last executing test programs: 1m58.58875199s ago: executing program 3 (id=608): mremap(&(0x7f00001c3000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f00005a4000/0x1000)=nil) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) (async) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x80, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x1) (async) socket$alg(0x26, 0x5, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) (async, rerun: 32) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa0100ff}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x8}) (rerun: 32) 1m58.587274107s ago: executing program 3 (id=609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000e3ff0000e6"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x280}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/ehci-pci/new_id\x00', 0x1, 0x0) write(r4, &(0x7f0000000180), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c810e19e00399da26f0000000000", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 7) 1m58.480210164s ago: executing program 3 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000200)=r3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x209d, 0x9, 0x2008, 0x7ffffff9}, 0x10) write(r4, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)={0x1c, r1, 0x5eae78d9c54e9d3f, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, &(0x7f0000000540)=0x1) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m56.781376602s ago: executing program 3 (id=617): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) pwrite64(r0, &(0x7f0000000180)="ef83871104d33d86774b414640aafe1266befb0b59a46e411d19d3872ccd53e7793a1ad6dcb0d94bd9881682d8b4ffe6e585886bf7b9ec7deb91ef9e0b4dd8ff1e8b84bdaed30b776aeaabab77ad67b92fa2ec7fdbe7a77b95afc6f0619f1c77606ec483e77ef3aa37d4eddb33350abbe1", 0x71, 0x8) setpgid(0x0, r1) write(r0, &(0x7f0000000000)="8a", 0x1) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) getsockname$unix(r0, &(0x7f0000000080), &(0x7f0000000140)=0x6e) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000003c0)={0x3, 0x4}) memfd_create(&(0x7f0000000040)='-', 0x1) 1m56.709691577s ago: executing program 3 (id=618): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) memfd_secret(0x80000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d0381edd7fc6e5539b0d430a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbac5c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) read$FUSE(r0, &(0x7f0000006480)={0x2020}, 0x2020) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) 1m41.618444371s ago: executing program 32 (id=618): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) memfd_secret(0x80000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d0381edd7fc6e5539b0d430a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbac5c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) read$FUSE(r0, &(0x7f0000006480)={0x2020}, 0x2020) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) 5.240385174s ago: executing program 2 (id=1138): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x40000) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xff00) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000060a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r8, @ANYBLOB="010028bd700000000000140000000c0007800800020004000000f7ad31f639a07f6e05f85d145fb9f15454c7dbe0232cc6854717969419883e228e54ccc54e0ff3b53d11464364c8769cab3c8f06b44e06026d68b43110431b9a05e0df7c4acabdbe1f8d740f93d8f1eda2c57c816907fbca560ca038f788bdcdd65761725585a75acafc54f7f7e34e59aae7cddc2d11e21dd0b2aba6a7cfef6b28df9e6d34e3bf23f02099ff9736b895d333de9c21ffff10e8ff5af90452d8d953c8d73d44daea3caea635bf97743fd2aaf7c08e57"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x840) r9 = open(&(0x7f0000000040)='.\x00', 0x242e00, 0x24) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r10, 0xc00, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004054}, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r11 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x200) ioctl$LOOP_SET_FD(r11, 0x4c00, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000240)={0x51, 0x9, 0x6}) 4.079320073s ago: executing program 2 (id=1144): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0x40, 0x7ff00001}]}) mmap(&(0x7f00005ec000/0x4000)=nil, 0x4000, 0x200000e, 0x10010, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0x220c, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$audio(0xffffff9c, &(0x7f0000000440), 0x149283, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000002980)) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @multicast1}], 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x0, @val=@iter={0x0}}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x698885e35ca9249, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = syz_open_dev$video(&(0x7f0000000140), 0x8, 0x101801) ioctl$VIDIOC_G_SELECTION(r9, 0xc040565e, &(0x7f00000004c0)={0xa, 0x0, 0x0, {0x0, 0x759bc414, 0x800007, 0x20003}}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000380), &(0x7f0000000400)=0x4) sendmsg$nl_route(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x70}}, 0x800) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) capset(&(0x7f00000001c0)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000200)={0x8, 0x6cfc01d3, 0x2, 0x40, 0x900000, 0xb5}) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="ff0f0000", @ANYRES16=r6, @ANYBLOB="010700000000000000000b000000"], 0x14}}, 0x0) fspick(r0, &(0x7f0000000000)='.\x00', 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f00000000c0)={0x0, 0x0, 0x80000001}) 3.840900767s ago: executing program 4 (id=1145): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40000}}, './cgroup\x00'}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x2f, "7736f800846d89ebe6ebeaf9591c82c03b72eeb03ca48f52926e6ba50ab6b942307c6b6976d4e89359433de70e2ad0"}, &(0x7f0000000280)=0x37) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r1, 0x2}, 0x8) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x221000d, 0x0) r2 = openat$userio(0xffffff9c, &(0x7f0000000040), 0x84000, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) write(r2, &(0x7f0000000100)="c87db106cafb64e8052135dfdbe1571aeecb73545174da554eb4dc0b562db86eea8babd814c8170a8deebd6aa1e9a9f5522a1f7524c8bf42eb9395152b0e6867b18a91962ba9eb0095aaee69974606ac6b6ffae2546868735243f2ddce9d316fcf25126ccc1bea72ee130143db2e055e085a8b7bf44f80bae50e4ae8fcc4ea232272001914077447ccfa2569bc6749a89ca223de5475c3fdd5a82378a895cca28f3222513c464a9227e8aeea14628a9cc55b4f8c8f882702614d90192e216e02ef05d9d6ff2992d7019261abee4448032686f269f8d0114f5aa51ac0", 0xdc) 3.84033509s ago: executing program 2 (id=1146): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)="44001d000000000000ffff0100006bddc65b99fba9d5c8ef68ff58efbe93a0629498d350fee76658d4aa1d0e2d8f1d3c7405171a2c2065144cf5de98818512ac0ff961817366b82d6754b7ef2e2cb1a114d1c7df9a35592abc1ac9653fa1c8c857451727e47d272af028ef9fa1e3b29195", 0x71, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xd, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x46e2}, @CTA_SEQADJ_OFFSET_AFTER={0xfffffdd8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xb1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf0000000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffe}]}]}, 0xa8}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3.788409433s ago: executing program 4 (id=1147): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000040)) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x1, 0x0) unshare(0x24060400) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) pselect6(0x40, &(0x7f0000000100)={0x1, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, &(0x7f00000001c0)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280), 0x0) 3.783547098s ago: executing program 0 (id=1148): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='10 101\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\x00', 0x2) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="3800000012000100010000000000000000000000000000000000000000000000100003006e657464657673696d31300008001d0001000000"], 0x38}}, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x14) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000040000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000664b5906006445f10000000000000000000000000000376cddfc95665419b00135ee6073117a51ca369cfffdcc8896bd51ac91a7c4311497c56e9f29f499bc164989"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.730803522s ago: executing program 2 (id=1149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x1000, 0xb28, 0x6}, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000007000000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x101400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r4, 0x0, 0xc010) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000) syz_emit_ethernet(0x5e, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) mq_open(&(0x7f0000000340)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bL\x10\x00\x00\x00\x04\x00\x00\x00\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdc\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x1d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00'/336, 0x40, 0xa4, 0x0) 3.730226506s ago: executing program 4 (id=1150): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406a0800010000010203010902190001010080fa0904000001ffffff0007058102400000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x2) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) recvmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000340)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/23, 0x17}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f00000004c0)=""/229, 0xe5}], 0x3, &(0x7f0000000600)=""/244, 0xf4}, 0x40000020) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r4 = dup2(r2, r2) sendmmsg$sock(r4, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x90) openat(r0, &(0x7f0000000280)='./sys\x00', 0x222400, 0x17) write(r0, &(0x7f0000000200)='0\x00', 0x2) 3.299187012s ago: executing program 1 (id=1151): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xc8f8d000) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r0, 0x0, 0x0, 0x78f2a36b) 2.908575527s ago: executing program 0 (id=1152): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.755045516s ago: executing program 2 (id=1153): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000, @rand_addr=0xfffffffd}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0xd]}, 0x8, 0x800) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r3 = signalfd4(r2, &(0x7f0000000140), 0x8, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r5, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x815) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f0000000100)={0x3, 0x84}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x81, &(0x7f0000006680)) listxattr(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1818000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x5, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7fff}, 0x0, 0x0, 0x0, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r9, 0x40187014, &(0x7f0000000000)={0x1, 0x0, {0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000031, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = openat$pfkey(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 2.581913997s ago: executing program 0 (id=1154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000200)={0x9, 0x2, 0x0, 0xfffffffc, 'syz1\x00', 0xffffff7e}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc1105511, &(0x7f0000000040)={0x9}) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0xc1105511, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2202, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r7, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) (fail_nth: 7) 2.360405643s ago: executing program 0 (id=1155): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000000203010100000000000000000a00000008000440000000000800054000001800"], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4080) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000001c0)={{r2, r3+10000000}, {0x0, 0x989680}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x4000052, r4, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f500008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0xf0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x381, &(0x7f0000000bc0)={0x0, 0x3938700}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r7, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x42, 0x1f7) 2.140194885s ago: executing program 1 (id=1156): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) close(0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0186404, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil}) syz_io_uring_setup(0x68b5, &(0x7f00000000c0)={0x0, 0x7dc9, 0x400, 0x2, 0x25f}, &(0x7f0000000140)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x4448, &(0x7f0000000300)={0x0, 0xa2f2, 0x3a178901d0240d8a, 0x0, 0x397}, &(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10a00}, [@IFLA_MTU={0x8, 0x4, 0x48}, @IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r4 = openat$dir(0xffffff9c, &(0x7f0000000440)='./file0\x00', 0x442202, 0x184) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, &(0x7f00000004c0)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, r4, 0x0, &(0x7f0000000480)='./file0\x00', 0x16a, 0x0, 0x0, {0x0, r5}}) 2.028492295s ago: executing program 4 (id=1157): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r0 = inotify_init() r1 = userfaultfd(0x80801) userfaultfd(0x801) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r7, 0xaea2, 0x80000001) (async) ioctl$KVM_SET_TSC_KHZ_cpu(r7, 0xaea2, 0x80000001) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 1.930701311s ago: executing program 4 (id=1158): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000, @rand_addr=0xfffffffd}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0xd]}, 0x8, 0x800) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xffff}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x20000004, 0x0, 0x400, 0x5673}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = signalfd4(r2, &(0x7f0000000140), 0x8, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f00000000c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r6, 0x800, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x815) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x40187013, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x2, 0x4000000, 0x2}}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r4, 0x4008af75, &(0x7f0000000100)={0x3, 0x84}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x81, &(0x7f0000006680)) listxattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000680)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x5, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7fff}, 0x0, 0x0, 0x0, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(r10, 0x40187014, &(0x7f0000000000)={0x1, 0x0, {0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r9, 0x2000031, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = openat$pfkey(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 1.930229565s ago: executing program 1 (id=1159): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x17f) (async) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x9000) write(r2, &(0x7f0000000440)='nfs', 0x3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200001, 0x555, 0x3, 0x10000000, 0x0, 0xfffffffe}) setuid(0xee00) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x4}) (async) mkdirat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0) (async) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) (async) gettid() openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x18d042) (async) close_range(r6, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) 1.866419596s ago: executing program 1 (id=1160): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x6, 0xa, 0x3, 0x9}, {0xf52b, 0xa, 0xf7, 0x6}, {0x41dc, 0xf6, 0x0, 0x9}, {0x0, 0xf8, 0x1, 0x3ff}, {0x9, 0x6, 0xea, 0x40}, {0x6, 0x6, 0xbd, 0x40}]}) 1.866007565s ago: executing program 1 (id=1161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x1000, 0xb28, 0x6}, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x201, 0x440) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000007000000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x101400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r4, 0x0, 0xc010) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000) syz_emit_ethernet(0x5e, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000d00), 0x0, 0x2042) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) mq_open(&(0x7f0000000340)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bL\x10\x00\x00\x00\x04\x00\x00\x00\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdc\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x1d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00'/336, 0x40, 0xa4, 0x0) 1.864089701s ago: executing program 2 (id=1162): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x42}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r4, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) 836.45543ms ago: executing program 1 (id=1163): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) ioperm(0x7, 0x81, 0xfffffffffffffffe) r2 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) write$tun(r3, &(0x7f0000000000)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000500)={0x9, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}) setpgid(r6, r6) setpgid(0x0, r6) fchdir(r5) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)='-', 0x1) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000002140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="c620a69976be3a1ad69c0d3131e16b9f46acf6a753be36ac9547c1845377845ed102c1e9a7ea03d62f5d996d60b79fe7d5095dc3e5152384a849cd15ba7cae3d7436d37e34d902dccd27af12e7bb6f1cf6cd45bddeaf7c66587a0a8e7ca8aa688d259fc5bfa4656ae06b04eb1ff5ce4269711c57c0f259cad952f78bf1a20f0147fde140f6a992c93651f9dc2cad2358c57c44d9c8589c689bf97c3f2f3d68b248fe5d292bb2aa83d5a01ad835e8765c2a5edb937743a60ff97e6f2a4c29cd2fe93cb2cb0892cca5960dfffcdfa1b049965b7ff12ad78e"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 750.739155ms ago: executing program 0 (id=1164): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000400)="e970d6ea0600000000284b6819cd4222f0cc540000007a12e5cdb79f49f1aed79adc3252825a86a526a3501fb1dd8dff3e90d6f5", 0x34}, {&(0x7f0000000080)="1616b8114d17a6edb958c44bfcc750df66a17409dc53e9354910372dd7c5426f75ac569b", 0x24}], 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) close(r0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000001dc0)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) setns(0xc9, 0x0) socketpair(0x9, 0x20000000000001, 0x3, &(0x7f0000000100)) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xe0, 0x5, 0x5, 0x1, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x5, 0xfffffffd, 0x8000, 0x4, r7, r8, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000008e80)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x400000008, {0x5, 0x5, 0xfffffffffffffffd, 0x4000000000004, 0x1187, 0x81, {0x2, 0x6, 0x8, 0x9, 0x7, 0xbefd, 0x8, 0x1000006, 0x2008, 0x6000, 0xe44, r7, r8, 0x7, 0x61}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r7, &(0x7f0000000140)={0x3, 0x387, 0x5, 0x7, 0xfffffffffffffff9, 0x7, 0x0, 0x0, 0x78}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) 610.615077ms ago: executing program 0 (id=1165): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406a0800010000010203010902190001010080fa0904000001ffffff0007058102400000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x2) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) recvmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000340)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/23, 0x17}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f00000004c0)=""/229, 0xe5}], 0x3, &(0x7f0000000600)=""/244, 0xf4}, 0x40000020) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r4 = dup2(r2, r2) sendmmsg$sock(r4, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x90) openat(r0, &(0x7f0000000280)='./sys\x00', 0x222400, 0x17) write(r0, &(0x7f0000000200)='0\x00', 0x2) 0s ago: executing program 4 (id=1166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f00000057c0)=@ethtool_regs={0x4, 0x3}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r3 = openat2$dir(0xffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x400, 0x85, 0x42}, 0x18) linkat(r3, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x1400) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syz_tun\x00', 0x400}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x1f) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netpci0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@newtclass={0x80, 0x28, 0x20, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x5}, {0x5, 0x10}, {0x6, 0x8}}, [@tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x8f, 0x1}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mq={0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8000) kernel console output (not intermixed with test programs): [ T9770] CPU: 0 UID: 0 PID: 9770 Comm: syz.2.732 Not tainted syzkaller #0 PREEMPT(full) [ 229.367056][ T9770] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.367063][ T9770] Call Trace: [ 229.367068][ T9770] [ 229.367073][ T9770] dump_stack_lvl+0x100/0x190 [ 229.367099][ T9770] should_fail_ex.cold+0x5/0xa [ 229.367120][ T9770] should_failslab+0xc2/0x120 [ 229.367143][ T9770] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 229.367164][ T9770] ? __alloc_skb+0x5b7/0x710 [ 229.367182][ T9770] ? __alloc_skb+0x140/0x710 [ 229.367199][ T9770] __alloc_skb+0x140/0x710 [ 229.367214][ T9770] ? __alloc_skb+0x5b7/0x710 [ 229.367233][ T9770] ? __pfx___alloc_skb+0x10/0x10 [ 229.367255][ T9770] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 229.367280][ T9770] alloc_skb_with_frags+0xdd/0x760 [ 229.367300][ T9770] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 229.367314][ T9770] ? rcu_is_watching+0x12/0xc0 [ 229.367330][ T9770] sock_alloc_send_pskb+0x801/0x980 [ 229.367349][ T9770] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 229.367366][ T9770] ? __pfx___schedule+0x10/0x10 [ 229.367383][ T9770] unix_dgram_sendmsg+0x3c7/0x1810 [ 229.367402][ T9770] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 229.367421][ T9770] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 229.367440][ T9770] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 229.367459][ T9770] ? apparmor_socket_sendmsg+0x15b/0x270 [ 229.367473][ T9770] ____sys_sendmsg+0xa4d/0xbe0 [ 229.367485][ T9770] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 229.367502][ T9770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.367512][ T9770] ? rcu_is_watching+0x12/0xc0 [ 229.367527][ T9770] ? rcu_is_watching+0x12/0xc0 [ 229.367539][ T9770] ? ___sys_sendmsg+0x19d/0x1e0 [ 229.367550][ T9770] ? kfree+0x1e5/0x6c0 [ 229.367563][ T9770] ___sys_sendmsg+0x190/0x1e0 [ 229.367576][ T9770] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.367594][ T9770] ? lockdep_hardirqs_on+0x78/0x100 [ 229.367614][ T9770] ? irqentry_exit+0x24d/0xa00 [ 229.367634][ T9770] ? __pfx___might_resched+0x10/0x10 [ 229.367652][ T9770] ? __sys_sendmmsg+0x31d/0x440 [ 229.367669][ T9770] __sys_sendmmsg+0x309/0x440 [ 229.367687][ T9770] ? __pfx___sys_sendmmsg+0x10/0x10 [ 229.367702][ T9770] ? find_held_lock+0x2b/0x80 [ 229.367719][ T9770] ? __mutex_unlock_slowpath+0x35d/0x930 [ 229.367741][ T9770] ? fput+0x79/0x100 [ 229.367754][ T9770] ? ksys_write+0x1ac/0x250 [ 229.367767][ T9770] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 229.367779][ T9770] ? lockdep_hardirqs_on+0x78/0x100 [ 229.367793][ T9770] __do_fast_syscall_32+0xe7/0x970 [ 229.367810][ T9770] ? lockdep_hardirqs_on+0x78/0x100 [ 229.367825][ T9770] do_fast_syscall_32+0x32/0x70 [ 229.367840][ T9770] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.367855][ T9770] RIP: 0023:0xf6feefec [ 229.367872][ T9770] Code: Unable to access opcode bytes at 0xf6feefc2. [ 229.367878][ T9770] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 229.367890][ T9770] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080002dc0 [ 229.367897][ T9770] RDX: 00000000db7a66cb RSI: 0000000000000000 RDI: 0000000000000000 [ 229.367903][ T9770] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.367909][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.367916][ T9770] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.367929][ T9770] [ 229.579925][ T5852] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 229.585317][ T5852] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.00 [ 229.589026][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.592015][ T5852] usb 6-1: Product: syz [ 229.593722][ T5852] usb 6-1: Manufacturer: syz [ 229.595493][ T5852] usb 6-1: SerialNumber: syz [ 229.599200][ T9759] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 229.602984][ T5852] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 229.606298][ T5852] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 229.609076][ T5852] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 229.697779][ T9786] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 229.888750][ T5852] usb 6-1: emi26_load_firmware - request_firmware() failed [ 229.897883][ T5852] usb 6-1: emi26_load_firmware - error loading firmware: error = -12 [ 229.906691][ T5852] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 229.959099][ T5852] usb 6-1: USB disconnect, device number 11 [ 230.085936][ T9811] FAULT_INJECTION: forcing a failure. [ 230.085936][ T9811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.090218][ T9811] CPU: 3 UID: 0 PID: 9811 Comm: syz.4.735 Not tainted syzkaller #0 PREEMPT(full) [ 230.090233][ T9811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.090241][ T9811] Call Trace: [ 230.090244][ T9811] [ 230.090249][ T9811] dump_stack_lvl+0x100/0x190 [ 230.090268][ T9811] should_fail_ex.cold+0x5/0xa [ 230.090282][ T9811] __fpu_restore_sig+0xa92/0x13b0 [ 230.090297][ T9811] ? __pfx___fpu_restore_sig+0x10/0x10 [ 230.090315][ T9811] ? __might_fault+0xc5/0x140 [ 230.090331][ T9811] fpu__restore_sig+0x151/0x190 [ 230.090344][ T9811] ia32_restore_sigcontext+0x456/0x620 [ 230.090359][ T9811] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 230.090376][ T9811] ? rcu_is_watching+0x12/0xc0 [ 230.090390][ T9811] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.090404][ T9811] ? lockdep_hardirqs_on+0x78/0x100 [ 230.090420][ T9811] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 230.090435][ T9811] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 230.090453][ T9811] do_int80_emulation+0x14b/0x720 [ 230.090470][ T9811] asm_int80_emulation+0x1a/0x20 [ 230.090486][ T9811] RIP: 0023:0xf702efea [ 230.090499][ T9811] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 230.090513][ T9811] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 [ 230.090528][ T9811] RAX: 0000000000000003 RBX: 0000000000000004 RCX: 0000000080000380 [ 230.090538][ T9811] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.090547][ T9811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 230.090556][ T9811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.090566][ T9811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.090588][ T9811] [ 230.475719][ T9827] syzkaller0: entered promiscuous mode [ 230.477675][ T9827] syzkaller0: entered allmulticast mode [ 230.561770][ T9836] syzkaller0: entered promiscuous mode [ 230.564177][ T9836] syzkaller0: entered allmulticast mode [ 230.858763][ T55] usb 46-1: device descriptor read/8, error -110 [ 230.869005][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 231.030874][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 231.042922][ T9] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.00 [ 231.047125][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.051607][ T9] usb 6-1: Product: syz [ 231.054983][ T9] usb 6-1: Manufacturer: syz [ 231.057349][ T9] usb 6-1: SerialNumber: syz [ 231.074727][ T9848] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 231.087403][ T9] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 231.110659][ T9] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 231.123800][ T9] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 231.183251][ T9896] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 231.574085][ T9930] tipc: Enabling of bearer rejected, failed to enable media [ 231.635400][ T55] usb usb46-port1: attempt power cycle [ 232.494902][ T9962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.694512][ T55] usb usb46-port1: unable to enumerate USB device [ 232.910100][ T9967] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 232.912275][ T9967] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 232.915987][ T9967] vhci_hcd vhci_hcd.0: Device attached [ 233.229021][ T55] usb 42-1: SetAddress Request (6) to port 0 [ 233.231271][ T55] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 233.316032][ T42] kauditd_printk_skb: 47 callbacks suppressed [ 233.316045][ T42] audit: type=1800 audit(1785673031.700:154): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 233.414121][ T9974] netlink: 'syz.4.754': attribute type 10 has an invalid length. [ 233.432581][ T9974] syz_tun: entered promiscuous mode [ 233.443002][ T9974] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 233.630012][ T42] audit: type=1800 audit(1785673032.020:155): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 233.686129][ T42] audit: type=1800 audit(1785673032.070:156): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 233.706295][ T42] audit: type=1800 audit(1785673032.090:157): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 233.713821][ T9986] program syz.0.756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.729039][ T42] audit: type=1800 audit(1785673032.110:158): pid=9988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.757" name="unbind" dev="sysfs" ino=6681 res=0 errno=0 [ 233.760519][ T42] audit: type=1800 audit(1785673032.150:159): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 233.786963][ T42] audit: type=1800 audit(1785673032.170:160): pid=9993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.757" name="driver_override" dev="sysfs" ino=2635 res=0 errno=0 [ 233.789844][ T9994] ucma_write: process 670 (syz.0.758) changed security contexts after opening file descriptor, this is not allowed. [ 233.801091][ T42] audit: type=1800 audit(1785673032.190:161): pid=9993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.757" name="bind" dev="sysfs" ino=36541 res=0 errno=0 [ 233.838772][ T42] audit: type=1800 audit(1785673032.210:162): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 233.846421][ T42] audit: type=1800 audit(1785673032.210:163): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=2603 res=0 errno=0 [ 233.945165][ T9968] vhci_hcd: connection reset by peer [ 233.948933][ T5820] vhci_hcd vhci_hcd.2: stop threads [ 233.950617][ T5820] vhci_hcd vhci_hcd.2: release socket [ 233.954548][ T5820] vhci_hcd vhci_hcd.2: disconnect device [ 234.130840][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.761'. [ 234.344248][T10023] binder: 10022:10023 ioctl c0306201 80000580 returned -14 [ 235.277120][T10074] 9p: Bad value for 'rfdno' [ 235.795624][T10144] netlink: 52 bytes leftover after parsing attributes in process `syz.1.774'. [ 235.806685][T10123] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 235.810215][T10123] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 235.819195][ T61] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 235.968695][ T61] usb 9-1: Using ep0 maxpacket: 8 [ 235.971821][ T61] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 235.975901][ T61] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 235.979471][ T61] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 235.982550][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.468348][T10175] netlink: 48 bytes leftover after parsing attributes in process `syz.0.778'. [ 236.818102][T10186] tmpfs: Unknown parameter 'grpsuot' [ 238.247847][T10242] netlink: 48 bytes leftover after parsing attributes in process `syz.0.792'. [ 238.298758][ T55] usb 42-1: device descriptor read/8, error -110 [ 238.357401][ T42] kauditd_printk_skb: 45 callbacks suppressed [ 238.357420][ T42] audit: type=1800 audit(1785673036.740:209): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 238.405194][ T42] audit: type=1800 audit(1785673036.790:210): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 238.553554][ T5893] usb 9-1: USB disconnect, device number 2 [ 238.618882][ C3] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 238.627806][ T42] audit: type=1800 audit(1785673037.010:211): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 238.689849][ T55] usb usb42-port1: attempt power cycle [ 238.692476][T10254] deleting an unspecified loop device is not supported. [ 238.769437][ T42] audit: type=1800 audit(1785673037.160:212): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 238.805290][T10280] netlink: 52 bytes leftover after parsing attributes in process `syz.4.796'. [ 238.816553][T10280] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.819866][T10280] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.851890][ T42] audit: type=1800 audit(1785673037.240:213): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 239.174502][ T42] audit: type=1800 audit(1785673037.560:214): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 239.209991][ T42] audit: type=1800 audit(1785673037.600:215): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 239.248318][T10291] syzkaller0: entered promiscuous mode [ 239.251634][ T55] usb usb42-port1: unable to enumerate USB device [ 239.254131][T10291] syzkaller0: entered allmulticast mode [ 239.346451][ T42] audit: type=1800 audit(1785673037.730:216): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 239.374527][ T42] audit: type=1800 audit(1785673037.760:217): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 239.406277][T10305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.800'. [ 239.437274][ T42] audit: type=1800 audit(1785673037.820:218): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 239.493866][T10311] tmpfs: Unknown parameter 'Zode' [ 239.498189][T10311] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 239.500340][T10311] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 239.519671][T10311] syz.0.802 (10311) used greatest stack depth: 19104 bytes left [ 239.798870][ T5963] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 239.970196][ T5963] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 239.973839][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.980365][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.986842][ T5963] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 239.995663][ T5963] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 239.999857][ T5963] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 240.004786][ T5963] usb 5-1: Manufacturer: syz [ 240.010775][ T5963] usb 5-1: config 0 descriptor?? [ 240.212667][T10335] netlink: 48 bytes leftover after parsing attributes in process `syz.4.805'. [ 240.533941][ T5963] hid_parser_main: 5 callbacks suppressed [ 240.533973][ T5963] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 240.546820][T10344] binder: 10343:10344 ioctl c0306201 80000580 returned -14 [ 240.716306][ T5963] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 240.889635][T10354] netlink: 'syz.1.807': attribute type 21 has an invalid length. [ 240.950581][T10354] netlink: 'syz.1.807': attribute type 7 has an invalid length. [ 240.995956][T10354] netlink: 'syz.1.807': attribute type 21 has an invalid length. [ 241.057145][T10354] netlink: 'syz.1.807': attribute type 7 has an invalid length. [ 241.110143][ T5820] bond0: (slave bond_slave_0): interface is now down [ 241.143842][ T5820] bond0: (slave bond_slave_1): interface is now down [ 241.148770][ T5820] bond0: (slave syz_tun): interface is now down [ 241.161756][ T5820] bond0: now running without any active interface! [ 241.352421][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.810'. [ 241.892135][ T5963] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 241.927215][T10395] netlink: 48 bytes leftover after parsing attributes in process `syz.1.813'. [ 242.043475][ T5963] usb 5-1: device descriptor read/64, error -32 [ 242.441341][ T5963] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 242.547306][T10409] FAULT_INJECTION: forcing a failure. [ 242.547306][T10409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.552931][T10409] CPU: 0 UID: 0 PID: 10409 Comm: syz.2.814 Not tainted syzkaller #0 PREEMPT(full) [ 242.552956][T10409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 242.552968][T10409] Call Trace: [ 242.552974][T10409] [ 242.552982][T10409] dump_stack_lvl+0x100/0x190 [ 242.553009][T10409] should_fail_ex.cold+0x5/0xa [ 242.553031][T10409] _copy_to_user+0x32/0xd0 [ 242.553061][T10409] pagemap_read+0x51b/0x830 [ 242.553091][T10409] ? __pfx_pagemap_read+0x10/0x10 [ 242.553119][T10409] ? rw_verify_area+0xce/0x6d0 [ 242.553145][T10409] ? __pfx_pagemap_read+0x10/0x10 [ 242.553170][T10409] vfs_read+0x1e4/0xb40 [ 242.553189][T10409] ? __pfx_vfs_read+0x10/0x10 [ 242.553203][T10409] ? find_held_lock+0x2b/0x80 [ 242.553243][T10409] ? __fget_files+0x215/0x3d0 [ 242.553261][T10409] ? __fget_files+0x215/0x3d0 [ 242.553281][T10409] ? __fget_files+0x21f/0x3d0 [ 242.553305][T10409] ksys_pread64+0x161/0x1a0 [ 242.553323][T10409] ? __pfx_ksys_pread64+0x10/0x10 [ 242.553339][T10409] ? ksys_write+0x1ac/0x250 [ 242.553356][T10409] ? __pfx_ksys_write+0x10/0x10 [ 242.553378][T10409] __do_fast_syscall_32+0xe7/0x970 [ 242.553403][T10409] ? lockdep_hardirqs_on+0x78/0x100 [ 242.553428][T10409] do_fast_syscall_32+0x32/0x70 [ 242.553454][T10409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.553477][T10409] RIP: 0023:0xf6feefec [ 242.553498][T10409] Code: Unable to access opcode bytes at 0xf6feefc2. [ 242.553506][T10409] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 00000000000000b4 [ 242.553529][T10409] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001240 [ 242.553541][T10409] RDX: 00000000ffffff8c RSI: 0000000000200000 RDI: 0000000000000000 [ 242.553553][T10409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.553564][T10409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.553575][T10409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.553598][T10409] [ 242.749038][ T5963] usb 5-1: device descriptor read/64, error -32 [ 242.917942][T10465] binder: 10454:10465 ioctl c0306201 80000580 returned -14 [ 243.399969][ T42] kauditd_printk_skb: 99 callbacks suppressed [ 243.399980][ T42] audit: type=1800 audit(1785673041.790:318): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 243.501960][T10587] netlink: 48 bytes leftover after parsing attributes in process `syz.0.824'. [ 243.558749][ T6141] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 243.590849][ T42] audit: type=1800 audit(1785673041.980:319): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 243.709949][ T6141] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 243.714026][ T6141] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.722752][ T6141] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.728023][ T6141] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 243.739657][ T6141] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 243.744782][ T6141] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 243.751991][ T6141] usb 7-1: Manufacturer: syz [ 243.756806][ T61] usb 5-1: USB disconnect, device number 4 [ 243.757047][ T6141] usb 7-1: config 0 descriptor?? [ 243.763825][ T42] audit: type=1800 audit(1785673042.150:320): pid=7489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144525 res=0 errno=0 [ 243.784735][ T42] audit: type=1800 audit(1785673042.150:321): pid=7489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=144555 res=0 errno=0 [ 243.808156][T10605] netlink: 'syz.1.826': attribute type 4 has an invalid length. [ 243.822857][ T42] audit: type=1800 audit(1785673042.150:322): pid=7489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=144532 res=0 errno=0 [ 243.848822][ T42] audit: type=1800 audit(1785673042.160:323): pid=7489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=144533 res=0 errno=0 [ 243.856677][ T42] audit: type=1800 audit(1785673042.210:324): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 243.866729][ T42] audit: type=1800 audit(1785673042.240:325): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 243.926044][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 243.963827][T10612] mmap: syz.1.828 (10612) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 243.967809][ T42] audit: type=1800 audit(1785673042.350:326): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 244.033810][ T42] audit: type=1800 audit(1785673042.420:327): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 244.199488][ T6141] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 244.217651][ T6141] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 245.113004][T10653] openvswitch: netlink: Flow actions attr not present in new flow. [ 245.516676][T10665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.836'. [ 245.561343][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.836'. [ 245.566414][T10665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.836'. [ 245.848265][T10657] tipc: Started in network mode [ 245.850714][T10657] tipc: Node identity ac14140f, cluster identity 4711 [ 245.859699][T10657] tipc: New replicast peer: 255.255.255.255 [ 245.864361][T10657] tipc: Enabled bearer , priority 10 [ 246.168703][ T61] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 246.280027][T10705] netlink: 'syz.2.839': attribute type 1 has an invalid length. [ 246.306066][T10705] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.323012][T10705] bond2: entered allmulticast mode [ 246.331719][ T61] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 246.338406][ T61] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 246.343758][T10705] bond2: (slave ip6gretap0): making interface the new active one [ 246.344693][ T61] usb 9-1: config 0 interface 0 has no altsetting 0 [ 246.347144][T10705] ip6gretap0: entered allmulticast mode [ 246.350898][ T61] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 246.354636][ T61] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 246.357276][ T61] usb 9-1: Product: syz [ 246.358842][ T61] usb 9-1: Manufacturer: syz [ 246.358927][T10705] bond2: (slave ip6gretap0): Enslaving as an active interface with an up link [ 246.361926][ T61] usb 9-1: SerialNumber: syz [ 246.368130][ T61] usb 9-1: config 0 descriptor?? [ 246.375753][ T61] usb 9-1: selecting invalid altsetting 0 [ 246.558923][ T5893] usb 7-1: USB disconnect, device number 12 [ 246.597482][ T61] usb 9-1: USB disconnect, device number 3 [ 246.634496][T10767] IPVS: set_ctl: invalid protocol: 1 0.0.30.1:0 [ 246.887973][ T5963] tipc: Node number set to 2886997007 [ 247.304775][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 247.307689][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 247.312765][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 247.315989][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 247.711019][T10835] netlink: 48 bytes leftover after parsing attributes in process `syz.0.846'. [ 247.729334][T10818] net2280 0000:00:02.0: unbind [ 248.317962][T10842] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 249.193733][T10848] FAULT_INJECTION: forcing a failure. [ 249.193733][T10848] name failslab, interval 1, probability 0, space 0, times 0 [ 249.201875][T10848] CPU: 1 UID: 0 PID: 10848 Comm: syz.4.848 Not tainted syzkaller #0 PREEMPT(full) [ 249.201891][T10848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.201899][T10848] Call Trace: [ 249.201903][T10848] [ 249.201920][T10848] dump_stack_lvl+0x100/0x190 [ 249.201939][T10848] should_fail_ex.cold+0x5/0xa [ 249.201952][T10848] should_failslab+0xc2/0x120 [ 249.201968][T10848] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 249.201983][T10848] ? __alloc_skb+0x5b7/0x710 [ 249.201998][T10848] ? __alloc_skb+0x140/0x710 [ 249.202015][T10848] __alloc_skb+0x140/0x710 [ 249.202029][T10848] ? __alloc_skb+0x5b7/0x710 [ 249.202043][T10848] ? __pfx___alloc_skb+0x10/0x10 [ 249.202061][T10848] netlink_ack+0x117/0xb80 [ 249.202075][T10848] ? __lock_acquire+0x49f/0x1a40 [ 249.202096][T10848] rdma_nl_rcv_skb.constprop.0.isra.0+0x32b/0x410 [ 249.202120][T10848] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 249.202144][T10848] ? netlink_deliver_tap+0x1ae/0xcc0 [ 249.202158][T10848] netlink_unicast+0x585/0x850 [ 249.202173][T10848] ? __pfx_netlink_unicast+0x10/0x10 [ 249.202189][T10848] netlink_sendmsg+0x8b0/0xda0 [ 249.202204][T10848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.202218][T10848] ? apparmor_socket_sendmsg+0x15b/0x270 [ 249.202233][T10848] ____sys_sendmsg+0xa4d/0xbe0 [ 249.202245][T10848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.202259][T10848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.202277][T10848] ___sys_sendmsg+0x190/0x1e0 [ 249.202290][T10848] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.202308][T10848] ? find_held_lock+0x2b/0x80 [ 249.202330][T10848] __sys_sendmsg+0x160/0x210 [ 249.202358][T10848] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.202383][T10848] ? __pfx_ksys_write+0x10/0x10 [ 249.202398][T10848] __do_fast_syscall_32+0xe7/0x970 [ 249.202414][T10848] ? lockdep_hardirqs_on+0x78/0x100 [ 249.202430][T10848] do_fast_syscall_32+0x32/0x70 [ 249.202445][T10848] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.202460][T10848] RIP: 0023:0xf702efec [ 249.202474][T10848] Code: Unable to access opcode bytes at 0xf702efc2. [ 249.202479][T10848] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 249.202491][T10848] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 249.202498][T10848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.202504][T10848] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.202510][T10848] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 249.202516][T10848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.202529][T10848] [ 249.377019][ T42] kauditd_printk_skb: 50 callbacks suppressed [ 249.377084][ T42] audit: type=1800 audit(1785673047.760:378): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 249.484097][T10852] netlink: 48 bytes leftover after parsing attributes in process `syz.0.849'. [ 249.720578][ T42] audit: type=1800 audit(1785673047.940:379): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 250.248990][ T42] audit: type=1800 audit(1785673048.620:380): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 250.280057][ T42] audit: type=1800 audit(1785673048.640:381): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 250.304328][ T42] audit: type=1800 audit(1785673048.680:382): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 250.319714][T10864] FAULT_INJECTION: forcing a failure. [ 250.319714][T10864] name failslab, interval 1, probability 0, space 0, times 0 [ 250.326532][T10864] CPU: 2 UID: 0 PID: 10864 Comm: syz.2.853 Not tainted syzkaller #0 PREEMPT(full) [ 250.326556][T10864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.326566][T10864] Call Trace: [ 250.326578][T10864] [ 250.326586][T10864] dump_stack_lvl+0x100/0x190 [ 250.326613][T10864] should_fail_ex.cold+0x5/0xa [ 250.326633][T10864] should_failslab+0xc2/0x120 [ 250.326656][T10864] kmem_cache_alloc_noprof+0x91/0x6a0 [ 250.326677][T10864] ? __pfx_map_id_range_down+0x10/0x10 [ 250.326702][T10864] ? security_inode_alloc+0x3b/0x2c0 [ 250.326726][T10864] security_inode_alloc+0x3b/0x2c0 [ 250.326746][T10864] inode_init_always_gfp+0xc77/0xfb0 [ 250.326767][T10864] alloc_inode+0x8e/0x250 [ 250.326788][T10864] new_inode+0x22/0x1c0 [ 250.326816][T10864] __debugfs_create_file+0x105/0x4f0 [ 250.326846][T10864] debugfs_create_file_full+0x41/0x60 [ 250.326871][T10864] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 250.326885][T10864] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 250.326907][T10864] ? __pfx_rcu_is_watching+0x10/0x10 [ 250.326922][T10864] ? lockdep_init_map_type+0x5c/0x250 [ 250.326936][T10864] ? __pfx_ieee802154_if_setup+0x10/0x10 [ 250.326950][T10864] alloc_netdev_mqs+0x314/0x15c0 [ 250.326971][T10864] ieee802154_if_add+0xe2/0x10e0 [ 250.326986][T10864] ? __pfx_ieee802154_if_add+0x10/0x10 [ 250.327000][T10864] ? __pfx___nla_validate_parse+0x10/0x10 [ 250.327015][T10864] ? mutex_is_locked+0x17/0x60 [ 250.327025][T10864] ? rtnl_is_locked+0x15/0x20 [ 250.327051][T10864] ? cfg802154_rdev_by_wpan_phy_idx+0xad/0x110 [ 250.327072][T10864] ? nl802154_pre_doit+0x398/0xd10 [ 250.327089][T10864] ieee802154_add_iface+0x44/0x90 [ 250.327106][T10864] nl802154_new_interface+0x2d5/0x550 [ 250.327127][T10864] genl_family_rcv_msg_doit+0x214/0x300 [ 250.327144][T10864] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 250.327159][T10864] ? genl_get_cmd+0x3e7/0x760 [ 250.327176][T10864] ? bpf_lsm_capable+0x9/0x10 [ 250.327189][T10864] ? security_capable+0x80/0x260 [ 250.327203][T10864] genl_rcv_msg+0x560/0x800 [ 250.327219][T10864] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.327234][T10864] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 250.327245][T10864] ? __pfx_nl802154_new_interface+0x10/0x10 [ 250.327263][T10864] ? __pfx_nl802154_post_doit+0x10/0x10 [ 250.327275][T10864] ? __lock_acquire+0x49f/0x1a40 [ 250.327295][T10864] netlink_rcv_skb+0x159/0x420 [ 250.327307][T10864] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.327323][T10864] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.327341][T10864] ? netlink_deliver_tap+0x1ae/0xcc0 [ 250.327355][T10864] genl_rcv+0x28/0x40 [ 250.327367][T10864] netlink_unicast+0x585/0x850 [ 250.327382][T10864] ? __pfx_netlink_unicast+0x10/0x10 [ 250.327398][T10864] netlink_sendmsg+0x8b0/0xda0 [ 250.327414][T10864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.327428][T10864] ? apparmor_socket_sendmsg+0x15b/0x270 [ 250.327443][T10864] ____sys_sendmsg+0xa4d/0xbe0 [ 250.327455][T10864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.327469][T10864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.327487][T10864] ___sys_sendmsg+0x190/0x1e0 [ 250.327501][T10864] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.327520][T10864] ? find_held_lock+0x2b/0x80 [ 250.327543][T10864] __sys_sendmsg+0x160/0x210 [ 250.327559][T10864] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.327584][T10864] ? __pfx_ksys_write+0x10/0x10 [ 250.327598][T10864] __do_fast_syscall_32+0xe7/0x970 [ 250.327613][T10864] ? lockdep_hardirqs_on+0x78/0x100 [ 250.327629][T10864] do_fast_syscall_32+0x32/0x70 [ 250.327645][T10864] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.327660][T10864] RIP: 0023:0xf6feefec [ 250.327674][T10864] Code: Unable to access opcode bytes at 0xf6feefc2. [ 250.327679][T10864] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 250.327691][T10864] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080017680 [ 250.327698][T10864] RDX: 0000000000008810 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.327704][T10864] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.327711][T10864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.327717][T10864] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.327731][T10864] [ 250.328407][T10864] debugfs: out of free dentries, can not create file 'netdev@ffff888014014700' [ 250.377974][ T42] audit: type=1800 audit(1785673048.760:383): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 250.477627][ T42] audit: type=1800 audit(1785673048.860:384): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 250.483605][ T42] audit: type=1800 audit(1785673048.860:385): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146053 res=0 errno=0 [ 250.503450][ T42] audit: type=1800 audit(1785673048.880:386): pid=7643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=146058 res=0 errno=0 [ 250.550332][ T42] audit: type=1800 audit(1785673048.940:387): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 250.992248][T10889] binder: 10888:10889 ioctl c0306201 80000580 returned -14 [ 251.709974][T10902] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 252.069829][T10907] netlink: 'syz.0.860': attribute type 2 has an invalid length. [ 252.248592][T10922] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 252.537746][T10939] binder: 10938:10939 ioctl c0306201 80000040 returned -14 [ 252.541167][T10939] CIFS: Attempting to mount //127.0.0.1/share [ 252.546614][T10939] CIFS: VFS: Error connecting to socket. Aborting operation. [ 252.549503][T10939] CIFS: VFS: cifs_mount failed w/return code = -101 [ 252.751598][T10940] gadgetfs: bound to dummy_udc driver [ 252.988801][ T61] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 252.991631][ C2] gadgetfs: connected [ 252.993620][ T61] gadgetfs: disconnected [ 253.140478][ C2] gadgetfs: connected [ 253.142997][ T61] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 253.148140][ T61] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 253.153375][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.158541][ C2] gadgetfs: configuration #1 [ 253.221910][T10936] gadgetfs: suspended from state 3 [ 253.223990][ T61] usb 7-1: can't set config #1, error -71 [ 253.226353][T10936] gadgetfs: disconnected [ 253.234879][ T61] usb 7-1: USB disconnect, device number 13 [ 253.423459][T10989] netlink: 'syz.4.868': attribute type 4 has an invalid length. [ 253.425948][T10989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.868'. [ 254.206194][T11012] 9p: Bad value for 'rfdno' [ 254.386227][T11039] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 254.555349][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 254.555366][ T42] audit: type=1800 audit(1785673052.940:416): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 254.819574][ T42] audit: type=1800 audit(1785673053.210:417): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 254.854967][T11054] 9p: Bad value for 'rfdno' [ 255.010068][ T55] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 255.147786][ T42] audit: type=1800 audit(1785673053.530:418): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 255.153674][T11080] 9p: Bad value for 'rfdno' [ 255.168163][ T55] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 255.176691][ T55] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.00 [ 255.180475][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.183896][ T55] usb 5-1: Product: syz [ 255.185570][ T55] usb 5-1: Manufacturer: syz [ 255.188013][ T55] usb 5-1: SerialNumber: syz [ 255.194272][T11045] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 255.197771][ T42] audit: type=1800 audit(1785673053.580:419): pid=7489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148881 res=0 errno=0 [ 255.211165][ T55] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 255.217468][ T42] audit: type=1800 audit(1785673053.600:420): pid=7489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=148913 res=0 errno=0 [ 255.227595][ T42] audit: type=1800 audit(1785673053.600:421): pid=7489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=148888 res=0 errno=0 [ 255.235262][ T42] audit: type=1800 audit(1785673053.600:422): pid=7489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=148889 res=0 errno=0 [ 255.261393][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.264116][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.416077][ T42] audit: type=1800 audit(1785673053.800:423): pid=11045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.874" name="loading" dev="sysfs" ino=140890 res=0 errno=0 [ 255.422698][ T9] usb 6-1: emi26_load_firmware - request_firmware() failed [ 255.423355][ T55] usb 5-1: emi26_load_firmware - request_firmware() failed [ 255.429204][ T55] usb 5-1: emi26_load_firmware - error loading firmware: error = -2 [ 255.432545][ T55] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 255.433603][ T9] usb 6-1: emi26_load_firmware - error loading firmware: error = -12 [ 255.438546][ T42] audit: type=1800 audit(1785673053.820:424): pid=7489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=148910 res=0 errno=0 [ 255.440211][ T9] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 255.448953][ T42] audit: type=1800 audit(1785673053.830:425): pid=7489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=148911 res=0 errno=0 [ 255.455627][ T9] usb 6-1: USB disconnect, device number 12 [ 255.461402][ T55] usb 5-1: USB disconnect, device number 5 [ 255.795416][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.877'. [ 256.459002][ T2321] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 256.621840][ T2321] usb 5-1: not running at top speed; connect to a high speed hub [ 256.629888][ T2321] usb 5-1: config 3 has an invalid interface number: 161 but max is 0 [ 256.637245][ T2321] usb 5-1: config 3 has no interface number 0 [ 256.641881][ T2321] usb 5-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 256.646644][ T2321] usb 5-1: config 3 interface 161 has no altsetting 0 [ 256.651867][ T2321] usb 5-1: string descriptor 0 read error: -22 [ 256.654228][ T2321] usb 5-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 256.657417][ T2321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.666062][ T2321] option 5-1:3.161: GSM modem (1-port) converter detected [ 256.792524][T11184] 9p: Bad value for 'rfdno' [ 256.847859][T11182] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 256.928704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 257.179926][ T5700] usb 5-1: USB disconnect, device number 6 [ 257.185146][ T5700] option 5-1:3.161: device disconnected [ 257.651529][T11230] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 257.653606][T11230] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 257.656319][T11230] vhci_hcd vhci_hcd.0: Device attached [ 257.838905][ T5852] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 257.898789][ T34] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 257.901761][ T5852] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 258.049956][ T34] usb 9-1: config 0 has no interfaces? [ 258.051738][ T34] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 258.054902][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.062821][ T34] usb 9-1: config 0 descriptor?? [ 258.311235][T11231] usbip_core: unknown command [ 258.312866][T11231] vhci_hcd: unknown pdu 0 [ 258.318149][T11231] usbip_core: unknown command [ 258.325191][ T5820] vhci_hcd vhci_hcd.4: stop threads [ 258.343607][ T5820] vhci_hcd vhci_hcd.4: release socket [ 258.364719][ T5820] vhci_hcd vhci_hcd.4: disconnect device [ 258.379147][ T5852] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 258.579889][T11270] FAULT_INJECTION: forcing a failure. [ 258.579889][T11270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.585158][T11270] CPU: 1 UID: 0 PID: 11270 Comm: syz.2.892 Not tainted syzkaller #0 PREEMPT(full) [ 258.585180][T11270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.585190][T11270] Call Trace: [ 258.585195][T11270] [ 258.585202][T11270] dump_stack_lvl+0x100/0x190 [ 258.585227][T11270] should_fail_ex.cold+0x5/0xa [ 258.585247][T11270] _copy_from_user+0x2e/0xd0 [ 258.585272][T11270] drm_ioctl+0x520/0xc60 [ 258.585299][T11270] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 258.585320][T11270] ? __pfx_drm_ioctl+0x10/0x10 [ 258.585355][T11270] drm_compat_ioctl+0x386/0x4c0 [ 258.585382][T11270] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 258.585407][T11270] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 258.585434][T11270] __do_fast_syscall_32+0xe7/0x970 [ 258.585458][T11270] ? lockdep_hardirqs_on+0x78/0x100 [ 258.585480][T11270] do_fast_syscall_32+0x32/0x70 [ 258.585502][T11270] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 258.585523][T11270] RIP: 0023:0xf6feefec [ 258.585542][T11270] Code: Unable to access opcode bytes at 0xf6feefc2. [ 258.585549][T11270] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 258.585566][T11270] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c06864a2 [ 258.585575][T11270] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.585584][T11270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 258.585593][T11270] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 258.585603][T11270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.585622][T11270] [ 258.608747][ T34] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 258.800045][ T34] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 258.803025][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.809427][ T34] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 258.812127][ T34] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 258.815476][ T34] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 259.012240][T11260] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 259.021273][ T34] usb 6-1: emi26_load_firmware - request_firmware() failed [ 259.027871][ T34] usb 6-1: emi26_load_firmware - error loading firmware: error = -2 [ 259.031423][ T34] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 259.037891][ T34] usb 6-1: USB disconnect, device number 13 [ 260.428379][ T42] kauditd_printk_skb: 50 callbacks suppressed [ 260.428391][ T42] audit: type=1800 audit(1785673058.810:476): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 260.462929][ T42] audit: type=1800 audit(1785673058.850:477): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 260.706947][ T42] audit: type=1800 audit(1785673059.090:478): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 260.761981][ T42] audit: type=1800 audit(1785673059.150:479): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 260.773196][ T41] usb 9-1: USB disconnect, device number 4 [ 260.833042][ T42] audit: type=1800 audit(1785673059.220:480): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 260.859789][ T42] audit: type=1800 audit(1785673059.240:481): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 260.974463][ T42] audit: type=1800 audit(1785673059.360:482): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 260.999499][ T42] audit: type=1800 audit(1785673059.390:483): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 261.073905][ T42] audit: type=1800 audit(1785673059.460:484): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151044 res=0 errno=0 [ 261.298285][ T42] audit: type=1800 audit(1785673059.680:485): pid=11334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.900" name="attach" dev="sysfs" ino=36642 res=0 errno=0 [ 261.314666][T11334] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 261.317224][T11334] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 261.322111][T11334] vhci_hcd vhci_hcd.0: Device attached [ 261.325963][T11334] netlink: 40 bytes leftover after parsing attributes in process `syz.4.900'. [ 261.364344][T11334] netlink: 'syz.4.900': attribute type 12 has an invalid length. [ 261.537558][T11336] vhci_hcd: connection closed [ 261.541293][ T5794] vhci_hcd vhci_hcd.4: stop threads [ 261.545005][ T5794] vhci_hcd vhci_hcd.4: release socket [ 261.547479][ T5794] vhci_hcd vhci_hcd.4: disconnect device [ 262.601851][T11366] FAULT_INJECTION: forcing a failure. [ 262.601851][T11366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.606891][T11366] CPU: 1 UID: 0 PID: 11366 Comm: syz.0.911 Not tainted syzkaller #0 PREEMPT(full) [ 262.606907][T11366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.606915][T11366] Call Trace: [ 262.606919][T11366] [ 262.606924][T11366] dump_stack_lvl+0x100/0x190 [ 262.606942][T11366] should_fail_ex.cold+0x5/0xa [ 262.606956][T11366] _copy_to_user+0x32/0xd0 [ 262.606975][T11366] simple_read_from_buffer+0xcb/0x170 [ 262.606994][T11366] proc_fail_nth_read+0x1af/0x230 [ 262.607012][T11366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.607035][T11366] ? rw_verify_area+0xce/0x6d0 [ 262.607059][T11366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.607078][T11366] vfs_read+0x1e4/0xb40 [ 262.607090][T11366] ? __pfx_vfs_read+0x10/0x10 [ 262.607102][T11366] ? find_held_lock+0x2b/0x80 [ 262.607123][T11366] ? __fget_files+0x215/0x3d0 [ 262.607143][T11366] ? __fget_files+0x21f/0x3d0 [ 262.607165][T11366] ksys_read+0x12a/0x250 [ 262.607180][T11366] ? __pfx_ksys_read+0x10/0x10 [ 262.607201][T11366] do_int80_emulation+0x14b/0x720 [ 262.607225][T11366] asm_int80_emulation+0x1a/0x20 [ 262.607242][T11366] RIP: 0023:0xf71073eb [ 262.607255][T11366] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 262.607270][T11366] RSP: 002b:00000000f53bd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 262.607287][T11366] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53bd5d0 [ 262.607297][T11366] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 262.607306][T11366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.607316][T11366] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 262.607326][T11366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.607341][T11366] [ 262.757584][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 262.766092][T11371] ipvlan2: entered allmulticast mode [ 262.767964][T11371] batadv_slave_1: entered allmulticast mode [ 262.778552][T11371] overlay: ./cgroup.cpu/cgroup.procs is not a directory [ 262.949331][ T61] e1000 0000:00:06.0 eth0: Reset adapter [ 264.228829][ T55] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 264.381264][ T55] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 264.387403][ T55] usb 7-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.00 [ 264.391319][ T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.394676][ T55] usb 7-1: Product: syz [ 264.396468][ T55] usb 7-1: Manufacturer: syz [ 264.398447][ T55] usb 7-1: SerialNumber: syz [ 264.404593][T11432] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 264.409343][ T55] emi26 - firmware loader 7-1:1.0: emi26_probe start [ 264.413051][ T55] usb 7-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 264.416505][ T55] usb 7-1: Falling back to sysfs fallback for: emi26/loader.fw [ 264.628169][ T55] usb 7-1: emi26_load_firmware - request_firmware() failed [ 264.631319][ T55] usb 7-1: emi26_load_firmware - error loading firmware: error = -12 [ 264.634701][ T55] emi26 - firmware loader 7-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 264.642520][ T55] usb 7-1: USB disconnect, device number 14 [ 265.179741][ T61] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 271.899089][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 272.720850][T11473] binder: 11470:11473 ioctl c0306201 80000580 returned -14 [ 272.721145][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 272.896511][ T42] kauditd_printk_skb: 93 callbacks suppressed [ 272.896523][ T42] audit: type=1800 audit(1785673071.280:579): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 272.979201][ T41] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 273.079143][T11486] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 273.130538][ T41] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.148780][ T41] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 273.152372][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.156754][ T41] usb 9-1: config 0 descriptor?? [ 273.160479][ T42] audit: type=1800 audit(1785673071.540:580): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151346 res=0 errno=0 [ 273.168801][ T5963] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 273.175473][ T42] audit: type=1800 audit(1785673071.560:581): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=151375 res=0 errno=0 [ 273.186203][ T42] audit: type=1800 audit(1785673071.560:582): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=151353 res=0 errno=0 [ 273.197126][ T42] audit: type=1800 audit(1785673071.570:583): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=151354 res=0 errno=0 [ 273.205093][ T42] audit: type=1800 audit(1785673071.580:584): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=151355 res=0 errno=0 [ 273.214184][ T42] audit: type=1800 audit(1785673071.580:585): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151395 res=0 errno=0 [ 273.320337][ T5963] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 273.325313][ T5963] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.00 [ 273.330606][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.335266][ T5963] usb 6-1: Product: syz [ 273.337107][ T5963] usb 6-1: Manufacturer: syz [ 273.339209][ T5963] usb 6-1: SerialNumber: syz [ 273.346821][T11489] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 273.347291][ T42] audit: type=1800 audit(1785673071.730:586): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151413 res=0 errno=0 [ 273.352294][ T5963] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 273.359907][ T5963] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 273.361525][ T42] audit: type=1800 audit(1785673071.740:587): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=151445 res=0 errno=0 [ 273.363028][ T5963] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 273.370070][ T42] audit: type=1800 audit(1785673071.740:588): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=151420 res=0 errno=0 [ 273.386343][ T41] usbhid 9-1:0.0: can't add hid device: -71 [ 273.389805][ T41] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 273.393635][ T41] usb 9-1: USB disconnect, device number 5 [ 273.667232][ T5963] usb 6-1: emi26_load_firmware - request_firmware() failed [ 273.672140][ T5963] usb 6-1: emi26_load_firmware - error loading firmware: error = -12 [ 273.675430][ T5963] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 273.681632][ T5963] usb 6-1: USB disconnect, device number 14 [ 273.821326][ T41] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 273.978986][ T41] usb 9-1: Using ep0 maxpacket: 32 [ 273.983044][ T41] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.986740][ T41] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 273.990579][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.995901][ T41] usb 9-1: config 0 descriptor?? [ 274.001416][ T41] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 274.010029][ T41] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 274.138784][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 274.303361][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 274.323482][ T9] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.00 [ 274.327684][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.330939][ T9] usb 5-1: Product: syz [ 274.333308][ T9] usb 5-1: Manufacturer: syz [ 274.334834][ T9] usb 5-1: SerialNumber: syz [ 274.362996][T11531] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 274.366409][ T9] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 274.369507][ T9] usb 5-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 274.372153][ T9] usb 5-1: Falling back to sysfs fallback for: emi26/loader.fw [ 274.603050][ T9] usb 5-1: emi26_load_firmware - request_firmware() failed [ 274.605656][ T9] usb 5-1: emi26_load_firmware - error loading firmware: error = -12 [ 274.610644][ T9] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 274.619105][ T9] usb 5-1: USB disconnect, device number 7 [ 274.968770][ T5963] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 275.128904][ T5963] usb 7-1: Using ep0 maxpacket: 8 [ 275.138894][ T5963] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 275.142413][ T5963] usb 7-1: config 0 has no interface number 0 [ 275.144426][ T5963] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 275.147533][ T5963] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 275.151040][ T5963] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 275.154591][ T5963] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 275.158158][ T5963] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 275.162223][ T5963] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 275.164924][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.169275][ T5963] usb 7-1: config 0 descriptor?? [ 275.176504][ T5963] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 275.458845][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 275.498816][ T5963] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 275.608730][ T9] usb 5-1: device descriptor read/64, error -71 [ 275.650686][ T5963] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 275.657059][ T5963] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.00 [ 275.661306][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.665451][ T5963] usb 6-1: Product: syz [ 275.667582][ T5963] usb 6-1: Manufacturer: syz [ 275.670980][ T5963] usb 6-1: SerialNumber: syz [ 275.678234][T11593] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 275.683418][ T5963] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 275.687101][ T5963] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 275.692263][ T5963] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 275.735879][ T34] usb 9-1: USB disconnect, device number 6 [ 275.748129][ T34] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 275.858757][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 275.959236][T11611] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 275.964769][ T5963] usb 6-1: emi26_load_firmware - request_firmware() failed [ 275.970075][ T5963] usb 6-1: emi26_load_firmware - error loading firmware: error = -2 [ 275.975906][ T5963] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 275.989199][ T9] usb 5-1: device descriptor read/64, error -71 [ 276.001010][ T55] usb 6-1: USB disconnect, device number 15 [ 276.109858][ T9] usb usb5-port1: attempt power cycle [ 276.468817][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 276.489412][ T9] usb 5-1: device descriptor read/8, error -71 [ 276.738762][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 276.761743][ T9] usb 5-1: device descriptor read/8, error -71 [ 276.851101][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.942'. [ 276.853429][T11662] 9p: Bad value for 'rfdno' [ 276.869619][ T9] usb usb5-port1: unable to enumerate USB device [ 278.042817][ T9] usb 7-1: USB disconnect, device number 15 [ 278.047603][ T42] kauditd_printk_skb: 67 callbacks suppressed [ 278.047614][ T42] audit: type=1800 audit(1785673076.430:656): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 278.070095][ T42] audit: type=1800 audit(1785673076.460:657): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 278.071139][ T9] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 278.086284][T11697] netlink: 'syz.1.944': attribute type 1 has an invalid length. [ 278.112947][T11697] : renamed from dummy0 (while UP) [ 278.142436][ T42] audit: type=1800 audit(1785673076.530:658): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 278.241371][ T42] audit: type=1800 audit(1785673076.630:659): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 278.261389][T11718] netlink: 'syz.0.947': attribute type 4 has an invalid length. [ 278.281320][T11718] netlink: 'syz.0.947': attribute type 4 has an invalid length. [ 278.311961][ T42] audit: type=1800 audit(1785673076.700:660): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 278.398995][ T5700] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 278.409588][ T42] audit: type=1800 audit(1785673076.790:661): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 278.591993][ T5700] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 278.597527][ T5700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.603471][ T5700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.607611][ T5700] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 278.618931][ T34] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 278.624188][ T5700] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 278.627967][ T5700] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 278.634274][ T5700] usb 6-1: Manufacturer: syz [ 278.654797][ T42] audit: type=1800 audit(1785673077.040:662): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153091 res=0 errno=0 [ 278.661276][ T42] audit: type=1800 audit(1785673077.050:663): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=153121 res=0 errno=0 [ 278.667257][ T5700] usb 6-1: config 0 descriptor?? [ 278.667523][ T42] audit: type=1800 audit(1785673077.050:664): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=153098 res=0 errno=0 [ 278.677091][ T42] audit: type=1800 audit(1785673077.050:665): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=153099 res=0 errno=0 [ 278.773519][ T34] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 278.787793][ T34] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.00 [ 278.791960][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.794448][ T34] usb 5-1: Product: syz [ 278.795684][ T34] usb 5-1: Manufacturer: syz [ 278.797122][ T34] usb 5-1: SerialNumber: syz [ 278.804788][T11723] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 278.809771][ T34] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 278.813484][ T34] usb 5-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 278.816798][ T34] usb 5-1: Falling back to sysfs fallback for: emi26/loader.fw [ 279.132403][ T5700] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 279.142143][T11737] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 279.150247][ T34] usb 5-1: emi26_load_firmware - request_firmware() failed [ 279.156417][ T34] usb 5-1: emi26_load_firmware - error loading firmware: error = -2 [ 279.163447][ T34] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 279.174502][ T34] usb 5-1: USB disconnect, device number 12 [ 279.197684][ T5700] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 279.620229][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'. [ 279.699799][T11760] FAULT_INJECTION: forcing a failure. [ 279.699799][T11760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.703802][T11760] CPU: 0 UID: 0 PID: 11760 Comm: syz.4.952 Not tainted syzkaller #0 PREEMPT(full) [ 279.703818][T11760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 279.703825][T11760] Call Trace: [ 279.703829][T11760] [ 279.703834][T11760] dump_stack_lvl+0x100/0x190 [ 279.703852][T11760] should_fail_ex.cold+0x5/0xa [ 279.703869][T11760] _copy_from_iter+0x1f4/0x1690 [ 279.703891][T11760] ? __pfx__copy_from_iter+0x10/0x10 [ 279.703910][T11760] ? aa_sk_perm+0x309/0xaa0 [ 279.703928][T11760] hci_sock_sendmsg+0x4a1/0x2620 [ 279.703949][T11760] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 279.703964][T11760] ? apparmor_socket_sendmsg+0x15b/0x270 [ 279.703979][T11760] sock_write_iter+0x53a/0x5b0 [ 279.703992][T11760] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 279.704006][T11760] ? __pfx_sock_write_iter+0x10/0x10 [ 279.704021][T11760] ? bpf_lsm_file_permission+0x9/0x10 [ 279.704033][T11760] ? security_file_permission+0x76/0x210 [ 279.704049][T11760] ? rw_verify_area+0xce/0x6d0 [ 279.704083][T11760] vfs_write+0x6ac/0x1050 [ 279.704096][T11760] ? __pfx_sock_write_iter+0x10/0x10 [ 279.704109][T11760] ? __pfx_vfs_write+0x10/0x10 [ 279.704118][T11760] ? find_held_lock+0x2b/0x80 [ 279.704140][T11760] ksys_write+0x1f8/0x250 [ 279.704151][T11760] ? __pfx_ksys_write+0x10/0x10 [ 279.704160][T11760] ? ksys_write+0x1ac/0x250 [ 279.704170][T11760] ? __pfx_ksys_write+0x10/0x10 [ 279.704183][T11760] __do_fast_syscall_32+0xe7/0x970 [ 279.704199][T11760] ? lockdep_hardirqs_on+0x78/0x100 [ 279.704215][T11760] do_fast_syscall_32+0x32/0x70 [ 279.704230][T11760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.704246][T11760] RIP: 0023:0xf702efec [ 279.704260][T11760] Code: Unable to access opcode bytes at 0xf702efc2. [ 279.704265][T11760] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 279.704277][T11760] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 279.704284][T11760] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 279.704290][T11760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.704296][T11760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.704303][T11760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.704316][T11760] [ 279.816969][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.953'. [ 280.136221][ T5855] bond0: (slave bond_slave_0): interface is now down [ 280.140895][ T5855] bond0: (slave bond_slave_1): interface is now down [ 280.143791][ T5855] bond0: (slave syz_tun): interface is now down [ 280.162727][ T5855] bond0: now running without any active interface! [ 280.256578][T11786] overlayfs: failed to resolve './file0/file1': -2 [ 280.263255][T11786] random: crng reseeded on system resumption [ 280.578972][ T34] usb 6-1: reset high-speed USB device number 16 using dummy_hcd [ 280.715038][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 281.008753][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 281.160011][ T24] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 281.169978][ T24] usb 9-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.00 [ 281.172784][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.175353][ T24] usb 9-1: Product: syz [ 281.176682][ T24] usb 9-1: Manufacturer: syz [ 281.178070][ T24] usb 9-1: SerialNumber: syz [ 281.183708][T11799] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 281.187559][ T24] emi26 - firmware loader 9-1:1.0: emi26_probe start [ 281.190334][ T24] usb 9-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 281.194064][ T24] usb 9-1: Falling back to sysfs fallback for: emi26/loader.fw [ 281.380146][ T41] usb 6-1: USB disconnect, device number 16 [ 281.455949][T11827] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 281.460294][ T24] usb 9-1: emi26_load_firmware - request_firmware() failed [ 281.464939][ T24] usb 9-1: emi26_load_firmware - error loading firmware: error = -2 [ 281.470685][ T24] emi26 - firmware loader 9-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 281.492646][ T24] usb 9-1: USB disconnect, device number 7 [ 281.584216][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 281.590965][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 281.593859][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'. [ 281.596631][T11847] netlink: 'syz.2.966': attribute type 7 has an invalid length. [ 281.600470][T11847] netlink: 'syz.2.966': attribute type 13 has an invalid length. [ 281.803794][T11864] loop5: detected capacity change from 0 to 7 [ 281.809039][ T41] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 281.817205][T11864] Dev loop5: unable to read RDB block 7 [ 281.820484][T11864] loop5: AHDI p1 p3 p4 [ 281.822334][T11864] loop5: partition table partially beyond EOD, truncated [ 281.831165][T11864] loop5: p1 size 100663296 extends beyond EOD, truncated [ 281.838185][T11864] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 281.868750][ T34] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 281.906655][T11864] Dev loop5: unable to read RDB block 7 [ 281.908457][T11864] loop5: AHDI p1 p3 p4 [ 281.910022][T11864] loop5: partition table partially beyond EOD, truncated [ 281.914060][T11864] loop5: p1 size 100663296 extends beyond EOD, truncated [ 281.917969][T11864] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 281.970777][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.974369][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.977627][ T41] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.982336][ T41] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.985261][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.989641][ T41] usb 6-1: config 0 descriptor?? [ 282.029471][ T34] usb 7-1: Invalid ep0 maxpacket: 16 [ 282.168844][ T34] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 282.338713][ T34] usb 7-1: Invalid ep0 maxpacket: 16 [ 282.340809][ T34] usb usb7-port1: attempt power cycle [ 282.403456][ T41] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 282.688752][ T34] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 282.719233][ T34] usb 7-1: Invalid ep0 maxpacket: 16 [ 282.795766][T11901] fuse: Unknown parameter 'ùDï0xffffffffffffffff' [ 282.868706][ T34] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 282.889188][ T34] usb 7-1: Invalid ep0 maxpacket: 16 [ 282.891182][ T34] usb usb7-port1: unable to enumerate USB device [ 282.958592][T11906] misc userio: Can't change port type on an already running userio instance [ 283.198705][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 283.212442][ T42] kauditd_printk_skb: 64 callbacks suppressed [ 283.212455][ T42] audit: type=1800 audit(1785673081.600:730): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 283.237873][ T42] audit: type=1800 audit(1785673081.620:731): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153963 res=0 errno=0 [ 283.238709][T11916] input: syz1 as /devices/virtual/input/input15 [ 283.249020][ T42] audit: type=1800 audit(1785673081.630:732): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=153978 res=0 errno=0 [ 283.255110][ T42] audit: type=1800 audit(1785673081.630:733): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=153981 res=0 errno=0 [ 283.262019][ T42] audit: type=1800 audit(1785673081.630:734): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=153980 res=0 errno=0 [ 283.268035][ T42] audit: type=1800 audit(1785673081.630:735): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=153979 res=0 errno=0 [ 283.274362][ T42] audit: type=1800 audit(1785673081.630:736): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=153970 res=0 errno=0 [ 283.285030][ T42] audit: type=1800 audit(1785673081.630:737): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=153973 res=0 errno=0 [ 283.292394][ T42] audit: type=1800 audit(1785673081.630:738): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=153966 res=0 errno=0 [ 283.300735][ T42] audit: type=1800 audit(1785673081.640:739): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153994 res=0 errno=0 [ 283.350984][ T24] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 283.355725][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.360448][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.364150][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 283.369614][ T24] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 283.372477][ T24] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 283.374992][ T24] usb 9-1: Manufacturer: syz [ 283.378014][ T24] usb 9-1: config 0 descriptor?? [ 283.728698][ T5893] usb 6-1: reset high-speed USB device number 17 using dummy_hcd [ 283.786186][ T24] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 283.797773][ T24] appleir 0003:05AC:8243.0007: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 283.878770][ T5893] usb 6-1: device descriptor read/64, error -32 [ 284.128743][ T5893] usb 6-1: reset high-speed USB device number 17 using dummy_hcd [ 284.269026][ T5893] usb 6-1: device descriptor read/64, error -32 [ 284.338098][T11941] usb 6-1: string descriptor 0 read error: -32 [ 284.511354][ T5893] usb 6-1: reset high-speed USB device number 17 using dummy_hcd [ 284.556009][ T5893] usb 6-1: device descriptor read/8, error -32 [ 284.658069][T11955] netlink: 'syz.2.977': attribute type 4 has an invalid length. [ 285.068818][ T5893] usb 6-1: reset high-speed USB device number 17 using dummy_hcd [ 285.096701][ T5893] usb 6-1: device firmware changed [ 285.102687][ T5822] usb 6-1: USB disconnect, device number 17 [ 285.287349][T11970] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 285.290183][T11970] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 285.303157][T11970] vhci_hcd vhci_hcd.0: Device attached [ 285.319412][ T5822] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 285.470542][ T5822] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 285.476230][ T5822] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.00 [ 285.479648][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.482220][ T5822] usb 6-1: Product: syz [ 285.483674][ T5822] usb 6-1: Manufacturer: syz [ 285.485206][ T5822] usb 6-1: SerialNumber: syz [ 285.489032][T11961] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 285.493121][ T5822] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 285.496540][ T5822] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 285.500320][ T5822] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 285.557428][T11978] vhci_hcd: connection closed [ 285.557707][ T5855] vhci_hcd vhci_hcd.2: stop threads [ 285.560861][ T5855] vhci_hcd vhci_hcd.2: release socket [ 285.562664][ T5855] vhci_hcd vhci_hcd.2: disconnect device [ 285.568865][ T55] usb 42-1: enqueue for inactive port 0 [ 285.598864][ T34] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 285.761005][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 285.765418][ T34] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 285.769042][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.971538][ T24] usb 9-1: USB disconnect, device number 8 [ 285.988728][ T34] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 286.015046][ T34] wwan wwan0: port wwan0qmi0 attached [ 286.025574][T12000] (syz.4.981,12000,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 286.028409][T12000] (syz.4.981,12000,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 286.061342][ T55] usb usb42-port1: attempt power cycle [ 286.199741][ T34] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, ae:6c:6f:f8:78:23 [ 286.391456][ T34] usb 5-1: USB disconnect, device number 13 [ 286.399334][ T34] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 286.430419][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 286.649555][ T55] usb usb42-port1: unable to enumerate USB device [ 286.882897][ T34] wwan wwan0: port wwan0qmi0 disconnected [ 287.409106][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 287.414209][ T24] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 287.417577][ T24] usb 7-1: config 0 has no interface number 0 [ 287.420518][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 287.424924][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 287.431299][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.438493][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 287.446257][ T24] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 287.456629][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 287.463489][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.474836][ T24] usb 7-1: config 0 descriptor?? [ 287.493230][ T24] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 287.552547][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.990'. [ 287.752146][T12016] ldusb 7-1:0.55: Couldn't submit interrupt_in_urb -90 [ 287.764254][ T41] usb 7-1: USB disconnect, device number 20 [ 287.773226][ T41] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 287.938761][ T34] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 288.068729][ T34] usb 9-1: device descriptor read/64, error -71 [ 288.308744][ T34] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 288.327348][ T42] kauditd_printk_skb: 68 callbacks suppressed [ 288.327365][ T42] audit: type=1800 audit(1785673086.710:808): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 288.354357][ T42] audit: type=1800 audit(1785673086.740:809): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 288.438822][ T34] usb 9-1: device descriptor read/64, error -71 [ 288.550967][ T34] usb usb9-port1: attempt power cycle [ 288.888771][ T34] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 288.909499][ T34] usb 9-1: device descriptor read/8, error -71 [ 288.912504][ T42] audit: type=1800 audit(1785673087.300:810): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 289.022890][ T42] audit: type=1800 audit(1785673087.410:811): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 289.185912][ T34] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 289.215214][ T34] usb 9-1: device descriptor read/8, error -71 [ 289.253015][ T42] audit: type=1800 audit(1785673087.640:812): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 289.319896][ T34] usb usb9-port1: unable to enumerate USB device [ 289.536408][ T42] audit: type=1800 audit(1785673087.920:813): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 289.799089][ T42] audit: type=1800 audit(1785673088.190:814): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 289.812727][T12151] netlink: 'syz.0.1000': attribute type 4 has an invalid length. [ 289.836783][ T42] audit: type=1800 audit(1785673088.220:815): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 289.865680][ T42] audit: type=1800 audit(1785673088.250:816): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 289.874524][ T42] audit: type=1800 audit(1785673088.260:817): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 289.895216][T12160] FAULT_INJECTION: forcing a failure. [ 289.895216][T12160] name failslab, interval 1, probability 0, space 0, times 0 [ 289.899211][T12160] CPU: 1 UID: 0 PID: 12160 Comm: syz.0.1003 Not tainted syzkaller #0 PREEMPT(full) [ 289.899230][T12160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 289.899237][T12160] Call Trace: [ 289.899240][T12160] [ 289.899245][T12160] dump_stack_lvl+0x100/0x190 [ 289.899263][T12160] should_fail_ex.cold+0x5/0xa [ 289.899276][T12160] should_failslab+0xc2/0x120 [ 289.899293][T12160] __kmalloc_noprof+0xfc/0x820 [ 289.899307][T12160] ? rcu_is_watching+0x12/0xc0 [ 289.899321][T12160] ? tomoyo_realpath_from_path+0xb6/0x690 [ 289.899341][T12160] tomoyo_realpath_from_path+0xb6/0x690 [ 289.899361][T12160] tomoyo_mount_acl+0x1b6/0x8b0 [ 289.899377][T12160] ? is_bpf_text_address+0x8a/0x1a0 [ 289.899394][T12160] ? is_bpf_text_address+0x8a/0x1a0 [ 289.899411][T12160] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 289.899429][T12160] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 289.899444][T12160] ? kernel_text_address+0x8d/0x100 [ 289.899463][T12160] ? unwind_get_return_address+0x59/0xa0 [ 289.899481][T12160] ? arch_stack_walk+0xa6/0xf0 [ 289.899508][T12160] ? tomoyo_domain+0xb2/0x150 [ 289.899519][T12160] ? tomoyo_profile+0x47/0x60 [ 289.899530][T12160] tomoyo_mount_permission+0x214/0x460 [ 289.899546][T12160] ? tomoyo_mount_permission+0x1f6/0x460 [ 289.899562][T12160] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 289.899586][T12160] security_sb_mount+0xdd/0x270 [ 289.899600][T12160] path_mount+0x158/0x23d0 [ 289.899616][T12160] ? __pfx_path_mount+0x10/0x10 [ 289.899628][T12160] ? lockdep_hardirqs_on+0x78/0x100 [ 289.899645][T12160] ? putname+0xb1/0x110 [ 289.899657][T12160] ? kmem_cache_free+0x127/0x6b0 [ 289.899673][T12160] ? __ia32_sys_mount+0x292/0x310 [ 289.899685][T12160] __ia32_sys_mount+0x292/0x310 [ 289.899699][T12160] ? __pfx___ia32_sys_mount+0x10/0x10 [ 289.899712][T12160] ? ksys_write+0x1ac/0x250 [ 289.899722][T12160] ? __pfx_ksys_write+0x10/0x10 [ 289.899735][T12160] __do_fast_syscall_32+0xe7/0x970 [ 289.899750][T12160] ? lockdep_hardirqs_on+0x78/0x100 [ 289.899765][T12160] do_fast_syscall_32+0x32/0x70 [ 289.899781][T12160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.899795][T12160] RIP: 0023:0xf6fcefec [ 289.899808][T12160] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 289.899813][T12160] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 289.899824][T12160] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 289.899831][T12160] RDX: 0000000000000000 RSI: 00000000020c0c24 RDI: 00000000800003c0 [ 289.899837][T12160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.899843][T12160] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 289.899850][T12160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.899864][T12160] [ 289.899868][T12160] ERROR: Out of memory at tomoyo_realpath_from_path. [ 290.189194][T12176] 9p: Bad value for 'rfdno' [ 290.306848][T12202] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 291.226916][T12220] tipc: Enabling of bearer rejected, already enabled [ 291.232717][T12220] /dev/nullb0: Can't open blockdev [ 291.589817][T12207] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 291.594604][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'. [ 293.029028][T12277] binder: 12276:12277 ioctl c0306201 80000580 returned -14 [ 293.927243][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 293.927255][ T42] audit: type=1800 audit(1785673092.310:845): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 293.998006][ T42] audit: type=1800 audit(1785673092.380:846): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 294.042524][ T42] audit: type=1800 audit(1785673092.430:847): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 294.074741][T12326] 9p: Bad value for 'rfdno' [ 294.113952][ T42] audit: type=1800 audit(1785673092.500:848): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22745 res=0 errno=0 [ 294.312499][ T42] audit: type=1800 audit(1785673092.700:849): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 294.416817][ T42] audit: type=1800 audit(1785673092.800:850): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 294.454980][ T42] audit: type=1800 audit(1785673092.840:851): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 294.928881][ T42] audit: type=1800 audit(1785673093.320:852): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 294.945816][ T42] audit: type=1800 audit(1785673093.330:853): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 294.994713][ T42] audit: type=1800 audit(1785673093.380:854): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 295.016234][T12368] syzkaller0: entered promiscuous mode [ 295.018076][T12368] syzkaller0: entered allmulticast mode [ 295.412698][T12395] syzkaller0: entered promiscuous mode [ 295.415121][T12395] syzkaller0: entered allmulticast mode [ 295.629237][ T41] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 295.780694][ T41] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 295.785165][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.790259][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.794440][ T41] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 295.801216][ T41] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 295.805028][ T41] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 295.808254][ T41] usb 7-1: Manufacturer: syz [ 295.812479][ T41] usb 7-1: config 0 descriptor?? [ 296.150037][T12421] orangefs_devreq_open: device cannot be opened in blocking mode [ 296.230435][ T41] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 296.244974][ T41] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 297.055110][ C3] Unknown status report in ack skb [ 297.739976][T12450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1044'. [ 297.974036][T12464] binder: 12463:12464 ioctl c0306201 80000580 returned -14 [ 298.448696][T12471] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 298.790819][T12476] comedi comedi3: comedi_config --init_data is deprecated [ 298.949342][ T42] kauditd_printk_skb: 41 callbacks suppressed [ 298.949357][ T42] audit: type=1800 audit(1785673097.340:896): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 298.978328][ T42] audit: type=1800 audit(1785673097.360:897): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157577 res=0 errno=0 [ 298.992546][ T42] audit: type=1800 audit(1785673097.380:898): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157587 res=0 errno=0 [ 299.009271][ T42] audit: type=1800 audit(1785673097.400:899): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157606 res=0 errno=0 [ 299.014917][ T42] audit: type=1800 audit(1785673097.400:900): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157618 res=0 errno=0 [ 299.022577][ T42] audit: type=1800 audit(1785673097.410:901): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157630 res=0 errno=0 [ 299.034448][T12508] FAULT_INJECTION: forcing a failure. [ 299.034448][T12508] name failslab, interval 1, probability 0, space 0, times 0 [ 299.047370][T12508] CPU: 0 UID: 0 PID: 12508 Comm: syz.0.1055 Not tainted syzkaller #0 PREEMPT(full) [ 299.047387][T12508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.047394][T12508] Call Trace: [ 299.047397][T12508] [ 299.047402][T12508] dump_stack_lvl+0x100/0x190 [ 299.047420][T12508] should_fail_ex.cold+0x5/0xa [ 299.047433][T12508] should_failslab+0xc2/0x120 [ 299.047450][T12508] __kmalloc_noprof+0xfc/0x820 [ 299.047463][T12508] ? __lock_acquire+0x49f/0x1a40 [ 299.047482][T12508] ? tomoyo_encode2+0xfb/0x3c0 [ 299.047501][T12508] tomoyo_encode2+0xfb/0x3c0 [ 299.047520][T12508] tomoyo_encode+0x29/0x50 [ 299.047535][T12508] tomoyo_mount_acl+0x14c/0x8b0 [ 299.047550][T12508] ? is_bpf_text_address+0x8a/0x1a0 [ 299.047567][T12508] ? is_bpf_text_address+0x8a/0x1a0 [ 299.047584][T12508] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 299.047602][T12508] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 299.047617][T12508] ? kernel_text_address+0x8d/0x100 [ 299.047636][T12508] ? unwind_get_return_address+0x59/0xa0 [ 299.047654][T12508] ? arch_stack_walk+0xa6/0xf0 [ 299.047681][T12508] ? tomoyo_domain+0xb2/0x150 [ 299.047691][T12508] ? tomoyo_profile+0x47/0x60 [ 299.047703][T12508] tomoyo_mount_permission+0x214/0x460 [ 299.047718][T12508] ? tomoyo_mount_permission+0x1f6/0x460 [ 299.047735][T12508] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 299.047758][T12508] security_sb_mount+0xdd/0x270 [ 299.047772][T12508] path_mount+0x158/0x23d0 [ 299.047788][T12508] ? __pfx_path_mount+0x10/0x10 [ 299.047800][T12508] ? lockdep_hardirqs_on+0x78/0x100 [ 299.047818][T12508] ? putname+0xb1/0x110 [ 299.047830][T12508] ? kmem_cache_free+0x127/0x6b0 [ 299.047850][T12508] ? __ia32_sys_mount+0x292/0x310 [ 299.047863][T12508] __ia32_sys_mount+0x292/0x310 [ 299.047876][T12508] ? __pfx___ia32_sys_mount+0x10/0x10 [ 299.047889][T12508] ? ksys_write+0x1ac/0x250 [ 299.047899][T12508] ? __pfx_ksys_write+0x10/0x10 [ 299.047912][T12508] __do_fast_syscall_32+0xe7/0x970 [ 299.047928][T12508] ? lockdep_hardirqs_on+0x78/0x100 [ 299.047944][T12508] do_fast_syscall_32+0x32/0x70 [ 299.047963][T12508] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.048005][T12508] RIP: 0023:0xf6fcefec [ 299.048025][T12508] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 299.048034][T12508] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 299.048051][T12508] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000300 [ 299.048063][T12508] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000400 [ 299.048073][T12508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.048083][T12508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.048090][T12508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.048105][T12508] [ 299.171231][ T42] audit: type=1800 audit(1785673097.560:902): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 299.188833][ T24] usb 7-1: reset high-speed USB device number 21 using dummy_hcd [ 299.196834][ T24] usb 7-1: device reset changed ep0 maxpacket size! [ 299.206302][ T34] usb 7-1: USB disconnect, device number 21 [ 299.311144][ T42] audit: type=1800 audit(1785673097.700:903): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 299.360425][ T34] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 299.397732][ T42] audit: type=1800 audit(1785673097.780:904): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 299.518743][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 299.523576][ T34] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 299.528527][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 299.531695][ T34] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 299.535387][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.542829][ T34] usb 7-1: config 0 descriptor?? [ 299.554471][ T42] audit: type=1800 audit(1785673097.940:905): pid=11484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157642 res=0 errno=0 [ 299.557680][T12552] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 299.810287][T12476] xt_hashlimit: max too large, truncated to 1048576 [ 299.875052][ T5744] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 300.491451][T12595] NILFS (nbd4): device size too small [ 301.440041][T12620] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 301.519915][T12628] 9p: Bad value for 'rfdno' [ 302.086165][ T34] usbhid 7-1:0.0: can't add hid device: -71 [ 302.094722][ T34] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 302.103010][ T34] usb 7-1: USB disconnect, device number 22 [ 302.163718][T12670] /dev/nullb0: Can't open blockdev [ 302.327125][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 302.363864][T12691] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1078'. [ 302.406739][T12697] orangefs_devreq_open: device cannot be opened in blocking mode [ 302.579331][ T6141] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 302.611759][T12715] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 303.238743][ T6141] usb 7-1: Using ep0 maxpacket: 8 [ 303.250585][ T6141] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 303.265595][ T6141] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.282581][ T6141] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.301967][ T6141] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 303.322122][ T6141] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.348374][T12724] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 303.349255][ T6141] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 303.374443][ T6141] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.451104][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1085'. [ 303.640149][T12773] FAULT_INJECTION: forcing a failure. [ 303.640149][T12773] name failslab, interval 1, probability 0, space 0, times 0 [ 303.644952][T12773] CPU: 1 UID: 0 PID: 12773 Comm: syz.1.1086 Not tainted syzkaller #0 PREEMPT(full) [ 303.644980][T12773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 303.644988][T12773] Call Trace: [ 303.644992][T12773] [ 303.644997][T12773] dump_stack_lvl+0x100/0x190 [ 303.645016][T12773] should_fail_ex.cold+0x5/0xa [ 303.645031][T12773] should_failslab+0xc2/0x120 [ 303.645047][T12773] __kmalloc_cache_noprof+0x91/0x6c0 [ 303.645060][T12773] ? call_usermodehelper_setup+0xaf/0x360 [ 303.645081][T12773] ? __pfx_free_modprobe_argv+0x10/0x10 [ 303.645095][T12773] call_usermodehelper_setup+0xaf/0x360 [ 303.645115][T12773] __request_module+0x3c7/0x6a0 [ 303.645128][T12773] ? __pfx___request_module+0x10/0x10 [ 303.645141][T12773] ? __pfx___schedule+0x10/0x10 [ 303.645157][T12773] ? preempt_schedule_thunk+0x16/0x40 [ 303.645176][T12773] ? preempt_schedule_common+0x42/0xc0 [ 303.645190][T12773] ? preempt_schedule_thunk+0x16/0x40 [ 303.645210][T12773] elv_iosched_store+0x407/0x460 [ 303.645228][T12773] ? __pfx_elv_iosched_store+0x10/0x10 [ 303.645249][T12773] ? lock_acquire+0x1b9/0x370 [ 303.645273][T12773] ? __pfx_elv_iosched_store+0x10/0x10 [ 303.645291][T12773] queue_attr_store+0x25f/0x2f0 [ 303.645307][T12773] ? __pfx_queue_attr_store+0x10/0x10 [ 303.645320][T12773] ? __lock_acquire+0x49f/0x1a40 [ 303.645338][T12773] ? __lock_acquire+0x49f/0x1a40 [ 303.645354][T12773] ? _copy_from_iter+0x352/0x1690 [ 303.645376][T12773] ? find_held_lock+0x2b/0x80 [ 303.645389][T12773] ? sysfs_file_kobj+0xe4/0x290 [ 303.645404][T12773] ? sysfs_file_kobj+0xe4/0x290 [ 303.645421][T12773] ? __pfx_queue_attr_store+0x10/0x10 [ 303.645435][T12773] sysfs_kf_write+0xf2/0x150 [ 303.645451][T12773] kernfs_fop_write_iter+0x3e0/0x5f0 [ 303.645464][T12773] ? __pfx_sysfs_kf_write+0x10/0x10 [ 303.645480][T12773] vfs_write+0x6ac/0x1050 [ 303.645492][T12773] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 303.645506][T12773] ? __pfx_vfs_write+0x10/0x10 [ 303.645515][T12773] ? find_held_lock+0x2b/0x80 [ 303.645538][T12773] ksys_write+0x12a/0x250 [ 303.645558][T12773] ? __pfx_ksys_write+0x10/0x10 [ 303.645576][T12773] __do_fast_syscall_32+0xe7/0x970 [ 303.645592][T12773] ? lockdep_hardirqs_on+0x78/0x100 [ 303.645608][T12773] do_fast_syscall_32+0x32/0x70 [ 303.645624][T12773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.645640][T12773] RIP: 0023:0xf6ffefec [ 303.645655][T12773] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 303.645660][T12773] RSP: 002b:00000000f53cc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 303.645671][T12773] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800004c0 [ 303.645678][T12773] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 303.645684][T12773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.645690][T12773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.645696][T12773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.645710][T12773] [ 303.748438][T12776] overlayfs: missing 'lowerdir' [ 304.413264][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 304.413276][ T42] audit: type=1800 audit(1785673100.801:950): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 304.434160][ T42] audit: type=1800 audit(1785673100.801:951): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158948 res=0 errno=0 [ 304.447379][ T34] usb 7-1: USB disconnect, device number 23 [ 304.452875][ T42] audit: type=1800 audit(1785673100.841:952): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 304.499951][ T42] audit: type=1800 audit(1785673100.891:953): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 304.526597][ T42] audit: type=1800 audit(1785673100.911:954): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 304.684716][ T42] audit: type=1800 audit(1785673101.071:955): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 304.718026][ T42] audit: type=1800 audit(1785673101.101:956): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 304.750900][ T42] audit: type=1800 audit(1785673101.141:957): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 304.872286][T12850] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 305.010059][ T42] audit: type=1800 audit(1785673101.401:958): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 305.385278][ T42] audit: type=1800 audit(1785673101.771:959): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 305.792208][T12875] binder: 12874:12875 ioctl c0306201 80000580 returned -14 [ 306.752078][T12888] syzkaller0: entered promiscuous mode [ 306.753829][T12888] syzkaller0: entered allmulticast mode [ 306.761010][T12888] FAULT_INJECTION: forcing a failure. [ 306.761010][T12888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.774805][T12888] CPU: 2 UID: 0 PID: 12888 Comm: syz.1.1103 Not tainted syzkaller #0 PREEMPT(full) [ 306.774822][T12888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 306.774828][T12888] Call Trace: [ 306.774832][T12888] [ 306.774836][T12888] dump_stack_lvl+0x100/0x190 [ 306.774856][T12888] should_fail_ex.cold+0x5/0xa [ 306.774870][T12888] _copy_to_user+0x32/0xd0 [ 306.774890][T12888] simple_read_from_buffer+0xcb/0x170 [ 306.774911][T12888] proc_fail_nth_read+0x1af/0x230 [ 306.774928][T12888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.774944][T12888] ? rw_verify_area+0xce/0x6d0 [ 306.774960][T12888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.774975][T12888] vfs_read+0x1e4/0xb40 [ 306.774987][T12888] ? __pfx_vfs_read+0x10/0x10 [ 306.774996][T12888] ? find_held_lock+0x2b/0x80 [ 306.775011][T12888] ? __fget_files+0x215/0x3d0 [ 306.775024][T12888] ? __fget_files+0x21f/0x3d0 [ 306.775037][T12888] ksys_read+0x12a/0x250 [ 306.775047][T12888] ? __pfx_ksys_read+0x10/0x10 [ 306.775061][T12888] do_int80_emulation+0x14b/0x720 [ 306.775081][T12888] asm_int80_emulation+0x1a/0x20 [ 306.775093][T12888] RIP: 0023:0xf71373eb [ 306.775103][T12888] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 306.775114][T12888] RSP: 002b:00000000f53ed4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 306.775125][T12888] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53ed5d0 [ 306.775132][T12888] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 306.775139][T12888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.775145][T12888] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 306.775151][T12888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.775165][T12888] [ 306.787650][T12897] syzkaller0: entered promiscuous mode [ 306.841331][T12897] syzkaller0: entered allmulticast mode [ 307.028764][ T5820] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.037832][T12911] syz.4.1105: attempt to access beyond end of device [ 307.037832][T12911] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 307.043676][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.046601][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.050954][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.055326][T12911] gfs2: error -5 reading superblock [ 307.130445][T12919] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 307.397701][T12931] FAULT_INJECTION: forcing a failure. [ 307.397701][T12931] name failslab, interval 1, probability 0, space 0, times 0 [ 307.402318][T12931] CPU: 2 UID: 0 PID: 12931 Comm: syz.2.1109 Not tainted syzkaller #0 PREEMPT(full) [ 307.402334][T12931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 307.402342][T12931] Call Trace: [ 307.402345][T12931] [ 307.402350][T12931] dump_stack_lvl+0x100/0x190 [ 307.402368][T12931] should_fail_ex.cold+0x5/0xa [ 307.402381][T12931] should_failslab+0xc2/0x120 [ 307.402398][T12931] __kmalloc_cache_noprof+0x91/0x6c0 [ 307.402409][T12931] ? __tcf_proto_lookup_ops+0xcf/0x100 [ 307.402430][T12931] ? basic_init+0x43/0x1f0 [ 307.402445][T12931] ? __pfx_basic_classify+0x10/0x10 [ 307.402456][T12931] basic_init+0x43/0x1f0 [ 307.402467][T12931] tc_new_tfilter+0x105c/0x24a0 [ 307.402484][T12931] ? __pfx_rcu_is_watching+0x10/0x10 [ 307.402499][T12931] ? kasan_quarantine_put+0x104/0x240 [ 307.402512][T12931] ? lockdep_hardirqs_on+0x78/0x100 [ 307.402528][T12931] ? __pfx_tc_new_tfilter+0x10/0x10 [ 307.402541][T12931] ? kmem_cache_free+0x127/0x6b0 [ 307.402563][T12931] ? find_held_lock+0x2b/0x80 [ 307.402577][T12931] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 307.402596][T12931] ? __pfx_tc_new_tfilter+0x10/0x10 [ 307.402609][T12931] rtnetlink_rcv_msg+0x95e/0xe90 [ 307.402627][T12931] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.402648][T12931] ? ref_tracker_free+0x37e/0x6c0 [ 307.402661][T12931] netlink_rcv_skb+0x159/0x420 [ 307.402674][T12931] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.402692][T12931] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.402709][T12931] ? netlink_deliver_tap+0x1ae/0xcc0 [ 307.402724][T12931] netlink_unicast+0x585/0x850 [ 307.402738][T12931] ? __pfx_netlink_unicast+0x10/0x10 [ 307.402755][T12931] netlink_sendmsg+0x8b0/0xda0 [ 307.402770][T12931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.402784][T12931] ? apparmor_socket_sendmsg+0x15b/0x270 [ 307.402799][T12931] ____sys_sendmsg+0xa4d/0xbe0 [ 307.402811][T12931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.402825][T12931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.402842][T12931] ___sys_sendmsg+0x190/0x1e0 [ 307.402856][T12931] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.402874][T12931] ? find_held_lock+0x2b/0x80 [ 307.402896][T12931] __sys_sendmsg+0x160/0x210 [ 307.402912][T12931] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.402932][T12931] ? __pfx_ksys_write+0x10/0x10 [ 307.402946][T12931] __do_fast_syscall_32+0xe7/0x970 [ 307.402975][T12931] ? lockdep_hardirqs_on+0x78/0x100 [ 307.402990][T12931] do_fast_syscall_32+0x32/0x70 [ 307.403006][T12931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.403021][T12931] RIP: 0023:0xf6feefec [ 307.403034][T12931] Code: Unable to access opcode bytes at 0xf6feefc2. [ 307.403041][T12931] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 307.403054][T12931] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000800 [ 307.403061][T12931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.403068][T12931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.403074][T12931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.403080][T12931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.403094][T12931] [ 307.605280][T12938] 9p: Bad value for 'rfdno' [ 307.837703][T12969] binder: 12966:12969 ioctl c0306201 80000580 returned -14 [ 308.001928][T12977] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1114'. [ 308.018699][T12977] tc_dump_action: action bad kind [ 308.287051][T12984] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 308.877826][T12998] syzkaller0: entered promiscuous mode [ 308.880526][T12998] syzkaller0: entered allmulticast mode [ 309.375399][T13070] binder: 13069:13070 ioctl c0306201 80000580 returned -14 [ 309.383426][T13068] FAULT_INJECTION: forcing a failure. [ 309.383426][T13068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.389250][T13068] CPU: 2 UID: 0 PID: 13068 Comm: syz.1.1124 Not tainted syzkaller #0 PREEMPT(full) [ 309.389288][T13068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 309.389299][T13068] Call Trace: [ 309.389305][T13068] [ 309.389312][T13068] dump_stack_lvl+0x100/0x190 [ 309.389339][T13068] should_fail_ex.cold+0x5/0xa [ 309.389360][T13068] _copy_to_user+0x32/0xd0 [ 309.389388][T13068] simple_read_from_buffer+0xcb/0x170 [ 309.389418][T13068] proc_fail_nth_read+0x1af/0x230 [ 309.389442][T13068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.389466][T13068] ? rw_verify_area+0xce/0x6d0 [ 309.389491][T13068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.389514][T13068] vfs_read+0x1e4/0xb40 [ 309.389534][T13068] ? __pfx_vfs_read+0x10/0x10 [ 309.389548][T13068] ? find_held_lock+0x2b/0x80 [ 309.389570][T13068] ? __fget_files+0x215/0x3d0 [ 309.389592][T13068] ? __fget_files+0x21f/0x3d0 [ 309.389619][T13068] ksys_read+0x12a/0x250 [ 309.389635][T13068] ? __pfx_ksys_read+0x10/0x10 [ 309.389658][T13068] do_int80_emulation+0x14b/0x720 [ 309.389686][T13068] asm_int80_emulation+0x1a/0x20 [ 309.389704][T13068] RIP: 0023:0xf71373eb [ 309.389718][T13068] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 309.389733][T13068] RSP: 002b:00000000f53ed4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 309.389751][T13068] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f53ed5d0 [ 309.389762][T13068] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 309.389771][T13068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.389781][T13068] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 309.389790][T13068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.389814][T13068] [ 309.541585][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 309.541631][ T42] audit: type=1800 audit(1785673105.931:993): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 309.583999][ T42] audit: type=1800 audit(1785673105.971:994): pid=11843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160179 res=0 errno=0 [ 309.597166][T13041] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 309.621870][T13074] overlayfs: failed to resolve './sys/devices/system/machinecheck/machinecheck0/check_interval': -2 [ 309.630141][T13041] Bluetooth: hci1: Frame reassembly failed (-84) [ 309.651144][ T42] audit: type=1800 audit(1785673105.971:995): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160190 res=0 errno=0 [ 309.730133][ T42] audit: type=1800 audit(1785673106.121:996): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 309.961743][ T42] audit: type=1800 audit(1785673106.351:997): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 309.987777][T13085] 9p: Bad value for 'rfdno' [ 310.245599][ T42] audit: type=1800 audit(1785673106.631:998): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 310.361052][T13113] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 311.133404][ T42] audit: type=1800 audit(1785673107.521:999): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 311.169669][ T42] audit: type=1800 audit(1785673107.561:1000): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 311.177875][ T42] audit: type=1800 audit(1785673107.561:1001): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160970 res=0 errno=0 [ 311.308748][ T42] audit: type=1800 audit(1785673107.691:1002): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 311.660690][ T5744] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 311.660721][ T64] Bluetooth: hci1: command 0x1003 tx timeout [ 311.987764][T13161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.125013][T13169] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 312.618555][T13177] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1140'. [ 313.429992][T13203] /dev/sg0: Can't lookup blockdev [ 313.501049][T13207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1146'. [ 313.661055][T13223] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 313.789656][ T5852] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 313.997900][ T5852] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 314.067704][ T5852] usb 9-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.00 [ 314.096479][ T5852] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.127212][ T5852] usb 9-1: Product: syz [ 314.163415][ T5852] usb 9-1: Manufacturer: syz [ 314.188990][ T5852] usb 9-1: SerialNumber: syz [ 314.378851][T13216] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 314.459516][ T5852] emi26 - firmware loader 9-1:1.0: emi26_probe start [ 314.558383][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 314.558402][ T42] audit: type=1800 audit(1785673110.941:1034): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 314.674757][ T42] audit: type=1800 audit(1785673111.061:1035): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 314.696896][T13243] syzkaller0: entered promiscuous mode [ 314.701059][T13243] syzkaller0: entered allmulticast mode [ 314.705849][T13243] FAULT_INJECTION: forcing a failure. [ 314.705849][T13243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.711687][T13243] CPU: 0 UID: 0 PID: 13243 Comm: syz.0.1154 Not tainted syzkaller #0 PREEMPT(full) [ 314.711717][T13243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 314.711728][T13243] Call Trace: [ 314.711735][T13243] [ 314.711742][T13243] dump_stack_lvl+0x100/0x190 [ 314.711767][T13243] should_fail_ex.cold+0x5/0xa [ 314.711786][T13243] _copy_from_user+0x2e/0xd0 [ 314.711811][T13243] kstrtouint_from_user+0xd6/0x1d0 [ 314.711829][T13243] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 314.711846][T13243] ? __lock_acquire+0x49f/0x1a40 [ 314.711879][T13243] proc_fail_nth_write+0x83/0x220 [ 314.711901][T13243] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 314.711957][T13243] vfs_write+0x2aa/0x1050 [ 314.711973][T13243] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 314.711996][T13243] ? __pfx_vfs_write+0x10/0x10 [ 314.712009][T13243] ? find_held_lock+0x2b/0x80 [ 314.712028][T13243] ? __fget_files+0x215/0x3d0 [ 314.712046][T13243] ? __fget_files+0x21f/0x3d0 [ 314.712066][T13243] ksys_write+0x12a/0x250 [ 314.712080][T13243] ? __pfx_ksys_write+0x10/0x10 [ 314.712100][T13243] do_int80_emulation+0x14b/0x720 [ 314.712127][T13243] asm_int80_emulation+0x1a/0x20 [ 314.712143][T13243] RIP: 0023:0xf71073eb [ 314.712156][T13243] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 314.712170][T13243] RSP: 002b:00000000f53bd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 314.712187][T13243] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f53bd5d0 [ 314.712196][T13243] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.712206][T13243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.712215][T13243] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 314.712223][T13243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.712243][T13243] [ 314.892599][ T42] audit: type=1800 audit(1785673111.281:1036): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 315.100837][ T42] audit: type=1800 audit(1785673111.491:1037): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 315.224173][ T42] audit: type=1800 audit(1785673111.611:1038): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 315.291231][T13259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1156'. [ 315.322450][ T42] audit: type=1800 audit(1785673111.711:1039): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16394 res=0 errno=0 [ 315.333534][ T42] audit: type=1800 audit(1785673111.721:1040): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 315.372704][ T42] audit: type=1800 audit(1785673111.761:1041): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 315.414779][ T42] audit: type=1800 audit(1785673111.801:1042): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16007 res=0 errno=0 [ 315.436903][ T42] audit: type=1800 audit(1785673111.821:1043): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16136 res=0 errno=0 [ 315.523167][T13288] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 316.560297][T13299] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 316.594003][ C1] sr 2:0:0:0: [sr0] tag#29 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 316.597829][ C1] sr 2:0:0:0: [sr0] tag#29 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 316.701328][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.888717][ T5893] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 317.040450][ T5893] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 317.046528][ T5893] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.00 [ 317.053983][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.057168][ T5893] usb 5-1: Product: syz [ 317.058525][ T5893] usb 5-1: Manufacturer: syz [ 317.060363][ T5893] usb 5-1: SerialNumber: syz [ 317.065434][T13307] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 317.073423][ T5893] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 317.332487][ T5852] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 317.336757][ T5852] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 317.339806][ T5852] CPU: 3 UID: 0 PID: 5852 Comm: kworker/3:4 Not tainted syzkaller #0 PREEMPT(full) [ 317.343047][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.346516][ T5852] Workqueue: usb_hub_wq hub_event [ 317.348173][ T5852] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 317.350435][ T5852] Code: 48 89 04 24 e8 c3 7a b7 00 4c 39 24 24 0f 82 94 00 00 00 e8 b4 7a b7 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 317.356469][ T5852] RSP: 0018:ffffc900068b6ec8 EFLAGS: 00010202 [ 317.358389][ T5852] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff815232d7 [ 317.360872][ T5852] RDX: ffff888026490000 RSI: 0000000000000004 RDI: 0000000000000004 [ 317.363379][ T5852] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 317.365792][ T5852] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 317.368278][ T5852] R13: ffff88806bacfcc0 R14: ffffc900068b6fe8 R15: dffffc0000000000 [ 317.370761][ T5852] FS: 0000000000000000(0000) GS:ffff888096edf000(0000) knlGS:0000000000000000 [ 317.373586][ T5852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.375651][ T5852] CR2: 000000008000f000 CR3: 000000005f9c2000 CR4: 0000000000352ef0 [ 317.378173][ T5852] Call Trace: [ 317.379253][ T5852] [ 317.380191][ T5852] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 317.382328][ T5852] ? emi26_probe+0x114/0xe30 [ 317.383802][ T5852] emi26_probe+0x13c/0xe30 [ 317.385216][ T5852] ? _raw_spin_lock_irqsave+0x52/0x60 [ 317.386904][ T5852] ? find_held_lock+0x2b/0x80 [ 317.388390][ T5852] ? __pfx_emi26_probe+0x10/0x10 [ 317.389779][ T5852] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 317.391610][ T5852] ? lockdep_hardirqs_on+0x78/0x100 [ 317.393286][ T5852] ? __pm_runtime_set_status+0x13c/0x970 [ 317.395097][ T5852] usb_probe_interface+0x303/0x8f0 [ 317.396742][ T5852] ? __pfx_usb_probe_interface+0x10/0x10 [ 317.398600][ T5852] really_probe+0x241/0xa60 [ 317.400454][ T5852] __driver_probe_device+0x20e/0x450 [ 317.402122][ T5852] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 317.404126][ T5852] driver_probe_device+0x4a/0x140 [ 317.405642][ T5852] __device_attach_driver+0x1df/0x320 [ 317.407269][ T5852] ? __pfx___device_attach_driver+0x10/0x10 [ 317.409128][ T5852] bus_for_each_drv+0x159/0x1e0 [ 317.410623][ T5852] ? __pfx_bus_for_each_drv+0x10/0x10 [ 317.412306][ T5852] ? lockdep_hardirqs_on+0x78/0x100 [ 317.413935][ T5852] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 317.415705][ T5852] __device_attach+0x1e4/0x4d0 [ 317.417225][ T5852] ? __pfx___device_attach+0x10/0x10 [ 317.418920][ T5852] ? do_raw_spin_unlock+0x145/0x1e0 [ 317.420541][ T5852] device_initial_probe+0xaf/0xd0 [ 317.422052][ T5852] bus_probe_device+0x64/0x160 [ 317.423566][ T5852] device_add+0x121d/0x1970 [ 317.424986][ T5852] ? __pfx_device_add+0x10/0x10 [ 317.426489][ T5852] usb_set_configuration+0xd97/0x1c60 [ 317.428171][ T5852] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 317.430052][ T5852] usb_generic_driver_probe+0xa1/0xe0 [ 317.431710][ T5852] usb_probe_device+0xef/0x400 [ 317.433314][ T5852] ? __pfx_usb_probe_device+0x10/0x10 [ 317.435157][ T5852] really_probe+0x241/0xa60 [ 317.436583][ T5852] __driver_probe_device+0x20e/0x450 [ 317.438228][ T5852] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 317.440048][ T5852] driver_probe_device+0x4a/0x140 [ 317.441572][ T5852] __device_attach_driver+0x1df/0x320 [ 317.443269][ T5852] ? __pfx___device_attach_driver+0x10/0x10 [ 317.445055][ T5852] bus_for_each_drv+0x159/0x1e0 [ 317.446522][ T5852] ? __pfx_bus_for_each_drv+0x10/0x10 [ 317.448184][ T5852] ? lockdep_hardirqs_on+0x78/0x100 [ 317.449788][ T5852] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 317.451604][ T5852] __device_attach+0x1e4/0x4d0 [ 317.453078][ T5852] ? __pfx___device_attach+0x10/0x10 [ 317.454654][ T5852] ? do_raw_spin_unlock+0x145/0x1e0 [ 317.456246][ T5852] device_initial_probe+0xaf/0xd0 [ 317.457767][ T5852] bus_probe_device+0x64/0x160 [ 317.459266][ T5852] device_add+0x121d/0x1970 [ 317.460661][ T5852] ? __pfx_device_add+0x10/0x10 [ 317.462169][ T5852] ? usb_new_device.cold+0x5d0/0x115c [ 317.463811][ T5852] usb_new_device.cold+0x685/0x115c [ 317.465377][ T5852] ? _mutex_trylock_nest_lock+0x241/0x310 [ 317.467069][ T5852] ? do_raw_spin_lock+0x128/0x260 [ 317.468648][ T5852] ? __pfx_usb_new_device+0x10/0x10 [ 317.470229][ T5852] ? mark_held_locks+0x40/0x70 [ 317.471729][ T5852] hub_event+0x30a3/0x4a60 [ 317.473155][ T5852] ? __pfx_hub_event+0x10/0x10 [ 317.474625][ T5852] ? debug_object_deactivate+0x2e4/0x3b0 [ 317.476332][ T5852] ? rcu_is_watching+0x12/0xc0 [ 317.477790][ T5852] process_one_work+0xa23/0x1940 [ 317.479294][ T5852] ? __pfx_process_one_work+0x10/0x10 [ 317.480897][ T5852] ? __pfx_hub_event+0x10/0x10 [ 317.482338][ T5852] worker_thread+0x5ef/0xe50 [ 317.483836][ T5852] ? __pfx_worker_thread+0x10/0x10 [ 317.485422][ T5852] ? kthread+0x13a/0x450 [ 317.486728][ T5852] ? __pfx_worker_thread+0x10/0x10 [ 317.488364][ T5852] kthread+0x370/0x450 [ 317.489601][ T5852] ? __pfx_kthread+0x10/0x10 [ 317.491004][ T5852] ret_from_fork+0x72b/0xd50 [ 317.492478][ T5852] ? __pfx_ret_from_fork+0x10/0x10 [ 317.494113][ T5852] ? __switch_to+0x800/0x10f0 [ 317.495526][ T5852] ? __pfx_kthread+0x10/0x10 [ 317.496936][ T5852] ret_from_fork_asm+0x1a/0x30 [ 317.498394][ T5852] [ 317.499347][ T5852] Modules linked in: [ 317.500674][ T5893] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] SMP KASAN NOPTI [ 317.500929][ T5852] ---[ end trace 0000000000000000 ]--- [ 317.505517][ T5893] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 317.505543][ T5893] CPU: 0 UID: 0 PID: 5893 Comm: kworker/0:5 Tainted: G D syzkaller #0 PREEMPT(full) [ 317.505563][ T5893] Tainted: [D]=DIE [ 317.505568][ T5893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.505580][ T5893] Workqueue: usb_hub_wq hub_event [ 317.505609][ T5893] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 317.505635][ T5893] Code: 48 89 04 24 e8 c3 7a b7 00 4c 39 24 24 0f 82 94 00 00 00 e8 b4 7a b7 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 317.505647][ T5893] RSP: 0000:ffffc900068d6ec8 EFLAGS: 00010202 [ 317.505657][ T5893] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc9002f492000 [ 317.505669][ T5893] RDX: 0000000000100000 RSI: 0000000000000004 RDI: 0000000000000004 [ 317.505677][ T5893] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 317.505688][ T5893] R10: 0000000000000000 R11: ffffffff81d5692c R12: 0000000000000000 [ 317.505695][ T5893] R13: ffff88802a43cd80 R14: ffffc900068d6fe8 R15: dffffc0000000000 [ 317.505707][ T5893] FS: 0000000000000000(0000) GS:ffff888096bdf000(0000) knlGS:0000000000000000 [ 317.505731][ T5893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.505742][ T5893] CR2: 0000000033bedff8 CR3: 000000005d1de000 CR4: 0000000000352ef0 [ 317.505750][ T5893] Call Trace: [ 317.505760][ T5893] [ 317.505767][ T5893] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 317.505786][ T5893] ? emi26_probe+0x114/0xe30 [ 317.507832][ T5852] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 317.511106][ T5893] emi26_probe+0x13c/0xe30 [ 317.511139][ T5893] ? _raw_spin_lock_irqsave+0x52/0x60 [ 317.514439][ T5852] Code: 48 89 04 24 e8 c3 7a b7 00 4c 39 24 24 0f 82 94 00 00 00 e8 b4 7a b7 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 317.516093][ T5893] ? find_held_lock+0x2b/0x80 [ 317.519389][ T5852] RSP: 0018:ffffc900068b6ec8 EFLAGS: 00010202 [ 317.521480][ T5893] ? __pfx_emi26_probe+0x10/0x10 [ 317.523678][ T5852] [ 317.523683][ T5852] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff815232d7 [ 317.523692][ T5852] RDX: ffff888026490000 RSI: 0000000000000004 RDI: 0000000000000004 [ 317.531791][ T5893] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 317.531823][ T5893] ? lockdep_hardirqs_on+0x78/0x100 [ 317.531844][ T5893] ? __pm_runtime_set_status+0x13c/0x970 [ 317.531872][ T5893] usb_probe_interface+0x303/0x8f0 [ 317.597713][ T5893] ? __pfx_usb_probe_interface+0x10/0x10 [ 317.600297][ T5893] really_probe+0x241/0xa60 [ 317.602276][ T5893] __driver_probe_device+0x20e/0x450 [ 317.604667][ T5893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 317.606920][ T5893] driver_probe_device+0x4a/0x140 [ 317.608629][ T5893] __device_attach_driver+0x1df/0x320 [ 317.610383][ T5893] ? __pfx___device_attach_driver+0x10/0x10 [ 317.612646][ T5893] bus_for_each_drv+0x159/0x1e0 [ 317.614674][ T5893] ? __pfx_bus_for_each_drv+0x10/0x10 [ 317.616999][ T5893] ? lockdep_hardirqs_on+0x78/0x100 [ 317.619394][ T5893] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 317.621769][ T5893] __device_attach+0x1e4/0x4d0 [ 317.623952][ T5893] ? __pfx___device_attach+0x10/0x10 [ 317.626237][ T5893] ? do_raw_spin_unlock+0x145/0x1e0 [ 317.628485][ T5893] device_initial_probe+0xaf/0xd0 [ 317.630213][ T5893] bus_probe_device+0x64/0x160 [ 317.631969][ T5893] device_add+0x121d/0x1970 [ 317.633427][ T5893] ? __pfx_device_add+0x10/0x10 [ 317.634992][ T5893] usb_set_configuration+0xd97/0x1c60 [ 317.636913][ T5893] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 317.639384][ T5893] usb_generic_driver_probe+0xa1/0xe0 [ 317.641747][ T5893] usb_probe_device+0xef/0x400 [ 317.643763][ T5893] ? __pfx_usb_probe_device+0x10/0x10 [ 317.646083][ T5893] really_probe+0x241/0xa60 [ 317.648041][ T5893] __driver_probe_device+0x20e/0x450 [ 317.650387][ T5893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 317.652820][ T5893] driver_probe_device+0x4a/0x140 [ 317.654828][ T5893] __device_attach_driver+0x1df/0x320 [ 317.656558][ T5893] ? __pfx___device_attach_driver+0x10/0x10 [ 317.658639][ T5893] bus_for_each_drv+0x159/0x1e0 [ 317.660573][ T5893] ? __pfx_bus_for_each_drv+0x10/0x10 [ 317.662913][ T5893] ? lockdep_hardirqs_on+0x78/0x100 [ 317.664971][ T5893] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 317.667344][ T5893] __device_attach+0x1e4/0x4d0 [ 317.669329][ T5893] ? __pfx___device_attach+0x10/0x10 [ 317.671246][ T5893] ? do_raw_spin_unlock+0x145/0x1e0 [ 317.673553][ T5893] device_initial_probe+0xaf/0xd0 [ 317.675621][ T5893] bus_probe_device+0x64/0x160 [ 317.677174][ T5893] device_add+0x121d/0x1970 [ 317.678771][ T5893] ? __pfx_device_add+0x10/0x10 [ 317.680785][ T5893] ? add_device_randomness+0xc9/0x110 [ 317.683147][ T5893] usb_new_device.cold+0x685/0x115c [ 317.684854][ T5893] ? _mutex_trylock_nest_lock+0x241/0x310 [ 317.686680][ T5893] ? do_raw_spin_lock+0x128/0x260 [ 317.688263][ T5893] ? __pfx_usb_new_device+0x10/0x10 [ 317.689932][ T5893] ? mark_held_locks+0x40/0x70 [ 317.691540][ T5893] hub_event+0x30a3/0x4a60 [ 317.693125][ T5893] ? __pfx_hub_event+0x10/0x10 [ 317.694706][ T5893] ? debug_object_deactivate+0x2e4/0x3b0 [ 317.696520][ T5893] ? rcu_is_watching+0x12/0xc0 [ 317.698077][ T5893] process_one_work+0xa23/0x1940 [ 317.699862][ T5893] ? __pfx_process_one_work+0x10/0x10 [ 317.702030][ T5893] ? __pfx_hub_event+0x10/0x10 [ 317.704057][ T5893] worker_thread+0x5ef/0xe50 [ 317.705952][ T5893] ? __pfx_worker_thread+0x10/0x10 [ 317.708188][ T5893] ? kthread+0x13a/0x450 [ 317.709936][ T5893] ? __pfx_worker_thread+0x10/0x10 [ 317.712107][ T5893] kthread+0x370/0x450 [ 317.713740][ T5893] ? __pfx_kthread+0x10/0x10 [ 317.715219][ T5893] ret_from_fork+0x72b/0xd50 [ 317.716744][ T5893] ? __pfx_ret_from_fork+0x10/0x10 [ 317.718347][ T5893] ? __switch_to+0x800/0x10f0 [ 317.719796][ T5893] ? __pfx_kthread+0x10/0x10 [ 317.721323][ T5893] ret_from_fork_asm+0x1a/0x30 [ 317.723481][ T5893] [ 317.724823][ T5893] Modules linked in: [ 317.726873][ T5893] ---[ end trace 0000000000000000 ]--- [ 317.729881][ T5822] usb 6-1: emi26_load_firmware - request_firmware() failed [ 317.730563][ T5852] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 317.732927][ T5822] usb 6-1: emi26_load_firmware - error loading firmware: error = -12 [ 317.735439][ T5852] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 317.738441][ T5822] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 317.742466][ T5822] usb 6-1: USB disconnect, device number 18 [ 317.750292][ T5852] R13: ffff88806bacfcc0 R14: ffffc900068b6fe8 R15: dffffc0000000000 [ 317.759005][ T5893] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 317.762456][ T5852] FS: 0000000000000000(0000) GS:ffff888096edf000(0000) knlGS:0000000000000000 [ 317.763994][ T5893] Code: 48 89 04 24 e8 c3 7a b7 00 4c 39 24 24 0f 82 94 00 00 00 e8 b4 7a b7 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 317.769770][ T5852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.775415][ T5852] CR2: 00007ffcaf39f168 CR3: 0000000050e4b000 CR4: 0000000000352ef0 [ 317.777885][ T5852] Kernel panic - not syncing: Fatal exception [ 318.865636][ T5852] Shutting down cpus with NMI [ 318.867737][ T5852] Kernel Offset: disabled [ 318.869047][ T5852] Rebooting in 86400 seconds..