 349.866068][T11059] ? get_pid_task+0xfc/0x250 [ 349.866095][T11059] ? proc_fail_nth_write+0x9f/0x220 [ 349.866121][T11059] ? find_held_lock+0x2b/0x80 [ 349.866147][T11059] ? rcu_read_lock_any_held+0x6a/0xa0 [ 349.866170][T11059] ? find_held_lock+0x2b/0x80 [ 349.866190][T11059] ? ksys_write+0x190/0x250 [ 349.866207][T11059] ? ksys_write+0x190/0x250 [ 349.866242][T11059] ? fput+0x79/0x100 [ 349.866266][T11059] ? __ia32_sys_bpf+0xcc/0x170 [ 349.866284][T11059] __ia32_sys_bpf+0xcc/0x170 [ 349.866304][T11059] ? __do_fast_syscall_32+0x98/0x970 [ 349.866334][T11059] __do_fast_syscall_32+0xe7/0x970 [ 349.866358][T11059] ? lockdep_hardirqs_on+0x78/0x100 [ 349.866385][T11059] do_fast_syscall_32+0x32/0x70 [ 349.866410][T11059] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 349.866433][T11059] RIP: 0023:0xf708efec [ 349.866454][T11059] Code: Unable to access opcode bytes at 0xf708efc2. [ 349.866462][T11059] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 349.866480][T11059] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800004c0 [ 349.866491][T11059] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.866501][T11059] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.866511][T11059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.866521][T11059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.866545][T11059] [ 349.866552][T11059] Mem-Info: [ 350.003792][T11065] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 350.011398][T11059] active_anon:656 inactive_anon:3457 isolated_anon:0 [ 350.011398][T11059] active_file:4494 inactive_file:1221 isolated_file:0 [ 350.011398][T11059] unevictable:0 dirty:14 writeback:0 [ 350.011398][T11059] slab_reclaimable:6442 slab_unreclaimable:60680 [ 350.011398][T11059] mapped:24660 shmem:2873 pagetables:1183 [ 350.011398][T11059] sec_pagetables:370 bounce:0 [ 350.011398][T11059] kernel_misc_reclaimable:0 [ 350.011398][T11059] free:85059 free_pcp:7857 free_cma:0 [ 350.029502][T11059] Node 0 active_anon:8kB inactive_anon:32kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8704kB pagetables:1280kB sec_pagetables:1232kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 350.043196][T11059] Node 1 active_anon:2616kB inactive_anon:13796kB active_file:17960kB inactive_file:10084kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98612kB dirty:56kB writeback:0kB shmem:11492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4856kB pagetables:3452kB sec_pagetables:248kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 350.069613][T11065] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 350.073748][T11065] overlayfs: failed to look up (tracing) for ino (-66) [ 350.076775][T11059] Node 0 DMA free:1412kB boost:14940kB min:15684kB low:20292kB high:24900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:1492kB local_pcp:304kB free_cma:0kB [ 350.089528][T11059] lowmem_reserve[]: 0 280 280 280 280 [ 350.091802][T11059] Node 0 DMA32 free:6852kB boost:0kB min:13928kB low:100052kB high:186176kB reserved_highatomic:4096KB free_highatomic:4KB active_anon:8kB inactive_anon:32kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:8kB present:1032196kB managed:287080kB mlocked:0kB bounce:0kB free_pcp:24284kB local_pcp:2728kB free_cma:0kB [ 350.105246][T11059] lowmem_reserve[]: 0 0 0 0 0 [ 350.107774][T11059] Node 1 DMA32 free:327424kB boost:0kB min:46008kB low:330468kB high:614928kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12016kB inactive_anon:4384kB active_file:11684kB inactive_file:18680kB unevictable:0kB writepending:56kB zspages:6556kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:3148kB local_pcp:780kB free_cma:0kB [ 350.120291][T11059] lowmem_reserve[]: 0 0 0 0 0 [ 350.121807][T11059] Node 0 DMA: 1*4kB (U) 0*8kB 6*16kB (U) 17*32kB (U) 6*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1412kB [ 350.127523][T11059] Node 0 DMA32: 27*4kB (MEH) 23*8kB (E) 20*16kB (ME) 21*32kB (E) 11*64kB (UE) 10*128kB (UE) 4*256kB (UM) 3*512kB (UME) 1*1024kB (U) 0*2048kB 0*4096kB = 6852kB [ 350.134298][T11059] Node 1 DMA32: 687*4kB (U) 1020*8kB (UME) 607*16kB (UME) 475*32kB (UME) 482*64kB (UME) 238*128kB (UME) 147*256kB (UME) 85*512kB (UME) 28*1024kB (UME) 9*2048kB (M) 24*4096kB (UM) = 323692kB [ 350.142156][T11059] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.146052][T11059] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 350.149833][T11059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.153800][T11059] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 350.157639][T11059] 12443 total pagecache pages [ 350.159583][T11059] 1091 pages in swap cache [ 350.162345][T11059] Free swap = 98420kB [ 350.163786][T11059] Total swap = 124996kB [ 350.165410][T11059] 524155 pages RAM [ 350.166896][T11059] 0 pages HighMem/MovableOnly [ 350.168507][T11059] 211492 pages reserved [ 350.169796][T11059] 0 pages cma reserved [ 350.402876][T11070] overlayfs: failed to clone lowerpath [ 350.728241][T11069] netlink: 860 bytes leftover after parsing attributes in process `syz.2.1564'. [ 351.374355][T11085] CIFS: iocharset name too long [ 351.399630][T11083] syzkaller0: entered promiscuous mode [ 351.401704][T11083] syzkaller0: entered allmulticast mode [ 351.844803][T11091] Set syz1 is full, maxelem 65536 reached [ 352.039801][T11101] netlink: 860 bytes leftover after parsing attributes in process `syz.2.1574'. [ 352.173430][ T34] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 352.231338][T11103] lo speed is unknown, defaulting to 1000 [ 352.235176][T11103] lo speed is unknown, defaulting to 1000 [ 352.340563][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 352.343817][T11110] CIFS: iocharset name too long [ 352.348028][ T34] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 352.352730][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 352.358041][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 352.366657][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 352.380855][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.384960][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 352.388151][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.896934][ T34] usb 6-1: usb_control_msg returned -32 [ 352.901741][ T34] usbtmc 6-1:16.0: can't read capabilities [ 352.945645][ T34] usb 6-1: USB disconnect, device number 14 [ 353.568538][T11124] overlayfs: failed to clone lowerpath [ 353.733974][T11129] e1000e 0000:00:02.0 eth1: removed PHC [ 354.081855][T11129] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 354.641221][T11144] netlink: 860 bytes leftover after parsing attributes in process `syz.0.1584'. [ 354.685586][T11138] Set syz1 is full, maxelem 65536 reached [ 354.920176][T11152] CIFS: iocharset name too long [ 355.086617][T11143] Set syz1 is full, maxelem 65536 reached [ 355.260437][ T34] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 355.460268][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 355.467519][ T34] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 355.476501][ T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.482624][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.490038][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.498360][ T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.514602][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 355.531338][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.670062][T11182] netlink: 860 bytes leftover after parsing attributes in process `syz.0.1594'. [ 355.811679][T11189] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 355.845381][ T34] usb 7-1: usb_control_msg returned -32 [ 355.847826][ T34] usbtmc 7-1:16.0: can't read capabilities [ 355.864164][ T34] usb 7-1: USB disconnect, device number 24 [ 356.089361][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1598'. [ 356.865306][T11192] Set syz1 is full, maxelem 65536 reached [ 357.061927][T11215] CIFS: iocharset name too long [ 357.112059][ T171] Bluetooth: hci4: Frame reassembly failed (-84) [ 357.233416][T11223] syzkaller0: entered promiscuous mode [ 357.238166][T11223] syzkaller0: entered allmulticast mode [ 357.460878][T11228] netlink: 860 bytes leftover after parsing attributes in process `syz.2.1605'. [ 358.288668][T11244] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.294758][T11244] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.469302][T11244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.490972][T11244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.543326][ T5749] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 358.751076][ T5816] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.774062][ T5816] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.787980][ T5816] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.801879][ T5816] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.898765][T11251] Set syz1 is full, maxelem 65536 reached [ 359.161494][ T5095] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 359.260511][T11259] CIFS: iocharset name too long [ 359.263238][T11261] netlink: 'syz.1.1616': attribute type 1 has an invalid length. [ 359.837426][T11270] Set syz1 is full, maxelem 65536 reached [ 362.265130][T11287] CIFS: iocharset name too long [ 362.340203][ T29] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 362.358030][T11285] Set syz1 is full, maxelem 65536 reached [ 362.502967][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 362.512109][ T29] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 362.520364][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.522716][T11296] netlink: 860 bytes leftover after parsing attributes in process `syz.3.1628'. [ 362.526449][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 362.533142][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 362.537228][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.542573][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 362.546174][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.736577][T11303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1631'. [ 362.824626][T11298] Set syz1 is full, maxelem 65536 reached [ 362.892295][ T29] usb 6-1: usb_control_msg returned -32 [ 362.895142][ T29] usbtmc 6-1:16.0: can't read capabilities [ 362.918351][ T29] usb 6-1: USB disconnect, device number 15 [ 363.172568][T11309] overlayfs: failed to clone lowerpath [ 363.499436][T11321] netlink: 860 bytes leftover after parsing attributes in process `syz.0.1637'. [ 363.658888][T11323] Set syz1 is full, maxelem 65536 reached [ 363.805634][T11333] Set syz1 is full, maxelem 65536 reached [ 363.827021][T11339] syzkaller0: entered promiscuous mode [ 363.830173][T11339] syzkaller0: entered allmulticast mode [ 363.843340][T11339] tipc: Enabled bearer , priority 0 [ 363.847817][T11337] tipc: Resetting bearer [ 363.864061][T11338] overlayfs: failed to clone lowerpath [ 363.873306][T11337] tipc: Disabling bearer [ 363.877098][T11343] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 363.887286][T11343] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 363.890565][T11343] overlayfs: failed to look up (tracing) for ino (-66) [ 364.430184][ T5845] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 364.600224][ T5845] usb 5-1: Using ep0 maxpacket: 8 [ 364.604974][ T5845] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 364.608514][ T5845] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 364.612460][ T5845] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 364.616417][ T5845] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 364.620929][ T5845] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.626170][ T5845] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 364.629771][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.041730][T11359] netlink: 860 bytes leftover after parsing attributes in process `syz.2.1651'. [ 365.112435][ T5845] usb 5-1: usb_control_msg returned -32 [ 365.126733][ T5845] usbtmc 5-1:16.0: can't read capabilities [ 365.151452][ T5845] usb 5-1: USB disconnect, device number 16 [ 365.644792][T11366] Set syz1 is full, maxelem 65536 reached [ 366.296574][T11388] overlayfs: failed to clone lowerpath [ 366.300482][T11383] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 366.302564][T11383] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 366.314868][T11383] vhci_hcd vhci_hcd.0: Device attached [ 366.580311][ T5845] usb 38-1: SetAddress Request (10) to port 0 [ 366.583020][ T5845] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 366.718382][T11396] Set syz1 is full, maxelem 65536 reached [ 366.923521][T11400] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20000 [ 366.958239][T11400] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1662'. [ 367.106413][T11389] vhci_hcd: connection reset by peer [ 367.119033][ T6787] vhci_hcd vhci_hcd.0: stop threads [ 367.124447][ T6787] vhci_hcd vhci_hcd.0: release socket [ 367.126756][ T6787] vhci_hcd vhci_hcd.0: disconnect device [ 367.962721][T11421] Set syz1 is full, maxelem 65536 reached [ 368.365370][T11429] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 368.375265][T11429] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 368.378523][T11429] overlayfs: failed to look up (tracing) for ino (-66) [ 368.878240][ T5095] Bluetooth: hci3: unexpected event for opcode 0x202d [ 369.717010][T11447] Set syz1 is full, maxelem 65536 reached [ 369.755244][T11443] Set syz1 is full, maxelem 65536 reached [ 370.046438][T11441] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 370.049139][T11441] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 370.054686][T11456] lo speed is unknown, defaulting to 1000 [ 370.074814][T11441] vhci_hcd vhci_hcd.0: Device attached [ 370.104355][T11456] lo speed is unknown, defaulting to 1000 [ 370.186903][T11458] Set syz1 is full, maxelem 65536 reached [ 370.370217][ T5825] usb 40-1: SetAddress Request (6) to port 0 [ 370.374576][ T5825] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 370.630181][ T24] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 370.794491][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 370.805110][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.811888][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.817123][ T24] usb 5-1: Product: syz [ 370.818638][ T24] usb 5-1: Manufacturer: syz [ 370.830279][ T24] usb 5-1: SerialNumber: syz [ 370.888114][T11460] vhci_hcd: connection reset by peer [ 370.894674][ T5816] vhci_hcd vhci_hcd.1: stop threads [ 370.900218][ T5816] vhci_hcd vhci_hcd.1: release socket [ 370.904792][ T5816] vhci_hcd vhci_hcd.1: disconnect device [ 371.107633][T11472] lo speed is unknown, defaulting to 1000 [ 371.111693][T11472] lo speed is unknown, defaulting to 1000 [ 371.246236][T11481] overlayfs: failed to clone lowerpath [ 371.616913][ T24] cdc_ncm 5-1:1.0: bind() failure [ 371.640216][ T5845] usb 38-1: device descriptor read/8, error -110 [ 371.680530][ T24] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 371.686284][ T24] cdc_ncm 5-1:1.1: bind() failure [ 371.722118][ T24] usb 5-1: USB disconnect, device number 17 [ 372.075835][ C2] sr 2:0:0:0: [sr0] tag#24 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 372.078981][ C2] sr 2:0:0:0: [sr0] tag#24 CDB: Test Unit Ready [ 372.190943][T11490] Set syz1 is full, maxelem 65536 reached [ 372.643605][ T5845] usb usb38-port1: attempt power cycle [ 372.758095][T11497] Set syz1 is full, maxelem 65536 reached [ 372.931387][T11501] Set syz1 is full, maxelem 65536 reached [ 373.055815][T11516] program syz.2.1695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.215402][T11524] CIFS: iocharset name too long [ 373.221536][ T5845] usb usb38-port1: unable to enumerate USB device [ 373.522176][T11535] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 373.524829][T11535] overlayfs: overlapping lowerdir path [ 373.931084][T11538] overlayfs: failed to clone lowerpath [ 375.578284][ T5825] usb 40-1: device descriptor read/8, error -110 [ 375.816744][T11541] Set syz1 is full, maxelem 65536 reached [ 375.897902][T11543] netlink: 860 bytes leftover after parsing attributes in process `syz.2.1700'. [ 376.041645][ T5825] usb usb40-port1: attempt power cycle [ 376.176047][T11554] Set syz1 is full, maxelem 65536 reached [ 376.326472][T11560] overlayfs: failed to clone lowerpath [ 376.612652][ T5825] usb usb40-port1: unable to enumerate USB device [ 376.703439][T11563] pim6reg: entered allmulticast mode [ 376.726387][T11563] netlink: 'syz.2.1707': attribute type 1 has an invalid length. [ 376.729644][T11563] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1707'. [ 376.870255][T10379] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 377.030159][T10379] usb 6-1: Using ep0 maxpacket: 32 [ 377.033963][T10379] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 377.037628][T10379] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 8 [ 377.042729][T10379] usb 6-1: config 1 interface 0 has no altsetting 0 [ 377.048785][T10379] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.052124][T10379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.056246][T10379] usb 6-1: Product: ь [ 377.057556][T10379] usb 6-1: Manufacturer: К [ 377.060488][T10379] usb 6-1: SerialNumber: 侟餆썫⮃떉ე椸䃻짞ᥤ⬿Ҕ䜡흊櫼蜔ಕ喍Ƅ쬂鏼㒾⋞덋ᜍ칠냂獍䭢鰌짔ୖｰ￰ꎲ봉亨붨ꄓ롣譡䰃뒹樷꘭鐰꓾﹘Ⓓ菅螥츊矧㰴禯ꡳﮏҥቷ宜醓恛黋툑썤瑸㩨ܔ펯ᛞ꒶ꋡ [ 377.096949][T11564] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 377.500934][T11564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.525490][T11564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.543769][T11564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.549215][T11564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.554095][T11564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.557525][T11564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.566332][T11564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.569982][T11564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.125429][T10379] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 378.134858][T10379] usb 6-1: USB disconnect, device number 16 [ 378.521176][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.560353][T11576] Set syz1 is full, maxelem 65536 reached [ 379.152348][T11599] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 379.182317][T11600] binder: 11597:11600 ioctl c00c6211 0 returned -14 [ 379.247321][T11596] Set syz1 is full, maxelem 65536 reached [ 379.319737][ T41] kauditd_printk_skb: 10 callbacks suppressed [ 379.319775][ T41] audit: type=1800 audit(1786138355.285:105): pid=11604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1719" name="zoned" dev="configfs" ino=36472 res=0 errno=0 [ 379.334723][ T41] audit: type=1800 audit(1786138355.295:106): pid=11604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1719" name="size" dev="configfs" ino=36473 res=0 errno=0 [ 379.340973][ T41] audit: type=1800 audit(1786138355.305:107): pid=11604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1719" name="power" dev="configfs" ino=36474 res=0 errno=0 [ 379.441799][T11609] netlink: 860 bytes leftover after parsing attributes in process `syz.3.1722'. [ 380.051494][T11615] Set syz1 is full, maxelem 65536 reached [ 380.708885][T11634] overlayfs: failed to clone lowerpath [ 381.432448][T11639] Set syz1 is full, maxelem 65536 reached [ 381.523935][T11637] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 381.539935][T11637] bond0: (slave lo): Error: Device can not be enslaved while up [ 381.577818][T11649] netlink: 860 bytes leftover after parsing attributes in process `syz.1.1731'. [ 381.612339][T11637] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1728'. [ 381.645399][T11655] netlink: 'syz.2.1733': attribute type 1 has an invalid length. [ 381.683593][T11655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1733'. [ 381.687598][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'. [ 381.797659][T11664] lo speed is unknown, defaulting to 1000 [ 381.801612][T11664] lo speed is unknown, defaulting to 1000 [ 382.181802][T11673] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 382.183928][T11673] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 382.186720][T11673] vhci_hcd vhci_hcd.0: Device attached [ 382.293985][T11682] netlink: 860 bytes leftover after parsing attributes in process `syz.3.1742'. [ 382.430179][ T5825] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 382.547787][T11686] Set syz1 is full, maxelem 65536 reached [ 382.664415][ T41] audit: type=1800 audit(1786138358.635:108): pid=11691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1746" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 382.945986][T11674] vhci_hcd: connection reset by peer [ 382.948419][ T5816] vhci_hcd vhci_hcd.1: stop threads [ 382.950831][ T5816] vhci_hcd vhci_hcd.1: release socket [ 382.955032][ T5816] vhci_hcd vhci_hcd.1: disconnect device [ 382.959999][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1749'. [ 383.467664][T11672] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 383.471073][T11672] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 383.493584][T11672] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 383.496412][T11672] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 383.502675][T11672] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 383.508282][T11672] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 383.511801][T11672] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 383.518234][T11672] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 383.520711][T11672] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 383.780386][ T5846] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 383.822147][T11715] netlink: 860 bytes leftover after parsing attributes in process `syz.1.1752'. [ 383.900825][T11717] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 383.917310][T11717] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 383.921389][T11717] overlayfs: failed to look up (tracing) for ino (-66) [ 383.940252][ T5846] usb 5-1: Using ep0 maxpacket: 32 [ 383.946199][ T5846] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 383.951413][ T5846] usb 5-1: config 0 has no interface number 0 [ 383.955996][ T5846] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 383.963997][ T5846] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 383.972518][ T5846] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 10 [ 383.980802][ T5846] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 57855, setting to 1024 [ 383.989506][ T5846] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 384.006349][ T5846] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 384.012274][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.018548][ T5846] usb 5-1: Product: syz [ 384.021326][ T5846] usb 5-1: Manufacturer: syz [ 384.024693][ T5846] usb 5-1: SerialNumber: syz [ 384.034441][ T5846] usb 5-1: config 0 descriptor?? [ 384.058945][ T5846] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input8 [ 384.155206][ C2] bcm5974 5-1:0.119: trackpad urb failed: -1 [ 384.370299][ T5095] Bluetooth: hci0: command 0x0406 tx timeout [ 384.467466][ T24] usb 5-1: USB disconnect, device number 18 [ 385.312511][T11723] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 385.329342][T11723] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 385.333805][T11723] overlayfs: failed to look up (tracing) for ino (-66) [ 385.347606][T11725] Set syz1 is full, maxelem 65536 reached [ 385.562592][ T5095] Bluetooth: hci2: command 0x0406 tx timeout [ 385.562648][ T5749] Bluetooth: hci3: command 0x0406 tx timeout [ 385.565144][ T5750] Bluetooth: hci1: command 0x0406 tx timeout [ 385.999602][T11732] CIFS: iocharset name too long [ 386.027398][T11734] overlayfs: failed to clone lowerpath [ 386.283240][T11736] Set syz1 is full, maxelem 65536 reached [ 386.450211][ T5750] Bluetooth: hci0: command 0x0406 tx timeout [ 387.189382][T11754] overlayfs: failed to clone lowerpath [ 387.600919][ T5825] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 387.640225][ T5750] Bluetooth: hci3: command 0x0406 tx timeout [ 387.640405][ T5095] Bluetooth: hci2: command 0x0406 tx timeout [ 387.642232][ T5749] Bluetooth: hci1: command 0x0406 tx timeout [ 387.781451][T11748] Set syz1 is full, maxelem 65536 reached [ 388.257064][T11758] Set syz1 is full, maxelem 65536 reached [ 388.317439][T11766] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 388.389134][T11766] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 388.392217][T11766] overlayfs: failed to look up (tracing) for ino (-66) [ 388.727545][T11774] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 388.738333][T11774] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 388.741568][T11774] overlayfs: failed to look up (tracing) for ino (-66) [ 388.859031][T11776] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 388.869007][T11776] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 388.872238][T11776] overlayfs: failed to look up (tracing) for ino (-66) [ 389.458925][T11779] netlink: 860 bytes leftover after parsing attributes in process `syz.3.1770'. [ 389.720162][ T5749] Bluetooth: hci1: command 0x0406 tx timeout [ 390.084579][T11785] netlink: 860 bytes leftover after parsing attributes in process `syz.2.1772'. [ 390.587335][T11799] overlayfs: failed to clone lowerpath [ 391.026179][T11789] Set syz1 is full, maxelem 65536 reached [ 391.414345][T11800] Set syz1 is full, maxelem 65536 reached [ 391.461705][T11803] Set syz1 is full, maxelem 65536 reached [ 391.666638][T11817] netlink: 860 bytes leftover after parsing attributes in process `syz.0.1782'. [ 391.817318][T11824] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 391.892074][T11824] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 391.896195][T11824] overlayfs: failed to look up (tracing) for ino (-66) [ 391.970709][T11820] Set syz1 is full, maxelem 65536 reached [ 392.091495][T11829] 9pnet_virtio: no channels available for device syz [ 392.168337][T11827] netlink: 860 bytes leftover after parsing attributes in process `syz.2.1785'. [ 392.494440][T11835] Set syz1 is full, maxelem 65536 reached [ 392.545309][T11833] Set syz1 is full, maxelem 65536 reached [ 392.596776][T11837] Set syz1 is full, maxelem 65536 reached [ 392.826587][T11846] netlink: 860 bytes leftover after parsing attributes in process `syz.1.1791'. [ 392.933625][T11850] Set syz1 is full, maxelem 65536 reached [ 393.371950][T11867] 9pnet_virtio: no channels available for device syz [ 394.137581][ T5846] libceph: connect (1)[c::]:6789 error -22 [ 394.146400][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 394.269268][ T5846] libceph: connect (1)[c::]:6789 error -22 [ 394.272024][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 394.407990][T11871] ceph: No mds server is up or the cluster is laggy [ 394.543199][ T9] libceph: connect (1)[c::]:6789 error -22 [ 394.545964][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 394.887850][T11888] netlink: 860 bytes leftover after parsing attributes in process `syz.1.1804'. [ 394.896206][T11883] Set syz1 is full, maxelem 65536 reached [ 395.016054][T11895] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1805'. [ 395.146977][T11901] Set syz1 is full, maxelem 65536 reached [ 395.918092][ T5825] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 395.937011][ T5825] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 396.235949][T11966] fido_id[11966]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 396.330278][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1814'. [ 396.363893][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 396.505957][T11972] Set syz1 is full, maxelem 65536 reached [ 396.645980][T11976] Set syz1 is full, maxelem 65536 reached [ 396.693696][T11983] Set syz1 is full, maxelem 65536 reached [ 396.814972][ T41] audit: type=1800 audit(1786138372.785:109): pid=11997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1821" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 396.897116][T11999] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 399.969328][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'. [ 400.019937][T12021] Set syz1 is full, maxelem 65536 reached [ 400.121341][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1826'. [ 400.375063][T12050] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 401.092544][T12050] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 401.097770][T12050] overlayfs: failed to look up (tracing) for ino (-66) [ 401.866449][T12059] netlink: 'syz.0.1840': attribute type 2 has an invalid length. [ 401.868967][T12059] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1840'. [ 401.884958][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'. [ 401.897637][T12059] syz.0.1840 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 401.902546][T12059] CPU: 1 UID: 0 PID: 12059 Comm: syz.0.1840 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.902569][T12059] Tainted: [L]=SOFTLOCKUP [ 401.902574][T12059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 401.902581][T12059] Call Trace: [ 401.902588][T12059] [ 401.902593][T12059] dump_stack_lvl+0x100/0x190 [ 401.902616][T12059] dump_header+0xfb/0x606 [ 401.902631][T12059] oom_kill_process.cold+0xd/0x330 [ 401.902647][T12059] out_of_memory+0x340/0x14f0 [ 401.902663][T12059] ? __pfx_out_of_memory+0x10/0x10 [ 401.902680][T12059] mem_cgroup_out_of_memory+0xc6/0x130 [ 401.902695][T12059] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 401.902709][T12059] ? find_held_lock+0x2b/0x80 [ 401.902726][T12059] ? do_raw_spin_unlock+0x145/0x1e0 [ 401.902739][T12059] ? _raw_spin_unlock+0x28/0x50 [ 401.902760][T12059] try_charge_memcg+0x6e5/0xdf0 [ 401.902779][T12059] ? __pfx_try_charge_memcg+0x10/0x10 [ 401.902796][T12059] ? find_held_lock+0x2b/0x80 [ 401.902809][T12059] ? rcu_read_unlock+0x17/0x60 [ 401.902825][T12059] ? rcu_read_unlock+0x17/0x60 [ 401.902847][T12059] __memcg_slab_post_alloc_hook+0x469/0x1160 [ 401.902869][T12059] ? kasan_save_track+0x14/0x30 [ 401.902886][T12059] kmem_cache_alloc_noprof+0x587/0x6a0 [ 401.902902][T12059] ? stack_trace_save+0x8e/0xc0 [ 401.902918][T12059] ? alloc_empty_file+0x5b/0x1c0 [ 401.902935][T12059] alloc_empty_file+0x5b/0x1c0 [ 401.902967][T12059] path_openat+0xe7/0x4280 [ 401.902982][T12059] ? kasan_save_track+0x14/0x30 [ 401.902996][T12059] ? __kasan_slab_alloc+0x89/0x90 [ 401.903012][T12059] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 401.903041][T12059] ? do_getname+0x35/0x390 [ 401.903055][T12059] ? do_sys_openat2+0xc7/0x1e0 [ 401.903068][T12059] ? __ia32_compat_sys_openat+0x12d/0x210 [ 401.903083][T12059] ? __do_fast_syscall_32+0xe7/0x970 [ 401.903104][T12059] ? __pfx_path_openat+0x10/0x10 [ 401.903120][T12059] do_file_open+0x20e/0x430 [ 401.903131][T12059] ? __lock_acquire+0x49f/0x1a40 [ 401.903151][T12059] ? __pfx_do_file_open+0x10/0x10 [ 401.903176][T12059] ? _raw_spin_unlock+0x28/0x50 [ 401.903190][T12059] ? alloc_fd+0x471/0x7a0 [ 401.903206][T12059] do_sys_openat2+0x10f/0x1e0 [ 401.903222][T12059] ? __pfx_do_sys_openat2+0x10/0x10 [ 401.903237][T12059] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 401.903258][T12059] __ia32_compat_sys_openat+0x12d/0x210 [ 401.903275][T12059] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 401.903297][T12059] __do_fast_syscall_32+0xe7/0x970 [ 401.903313][T12059] ? lockdep_hardirqs_on+0x78/0x100 [ 401.903329][T12059] do_fast_syscall_32+0x32/0x70 [ 401.903345][T12059] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 401.903360][T12059] RIP: 0023:0xf7f65fec [ 401.903380][T12059] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 401.903387][T12059] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 401.903400][T12059] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800002c0 [ 401.903407][T12059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.903414][T12059] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.903422][T12059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.903429][T12059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 401.903446][T12059] [ 401.904156][T12059] memory: usage 8kB, limit 8kB, failcnt 402 [ 402.014547][T12059] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 402.017424][T12059] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 402.020540][T12059] Memory cgroup stats for /syz0/test: [ 402.020808][T12059] cache 0 [ 402.024139][T12059] rss 0 [ 402.025073][T12059] rss_huge 0 [ 402.026268][T12059] shmem 0 [ 402.027478][T12059] mapped_file 0 [ 402.028877][T12059] dirty 0 [ 402.030832][T12059] writeback 0 [ 402.032242][T12059] workingset_refault_anon 0 [ 402.034105][T12059] workingset_refault_file 0 [ 402.035935][T12059] swap 0 [ 402.037111][T12059] swapcached 0 [ 402.038486][T12059] pgpgin 0 [ 402.039742][T12059] pgpgout 0 [ 402.042364][T12059] pgfault 99 [ 402.047007][T12059] pgmajfault 2 [ 402.048391][T12059] inactive_anon 0 [ 402.049875][T12059] active_anon 0 [ 402.051810][T12059] inactive_file 0 [ 402.053308][T12059] active_file 0 [ 402.054776][T12059] unevictable 0 [ 402.056177][T12059] hierarchical_memory_limit 8192 [ 402.057935][T12059] hierarchical_memsw_limit 9223372036854771712 [ 402.060776][T12059] total_cache 0 [ 402.062228][T12059] total_rss 0 [ 402.063648][T12059] total_rss_huge 0 [ 402.065176][T12059] total_shmem 0 [ 402.066585][T12059] total_mapped_file 0 [ 402.068168][T12059] total_dirty 0 [ 402.069585][T12059] total_writeback 0 [ 402.071921][T12059] total_workingset_refault_anon 0 [ 402.073902][T12059] total_workingset_refault_file 0 [ 402.075825][T12059] total_swap 0 [ 402.076938][T12059] total_swapcached 0 [ 402.078523][T12059] total_pgpgin 0 [ 402.079971][T12059] total_pgpgout 0 [ 402.082139][T12059] total_pgfault 99 [ 402.083707][T12059] total_pgmajfault 2 [ 402.085360][T12059] total_inactive_anon 0 [ 402.087017][T12059] total_active_anon 0 [ 402.088606][T12059] total_inactive_file 0 [ 402.090889][T12059] total_active_file 0 [ 402.092544][T12059] total_unevictable 0 [ 402.094182][T12059] anon_cost 0 [ 402.095543][T12059] file_cost 0 [ 402.096880][T12059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.1840,pid=12058,uid=0 [ 402.108358][T12059] Memory cgroup out of memory: Killed process 12058 (syz.0.1840) total-vm:104204kB, anon-rss:244kB, file-rss:23528kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 403.657689][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 403.661392][T12076] netlink: 860 bytes leftover after parsing attributes in process `syz.1.1844'. [ 403.689052][T12067] Set syz1 is full, maxelem 65536 reached [ 404.092211][T12087] netlink: 860 bytes leftover after parsing attributes in process `syz.1.1856'. [ 404.420324][ T6759] libceph: connect (1)[c::]:6789 error -22 [ 404.426775][ T6759] libceph: mon0 (1)[c::]:6789 connect error [ 404.544252][T12091] syz.2.1850 (12091): drop_caches: 2 [ 404.690994][ T6759] libceph: connect (1)[c::]:6789 error -22 [ 404.692869][ T6759] libceph: mon0 (1)[c::]:6789 connect error [ 404.792714][T12093] ceph: No mds server is up or the cluster is laggy [ 404.938395][T12097] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 404.961260][T12110] Set syz1 is full, maxelem 65536 reached [ 405.200606][ T6759] libceph: connect (1)[c::]:6789 error -22 [ 405.202998][ T6759] libceph: mon0 (1)[c::]:6789 connect error [ 406.027892][T12143] netlink: 860 bytes leftover after parsing attributes in process `syz.3.1860'. [ 407.066570][T12156] Set syz1 is full, maxelem 65536 reached [ 407.318464][T12153] 9pnet_virtio: no channels available for device syz [ 407.663510][T12170] netlink: 860 bytes leftover after parsing attributes in process `syz.2.1869'. [ 407.919920][T12172] fuse: fd is not a fuse device [ 407.935787][T12175] syz.0.1868 (12175): drop_caches: 2 [ 407.938224][T12172] fuse: fd is not a fuse device [ 408.478521][T12174] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 408.696828][T12178] Set syz1 is full, maxelem 65536 reached [ 409.357427][ T41] audit: type=1326 audit(1786138385.325:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.0.1872" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 409.371626][ T41] audit: type=1326 audit(1786138385.325:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.0.1872" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 409.384902][ T41] audit: type=1326 audit(1786138385.325:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.0.1872" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 409.402206][ T41] audit: type=1326 audit(1786138385.325:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.0.1872" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 409.418827][ T41] audit: type=1326 audit(1786138385.325:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.0.1872" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 409.434960][ T41] audit: type=1326 audit(1786138385.325:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.0.1872" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 409.447302][ T41] audit: type=1326 audit(1786138385.325:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.0.1872" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 409.460145][ T41] audit: type=1326 audit(1786138385.345:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.0.1872" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 409.466836][ T41] audit: type=1326 audit(1786138385.345:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.0.1872" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 409.474058][ T41] audit: type=1326 audit(1786138385.345:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.0.1872" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f65fec code=0x7ffc0000 [ 410.007623][T12187] Set syz1 is full, maxelem 65536 reached [ 410.298275][T12197] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 410.307923][T12199] syzkaller0: entered promiscuous mode [ 410.309822][T12199] syzkaller0: entered allmulticast mode [ 410.459036][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1874'. [ 410.563501][T12201] 9pnet_virtio: no channels available for device syz [ 410.821184][T12204] Set syz1 is full, maxelem 65536 reached [ 412.294928][T12215] Set syz1 is full, maxelem 65536 reached [ 412.551765][T12221] netlink: 860 bytes leftover after parsing attributes in process `syz.2.1879'. [ 413.411120][T12234] 9pnet_virtio: no channels available for device syz [ 414.859398][T12228] Set syz1 is full, maxelem 65536 reached [ 415.070384][T12241] Set syz1 is full, maxelem 65536 reached [ 415.246693][T12246] Set syz1 is full, maxelem 65536 reached [ 415.655181][T12255] netlink: 860 bytes leftover after parsing attributes in process `syz.3.1891'. [ 415.924050][T12260] netlink: 860 bytes leftover after parsing attributes in process `syz.0.1900'. [ 415.952133][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'. [ 416.364423][T12272] overlayfs: missing 'lowerdir' [ 416.468647][T12273] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 416.702467][T12273] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 416.705792][T12273] overlayfs: failed to look up (tracing) for ino (-66) [ 416.854324][T12275] Set syz1 is full, maxelem 65536 reached [ 419.458467][T12291] trusted_key: encrypted_key: insufficient parameters specified [ 419.464860][T12291] trusted_key: encrypted_key: master key parameter 'JGiN:Z2*{yz\ [ 419.464860][T12291] 4)_?|M3;\S- (\O6!.j%Xc@cEwܝ! ' is invalid [ 419.527278][T12285] Set syz1 is full, maxelem 65536 reached [ 419.645689][T12294] 9pnet_virtio: no channels available for device syz [ 419.694908][T12295] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 419.710166][T12295] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 419.713294][T12295] overlayfs: failed to look up (tracing) for ino (-66) [ 419.741934][T12300] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 419.765693][T12300] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 419.770189][T12300] overlayfs: failed to look up (tracing) for ino (-66) [ 420.095524][T12305] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 420.112233][T12305] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 420.116370][T12305] overlayfs: failed to look up (tracing) for ino (-66) [ 420.985314][T12309] Set syz1 is full, maxelem 65536 reached [ 421.275198][T12313] Set syz1 is full, maxelem 65536 reached [ 421.932145][T12329] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 422.056511][T12329] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 422.090746][T12329] overlayfs: failed to look up (tracing) for ino (-66) [ 424.004405][T12339] Set syz1 is full, maxelem 65536 reached [ 424.248445][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1921'. [ 424.446746][T12364] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 424.487828][T12364] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 424.491194][T12364] overlayfs: failed to look up (tracing) for ino (-66) [ 424.763643][T12368] Set syz1 is full, maxelem 65536 reached [ 425.442903][T12381] CIFS: iocharset name too long [ 425.497795][T12379] netlink: 'syz.3.1920': attribute type 11 has an invalid length. [ 425.501405][T12379] netlink: 448 bytes leftover after parsing attributes in process `syz.3.1920'. [ 425.978299][T12390] Set syz1 is full, maxelem 65536 reached [ 426.285333][T12397] Set syz1 is full, maxelem 65536 reached [ 426.458746][T12402] Set syz1 is full, maxelem 65536 reached [ 426.529977][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1926'. [ 427.523878][T12429] netlink: 892 bytes leftover after parsing attributes in process `syz.0.1931'. [ 427.887411][T12432] Set syz1 is full, maxelem 65536 reached [ 427.989735][T12442] overlay: Unknown parameter '/' [ 428.272418][T12439] Set syz1 is full, maxelem 65536 reached [ 429.149676][T12472] Set syz1 is full, maxelem 65536 reached [ 429.394351][T12483] Set syz1 is full, maxelem 65536 reached [ 429.535931][T12491] Set syz1 is full, maxelem 65536 reached [ 429.611406][T12496] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 429.665355][T12496] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 429.672714][T12496] overlayfs: failed to look up (tracing) for ino (-66) [ 429.911008][T12508] overlayfs: failed to clone lowerpath [ 430.015296][T12505] Set syz1 is full, maxelem 65536 reached [ 430.119580][T12510] netlink: 'syz.2.1957': attribute type 11 has an invalid length. [ 430.123274][T12510] netlink: 448 bytes leftover after parsing attributes in process `syz.2.1957'. [ 430.212584][T12512] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20001 [ 430.318779][T12514] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 430.630851][T12516] Set syz1 is full, maxelem 65536 reached [ 431.485404][T12534] overlay: Unknown parameter '/' [ 431.554156][T12533] Set syz1 is full, maxelem 65536 reached [ 433.340664][T12565] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 433.352855][T12565] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 433.356105][T12565] overlayfs: failed to look up (tracing) for ino (-66) [ 433.365029][T12566] overlayfs: failed to clone lowerpath [ 433.522090][T12569] netlink: 'syz.2.1982': attribute type 2 has an invalid length. [ 433.825647][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'. [ 433.925121][T12574] Bluetooth: ISO socket layer initialized [ 434.434576][T12579] Set syz1 is full, maxelem 65536 reached [ 435.199157][T12598] Set syz1 is full, maxelem 65536 reached [ 435.400468][ T5845] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 435.464228][T12609] Set syz1 is full, maxelem 65536 reached [ 435.582294][ T5845] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 435.585941][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 435.588581][T12616] overlayfs: failed to clone lowerpath [ 435.589195][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 435.596553][ T5845] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 435.599382][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.601983][ T5845] usb 7-1: Product: syz [ 435.603956][ T5845] usb 7-1: Manufacturer: syz [ 435.605557][ T5845] usb 7-1: SerialNumber: syz [ 435.610995][ T5845] usb 7-1: config 0 descriptor?? [ 435.615818][T12601] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 435.660360][ T5845] rc_core: IR keymap rc-streamzap not found [ 435.663334][ T5845] Registered IR keymap rc-empty [ 435.665438][ T5845] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 435.669519][ T5845] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input9 [ 436.003680][T12630] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 436.013933][T12630] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 436.017161][T12630] overlayfs: failed to look up (tracing) for ino (-66) [ 436.896666][ T5749] Bluetooth: hci1: unexpected cc 0x1407 length: 11 > 9 [ 436.902120][ T5749] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 436.949062][T10379] usb 7-1: USB disconnect, device number 25 [ 437.115069][T12634] Set syz1 is full, maxelem 65536 reached [ 437.275117][T12640] zero sized request [ 437.672310][T12645] Set syz1 is full, maxelem 65536 reached [ 437.748756][T12655] overlay: Unknown parameter '/' [ 438.924704][T12668] Set syz1 is full, maxelem 65536 reached [ 438.933150][T12672] overlayfs: failed to clone lowerpath [ 439.262478][T12681] Set syz1 is full, maxelem 65536 reached [ 439.456735][T12685] Set syz1 is full, maxelem 65536 reached [ 439.797069][T12690] Set syz1 is full, maxelem 65536 reached [ 439.961114][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.338399][ T41] kauditd_printk_skb: 9 callbacks suppressed [ 440.338412][ T41] audit: type=1800 audit(1786138416.305:129): pid=12699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2020" name="memory_backed" dev="configfs" ino=41598 res=0 errno=0 [ 440.350676][T12699] netlink: 'syz.2.2020': attribute type 1 has an invalid length. [ 440.353160][ T41] audit: type=1800 audit(1786138416.315:130): pid=12699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2020" name="zoned" dev="configfs" ino=41599 res=0 errno=0 [ 440.359441][T12699] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2020'. [ 440.362677][T12699] netlink: 'syz.2.2020': attribute type 2 has an invalid length. [ 440.364055][T12700] 9pnet_virtio: no channels available for device syz [ 440.365255][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2020'. [ 440.709395][T12704] Set syz1 is full, maxelem 65536 reached [ 441.155884][T12718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2034'. [ 441.240066][T12725] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 441.247487][T10379] lo speed is unknown, defaulting to 1000 [ 441.312400][T12723] Set syz1 is full, maxelem 65536 reached [ 441.548977][T12735] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 441.551649][T12737] overlay: Unknown parameter '/' [ 441.569393][T12735] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 441.573788][T12735] overlayfs: failed to look up (tracing) for ino (-66) [ 441.939654][T12746] 9pnet_virtio: no channels available for device syz [ 444.092201][T12765] Set syz1 is full, maxelem 65536 reached [ 444.262994][T12778] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 444.280749][T12776] Set syz1 is full, maxelem 65536 reached [ 444.280925][T12778] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 444.285677][T12778] overlayfs: failed to look up (tracing) for ino (-66) [ 444.674552][T12784] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 444.705686][T12784] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 444.708872][T12784] overlayfs: failed to look up (tracing) for ino (-66) [ 445.779547][T12790] FAULT_INJECTION: forcing a failure. [ 445.779547][T12790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.783736][T12790] CPU: 2 UID: 0 PID: 12790 Comm: syz.0.2049 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.783754][T12790] Tainted: [L]=SOFTLOCKUP [ 445.783758][T12790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 445.783765][T12790] Call Trace: [ 445.783769][T12790] [ 445.783774][T12790] dump_stack_lvl+0x100/0x190 [ 445.783794][T12790] should_fail_ex.cold+0x5/0xa [ 445.783807][T12790] _copy_to_user+0x32/0xd0 [ 445.783828][T12790] do_ipv6_getsockopt+0xd12/0x32c0 [ 445.783867][T12790] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 445.783885][T12790] ? _parse_integer_limit+0x1ac/0x220 [ 445.783904][T12790] ? __pfx___might_resched+0x10/0x10 [ 445.783926][T12790] ? aa_sk_perm+0x309/0xaa0 [ 445.783944][T12790] ? ipv6_getsockopt+0x12f/0x2a0 [ 445.783959][T12790] ipv6_getsockopt+0x12f/0x2a0 [ 445.783976][T12790] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 445.783992][T12790] ? aa_sock_opt_perm+0xfe/0x1b0 [ 445.784003][T12790] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 445.784027][T12790] do_sock_getsockopt+0x50a/0x6e0 [ 445.784039][T12790] ? __lock_acquire+0x49f/0x1a40 [ 445.784058][T12790] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 445.784073][T12790] ? find_held_lock+0x2b/0x80 [ 445.784091][T12790] ? __fget_files+0x21f/0x3d0 [ 445.784106][T12790] __sys_getsockopt+0x133/0x1d0 [ 445.784125][T12790] ? __ia32_sys_getsockopt+0xbc/0x160 [ 445.784145][T12790] __ia32_sys_getsockopt+0xbc/0x160 [ 445.784160][T12790] ? __do_fast_syscall_32+0x98/0x970 [ 445.784179][T12790] ? lockdep_hardirqs_on+0x78/0x100 [ 445.784195][T12790] __do_fast_syscall_32+0xe7/0x970 [ 445.784211][T12790] ? lockdep_hardirqs_on+0x78/0x100 [ 445.784227][T12790] do_fast_syscall_32+0x32/0x70 [ 445.784244][T12790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.784259][T12790] RIP: 0023:0xf7f65fec [ 445.784273][T12790] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 445.784278][T12790] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 445.784291][T12790] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 445.784298][T12790] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000080000140 [ 445.784305][T12790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.784312][T12790] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 445.784318][T12790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.784332][T12790] [ 446.032755][T12797] overlayfs: failed to clone lowerpath [ 446.210419][T12799] overlay: Unknown parameter '/' [ 446.573335][T12802] Set syz1 is full, maxelem 65536 reached [ 448.500292][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 448.650269][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 448.656468][ T24] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 448.662082][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.665551][ T24] usb 6-1: Product: syz [ 448.667314][ T24] usb 6-1: Manufacturer: syz [ 448.669299][ T24] usb 6-1: SerialNumber: syz [ 448.780491][T12831] overlayfs: failed to clone lowerpath [ 448.898045][T12818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2055'. [ 449.506364][T12843] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 449.536173][T12842] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 449.860235][T12843] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 449.864717][T12843] overlayfs: failed to look up (tracing) for ino (-66) [ 450.897237][T12845] Set syz1 is full, maxelem 65536 reached [ 450.965318][T12848] IPVS: sh: FWM 3 0x00000003 - no destination available [ 450.967898][ C2] IPVS: sh: FWM 3 0x00000003 - no destination available [ 451.154311][T12852] Set syz1 is full, maxelem 65536 reached [ 451.189215][ T24] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 451.202349][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 451.214828][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 451.217472][ T24] usb 6-1: media controller created [ 451.236460][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 451.251834][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 451.271744][ T24] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 451.277263][ T24] usb 6-1: USB disconnect, device number 17 [ 451.385961][T12857] Set syz1 is full, maxelem 65536 reached [ 451.543951][T12870] comedi comedi0: comedi_config --init_data is deprecated [ 451.894704][T12880] Set syz1 is full, maxelem 65536 reached [ 451.894928][T12884] xt_bpf: check failed: parse error [ 452.083222][T12890] fuse: Bad value for 'user_id' [ 452.084957][T12890] fuse: Bad value for 'user_id' [ 452.309097][T12892] Set syz1 is full, maxelem 65536 reached [ 452.340169][ T5845] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 452.490341][ T5845] usb 7-1: Using ep0 maxpacket: 8 [ 452.494414][ T5845] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 452.497913][ T5845] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 452.502078][ T5845] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 452.506176][ T5845] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.510541][ T5845] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.515831][ T5845] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 452.519578][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.586260][T12899] overlayfs: failed to clone lowerpath [ 452.749653][ T5845] usb 7-1: GET_CAPABILITIES returned 0 [ 452.752380][ T5845] usbtmc 7-1:16.0: can't read capabilities [ 452.958536][ T850] usb 7-1: USB disconnect, device number 26 [ 453.562760][ T6787] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.579592][T12903] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2080'. [ 453.682165][ T6787] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.753279][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 453.759734][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 453.764712][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 453.770025][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 453.773720][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 453.820242][ T24] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 453.842758][ T6787] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.945837][T12914] Set syz1 is full, maxelem 65536 reached [ 453.965178][ T6787] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.000428][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 454.022600][ T24] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 454.027503][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.037543][ T24] usb 7-1: Product: syz [ 454.043232][ T24] usb 7-1: Manufacturer: syz [ 454.045219][ T24] usb 7-1: SerialNumber: syz [ 454.074362][T12909] lo speed is unknown, defaulting to 1000 [ 454.094990][T12909] lo speed is unknown, defaulting to 1000 [ 454.290664][T12904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2079'. [ 454.308392][ T6787] bridge_slave_1: left allmulticast mode [ 454.310617][ T6787] bridge_slave_1: left promiscuous mode [ 454.314982][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.322847][ T6787] bridge_slave_0: left allmulticast mode [ 454.325189][ T6787] bridge_slave_0: left promiscuous mode [ 454.328505][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.438231][ T6787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.443186][ T6787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.446991][ T6787] bond0 (unregistering): Released all slaves [ 454.451986][ T6787] bond1 (unregistering): Released all slaves [ 454.745924][T12909] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.749064][T12909] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.752207][T12909] bridge_slave_0: entered allmulticast mode [ 454.755164][T12909] bridge_slave_0: entered promiscuous mode [ 454.761261][ T5447] 8021q: adding VLAN 0 to HW filter on device eth1 [ 454.764599][T12909] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.767963][T12909] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.771297][T12909] bridge_slave_1: entered allmulticast mode [ 454.776586][T12909] bridge_slave_1: entered promiscuous mode [ 454.810861][T12909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.828699][T12909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.842452][T12929] Set syz1 is full, maxelem 65536 reached [ 454.860833][T12909] team0: Port device team_slave_0 added [ 454.864067][T12909] team0: Port device team_slave_1 added [ 454.881487][T12909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.884367][T12909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.895021][T12909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.904970][T12909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.907104][T12909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.915728][T12909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.939162][ T6787] hsr_slave_0: left promiscuous mode [ 454.941834][ T6787] hsr_slave_1: left promiscuous mode [ 454.944838][ T6787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.947855][ T6787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.952833][ T6787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.956316][ T6787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.972226][ T6787] veth1_macvtap: left promiscuous mode [ 454.974096][ T6787] veth0_macvtap: left promiscuous mode [ 454.976044][ T6787] veth1_vlan: left promiscuous mode [ 454.977684][ T6787] veth0_vlan: left promiscuous mode [ 455.213009][ T6787] team0 (unregistering): Port device team_slave_1 removed [ 455.227579][ T6787] team0 (unregistering): Port device team_slave_0 removed [ 455.307310][ T171] smbdirect: ib_dev[syz2] removed [ 455.313972][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 455.316926][ T5824] lo speed is unknown, defaulting to 1000 [ 455.318763][ T5824] infiniband syz2: ib_query_port failed (-19) [ 455.320641][T12909] hsr_slave_0: entered promiscuous mode [ 455.324086][T12909] hsr_slave_1: entered promiscuous mode [ 455.326875][T12909] debugfs: 'hsr0' already exists in 'hsr' [ 455.328559][T12909] Cannot create hsr debugfs directory [ 455.880263][ T5749] Bluetooth: hci2: command tx timeout [ 456.010189][T12909] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 456.017364][T12909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 456.021446][T12909] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 456.028385][T12909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.035231][T12909] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 456.045779][T12909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.052513][T12909] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 456.064163][T12909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 456.128278][T13003] overlayfs: failed to clone lowerpath [ 456.166028][T12909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.187861][T12909] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.195206][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.197890][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.208646][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.211729][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.554380][ T24] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 456.564833][ T24] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 456.570601][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 456.573216][ T24] usb 7-1: media controller created [ 456.588830][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 456.615322][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 456.637774][ T24] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 456.645376][ T24] usb 7-1: USB disconnect, device number 27 [ 456.706070][T13013] Set syz1 is full, maxelem 65536 reached [ 456.733248][T12909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.758646][T12909] veth0_vlan: entered promiscuous mode [ 456.764356][T12909] veth1_vlan: entered promiscuous mode [ 456.780805][T12909] veth0_macvtap: entered promiscuous mode [ 456.787292][T12909] veth1_macvtap: entered promiscuous mode [ 456.798592][T12909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.805160][T12909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.831459][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.839162][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.843842][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.847740][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.878107][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.881706][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.902986][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.906041][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.402679][T13023] Set syz1 is full, maxelem 65536 reached [ 457.465323][T13030] Set syz1 is full, maxelem 65536 reached [ 457.679498][T13043] Set syz1 is full, maxelem 65536 reached [ 457.782517][T13049] Set syz1 is full, maxelem 65536 reached [ 457.831768][T13058] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 457.960817][ T5749] Bluetooth: hci2: command tx timeout [ 458.013531][T13062] Set syz1 is full, maxelem 65536 reached [ 458.252833][T13071] Set syz1 is full, maxelem 65536 reached [ 458.575419][T13078] Set syz1 is full, maxelem 65536 reached [ 458.632832][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 458.679501][T13082] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 458.684108][T13082] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 458.687434][T13082] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 458.692010][T13082] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 458.695305][T13082] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 458.698412][T13082] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead [ 458.703130][T13082] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead [ 458.706378][T13082] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 458.709495][T13082] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 458.713641][T13082] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 458.717053][T13082] jffs2: Further such events for this erase block will not be printed [ 458.722427][T13082] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 458.725186][T13082] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 458.727251][T13082] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 458.734457][T13085] overlayfs: failed to resolve './file0': -2 [ 458.739068][T13082] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 458.742675][T13082] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 458.785173][T13087] gadgetfs: bound to dummy_udc driver [ 458.794786][T13082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.799165][T13082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.941260][T13090] Set syz1 is full, maxelem 65536 reached [ 459.546710][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.550221][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.789087][T13116] Set syz1 is full, maxelem 65536 reached [ 460.040493][ T5749] Bluetooth: hci2: command tx timeout [ 460.720279][T13144] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 460.806018][T13147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead [ 460.810031][T13147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x5aa4 instead [ 460.814147][T13147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x0003 instead [ 460.818173][T13147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0x0009 instead [ 460.822015][T13147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000004c: 0x0b5e instead [ 460.825836][T13147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0140 instead [ 460.829532][T13147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000084: 0x0010 instead [ 460.833633][T13147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000100: 0x642f instead [ 460.837375][T13147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000104: 0x6d2f instead [ 460.842822][T13147] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000108: 0x0023 instead [ 460.846174][T13147] jffs2: Further such events for this erase block will not be printed [ 460.849012][T13147] jffs2: Empty flash at 0x00000308 ends at 0x0000030c [ 460.851436][T13147] jffs2: Empty flash at 0x00000330 ends at 0x00000334 [ 460.853521][T13147] jffs2: Empty flash at 0x0000034c ends at 0x00000350 [ 460.867840][T13147] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 460.870923][T13147] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 461.015131][T13146] overlayfs: failed to resolve './file0': -2 [ 461.580214][ T5845] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 461.752452][ T5845] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 461.755088][ T5845] usb 6-1: config 1 has no interface number 0 [ 461.758716][ T5845] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 461.762185][ T5845] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 461.765259][ T5845] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.772209][ T5845] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 461.775097][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.777801][ T5845] usb 6-1: Product: syz [ 461.779041][ T5845] usb 6-1: Manufacturer: syz [ 461.780660][ T5845] usb 6-1: SerialNumber: syz [ 461.784039][T13147] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 461.787707][T13157] Set syz1 is full, maxelem 65536 reached [ 462.013217][ T5845] usb 6-1: Error in usbnet_get_endpoints (-71) [ 462.026679][ T5845] usb 6-1: USB disconnect, device number 18 [ 462.051028][T13162] fuse: fd is not a fuse device [ 462.120972][ T5749] Bluetooth: hci2: command tx timeout [ 463.361493][T13192] overlayfs: failed to clone lowerpath [ 464.823258][T13207] gadgetfs: bound to dummy_udc driver [ 465.071987][T13220] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 465.074166][T13220] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 465.087947][T13220] vhci_hcd vhci_hcd.0: Device attached [ 465.264023][T13225] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 465.326266][T13226] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 465.424110][T13216] Set syz1 is full, maxelem 65536 reached [ 465.444724][T13226] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 465.448081][T13226] overlayfs: failed to look up (tracing) for ino (-66) [ 466.261200][T13221] vhci_hcd: connection closed [ 466.261508][ T5816] vhci_hcd vhci_hcd.1: stop threads [ 466.265832][ T5816] vhci_hcd vhci_hcd.1: release socket [ 466.268326][ T5816] vhci_hcd vhci_hcd.1: disconnect device [ 466.280197][T10379] usb 40-1: enqueue for inactive port 0 [ 466.771981][T10379] usb usb40-port1: attempt power cycle [ 467.361115][T10379] usb usb40-port1: unable to enumerate USB device [ 467.595347][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 467.601200][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 467.609222][ T5750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 467.616968][ T5750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 467.620668][ T5750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 467.857178][T13253] lo speed is unknown, defaulting to 1000 [ 467.895965][T13273] syzkaller0: entered promiscuous mode [ 467.897813][T13273] syzkaller0: entered allmulticast mode [ 468.086486][T13253] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.088916][T13253] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.091503][T13253] bridge_slave_0: entered allmulticast mode [ 468.094469][T13253] bridge_slave_0: entered promiscuous mode [ 468.098586][T13253] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.112527][T13253] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.121122][T13253] bridge_slave_1: entered allmulticast mode [ 468.125362][T13253] bridge_slave_1: entered promiscuous mode [ 468.158776][T13253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.167028][T13253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.189420][T13287] FAULT_INJECTION: forcing a failure. [ 468.189420][T13287] name failslab, interval 1, probability 0, space 0, times 0 [ 468.195330][T13287] CPU: 0 UID: 0 PID: 13287 Comm: syz.1.2168 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.195360][T13287] Tainted: [L]=SOFTLOCKUP [ 468.195367][T13287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 468.195377][T13287] Call Trace: [ 468.195384][T13287] [ 468.195391][T13287] dump_stack_lvl+0x100/0x190 [ 468.195418][T13287] should_fail_ex.cold+0x5/0xa [ 468.195439][T13287] should_failslab+0xc2/0x120 [ 468.195464][T13287] kmem_cache_alloc_noprof+0x91/0x6a0 [ 468.195485][T13287] ? d_instantiate+0x8a/0xb0 [ 468.195505][T13287] ? d_instantiate+0x8a/0xb0 [ 468.195525][T13287] ? alloc_empty_file+0x5b/0x1c0 [ 468.195552][T13287] alloc_empty_file+0x5b/0x1c0 [ 468.195582][T13287] alloc_file_pseudo+0x183/0x290 [ 468.195607][T13287] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 468.195629][T13287] ? inode_init_always_gfp+0xc98/0xfb0 [ 468.195653][T13287] sock_alloc_file+0x50/0x210 [ 468.195682][T13287] do_accept+0x242/0x530 [ 468.195703][T13287] ? do_raw_spin_lock+0x128/0x260 [ 468.195725][T13287] ? __pfx_do_accept+0x10/0x10 [ 468.195750][T13253] team0: Port device team_slave_0 added [ 468.195760][T13287] __sys_accept4+0x108/0x200 [ 468.195783][T13287] ? __pfx___sys_accept4+0x10/0x10 [ 468.195806][T13287] ? ksys_write+0x1ac/0x250 [ 468.195827][T13287] __ia32_sys_accept4+0x94/0x100 [ 468.195848][T13287] ? lockdep_hardirqs_on+0x78/0x100 [ 468.195874][T13287] __do_fast_syscall_32+0xe7/0x970 [ 468.195899][T13287] ? lockdep_hardirqs_on+0x78/0x100 [ 468.195924][T13287] do_fast_syscall_32+0x32/0x70 [ 468.195950][T13287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 468.195972][T13287] RIP: 0023:0xf703efec [ 468.195994][T13287] Code: Unable to access opcode bytes at 0xf703efc2. [ 468.196001][T13287] RSP: 002b:00000000f540c50c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 468.196019][T13287] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 468.196030][T13287] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000000 [ 468.196040][T13287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 468.196049][T13287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.196059][T13287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.196082][T13287] [ 468.272183][T13253] team0: Port device team_slave_1 added [ 468.289117][T13253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.294825][T13253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.304245][T13253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.308690][T13253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.310969][T13253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.319617][T13253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.343767][T13253] hsr_slave_0: entered promiscuous mode [ 468.346074][T13253] hsr_slave_1: entered promiscuous mode [ 468.348997][T13253] debugfs: 'hsr0' already exists in 'hsr' [ 468.350988][T13253] Cannot create hsr debugfs directory [ 468.455937][T13253] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.540949][T13253] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.609120][T13253] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.688275][T13253] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.742774][T13291] gadgetfs: bound to dummy_udc driver [ 468.871979][T13253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 468.876642][T13253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.879823][T13253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 468.892593][T13253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.895588][T13253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 468.899911][T13253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.903038][T13253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 468.907139][T13253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.924778][T13253] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.927847][T13253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.932563][T13253] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.935602][T13253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.010204][T13253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.019988][ T171] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.026659][ T171] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.056610][T13253] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.067314][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.070415][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.070443][T13304] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 469.080184][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.083281][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.116046][T13304] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 469.120336][T13304] overlayfs: failed to look up (tracing) for ino (-66) [ 469.263387][T13309] pim6reg: entered allmulticast mode [ 469.280894][T13309] netlink: 'syz.1.2173': attribute type 1 has an invalid length. [ 469.286454][T13309] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2173'. [ 469.515542][T13253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.560443][T13253] veth0_vlan: entered promiscuous mode [ 469.569027][T13253] veth1_vlan: entered promiscuous mode [ 469.595095][T13253] veth0_macvtap: entered promiscuous mode [ 469.602793][T13253] veth1_macvtap: entered promiscuous mode [ 469.634949][T13253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.640302][ T5749] Bluetooth: hci3: command tx timeout [ 469.653113][T13253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.712046][ T6787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.723221][ T6787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.769296][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.771124][ T5816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.776630][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.780158][ T5816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.817782][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.821379][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.037194][T13344] ptrace attach of "/syz-executor exec"[13253] was attempted by "/syz-executor exec"[13344] [ 471.055891][T13339] Set syz1 is full, maxelem 65536 reached [ 471.235245][T13348] block nbd0: NBD_DISCONNECT [ 471.243573][T13350] FAULT_INJECTION: forcing a failure. [ 471.243573][T13350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.249327][T13350] CPU: 3 UID: 0 PID: 13350 Comm: syz.3.2182 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.249358][T13350] Tainted: [L]=SOFTLOCKUP [ 471.249365][T13350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 471.249376][T13350] Call Trace: [ 471.249382][T13350] [ 471.249389][T13350] dump_stack_lvl+0x100/0x190 [ 471.249417][T13350] should_fail_ex.cold+0x5/0xa [ 471.249439][T13350] _copy_from_user+0x2e/0xd0 [ 471.249466][T13350] input_event_from_user+0x137/0x290 [ 471.249517][T13350] ? __pfx_input_event_from_user+0x10/0x10 [ 471.249545][T13350] ? input_inject_event+0x198/0x380 [ 471.249575][T13350] evdev_write+0x27a/0x430 [ 471.249603][T13350] ? __pfx_evdev_write+0x10/0x10 [ 471.249637][T13350] ? bpf_lsm_file_permission+0x9/0x10 [ 471.249654][T13350] ? security_file_permission+0x76/0x210 [ 471.249681][T13350] ? rw_verify_area+0xce/0x6d0 [ 471.249709][T13350] vfs_write+0x2aa/0x1050 [ 471.249727][T13350] ? __pfx_evdev_write+0x10/0x10 [ 471.249754][T13350] ? __pfx_vfs_write+0x10/0x10 [ 471.249769][T13350] ? find_held_lock+0x2b/0x80 [ 471.249791][T13350] ? __fget_files+0x215/0x3d0 [ 471.249807][T13350] ? __fget_files+0x215/0x3d0 [ 471.249829][T13350] ? __fget_files+0x21f/0x3d0 [ 471.249853][T13350] ksys_write+0x1f8/0x250 [ 471.249870][T13350] ? __pfx_ksys_write+0x10/0x10 [ 471.249885][T13350] ? ksys_write+0x1ac/0x250 [ 471.249901][T13350] ? __pfx_ksys_write+0x10/0x10 [ 471.249923][T13350] __do_fast_syscall_32+0xe7/0x970 [ 471.249949][T13350] ? lockdep_hardirqs_on+0x78/0x100 [ 471.249975][T13350] do_fast_syscall_32+0x32/0x70 [ 471.249999][T13350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 471.250021][T13350] RIP: 0023:0xf7f73fec [ 471.250043][T13350] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 471.250050][T13350] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 471.250069][T13350] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 471.250095][T13350] RDX: 00000000000012d8 RSI: 0000000000000000 RDI: 0000000000000000 [ 471.250105][T13350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 471.250114][T13350] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 471.250124][T13350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 471.250149][T13350] [ 471.474235][T13353] gadgetfs: bound to dummy_udc driver [ 471.720230][ T5749] Bluetooth: hci3: command tx timeout [ 471.721073][ T34] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 471.725441][ C3] gadgetfs: connected [ 471.729831][ T34] gadgetfs: disconnected [ 471.890492][ C3] gadgetfs: connected [ 471.893707][ T34] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 471.897521][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 471.901540][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.910903][ C3] gadgetfs: configuration #1 [ 471.992228][T13351] gadgetfs: suspended from state 3 [ 471.992487][ T34] usb 5-1: can't set config #1, error -71 [ 471.994176][T13351] gadgetfs: disconnected [ 472.002870][ T34] usb 5-1: USB disconnect, device number 19 [ 472.074394][T13367] pim6reg: entered allmulticast mode [ 472.084870][T13367] netlink: 'syz.0.2185': attribute type 1 has an invalid length. [ 472.088062][T13367] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2185'. [ 472.307453][T13374] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 472.345970][T13374] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 472.349062][T13374] overlayfs: failed to look up (tracing) for ino (-66) [ 473.362584][T13369] Set syz1 is full, maxelem 65536 reached [ 473.487857][T13383] binder: 13378:13383 ioctl c00c6211 0 returned -14 [ 473.495419][T13381] ptrace attach of "/syz-executor exec"[5736] was attempted by "/syz-executor exec"[13381] [ 473.813720][ T5749] Bluetooth: hci3: command tx timeout [ 474.583821][T13403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2196'. [ 474.598603][T13403] netlink: 'syz.2.2196': attribute type 1 has an invalid length. [ 474.633356][T13405] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 474.674364][T13405] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 474.677639][T13405] overlayfs: failed to look up (tracing) for ino (-66) [ 475.274268][T13414] lo speed is unknown, defaulting to 1000 [ 475.431335][T13417] Set syz1 is full, maxelem 65536 reached [ 475.620359][T13416] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2198'. [ 475.634006][T13413] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 475.640166][T13413] bond0: (slave lo): Error: Device can not be enslaved while up [ 475.825845][T13420] Set syz1 is full, maxelem 65536 reached [ 475.881546][ T5749] Bluetooth: hci3: command tx timeout [ 475.948262][T13433] binder: 13432:13433 ioctl c00c6211 0 returned -14 [ 476.538621][T13441] Set syz1 is full, maxelem 65536 reached [ 477.239616][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2207'. [ 477.258483][T13449] Set syz1 is full, maxelem 65536 reached [ 477.371040][T13466] binder: 13465:13466 ioctl c0306201 0 returned -14 [ 477.381373][T13466] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2214'. [ 477.443601][T13464] Set syz1 is full, maxelem 65536 reached [ 477.451459][T13466] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 477.481379][T13466] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 477.490422][T13466] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 477.492531][T13466] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 477.495278][T13466] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 477.517611][T13466] pci 0000:00:01.0: Adding to iommu group 1 [ 477.525743][T13466] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 477.528394][T13466] pci 0000:00:01.0: vgaarb: bridge control possible [ 477.530976][T13466] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 477.540369][ T5845] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 477.546423][T13466] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 477.549561][T13466] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 477.553649][T13466] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 477.567020][T13466] [drm] Found bochs VGA, ID 0xb0c5. [ 477.568741][T13466] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 477.589679][T13466] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 477.690450][ T5845] usb 7-1: Using ep0 maxpacket: 32 [ 477.695292][ T5845] usb 7-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 477.695315][ T5845] usb 7-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 8 [ 477.695328][ T5845] usb 7-1: config 1 interface 0 has no altsetting 0 [ 477.697003][ T5845] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 477.697018][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.697029][ T5845] usb 7-1: Product: ь [ 477.697037][ T5845] usb 7-1: Manufacturer: К [ 477.697045][ T5845] usb 7-1: SerialNumber: 侟餆썫⮃떉ე椸䃻짞ᥤ⬿Ҕ䜡흊櫼蜔ಕ喍Ƅ쬂鏼㒾⋞덋ᜍ칠냂獍䭢鰌짔ୖｰ￰ꎲ봉亨붨ꄓ롣譡䰃뒹樷꘭鐰꓾﹘Ⓓ菅螥츊矧㰴禯ꡳﮏҥቷ宜醓恛黋툑썤瑸㩨ܔ펯ᛞ꒶ꋡ [ 477.703891][T13460] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 477.731469][T13466] Console: switching to colour frame buffer device 160x50 [ 477.803688][T13466] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 477.913330][T13479] binder: 13478:13479 ioctl c00c6211 0 returned -14 [ 477.925478][T13460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.928546][T13460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.933263][T13460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.936202][T13460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.943053][T13460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.947366][T13460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.955403][T13460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.958386][T13460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.175886][T13477] Set syz1 is full, maxelem 65536 reached [ 478.305972][T13486] lo speed is unknown, defaulting to 1000 [ 478.499848][T13489] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 478.534443][T13489] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 478.537684][T13489] overlayfs: failed to look up (tracing) for ino (-66) [ 479.042170][ T5845] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 479.064750][ T5845] usb 7-1: USB disconnect, device number 28 [ 480.581236][T13486] Set syz1 is full, maxelem 65536 reached [ 480.783244][T13516] Set syz1 is full, maxelem 65536 reached [ 480.986727][T13538] Set syz1 is full, maxelem 65536 reached [ 481.290469][ T5817] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 481.305007][T13549] Set syz1 is full, maxelem 65536 reached [ 481.460138][ T5817] usb 5-1: Using ep0 maxpacket: 32 [ 481.465586][ T5817] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 481.470795][ T5817] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 8 [ 481.474181][ T5817] usb 5-1: config 1 interface 0 has no altsetting 0 [ 481.478025][ T5817] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.481031][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.484735][ T5817] usb 5-1: Product: ь [ 481.486079][ T5817] usb 5-1: Manufacturer: К [ 481.489212][ T5817] usb 5-1: SerialNumber: 侟餆썫⮃떉ე椸䃻짞ᥤ⬿Ҕ䜡흊櫼蜔ಕ喍Ƅ쬂鏼㒾⋞덋ᜍ칠냂獍䭢鰌짔ୖｰ￰ꎲ봉亨붨ꄓ롣譡䰃뒹樷꘭鐰꓾﹘Ⓓ菅螥츊矧㰴禯ꡳﮏҥቷ宜醓恛黋툑썤瑸㩨ܔ펯ᛞ꒶ꋡ [ 481.509954][T13543] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 481.724233][T13543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.727509][T13543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.735271][T13543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.738590][T13543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.747713][T13543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.751869][T13543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.763214][T13543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.769147][T13543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.277849][ T5817] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 482.290793][ T5817] usb 5-1: USB disconnect, device number 20 [ 482.300184][T13559] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 482.312106][T13560] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 482.663410][T13559] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 482.667046][T13559] overlayfs: failed to look up (tracing) for ino (-66) [ 482.826722][T13560] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 482.832069][T13560] overlayfs: failed to look up (tracing) for ino (-66) [ 483.641647][T13570] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 483.695791][T13570] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 483.699050][T13570] overlayfs: failed to look up (tracing) for ino (-66) [ 484.550244][ T5817] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 484.674834][T13582] Set syz1 is full, maxelem 65536 reached [ 484.708057][T13587] netlink: 'syz.2.2246': attribute type 2 has an invalid length. [ 484.740176][ T5817] usb 8-1: Using ep0 maxpacket: 8 [ 484.743085][ T5817] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 484.747347][ T5817] usb 8-1: config 0 has no interface number 0 [ 484.749331][ T5817] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 484.761782][ T5817] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 484.774468][ T5817] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 484.784120][ T5817] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 484.795026][ T5817] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.807547][ T5817] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 484.816519][ T5817] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.823552][ T5817] usb 8-1: Product: syz [ 484.824926][ T5817] usb 8-1: Manufacturer: syz [ 484.831423][ T5817] usb 8-1: SerialNumber: syz [ 484.834411][ T5817] usb 8-1: config 0 descriptor?? [ 485.105658][T13578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.109878][T13578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.127070][ T5817] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 485.137078][ T5817] usb 8-1: USB disconnect, device number 12 [ 485.153993][ T5845] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 485.178522][T13599] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 485.210532][T13599] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 485.213708][T13599] overlayfs: failed to look up (tracing) for ino (-66) [ 485.322224][ T5845] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 485.325326][ T5845] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 485.328180][ T5845] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 485.332906][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.338407][ T5845] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 485.341931][ T5845] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 486.423680][T13615] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 486.497168][T13615] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 486.500495][T13615] overlayfs: failed to look up (tracing) for ino (-66) [ 486.874586][T13618] Set syz1 is full, maxelem 65536 reached [ 487.369549][T13625] FAULT_INJECTION: forcing a failure. [ 487.369549][T13625] name failslab, interval 1, probability 0, space 0, times 0 [ 487.375266][T13625] CPU: 1 UID: 0 PID: 13625 Comm: syz.0.2257 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.375285][T13625] Tainted: [L]=SOFTLOCKUP [ 487.375290][T13625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 487.375304][T13625] Call Trace: [ 487.375308][T13625] [ 487.375313][T13625] dump_stack_lvl+0x100/0x190 [ 487.375425][T13625] should_fail_ex.cold+0x5/0xa [ 487.375444][T13625] should_failslab+0xc2/0x120 [ 487.375467][T13625] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 487.375481][T13625] ? kasan_save_stack+0x30/0x50 [ 487.375496][T13625] ? __d_alloc+0x35/0xa50 [ 487.375512][T13625] __d_alloc+0x35/0xa50 [ 487.375525][T13625] d_alloc_parallel+0x105/0x14b0 [ 487.375547][T13625] ? __pfx_d_alloc_parallel+0x10/0x10 [ 487.375563][T13625] ? __pfx___might_resched+0x10/0x10 [ 487.375587][T13625] ? find_held_lock+0x2b/0x80 [ 487.375603][T13625] ? down_read+0x13b/0x4c0 [ 487.375689][T13625] ? __pfx_down_read+0x10/0x10 [ 487.375707][T13625] __lookup_slow+0x98/0x320 [ 487.375724][T13625] lookup_slow+0x50/0x70 [ 487.375739][T13625] link_path_walk+0x1377/0x1cc0 [ 487.375761][T13625] path_openat+0x1c9/0x4280 [ 487.375772][T13625] ? kasan_save_track+0x14/0x30 [ 487.375785][T13625] ? __kasan_slab_alloc+0x89/0x90 [ 487.375799][T13625] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 487.375813][T13625] ? do_sys_openat2+0xc7/0x1e0 [ 487.375833][T13625] ? __pfx_path_openat+0x10/0x10 [ 487.375848][T13625] do_file_open+0x20e/0x430 [ 487.375859][T13625] ? __lock_acquire+0x49f/0x1a40 [ 487.375877][T13625] ? __pfx_do_file_open+0x10/0x10 [ 487.375898][T13625] ? _raw_spin_unlock+0x28/0x50 [ 487.375911][T13625] ? alloc_fd+0x471/0x7a0 [ 487.375926][T13625] do_sys_openat2+0x10f/0x1e0 [ 487.375941][T13625] ? __pfx_do_sys_openat2+0x10/0x10 [ 487.375958][T13625] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 487.375977][T13625] __ia32_compat_sys_openat+0x12d/0x210 [ 487.375995][T13625] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 487.376011][T13625] ? fput+0x79/0x100 [ 487.376023][T13625] ? ksys_write+0x1ac/0x250 [ 487.376033][T13625] ? __pfx_ksys_write+0x10/0x10 [ 487.376046][T13625] __do_fast_syscall_32+0xe7/0x970 [ 487.376064][T13625] ? lockdep_hardirqs_on+0x78/0x100 [ 487.376082][T13625] do_fast_syscall_32+0x32/0x70 [ 487.376098][T13625] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 487.376113][T13625] RIP: 0023:0xf7f65fec [ 487.376127][T13625] Code: Unable to access opcode bytes at 0xf7f65fc2. [ 487.376139][T13625] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 487.376151][T13625] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000500 [ 487.376159][T13625] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 487.376165][T13625] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 487.376171][T13625] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 487.376178][T13625] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 487.376192][T13625] [ 487.905793][ T24] usb 6-1: USB disconnect, device number 19 [ 487.918739][ T24] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 487.981920][T13640] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 488.022069][T13640] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 488.025365][T13640] overlayfs: failed to look up (tracing) for ino (-66) [ 488.206149][T13639] Set syz1 is full, maxelem 65536 reached [ 488.872276][ T24] spcp8x5 6-1:1.0: device disconnected [ 489.072060][T13656] Set syz1 is full, maxelem 65536 reached [ 489.183975][T13661] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 489.222303][T13661] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 489.225631][T13661] overlayfs: failed to look up (tracing) for ino (-66) [ 490.952852][T13667] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 490.992828][T13667] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 490.996101][T13667] overlayfs: failed to look up (tracing) for ino (-66) [ 492.323895][T13692] Set syz1 is full, maxelem 65536 reached [ 492.777267][T13706] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 492.807993][T13706] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 492.811303][T13706] overlayfs: failed to look up (tracing) for ino (-66) [ 493.788901][T13710] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 494.337140][T13710] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 494.341105][T13710] overlayfs: failed to look up (tracing) for ino (-66) [ 495.234662][T13725] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2285'. [ 495.297766][T13733] NILFS (nullb0): couldn't find nilfs on the device [ 495.438231][T13727] Set syz1 is full, maxelem 65536 reached [ 495.564671][T13742] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 495.597984][T13742] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 495.601165][T13742] overlayfs: failed to look up (tracing) for ino (-66) [ 496.300769][ T6787] bridge_slave_1: left allmulticast mode [ 496.305268][ T6787] bridge_slave_1: left promiscuous mode [ 496.308471][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.318045][ T6787] bridge_slave_0: left allmulticast mode [ 496.327596][ T6787] bridge_slave_0: left promiscuous mode [ 496.332351][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.375926][ T6787] pim6reg: left allmulticast mode [ 496.582985][ T6787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.591219][ T6787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.595296][ T6787] bond0 (unregistering): Released all slaves [ 496.613100][ T6787] bond1 (unregistering): Released all slaves [ 497.055282][ T6787] hsr_slave_0: left promiscuous mode [ 497.060013][ T6787] hsr_slave_1: left promiscuous mode [ 497.062728][ T6787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.065390][ T6787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.071248][ T6787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.073735][ T6787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.095676][ T6787] veth1_macvtap: left promiscuous mode [ 497.097837][ T6787] veth0_macvtap: left promiscuous mode [ 497.099606][ T6787] veth1_vlan: left promiscuous mode [ 497.101694][ T6787] veth0_vlan: left promiscuous mode [ 497.520615][ T6787] ` (unregistering): Port device team_slave_1 removed [ 497.529042][ T6787] ` (unregistering): Port device team_slave_0 removed [ 497.929280][ T6787] IPVS: stop unused estimator thread 0... [ 497.981433][T13775] Set syz1 is full, maxelem 65536 reached [ 498.098784][T13796] FAULT_INJECTION: forcing a failure. [ 498.098784][T13796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.104093][T13794] syzkaller0: entered promiscuous mode [ 498.106144][T13794] syzkaller0: entered allmulticast mode [ 498.108056][T13796] CPU: 2 UID: 0 PID: 13796 Comm: syz.2.2306 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.108074][T13796] Tainted: [L]=SOFTLOCKUP [ 498.108078][T13796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 498.108085][T13796] Call Trace: [ 498.108089][T13796] [ 498.108095][T13796] dump_stack_lvl+0x100/0x190 [ 498.108114][T13796] should_fail_ex.cold+0x5/0xa [ 498.108127][T13796] _copy_from_iter+0x1f4/0x1690 [ 498.108207][T13796] ? __asan_memset+0x23/0x50 [ 498.108220][T13796] ? __pfx__copy_from_iter+0x10/0x10 [ 498.108237][T13796] ? __pfx___alloc_skb+0x10/0x10 [ 498.108298][T13796] netlink_sendmsg+0x808/0xda0 [ 498.108327][T13796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.108341][T13796] ? apparmor_socket_sendmsg+0x15b/0x270 [ 498.108367][T13796] ____sys_sendmsg+0xa4d/0xbe0 [ 498.108379][T13796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.108393][T13796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.108410][T13796] ___sys_sendmsg+0x190/0x1e0 [ 498.108424][T13796] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.108442][T13796] ? find_held_lock+0x2b/0x80 [ 498.108465][T13796] __sys_sendmsg+0x160/0x210 [ 498.108481][T13796] ? __pfx___sys_sendmsg+0x10/0x10 [ 498.108501][T13796] ? __pfx_ksys_write+0x10/0x10 [ 498.108514][T13796] __do_fast_syscall_32+0xe7/0x970 [ 498.108534][T13796] ? lockdep_hardirqs_on+0x78/0x100 [ 498.108551][T13796] do_fast_syscall_32+0x32/0x70 [ 498.108568][T13796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 498.108582][T13796] RIP: 0023:0xf708efec [ 498.108615][T13796] Code: Unable to access opcode bytes at 0xf708efc2. [ 498.108621][T13796] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 498.108633][T13796] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 498.108639][T13796] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 498.108646][T13796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 498.108652][T13796] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 498.108658][T13796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 498.108672][T13796] [ 498.182227][T13794] tipc: Started in network mode [ 498.183974][T13794] tipc: Node identity e6ec4ab52de4, cluster identity 4711 [ 498.186599][T13794] tipc: Enabled bearer , priority 0 [ 498.190665][T13798] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 498.222061][T13798] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 498.226007][T13798] overlayfs: failed to look up (tracing) for ino (-66) [ 498.250445][T13793] tipc: Resetting bearer [ 498.264965][T13793] tipc: Disabling bearer [ 498.670500][T13803] Set syz1 is full, maxelem 65536 reached [ 499.026329][T13812] Set syz1 is full, maxelem 65536 reached [ 499.273000][T13820] Set syz1 is full, maxelem 65536 reached [ 499.616205][T13835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2317'. [ 499.652237][T13829] Set syz1 is full, maxelem 65536 reached [ 500.862301][T13858] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 500.874305][T13857] lo speed is unknown, defaulting to 1000 [ 500.893044][T13860] ptrace attach of "/syz-executor exec"[5737] was attempted by " [ 500.896873][T13858] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 500.905516][T13860] tipc: Enabled bearer , priority 10 [ 500.924411][T13858] overlayfs: failed to look up (tracing) for ino (-66) [ 501.002823][T13816] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 501.049500][ T5749] Bluetooth: hci1: command 0x0406 tx timeout [ 501.186108][T13865] Set syz1 is full, maxelem 65536 reached [ 501.402921][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.104679][T13868] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 502.766550][T13873] Set syz1 is full, maxelem 65536 reached [ 503.146295][T13863] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 503.148903][T13876] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 503.150158][T13863] overlayfs: failed to look up (tracing) for ino (-66) [ 503.219321][T13876] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 503.222735][T13876] overlayfs: failed to look up (tracing) for ino (-66) [ 503.341742][T13880] x_tables: duplicate underflow at hook 1 [ 504.156200][T13891] FAULT_INJECTION: forcing a failure. [ 504.156200][T13891] name failslab, interval 1, probability 0, space 0, times 0 [ 504.173104][T13891] CPU: 0 UID: 0 PID: 13891 Comm: syz.2.2334 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.173138][T13891] Tainted: [L]=SOFTLOCKUP [ 504.173145][T13891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 504.173156][T13891] Call Trace: [ 504.173163][T13891] [ 504.173171][T13891] dump_stack_lvl+0x100/0x190 [ 504.173200][T13891] should_fail_ex.cold+0x5/0xa [ 504.173222][T13891] should_failslab+0xc2/0x120 [ 504.173248][T13891] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 504.173272][T13891] ? __alloc_skb+0x5b7/0x710 [ 504.173297][T13891] ? __alloc_skb+0x140/0x710 [ 504.173324][T13891] __alloc_skb+0x140/0x710 [ 504.173347][T13891] ? __alloc_skb+0x5b7/0x710 [ 504.173369][T13891] ? __pfx___alloc_skb+0x10/0x10 [ 504.173405][T13891] netlink_alloc_large_skb+0x69/0x150 [ 504.173431][T13891] netlink_sendmsg+0x680/0xda0 [ 504.173455][T13891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.173480][T13891] ? apparmor_socket_sendmsg+0x15b/0x270 [ 504.173505][T13891] ____sys_sendmsg+0xa4d/0xbe0 [ 504.173523][T13891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.173546][T13891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.173577][T13891] ___sys_sendmsg+0x190/0x1e0 [ 504.173598][T13891] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.173632][T13891] ? find_held_lock+0x2b/0x80 [ 504.173672][T13891] __sys_sendmsg+0x160/0x210 [ 504.173698][T13891] ? __pfx___sys_sendmsg+0x10/0x10 [ 504.173730][T13891] ? __pfx_ksys_write+0x10/0x10 [ 504.173753][T13891] __do_fast_syscall_32+0xe7/0x970 [ 504.173781][T13891] ? lockdep_hardirqs_on+0x78/0x100 [ 504.173807][T13891] do_fast_syscall_32+0x32/0x70 [ 504.173834][T13891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 504.173857][T13891] RIP: 0023:0xf708efec [ 504.173878][T13891] Code: Unable to access opcode bytes at 0xf708efc2. [ 504.173887][T13891] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 504.173905][T13891] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 504.173917][T13891] RDX: 0000000004000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 504.173927][T13891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 504.173937][T13891] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 504.173947][T13891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 504.173972][T13891] [ 504.354622][T13900] FAULT_INJECTION: forcing a failure. [ 504.354622][T13900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.364942][T13900] CPU: 3 UID: 0 PID: 13900 Comm: syz.1.2336 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.364975][T13900] Tainted: [L]=SOFTLOCKUP [ 504.364982][T13900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 504.364992][T13900] Call Trace: [ 504.364999][T13900] [ 504.365006][T13900] dump_stack_lvl+0x100/0x190 [ 504.365033][T13900] should_fail_ex.cold+0x5/0xa [ 504.365054][T13900] _copy_to_user+0x32/0xd0 [ 504.365083][T13900] simple_read_from_buffer+0xcb/0x170 [ 504.365115][T13900] proc_fail_nth_read+0x1af/0x230 [ 504.365165][T13900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.365191][T13900] ? rw_verify_area+0xce/0x6d0 [ 504.365217][T13900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.365242][T13900] vfs_read+0x1e4/0xb40 [ 504.365262][T13900] ? __pfx_vfs_read+0x10/0x10 [ 504.365277][T13900] ? find_held_lock+0x2b/0x80 [ 504.365300][T13900] ? __fget_files+0x215/0x3d0 [ 504.365321][T13900] ? __fget_files+0x21f/0x3d0 [ 504.365361][T13900] ksys_read+0x12a/0x250 [ 504.365378][T13900] ? __pfx_ksys_read+0x10/0x10 [ 504.365402][T13900] do_int80_emulation+0x14b/0x720 [ 504.365432][T13900] asm_int80_emulation+0x1a/0x20 [ 504.365450][T13900] RIP: 0023:0xf71774eb [ 504.365465][T13900] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 504.365487][T13900] RSP: 002b:00000000f542d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 504.365505][T13900] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f542d5d0 [ 504.365517][T13900] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 504.365527][T13900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 504.365538][T13900] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 504.365548][T13900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 504.365572][T13900] [ 504.385235][T13898] input: syz1 as /devices/virtual/input/input13 [ 504.521968][T13902] Set syz1 is full, maxelem 65536 reached [ 504.729162][T13916] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 504.732401][T13916] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 504.736224][T13916] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 504.739364][T13916] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 504.764968][T13917] overlayfs: "xino" feature enabled using qemu-system-x86_64: vtd_irte_get: detected non-present IRTE (index=15, high=0x0, low=0x0) 3 upper inode bits. [ 504.767738][T13914] ------------[ cut here ]------------ [ 504.770689][T13914] remove_proc_entry: removing non-empty directory 'irq/20', leaking at least 'comedi_parport' [ 504.775969][T13914] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#3: syz.2.2342/13914 [ 504.779477][T13914] Modules linked in: [ 504.781498][T13914] CPU: 3 UID: 0 PID: 13914 Comm: syz.2.2342 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.784790][T13914] Tainted: [L]=SOFTLOCKUP [ 504.786380][T13914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 504.789832][T13914] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 504.791803][T13914] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 79 52 6d 0e 49 8b 95 d0 00 00 00 48 c7 c6 80 fa e9 8b <67> 48 0f b9 3a e9 2a fe ff ff e8 1c c6 4e ff 48 8d 7d 18 48 b8 00 [ 504.798178][T13914] RSP: 0000:ffffc90020a076a0 EFLAGS: 00010246 [ 504.800348][T13914] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88804b3d175c [ 504.802728][T13914] RDX: ffff88801cf685dc RSI: ffffffff8be9fa80 RDI: ffffffff91283d40 [ 504.805113][T13914] RBP: ffff88804b3d1738 R08: ffff88802965711c R09: ffffed100967a2d3 [ 504.807590][T13914] R10: ffff88804b3d169b R11: 0000000000000000 R12: ffff88804b3d1680 [ 504.810570][T13914] R13: ffff88801cf68500 R14: ffff8880296570f8 R15: dffffc0000000000 [ 504.813416][T13914] FS: 0000000000000000(0000) GS:ffff888096ef4000(0063) knlGS:00000000f547db40 [ 504.816421][T13914] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 504.818518][T13914] CR2: 00000000f51bf27a CR3: 00000000746c9000 CR4: 0000000000352ef0 [ 504.821041][T13914] Call Trace: [ 504.822086][T13914] [ 504.823008][T13914] ? __pfx_remove_proc_entry+0x10/0x10 [ 504.824713][T13914] ? mtree_load+0x32d/0xa90 [ 504.826129][T13914] ? __pfx_mtree_load+0x10/0x10 [ 504.827663][T13914] ? rcu_is_watching+0x12/0xc0 [ 504.829104][T13914] unregister_irq_proc+0x206/0x2a0 [ 504.830820][T13914] ? __pfx_unregister_irq_proc+0x10/0x10 [ 504.832496][T13914] free_desc+0x89/0x330 [ 504.833769][T13914] ? __pfx_free_desc+0x10/0x10 [ 504.835182][T13914] ? kasan_quarantine_put+0x104/0x240 [ 504.836937][T13914] ? lockdep_hardirqs_on+0x78/0x100 [ 504.838483][T13914] ? irq_domain_free_irqs+0x3e0/0x5c0 [ 504.840180][T13914] irq_free_descs+0x84/0xc0 [ 504.840385][T13917] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 504.841553][T13914] irq_domain_free_irqs+0x46a/0x5c0 [ 504.841576][T13914] mp_unmap_irq+0xf8/0x130 [ 504.845331][T13917] overlayfs: failed to look up (tracing) for ino (-66) [ 504.846742][T13914] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 504.846765][T13914] acpi_unregister_gsi_ioapic+0x40/0x60 [ 504.854153][T13914] acpi_unregister_gsi+0x25/0x40 [ 504.855682][T13914] acpi_pci_irq_disable+0x275/0x360 [ 504.857402][T13914] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 504.859079][T13914] pcibios_disable_device+0x89/0xb0 [ 504.860656][T13914] do_pci_disable_device+0x9f/0x100 [ 504.862243][T13914] ? __pfx_do_pci_disable_device+0x10/0x10 [ 504.864027][T13914] pci_disable_device+0x130/0x270 [ 504.865549][T13914] pci_device_remove+0xb2/0x1d0 [ 504.867107][T13914] ? __pfx_pci_device_remove+0x10/0x10 [ 504.868781][T13914] device_remove+0xcb/0x180 [ 504.870261][T13914] device_release_driver_internal+0x44e/0x620 [ 504.872131][T13914] pci_stop_bus_device+0x120/0x160 [ 504.873701][T13914] pci_stop_and_remove_bus_device+0x58/0xa0 [ 504.875759][T13914] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 504.878337][T13914] remove_store+0x123/0x140 SYZFAIL: failed to recv rpc [ 504.880398][T13914] ? __pfx_remove_store+0x10/0x10 [ 504.882106][T13914] ? find_held_lock+0x2b/0x80 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 504.883526][T13914] ? sysfs_file_kobj+0xe4/0x290 [ 504.885122][T13914] ? sysfs_file_kobj+0xe4/0x290 [ 504.886690][T13914] ? __pfx_remove_store+0x10/0x10 [ 504.888658][T13914] dev_attr_store+0x58/0x80 [ 504.890882][T13914] ? __pfx_dev_attr_store+0x10/0x10 [ 504.893040][T13914] sysfs_kf_write+0xf2/0x150 [ 504.894890][T13914] kernfs_fop_write_iter+0x3e0/0x5f0 [ 504.897064][T13914] ? __pfx_sysfs_kf_write+0x10/0x10 [ 504.899095][T13914] vfs_write+0x6ac/0x1050 [ 504.900888][T13914] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 504.903082][T13914] ? __pfx_vfs_write+0x10/0x10 [ 504.904941][T13914] ? find_held_lock+0x2b/0x80 [ 504.906694][T13914] ksys_write+0x12a/0x250 [ 504.907964][T13914] ? __pfx_ksys_write+0x10/0x10 [ 504.909881][T13914] __do_fast_syscall_32+0xe7/0x970 [ 504.912025][T13914] ? lockdep_hardirqs_on+0x78/0x100 [ 504.914029][T13914] do_fast_syscall_32+0x32/0x70 [ 504.915875][T13914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 504.918305][T13914] RIP: 0023:0xf708efec [ 504.919874][T13914] Code: Unable to access opcode bytes at 0xf708efc2. [ 504.922184][T13914] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 504.924721][T13914] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 504.927858][T13914] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 504.931134][T13914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 504.933853][T13914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.936670][T13914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 504.939036][T13914] [ 504.940042][T13914] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 504.942199][T13914] CPU: 3 UID: 0 PID: 13914 Comm: syz.2.2342 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.945416][T13914] Tainted: [L]=SOFTLOCKUP [ 504.946878][T13914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 504.950548][T13914] Call Trace: [ 504.951841][T13914] [ 504.952947][T13914] dump_stack_lvl+0x100/0x190 [ 504.954582][T13914] vpanic+0x552/0x970 [ 504.955800][T13914] ? __pfx_vpanic+0x10/0x10 [ 504.957353][T13914] panic+0xd1/0xe0 [ 504.958887][T13914] ? __pfx_panic+0x10/0x10 [ 504.960679][T13914] check_panic_on_warn.cold+0x19/0x34 [ 504.962731][T13914] ? remove_proc_entry+0x4e7/0x610 [ 504.964366][T13914] __warn.cold+0x191/0x318 [ 504.965741][T13914] __report_bug+0x30f/0x440 [ 504.967262][T13914] ? remove_proc_entry+0x4e7/0x610 [ 504.968911][T13914] ? __pfx___report_bug+0x10/0x10 [ 504.970874][T13914] ? __do_fast_syscall_32+0xe7/0x970 [ 504.972794][T13914] ? do_fast_syscall_32+0x32/0x70 [ 504.974730][T13914] ? do_raw_spin_lock+0x128/0x260 [ 504.976627][T13914] ? find_held_lock+0x2b/0x80 [ 504.978390][T13914] ? proc_entry_rundown+0x158/0x1e0 [ 504.980401][T13914] ? proc_entry_rundown+0x158/0x1e0 [ 504.982078][T13914] report_bug_entry+0xe1/0x290 [ 504.983522][T13914] ? remove_proc_entry+0x4f5/0x610 [ 504.985278][T13914] handle_bug+0x1cd/0x2a0 [ 504.986762][T13914] exc_invalid_op+0x17/0x50 [ 504.988579][T13914] asm_exc_invalid_op+0x1a/0x20 [ 504.990064][T13914] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 504.991768][T13914] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 79 52 6d 0e 49 8b 95 d0 00 00 00 48 c7 c6 80 fa e9 8b <67> 48 0f b9 3a e9 2a fe ff ff e8 1c c6 4e ff 48 8d 7d 18 48 b8 00 [ 504.998996][T13914] RSP: 0000:ffffc90020a076a0 EFLAGS: 00010246 [ 505.001383][T13914] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88804b3d175c [ 505.004211][T13914] RDX: ffff88801cf685dc RSI: ffffffff8be9fa80 RDI: ffffffff91283d40 [ 505.007036][T13914] RBP: ffff88804b3d1738 R08: ffff88802965711c R09: ffffed100967a2d3 [ 505.010087][T13914] R10: ffff88804b3d169b R11: 0000000000000000 R12: ffff88804b3d1680 [ 505.012543][T13914] R13: ffff88801cf68500 R14: ffff8880296570f8 R15: dffffc0000000000 [ 505.014928][T13914] ? __pfx_remove_proc_entry+0x10/0x10 [ 505.016681][T13914] ? mtree_load+0x32d/0xa90 [ 505.018493][T13914] ? __pfx_mtree_load+0x10/0x10 [ 505.020327][T13914] ? rcu_is_watching+0x12/0xc0 [ 505.022167][T13914] unregister_irq_proc+0x206/0x2a0 [ 505.024229][T13914] ? __pfx_unregister_irq_proc+0x10/0x10 [ 505.026452][T13914] free_desc+0x89/0x330 [ 505.028081][T13914] ? __pfx_free_desc+0x10/0x10 [ 505.030026][T13914] ? kasan_quarantine_put+0x104/0x240 [ 505.032031][T13914] ? lockdep_hardirqs_on+0x78/0x100 [ 505.033763][T13914] ? irq_domain_free_irqs+0x3e0/0x5c0 [ 505.035874][T13914] irq_free_descs+0x84/0xc0 [ 505.037627][T13914] irq_domain_free_irqs+0x46a/0x5c0 [ 505.039559][T13914] mp_unmap_irq+0xf8/0x130 [ 505.041346][T13914] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 505.043779][T13914] acpi_unregister_gsi_ioapic+0x40/0x60 [ 505.045927][T13914] acpi_unregister_gsi+0x25/0x40 [ 505.047844][T13914] acpi_pci_irq_disable+0x275/0x360 [ 505.049914][T13914] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 505.052002][T13914] pcibios_disable_device+0x89/0xb0 [ 505.053866][T13914] do_pci_disable_device+0x9f/0x100 [ 505.055911][T13914] ? __pfx_do_pci_disable_device+0x10/0x10 [ 505.058202][T13914] pci_disable_device+0x130/0x270 [ 505.059823][T13914] pci_device_remove+0xb2/0x1d0 [ 505.061446][T13914] ? __pfx_pci_device_remove+0x10/0x10 [ 505.063436][T13914] device_remove+0xcb/0x180 [ 505.065226][T13914] device_release_driver_internal+0x44e/0x620 [ 505.067541][T13914] pci_stop_bus_device+0x120/0x160 [ 505.069516][T13914] pci_stop_and_remove_bus_device+0x58/0xa0 [ 505.071586][T13914] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 505.073607][T13914] remove_store+0x123/0x140 [ 505.075069][T13914] ? __pfx_remove_store+0x10/0x10 [ 505.076971][T13914] ? find_held_lock+0x2b/0x80 [ 505.078809][T13914] ? sysfs_file_kobj+0xe4/0x290 [ 505.080700][T13914] ? sysfs_file_kobj+0xe4/0x290 [ 505.082520][T13914] ? __pfx_remove_store+0x10/0x10 [ 505.084392][T13914] dev_attr_store+0x58/0x80 [ 505.085846][T13914] ? __pfx_dev_attr_store+0x10/0x10 [ 505.087355][T13914] sysfs_kf_write+0xf2/0x150 [ 505.088728][T13914] kernfs_fop_write_iter+0x3e0/0x5f0 [ 505.090267][T13914] ? __pfx_sysfs_kf_write+0x10/0x10 [ 505.091817][T13914] vfs_write+0x6ac/0x1050 [ 505.093126][T13914] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 505.094883][T13914] ? __pfx_vfs_write+0x10/0x10 [ 505.096321][T13914] ? find_held_lock+0x2b/0x80 [ 505.097781][T13914] ksys_write+0x12a/0x250 [ 505.099097][T13914] ? __pfx_ksys_write+0x10/0x10 [ 505.100631][T13914] __do_fast_syscall_32+0xe7/0x970 [ 505.102222][T13914] ? lockdep_hardirqs_on+0x78/0x100 [ 505.103857][T13914] do_fast_syscall_32+0x32/0x70 [ 505.105410][T13914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.107290][T13914] RIP: 0023:0xf708efec [ 505.108517][T13914] Code: Unable to access opcode bytes at 0xf708efc2. [ 505.110451][T13914] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 505.112969][T13914] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 505.115360][T13914] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 505.117776][T13914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 505.120139][T13914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.122487][T13914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 505.124865][T13914] [ 505.126465][T13914] Kernel Offset: disabled [ 505.127831][T13914] Rebooting in 86400 seconds..