last executing test programs: 5.177023263s ago: executing program 2 (id=1575): socket$inet(0x2, 0x800, 0x7) gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000140)="d8ba863eca3cec988b0ec48186bf87eab76bb32890a576b5a7430a1ab1800a8ef3de638bbec47bb6e2da0276d527529521b7833b1059faebb1f47ca00bc651b39cdebb9ef78d8ba3c84df74fa5a27e57b5fef9196f842d1768d58d44655cb61003d11e72e98f2c9c1be68c17bb9367", &(0x7f0000000680)="c11ee22936d87e38711f0896317bab22de626f07245fe9080df62441656e63c4288419bffe2476f67336d578fe1bdfc77c66600c1e62ac36edcbb666e01e4e7a8c07759de33b914829f63ac3e6259ca42030e43a5f3aa7bd13550f867ee57179c96512b21fb684b41b547e41b7f37aff9f60e997568eed87ce172b69a95ece3dbe025058c809ddf18bfbf00e0b454d116b98f146840cc37da8bb284e38159e2b7a202e5582d896f679f93cc81fbfdf765ebbf9c0e41fd6da08e2139b7c7ec44b3c1e11f732552df82828318d3af2525042917a83b35c624b7217b0f54470bc139b895e1735f5ee24b1baf4cb10c803ae12bc10c03d9c7adadfc3830be6bd"}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x1) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x36, 0x7ff, 0x8, 0x8, 0x40}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x6, "", [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xc1}}}}}]}}]}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r1, 0x0, 0x9) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x9) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) flock(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x808d1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.272509694s ago: executing program 3 (id=1578): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000240)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x4, 0x71c}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 4.029974411s ago: executing program 0 (id=1581): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) listen(r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/69, 0x45}], 0x1}, 0x5}], 0x1, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x5) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x2, 0x0) getdents64(r6, 0x0, 0x22) getdents64(r6, &(0x7f0000000140)=""/204, 0xcc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.873566178s ago: executing program 2 (id=1582): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) listen(0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/69, 0x45}], 0x1}, 0x5}], 0x1, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x5) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x2, 0x0) getdents64(r6, 0x0, 0x22) getdents64(r6, &(0x7f0000000140)=""/204, 0xcc) close_range(r0, 0xffffffffffffffff, 0x0) 3.817539154s ago: executing program 0 (id=1583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_uring_setup(0x3453, &(0x7f00000001c0)={0x0, 0x2, 0x2000, 0x2, 0x295}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4076, 0xfec) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r4 = socket(0x2, 0x3, 0x4) bind$inet6(r4, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @remote}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000001440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001400)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x8000) r5 = userfaultfd(0x1400) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 3.817023017s ago: executing program 2 (id=1585): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009d00)={&(0x7f0000000040), 0xc, &(0x7f0000009cc0)={&(0x7f0000003dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x80, 0xb, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x54, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'TCPOPTSTRIP\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_SET_ID={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x12c}, 0x1, 0x0, 0x0, 0x240c0800}, 0x800) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@end]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 3.650441553s ago: executing program 0 (id=1587): socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() add_key(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 3.549965603s ago: executing program 2 (id=1589): fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x13, 0x0, "ee9e8bf9b93129488f651a8de213eb94cd46e1839c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c78c129f79172dcba5700"}, 0xd8) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x40c, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x84, @empty, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x63}, {@private=0xa010102, 0x10, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r2, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) r4 = socket(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000062000018000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x40000000}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="4be88faa027b23c53622533e86dd6012"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close_range(r4, 0xffffffffffffffff, 0x0) 3.527916255s ago: executing program 1 (id=1590): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UFFDIO_POISON(r0, 0xc020aa08, 0x0) mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000400)="ffffffffffffff030000ffffffffffffffffffffffffffff0030bb0b590133408dfc219d9b3480f09daae239f9b12b2922f5a767f3c8d84d82a954d92e5e46b5a1c4eb5a3f9ea538e1f1ac92e201b93b2739c35b306f842f2ee20abd17a64ccddccbbfac46f06cf3a8b7dd12c0e5fea9b41a940b4119e3bf01010000000000005bdcc620cc0f5efe4da6ef2629877bf3dbdc03473ef8baa34ee83d472e4fdf1ab844cb38b58b645fa8e780d6200f40b9efca6d111a1307ff0b1bafe598f9fee55e18db7c6ccca178bad39eef902059f6f78d9ae69f3947c21cb49d7f2337fd8b106f89b4f0bb67e35e798fe65dfcde141076b0340faf", 0xf6, 0x10) r2 = syz_io_uring_setup(0x141c, 0x0, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f000000a280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000640)='./mysys\x00', 0x0, r5) syz_io_uring_modify_offsets$generic(0x0, r3, 0x2c, 0x10000) syz_io_uring_submit$UBLK(0x0, r3, r4, 0x0) io_uring_enter(r2, 0x20, 0x20, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) 2.414204165s ago: executing program 2 (id=1591): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x3d3a, 0x4) write$sndseq(0xffffffffffffffff, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x68) r2 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000023c0)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002380)=@any_dev={0x1, 0xc08, 0x0, 0x0, 0x1000, 0x2, r2, 0x0, 0x20}}}, &(0x7f0000002440)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e23, @local}, 0x310, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)='team0\x00', 0xb, 0x8000, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x3) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x20040, 0x40, 0xe}, 0x18) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) 2.397156304s ago: executing program 0 (id=1599): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x480c4) write(0xffffffffffffffff, 0x0, 0x0) connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @short}, 0x14) sendmmsg(r1, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 1.589382824s ago: executing program 1 (id=1592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 1.52474936s ago: executing program 3 (id=1593): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) listen(0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/69, 0x45}], 0x1}, 0x5}], 0x1, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x5) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x2, 0x0) getdents64(r6, 0x0, 0x22) getdents64(r6, &(0x7f0000000140)=""/204, 0xcc) close_range(r0, 0xffffffffffffffff, 0x0) 1.460188359s ago: executing program 1 (id=1594): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) listen(r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/69, 0x45}], 0x1}, 0x5}], 0x1, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x5) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x2, 0x0) getdents64(r6, 0x0, 0x22) getdents64(r6, &(0x7f0000000140)=""/204, 0xcc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.356513544s ago: executing program 3 (id=1595): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) listen(0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/69, 0x45}], 0x1}, 0x5}], 0x1, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x5) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x2, 0x0) getdents64(r6, 0x0, 0x22) getdents64(r6, &(0x7f0000000140)=""/204, 0xcc) close_range(r0, 0xffffffffffffffff, 0x0) 1.317388596s ago: executing program 1 (id=1596): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009d00)={&(0x7f0000000040), 0xc, &(0x7f0000009cc0)={&(0x7f0000003dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_SET_ID={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x124}, 0x1, 0x0, 0x0, 0x240c0800}, 0x800) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@end]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 1.23995165s ago: executing program 3 (id=1597): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009d00)={&(0x7f0000000040), 0xc, &(0x7f0000009cc0)={&(0x7f0000003dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x80, 0xb, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x54, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'TCPOPTSTRIP\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_SET_ID={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x12c}, 0x1, 0x0, 0x0, 0x240c0800}, 0x800) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@end]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 1.188097091s ago: executing program 1 (id=1598): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009d00)={&(0x7f0000000040), 0xc, &(0x7f0000009cc0)={&(0x7f0000003dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x80, 0xb, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x54, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'TCPOPTSTRIP\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_SET_ID={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x12c}, 0x1, 0x0, 0x0, 0x240c0800}, 0x800) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@end]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 1.155685243s ago: executing program 3 (id=1600): socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() add_key(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 1.131482262s ago: executing program 0 (id=1608): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x41, @dev={0xfe, 0x80, '\x00', 0x14}, 0x3e}, 0x1c) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f00000001c0)='1', 0x1) r4 = openat$tun(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344}, 0x1, 0x0) write$tun(r4, &(0x7f00000001c0)={@void, @void, @ipv6=@tcp={0xb, 0x6, "259863", 0xb3, 0x6, 0x0, @private1, @mcast2, {[@srh={0x6c, 0x6, 0x4, 0x3, 0x6, 0x8, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}]}], {{0x4e23, 0x4e23, r5, r6, 0x0, 0x0, 0x17, 0x1, 0xfeff, 0x0, 0xb, {[@fastopen={0x22, 0xc, "1fbd64270d790644e1a5"}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x7, 0x8}, @exp_fastopen={0xfe, 0xd, 0xf989, "a54928de5e48ca582a"}, @mss={0x2, 0x4, 0x100}, @generic={0x4, 0x11, "e486d6446b102af749c19dbe3e8aa2"}, @exp_smc={0xfe, 0x6}, @nop, @nop]}}, {"e565807f183ebdc0745a1b731724022988aafa702396c69dd09c0c43b937f8"}}}}}, 0xdb) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0x4010aa0a, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB]) recvmmsg(r7, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}, 0x44}], 0x1, 0x20, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) sendto$inet6(r2, &(0x7f00000000c0)="fdc72cdb2b2c354313f8f5f28c53cdc26d24b3463548e48772c6fc4676a492be110eff55f5", 0x25, 0x4080, 0x0, 0x0) 1.050361227s ago: executing program 1 (id=1601): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) write(r0, &(0x7f0000005ec0)="b9", 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x109000, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) 1.049848113s ago: executing program 2 (id=1602): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004140)={0x20, 0x0, 0x8f31, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x46, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x24000044) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30404004, 0x0, 0xfffe, 0x6, 0xffffffff, 0x0, 0x0, 0x1, 0x100}}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0x30, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x131}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x2) mkdir(&(0x7f0000000240)='./file0\x00', 0x1ff) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x6, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "5680a5441a99f362cd24e0a1ac229150073300", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$sequencer(0xffffff9c, &(0x7f00000000c0), 0x101140, 0x0) 51.549094ms ago: executing program 3 (id=1603): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x8081, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002") ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001") ioctl(r1, 0x932, &(0x7f0000000440)="020000000100") connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xfffffffb, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4801}, 0x2000400c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x9, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1604): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x28003, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r3, &(0x7f0000001640)="8b", 0x11) kernel console output (not intermixed with test programs): devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 135.581691][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 135.790811][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 135.880860][ T7735] Invalid ELF header magic: != ELF [ 135.880923][ T7731] netlink: Failed to add  helper -22 [ 135.880966][ T7731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.106964][ T7738] Invalid ELF header magic: != ELF [ 136.133065][ T25] hid-generic 0005:0008:0009.0021: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 136.186561][ T7740] fido_id[7740]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 136.263914][ T855] hid-generic 0005:0008:0009.0022: item fetching failed at offset 0/1 [ 136.264396][ T855] hid-generic 0005:0008:0009.0022: probe with driver hid-generic failed with error -22 [ 136.267504][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 136.375586][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 136.611202][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 136.729874][ T25] hid-generic 0005:0008:0009.0023: item fetching failed at offset 0/1 [ 136.730343][ T25] hid-generic 0005:0008:0009.0023: probe with driver hid-generic failed with error -22 [ 136.751450][ T4709] hid-generic 0005:0008:0009.0024: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 136.858130][ T7769] fido_id[7769]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 136.889365][ T5839] hid-generic 0005:0008:0009.0025: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 136.945832][ T7780] fido_id[7780]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 137.099148][ T7781] fuse: Bad value for 'fd' [ 137.568452][ T7802] __nla_validate_parse: 3 callbacks suppressed [ 137.568466][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 137.572257][ T25] hid-generic 0005:0008:0009.0026: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 137.668724][ T7805] Invalid ELF header magic: != ELF [ 137.720793][ T7800] comedi comedi1: comedi_config --init_data is deprecated [ 138.281845][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 138.436523][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 138.653765][ T5219] hid-generic 0005:0008:0009.0027: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 138.727364][ T7826] fido_id[7826]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 138.811867][ T5219] hid-generic 0005:0008:0009.0028: item fetching failed at offset 0/1 [ 138.814428][ T5219] hid-generic 0005:0008:0009.0028: probe with driver hid-generic failed with error -22 [ 138.824500][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 138.835723][ T7833] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.505'. [ 138.883733][ T7835] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.506'. [ 139.038120][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 139.059042][ T7843] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 139.113778][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 139.162471][ T4709] hid-generic 0005:0008:0009.0029: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 139.235942][ T7855] fido_id[7855]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 139.249814][ T4709] hid-generic 0005:0008:0009.002A: item fetching failed at offset 0/1 [ 139.250283][ T4709] hid-generic 0005:0008:0009.002A: probe with driver hid-generic failed with error -22 [ 139.256513][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 139.349441][ T7863] Unsupported ieee802154 address type: 0 [ 139.360413][ T7865] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 139.363700][ T7865] i2c i2c-1: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 139.372409][ T7865] Invalid option length (1047276) for dns_resolver key [ 140.117547][ C3] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 140.254920][ T7889] netlink: 1052 bytes leftover after parsing attributes in process `syz.2.522'. [ 140.315296][ T7891] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input15 [ 140.374982][ T9] hid-generic 0005:0008:0009.002B: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 140.609132][ T7908] netlink: 'syz.0.521': attribute type 10 has an invalid length. [ 140.613935][ T7908] bond0: (slave dummy0): Releasing active interface [ 140.625547][ T7908] team0: Port device dummy0 added [ 140.645002][ T7908] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 140.698463][ T7908] md: couldn't update array info. -22 [ 140.698538][ T6079] md_update_sb: can't update sb for read-only array md0 [ 140.737740][ T7913] md: could not open device unknown-block(1,1). [ 140.737773][ T7913] md: md_import_device returned -16 [ 140.737835][ T6079] md_update_sb: can't update sb for read-only array md0 [ 140.739619][ T6079] md_update_sb: can't update sb for read-only array md0 [ 140.740475][ T7908] netlink: 'syz.0.521': attribute type 10 has an invalid length. [ 140.761565][ T7908] team0: Port device dummy0 removed [ 140.890624][ T4709] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 140.906063][ T7918] jffs2: notice: (7918) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 141.038627][ T4709] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 141.041004][ T4709] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 141.041019][ T4709] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 141.041835][ T4709] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 141.041847][ T4709] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 141.042726][ T4709] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 141.042738][ T4709] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 141.046612][ T4709] usb 8-1: string descriptor 0 read error: -22 [ 141.046668][ T4709] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.090395][ T4709] hid-generic 0005:0008:0009.002C: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 141.142823][ T7928] fido_id[7928]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 141.170462][ T7932] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16 [ 141.292963][ T855] usb 8-1: USB disconnect, device number 6 [ 141.474913][ T7942] syzkaller0: entered promiscuous mode [ 141.474927][ T7942] syzkaller0: entered allmulticast mode [ 141.830905][ T7953] Invalid ELF header magic: != ELF [ 142.142600][ T25] hid-generic 0005:0008:0009.002D: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 142.495334][ T25] hid-generic 0005:0008:0009.002E: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 142.593950][ T7959] fido_id[7959]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 142.656931][ T7975] fido_id[7975]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 142.761751][ T7950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.933018][ T7985] __nla_validate_parse: 16 callbacks suppressed [ 142.933120][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 143.732871][ T7987] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.558'. [ 143.892361][ T5839] hid-generic 0005:0008:0009.002F: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 143.934292][ T7991] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input17 [ 143.943978][ T7997] fido_id[7997]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 143.962149][ T7999] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.562'. [ 144.012594][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 144.976734][ T43] audit: type=1326 audit(1790440002.897:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 144.976943][ T43] audit: type=1326 audit(1790440002.897:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 144.977598][ T43] audit: type=1326 audit(1790440002.907:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf702efec code=0x7ffc0000 [ 144.977853][ T43] audit: type=1326 audit(1790440002.907:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 144.978068][ T43] audit: type=1326 audit(1790440002.907:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 144.978253][ T43] audit: type=1326 audit(1790440002.907:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf702efec code=0x7ffc0000 [ 144.978510][ T43] audit: type=1326 audit(1790440002.907:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 144.978724][ T43] audit: type=1326 audit(1790440002.907:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 144.978860][ T43] audit: type=1326 audit(1790440002.907:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf702efec code=0x7ffc0000 [ 144.979077][ T43] audit: type=1326 audit(1790440002.907:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf702efec code=0x7ffc0000 [ 145.284127][ T8021] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.568'. [ 145.458765][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 145.459348][ T4709] hid-generic 0005:0008:0009.0030: item fetching failed at offset 0/1 [ 145.459830][ T4709] hid-generic 0005:0008:0009.0030: probe with driver hid-generic failed with error -22 [ 145.501695][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'. [ 145.514740][ T8029] comedi: valid board names for 8255 driver are: [ 145.514752][ T8029] 8255 [ 145.514756][ T8029] comedi: valid board names for vmk80xx driver are: [ 145.514760][ T8029] vmk80xx [ 145.514764][ T8029] comedi: valid board names for usbduxsigma driver are: [ 145.514769][ T8029] usbduxsigma [ 145.514773][ T8029] comedi: valid board names for usbduxfast driver are: [ 145.514778][ T8029] usbduxfast [ 145.514782][ T8029] comedi: valid board names for usbdux driver are: [ 145.514838][ T8029] usbdux [ 145.514843][ T8029] comedi: valid board names for ni6501 driver are: [ 145.514848][ T8029] ni6501 [ 145.514852][ T8029] comedi: valid board names for dt9812 driver are: [ 145.514856][ T8029] dt9812 [ 145.514860][ T8029] comedi: valid board names for ni_labpc_cs driver are: [ 145.514865][ T8029] ni_labpc_cs [ 145.514869][ T8029] comedi: valid board names for ni_daq_700 driver are: [ 145.514874][ T8029] ni_daq_700 [ 145.514878][ T8029] comedi: valid board names for labpc_pci driver are: [ 145.514927][ T8029] labpc_pci [ 145.514933][ T8029] comedi: valid board names for adl_pci9118 driver are: [ 145.514938][ T8029] pci9118dg [ 145.514942][ T8029] pci9118hg [ 145.514946][ T8029] pci9118hr [ 145.514952][ T8029] comedi: valid board names for 8255_pci driver are: [ 145.514958][ T8029] 8255_pci [ 145.514963][ T8029] comedi: valid board names for s526 driver are: [ 145.514969][ T8029] s526 [ 145.515031][ T8029] comedi: valid board names for multiq3 driver are: [ 145.515040][ T8029] multiq3 [ 145.515046][ T8029] comedi: valid board names for pcmuio driver are: [ 145.515054][ T8029] pcmuio48 [ 145.515059][ T8029] pcmuio96 [ 145.515062][ T8029] comedi: valid board names for pcmmio driver are: [ 145.515068][ T8029] pcmmio [ 145.515072][ T8029] comedi: valid board names for pcmda12 driver are: [ 145.515077][ T8029] pcmda12 [ 145.515081][ T8029] comedi: valid board names for pcmad driver are: [ 145.515136][ T8029] pcmad12 [ 145.515142][ T8029] pcmad16 [ 145.515146][ T8029] comedi: valid board names for ni_labpc driver are: [ 145.515152][ T8029] lab-pc-1200 [ 145.515156][ T8029] lab-pc-1200ai [ 145.515160][ T8029] lab-pc+ [ 145.515266][ T8029] comedi: valid board names for atmio16 driver are: [ 145.515279][ T8029] atmio16 [ 145.515283][ T8029] atmio16d [ 145.515288][ T8029] comedi: valid board names for ni_at_ao driver are: [ 145.515293][ T8029] at-ao-6 [ 145.515297][ T8029] at-ao-10 [ 145.515301][ T8029] comedi: valid board names for ni_at_a2150 driver are: [ 145.515370][ T8029] ni_at_a2150 [ 145.515376][ T8029] comedi: valid board names for adq12b driver are: [ 145.515381][ T8029] adq12b [ 145.515386][ T8029] comedi: valid board names for mpc624 driver are: [ 145.515391][ T8029] mpc624 [ 145.515394][ T8029] comedi: valid board names for c6xdigio driver are: [ 145.515399][ T8029] c6xdigio [ 145.515403][ T8029] comedi: valid board names for aio_iiro_16 driver are: [ 145.515411][ T8029] aio_iiro_16 [ 145.515465][ T8029] comedi: valid board names for aio_aio12_8 driver are: [ 145.515472][ T8029] aio_aio12_8 [ 145.515476][ T8029] aio_ai12_8 [ 145.515479][ T8029] aio_ao12_4 [ 145.515483][ T8029] comedi: valid board names for fl512 driver are: [ 145.515487][ T8029] fl512 [ 145.515491][ T8029] comedi: valid board names for dmm32at driver are: [ 145.515495][ T8029] dmm32at [ 145.515499][ T8029] comedi: valid board names for dt282x driver are: [ 145.515503][ T8029] dt2821 [ 145.515506][ T8029] dt2821-f [ 145.515560][ T8029] dt2821-g [ 145.515565][ T8029] dt2823 [ 145.515568][ T8029] dt2824-pgh [ 145.515571][ T8029] dt2824-pgl [ 145.515575][ T8029] dt2825 [ 145.515578][ T8029] dt2827 [ 145.515582][ T8029] dt2828 [ 145.515585][ T8029] dt2829 [ 145.515588][ T8029] dt21-ez [ 145.515591][ T8029] dt23-ez [ 145.515595][ T8029] dt24-ez [ 145.515598][ T8029] dt24-ez-pgl [ 145.515602][ T8029] comedi: valid board names for dt2817 driver are: [ 145.515606][ T8029] dt2817 [ 145.515609][ T8029] comedi: valid board names for dt2815 driver are: [ 145.515677][ T8029] dt2815 [ 145.515683][ T8029] comedi: valid board names for dt2814 driver are: [ 145.515687][ T8029] dt2814 [ 145.515691][ T8029] comedi: valid board names for dt2811 driver are: [ 145.515695][ T8029] dt2811-pgh [ 145.515700][ T8029] dt2811-pgl [ 145.515705][ T8029] comedi: valid board names for dt2801 driver are: [ 145.515710][ T8029] dt2801 [ 145.515713][ T8029] comedi: valid board names for das6402 driver are: [ 145.515718][ T8029] das6402-12 [ 145.515772][ T8029] das6402-16 [ 145.515777][ T8029] comedi: valid board names for das1800 driver are: [ 145.515783][ T8029] das-1701st [ 145.515787][ T8029] das-1701st-da [ 145.515790][ T8029] das-1702st [ 145.515795][ T8029] das-1702st-da [ 145.515798][ T8029] das-1702hr [ 145.515802][ T8029] das-1702hr-da [ 145.515806][ T8029] das-1701ao [ 145.515810][ T8029] das-1702ao [ 145.515814][ T8029] das-1801st [ 145.515817][ T8029] das-1801st-da [ 145.515821][ T8029] das-1802st [ 145.515825][ T8029] das-1802st-da [ 145.515829][ T8029] das-1802hr [ 145.515833][ T8029] das-1802hr-da [ 145.515888][ T8029] das-1801hc [ 145.515894][ T8029] das-1802hc [ 145.515897][ T8029] das-1801ao [ 145.515902][ T8029] das-1802ao [ 145.515905][ T8029] comedi: valid board names for das800 driver are: [ 145.515910][ T8029] das-800 [ 145.515913][ T8029] cio-das800 [ 145.515917][ T8029] das-801 [ 145.515920][ T8029] cio-das801 [ 145.515924][ T8029] das-802 [ 145.515927][ T8029] cio-das802 [ 145.515930][ T8029] cio-das802/16 [ 145.515984][ T8029] comedi: valid board names for isa-das08 driver are: [ 145.515990][ T8029] isa-das08 [ 145.515993][ T8029] das08-pgm [ 145.515997][ T8029] das08-pgh [ 145.516001][ T8029] das08-pgl [ 145.516004][ T8029] das08-aoh [ 145.516145][ T8029] das08-aol [ 145.516151][ T8029] das08-aom [ 145.516155][ T8029] das08/jr-ao [ 145.516161][ T8029] das08jr-16-ao [ 145.516165][ T8029] pc104-das08 [ 145.516230][ T8029] das08jr/16 [ 145.516237][ T8029] comedi: valid board names for das16m1 driver are: [ 145.516242][ T8029] das16m1 [ 145.516246][ T8029] comedi: valid board names for dac02 driver are: [ 145.516251][ T8029] dac02 [ 145.516255][ T8029] comedi: valid board names for rti802 driver are: [ 145.516260][ T8029] rti802 [ 145.516264][ T8029] comedi: valid board names for rti800 driver are: [ 145.516269][ T8029] rti800 [ 145.516274][ T8029] rti815 [ 145.516277][ T8029] comedi: valid board names for pcm3724 driver are: [ 145.516283][ T8029] pcm3724 [ 145.516287][ T8029] comedi: valid board names for pcl818 driver are: [ 145.516293][ T8029] pcl818l [ 145.516297][ T8029] pcl818h [ 145.516301][ T8029] pcl818hd [ 145.516305][ T8029] pcl818hg [ 145.516309][ T8029] pcl818 [ 145.516376][ T8029] pcl718 [ 145.516382][ T8029] pcm3718 [ 145.516385][ T8029] comedi: valid board names for pcl816 driver are: [ 145.516390][ T8029] pcl816 [ 145.516394][ T8029] pcl814b [ 145.516397][ T8029] comedi: valid board names for pcl812 driver are: [ 145.516402][ T8029] pcl812 [ 145.516405][ T8029] pcl812pg [ 145.516409][ T8029] acl8112pg [ 145.516412][ T8029] acl8112dg [ 145.516416][ T8029] acl8112hg [ 145.516419][ T8029] a821pgl [ 145.516473][ T8029] a821pglnda [ 145.516479][ T8029] a821pgh [ 145.516482][ T8029] a822pgl [ 145.516486][ T8029] a822pgh [ 145.516489][ T8029] a823pgl [ 145.516493][ T8029] a823pgh [ 145.516497][ T8029] pcl813 [ 145.516500][ T8029] pcl813b [ 145.516504][ T8029] acl8113 [ 145.516507][ T8029] iso813 [ 145.516511][ T8029] acl8216 [ 145.516514][ T8029] a826pg [ 145.516564][ T8029] comedi: valid board names for pcl730 driver are: [ 145.516571][ T8029] pcl730 [ 145.516574][ T8029] iso730 [ 145.516578][ T8029] acl7130 [ 145.516581][ T8029] pcm3730 [ 145.516585][ T8029] pcl725 [ 145.516588][ T8029] p8r8dio [ 145.516591][ T8029] acl7225b [ 145.516595][ T8029] p16r16dio [ 145.516599][ T8029] pcl733 [ 145.516602][ T8029] pcl734 [ 145.516606][ T8029] opmm-1616-xt [ 145.516661][ T8029] pearl-mm-p [ 145.516666][ T8029] ir104-pbf [ 145.516670][ T8029] comedi: valid board names for pcl726 driver are: [ 145.516674][ T8029] pcl726 [ 145.516678][ T8029] pcl727 [ 145.516681][ T8029] pcl728 [ 145.516685][ T8029] acl6126 [ 145.516688][ T8029] acl6128 [ 145.516692][ T8029] comedi: valid board names for pcl724 driver are: [ 145.516697][ T8029] pcl724 [ 145.516702][ T8029] pcl722 [ 145.516757][ T8029] pcl731 [ 145.516762][ T8029] acl7122 [ 145.516766][ T8029] acl7124 [ 145.516769][ T8029] pet48dio [ 145.516773][ T8029] pcmio48 [ 145.516776][ T8029] onyx-mm-dio [ 145.516780][ T8029] comedi: valid board names for pcl711 driver are: [ 145.516785][ T8029] pcl711 [ 145.516788][ T8029] pcl711b [ 145.516792][ T8029] acl8112hg [ 145.516795][ T8029] acl8112dg [ 145.516799][ T8029] comedi: valid board names for amplc_pc263 driver are: [ 145.516856][ T8029] pc263 [ 145.516862][ T8029] comedi: valid board names for amplc_pc236 driver are: [ 145.516867][ T8029] pc36at [ 145.516871][ T8029] comedi: valid board names for amplc_dio200 driver are: [ 145.516875][ T8029] pc212e [ 145.516879][ T8029] pc214e [ 145.516882][ T8029] pc215e [ 145.516885][ T8029] pc218e [ 145.516889][ T8029] pc272e [ 145.516893][ T8029] comedi: valid board names for comedi_parport driver are: [ 145.516898][ T8029] comedi_parport [ 145.516902][ T8029] comedi: valid board names for comedi_test driver are: [ 145.516906][ T8029] comedi_test [ 145.516910][ T8029] comedi: valid board names for comedi_bond driver are: [ 145.516915][ T8029] comedi_bond [ 145.815601][ T8033] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input18 [ 145.853900][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 145.955256][ T8036] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.573'. [ 146.119552][ T30] hid-generic 0005:0008:0009.0031: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 146.145455][ T8044] fido_id[8044]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 146.520030][ T30] hid-generic 0005:0008:0009.0032: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 146.566605][ T8062] fido_id[8062]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 147.222358][ T8075] Invalid ELF header magic: != ELF [ 147.632948][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 147.927485][ T8088] syzkaller0: entered promiscuous mode [ 147.927501][ T8088] syzkaller0: entered allmulticast mode [ 148.099616][ T30] hid-generic 0005:0008:0009.0033: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 148.148187][ T8098] fido_id[8098]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 148.223170][ T30] hid-generic 0005:0008:0009.0034: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 148.274217][ T8103] fido_id[8103]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 149.506566][ T8111] ublk4: read batch cmd buffer failed [ 149.506653][ T8111] ublk4: read batch cmd buffer failed [ 149.515249][ T8111] ublk4: read batch cmd buffer failed [ 149.515306][ T8111] ublk4: read batch cmd buffer failed [ 149.857609][ T25] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 150.017942][ T25] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 150.018728][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.145984][ T8126] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.598'. [ 150.206858][ T8128] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.599'. [ 150.252993][ T25] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 150.305426][ T855] hid-generic 0005:0008:0009.0035: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 150.358467][ T8132] fido_id[8132]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 150.493498][ T855] hid-generic 0005:0008:0009.0036: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 150.502325][ T8121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.502530][ T8121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.521014][ T855] usb 7-1: USB disconnect, device number 9 [ 150.552912][ T8142] fido_id[8142]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 150.684661][ T9] hid-generic 0005:0008:0009.0037: item fetching failed at offset 0/1 [ 150.684944][ T9] hid-generic 0005:0008:0009.0037: probe with driver hid-generic failed with error -22 [ 150.686733][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'. [ 150.732669][ T8155] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.607'. [ 150.823969][ T8160] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.608'. [ 152.051648][ T8175] netlink: 'syz.2.610': attribute type 10 has an invalid length. [ 152.391407][ T5219] hid-generic 0005:0008:0009.0038: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 152.443209][ T855] hid-generic 0005:0008:0009.0039: item fetching failed at offset 0/1 [ 152.443649][ T855] hid-generic 0005:0008:0009.0039: probe with driver hid-generic failed with error -22 [ 152.455819][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 152.542667][ T8189] fido_id[8189]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 152.629096][ T855] hid-generic 0005:0008:0009.003A: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 152.669059][ T8199] fido_id[8199]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 152.718500][ T8206] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 152.938155][ T30] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 153.087969][ T30] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 153.089333][ T30] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.089357][ T30] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 153.089369][ T30] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.090634][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 153.090646][ T30] usb 7-1: Product: syz [ 153.090655][ T30] usb 7-1: Manufacturer: syz [ 153.099159][ T8203] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 153.100092][ T30] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 153.137165][ T30] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 153.315822][ T8203] uhci_hcd 0000:00:1d.0: remove, state 4 [ 153.315899][ T8203] usb usb2: USB disconnect, device number 1 [ 153.353522][ T8203] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 153.536351][ T30] usb 7-1: USB disconnect, device number 10 [ 153.546043][ T30] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 153.551960][ T30] garmin_gps 7-1:1.0: device disconnected [ 153.636459][ T43] kauditd_printk_skb: 246 callbacks suppressed [ 153.636471][ T43] audit: type=1800 audit(1790440011.587:929): pid=8217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.623" name="file0" dev="overlay" ino=917 res=0 errno=0 [ 153.966876][ T8223] netlink: 36 bytes leftover after parsing attributes in process `syz.0.624'. [ 154.563312][ T9] hid-generic 0005:0008:0009.003B: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 154.592162][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 154.600844][ T30] hid-generic 0005:0008:0009.003C: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 154.655190][ T8233] fido_id[8233]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 154.856821][ T8246] block nbd0: server does not support multiple connections per device. [ 154.861673][ T8246] block nbd0: shutting down sockets [ 154.900755][ T8254] overlayfs: failed to resolve './file0': -2 [ 155.408507][ T8257] netlink: 1052 bytes leftover after parsing attributes in process `syz.2.637'. [ 155.476143][ T8259] netlink: 40 bytes leftover after parsing attributes in process `syz.1.636'. [ 155.481000][ T8263] netlink: 52 bytes leftover after parsing attributes in process `syz.2.638'. [ 155.487507][ T5219] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 155.490532][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 155.503039][ T30] hid-generic 0005:0008:0009.003D: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 155.524096][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 155.545245][ T8268] fido_id[8268]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 155.611629][ T8278] netlink: 'syz.0.645': attribute type 10 has an invalid length. [ 155.615946][ T8278] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.677545][ T5219] usb 8-1: Using ep0 maxpacket: 8 [ 155.678323][ T5219] usb 8-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 155.678796][ T5219] usb 8-1: config 0 has no interfaces? [ 155.680699][ T5219] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.680719][ T5219] usb 8-1: Product: syz [ 155.680730][ T5219] usb 8-1: Manufacturer: syz [ 155.680742][ T5219] usb 8-1: SerialNumber: syz [ 155.685140][ T5219] usb 8-1: config 0 descriptor?? [ 155.698211][ T8278] md: couldn't update array info. -22 [ 155.698289][ T6079] md_update_sb: can't update sb for read-only array md0 [ 155.719829][ T8278] netlink: 'syz.0.645': attribute type 10 has an invalid length. [ 155.737686][ T6079] md_update_sb: can't update sb for read-only array md0 [ 155.747708][ T6079] md_update_sb: can't update sb for read-only array md0 [ 155.822408][ T8286] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.648'. [ 155.844954][ T8287] Invalid ELF header magic: != ELF [ 155.900038][ T5219] usb 8-1: USB disconnect, device number 7 [ 155.964241][ T25] hid-generic 0005:0008:0009.003E: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 155.975124][ T8290] netlink: 52 bytes leftover after parsing attributes in process `syz.0.649'. [ 156.030511][ T8293] fido_id[8293]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 156.036302][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.651'. [ 156.048387][ T25] hid-generic 0005:0008:0009.003F: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 156.058161][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 156.506368][ T8312] syzkaller0: entered promiscuous mode [ 156.506382][ T8312] syzkaller0: entered allmulticast mode [ 156.809349][ T8315] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.659'. [ 156.971677][ T7523] hid-generic 0005:0008:0009.0040: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 157.016182][ T8325] fido_id[8325]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 157.061396][ T7523] hid-generic 0005:0008:0009.0041: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 157.078679][ T5219] hid-generic 0005:0008:0009.0042: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 157.108382][ T8332] fido_id[8332]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 157.193012][ T8335] fido_id[8335]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 157.488427][ T8344] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 157.488453][ T8344] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.492073][ T8344] vhci_hcd vhci_hcd.0: Device attached [ 157.506113][ T8345] vhci_hcd: connection closed [ 157.515285][ T13] vhci_hcd vhci_hcd.2: stop threads [ 157.515989][ T13] vhci_hcd vhci_hcd.2: release socket [ 157.516020][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 157.988795][ T30] logitech-hidpp-device 0003:046D:C082.0043: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 158.030122][ T8352] fido_id[8352]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 158.163905][ T30] hid-generic 0005:0008:0009.0044: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 158.211260][ T8359] fido_id[8359]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 158.330591][ T43] audit: type=1800 audit(1790440016.287:930): pid=8363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.672" name="file0" dev="overlay" ino=925 res=0 errno=0 [ 159.153786][ T5219] hid-generic 0005:0008:0009.0045: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 159.209226][ T8375] fido_id[8375]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 159.345145][ T8385] FAULT_INJECTION: forcing a failure. [ 159.345145][ T8385] name failslab, interval 1, probability 0, space 0, times 1 [ 159.345178][ T8385] CPU: 1 UID: 0 PID: 8385 Comm: syz.0.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.345201][ T8385] Tainted: [L]=SOFTLOCKUP [ 159.345206][ T8385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.345216][ T8385] Call Trace: [ 159.345223][ T8385] [ 159.345230][ T8385] dump_stack_lvl+0x100/0x190 [ 159.345316][ T8385] should_fail_ex.cold+0x5/0xa [ 159.345338][ T8385] should_failslab+0xc2/0x120 [ 159.345387][ T8385] __kmalloc_cache_noprof+0x91/0x6d0 [ 159.345406][ T8385] ? ip_vs_new_dest+0x1a0/0xc80 [ 159.345455][ T8385] ip_vs_new_dest+0x1a0/0xc80 [ 159.345478][ T8385] ? do_ip_vs_set_ctl+0x496/0xc90 [ 159.345501][ T8385] ? __pfx_ip_vs_new_dest+0x10/0x10 [ 159.345521][ T8385] ? lock_acquire+0x1d1/0x380 [ 159.345546][ T8385] ? do_raw_spin_lock+0x128/0x260 [ 159.345572][ T8385] ip_vs_add_dest+0xafc/0x10b0 [ 159.345592][ T8385] ? lock_acquire+0x1d1/0x380 [ 159.345621][ T8385] ? do_ip_vs_set_ctl+0x919/0xc90 [ 159.345650][ T8385] ? __pfx_ip_vs_add_dest+0x10/0x10 [ 159.345670][ T8385] ? find_held_lock+0x2b/0x80 [ 159.345688][ T8385] ? do_ip_vs_set_ctl+0x7e4/0xc90 [ 159.345708][ T8385] ? do_ip_vs_set_ctl+0x7e4/0xc90 [ 159.345731][ T8385] ? do_ip_vs_set_ctl+0xbd0/0xc90 [ 159.345751][ T8385] do_ip_vs_set_ctl+0xbd0/0xc90 [ 159.345777][ T8385] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 159.345795][ T8385] ? rcu_is_watching+0x13/0xc0 [ 159.345821][ T8385] ? find_held_lock+0x2b/0x80 [ 159.345837][ T8385] ? nf_sockopt_find.isra.0+0x222/0x290 [ 159.345864][ T8385] ? nf_sockopt_find.isra.0+0x222/0x290 [ 159.345901][ T8385] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 159.345964][ T8385] ? nf_setsockopt+0x8d/0xf0 [ 159.345989][ T8385] nf_setsockopt+0x8d/0xf0 [ 159.346018][ T8385] ip_setsockopt+0xcb/0xf0 [ 159.346044][ T8385] sctp_setsockopt+0x161/0xb370 [ 159.346076][ T8385] ? __fget_files+0x34/0x3d0 [ 159.346099][ T8385] ? __pfx_sctp_setsockopt+0x10/0x10 [ 159.346127][ T8385] ? aa_sock_opt_perm+0x114/0x1e0 [ 159.346153][ T8385] ? sock_common_setsockopt+0x2e/0xf0 [ 159.346174][ T8385] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 159.346197][ T8385] do_sock_setsockopt+0xf3/0x1d0 [ 159.346221][ T8385] __sys_setsockopt+0x119/0x190 [ 159.346253][ T8385] __ia32_sys_setsockopt+0xbc/0x160 [ 159.346279][ T8385] ? __do_fast_syscall_32+0xb3/0x8b0 [ 159.346301][ T8385] ? lockdep_hardirqs_on+0x7d/0x110 [ 159.346321][ T8385] __do_fast_syscall_32+0x13a/0x8b0 [ 159.346346][ T8385] do_fast_syscall_32+0x32/0x70 [ 159.346368][ T8385] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.346392][ T8385] RIP: 0023:0xf702efec [ 159.346410][ T8385] Code: Unable to access opcode bytes at 0xf702efc2. [ 159.346419][ T8385] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 159.346437][ T8385] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 159.346449][ T8385] RDX: 0000000000000487 RSI: 0000000080000140 RDI: 0000000000000044 [ 159.346461][ T8385] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.346471][ T8385] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 159.346482][ T8385] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.346505][ T8385] [ 159.353487][ T8385] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 159.396421][ T30] hid-generic 0005:0008:0009.0046: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 159.497567][ T855] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 159.648199][ T855] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 159.649085][ T855] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.649098][ T855] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.649107][ T855] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 159.649132][ T855] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.650411][ T855] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.650423][ T855] usb 6-1: Product: syz [ 159.650430][ T855] usb 6-1: Manufacturer: syz [ 159.653028][ T855] cdc_wdm 6-1:1.0: skipping garbage [ 159.653037][ T855] cdc_wdm 6-1:1.0: skipping garbage [ 159.653966][ T855] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 159.653975][ T855] cdc_wdm 6-1:1.0: Unknown control protocol [ 159.960690][ T855] hid-generic 0005:0008:0009.0047: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 160.013860][ T8406] fido_id[8406]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 160.080230][ T30] usb 6-1: USB disconnect, device number 12 [ 160.116816][ T9] hid-generic 0005:0008:0009.0048: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 160.187254][ T8412] fido_id[8412]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 160.206580][ T5219] hid-generic 0005:0008:0009.0049: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 160.230039][ T9] hid-generic 0005:0008:0009.004A: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 160.276676][ T8419] fido_id[8419]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 160.340733][ T8424] fido_id[8424]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 160.966982][ T25] hid-generic 0005:0008:0009.004B: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 160.988082][ T8443] __nla_validate_parse: 12 callbacks suppressed [ 160.988188][ T8443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.694'. [ 161.005304][ T8445] fido_id[8445]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 161.032695][ T25] hid-generic 0005:0008:0009.004C: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 161.100010][ T8448] fido_id[8448]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 161.300822][ T5839] hid-generic 0005:0008:0009.004D: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 161.366235][ T8472] netlink: 1052 bytes leftover after parsing attributes in process `syz.1.704'. [ 161.379487][ T8467] fido_id[8467]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 161.516089][ T30] hid-generic 0005:0008:0009.004E: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 161.541277][ T5839] hid-generic 0005:0008:0009.004F: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 161.549181][ T8485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.706'. [ 161.573241][ T8486] fido_id[8486]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 161.664471][ T30] hid-generic 0005:0008:0009.0050: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 161.715765][ T8496] fido_id[8496]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 161.723450][ T25] hid-generic 0005:0008:0009.0051: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 161.768595][ T8492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.707'. [ 161.895065][ T8502] fido_id[8502]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 161.939179][ T8506] fido_id[8506]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 162.669343][ T30] hid-generic 0005:0008:0009.0052: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 162.872157][ T8532] syzkaller0: entered promiscuous mode [ 162.872173][ T8532] syzkaller0: entered allmulticast mode [ 162.886115][ T8530] fido_id[8530]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 162.920985][ T5888] hid-generic 0005:0008:0009.0053: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 163.000988][ T8541] netlink: 1052 bytes leftover after parsing attributes in process `syz.1.713'. [ 163.038243][ T8540] fido_id[8540]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 163.318106][ T855] hid-generic 0005:0008:0009.0054: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 163.358980][ T8555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.718'. [ 163.393963][ T8554] fido_id[8554]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 163.571793][ T30] hid-generic 0005:0008:0009.0055: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 163.612531][ T8560] fido_id[8560]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 163.848333][ T8563] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.720'. [ 165.382378][ T30] hid-generic 0005:0008:0009.0056: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 165.454958][ T855] hid-generic 0005:0008:0009.0057: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 165.495287][ T8576] fido_id[8576]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 165.610492][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 165.928450][ T8592] netlink: 1052 bytes leftover after parsing attributes in process `syz.1.729'. [ 166.089221][ T8600] netlink: 1052 bytes leftover after parsing attributes in process `syz.1.730'. [ 166.636069][ T5219] hid-generic 0005:0008:0009.0058: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 166.664345][ T5888] hid-generic 0005:0008:0009.0059: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 166.666476][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 166.683712][ T8628] fido_id[8628]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 166.756149][ T8630] fido_id[8630]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 166.759701][ T8635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.734'. [ 166.780587][ T7523] hid-generic 0005:0008:0009.005A: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 166.781018][ T8638] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.740'. [ 166.879619][ T8643] futex_wake_op: syz.0.742 tries to shift op by 144; fix this program [ 166.884710][ T8640] fido_id[8640]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 167.128853][ T5888] hid-generic 0005:0008:0009.005B: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 167.274154][ T8660] fido_id[8660]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 167.535652][ T7523] hid-generic 0005:0008:0009.005C: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 167.558974][ T8667] netlink: 52 bytes leftover after parsing attributes in process `syz.2.749'. [ 167.647331][ T8670] fido_id[8670]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 167.831663][ T8676] netlink: 1052 bytes leftover after parsing attributes in process `syz.2.751'. [ 168.018895][ T25] hid-generic 0005:0008:0009.005D: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 168.250095][ T43] audit: type=1800 audit(1790440026.197:931): pid=8688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.755" name="file0" dev="overlay" ino=1076 res=0 errno=0 [ 168.638974][ T7523] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 168.830777][ T7523] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 168.831749][ T7523] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.831762][ T7523] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 168.831829][ T7523] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.831848][ T7523] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.965106][ T7523] hub 5-1:1.0: bad descriptor, ignoring hub [ 168.965129][ T7523] hub 5-1:1.0: probe with driver hub failed with error -5 [ 169.023241][ T7523] cdc_wdm 5-1:1.0: skipping garbage [ 169.023470][ T7523] cdc_wdm 5-1:1.0: skipping garbage [ 169.024052][ T7523] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 169.241896][ T8698] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 169.254792][ T8698] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 169.254894][ T8698] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 169.255071][ T8698] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 169.255455][ T8698] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 169.263672][ T8698] pci 0000:00:01.0: Adding to iommu group 1 [ 169.269952][ T8698] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 169.269966][ T8698] pci 0000:00:01.0: vgaarb: bridge control possible [ 169.269973][ T8698] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 169.289549][ T8698] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 169.316262][ T8698] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 169.339088][ T8698] pci 0000:00:1d.0: Adding to iommu group 7 [ 169.347295][ T8698] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 169.347664][ T8698] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 169.347829][ T8698] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 169.350146][ T8698] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 169.355652][ T8698] [drm] Found bochs VGA, ID 0xb0c5. [ 169.355661][ T8698] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 169.385847][ T8698] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 169.537098][ T855] hid-generic 0005:0008:0009.005E: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 169.563433][ T8707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.760'. [ 169.577611][ T8709] fido_id[8709]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 169.610283][ T8698] Console: switching to colour frame buffer device 160x50 [ 169.642874][ T8698] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 169.783951][ T8698] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 137306 usecs [ 169.788191][ T8711] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.761'. [ 169.878144][ T8698] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 169.925678][ T8698] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 169.925841][ T8698] uhci_hcd 0000:00:1d.0: detected 2 ports [ 169.935173][ T8698] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 169.944698][ T8698] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 169.960396][ T855] hid-generic 0005:0008:0009.005F: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 169.998403][ T8698] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 169.998517][ T8698] usb usb2: Product: UHCI Host Controller [ 169.998527][ T8698] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 169.998535][ T8698] usb usb2: SerialNumber: 0000:00:1d.0 [ 170.039046][ T8715] fido_id[8715]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 170.126983][ T8698] hub 2-0:1.0: USB hub found [ 170.136490][ T8698] hub 2-0:1.0: 2 ports detected [ 170.142925][ T5219] hid-generic 0005:0008:0009.0060: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 170.160108][ T8717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.763'. [ 170.266759][ T8719] fido_id[8719]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 170.451468][ T5742] Bluetooth: hci1: command 0x0406 tx timeout [ 171.468202][ T9] usb 5-1: USB disconnect, device number 9 [ 171.684875][ T855] hid-generic 0005:0008:0009.0061: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 171.716163][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 171.721359][ T8759] fido_id[8759]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 171.810401][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 171.810778][ T8763] netlink: 1052 bytes leftover after parsing attributes in process `syz.1.783'. [ 172.675294][ T8776] netlink: 1052 bytes leftover after parsing attributes in process `syz.2.779'. [ 172.823577][ T25] hid-generic 0005:0008:0009.0062: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 172.837796][ T8778] netlink: 52 bytes leftover after parsing attributes in process `syz.1.781'. [ 172.850847][ T855] hid-generic 0005:0008:0009.0063: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 172.882683][ T6249] hid-generic 0005:0008:0009.0064: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 172.889116][ T8783] fido_id[8783]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 172.943255][ T8794] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.787'. [ 172.969548][ T8792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.784'. [ 172.980986][ T855] hid-generic 0005:0008:0009.0065: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 172.988110][ T8795] fido_id[8795]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 173.018915][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'. [ 173.037092][ T8797] fido_id[8797]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 173.054161][ T8799] netlink: 1052 bytes leftover after parsing attributes in process `syz.1.789'. [ 173.107932][ T8802] fido_id[8802]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 173.261136][ T8812] block nbd0: server does not support multiple connections per device. [ 173.261319][ T8812] block nbd0: shutting down sockets [ 173.347594][ T7523] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 173.436154][ T8813] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 173.510009][ T7523] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 173.513150][ T7523] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 120, changing to 10 [ 173.513577][ T7523] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8200, setting to 1024 [ 173.513624][ T7523] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.540003][ T7523] usb 5-1: config 0 descriptor?? [ 173.567583][ T855] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 173.717598][ T855] usb 7-1: Using ep0 maxpacket: 8 [ 173.719250][ T855] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 173.720814][ T855] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 173.720833][ T855] usb 7-1: config 0 has no interface number 0 [ 173.720860][ T855] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.720877][ T855] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 173.720895][ T855] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.720913][ T855] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.720979][ T855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.723047][ T855] usb 7-1: config 0 descriptor?? [ 173.727147][ T855] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 173.776666][ T7523] usbhid 5-1:0.0: can't add hid device: -71 [ 173.779399][ T7523] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 173.853370][ T7523] usb 5-1: USB disconnect, device number 10 [ 173.877935][ T5742] Bluetooth: hci1: command 0x0406 tx timeout [ 174.071490][ T5839] usb 7-1: USB disconnect, device number 11 [ 174.075120][ T5839] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 174.267630][ T7523] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 174.421922][ T7523] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 174.426414][ T7523] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 120, changing to 10 [ 174.426595][ T7523] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8200, setting to 1024 [ 174.426923][ T7523] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.462384][ T7523] usb 5-1: config 0 descriptor?? [ 174.558099][ T9] hid-generic 0005:0008:0009.0066: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 174.573958][ T8820] netlink: 52 bytes leftover after parsing attributes in process `syz.3.795'. [ 174.610054][ T8824] fido_id[8824]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 174.698042][ T8806] devpts: Bad value for 'max' [ 174.706644][ T5839] hid-generic 0005:0008:0009.0067: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 174.744348][ T8833] fido_id[8833]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 174.944006][ T7523] usbhid 5-1:0.0: can't add hid device: -71 [ 174.945802][ T7523] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 174.955729][ T7523] usb 5-1: USB disconnect, device number 11 [ 174.963322][ T5839] hid-generic 0005:0008:0009.0068: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 175.073282][ T5839] hid-generic 0005:0008:0009.0069: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 175.118834][ T8857] fido_id[8857]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 175.211444][ T25] hid-generic 0005:0008:0009.006A: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 175.322502][ T7523] hid-generic 0005:0008:0009.006B: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 175.329917][ T8870] fido_id[8870]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 175.569452][ T8887] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.569754][ T8887] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.680911][ T8894] nvmet: disable ns before setting buffered_io value. [ 175.959308][ T5742] Bluetooth: hci1: command 0x0406 tx timeout [ 176.893650][ T25] hid-generic 0005:0008:0009.006C: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 176.907268][ T8918] __nla_validate_parse: 10 callbacks suppressed [ 176.907287][ T8918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.828'. [ 176.926794][ T855] hid-generic 0005:0008:0009.006D: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 176.932956][ T8920] fido_id[8920]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 176.942738][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 177.038034][ T8927] fido_id[8927]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 177.062640][ T8931] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.833'. [ 177.137783][ T855] hid-generic 0005:0008:0009.006E: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 177.160107][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 177.206465][ T8937] fido_id[8937]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 177.415067][ T25] hid-generic 0005:0008:0009.006F: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 177.433576][ T8950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.842'. [ 177.463537][ T8954] fido_id[8954]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 177.597115][ T8961] netlink: 1052 bytes leftover after parsing attributes in process `syz.1.846'. [ 177.637238][ T30] hid-generic 0005:0008:0009.0070: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 177.645460][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.847'. [ 177.700785][ T8966] fido_id[8966]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 177.919462][ T5839] hid-generic 0005:0008:0009.0071: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 177.924085][ T8979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.853'. [ 177.985365][ T8981] fido_id[8981]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 178.046717][ T8985] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.856'. [ 178.066051][ T5839] hid-generic 0005:0008:0009.0072: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 178.091535][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 178.143543][ T8989] fido_id[8989]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 178.311453][ T8999] Console: switching to colour dummy device 80x25 [ 179.041056][ T5839] hid-generic 0005:0008:0009.0073: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 179.074620][ T9019] fido_id[9019]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 179.230228][ T5888] hid-generic 0005:0008:0009.0074: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 179.354496][ T9039] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 179.369052][ T9039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.386097][ T5888] hid-generic 0005:0008:0009.0075: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 179.415403][ T9039] macvlan2: entered promiscuous mode [ 179.415419][ T9039] macvlan2: entered allmulticast mode [ 179.415653][ T9039] bond1: entered allmulticast mode [ 179.415689][ T9039] bond1: entered promiscuous mode [ 179.416042][ T9039] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 179.421339][ T9039] team0: Port device macvlan2 added [ 179.440587][ T9045] fido_id[9045]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 179.456054][ T9039] bond1: (slave ip6gretap1): making interface the new active one [ 179.456072][ T9039] ip6gretap1: entered promiscuous mode [ 179.456163][ T9039] ip6gretap1: entered allmulticast mode [ 179.462296][ T9039] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 179.490121][ T43] audit: type=1326 audit(1790440037.447:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 179.490258][ T43] audit: type=1326 audit(1790440037.447:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 179.491316][ T43] audit: type=1326 audit(1790440037.447:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 179.491530][ T43] audit: type=1326 audit(1790440037.447:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 179.491685][ T43] audit: type=1326 audit(1790440037.447:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.881" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf702efec code=0x7ffc0000 [ 179.492013][ T43] audit: type=1326 audit(1790440037.447:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 179.492504][ T43] audit: type=1326 audit(1790440037.447:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 179.492696][ T43] audit: type=1326 audit(1790440037.447:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.881" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf702efec code=0x7ffc0000 [ 179.493086][ T43] audit: type=1326 audit(1790440037.447:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 179.493289][ T43] audit: type=1326 audit(1790440037.447:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 179.499537][ T9049] Config c1/1 of g1 needs at least one function. [ 179.499666][ T9049] udc dummy_udc.0: failed to start g1: -22 [ 179.499685][ T9049] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 179.501502][ T9049] UDC core: g1: couldn't find an available UDC or it's busy [ 179.532259][ T9049] XFS (nullb0): Invalid superblock magic number [ 179.917551][ T5219] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 180.069061][ T5219] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 180.070616][ T5219] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 180.070639][ T5219] usb 8-1: config 1 has no interface number 0 [ 180.071053][ T5219] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 180.071078][ T5219] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 180.071100][ T5219] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.075362][ T5219] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.075381][ T5219] usb 8-1: Product: syz [ 180.075393][ T5219] usb 8-1: Manufacturer: syz [ 180.075405][ T5219] usb 8-1: SerialNumber: syz [ 180.093299][ T9063] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.304810][ T9063] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.523160][ T5219] sierra_net 8-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 180.618624][ T855] hid-generic 0005:0008:0009.0076: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 180.720803][ T9074] fido_id[9074]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 180.721190][ T9063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.724795][ T9063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.946104][ T9063] random: crng reseeded on system resumption [ 181.001657][ T9] hid-generic 0005:0008:0009.0077: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 181.038301][ T5219] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 181.038795][ T5219] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 181.042753][ T5219] sierra_net 8-1:1.7 wwan0: Submit SYNC failed -71 [ 181.043041][ T5219] sierra_net 8-1:1.7 wwan0: Send SYNC failed, status -71 [ 181.066606][ T9084] fido_id[9084]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 181.187105][ T5219] usb 8-1: USB disconnect, device number 8 [ 181.272365][ T9] hid-generic 0005:0008:0009.0078: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 181.339733][ T5219] sierra_net 8-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 181.410900][ T9103] fido_id[9103]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 181.548671][ T5219] sierra_net 8-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 181.581080][ T5888] hid-generic 0005:0008:0009.0079: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 181.703066][ T9110] fido_id[9110]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 181.818626][ T5888] hid-generic 0005:0008:0009.007A: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 181.943061][ T9123] fido_id[9123]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 182.076970][ T5219] hid-generic 0005:0008:0009.007B: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 182.091023][ T9127] __nla_validate_parse: 11 callbacks suppressed [ 182.091035][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'. [ 182.154125][ T9129] fido_id[9129]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 182.297175][ T5219] hid-generic 0005:0007:0009.007C: item fetching failed at offset 0/1 [ 182.299327][ T5219] hid-generic 0005:0007:0009.007C: probe with driver hid-generic failed with error -22 [ 182.314994][ T5888] hid-generic 0005:0008:0009.007D: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 182.317792][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 182.322020][ T9136] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 182.358204][ T9136] md: couldn't update array info. -22 [ 182.360603][ T5839] hid-generic 0005:0008:0009.007E: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 182.361690][ T6079] md_update_sb: can't update sb for read-only array md0 [ 182.364461][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 182.375982][ T9141] fido_id[9141]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 182.413721][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'. [ 182.432730][ T9147] fido_id[9147]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 182.447672][ T9136] md: could not open device unknown-block(1,1). [ 182.447703][ T9136] md: md_import_device returned -16 [ 182.447752][ T6079] md_update_sb: can't update sb for read-only array md0 [ 182.668166][ T9152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.908'. [ 182.709067][ T5839] hid-generic 0005:0008:0009.007F: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 182.728622][ T9156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.909'. [ 182.766737][ T9160] fido_id[9160]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 182.935638][ T5219] hid-generic 0005:0008:0009.0080: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 182.948551][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'. [ 183.007152][ T9174] fido_id[9174]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 183.127964][ T9191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.918'. [ 183.128481][ T855] hid-generic 0005:0008:0009.0081: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 183.133329][ T9187] program syz.1.914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.133414][ T9187] ata1.00: non-matching transfer count (8388608/133) [ 184.022595][ T9206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.921'. [ 184.079392][ T9208] syzkaller0: entered promiscuous mode [ 184.079406][ T9208] syzkaller0: entered allmulticast mode [ 184.082885][ T9208] tc mirred to Houston: device batadv_slave_0 is down [ 184.235146][ T5219] hid-generic 0005:0008:0009.0082: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 184.249997][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'. [ 184.291445][ T9216] fido_id[9216]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 185.066066][ T9] hid-generic 0005:0008:0009.0083: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 185.096113][ T9243] fido_id[9243]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 185.196172][ T5219] hid-generic 0005:0008:0009.0084: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 185.224637][ T9253] fido_id[9253]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 185.393000][ T855] hid-generic 0005:0008:0009.0085: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 185.446171][ T9264] fido_id[9264]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 185.563653][ T9274] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 185.567633][ T9274] i2c i2c-1: Failed to register i2c client typec_fusb302 at 0x22 (-16) [ 185.575034][ T9274] Invalid option length (1047276) for dns_resolver key [ 185.687590][ T6249] hid-generic 0005:0008:0009.0086: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 185.734350][ T855] hid-generic 0005:0008:0009.0087: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 185.761404][ T9287] fido_id[9287]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 185.859624][ T9293] fido_id[9293]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 187.069737][ T9] hid-generic 0005:0008:0009.0088: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 187.142833][ T9368] fido_id[9368]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 187.183187][ T9] hid-generic 0005:0008:0009.0089: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 187.225310][ T9374] fido_id[9374]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 187.243709][ T9378] netlink: 'syz.1.960': attribute type 10 has an invalid length. [ 187.252663][ T9378] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 187.298166][ T9378] md: couldn't update array info. -22 [ 187.299487][ T6079] md_update_sb: can't update sb for read-only array md0 [ 187.327663][ T9378] md: could not open device unknown-block(1,1). [ 187.327711][ T9378] md: md_import_device returned -16 [ 187.330070][ T6079] md_update_sb: can't update sb for read-only array md0 [ 187.330747][ T6079] md_update_sb: can't update sb for read-only array md0 [ 187.331400][ T9378] netlink: 'syz.1.960': attribute type 10 has an invalid length. [ 187.452747][ T9391] ieee802154 phy0 wpan0: encryption failed: -126 [ 187.514152][ T9] hid-generic 0005:0008:0009.008A: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 187.542018][ T9394] __nla_validate_parse: 5 callbacks suppressed [ 187.542031][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.967'. [ 187.548965][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 187.550239][ T5888] hid-generic 0005:0008:0009.008B: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 187.561045][ T9399] fido_id[9399]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 188.297534][ T9424] jffs2: notice: (9424) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 188.499312][ T9403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.684481][ T9428] Unsupported ieee802154 address type: 0 [ 189.016766][ T9320] Bluetooth: hci4: Frame reassembly failed (-84) [ 189.028410][ T9438] Bluetooth: hci4: Frame reassembly failed (-90) [ 189.475247][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'. [ 189.683197][ T9462] block device autoloading is deprecated and will be removed. [ 189.684478][ T9463] random: crng reseeded on system resumption [ 189.710337][ T9460] comedi comedi3: c6xdigio: I/O port conflict (0x3c4,3) [ 189.722280][ T9460] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 191.077625][ T5742] Bluetooth: hci4: command 0x1003 tx timeout [ 191.084295][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 191.147159][ T9473] netlink: 1052 bytes leftover after parsing attributes in process `syz.1.993'. [ 191.326448][ T9486] syzkaller0: entered promiscuous mode [ 191.326469][ T9486] syzkaller0: entered allmulticast mode [ 191.369851][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'. [ 191.873067][ T5219] hid-generic 0005:0008:0009.008C: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 191.877955][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 191.917245][ T9499] fido_id[9499]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 192.075179][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 192.201125][ T9512] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.1006'. [ 192.564587][ T9518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1007'. [ 193.238993][ T5839] hid-generic 0005:0008:0009.008D: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 193.248141][ T9551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1020'. [ 193.291866][ T9553] fido_id[9553]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 193.635747][ T7523] hid-generic 0005:0008:0009.008E: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 193.686574][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 193.705773][ T9567] fido_id[9567]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 193.874795][ T5839] hid-generic 0005:0008:0009.008F: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 193.879341][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.879384][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.890455][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 193.991750][ T9578] fido_id[9578]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 194.043039][ T43] kauditd_printk_skb: 108 callbacks suppressed [ 194.043057][ T43] audit: type=1800 audit(1790440051.997:1050): pid=9573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1028" name="bus" dev="9p" ino=71827945 res=0 errno=0 [ 194.307196][ T9586] netlink: Failed to add  helper -22 [ 194.308240][ T9586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.513592][ T9589] binder: 9588:9589 ioctl c00c6211 0 returned -14 [ 195.247914][ T5839] hid-generic 0005:0008:0009.0090: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 195.267833][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 195.414754][ T9602] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1033'. [ 195.414769][ T9602] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 195.625921][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 195.731498][ T9617] bond0: (slave bond_slave_0): Releasing backup interface [ 195.732189][ T9617] bond_slave_0: left promiscuous mode [ 195.744082][ T9617] bond0: (slave bond_slave_1): Releasing backup interface [ 195.749519][ T9617] bond_slave_1: left promiscuous mode [ 195.795385][ T9617] bond0: option slaves: interface +dummy0 does not exist! [ 195.796742][ T9617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.814088][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 195.818110][ T5839] hid-generic 0005:0008:0009.0091: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 196.020694][ T9627] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.1045'. [ 196.411486][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1049'. [ 196.440826][ T5219] hid-generic 0005:0008:0009.0092: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 196.545765][ T9647] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 196.546209][ T9641] fido_id[9641]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 196.661763][ T5219] hid-generic 0005:0008:0009.0093: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 196.744710][ T9658] bond0: (slave bond_slave_0): Releasing backup interface [ 196.746243][ T9658] bond_slave_0: left promiscuous mode [ 196.760688][ T9658] bond0: (slave bond_slave_1): Releasing backup interface [ 196.761755][ T9658] bond_slave_1: left promiscuous mode [ 196.824987][ T9658] bond0: (slave dummy0): making interface the new active one [ 196.825051][ T9658] dummy0: entered promiscuous mode [ 196.885409][ T9658] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 196.890884][ T9666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.469501][ T5219] hid-generic 0005:0008:0009.0094: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 197.508541][ T9691] fido_id[9691]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 197.553063][ T7523] hid-generic 0005:0008:0009.0095: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 197.671153][ T9694] __nla_validate_parse: 9 callbacks suppressed [ 197.671172][ T9694] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1067'. [ 197.902966][ T9698] netlink: 'syz.2.1069': attribute type 15 has an invalid length. [ 197.902987][ T9698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1069'. [ 198.006220][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 198.011947][ T9712] bond0: (slave bond_slave_0): Releasing backup interface [ 198.027699][ T9712] bond_slave_0: left promiscuous mode [ 198.062965][ T9712] bond0: (slave bond_slave_1): Releasing backup interface [ 198.066551][ T9712] bond_slave_1: left promiscuous mode [ 198.157749][ T6249] hid-generic 0005:0008:0009.0096: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 198.181508][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'. [ 198.188142][ T9729] bond0: option slaves: interface +dummy0 does not exist! [ 198.192609][ T9729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.244608][ T9727] fido_id[9727]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 198.379278][ T9743] netlink: 1052 bytes leftover after parsing attributes in process `syz.2.1083'. [ 198.406401][ T6249] hid-generic 0005:0008:0009.0097: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 198.420406][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 198.460246][ T9748] fido_id[9748]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 198.788534][ T6249] hid-generic 0005:0008:0009.0098: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 198.800227][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1089'. [ 198.835035][ T9768] fido_id[9768]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 199.434286][ T9790] pim6reg: entered allmulticast mode [ 199.728637][ T9790] pim6reg: left allmulticast mode [ 199.804588][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1095'. [ 200.435776][ T9792] hsr_slave_1 (unregistering): left promiscuous mode [ 200.559518][ T9804] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1098'. [ 200.559541][ T9804] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1098'. [ 201.055462][ T9826] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 201.088756][ T9826] md: couldn't update array info. -22 [ 201.088810][ T6079] md_update_sb: can't update sb for read-only array md0 [ 201.116520][ T6249] hid-generic 0005:0008:0009.0099: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 201.183963][ T9830] fido_id[9830]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 201.195901][ T9831] md0: detected capacity change from 2048 to 0 [ 201.195921][ T9831] md: md0 stopped. [ 201.227326][ T9826] md: invalid raid superblock magic on ram0 [ 201.227343][ T9826] md: ram0 does not have a valid v0.90 superblock, not importing! [ 201.228367][ T9826] md: md_import_device returned -22 [ 201.565980][ T9847] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 201.642830][ T9852] syzkaller0: entered promiscuous mode [ 201.642843][ T9852] syzkaller0: entered allmulticast mode [ 202.532892][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.532997][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.017679][ T5832] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 203.427505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 203.444359][ T5832] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.477271][ T5832] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.477297][ T5832] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 203.477314][ T5832] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 203.477349][ T5832] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 203.477370][ T5832] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 203.485061][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 203.485083][ T5832] usb 8-1: Product: syz [ 203.485098][ T5832] usb 8-1: Manufacturer: syz [ 203.502199][ T5832] cdc_wdm 8-1:1.0: skipping garbage [ 203.502213][ T5832] cdc_wdm 8-1:1.0: skipping garbage [ 203.506158][ T5832] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 203.506173][ T5832] cdc_wdm 8-1:1.0: Unknown control protocol [ 203.793958][ T9867] ptp ptp0: only physical clock in use now [ 204.003803][ T9897] syzkaller0: entered promiscuous mode [ 204.003817][ T9897] syzkaller0: entered allmulticast mode [ 204.019780][ T9897] tc mirred to Houston: device batadv_slave_0 is down [ 204.027114][ T9867] ptp ptp0: new virtual clock ptp2 [ 204.052824][ T9867] ptp ptp0: new virtual clock ptp3 [ 204.066076][ T9867] ptp ptp0: new virtual clock ptp4 [ 204.091688][ T9867] ptp ptp0: new virtual clock ptp5 [ 204.097837][ T9867] ptp ptp0: new virtual clock ptp6 [ 204.097857][ T9867] ptp ptp0: guarantee physical clock free running [ 204.163542][ T9904] __nla_validate_parse: 1 callbacks suppressed [ 204.163555][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 204.165516][ T42] hid-generic 0005:0008:0009.009A: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 204.373679][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1132'. [ 204.587533][ T855] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 204.707077][ T42] hid-generic 0005:0008:0009.009B: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 204.722082][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 204.737962][ T855] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 204.738416][ T855] usb 5-1: config 0 has no interfaces? [ 204.740233][ T855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.740249][ T855] usb 5-1: Product: syz [ 204.740258][ T855] usb 5-1: Manufacturer: syz [ 204.740268][ T855] usb 5-1: SerialNumber: syz [ 204.742020][ T855] usb 5-1: config 0 descriptor?? [ 204.759697][ T9940] fido_id[9940]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 204.950880][ T5832] usb 5-1: USB disconnect, device number 12 [ 205.196500][ T5832] hid-generic 0005:0008:0009.009C: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 205.206844][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1153'. [ 205.239317][ T9967] fido_id[9967]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 205.258638][ T9969] FAULT_INJECTION: forcing a failure. [ 205.258638][ T9969] name failslab, interval 1, probability 0, space 0, times 0 [ 205.258670][ T9969] CPU: 2 UID: 0 PID: 9969 Comm: syz.2.1154 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.258696][ T9969] Tainted: [L]=SOFTLOCKUP [ 205.258703][ T9969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.258714][ T9969] Call Trace: [ 205.258721][ T9969] [ 205.258728][ T9969] dump_stack_lvl+0x100/0x190 [ 205.258773][ T9969] should_fail_ex.cold+0x5/0xa [ 205.258798][ T9969] should_failslab+0xc2/0x120 [ 205.258862][ T9969] kmem_cache_alloc_noprof+0x92/0x6a0 [ 205.258887][ T9969] ? do_getname+0x35/0x390 [ 205.258919][ T9969] do_getname+0x35/0x390 [ 205.258948][ T9969] do_sys_openat2+0xc7/0x1e0 [ 205.258975][ T9969] ? __pfx_do_sys_openat2+0x10/0x10 [ 205.259003][ T9969] ? find_held_lock+0x2b/0x80 [ 205.259023][ T9969] ? __fget_files+0x215/0x3d0 [ 205.259051][ T9969] __ia32_compat_sys_openat+0x12d/0x210 [ 205.259087][ T9969] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 205.259128][ T9969] __do_fast_syscall_32+0x13a/0x8b0 [ 205.259179][ T9969] do_fast_syscall_32+0x32/0x70 [ 205.259217][ T9969] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.259244][ T9969] RIP: 0023:0xf6feefec [ 205.259265][ T9969] Code: Unable to access opcode bytes at 0xf6feefc2. [ 205.259274][ T9969] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 205.259294][ T9969] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 205.259306][ T9969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.259317][ T9969] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.259328][ T9969] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 205.259339][ T9969] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.259362][ T9969] [ 205.362556][ T5832] usb 8-1: USB disconnect, device number 9 [ 208.629134][ T9993] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 208.629150][ T9993] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 208.633003][ T9993] vhci_hcd vhci_hcd.0: Device attached [ 208.648347][ T9996] vhci_hcd: connection closed [ 208.648996][ T7523] logitech-hidpp-device 0003:046D:C082.009D: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 208.654963][ T9878] vhci_hcd vhci_hcd.3: stop threads [ 208.654978][ T9878] vhci_hcd vhci_hcd.3: release socket [ 208.654988][ T9878] vhci_hcd vhci_hcd.3: disconnect device [ 208.739454][T10001] fido_id[10001]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 208.771797][T10005] netlink: 1052 bytes leftover after parsing attributes in process `syz.2.1162'. [ 209.029717][T10015] ecryptfs_get_tree: kern_path() failed [ 209.031314][T10015] Reading sb failed; rc = [-2] [ 209.344193][T10020] FAULT_INJECTION: forcing a failure. [ 209.344193][T10020] name failslab, interval 1, probability 0, space 0, times 0 [ 209.344226][T10020] CPU: 1 UID: 0 PID: 10020 Comm: syz.0.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.344253][T10020] Tainted: [L]=SOFTLOCKUP [ 209.344260][T10020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.344271][T10020] Call Trace: [ 209.344278][T10020] [ 209.344285][T10020] dump_stack_lvl+0x100/0x190 [ 209.344309][T10020] should_fail_ex.cold+0x5/0xa [ 209.344339][T10020] should_failslab+0xc2/0x120 [ 209.344367][T10020] kmem_cache_alloc_noprof+0x92/0x6a0 [ 209.344389][T10020] ? current_cpuset_is_being_rebound+0xf6/0x370 [ 209.344406][T10020] ? sp_alloc+0x27/0x160 [ 209.344428][T10020] sp_alloc+0x27/0x160 [ 209.344444][T10020] ? __pfx_shmem_set_policy+0x10/0x10 [ 209.344464][T10020] mpol_set_shared_policy+0xa5/0x850 [ 209.344487][T10020] ? __pfx_shmem_set_policy+0x10/0x10 [ 209.344504][T10020] mbind_range+0x339/0x550 [ 209.344522][T10020] do_mbind+0x7dc/0xfd0 [ 209.344546][T10020] ? __pfx_do_mbind+0x10/0x10 [ 209.344563][T10020] ? find_held_lock+0x2b/0x80 [ 209.344600][T10020] ? ksys_write+0x190/0x250 [ 209.344628][T10020] ? __pfx_get_nodes+0x10/0x10 [ 209.344659][T10020] kernel_mbind+0x1b7/0x200 [ 209.344681][T10020] ? __pfx_kernel_mbind+0x10/0x10 [ 209.344700][T10020] __do_fast_syscall_32+0x13a/0x8b0 [ 209.344725][T10020] do_fast_syscall_32+0x32/0x70 [ 209.344745][T10020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.344768][T10020] RIP: 0023:0xf702efec [ 209.344788][T10020] Code: Unable to access opcode bytes at 0xf702efc2. [ 209.344794][T10020] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 209.344808][T10020] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 209.344819][T10020] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.344844][T10020] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 209.344856][T10020] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 209.344867][T10020] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.344886][T10020] [ 209.734143][T10036] 9p: Bad value for 'rfdno' [ 209.736966][T10035] netlink: 'syz.0.1174': attribute type 4 has an invalid length. [ 209.736980][T10035] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1174'. [ 209.739413][T10035] .`: renamed from bond0 (while UP) [ 210.270985][ T43] audit: type=1326 audit(1790440068.227:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 210.272897][ T43] audit: type=1326 audit(1790440068.227:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 210.390764][ T43] audit: type=1326 audit(1790440068.347:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf709efec code=0x7ffc0000 [ 210.390817][ T43] audit: type=1326 audit(1790440068.347:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 210.391621][ T43] audit: type=1326 audit(1790440068.347:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf709efec code=0x7ffc0000 [ 210.392792][ T43] audit: type=1326 audit(1790440068.347:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 210.397891][ T43] audit: type=1326 audit(1790440068.357:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71d75ab code=0x7ffc0000 [ 210.398753][ T43] audit: type=1326 audit(1790440068.357:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709efec code=0x7ffc0000 [ 210.399302][ T43] audit: type=1326 audit(1790440068.357:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709efec code=0x7ffc0000 [ 210.400560][ T43] audit: type=1326 audit(1790440068.357:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.3.1180" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709efec code=0x7ffc0000 [ 210.637500][ T25] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 210.793283][ T25] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 210.809725][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.809741][ T25] usb 8-1: Product: syz [ 210.809748][ T25] usb 8-1: Manufacturer: syz [ 210.809755][ T25] usb 8-1: SerialNumber: syz [ 210.832941][ T25] usb 8-1: USB2VGA dongle found at address 10 [ 210.851240][ T25] usb 8-1: Allocated 8 output buffers [ 211.264458][ T855] hid-generic 0005:0008:0009.009E: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 211.270604][T10053] netlink: 'syz.3.1180': attribute type 30 has an invalid length. [ 211.303344][T10094] jffs2: notice: (10094) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 211.321950][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1189'. [ 211.358802][T10097] fido_id[10097]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 211.442112][ T25] usb 8-1: Failed to early initialize device [ 211.467173][ T25] usb 8-1: USB disconnect, device number 10 [ 212.123661][T10110] loop0: detected capacity change from 0 to 32768 [ 212.129163][T10110] loop1: detected capacity change from 0 to 65536 [ 212.163376][T10110] device-mapper: table: 248:0: : unknown target type [ 212.163389][T10110] device-mapper: ioctl: error adding target to table [ 212.202999][T10110] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 212.443893][T10127] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1197'. [ 212.638807][ T42] hid-generic 0005:0008:0009.009F: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 212.658350][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 212.696335][T10140] fido_id[10140]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 212.721875][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1203'. [ 212.732787][T10134] syz_tun (unregistering): left allmulticast mode [ 213.580639][T10181] openvswitch: netlink: Invalid VLAN frame [ 213.583049][T10181] Illegal XDP return value 4294967274 on prog (id 110) dev N/A, expect packet loss! [ 213.845344][T10191] bond0: Error: Cannot enslave bond to itself. [ 215.953836][T10212] 9p: Bad value for 'rfdno' [ 216.090493][T10226] netlink: 1052 bytes leftover after parsing attributes in process `syz.2.1235'. [ 216.145516][ T7882] Bluetooth: hci4: Frame reassembly failed (-84) [ 216.145558][ T7882] Bluetooth: hci4: Frame reassembly failed (-84) [ 216.145588][ T7882] Bluetooth: hci4: Frame reassembly failed (-84) [ 216.145616][ T7882] Bluetooth: hci4: Frame reassembly failed (-84) [ 216.145644][ T7882] Bluetooth: hci4: Frame reassembly failed (-84) [ 217.185772][T10252] jffs2: notice: (10252) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 6 of xref (0 dead, 0 orphan) found. [ 218.058117][ T5832] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 218.197594][ T5742] Bluetooth: hci4: command 0x1003 tx timeout [ 218.198776][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 218.228413][ T5832] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 218.239012][ T5832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 120, changing to 10 [ 218.239040][ T5832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8200, setting to 1024 [ 218.239071][ T5832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.241198][ T5832] usb 8-1: config 0 descriptor?? [ 218.399130][ T7523] hid-generic 0005:0008:0009.00A0: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 218.418714][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 218.464734][T10268] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 218.493688][T10268] evm: overlay not supported [ 218.551279][ T5832] usbhid 8-1:0.0: can't add hid device: -71 [ 218.551366][ T5832] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 218.553461][ T5832] usb 8-1: USB disconnect, device number 11 [ 218.599519][T10267] fido_id[10267]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 218.961892][T10276] program syz.0.1246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.987805][ T25] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 219.163393][ T25] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 219.164418][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 120, changing to 10 [ 219.164444][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8200, setting to 1024 [ 219.164476][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.172419][ T25] usb 8-1: config 0 descriptor?? [ 219.438989][T10255] devpts: Bad value for 'max' [ 219.451935][ T25] usbhid 8-1:0.0: can't add hid device: -71 [ 219.452028][ T25] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 219.468843][ T25] usb 8-1: USB disconnect, device number 12 [ 221.856308][T10316] tc mirred to Houston: device batadv_slave_0 is down [ 222.470371][ T5832] hid-generic 0005:0008:0009.00A1: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 222.592591][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1267'. [ 222.596885][ T43] kauditd_printk_skb: 69 callbacks suppressed [ 222.596898][ T43] audit: type=1800 audit(1790440080.547:1130): pid=10340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1268" name="file0" dev="overlay" ino=1728 res=0 errno=0 [ 222.855654][T10342] fido_id[10342]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 224.254469][ T25] hid-generic 0005:0008:0009.00A2: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 224.274473][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 224.453168][T10393] netlink: 1052 bytes leftover after parsing attributes in process `syz.2.1282'. [ 224.516051][T10394] fido_id[10394]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 225.244321][T10429] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.1292'. [ 225.452717][T10435] syzkaller0: entered promiscuous mode [ 225.452738][T10435] syzkaller0: entered allmulticast mode [ 225.634810][ T43] audit: type=1326 audit(1790440083.587:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1295" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 225.636032][ T43] audit: type=1326 audit(1790440083.587:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1295" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 225.636127][ T43] audit: type=1326 audit(1790440083.587:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1295" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 225.636327][ T43] audit: type=1326 audit(1790440083.587:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1295" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 225.636460][ T43] audit: type=1326 audit(1790440083.587:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1295" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 225.640277][ T43] audit: type=1326 audit(1790440083.597:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1295" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 225.640389][ T43] audit: type=1326 audit(1790440083.597:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1295" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 225.642896][ T43] audit: type=1326 audit(1790440083.597:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1295" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 225.643045][ T43] audit: type=1326 audit(1790440083.597:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.2.1295" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 225.650751][T10439] Config c1/1 of g1 needs at least one function. [ 225.653386][T10439] udc dummy_udc.0: failed to start g1: -22 [ 225.653408][T10439] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 225.655579][T10439] UDC core: g1: couldn't find an available UDC or it's busy [ 225.670261][T10439] XFS (nullb0): Invalid superblock magic number [ 226.264974][T10462] ublk6: read batch cmd buffer failed [ 226.265629][T10462] ublk6: read batch cmd buffer failed [ 226.328999][T10462] ublk6: read batch cmd buffer failed [ 226.329580][T10462] ublk6: read batch cmd buffer failed [ 226.452336][T10469] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.1301'. [ 228.349923][T10498] netlink: 1052 bytes leftover after parsing attributes in process `syz.1.1315'. [ 228.592655][T10509] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 228.596742][T10509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1319'. [ 228.860085][T10530] netlink: 1052 bytes leftover after parsing attributes in process `syz.2.1328'. [ 229.152280][T10551] netlink: 1052 bytes leftover after parsing attributes in process `syz.2.1338'. [ 229.407514][ T42] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 229.456415][T10569] /dev/nullb0: Can't open blockdev [ 229.558438][ T42] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 229.560689][ T42] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 229.560728][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.560747][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.560765][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 229.565609][ T42] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 229.565631][ T42] usb 5-1: Manufacturer: syz [ 229.570363][ T42] usb 5-1: config 0 descriptor?? [ 229.683922][T10579] netlink: 1052 bytes leftover after parsing attributes in process `syz.1.1350'. [ 229.989076][ T42] appleir 0003:05AC:8243.00A3: unknown main item tag 0x0 [ 230.023727][ T42] appleir 0003:05AC:8243.00A3: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 230.219225][ T7523] hid-generic 0005:0008:0009.00A4: hidraw2: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 230.227657][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'. [ 230.267066][T10591] fido_id[10591]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 230.322369][T10594] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 230.382873][T10597] netlink: 'syz.0.1339': attribute type 8 has an invalid length. [ 230.475085][ T5839] usb 5-1: USB disconnect, device number 13 [ 231.191120][T10619] tc mirred to Houston: device batadv_slave_0 is down [ 231.365472][T10621] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 231.716840][T10633] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 232.093424][T10655] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 233.260686][T10683] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1390'. [ 233.260913][T10683] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1390'. [ 233.595566][T10702] jffs2: notice: (10702) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 0 orphan) and 8 of xref (0 dead, 0 orphan) found. [ 233.661433][T10707] Unsupported ieee802154 address type: 0 [ 233.725212][T10702] overlayfs: upper fs does not support tmpfile. [ 233.742751][T10702] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 234.080977][T10728] netlink: 1052 bytes leftover after parsing attributes in process `syz.2.1411'. [ 234.091047][T10729] loop1: detected capacity change from 0 to 131072 [ 234.110842][T10729] device-mapper: ioctl: The device has no table. [ 234.129062][T10729] device-mapper: table: 248:2: thin: Error opening pool device (-ENOENT) [ 234.129078][T10729] device-mapper: ioctl: error adding target to table [ 234.230063][ T6249] hid-generic 0005:0008:0009.00A5: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 234.274724][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1414'. [ 234.319180][T10739] fido_id[10739]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 234.566613][T10757] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.1420'. [ 234.627541][ T7523] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 234.640670][T10760] ieee802154 phy0 wpan0: encryption failed: -126 [ 234.789912][ T7523] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 234.791036][ T7523] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.791059][ T7523] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 234.791071][ T7523] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.796189][ T7523] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 234.796205][ T7523] usb 7-1: Product: syz [ 234.796212][ T7523] usb 7-1: Manufacturer: syz [ 234.798707][T10743] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.830138][ T7523] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 234.836310][ T7523] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 234.975114][ T7523] hid-generic 0005:0008:0009.00A6: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 234.984660][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1426'. [ 235.013774][T10774] fido_id[10774]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 235.041890][T10743] uhci_hcd 0000:00:1d.0: remove, state 4 [ 235.042806][T10743] usb usb2: USB disconnect, device number 1 [ 235.085404][T10762] syz.0.1422 (10762): drop_caches: 2 [ 235.086548][T10743] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 235.104905][T10779] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 235.136076][T10781] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.1429'. [ 235.178907][T10779] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 235.198913][T10779] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 235.199057][T10779] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 235.199311][T10779] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 235.199787][T10779] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 235.223018][T10779] pci 0000:00:01.0: Adding to iommu group 1 [ 235.229514][T10779] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 235.229527][T10779] pci 0000:00:01.0: vgaarb: bridge control possible [ 235.229534][T10779] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 235.231535][T10779] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 235.235263][T10779] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f] [ 235.248211][T10779] pci 0000:00:1d.0: Adding to iommu group 7 [ 235.259315][T10779] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 235.259602][T10779] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 235.259991][T10779] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 235.262770][T10779] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 235.276139][T10779] [drm] Found bochs VGA, ID 0xb0c5. [ 235.276150][T10779] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 235.287863][T10779] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 235.428211][T10779] Console: switching to colour frame buffer device 160x50 [ 235.488541][T10779] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 235.536377][T10779] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 46480 usecs [ 235.607297][T10779] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 235.621694][T10779] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 235.621814][T10779] uhci_hcd 0000:00:1d.0: detected 2 ports [ 235.624617][T10779] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 235.625754][T10779] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.03 [ 235.630745][T10779] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 235.630758][T10779] usb usb2: Product: UHCI Host Controller [ 235.630799][T10779] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 235.630809][T10779] usb usb2: SerialNumber: 0000:00:1d.0 [ 235.667882][T10779] hub 2-0:1.0: USB hub found [ 235.668377][T10779] hub 2-0:1.0: 2 ports detected [ 235.678345][T10798] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.1438'. [ 235.745677][ T7523] usb 7-1: USB disconnect, device number 12 [ 235.761844][ T7523] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 235.762130][ T7523] garmin_gps 7-1:1.0: device disconnected [ 235.843984][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1439'. [ 236.427525][ T6249] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 236.490601][T10814] ieee802154 phy0 wpan0: encryption failed: -126 [ 237.432861][T10827] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.1447'. [ 237.610769][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1452'. [ 238.795243][ T5750] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 238.811189][T10878] netlink: 'syz.3.1467': attribute type 1 has an invalid length. [ 238.820785][ T9335] Bluetooth: hci4: Frame reassembly failed (-84) [ 238.820830][ T9335] Bluetooth: hci4: Frame reassembly failed (-84) [ 238.820860][ T9335] Bluetooth: hci4: Frame reassembly failed (-84) [ 238.820889][ T9335] Bluetooth: hci4: Frame reassembly failed (-84) [ 238.820917][ T9335] Bluetooth: hci4: Frame reassembly failed (-84) [ 238.836833][T10879] Bluetooth: hci4: Frame reassembly failed (-90) [ 238.851352][T10878] 8021q: adding VLAN 0 to HW filter on device bond3 [ 238.871596][T10878] 8021q: adding VLAN 0 to HW filter on device bond3 [ 238.871969][T10878] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 238.872661][T10878] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 240.801423][ T43] kauditd_printk_skb: 122 callbacks suppressed [ 240.801441][ T43] audit: type=1326 audit(1790440098.757:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.2.1459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 240.804017][ T43] audit: type=1326 audit(1790440098.757:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.2.1459" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 240.804060][ T43] audit: type=1326 audit(1790440098.757:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.2.1459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 240.804098][ T43] audit: type=1326 audit(1790440098.757:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.2.1459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 240.804477][ T43] audit: type=1326 audit(1790440098.757:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.2.1459" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 240.804629][ T43] audit: type=1326 audit(1790440098.757:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.2.1459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 240.804666][ T43] audit: type=1326 audit(1790440098.757:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.2.1459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 240.804998][ T43] audit: type=1326 audit(1790440098.757:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.2.1459" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 240.805087][ T43] audit: type=1326 audit(1790440098.757:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.2.1459" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 240.805215][ T43] audit: type=1326 audit(1790440098.757:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.2.1459" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf6fef017 code=0x7ffc0000 [ 240.853271][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 243.267035][T10920] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 243.269521][T10920] i2c i2c-0: delete_device: Can't find device in list [ 244.712989][T10952] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1482'. [ 244.713442][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1482'. [ 244.933888][T10952] team0: Port device team_slave_1 removed [ 245.892169][T10973] netlink: Failed to add  helper -22 [ 245.892248][T10973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.992231][ T43] kauditd_printk_skb: 231 callbacks suppressed [ 245.992252][ T43] audit: type=1804 audit(1790440103.947:1503): pid=10970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1487" name="/newroot/360/file0/bus" dev="9p" ino=71827945 res=1 errno=0 [ 246.063712][T10968] comedi comedi1: comedi_config --init_data is deprecated [ 246.401109][T10981] binder: 10980:10981 ioctl c00c6211 0 returned -14 [ 246.794232][T10984] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 246.821934][T10984] kvm: pic: level sensitive irq not supported [ 246.823243][T10984] kvm: pic: non byte read [ 246.828312][T10984] kvm: pic: level sensitive irq not supported [ 246.828985][T10984] kvm: pic: non byte read [ 246.938459][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'. [ 248.357073][T11010] syzkaller0: entered promiscuous mode [ 248.357095][T11010] syzkaller0: entered allmulticast mode [ 248.628833][T11021] input: syz1 as /devices/virtual/input/input24 [ 249.041477][T11039] NILFS (loop3): device size too small [ 250.545630][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1509'. [ 250.726551][T11053] overlayfs: failed to resolve './file1': -2 [ 252.188131][T11045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.914086][T11077] ptrace attach of "/syz-executor exec"[11078] was attempted by "/syz-executor exec"[11077] [ 252.915906][T11077] fuse: fd is not a fuse device [ 253.159260][T11082] syzkaller0: entered promiscuous mode [ 253.159283][T11082] syzkaller0: entered allmulticast mode [ 255.319042][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.319090][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.834384][T11126] qnx4: no qnx4 filesystem (no root dir). [ 256.727689][ T50] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 256.736645][T11142] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 256.847537][ T5839] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 256.877769][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 256.878546][ T50] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 256.879632][ T50] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.879655][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 256.879681][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.881774][ T50] usb 5-1: config 0 descriptor?? [ 256.896578][T11151] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 257.000426][ T5839] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 257.001546][ T5839] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.003848][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 257.003868][ T5839] usb 8-1: Product: syz [ 257.003880][ T5839] usb 8-1: Manufacturer: syz [ 257.003892][ T5839] usb 8-1: SerialNumber: syz [ 257.031363][T11157] syzkaller0: entered promiscuous mode [ 257.031378][T11157] syzkaller0: entered allmulticast mode [ 257.224229][ T5839] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 257.431441][ T5839] usb 8-1: USB disconnect, device number 13 [ 257.435392][ T5839] usblp0: removed [ 258.009353][T11170] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 258.020964][T11170] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 258.020997][T11170] overlayfs: failed to look up (tracing) for ino (-66) [ 258.622671][T11195] fuse: Bad value for 'fd' [ 259.512321][ T50] usbhid 5-1:0.0: can't add hid device: -71 [ 259.512375][ T50] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 259.529490][ T50] usb 5-1: USB disconnect, device number 14 [ 259.784820][T11209] ublk7: read batch cmd buffer failed [ 259.784918][T11209] ublk7: read batch cmd buffer failed [ 259.796625][T11209] ublk7: read batch cmd buffer failed [ 259.796715][T11209] ublk7: read batch cmd buffer failed [ 259.901163][T11234] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 259.920688][T11234] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 259.920742][T11234] overlayfs: failed to look up (tracing) for ino (-66) [ 260.417687][ T42] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 260.567534][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 260.570008][ T42] usb 7-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 260.571698][ T42] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.571723][ T42] usb 7-1: config 0 interface 0 has no altsetting 0 [ 260.571747][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.595695][ T42] usb 7-1: config 0 descriptor?? [ 260.842730][ T42] usbhid 7-1:0.0: can't add hid device: -71 [ 260.842784][ T42] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 260.845847][ T42] usb 7-1: USB disconnect, device number 13 [ 261.102760][T11265] binder: 11264:11265 ioctl c00c6211 0 returned -14 [ 261.511619][T11277] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 261.524195][T11277] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 261.524227][T11277] overlayfs: failed to look up (tracing) for ino (-66) [ 265.316242][T11354] [ 265.317327][T11354] ====================================================== [ 265.320187][T11354] WARNING: possible circular locking dependency detected [ 265.322906][T11354] syzkaller #0 Tainted: G L [ 265.325384][T11354] ------------------------------------------------------ [ 265.328215][T11354] syz.3.1603/11354 is trying to acquire lock: [ 265.330712][T11354] ffff88801cfe9540 ((wq_completion)md_misc){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x9c/0x1c0 [ 265.334664][T11354] [ 265.334664][T11354] but task is already holding lock: [ 265.337543][T11354] ffffffff8f9be780 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 265.341157][T11354] [ 265.341157][T11354] which lock already depends on the new lock. [ 265.341157][T11354] [ 265.344983][T11354] [ 265.344983][T11354] the existing dependency chain (in reverse order) is: [ 265.347677][T11354] [ 265.347677][T11354] -> #3 (major_names_lock){+.+.}-{4:4}: [ 265.350177][T11354] lock_acquire+0x1d1/0x380 [ 265.352217][T11354] __mutex_lock+0x1a4/0x1bd0 [ 265.354275][T11354] blk_probe_dev+0x28/0x1e0 [ 265.356392][T11354] blk_request_module+0x16/0xc0 [ 265.358558][T11354] blkdev_get_no_open+0x9b/0xf0 [ 265.360765][T11354] bdev_file_open_by_dev+0x70/0x210 [ 265.363168][T11354] md_import_device+0x120/0x360 [ 265.365749][T11354] md_add_new_disk+0xcc0/0x1820 [ 265.368271][T11354] md_ioctl+0x2bec/0x36d0 [ 265.370310][T11354] compat_blkdev_ioctl+0x682/0x7b0 [ 265.372214][T11354] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 265.374098][T11354] __do_fast_syscall_32+0x13a/0x8b0 [ 265.375827][T11354] do_fast_syscall_32+0x32/0x70 [ 265.377507][T11354] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.379968][T11354] [ 265.379968][T11354] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 265.383040][T11354] lock_acquire+0x1d1/0x380 [ 265.385049][T11354] __mutex_lock+0x1a4/0x1bd0 [ 265.387007][T11354] md_start_sync+0xc4/0xea0 [ 265.389069][T11354] process_one_work+0xac7/0x1b10 [ 265.391223][T11354] worker_thread+0x5ef/0xe50 [ 265.393264][T11354] kthread+0x373/0x450 [ 265.395110][T11354] ret_from_fork+0x730/0xd60 [ 265.397197][T11354] ret_from_fork_asm+0x1a/0x30 [ 265.399420][T11354] [ 265.399420][T11354] -> #1 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 265.403383][T11354] lock_acquire+0x1d1/0x380 [ 265.405469][T11354] process_one_work+0xa32/0x1b10 [ 265.407794][T11354] worker_thread+0x5ef/0xe50 [ 265.409909][T11354] kthread+0x373/0x450 [ 265.411780][T11354] ret_from_fork+0x730/0xd60 [ 265.413873][T11354] ret_from_fork_asm+0x1a/0x30 [ 265.415981][T11354] [ 265.415981][T11354] -> #0 ((wq_completion)md_misc){+.+.}-{0:0}: [ 265.419290][T11354] check_prev_add+0xeb/0xe60 [ 265.421366][T11354] __lock_acquire+0x1528/0x1f40 [ 265.423463][T11354] lock_acquire+0x1d1/0x380 [ 265.425475][T11354] touch_wq_lockdep_map+0xad/0x1c0 [ 265.427692][T11354] __flush_workqueue+0x131/0x1200 [ 265.429971][T11354] md_alloc+0x30/0x10a0 [ 265.431870][T11354] md_probe+0x73/0xf0 [ 265.433664][T11354] blk_probe_dev+0x149/0x1e0 [ 265.435699][T11354] blk_request_module+0x16/0xc0 [ 265.437836][T11354] blkdev_get_no_open+0x9b/0xf0 [ 265.440018][T11354] blkdev_open+0x141/0x4f0 [ 265.442051][T11354] do_dentry_open+0x6ab/0x14d0 [ 265.444129][T11354] vfs_open+0x82/0x3f0 [ 265.446051][T11354] path_openat+0x19fa/0x2440 [ 265.448151][T11354] do_file_open+0x20e/0x430 [ 265.450225][T11354] do_sys_openat2+0x10f/0x1e0 [ 265.452352][T11354] __ia32_compat_sys_openat+0x12d/0x210 [ 265.454763][T11354] __do_fast_syscall_32+0x13a/0x8b0 [ 265.457048][T11354] do_fast_syscall_32+0x32/0x70 [ 265.459319][T11354] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.462338][T11354] [ 265.462338][T11354] other info that might help us debug this: [ 265.462338][T11354] [ 265.466458][T11354] Chain exists of: [ 265.466458][T11354] (wq_completion)md_misc --> &mddev->reconfig_mutex --> major_names_lock [ 265.466458][T11354] [ 265.472434][T11354] Possible unsafe locking scenario: [ 265.472434][T11354] [ 265.475798][T11354] CPU0 CPU1 [ 265.478046][T11354] ---- ---- [ 265.480373][T11354] lock(major_names_lock); [ 265.482351][T11354] lock(&mddev->reconfig_mutex); [ 265.485331][T11354] lock(major_names_lock); [ 265.488154][T11354] lock((wq_completion)md_misc); [ 265.490351][T11354] [ 265.490351][T11354] *** DEADLOCK *** [ 265.490351][T11354] [ 265.493650][T11354] locks held by syz.3.1603/11354: 1, last CPU#1: [ 265.496183][T11354] #0: ffffffff8f9be780 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 265.499944][T11354] [ 265.499944][T11354] stack backtrace: [ 265.502265][T11354] CPU: 1 UID: 0 PID: 11354 Comm: syz.3.1603 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.506518][T11354] Tainted: [L]=SOFTLOCKUP [ 265.508255][T11354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 265.512001][T11354] Call Trace: [ 265.513375][T11354] [ 265.514580][T11354] dump_stack_lvl+0x100/0x190 [ 265.516134][T11354] print_circular_bug.cold+0x178/0x1be [ 265.517788][T11354] check_noncircular+0x146/0x160 [ 265.519393][T11354] check_prev_add+0xeb/0xe60 [ 265.520799][T11354] ? __pfx_debug_object_activate+0x10/0x10 [ 265.522581][T11354] __lock_acquire+0x1528/0x1f40 [ 265.524392][T11354] lock_acquire+0x1d1/0x380 [ 265.526057][T11354] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 265.527668][T11354] ? find_held_lock+0x2b/0x80 [ 265.529100][T11354] ? lockdep_init_map_type+0x5c/0x250 [ 265.530765][T11354] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 265.532391][T11354] touch_wq_lockdep_map+0xad/0x1c0 [ 265.534198][T11354] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 265.536325][T11354] __flush_workqueue+0x131/0x1200 [ 265.538457][T11354] ? rcu_is_watching+0x13/0xc0 [ 265.540442][T11354] ? trace_contention_end+0x126/0x160 [ 265.542677][T11354] ? __mutex_lock+0x26c/0x1bd0 [ 265.544599][T11354] ? __pfx___flush_workqueue+0x10/0x10 [ 265.546773][T11354] ? lock_acquire+0x1d1/0x380 [ 265.548641][T11354] ? find_inode_fast+0xa5/0xa30 [ 265.550237][T11354] ? find_inode_fast+0x1fa/0xa30 [ 265.551841][T11354] md_alloc+0x30/0x10a0 [ 265.553177][T11354] md_probe+0x73/0xf0 [ 265.554681][T11354] ? __pfx_md_probe+0x10/0x10 [ 265.556182][T11354] blk_probe_dev+0x149/0x1e0 [ 265.558026][T11354] blk_request_module+0x16/0xc0 [ 265.560121][T11354] blkdev_get_no_open+0x9b/0xf0 [ 265.562074][T11354] blkdev_open+0x141/0x4f0 [ 265.563925][T11354] do_dentry_open+0x6ab/0x14d0 [ 265.565837][T11354] ? __pfx_blkdev_open+0x10/0x10 [ 265.567842][T11354] vfs_open+0x82/0x3f0 [ 265.569674][T11354] path_openat+0x19fa/0x2440 [ 265.571600][T11354] ? __pfx_path_openat+0x10/0x10 [ 265.573603][T11354] do_file_open+0x20e/0x430 [ 265.575272][T11354] ? __pfx_do_file_open+0x10/0x10 [ 265.576925][T11354] ? _raw_spin_unlock+0x28/0x50 [ 265.578424][T11354] ? alloc_fd+0x471/0x7a0 [ 265.579834][T11354] do_sys_openat2+0x10f/0x1e0 [ 265.581370][T11354] ? __pfx_do_sys_openat2+0x10/0x10 [ 265.583013][T11354] ? do_raw_spin_lock+0x128/0x260 [ 265.584764][T11354] ? find_held_lock+0x2b/0x80 [ 265.586436][T11354] ? kcov_ioctl+0x17a/0x760 [ 265.588110][T11354] __ia32_compat_sys_openat+0x12d/0x210 [ 265.590176][T11354] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 265.592463][T11354] __do_fast_syscall_32+0x13a/0x8b0 [ 265.594496][T11354] do_fast_syscall_32+0x32/0x70 [ 265.596623][T11354] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.599265][T11354] RIP: 0023:0xf709efec [ 265.600909][T11354] Code: Unable to access opcode bytes at 0xf709efc2. [ 265.603565][T11354] RSP: 002b:00000000f546c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 265.606602][T11354] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000300 [ 265.609563][T11354] RDX: 0000000000004002 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.612613][T11354] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.615861][T11354] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 265.618542][T11354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.620931][T11354] [ 265.632795][T11351] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 265.708380][T11354] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 265.708399][T11354] block device autoloading is deprecated and will be removed. [ 265.856550][T11354] md: md0 stopped. [ 265.857600][T11351] md: invalid raid superblock magic on ram0 [ 265.857611][T11351] md: ram0 does not have a valid v0.0 superblock, not importing! [ 265.857635][T11351] md: md_import_device returned -22